LBR ¦ Circular LBR 26/02 - Compliance Procedure for Keeping the RCS and the RBE Up To Date

Luxembourg tightens beneficial ownership compliance as money-laundering risks come into focus

Luxembourg has moved into the enforcement phase of a new procedure designed to keep the Trade and Company Register (RCS) and the Beneficial Owners Register (RBE) accurate, complete and up to date.

The procedure is significant for financial crime compliance because reliable ownership information is a core control in the prevention of money laundering, terrorist financing, fraud, corruption and sanctions evasion. Corporate structures that contain missing, outdated or inaccurate information can obstruct customer due diligence, conceal control relationships and make it more difficult to identify the proceeds of predicate offenses.

The framework follows amendments introduced by the law of 23 January 2025. Since January 2026, Luxembourg Business Registers (LBR) has used automated monitoring to identify potential breaches involving the RCS and RBE. The enforcement phase began on 21 September 2026. Non-profit associations and foundations are temporarily excluded from this phase while awareness and information measures continue.

Why accurate ownership data matters for financial crime controls

Beneficial ownership information is not a purely administrative requirement. It supports the identification of the natural persons who ultimately own or control a company, even where ownership is divided among several entities or concealed through layered arrangements.

A failure to maintain accurate records can create several financial crime vulnerabilities. A company may appear to be controlled by an intermediary rather than by the person who benefits from its assets. A recently changed director or shareholder may remain unrecorded. A corporate vehicle may continue to appear active despite having no genuine registered office or operational presence. Each of these weaknesses can affect the ability of banks, professional service providers, public authorities and other obliged entities to assess risk properly.

The underlying predicate offense is equally important. Money laundering depends on the existence of criminal proceeds generated by an underlying offense, such as fraud, bribery, tax offenses, drug trafficking, trafficking in persons or organized crime. Inaccurate corporate data does not itself establish that a predicate offense has occurred, but it can provide the opacity needed to move, hold or disguise assets derived from such conduct.

For that reason, ownership-register compliance is closely connected to the detection of suspicious transactions. An unexplained discrepancy between a company’s registered ownership information and the person exercising effective control may be relevant to transaction monitoring, source-of-funds inquiries and suspicious transaction reporting.

Bastian Schwind-Wagner _Follow

"Luxembourg’s strengthened procedure for monitoring the Trade and Company Register and Beneficial Owners Register makes accurate corporate information a central financial crime control. Missing or outdated ownership data can obscure the individuals controlling a company and complicate the detection of money laundering and related predicate offenses.

Entities must respond promptly to requests from Luxembourg Business Registers, as unresolved deficiencies may lead to public warnings, financial penalties, deletion of the file and referral to the State Prosecutor. Effective governance should therefore connect corporate changes, beneficial ownership reviews and statutory filings through a documented and regularly tested process."

How the monitoring process operates

LBR’s automated process is intended to operate both preventively and repressively. It may send reminders to entities approaching a filing deadline, including by email where an address has been registered with the RCS. It may also display a message on the LBR portal while an entity is preparing a filing or declaration.

The system is also designed to identify files containing missing, incorrect or outdated information, as well as failures to file deeds required by law. Once a breach is identified, LBR sends a request to update the file by registered letter. The entity has 30 days from the date on which the request is sent to bring all identified matters into compliance.

The request must identify the deficiencies, explain the applicable deadline, describe the consequences of non-compliance and provide information about available remedies. Entities should pay close attention to the address used for service. The registered office recorded with the RCS must be capable of receiving communications. If the registered letter cannot be delivered, the procedure and its deadlines are not suspended. An ineffective registered office may itself constitute an additional breach.

Progressive consequences for non-compliance

The enforcement process escalates over time.

After 30 days, if the identified deficiencies have not been fully corrected, a warning is displayed on the LBR portal. Third parties consulting the entity’s file can see that its information is not up to date and that a verification procedure is underway.

After two months, the unresolved deficiencies are shown on RCS and RBE extracts issued for the entity. They are also visible to third parties consulting the file online. This can affect the entity’s credibility with banks, investors, counterparties, professional advisers and public authorities.

After seven months, where the file remains incomplete, LBR may impose a daily penalty of €40. The penalty continues until full compliance is achieved, subject to a maximum of €3,600 over a period of up to 90 days. The decision imposing the penalty is notified by registered letter. Once compliance is achieved or the maximum period expires, LBR determines the final amount due. The resulting decision constitutes an enforceable instrument, and unpaid amounts may be recovered through a bailiff.

After 12 months, LBR may delete the entity’s file from the RCS and RBE on its own initiative. This administrative deletion does not dissolve the entity and may be reversed once the required steps have been completed. However, deletion is followed by referral of the file to the State Prosecutor.

That referral creates a material escalation in risk. Persistent failure to maintain statutory records may prompt wider scrutiny of the entity, its management and the circumstances surrounding its ownership and activities. It does not, by itself, prove money laundering or another criminal offense. It does, however, place the deficiencies in a setting where potential links to fraud, corruption, tax evasion, asset concealment or other predicate offenses may warrant examination.

Compliance gaps can become financial crime indicators

For regulated businesses, discrepancies in the RCS or RBE should not be treated as isolated filing problems. They may be relevant to the risk assessment of a customer or counterparty, particularly when combined with other warning signs.

Examples include unexplained changes in ownership, nominee directors, complex chains of companies with no clear commercial rationale, inconsistencies between registered information and account activity, high-value transfers involving newly incorporated entities, or reluctance to identify the natural person exercising control. The absence of a functioning registered office may also raise questions about whether the entity is genuinely operating from Luxembourg or is being used primarily as a legal or transactional vehicle.

A financial institution should not automatically reject a relationship solely because a register contains an outdated entry. It should assess the circumstances, seek clarification and determine whether enhanced due diligence is required. Where the available information cannot support a reasonable understanding of ownership, control, purpose or source of wealth, the relationship may become difficult to maintain in line with anti-money laundering obligations.

The same principle applies to professional intermediaries. Corporate service providers, lawyers, accountants and other advisers may encounter ownership structures that are technically registered but economically opaque. The requirement to keep official records accurate reinforces the expectation that client files, beneficial ownership assessments and risk classifications are reviewed when relevant changes occur.

The need for stronger internal governance

Entities subject to the procedure should assign clear responsibility for RCS and RBE filings. This responsibility should not depend solely on an external provider or on an individual director remembering to make periodic updates.

A sound control framework should connect corporate changes with filing obligations. Changes to shareholders, directors, authorised representatives, registered offices, control arrangements, legal form or governing documents should trigger a documented review of both registers. The entity should retain evidence supporting the information filed and verify that updates have been accepted.

The process should also cover succession planning and staff absences. Registered emails should be monitored, registered mail should be collected promptly and access to the LBR portal should be maintained. A failure to receive a notice does not remove the applicable deadline where the registered office or contact arrangements are defective.

Groups with multiple Luxembourg entities should maintain a central inventory of filing obligations, deadlines and ownership information. That inventory should be reconciled periodically against corporate records, client due diligence files and, where appropriate, accounting and banking information. Differences should be investigated rather than corrected mechanically, since they may reveal unrecorded control changes or broader governance weaknesses.

What entities should do when a notice arrives

An entity receiving a request to update its file should identify every deficiency listed by LBR and address them within the 30-day period. Partial correction does not end the procedure. It continues until the file is fully compliant, and additional deficiencies identified during the process may be added.

The entity should verify whether the issue concerns a missing filing, an incorrect entry, outdated beneficial ownership information, an unfiled deed or the existence of an ineffective registered office. It should gather supporting documents, submit the required corrections and preserve evidence of the filing and any communication with LBR.

Administrative decisions may be challenged before the Administrative Tribunal within three months. A challenge should not be confused with an automatic suspension of the compliance timetable. The entity should obtain appropriate legal advice on the available remedy while continuing to manage the underlying filing obligations.

Where full compliance is achieved during the procedure, the procedure ends and measures already applied are lifted, except for any penalty payment that remains due.

A broader test of corporate transparency

The new process raises the practical cost of treating corporate-register information as a low-priority administrative matter. Accurate RCS and RBE data is increasingly part of the infrastructure used to identify hidden control, assess financial crime exposure and trace assets connected to predicate offenses.

The most effective response is not limited to correcting a register entry after receiving a warning. Entities should maintain an ongoing process that links corporate governance, beneficial ownership verification, anti-money laundering controls and regulatory filings. For banks and other obliged entities, unexplained inconsistencies should feed into customer risk assessments and transaction monitoring.

The enforcement framework does not turn every filing breach into evidence of criminal conduct. It does, however, make persistent opacity more visible and more consequential. Companies that maintain reliable ownership information reduce regulatory exposure, improve access to financial services and make it harder for corporate structures to be used to conceal the proceeds of crime.

Dive deeper

• Luxembourg Business Register ¦ Circular LBR 26/02 - Compliance procedure for keeping the RCS and the RBE up to date ¦ Link