Tokenization in Luxembourg: four laws and the order you use them in

The first law, in 2019, amended the law of 1 August 2001 on the circulation of securities so that a securities account could be held, registered and transferred using a distributed ledger. A ledger became a lawful place to record who holds what. The issuance itself still had to happen the old way.

The second law, of 22 January 2021, amended the law of 6 April 2013 on dematerialized securities and allowed the issuance itself on a ledger. It introduced the issuance account as a legal concept, an account held by a settlement provider or central account keeper that records the securities an issuer has issued, and it permitted that account to sit in a distributed ledger. It also widened the account keeper role, so that any EU credit institution or investment firm could act as account keeper for unlisted debt securities, subject to IT control and security requirements.

The third law brought the result into the EU framework: securities issued on a ledger satisfy the definition of financial instruments, they fall under the EU DLT Pilot Regime, and they can be used as financial collateral. The collateral point is the one a treasury desk cares about, because an asset you cannot pledge is an asset you cannot fund.

The fourth, the Law of 20 December 2024, did two things. It let banks and investment firms act as central account keeper for non-listed capital securities, extending to equity what the second law had done for debt. And it created the control agent, in a new Article 21a of the Dematerialised Securities Law.

The decision that shapes everything else is the legal form of the share, and it is independent of the technology. The CSSF stated this plainly when it published its FAQ on tokenisation on 2 October 2026: a Luxembourg undertaking for collective investment may issue native units or shares on a ledger, in registered or in dematerialized form within the meaning of the law of 10 August 1915 on commercial companies, and using a ledger as the issuance and record-keeping infrastructure does not determine the legal form, nor the other way around.

That gives two routes. The registered route is the lighter one: the entity performing the registrar function may simply keep the shareholder register on a ledger, and the company law requirement that a register of registered shares exists at the registered office still applies. The dematerialized route brings in the machinery of the Dematerialised Securities Law, which means an issuance account, a central account keeper or a control agent, and compliance with every requirement that legal form carries. A fund that only wants its register modernized takes the first route; a fund whose shares have to settle against securities market infrastructure takes the second.

This is the point the market got wrong, and the CSSF's FAQ answers it directly. Appointing a control agent does not remove the need for an administrator in charge of the registrar function. The tasks of the registrar function under Circular CSSF 22/811 go beyond the three things a control agent does under Article 1(10a) of the Dematerialised Securities Law, so an eligible entity, the investment fund manager, a registrar agent or a credit institution authorized as fund administrator, still has to perform all the residual tasks.

The three things the control agent does are specific: it holds the issuance account of the tokenized securities, it oversees the custody chain, and it reconciles the ledger-based issuance account with the securities accounts. Nothing stops one entity from doing both jobs, and that is the sensible structure where it is available: a credit institution authorized as fund administrator under the circular and separately notified as control agent under Article 21a holds both roles.

A fund running tokenized and traditional share classes side by side may appoint several administrators for the registrar function, and the CSSF set five conditions on it. The split must not fragment the coordination and general supervisory function or add cost through duplication. The operating model and its risks have to be disclosed to investors, with every administrator and its function named in the offering documents. One entity, the fund manager or one of the administrators, has to keep a consolidated view of all shares issued, because the net asset value per share and the distributions cannot be calculated without it. The additional risks from the split have to be managed. And the register of registered shares at the registered office still has to exist with everything the 1915 law requires in it.

An entity that wants to act as control agent in Luxembourg notifies the CSSF at least two months before the activity starts, under Article 21a(2), after presenting the operating model to the CSSF. The notification carries the information the CSSF needs to verify the requirements of Article 21a(1), and the CSSF may ask for more.

Two details decide the real timeline. First, the two months begin to run only when the CSSF confirms the notification is complete, so an incomplete filing does not start the clock, it delays it. Second, the CSSF may prohibit the activity where the notification lacks what it needs; where no prohibition comes within the period, the entity may begin. This is a notification with a veto attached, and not an application for a license.

The outsourcing notifications are the part that stretches a project. Where the activity is supported by ICT third-party arrangements, a separate notification goes in at least three months before the outsourcing starts, reduced to one month where the provider is a Luxembourg support professional of the financial sector. Three months is longer than two, so the outsourcing notification, and not the control agent notification, sets the project's critical path.

An entity established in another EEA state has a further step: it has to inform its home authority first, tell the CSSF of any objection or comment that authority made, and make sure the CSSF can satisfy itself that the home authority will help it obtain the information it needs, at notification and throughout the activity. A bilateral cooperation arrangement between the two authorities is how that is usually met, and without it the notification is not complete.

The CSSF takes the view that the entities eligible to be control agents fall within DORA's scope under Article 2(1) points (a), (e) and (g), so they are subject to DORA as a whole, including for the control agent activity. To satisfy Article 21a(1) they have to show that their information processing systems and the control and security arrangements around them suit the duties of the role, which in practice means applying their existing DORA framework to it.

A control agent may use a third-party provider for technical support, including smart contract development and administration. The CSSF considers it highly likely that the control agent activity is a critical or important function within the meaning of Article 3(22) of DORA, which pulls in the notification for an ICT third-party arrangement supporting such a function, on the CSSF's own form and within its time limits. A firm whose own assessment says the function is not critical has to tell the CSSF and give a solid rationale up front, when it presents the operating model, and not after the fact. Finance Loop covers the regime at digital operational resilience in Europe.

The CSSF asks firms to make contact as early as possible, before the formal procedures, so that the applicable frameworks, the licenses needed and any obstacles surface early. A supervised Luxembourg entity goes through its usual contact at the CSSF; everyone else goes through the Innovation Hub.

What the first submission has to contain is specific, and it is more than a pitch. A description of the whole project and the lifecycle of the assets involved, from issuance through trading and settlement to distribution. A legal qualification of the tokens to be issued, including the rights attached to them. A description of what every participant in that lifecycle does. Details of all contractual relationships, outsourcing arrangements included. And a preliminary assessment by the firm itself of the licenses the project would need and any other procedures to complete. The CSSF notes that this assessment may change the timing of the control agent notification, because the legal deadlines for the various filings differ from each other.

A fund administrator planning substantial changes to its operating model for a ledger has its own obligation: it applies to the CSSF for authorization of those changes under Circular CSSF 22/811. Moving a register onto a ledger is not a technical project the administrator can run quietly.

The two look similar and have different registers behind them. A fund share's register answers who owns a claim on a pool of assets whose value is recalculated at each valuation point, and the fund administrator computing that value needs the consolidated share count. Subscriptions and redemptions change the number of shares in existence, so the register is written to continuously by a party with the authority to create and cancel.

A bond's register answers who owns a fixed claim against the issuer. Nothing is created after the issuance, the number of units is set, and what moves is ownership. That is why the second blockchain law could open the account keeper role for unlisted debt before anyone touched equity, and why the fourth law needed its own provision for non-listed capital securities: the operational question is harder when the instrument's quantity can change. Finance Loop covers the instruments at tokenized securities and tokenized funds.

Germany's Gesetz über elektronische Wertpapiere arrived at the same destination by a different road. It created the crypto securities register with a registrar supervised by BaFin, and it covers bonds and fund units, with shares added later. The German register is a regulated activity in its own right, with the registrar as the licensed party.

Luxembourg built on an existing dematerialized securities regime and added ledger capability to the roles that already existed, then created one new role where the ledger made a role redundant. A German issuer looking at Luxembourg therefore finds a familiar structure with unfamiliar names, and the practical question is which supervisor and which service providers the issuance needs. Finance Loop covers the German route at issuing tokenized securities in Germany and tokenization in Germany.

The laws above govern issuing and holding. Trading and settling a ledger-based security on a regulated venue is the DLT Pilot Regime's subject, and a venue needs its own authorization under it. That is the step beyond issuance: a fund share on a ledger can be issued and transferred under Luxembourg law with no pilot authorization anywhere, and a secondary market for it on a regulated venue is a separate undertaking. Finance Loop covers an authorized venue at 21X in Frankfurt.

Yes. The CSSF confirmed in its tokenisation FAQ of 2 October 2026 that a Luxembourg undertaking for collective investment may issue native units or shares using a distributed ledger, provided the operating model complies with the regulatory framework for that kind of fund. The shares may be registered or dematerialized, and the use of a ledger does not decide which. For registered shares, the administrator performing the registrar function may keep the register on the ledger.

Three things, named in Article 1(10a) of the Dematerialised Securities Law: it holds the issuance account of the tokenized securities, it oversees the custody chain behind them, and it reconciles the ledger-based issuance account with the securities accounts. It is an alternative to the central account keeper, and it does not replace the fund administrator's registrar function, whose tasks are wider.

The notification goes to the CSSF at least two months before the activity starts, and the two months only begin once the CSSF confirms the notification is complete. Where the activity relies on ICT third-party arrangements, a separate notification is due at least three months before that outsourcing starts, or one month where the provider is a Luxembourg support professional of the financial sector. The longer of those deadlines sets the real timeline, so a project with outsourcing plans for three months and not two.

Not the building itself, and that distinction is the whole answer. Title to Luxembourg real property passes through the land register, which no ledger replaces. What gets tokenized is the fund or company that owns the property, so the token is a share in a vehicle and the vehicle holds the asset. That puts the structure under the fund rules above, with the same questions about legal form, registrar function and the information the CSSF wants in the first conversation. Finance Loop covers the wider subject at RWA tokenization in Europe.