Bill 8722

Today, a new law takes effect in Luxembourg. Bill 8722, passed unanimously by parliament in July and published in the official gazette on August 4, gives the country's Financial Intelligence Unit a power it has never had before: the ability to send real-time fraud alerts not just to banks, but to cryptocurrency exchanges[1].

Under the old rules, banks could freeze suspicious transactions within their own systems. But once stolen funds moved to a different financial institution, or to a crypto exchange, authorities had no statutory mechanism to notify the receiving party. The money would vanish into a wallet, get converted, and circulate beyond reach. Bill 8722 closes that gap.

The legislation traces back to a specific crime. In 2024, fraudsters impersonated executives at Caritas, the humanitarian charity, and authorized transfers totaling more than 70 million dollars. The scheme, known as CEO fraud, exploited exactly the kind of coordination failure this law addresses. By the time the fraud was detected, the funds had already moved across multiple institutions. The window for intervention had closed[2].

The numbers behind the problem are stark. Luxembourg police recorded 6'382 scam cases in 2024, up nearly 4% year over year. Fraud and scam reports submitted by financial professionals to the FIU surged 32% to more than 18'000 cases over the same period. The country's growing role as a European hub for cryptocurrency platforms, accelerated by recent EU regulatory changes, made digital asset providers an increasingly attractive target for criminals looking to convert stolen cash quickly[3].

Here is what changes today. The FIU, known locally as the Cellule de Renseignement Financier, can now proactively report suspicious account numbers to banks, payment institutions, and licensed crypto exchanges. Those providers are then empowered to block fraudulent transactions before they finalize. The alerts flow through a secure, data-compliant IT system directly to authorized financial and crypto providers operating in Luxembourg.

The law also includes a "no tipping off" rule. Banks and exchanges receiving an FIU alert are formally prohibited from notifying the affected customer or any third party that their account has been flagged. This prevents fraudsters from being warned before funds can be frozen. Information received under the alert system must also be deleted within a defined retention period once its purpose has been served[4].

The FIU director has been careful to temper expectations. He called the crypto-inclusive alert system a major step forward while cautioning that it "will not solve the whole problem" of sophisticated corporate financial crime. That is an honest assessment. The law gives authorities a tool they did not have, but it does not give them omniscience. Fraudsters adapt. The next scheme will not look like the last one.

What makes Bill 8722 interesting beyond Luxembourg is the precedent. Most countries still treat crypto exchanges as a separate regulatory category from traditional finance, with different rules, different oversight, and different enforcement mechanisms. Luxembourg has effectively said: if the goal is stopping fraud, the destination of the stolen money should not determine whether authorities can intervene. A bank account and a crypto wallet are both endpoints in the same financial system. The law should treat them that way.

The 75-member FIU operates under Luxembourg's public prosecutor's office and serves as the country's central anti-money-laundering authority. Training sessions for compliance officers at affected institutions were held on August 6, two days before the law took effect. Whether those institutions are ready, and whether the secure alert system works as designed in practice, will become clear in the coming months.

For a country that has built much of its modern identity on being a financial center, this law represents a particular kind of maturity. The tax advantages are narrowing under global pressure. The regulatory advantages have to do the work instead. Bill 8722 is, in its own narrow way, a bet that being better at enforcement is more valuable than being lighter on it.