Luxembourg law of 27 March 2026 brings crypto-assets into tax reporting

Parliament adopted bill 8592 on 19 March 2026, transposing DAC8. Crypto platforms now feed Luxembourg’s tax authorities, with knock-on effects for banks, fiduciaries, insurers and the advisers behind private wealth structures.

Late or missing filings trigger a flat €5,000 fine, while other breaches can cost up to €250,000.

Who reports, and when

The law of 27 March 2026, published in Mémorial A No. 144 according to the Administration des contributions directes (ACD), applies retroactively from 1 January 2026. Arendt explains that reporting crypto-asset service providers include MiCA-authorised CASPs and non-MiCA “crypto-asset operators” with a sufficient Luxembourg nexus, which must register with the ACD. Each provider identifies its users through self-certifications, covering controlling persons of entities, and files annually by 30 June. The first report, on calendar 2026, falls due on 30 June 2027, with a nil return where no reportable user exists. The parliamentary finance committee report, signed by rapporteur Diane Adehm, sets the first exchange with partner jurisdictions for 30 September 2027. Late or missing filings trigger a flat €5,000 fine, while other breaches can cost up to €250,000.

Wealth structures and their advisers

The amended CRS law widens the net for private clients. Under Arendt’s reading, “investment entity” now covers entities investing, administering or managing reportable crypto-assets for third parties, and deposit accounts extend to electronic money and central bank digital currencies. Grant Thornton notes that legal arrangements must report the role of each reportable person, whether settlor, trustee, protector or beneficiary. Automatic exchange also reaches life insurance proceeds paid after the insured’s death, unless CRS already captures them, and advance rulings for individuals on transactions above €1.5 million or fixing Luxembourg tax residence. On DAC6, lawyers covered by professional privilege need only notify their own client, following the CJEU’s 2022 ruling in Orde van Vlaamse Balies (C-694/20), whereas auditors and certified accountants must still alert other intermediaries or the taxpayer.

Platforms, groups and the MiCA deadline

The text adjusts other regimes as well. Digital platform operators may send less data when an identification service confirms a seller’s identity and tax residence, the committee report states. For country-by-country reporting, groups must collect each constituent entity’s tax identification number for fiscal years starting on or after 1 January 2028. The reform also coincides with the end of MiCA’s transitional period on 1 July 2026. Elvinger Hoss reports that only authorised CASPs may now serve EU clients, and counts 11 Luxembourg entities authorised by the CSSF on that date. Grant Thornton adds that the CSSF will notify MiCA-authorised providers to the tax authorities. DAC8 casts a wider net than MiCA, however, since its definition covers any asset usable for payment or investment, so each provider must assess its own perimeter case by case.

“Tax authorities lack the necessary information to track income from crypto assets, which are easily traded across borders,” said Jean Kizito, Partner, KPMG Luxembourg.

Story generated by AI and proofread by Marc Auxenfants