MiCA licence in Luxembourg: CSSF

Short answer

The Commission de Surveillance du Secteur Financier (CSSF) authorises crypto-asset service providers whose home state is Luxembourg. The national MiCA transition ran until 1 July 2026. ESMA’s CASP data dated 6 October 2026 lists 13 current entries with Luxembourg as home state, and 179 firms authorised elsewhere that notified services into Luxembourg.
CASP authority
CSSF
Transition ended
1 July 2026
CASPs with Luxembourg as home state
13
Firms passported into Luxembourg
179
On this page9 sections
  1. Who authorises CASPs in Luxembourg?
  2. CASPs authorised in Luxembourg
  3. Services held by CASPs in Luxembourg
  4. Firms passported into Luxembourg
  5. Tracked exchanges in Luxembourg
  6. Article 110 warnings
  7. How to apply for a MiCA licence in Luxembourg
  8. Frequently asked questions
  9. Sources

Who authorises CASPs in Luxembourg?

The Commission de Surveillance du Secteur Financier (CSSF) is the competent authority for the crypto-asset service provider rules in Title V of MiCA when Luxembourg is the home state. It receives Article 62 applications, decides on Article 63 authorisation and receives Article 60 notifications from eligible financial entities.

Lead CASP authority
CSSF
Commission de Surveillance du Secteur Financier (CSSF)
Transition ended
1 July 2026
Eligible pre-MiCA providers could use the maximum period.
Authorities in ESMA’s CASP file
1
Commission de Surveillance du Secteur Financier (CSSF)
White papers notified here
59
54 other crypto-assets (Title II), 5 e-money tokens (Title IV)

The authority link opens the official regulator site. ESMA publishes the interim MiCA register that this page reads, and the searchable CASP register holds every entry from it. The 54 crypto-asset white papers notified in Luxembourg are listed with the rest of the Title II notices.

CASPs authorised in Luxembourg

ESMA’s CASP data dated 6 October 2026 lists 13 current entries with Luxembourg as home state. The earliest authorisation date is 7 February 2025 and the latest is 3 July 2026. Names link to our exchange record where we track the brand, and to the register row otherwise.

Current CASP entries with Luxembourg as home state, ESMA data dated 6 October 2026
Clearstream Banking S.A.Clearstream1/1030/30
Bitstamp Europe S.A.Tracked brand: Bitstamp7/1030/30
Coinbase Luxembourg S.A.Tracked brand: Coinbase7/1030/30
Zodia Custody (Europe) S.A.Zodia2/1030/30
Banking Circle S.A.Banking Circle3/1030/30
Swissquote Bank Europe SATracked brand: Swissquote3/1030/30
B2C2 Europe SarlB2C23/1030/30
STOKR S.A.STOKR2/1030/30
Standard Chartered Luxembourg S.A.Standard Chartered2/1030/30
bitFlyer EUROPE S.A.Tracked brand: bitFlyer5/1030/30
Bridge Building S.A.Bridge5/1030/30
Ripple Payments Europe S.A.Tracked brand: Ripple3/1030/30
CPS Europe S.A.CPS5/1030/30

Services are the ten MiCA service letters a to j. EEA reach counts the home state plus each host state ESMA lists for the entity.

Services held by CASPs in Luxembourg

Each bar counts the current entries with Luxembourg as home state that hold the service. Most firms combine several services, so the bars add up to more than 13.

  1. aCustody and administration of crypto-assets for clients10
  2. bOperation of a trading platform for crypto-assets1
  3. cExchange of crypto-assets for funds (fiat)8
  4. dExchange of crypto-assets for other crypto-assets8
  5. eExecution of orders for crypto-assets on behalf of clients7
  6. fPlacing of crypto-assets1
  7. gReception and transmission of orders for clients2
  8. hAdvice on crypto-assets0
  9. iPortfolio management on crypto-assets0
  10. jTransfer services for crypto-assets on behalf of clients11

Firms passported into Luxembourg

In all, 179 firms authorised in another EEA state may serve residents of Luxembourg. Each one lists Luxembourg as a host state for at least one current service in ESMA’s file, through the Article 65 cross-border notification route. Most come from France (30), Cyprus (20), the Netherlands (20) and Malta (18).

Show all 179 firms notified into Luxembourg

Tracked exchanges in Luxembourg

We track 52 licensed exchange and broker brands. The groups below sort them by ESMA’s home and host states for Luxembourg.

A missing notification means ESMA’s file names no service in Luxembourg for that legal entity. The brand may still reach Luxembourg through another group entity or a later notification, so check the record before you rely on it. Platforms in the last group restrict EEA services or are still applying; see exchanges without a MiCA licence.

Article 110 warnings

ESMA’s Article 110 file dated 16 September 2026 holds no entry reported from Luxembourg. The file is a warning dataset and not a complete list of unauthorised firms.

The MiCA warning list shows every entry with its reporting state and date.

How to apply for a MiCA licence in Luxembourg

A firm with its registered office and effective management in Luxembourg applies to CSSF for authorisation under Article 63. The Article 62 file covers the services in scope, governance, at least one EU-resident director, prudential safeguards, safeguarding of client assets, complaints handling and the business continuity and ICT controls that DORA requires.

Credit institutions, investment firms, e-money institutions, UCITS management companies, market operators and other entities listed in Article 60 can instead notify CSSF of equivalent services. They must notify at least 40 working days before they first provide the services.

MiCA routes for a CASP with Luxembourg as home state
RouteWho uses itStatutory timing
Article 63 authorisationA new crypto-asset service provider25 working days to check completeness, then 40 working days to assess the complete file
Article 60 notificationAn entity already authorised as a bank, investment firm, e-money institution or similarNotification at least 40 working days before the first service
Article 65 notificationA CASP authorised in another EEA state that wants to serve residentsThe home authority forwards the notification to the host state
Annex IV minimum capital by class for an Article 63 CASP
MiCA classMinimumTypical service scope
Class 1€50,000Orders, execution, placing, transfers, advice and portfolio management
Class 2€125,000Class 1 plus custody and crypto exchange services
Class 3€150,000Class 2 plus operating a crypto-asset trading platform

Article 67 sets the requirement at the higher of the Annex IV minimum or one quarter of the previous year’s fixed overheads. The statutory periods cover the regulatory review only: preparation and questions from the authority add time. The CASP licence guide maps the services, documents and process, and the MiCA licence cost guide separates capital from fees and running costs.

Frequently asked questions

Who issues a MiCA CASP licence in Luxembourg?

The Commission de Surveillance du Secteur Financier (CSSF) is the competent authority for crypto-asset service providers with Luxembourg as their home state. The authority reports each authorisation to ESMA, and the entry then appears in the EU-wide interim MiCA register.

How many CASPs are licensed in Luxembourg?

ESMA’s CASP data dated 6 October 2026 lists 13 current entries with Luxembourg as home state. The earliest authorisation date is 7 February 2025 and the latest is 3 July 2026. A further 179 firms authorised in other EEA states list Luxembourg as a host state under Article 65.

When did the MiCA transition period end in Luxembourg?

An eligible firm could rely on the national transition in Luxembourg until 1 July 2026. Eligible pre-MiCA providers could use the maximum period. After that date a provider needs its own MiCA authorisation, a valid Article 60 notification or an Article 65 notification from another EEA home state.

Can a crypto firm licensed in another EU country serve customers in Luxembourg?

Yes, through Article 65. A CASP authorised in another EEA state tells its home authority which services it will provide in Luxembourg, and that authority forwards the notification. ESMA’s data lists 179 such firms for Luxembourg. They do not need a separate CASP licence in Luxembourg, although local rules outside MiCA, such as marketing, tax and anti-money-laundering requirements, can still apply.

Sources

Official sources

  1. Commission de Surveillance du Secteur Financier (CSSF): official sitecssf.lu
  2. ESMA interim MiCA registeresma.europa.eu
  3. ESMA’s Article 93 competent-authority listesma.europa.eu
  4. ESMA’s Article 143 transition listesma.europa.eu
  5. Regulation (EU) 2023/1114 on EUR-Lexeur-lex.europa.eu

Register data through 6 October 2026; Article 110 data through 16 September 2026. Reviewed 14 October 2026. Authority responsibilities and firm counts change; confirm the current position with the authority and ESMA before acting. This page gives general information and does not provide legal, tax, regulatory or investment advice.

Compare the other EEA states

The country comparison lists the authority and current CASP count for all 30 EEA states. The register shows every legal entity behind the totals.