Luxembourg flags crypto companies as high risk for money laundering

Luxembourg’s 2025 National Risk Assessment (NRA) designates virtual asset service providers (VASPs) as high-risk entities for money laundering. This classification stems from a detailed analysis of factors including transaction volume, client reach, distribution channels, legal structures, and the international nature of VASP operations. The inherent risk level is deemed “High,” reflecting concerns over the crypto industry’s vulnerability to financial crime. This assessment builds upon previous NRAs (2020 and 2022) that already flagged crypto assets and virtual currencies as high-risk, citing their internet-based and cross-border nature.

The EU, including Luxembourg, is actively addressing these concerns through the Markets in Crypto-Assets (MiCA) framework. MiCA aims to standardize crypto regulation across all 27 member states. Since January, crypto asset service providers have been obtaining licenses to comply with these new regulations. Examples include Kraken and Crypto.com launching regulated derivatives trading within the EU.

However, the implementation of MiCA also presents challenges. Tether, the issuer of USDT, has refused to comply with the new stablecoin requirements, leading to delistings from major exchanges like Crypto.com, Coinbase, and Binance within the EU.

The use of cryptocurrencies in money laundering continues to be a significant concern. Recent cases illustrate this risk. Hong Kong police apprehended 12 individuals involved in a cross-border scheme laundering $15 million through crypto and numerous bank accounts. Separately, European law enforcement arrested 17 suspects linked to a “mafia crypto bank,” seizing assets worth €5 million, including cash, crypto, vehicles, and weapons, following the alleged laundering of €23.5 million for criminal entities in the Middle East and China. These incidents underscore the ongoing need for robust regulatory frameworks to combat illicit activities within the cryptocurrency space.