
Luxembourg's FIU can now flag fraud accounts to licensed crypto exchanges under Bill 8722, a response to the €61 million Caritas CEO fraud in 2024.
Starting Aug. 8, Luxembourg's Financial Intelligence Unit can alert licensed crypto exchanges when a customer account has already been flagged at a bank. Bill 8722, passed unanimously in July 2026 after its introduction in March, pulls exchanges into a real-time alert network that previously stopped at each institution's door.
Before the law, a fraudster could open an account at one firm, then move to another before the first institution's alert landed. Alerts were siloed. The new system crosses that line both ways: bank-level red flags reach exchanges, and exchange-level warnings flow back to banks.
The change follows a case that showed the old framework's limits. In 2024, Caritas Luxembourg, a major charity, was hit by a CEO fraud scheme that pushed about €61 million through more than 8,200 suspicious transactions. The money moved across multiple institutions, and no single compliance team had the full picture in time.
The wider numbers explain why the FIU wanted the tool. Luxembourg police logged 6,382 fraud cases in 2024, an increase of 3.89%. Financial professionals filed more than 18,000 reports of suspected fraud and scams, up 32% from a year earlier, according to FIU records.
Luxembourg has positioned itself as a friendly jurisdiction for crypto firms under the EU's Markets in Crypto-Assets Regulation, known as MiCA. Adding licensed exchanges to the FIU alert network keeps that policy consistent: a supervised crypto sector gets the same warning system banks have. The law names no tokens or platforms, so the rule is technology-neutral and applies to any firm holding a MiCA license.
For exchanges, the effect lands on compliance operations. An FIU alert will arrive with little context and a deadline attached. The exchange has to decide quickly whether to block a transaction or freeze an account, and it must do so while the fraudster is still on the platform. Manual review of single transactions will struggle to keep pace. Automated screening and transaction-monitoring systems move from a nice-to-have to a baseline requirement. In practice, the law treats licensed exchanges more like banks when it comes to fraud alerts.
Receiving the alerts will also change customer onboarding. Exchanges will need to check new customers against FIU notice lists, then re-run those checks when a fresh alert arrives. A customer flagged at three banks will now appear in an exchange's system before any money moves.
The read-through for the sector: Luxembourg is one of the first EU member states to explicitly name licensed crypto exchanges as FIU alert recipients. A MiCA-licensed exchange in Luxembourg carries a compliance burden that a similar firm in another member state may not, at least until the European Commission builds a common alert mechanism.
The law takes effect Aug. 8. Luxembourg's FIU has not said whether it plans to extend the network beyond currently licensed firms.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.