Luxembourg CSSF Financial Supervision Brief
Headline
CSSF mandates eDesk platform for PI, EMI, and CASP prudential reporting from 1 April 2027
Executive Summary
The CSSF announced on 10 September 2026 that payment institutions, electronic money institutions, and MiCAR-authorised crypto-asset service providers must migrate prudential reporting from Excel submissions to its eDesk platform. A dedicated CSSF circular, not yet published, will replace the two existing circulars governing PI and EMI reporting. It will also introduce new reporting obligations specific to CASPs, effective 1 April 2027.
Bottom Line
From 1 April 2027, eDesk is the sole lawful submission channel for CSSF prudential reports across payment institutions, electronic money institutions, and MiCAR-authorised crypto-asset service providers. Entities that have not completed system integration or manual onboarding to eDesk by that date carry a reporting-obligation gap under the incoming framework. The forthcoming replacement circular introduces binding CASP-specific reporting requirements for the first time, meaning Luxembourg-authorised crypto-asset service providers face a new structured prudential reporting regime with no prior compliance baseline to draw from.
Key Regulatory Signals
- Hard Cutover on 1 April 2027: Payment institutions, electronic money institutions, and MiCAR-authorised crypto-asset service providers supervised by the CSSF must submit all reports due on or after 1 April 2027 exclusively through eDesk. This applies even to reports covering periods that ended before that date, such as the March 2027 monthly funds-segregation report due in April.
- Parallel Obligations During Transition: From 1 January 2027 through 31 March 2027, entities must continue submitting official reports through the current channel while simultaneously testing the new eDesk module. Test submissions during this window carry no regulatory standing and do not satisfy reporting obligations.
- New CASP Reporting Obligations Incoming: The forthcoming CSSF circular will introduce prudential reporting requirements specific to crypto-asset service providers authorised under the EU crypto-assets regulation. No equivalent structured reporting framework currently exists for this entity class under CSSF supervision; this represents a first-in-kind obligation for Luxembourg-authorised CASPs.
- Reporting Cadence Restructured Across All Entity Types: The new framework establishes quarterly reporting for financial data and human resources, monthly reporting limited to funds segregation, and annual reporting for shareholding structure, branches, agents, and distributors. Data previously collected through ad hoc manual requests will be absorbed into these structured cycles.
- API and Automated Submission Available: Entities may connect internal systems to eDesk via optional API or submit via S3 using a JSON file. Manual completion through the eDesk interface remains available. The choice of submission method does not alter the mandatory nature of the platform from 1 April 2027.
Regulatory Delta
- No direct precedent exists for CSSF prudential reporting obligations covering MiCAR-authorised CASPs; the two circulars being replaced addressed only payment institutions and electronic money institutions.
- The 1 April 2027 cutover eliminates the Excel-based submission channel entirely. All three entity classes must make operational system changes, not merely procedural ones.
- The forthcoming circular will govern reporting obligations for PIs, EMIs, and CASPs within a single instrument, consolidating what had been a fragmented supervisory data-collection regime.
Materiality Classification
HIGH — This action carries confirmed regulatory impact beyond its home jurisdiction.
Time Horizon
effective — 2027-04-01
Intelligence Outlook
Monitor the CSSF for publication of the replacement circular governing this reporting framework, which will set the binding data-point obligations for payment institutions, electronic money institutions, and crypto-asset service providers.