22 September 2026
GRECO ¦ Evaluation Report Luxembourg - Preventing Corruption and Promoting Integrity
A strong legal framework with uneven local implementation
Luxembourg is widely regarded as one of Europe’s least corrupt countries. Yet its municipal authorities manage substantial public resources, make consequential decisions on land use and construction, award public contracts, collect revenue and oversee essential services. These responsibilities create opportunities for corruption, fraud, conflicts of interest and the laundering of criminal proceeds.
The latest assessment of Luxembourg’s subnational integrity framework highlights a central concern: the country has many relevant legal safeguards, but their application at municipal level remains inconsistent. The risks are particularly significant in property development, public procurement, secondary employment and the management of public funds.
Luxembourg City and Dudelange illustrate both sides of the picture. They have introduced useful transparency and control measures, including live broadcasts of council meetings, participatory budgeting and tighter authorisation procedures for outside activities. At the same time, important weaknesses remain in risk assessment, conflict-of-interest recording, procurement oversight, asset disclosure, external audit and the identification of illicit financial flows.
The predicate offenses behind money laundering risk
Money laundering cannot be assessed in isolation from the offenses that generate the underlying proceeds. At municipal level, the relevant predicate offenses include bribery, influence peddling, illegal acquisition of interests, fraud, misappropriation of public funds, extortion and the submission of false invoices.
Recent Luxembourg cases demonstrate that these are not theoretical concerns. A municipal mayor was convicted in a case involving abuse of influence, forgery, use of forged documents, benefiting from a conflict of interest and money laundering. The courts ordered the confiscation of land acquired as the object and proceeds of corruption.
In another case, two municipal officials were convicted after false invoices were issued for fictitious service providers. The offenses included fraud, forgery, criminal conspiracy, passive corruption and money laundering. Assets, including properties, worth more than €5 million were confiscated or targeted for confiscation.
A further case involved a municipal official who received undisclosed benefits from companies awarded public contracts. The official was convicted of bribery, influence peddling and extortion, and cash was confiscated.
These cases show how municipal corruption can develop into a broader financial crime scheme. A bribe may begin as an illicit payment connected to a permit, contract or administrative decision. The resulting funds may then be moved through bank accounts, companies, property purchases or apparently legitimate professional activities. Once converted into land, buildings or other assets, the proceeds may be difficult to trace unless investigators examine the financial relationship between the predicate offense and the assets acquired.
Property and urban planning are high-risk areas
The property sector presents one of the most important municipal corruption risks in Luxembourg. Local authorities make decisions concerning building permits and general and special development plans. In a pressured housing market, a favourable planning or permitting decision can create substantial economic value for a landowner, developer or intermediary.
This creates several possible risk scenarios. An elected representative or municipal official may participate in a decision involving property owned by the official, a family member or an associated company. A developer may provide an improper advantage in exchange for a planning decision. An intermediary may conceal the relationship between the decision-maker and the ultimate beneficiary. Proceeds may then be invested in real estate, making the property both an instrument of the offense and a means of laundering its proceeds.
The existing rules prohibit decision-makers from participating in deliberations where they have a direct interest. However, the current concept is narrow and does not fully address potential or perceived conflicts. Withdrawals from meetings are not consistently recorded in a dedicated register, and minutes may not explain the nature of the conflict or the measures taken.
This lack of documentation creates a serious evidentiary weakness. It can make it difficult to establish whether a decision-maker was aware of a conflict, whether the conflict affected the decision and whether a related transaction produced an illicit benefit. A transparent record of the conflict, the person’s withdrawal and the final decision would support administrative review, criminal investigation and asset recovery.
Public procurement remains vulnerable to bribery and fraud
Public procurement is another major exposure. Municipalities purchase construction, maintenance, supplies and services, often involving large budgets and repeated dealings with local businesses. Procurement decisions can therefore generate opportunities for bribery, bid manipulation, collusive tendering, favouritism, false invoicing and the diversion of public funds.
Luxembourg’s procurement legislation requires contracting authorities to prevent, detect and remedy conflicts of interest. However, the framework does not consistently require individuals involved in procurement to submit declarations confirming that they have no conflict. Below certain thresholds, publication of award notices is optional, and executive deliberations are generally held in private.
Oversight is also constrained by resources. The Ministry of Home Affairs supervises procurement across 100 municipalities, numerous intermunicipal associations and public establishments, with only limited dedicated staffing. Reviews are conducted on a sampling basis, while checks remain substantially paper-based. This makes it difficult to identify patterns such as repeated awards to connected companies, unusual price increases, fragmented contracts, weak competition or payments to providers that do not appear to have delivered the contracted services.
From a financial crime perspective, procurement data should be assessed as a connected dataset rather than as a series of individual contracts. Useful indicators include common directors or beneficial owners among tenderers, shared addresses, recurring subcontractors, unusual links between suppliers and municipal officials, rapid changes in company ownership and payments inconsistent with the supplier’s operational capacity.
Publishing information throughout the procurement cycle would improve deterrence and detection. This should include tender specifications, participants, evaluation criteria, award decisions, contract values, amendments, subcontractors, payments and completion information, subject to legitimate privacy and security restrictions.
The false-invoice model requires stronger controls
The case involving fictitious service providers illustrates a classic fraud and money laundering pattern. False invoices can be used to extract funds from a municipality, disguise payments to insiders or intermediaries and create apparently legitimate accounting records.
The proceeds may then be divided among participants, transferred through companies or used to acquire property. Where corruption is also present, the invoice may serve as the mechanism through which an improper payment is disguised as a commercial transaction.
Effective prevention requires more than formal approval of invoices. Municipalities should verify the existence and ownership of suppliers, confirm that services were actually delivered, compare invoices with contracts and work records, review changes in bank account details and identify repeated payments just below approval thresholds. Segregation of duties is essential, particularly between procurement, contract management, invoice approval and payment execution.
Digital controls could strengthen these safeguards. Automated systems can flag duplicate invoices, unusual payment sequences, common bank accounts, repeated suppliers, unusual round amounts and transactions involving newly incorporated entities. Such systems should support, rather than replace, professional review.
Undeclared outside activities can create hidden channels of influence
Municipal employees must obtain authorisation for many paid outside activities. The risks are clear where an official advises several municipalities while receiving a public salary and undisclosed benefits from those municipalities.
Such arrangements can create conflicts between public duties and private income. They may also provide a channel for influence peddling, preferential access to information or payments linked to decisions taken in an official capacity. If the benefits are paid through allowances, vouchers or other indirect forms, they may be overlooked unless municipalities maintain complete records.
Dudelange’s practice of granting authorisations for limited periods and reviewing them annually is a useful control. A central register should record the nature of each authorised activity, the parties involved, the income or benefits received, the approval decision and the date of review. The register should be accessible to relevant oversight functions and subject to risk-based checks.
Municipalities should also compare outside activities with procurement awards, planning decisions and other official responsibilities. A secondary activity that appears harmless in isolation may present a serious risk when combined with access to sensitive information or influence over public contracts.
Asset and interest declarations need meaningful coverage
At the time of the assessment, members of municipal governing bodies were not generally required to declare assets, liabilities or interests. Proposed legislation would introduce declarations of interests and certain immovable assets, together with rules on gifts and an ethics committee.
A credible disclosure system is important for both prevention and investigation. Declarations should provide a sufficiently complete picture of a decision-maker’s financial position, including relevant income, significant debts, property interests, corporate holdings and outside activities. Information concerning spouses, partners and dependants may also be necessary to identify indirect ownership or transfers designed to conceal a conflict.
Not all information needs to be published. Sensitive personal data can be protected while still being made available to an independent authority with appropriate verification powers. What matters is that declarations are complete, updated, checked and linked to decisions in high-risk areas such as planning and procurement.
The same logic applies to senior municipal staff whose positions provide access to procurement, revenue collection, financial approvals or confidential information. Municipal secretaries and revenue officers should not fall outside the disclosure and conflict-management framework where their functions create comparable risks.
Transparency is a financial crime control
Access to public information is not merely an administrative principle. It is a practical control against corruption and money laundering. Journalists, civil society organisations, competitors and residents may identify relationships or transactions that internal systems overlook.
Luxembourg’s municipalities have developed positive transparency practices. Luxembourg City broadcasts municipal council meetings and provides interpretation. Dudelange operates a portal containing agendas, recordings and documents submitted for council approval. Participatory budgeting and citizens’ panels also create opportunities for public scrutiny.
However, access to administrative documents can be delayed or refused, and the Commission on Access to Documents (the “CAD”) issues non-binding opinions without a systematic mechanism to verify compliance. In cases involving municipal records and audit reports, information became available only after prolonged delays and legal action.
Delayed access can undermine accountability. By the time information is disclosed, a company may have been dissolved, assets transferred or relevant records lost. Timely publication is particularly important for procurement, planning decisions, grants, municipal contracts, audit findings and payments to external service providers.
Lobbying transparency is missing at municipal level
There are no specific rules governing contacts between municipal decision-makers, staff and lobbyists or other third parties seeking to influence local decisions. This is especially relevant to urban planning, procurement, concessions and major economic projects.
Informal contact is a normal part of local government, but the absence of records can conceal the path by which a decision was shaped. A transparent system should distinguish ordinary constituent contact from meetings intended to influence public policy or a specific administrative decision.
For significant contacts, municipalities should record the date, participating organisation or person, the persons represented and the general subject discussed. The purpose is not to prohibit legitimate engagement, but to make influence visible and allow the public to assess whether decision-making was impartial.
External audit and financial intelligence should be connected
Municipalities are subject to supervision by the Ministry of Home Affairs, but they are not generally audited by the Court of Auditors. Internal audit remains optional and unevenly developed. Luxembourg City has created an internal audit function, while Dudelange has proposed internal audit arrangements covering financial management, procurement and traceability.
Regular independent external audits should examine more than accounting accuracy. They should assess corruption and integrity risks, procurement controls, conflicts of interest, related-party transactions, beneficial ownership, unusual payments and the effectiveness of reporting channels.
Audit findings should be published in an appropriately anonymised form. Publication increases accountability and helps other municipalities recognise recurring control failures.
Municipal oversight should also interact more effectively with financial crime enforcement. Where audits identify unexplained wealth, fictitious suppliers, suspicious property transactions or payments connected to decision-makers, the information should be escalated through appropriate channels to the competent authorities, including the Financial Intelligence Unit (FIU) and law enforcement where the legal threshold is met.
Whistleblower protection must work in practice
Luxembourg’s 2023 whistleblower legislation has a broad scope and applies to breaches of domestic law as well as directly applicable European law. It protects against retaliation and requires larger municipalities to establish internal reporting channels.
The practical effectiveness of the framework remains a concern. Potential reporters may face a complex choice among numerous external authorities, while the process for securing protection can be difficult to understand. In small municipal administrations, confidentiality is particularly challenging because colleagues may quickly identify the source of a report.
Internal channels should therefore operate outside ordinary management structures, with secure technology, restricted access and clear escalation procedures. Staff should receive practical guidance on the difference between a workplace concern, a disciplinary matter, a suspected offense and a report that may require immediate notification to the public prosecutor.
Training should use realistic examples involving bribery, false invoices, procurement manipulation, conflicts of interest and unexplained benefits. Protection is credible only if employees believe that reports will be handled confidentially and that retaliation will have consequences.
A national strategy should include municipal financial crime risks
Luxembourg is developing a national risk assessment (NRA) and intends to follow it with a national anti-corruption strategy. Municipalities should be an explicit part of that process.
The strategy should map the relationship between corruption and money laundering, identify the predicate offenses most likely to arise at local level and establish measures for prevention, detection, reporting, investigation and confiscation. It should also define responsibilities among municipalities, the Ministry of Home Affairs, the Ministry of Justice, the police, prosecution authorities, the Financial Intelligence Unit and other supervisory bodies.
The Corruption Prevention Committee could play a stronger role by collecting statistics, monitoring implementation, publishing best practices and supporting municipalities with risk indicators and practical guidance. Its composition should include municipal authorities and civil society, while its activities and results should be made public.
The priority is implementation
Luxembourg does not lack relevant criminal offenses or administrative controls. The central challenge is to make those controls consistent, visible and enforceable at municipal level.
The priority measures: complete a municipal corruption risk assessment, strengthen procurement transparency, record conflicts of interest, regulate and monitor outside activities, introduce meaningful asset and interest declarations, establish harmonised ethical rules for municipal staff, improve external audit and simplify protected reporting.
Local government should not be treated as a low-risk environment simply because national corruption indicators are favourable. Municipal decisions can create valuable rights, contracts and assets. Where bribery, fraud or misappropriation generates proceeds, those proceeds may be laundered through property, companies, invoices or apparently legitimate services.
Effective controls must therefore follow the money from the initial decision to the final asset. Luxembourg can only close the gap between a sound legal framework and effective prevention by connecting municipal integrity systems with predicate-offence detection, suspicious transaction analysis, and confiscation practice.
Dive deeper
EU Sanctions Helpdesk
The EU Sanctions Helpdesk platform supports European operators in complying with European Union restrictive measures (also known as sanctions) imposed worldwide.
Aimed primarily at Small and Medium-sized Enterprises (SMEs), the Helpdesk offers resources and personalised help to companies performing sanctions due diligence checks.