MiCA in Luxembourg
MiCA in Luxembourg covers the EU rules for crypto-asset services and token issuance, as they apply to firms based in the Grand Duchy and their clients. The Commission de Surveillance du Secteur Financier (CSSF) is the competent authority that authorizes crypto-asset service providers in Luxembourg. A provider authorized by the CSSF can serve clients in the other EU and EEA countries after a cross-border notification.
A Luxembourg law published in the Official Journal on 17 February 2025 designates the CSSF as competent authority for MiCAR. Luxembourg kept the full transitional period of eighteen months for virtual asset service providers registered with the CSSF, which ended on 1 July 2026. Several global crypto firms and banks run their EU crypto business from a Luxembourg entity.
The CSSF as competent authority
The CSSF decides on applications for authorization under Article 63 of MiCA and receives the notifications of banks, investment firms and settlement institutions under Article 60. For tokens, the CSSF expected issuers of asset-referenced tokens and e-money tokens to comply with MiCA from 30 June 2024. The CSSF Innovation Hub talks to firms whose business model does not fit an existing license category before they apply.
Eighteen months of transition for VASPs
Luxembourg reported the full eighteen months to ESMA, as the ESMA list of grandfathering periods shows. Virtual asset service providers registered with the CSSF before 30 December 2024 could keep working until 1 July 2026, as the law firm Elvinger Hoss explains. That registration covered anti-money laundering duties only and did not include an EU passport.
Germany, by contrast, ended its MiCA transitional period after twelve months, at the end of 2025.
Who holds a MiCA authorization in Luxembourg
The ESMA interim register of 18 October 2026 lists 13 crypto-asset service providers with Luxembourg as home member state. Clearstream Banking notified the CSSF on 7 February 2025 and may provide crypto custody in 30 countries. Bitstamp Europe followed in May 2025, and Coinbase Luxembourg received its authorization in June 2025 for seven services.
Zodia Custody (Europe) and Standard Chartered Luxembourg offer custody and transfers to institutional clients. Ripple Payments Europe, Bridge Building and Banking Circle use Luxembourg for exchange and transfer services, and B2C2 Europe joined the register in May 2026.
Finance Loop and MiCA in Luxembourg
Finance Loop connects compliance and digital asset teams in Germany with the Luxembourg entities that serve German clients, from Clearstream in the Deutsche Börse group to Coinbase. At the Bybit EU Crypto Evening in Frankfurt, Mykolas Majauskas, Senior Director of Policy, spoke about compliance under MiCAR. Finance Loop also lists the MiCAR certificate program that EBS Executive School runs with the law firm HEUKING.
Upcoming events on crypto regulation
Getting a MiCA license in Luxembourg
A firm applies to the CSSF for authorization under Article 63 and has to show its governance, own funds, custody arrangements and controls against money laundering. The rulebook is the same in every member state, so firms choose Luxembourg for its experience with cross-border financial services and its banks. The requirements for a CASP license are the same in every member state.
What the CSSF publishes on MiCAR
The CSSF publishes the MiCAR texts, its circulars and forms, and the guidelines of ESMA and EBA for the firms it supervises. In June 2026 it added a form for suspicious transaction and order reports under the market abuse rules of MiCAR.
The Luxembourg MiCA law
MiCA applies directly in Luxembourg, and the national law of February 2025 adds the designation of the CSSF, its powers and the penalties. Luxembourg has also passed four laws that allow tokenized securities and their registration on a blockchain.
Coinbase, Ripple and other providers in Luxembourg
Coinbase Luxembourg holds authorization for custody, exchange, order execution, placing, order transmission and transfers, which it may passport into 30 countries. Ripple Payments Europe was authorized at the end of June 2026 for exchange and transfer services in 29 countries.
Serving German clients from Luxembourg
A provider authorized by the CSSF notifies the CSSF of the countries where it wants to serve clients, and the CSSF informs their supervisors. After that notification has reached BaFin, the provider may serve clients in Germany without a German license.
MiCA in Luxembourg and Finance Loop
Finance Loop covers MiCA in its Risk & Compliance track, including the Luxembourg entities of Clearstream, Coinbase and Bitstamp that serve clients in Germany. Finance Loop brings compliance officers of banks, brokers and crypto firms together with lawyers and supervisors at events in Frankfurt, Munich, Berlin and Hamburg.
Finance Loop is a professional network and has the goal of driving the institutional use of emerging technologies in finance, such as AI, tokenization, stablecoins, and DeFi. Finance Loop helps its members build skills and personal networks in these fields: Investment & Digital Assets, Payments & Digital Money, Digital Infrastructure & Sovereignty, and Risk & Compliance.