Luxembourg EMI and PI License in 2026: The Complete CSSF Guide
A 2026 deep dive into the Luxembourg EMI and PI licence: CSSF authorisation, capital EUR 20k-EUR 350k by scope, EUR 30,000 filing fee, statutory decision deadlines, substance rules, payment system access and EU passporting.
Luxembourg as an EMI/PI hub
Luxembourg is not the largest EMI or PI hub in the EU - that title belongs to Lithuania and Ireland - but it is one of the most prestigious. CSSF supervision is high-quality, the banking and fund ecosystem is deep, and Luxembourg EMIs and PIs are routinely accepted by institutional counterparties that would not touch a smaller-jurisdiction licensee.
Typical use cases for a Luxembourg PI or EMI: corporate payments, treasury management services, private-bank-adjacent payment products, fund-distributor cash management, institutional card issuing, and payment services tied to Luxembourg's dominant fund-services industry.
Building a business on this licence?
See what the platform covers for it: the regulator's IT questions, rails, providers and the technical part of your application.
Request demo
Capital, filing fees, process
The capital framework follows PSD2 and EMD2 directly. CSSF applies no discount.
Filing fee. EUR 30,000 paid to CSSF on submission. Among the highest filing fees in the EU but includes the regulator's substantive assessment.
Timeline. By law the CSSF must decide within three months of receiving a complete application, and in any case within 12 months of receiving it. If no decision is taken by then, the application counts as refused (Article 7(5) for PIs and Article 24-3(3) for EMIs, Law of 10 November 2009 on payment services). In practice the preparatory meetings and follow-up questions mean straightforward files take 6 to 9 months, and complex ones (multiple services, cross-border group structures, novel business models) up to 12 months.
Substance. The law asks for the central administration and the registered office to be in Luxembourg, and for at least part of the payment or e-money business to be carried out there (Articles 11 and 24-7 of the Law of 10 November 2009). In practice that means a real office and people in Luxembourg who run the business day to day. Outsourcing of operational functions is allowed but must not impair internal control or CSSF supervision.
Banking, safeguarding and rails
- Safeguarding banks. Luxembourg's big four (BGL BNP Paribas, BIL, Banque de Luxembourg, Raiffeisen Luxembourg) plus international subsidiaries (Bank of New York Mellon, Citi, JPMorgan Luxembourg). Onboarding timelines 2 to 4 months.
- Payment rails. SEPA and SEPA Instant through correspondent banks. No equivalent to Lithuania's CENTROlink direct-access scheme; Luxembourg PIs typically use a Luxembourg or EU correspondent for settlement.
- Payment system access since 2025. The Law of 4 April 2025, which implements the Instant Payments Regulation, lets PIs and EMIs join payment systems designated by the Banque centrale du Luxembourg. They must notify the CSSF at least two months before applying and show their safeguarding measures, governance and ICT arrangements and a winding-up plan (Articles 57-2 and 57-3). The same law allows safeguarded funds to be held in an account at a central bank, at that central bank's discretion.
- Card schemes. Typically via a BIN sponsor or via a group bank in another jurisdiction.
- Corporate tax. 23.87% combined rate in Luxembourg City since 2025: 16% corporate income tax, 1.12% employment fund surcharge and 6.75% municipal business tax. No equivalent of Malta's refund system.
Governance and supervision
CSSF governance expectations mirror the PSF bar: management that runs the institution from Luxembourg, local compliance and risk function, independent internal audit (possibly outsourced to a qualified provider), documented three-lines-of-defence. PSD2 AML, safeguarding, outsourcing, ICT and DORA obligations apply in full. Annual audited accounts and supervisory reporting required.
Ship a Luxembourg EMI or PI product with Crassula
Crassula provides the core-banking platform behind a Luxembourg EMI or PI: ledger, IBAN and wallet provisioning, card issuing through pre-integrated issuers, SEPA and SEPA Instant, customer onboarding with identity checks through connected KYC providers, and client limits. Balance and transaction reports per customer give your finance team the data to check the safeguarded account, and we describe our hosting, security and exit plan for the DORA and ICT part of your CSSF file. Transaction monitoring, safeguarding sign-off and regulatory reporting stay with your own team and tools.
FAQ
EUR 350,000 initial capital. PI capital is EUR 20k / 50k / 125k depending on PSD2 services.
EUR 30,000 on submission. Among the highest filing fees in the EU. Includes substantive assessment.
The law gives the CSSF three months from a complete application and never more than 12 months from receipt; no decision by then means refusal. In practice, 6 to 9 months for a straightforward file and up to 12 months for complex structures.
Luxembourg's administrative languages are French, German and Luxembourgish (Law of 24 February 1984 on the regime of languages). Whether a file in English is accepted is something to confirm with the CSSF at the first meeting.
Crassula provides the core-banking platform: ledger, IBANs, cards through pre-integrated issuers, SEPA rails, onboarding with connected KYC providers, and per-customer reports your team uses for safeguarding checks. We also describe our ICT setup for the DORA part of your CSSF file.
