07 July 2026
OECD ¦ OECD Anti‑Bribery Convention Phase 4 Follow‑Up Report on Luxembourg
Luxembourg strengthens its anti-bribery framework, but money laundering enforcement remains the decisive test
Luxembourg has made meaningful progress in responding to concerns over foreign bribery, yet its overall enforcement framework remains incomplete. The country has fully implemented 10 recommendations, partially implemented 22 and failed to implement 14. The most important developments concern prosecutorial policy, financial intelligence, investigative powers and the treatment of corruption proceeds.
The central issue for financial crime professionals is not only whether a bribe is paid to a foreign public official. It is what happens to the money afterwards, how the proceeds move through financial and corporate structures, and whether investigators can identify, freeze and confiscate the resulting assets.
Foreign bribery is a predicate offence for money laundering. A weak response to the underlying bribery therefore creates a direct weakness in the anti-money laundering framework. Luxembourg’s progress must be assessed against that connection.
Foreign bribery remains the underlying risk
Luxembourg’s enforcement record remains limited. Since the Phase 4 evaluation, no natural or legal person has been convicted in Luxembourg for foreign bribery or trading in influence involving foreign public officials. One investigation into foreign bribery remains open, while one prosecution concerning trading in influence is ongoing.
The absence of convictions involving legal persons is particularly significant. Luxembourg has a large international financial sector and hosts corporate structures used in cross-border investment and commercial activity. Such structures may be legitimate, but they can also be used to receive, transfer or conceal the proceeds of bribery.
The country’s authorities have reported one legal person being sanctioned for breaches of anti-money laundering legislation connected with foreign bribery. Four investigations are also underway concerning money laundering or tax offences linked to foreign bribery. These cases indicate that the anti-money laundering framework may provide a more practical route to enforcement than the foreign bribery offence itself.
That approach can be useful, but it should not become a substitute for prosecuting the predicate offence. Money laundering investigations can identify financial flows, beneficial owners, intermediaries and concealed assets. They should also help establish how a bribe was paid, who benefited from it and which companies were involved.
A stronger prosecutorial policy, with questions about practical impact
On 26 February 2026, Luxembourg adopted a substantially revised circular on corruption issued by the State Prosecutor General. The circular instructs prosecutors to prioritise corruption and foreign bribery cases, use available sources of information more systematically and investigate the potential involvement of Luxembourg legal persons.
It also highlights the need to address both the laundering of the bribe itself and the laundering of proceeds generated through bribery. This distinction is important. A payment made to a foreign official may be concealed through intermediaries, false invoices, consulting arrangements or complex transfers. Separately, the profits obtained from the corrupt transaction may later be invested, transferred or integrated into the legitimate economy.
The circular calls for systematic financial investigations and for prosecutors to examine the involvement of companies, affiliated entities and intermediaries. It also encourages the review of information received through mutual legal assistance, media reporting and other external sources.
These instructions are positive, but their legal and operational force is limited. The circular is not public or binding, and Luxembourg has not yet provided evidence showing how it has changed case selection, investigative practice or enforcement outcomes. The key question is whether prosecutors will consistently open parallel money laundering investigations when foreign bribery allegations identify a Luxembourg connection.
Money laundering enforcement is improving, but remains difficult to measure
Luxembourg has taken several steps to improve enforcement of money laundering predicated on foreign bribery. The Financial Intelligence Unit has increased its staff from 52 members in 2024 to 72 in 2026, with further recruitment planned. It has also delivered training on corruption-related money laundering to prosecutors, investigators and reporting entities.
The FIU has circulated typologies, case studies and indicators concerning foreign bribery to the private sector. Supervisory authorities have incorporated corruption risk into sectoral assessments and AML/CFT training. The CSSF has identified corruption as a predicate offence requiring particular attention in its 2025–2027 AML/CFT strategy.
This is relevant for banks, investment firms, trust and company service providers, insurers and other regulated entities. Foreign bribery risks may arise where a customer is connected to public procurement, infrastructure, extractive industries, defence, healthcare, state-owned enterprises or jurisdictions with elevated corruption exposure. The risk may also increase where a customer uses unexplained intermediaries, opaque ownership structures, unusual consultancy fees or payments that lack a clear commercial rationale.
The practical challenge is still enforcement data. Luxembourg reported one legal person sanctioned for AML breaches in connection with foreign bribery and four investigations involving money laundering or tax offences linked to foreign bribery. However, the available information does not provide a sufficiently detailed picture of investigations, prosecutions, convictions, confiscation and sanctions.
Without disaggregated statistics, it is difficult to determine whether suspicious transaction reports are leading to foreign bribery investigations, whether money laundering is charged independently of the predicate offence and whether legal persons are being held accountable.
The predicate offence and the evidential chain
The relationship between bribery and money laundering requires investigators and reporting entities to understand the full financial chain.
The initial payment may be disguised as a commission, success fee, sponsorship, charitable contribution or payment for services that were never provided. The recipient may be an intermediary rather than the public official. Funds may pass through a consultancy, a family member, a trust, a holding company or an account in another jurisdiction.
The subsequent proceeds may take a different form. A company may obtain a public contract, licence or regulatory decision and then generate apparently legitimate revenue. Those proceeds can be distributed as dividends, used to purchase property, invested through private banking structures or transferred to related entities.
For AML purposes, the analysis should therefore address both the original corrupt payment and the economic benefit derived from it. A narrow focus on the payment alone may overlook the value created by the corrupt transaction and the assets that ultimately need to be recovered.
Luxembourg’s revised prosecutorial guidance recognises this distinction. The next step is to demonstrate that the distinction is being applied in investigations and prosecutions.
Access to banking information remains a structural weakness
Luxembourg adopted important legislative reforms in December 2025 to improve the investigation of economic and financial offences. The reforms extend the “mini-instruction” procedure to foreign bribery and allow prosecutors to request certain investigative measures from an investigating judge without opening a full formal investigation.
The changes also remove a three-month limit for submitting a second request to the investigating judge and permit multiple requests to be submitted at the same time. These measures should reduce delays in obtaining information from banks and other financial institutions.
The reforms do not, however, eliminate the need for prosecutorial authorities to seek judicial intervention when coercive access to banking data is required. They also do not fully resolve the limitations affecting preliminary investigations.
The Central Register of Bank Accounts can help identify accounts held by a person or entity, but it does not reveal debit and credit transactions. It also does not provide information on access to safe-deposit boxes. For bribery and money laundering cases, these limitations are material because the reconstruction of financial flows often depends on transaction-level information, not merely on identifying the existence of an account.
The Working Group also noted that certain coercive measures in preliminary investigations remain subject to the consent of the persons concerned. Multidisciplinary investigations involving authorities without judicial police status remain difficult. These constraints may cause delays precisely in the cases where assets are most vulnerable to dissipation.
Confiscation cannot depend entirely on a money laundering charge
Luxembourg has not addressed a significant weakness concerning confiscation. Where foreign bribery is reclassified from a serious offence to a lesser offence, mandatory confiscation may no longer apply to the same extent.
The authorities have argued that this problem is mitigated because money laundering is almost always included in foreign bribery cases and confiscation is mandatory for money laundering. That reasoning is not sufficient. Confiscation should not depend on whether money laundering is charged and successfully prosecuted in every case.
A bribery case may involve proceeds or instrumentalities that are not fully captured by the money laundering charge. It is also possible that the evidential threshold for proving money laundering is not met even though the benefit of bribery can be identified. If confiscation is available only through the money laundering offence, assets may escape recovery.
Luxembourg has improved financial investigation practices. Prosecutors are expected to conduct asset investigations in foreign bribery cases, and the Asset Management Office has developed tools linking seized or confiscated assets to specific offences. Its staffing and data capabilities have also improved.
The proposed merger of the Asset Management Office and the Asset Recovery Office may strengthen coordination, but it will also expand the responsibilities of the combined structure. Adequate staffing and technical capacity will be essential, particularly as the authorities seek to trace assets across borders and manage virtual assets, securities, receivables and property.
Corporate liability remains unresolved
No legal person has been convicted in Luxembourg for foreign bribery. This outcome is difficult to reconcile with the country’s exposure to international business and corporate structures.
The law requires an offence to have been committed in the “interest” of the legal person. Luxembourg authorities interpret that concept broadly and maintain that it can include reputational or non-quantifiable benefits, partial benefits and advantages connected with the pursuit of a company’s corporate purpose.
The concern is that this interpretation has not been tested sufficiently in foreign bribery cases. Questions remain where the bribe is paid primarily for the benefit of an affiliated company, where the company incurs an immediate loss or where the corrupt act benefits a wider corporate group rather than the entity making the payment.
The revised prosecutorial circular instructs authorities to investigate Luxembourg companies, affiliated entities and intermediaries. It also stresses that proceedings against a legal person may be brought independently of proceedings against the natural person who committed the offence.
A 2025 decision reportedly confirmed that a legal person may be prosecuted even when no natural person is being prosecuted in the same case. That is a relevant development, but it remains part of an ongoing case and cannot yet establish a settled enforcement pattern.
Successor liability is another unresolved issue. Luxembourg has not adopted comprehensive rules ensuring that companies cannot avoid liability through restructuring, merger, acquisition or another change in corporate identity. In complex financial crime cases, the timing of corporate transactions can be critical. Without clear successor liability rules, a company may be reorganised before sanctions, confiscation or other consequences can be imposed.
False accounting and tax enforcement remain underdeveloped
False accounting is often the mechanism that conceals a bribe. Payments may be recorded as legitimate commissions, marketing expenses, advisory fees or operating costs. The accounting treatment can also obscure the recipient, the purpose of the payment and the beneficial owner of the funds.
Luxembourg has not demonstrated effective enforcement of accounting offences in foreign bribery cases. The authorities have referred to the need for accurate data entry and better statistics, but there is limited evidence of investigations, prosecutions or sanctions.
Tax enforcement presents a similar weakness. Bribes are not deductible, and Luxembourg has rules allowing sanctions where taxpayers attempt to treat them as deductible expenses. Yet these sanctions have not been applied in practice.
The tax authorities have not shown that audit planning systematically considers foreign bribery risks in high-risk sectors or jurisdictions. A working group is expected to examine the non-deductibility of bribes during 2026, and a draft memorandum on detecting and reporting corruption in tax audits is being prepared.
Tax authorities can play an important role in identifying bribery. Unusual commissions, unexplained payments to agents, inconsistent descriptions of services and expenses disproportionate to the business relationship may provide an early indication of corruption. Tax data can also help investigators compare declared expenses with bank records, contracts and communications.
The absence of systematic enforcement means that a significant source of detection remains underused.
Whistleblower protection is active but incomplete
Luxembourg has invested in the Office for Whistleblowers and in awareness campaigns. Competent authorities received 547 reports in 2024, resulting in 328 investigations being opened during that year. These figures suggest that reporting channels are being used and that institutional awareness has improved.
However, important legal uncertainties remain. The protection framework does not clearly resolve the relevance of a whistleblower’s personal motivation. It also lacks a dedicated framework for interim protective measures. The scope of retaliation covered by the legislation does not fully extend to conduct outside the workplace, and sanctions for retaliation have not been strengthened.
These weaknesses matter in corruption and money laundering cases. Employees, compliance officers, accountants and other insiders may be the first people to identify unexplained payments or suspicious relationships with public officials. If protection is uncertain, reports may not be made, or may be delayed until records have been altered or funds transferred.
The absence of case law on the non-liability provisions also leaves the practical boundaries of protection untested. Guidance and training are useful, but they cannot replace clear statutory protection and judicial interpretation.
The European Union directive creates an opportunity, not an excuse Luxembourg has deferred several reforms to the future transposition of the EU Anti-Corruption Directive. The issues include sanctions, voluntary disclosure, public procurement exclusion, compliance programmes and elements of the foreign bribery offence.
The directive entered into force on 31 May 2026, and Member States have 24 months to transpose most of its provisions. Its implementation may provide an opportunity to address weaknesses in Luxembourg’s framework, including the level of fines for legal persons, which may need to reach at least 5% of worldwide turnover or EUR 40 million under the directive’s requirements.
The Working Group made clear, however, that reliance on future European legislation cannot justify failing to implement existing OECD recommendations. This point is particularly important for money laundering enforcement. Authorities do not need to wait for transposition to improve the use of financial intelligence, strengthen asset tracing, develop enforcement statistics or pursue accounting and tax offences.
What financial institutions should take from the findings
The findings have direct implications for AML/CFT controls in Luxembourg. Regulated entities should treat corruption and foreign bribery as active predicate offence risks rather than as abstract compliance topics.
Customer risk assessments should consider exposure to foreign public officials, state-owned enterprises, public procurement and jurisdictions with significant corruption risks. The analysis should extend beyond the customer itself to beneficial owners, controllers, family members, intermediaries, agents, consultants and affiliated companies.
Transaction monitoring should be capable of identifying payments that may conceal a bribe or its proceeds. Relevant indicators include unusually high commissions, round-sum payments, payments lacking supporting documentation, transfers to unrelated jurisdictions, payments involving newly established entities, third-party payments and expenses connected with public contracts.
Enhanced due diligence should examine whether the customer’s business model depends on government licences, concessions, procurement decisions or state-linked counterparties. A customer’s explanation that a payment is commercially normal should not end the analysis where the surrounding facts suggest an undisclosed public-sector connection.
Suspicious transaction reporting should identify the suspected predicate offence where possible. A report that describes only “unusual activity” may be less useful than one that explains the possible link to bribery, public procurement, an intermediary or the laundering of proceeds.
The next evaluation will focus on outcomes
Luxembourg has strengthened its institutions, issued new prosecutorial guidance, expanded FIU capacity and improved investigative tools. These measures provide a stronger foundation for enforcement.
The decisive question, however, is whether they will produce cases. The next stage should show more investigations opened from credible media reporting and mutual legal assistance, more systematic examination of legal persons, greater use of parallel money laundering investigations, stronger accounting and tax enforcement, and more detailed data on confiscation and sanctions.
The country’s anti-corruption strategy will be informed by a national corruption risk assessment that began in January 2026. That assessment should connect corruption risks to money laundering vulnerabilities, corporate structures and asset recovery. It should also produce measurable priorities rather than broad commitments.
Luxembourg’s response has moved beyond formal rule-making, but it has not yet reached consistent enforcement. For financial crime practitioners, the most important development is the growing recognition that foreign bribery, money laundering, false accounting, tax offences and corporate liability must be investigated as one connected financial crime problem.
Dive deeper
EU Sanctions Helpdesk
The EU Sanctions Helpdesk platform supports European operators in complying with European Union restrictive measures (also known as sanctions) imposed worldwide.
Aimed primarily at Small and Medium-sized Enterprises (SMEs), the Helpdesk offers resources and personalised help to companies performing sanctions due diligence checks.