Mind the gap – is Luxembourg ready?

The European Union AML Package marks the most far-reaching reform of Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) regulation in the EU’s history. With a single EU rulebook, reinforced supervisory powers through AMLA and strict implementation deadlines, the regulatory transition has now entered an operational phase.

Luxembourg starts this transition from a position of strength. Its financial sector benefits from mature AML frameworks, long-standing cross-border supervision experience and a well-established compliance culture. Yet the Luxembourg findings of the EMEA AML Survey 2026 reveal growing tension between this confidence and the level of concrete actions taken to prepare for the new framework.

Based on responses from a highly representative sample of Luxembourg financial institutions and benchmarked against EU and international peers, this report highlights where Luxembourg is well positioned, and where inaction, underinvestment and overreliance on manual processes may expose firms to regulatory, operational and strategic risk as the July 2027 deadline approaches.

Luxembourg institutions widely acknowledge that the EU AML Package will have a material impact on their operations. Three quarters of respondents expect at least a medium impact, implying a reallocation of AML resources of 5% or more. Despite this, many firms have yet to translate awareness into concrete preparation.

Only a minority of Luxembourg respondents have conducted a full impact assessment, and Luxembourg ranks as the most inactive EU country in terms of updating AML operating models. This gap between perceived impact and action suggests a risk of overconfidence, compounded by reliance on group-level instructions and wait-and-see strategies.

With regulatory scrutiny increasing and hard deadlines approaching, delayed decision-making may significantly constrain firms’ ability to adapt smoothly and cost-efficiently.

Have you already done a detailed analysis of practical implications of the new EU AML Package (especially the AMLR and RTS)?

Operationally, the EU AML Package does not represent a complete overhaul for Luxembourg, but rather a series of targeted yet impactful changes. The survey identifies Customer Due Diligence (CDD) onboarding and periodic reviews as the controls most affected by the new framework.

Despite this awareness, alignment with the CDD regulatory technical standards remains limited, and remediation efforts are predominantly planned in-house, even as many firms report no intention to increase headcount or outsource activities. In parallel, risk assessment and fraud prevention processes remain highly manual compared with EU peers.

These factors create a cumulative operational risk: incremental regulatory changes may trigger significant strain on already stretched AML functions if left unaddressed.

Percentage of respondents who have NO initiatives to update their AML/CTF target operating model

Technology and data readiness emerge as critical weaknesses in the Luxembourg market. Firms report strong concerns around data collection and reporting requirements, yet continued underinvestment in digital tools. On average, Luxembourg firms allocate less of their AML budget to technology than EU peers, and investment in AI for AML has declined further since 2024.

While some institutions are exploring the use of AI, adoption remains cautious and focused on relatively basic solutions. Advanced use cases, particularly for transaction monitoring and fraud detection, remain limited. At the same time, many firms express confidence in systems that still rely heavily on manual processes.

The survey findings suggest that without accelerated and more strategic investment in digital infrastructure, data quality and automation, Luxembourg risks falling behind both regulatory expectations and competing financial centres.

Is your AML Risk Assessment standardised and automated?

PwC has created an AML benchmarking tool that allows organisations to compare their AML practices to the overall market trends. Users can now see how their industry and national peers are reacting to specific provisions and articles of the EU AML Package, as well the operational and technological trends that are developing across EMEA.

• Insights can be tailor-made to compare organisations to their peers at the national or regional levels, as well as within or across industries.
• Since the benchmarking tool includes the 2024 and 2026 survey data, organisations can see how trends have developed over time.
• PwC can provide bespoke presentations to executive boards. If they have not participated in the AML survey yet, they can be benchmarked to provide the most accurate results.

Please reach out to us to programme a customised benchmarking session.