Luxembourg: lending & credit regulation

Regulated

Luxembourg lending: CSSF regulates credit institutions; consumer credit under Consumer Code

Also involved
Banque Centrale du Luxembourg (BCL) · Commission de Contrôle du Secteur Financier (CCSF)
Core law
Law of 12 November 2004 on the financial sector; Law of 23 December 2016 on consumer credit
Entry capital
€300,000 (Credit Institution)
Approval timeline
6-12 months for full authorization
Customer assets
Segregated in licensed credit institution accounts
Data protection
GDPR · CNPD (Commission Nationale pour la Protection des Données)
Sandbox
No

Lending activities in Luxembourg are primarily regulated by the CSSF under the Law of 12 November 2004. Entities granting credit must generally be authorized as credit institutions or financial companies. Consumer credit for residential property is additionally governed by the Law of 23 December 2016 and the Consumer Code, with strict transparency and affordability requirements. The regulatory environment is mature, heavily influenced by EU directives and EBA guidelines.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Consumer lendingLicenceCredit Institution Authorization[1]

Requires authorization under Law of 12 Nov 2004; compliance with Law of 23 Dec 2016 for residential credit.

€300,0006-12 monthsCSSF
SME / commercial lendingLicenceCredit Institution Authorization[2]

Standard banking license required; subject to EBA loan origination guidelines.

€300,0006-12 monthsCSSF
MicrofinanceLicenceCredit Institution Authorization

No specific microfinance license; falls under general credit institution regime.

€300,0006-12 monthsCSSF
Buy-now-pay-laterLicenceCredit Institution Authorization[1]

If structured as credit, requires banking license; consumer credit rules may apply.

€300,0006-12 monthsCSSF
P2P lending platformLicenceCredit Institution Authorization

Intermediation of credit requires authorization; no specific P2P regime exists.

€300,0006-12 monthsCSSF
Credit bureau / scoringUncertainverify with regulator

Scoring services may fall under data protection or ancillary services; unclear if standalone license needed.

Debt collectionUncertainverify with regulator

Debt collection may require specific authorization or fall under general commercial law; unclear.

New — what changed recently

  • 2026-03-25CSSF Circular 26/908Amends reporting requirements for borrower-related residential real estate indicators to semi-annual submissions.[3]
  • 2024-12-24CSSF Circular 24/869Updates consumer credit rules for residential property, transposing Directive 2014/17/EU.[1]
  • 2022-12-22CSSF Circular 22/824Implements EBA Guidelines on Loan Origination and Monitoring for credit institutions.[2]

Market-entry checklist

  1. 1Secure CSSF authorizationApply for credit institution license under Law of 12 Nov 2004 with €300k minimum capital.
  2. 2Establish compliance frameworkImplement EBA-aligned loan origination and monitoring policies per Circular 22/824.
  3. 3Prepare consumer credit disclosuresEnsure adherence to Law of 23 Dec 2016 and Consumer Code for residential credit agreements.
  4. 4Set up data reporting systemsConfigure semi-annual reporting for residential and commercial real estate indicators.
This guide is compiled automatically from 3 primary-source documents published by Luxembourg's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.