When Does a Family Office Need a Licence in Luxembourg? PSF, AML & Registration (2026 Step‑by‑step)

Family office licence luxembourg questions have become more pressing as the European Union tightens anti‑money‑laundering supervision and broadens tax reporting for 2026. Many families who have operated quietly through holding structures and in‑house teams are now asking whether their activities cross the line into regulated financial services, and, if so, how to register with the Commission de Surveillance du Secteur Financier (CSSF) as a Professional of the Financial Sector (PSF). This guide sets out, in plain procedural terms, when registration is required, when an exemption applies, and how to prepare an application. It is written for family principals, in‑house counsel, trustees and fiduciary advisers who need a defensible compliance decision rather than a marketing overview.

Who should read this: family principals, family‑office managers, in‑house counsel, trustees and fiduciary advisers deciding whether to register in Luxembourg or to implement AML compliance for 2026. Outcome: a clear decision flow on whether a licence or PSF registration is needed, a checklist of documents, a step‑by‑step application process with realistic timelines, indicative costs, and a summary of the 2026 changes. This is general guidance and not legal advice; case‑specific questions should be put to Luxembourg counsel.

Overview: does a family office need a licence in Luxembourg?

A family office is an organised structure that manages the wealth, investments and often the administrative affairs of one family (a single‑family office) or several unrelated families (a multi‑family office). The distinction matters because Luxembourg does not regulate wealth ownership, it regulates the provision of financial services to others. The core question behind every family office licence luxembourg enquiry is therefore straightforward: does the office provide regulated financial services to persons outside the family, commercially and for a fee?

If the office purely manages a single family’s own assets, with no third‑party clients and no commercial fee income from outsiders, it is generally outside the PSF regime. If it advises, manages portfolios, provides custody or offers trust or corporate services to unrelated parties, it may require authorisation as a PSF supervised by the CSSF. The sections below turn this principle into an operable decision flow, a document checklist, a realistic timeline and a view of the 2026 regulatory changes that make this reassessment time‑sensitive. Because classification can be finely balanced, the precise category and whether a licence is needed should always be confirmed with Luxembourg counsel.

Eligibility, when a family office must register or licence

Luxembourg’s PSF regime is governed principally by the amended Law of 5 April 1993 on the financial sector and administered by the CSSF. It captures a range of regulated activities, including investment advice, discretionary portfolio management, custody and safekeeping of assets, certain corporate and administrative services, and other cross‑border financial services. The decisive factor is not the label a family uses for its structure, but the substance of what the structure actually does and for whom.

Private activity versus regulated service in a family office licence luxembourg assessment

The regime draws a line between purely internal, private activity and the commercial provision of services to third parties. The following distinction is central to any classification exercise:

• Internal and private. Ownership of family assets, in‑house management of the family’s own portfolio, administrative support for family members and family entities, without charging unrelated third parties, generally sits outside the PSF regime.
• Regulated and commercial. Providing investment advice, portfolio management, custody or administration to persons outside the family, in return for remuneration, is typically a regulated activity and may require PSF authorisation.

The practical decision flow is this: if the office provides services to persons outside the family, or provides financial services commercially, it is more likely to require authorisation as a PSF. Where it confines itself to the family’s own affairs, it is generally outside the regime, but this should be documented and genuinely respected in practice.

Exemptions and borderline cases

Several structures commonly sit outside the regime. A private holding company that owns family investments and receives passive dividend income is usually outside it. In‑house management for a single family, where no fee is charged to third parties, is likewise generally not a regulated activity. However, the position is fragile. The moment an office begins servicing another family, charges unrelated parties, or administers third‑party vehicles, PSF obligations can crystallise. Substance also matters: Luxembourg authorities expect genuine economic presence, real offices, qualified staff and local decision‑making, rather than a nameplate.

Because the borderline is activity‑driven rather than form‑driven, families should not assume that incorporating a holding company settles the question. A multi‑family office, or a single‑family office that gradually opens its services to friends, co‑investors or unrelated trusts, should treat PSF authorisation as a serious possibility until counsel confirms otherwise.

Step‑by‑step: how to register or confirm non‑regulated status

The process below sets out the sequence most family offices follow, together with the actor responsible for each stage. Several steps can run in parallel, notably entity formation and the drafting of the AML programme, which shortens the overall timeline.

1. Classify activities and map regulated services.
2. Decide the legal form and create the corporate structure.
3. Prepare the PSF application dossier for the CSSF.
4. Implement the AML/CFT programme and KYC framework.
5. Set up post‑authorisation governance, reporting and annual obligations.

Step 1, Classify activities and map regulated services

Begin with an honest activities matrix. List everything the office does or intends to do, then flag each line as either private/internal or potentially regulated. Typical internal activities include managing the family’s own portfolio, consolidating reporting, coordinating tax filings and administering family companies. Typical regulated activities include advising unrelated clients, managing third‑party portfolios, holding client assets in custody, and providing corporate or administrative services to persons outside the family.

For each potentially regulated line, record the revenue source and identify whether any service is provided to a third party. The output of this step is a defensible classification memo that either supports a non‑regulated conclusion or identifies the specific PSF category that applies. This document becomes the backbone of the application and the evidence base if the CSSF later queries the classification. Where the office concludes it is not carrying on regulated activity, the memo should set out the reasons clearly and be kept current, because the position must be evidenced, not merely asserted.

Step 2, Decide legal form and create corporate structure

Most family offices operate through a Luxembourg private limited company (société à responsabilité limitée, S.à r.l.) or a public limited company (société anonyme, S.A.), depending on scale, capital and governance preferences. A société en commandite simple (SCS) or société en commandite spéciale (SCSp) is sometimes used for investment pooling. The choice turns on scale, tax considerations and the level of substance required.

Entity formation involves notarisation of the constitutional documents and registration with the Luxembourg Business Registers (LBR), which operates the Trade and Companies Register (Registre de commerce et des sociétés, RCS). Guichet.lu sets out the administrative formalities for company formation and registry filings. This step can proceed in parallel with the drafting of governance and AML documentation to compress the timeline.

Step 3, Prepare the PSF application dossier

Where PSF authorisation is required, the application to the CSSF is substantial. Work through the following sub‑steps in order:

1. Appoint a legal representative or mandate holder to coordinate the application and liaise with the CSSF.
2. Assemble the corporate documentation, statutes, incorporation deed and a recent RCS extract.
3. Prepare the governance package, organisational chart, internal control framework, IT and information‑security arrangements, and the proposed reporting lines.
4. Compile management evidence, CVs of directors and senior managers demonstrating that they are fit and proper, supported by criminal‑record extracts and declarations of honour where required.
5. Attach the AML/CFT policy and compliance manual, including the risk assessment and the identity of the appointed AML compliance officer and responsible member of management.
6. Complete KYC on owners and beneficial owners, with a full chain of ownership and certified identity documents.
7. Prepare a business plan describing the services, client base, revenue model and asset classes.
8. Obtain board or shareholder minutes formally approving the application.
9. Document substance, the registered office, lease, staffing and local decision‑making arrangements.

The CSSF publishes guidance and application requirements for Professionals of the Financial Sector; the specific category, advisory, portfolio management, custody or corporate services, determines the precise form and supporting files. PSF authorisation ultimately requires a ministerial decision issued on the basis of the CSSF’s assessment. Parallel notifications may be required to other authorities, including the LBR/RCS for registry filings and the Luxembourg tax authorities for direct tax and, where applicable, VAT registration.

Step 4, Implement AML/CFT programme and KYC

Every regulated family office must operate a full AML/CFT programme. Luxembourg’s principal AML legislation is the amended Law of 12 November 2004 on the fight against money laundering and terrorist financing, supplemented by CSSF regulations and circulars. It requires, at minimum: a documented business‑wide risk assessment; internal controls proportionate to that risk; an appointed AML compliance officer and a responsible member of senior management; staff training; ongoing transaction monitoring; and the reporting of suspicious transactions to the Luxembourg Financial Intelligence Unit, the Cellule de Renseignement Financier (CRF). The statutory framework is published on Legilux, which should be consulted for the current text and article references.

The minimum KYC file for each client and beneficial owner should include verified identity documents, proof of address, documented source of funds and source of wealth, and full ultimate beneficial owner (UBO) details with the ownership chain. These obligations apply from the start of regulated activity, not from the date of first inspection.

Step 5, Post‑authorisation governance, reporting and annual obligations

Authorisation is the start of an ongoing supervisory relationship, not the end of the compliance exercise. A regulated PSF must maintain its corporate governance and AML controls, appoint an approved external auditor (réviseur d’entreprises agréé), file annual accounts with the RCS, and operate under continuing CSSF supervision. Any material change to activities, ownership or management must be notified so that the authorisation conditions remain accurate and current.

Comparison: when to register as a PSF versus no registration required

Required documents for a family office licence luxembourg application

Documents must generally be current, authenticated and, where appropriate, translated. Recent registry extracts are typically expected to be recent (often no more than three months old, but confirm current CSSF expectations). Depending on origin, documents may require notarisation or an apostille, and translations into French, German or English may be requested. Prepare the file as a coherent dossier rather than a loose collection, the CSSF assesses governance and substance partly from the quality and consistency of the paperwork.

Timeline & deadlines

The realistic end‑to‑end timeline depends heavily on the complexity of the structure and the responsiveness of the applicant to CSSF queries. Several stages can overlap: entity formation can run alongside dossier preparation, and the AML programme can be drafted while corporate steps complete. The figures below are indicative and should be confirmed against current CSSF processing information.

In practice, a straightforward application commonly completes within several months, while a complex multi‑jurisdictional structure with layered ownership can take considerably longer, largely driven by the time taken to satisfy CSSF information requests. Applicants should confirm current expected processing times directly with the CSSF.

Costs & fees

Costs vary with entity type, scale, the depth of due diligence and the extent of outsourced services. The ranges below are indicative only; official fees in particular should be confirmed directly against the current CSSF fee framework and LBR registry charges before budgeting.

What changes in 2026: DAC8, AMLA and enhanced transparency

Two regulatory currents make 2026 the right moment to reassess any family office licence luxembourg position. Both tighten the reporting and due‑diligence environment in which family offices operate.

• DAC8 and administrative cooperation in taxation. Council Directive (EU) 2023/2226 (DAC8) expands administrative cooperation in taxation, extending information exchange notably to crypto‑assets, with reporting obligations that apply progressively from 2026. The practical effect for family offices is wider reporting of structures and holdings, including digital assets, that were previously outside the exchange net.
• AMLA and the strengthened AML framework. The EU Anti‑Money Laundering Authority (AMLA), established by Regulation (EU) 2024/1620 and based in Frankfurt, introduces closer EU‑level supervisory coordination and reinforces due‑diligence expectations, particularly around beneficial ownership, as part of the broader EU AML package. National supervision becomes more tightly integrated with EU standards over the coming years.

The likely practical consequences are extended reporting, closer scrutiny of UBOs, more granular transaction monitoring, and in some cases earlier obligations to register or notify national authorities. Family offices should respond by reassessing their KYC and source‑of‑wealth procedures, updating policies to address digital assets, and asking counsel to re‑run the activity classification against the sharper 2026 standards. International benchmarks from the FATF continue to underpin these beneficial‑ownership and due‑diligence expectations.

Common pitfalls & practical tips

The recurring errors in this area are predictable and avoidable. Guard against the following:

• Mis‑classifying services as “internal”. Treating fee‑earning third‑party services as private activity is the most common and most costly mistake.
• Incomplete UBO documentation. Gaps in the ownership chain or missing certified IDs stall applications and attract supervisory attention.
• Late or partial AML programmes. A policy drafted only at inspection stage, rather than operating from day one, undermines the whole compliance position.
• Underestimating CSSF queries. Thin dossiers generate rounds of follow‑up questions that extend the timeline by weeks or months.
• Relying on non‑Luxembourg templates. Borrowed governance documents rarely map to CSSF expectations or local AML law.

The practical antidotes are equally clear: document the reasons for any non‑regulated conclusion and keep contemporaneous evidence that the office serves only the family; run a pre‑application readiness review with counsel; appoint a named AML compliance officer early; and maintain a living business plan that is updated whenever activities change.

Conclusion

Resolving a family office licence luxembourg question is ultimately an exercise in honest classification followed by disciplined execution. Where the office serves only its own family, it is generally outside the PSF regime, but that position must be documented and genuinely observed; where it serves third parties commercially, PSF authorisation and a full AML/CFT programme are the realistic baseline. With DAC8 and AMLA sharpening the reporting and supervisory environment from 2026, families and their advisers should re‑run the classification now, prepare the application dossier carefully, and build the compliance framework to operate from day one. A structured pre‑application review with experienced Luxembourg counsel is the most reliable way to avoid the pitfalls above and to secure a clean, durable outcome.

For a broader view of the practice area, see our Family Office, Luxembourg practice overview and the GLE directory to find a Luxembourg family office lawyer.

Sources

1. Commission de Surveillance du Secteur Financier (CSSF), Professionals of the Financial Sector
2. Legilux, Official Legislative Portal of Luxembourg
3. Guichet.lu, Luxembourg Administrative Portal
4. Luxembourg Business Registers (LBR / RCS)
5. European Commission, Administrative Cooperation in Taxation (DAC)
6. European Anti‑Money Laundering Authority (AMLA)
7. Financial Action Task Force (FATF)
8. Ordre des Avocats au Barreau de Luxembourg