KYC documents for company formation in Luxembourg

Which KYC documents are needed for company formation in Luxembourg?

The KYC documents for company formation in Luxembourg fall into four blocks: the identity of every natural person involved, the ownership structure and the beneficial owner, the source of the funds contributed, and the documents specific to the business permit. No text publishes a closed list of them: the professional sets it according to the risk assessed.

That split is not a presentational convenience. Each block has its own recipient, trigger and timetable: the accountant and the domiciliation agent build the first and the second, the bank requires the third before the capital can be released, and the competent ministry examines the fourth. A file that is complete for one is not complete for another.

This is the most frequent source of lost time we see: the founder believes they have handed over « the file », when they have fed only one of the four blocks. The checks expected of a professional subject to the law are described on our AML/KYC compliance page; they come before incorporation, not after it. The KYC of the business relationship, drawn from the amended law of 12 November 2004, and the legal conditions of the business permit also remain two distinct regimes, overlapping on identity papers and diverging everywhere else.

Which identity documents must the professional obtain?

The identity documents required in Luxembourg are those that allow the customer's identity to be verified on the basis of documents, data or information from a reliable and independent source, and the professional keeps a copy of them, on paper or electronically, from the moment the business relationship is entered into.

Two points that the guide published by the Registration Duties, Estates and VAT Authority for accounting and economic and tax advisory professionals settles without ambiguity, and that international files routinely overlook: for any natural person residing outside the European Union, a copy of the document on which identity was verified is mandatory, and for third-country nationals, certification is done by passport.

Identification does not stop at the customer. The persons acting for the company in its dealings with the professional, members of its bodies or agents holding powers, are identified in the same way as a natural-person customer. For a company being formed, that covers the founding shareholder, the future manager and anyone holding a power of attorney.

Keeping the documents matters as much as collecting them. At an on-site inspection, identity papers and business relationship entry forms must be accessible to the inspectors of the financial crime service on the day itself. A document requested and then never filed produces, at an inspection, the same result as a document never requested.

Which documents evidence the structure and the beneficial owner?

The structure is evidenced in Luxembourg by the documents establishing the ownership chain up to the natural persons: articles of association, extracts from public registers, a dated organisation chart showing the percentages, and foreign registers of beneficial owners where intermediate companies are interposed.

Identifying a customer that is a legal person covers, among other things, the jurisdiction in which the company was incorporated and, where relevant, the address of its principal place of business abroad; that information may come from public registers, from the customer itself or from other reliable sources. A Luxembourg company owned by a foreign entity therefore shifts the documentary burden onto that entity.

On the beneficial owner, the professional takes reasonable measures to know that person and to understand the customer's ownership structure. Each professional freely determines the scope of the information sought and the means used: consulting public registers of beneficial owners, asking the customer for data, requiring proof of identity from a reliable and independent source. The price of that freedom is traceability: the implementation of those reasonable measures must be verifiable, therefore written down and dated. The same organisation chart serves again a month later, since it is what feeds the filing with the register of beneficial owners.

What do incorporation and the bank require?

Incorporating a capital company in Luxembourg requires a notarial deed and, for a SARL, share capital of 12,000 euros fully subscribed and fully paid up at the time of incorporation, which presupposes a blocked account opened beforehand and therefore a bank file already accepted.

The mechanism is sequential, and that is what makes it fragile. The capital is paid into the account, the bank issues a blocking certificate by which it undertakes to block the funds until the company is definitively incorporated, the founder hands that certificate to the notary, and after incorporation the notary issues a release certificate to be presented to the bank. As long as the account opening file has not been accepted by the institution, no blocking certificate is issued and the notary cannot execute the deed.

It is at that precise point that the source of the funds contributed to the capital becomes decisive, and it is not evidenced with the same documents as identity: we devoted a separate article to source of funds and source of wealth.

The deadlines that follow signature are short and cumulative: the table below sets them out, and the full incorporation sequence is on our company formation page.

What does the business permit add to the file?

The business permit adds, in Luxembourg, a set of documents specific to the manager: professional standing and, where applicable, a professional qualification matching the activity applied for. Standing is assessed on criminal records, for facts no older than ten years, and on the findings of an administrative investigation.

The documents differ with length of residence, and that is the distinction foreign founders discover latest. Beyond ten years of residence in Luxembourg, a declaration on their honour covering management positions held over the last three years and a Luxembourg criminal record extract number 3 are enough. Below that, and for any non-resident, a declaration of non-bankruptcy before a notary and a criminal record extract, or an equivalent, from each state of residence over the last ten years are added.

Three conditions are not documentary but decide the outcome. The manager must have a real link with the business, as owner or as agent, and must actually and permanently ensure its day-to-day management through a physical presence at the establishment. The business must have a fixed place of operation in Luxembourg, which rules out the pure letterbox company. Lastly, the final permit presupposes registration of the articles with the trade and companies register. The detail by activity is set out on our business permit page.

Two practical markers, drawn from the procedure itself. An online application through MyGuichet using a LuxTrust product automatically generates the list of documents to attach, based on the information entered, which saves guessing. Chancery fees amount to 50 euros, settled during the procedure. The file is in principle processed within the three months following receipt of the complete file: the date that counts is not the date of filing, but the date of the last missing document.

How long does it take to assemble the file?

The time needed to assemble the file in Luxembourg is not fixed by any text: only the steps that follow the handover of the documents are, with three months in principle to examine the business permit application from the complete file, and one month for the filings with the register.

The order of operations explains most delays. The blocked account comes before the deed, the deed before registration, and registration conditions the final permit: each link waits for the previous one, so an illegible identity document sent in week one does not cost three days but shifts the whole chain. We regularly see legally simple projects stretch over several weeks for that reason alone, without any party being at fault: the documents arrive in fragments, each party chases what it is missing, and nobody keeps the consolidated list of the four blocks, the one document that acts on the whole chain rather than on a single link. No official source quantifies the bank's account opening lead time, which depends on the institution and the profile; that order of magnitude is a firm observation, not a standard.

Why is a KYC file refused?

A file is refused in Luxembourg where the professional cannot apply the required due diligence measures: it is then prohibited from carrying out the transaction, prohibited from entering into the business relationship, and must terminate an existing relationship, while considering a suspicious transaction report.

A refusal is therefore not a judgement passed on the customer, but the only course left to the professional where identification, verification or the understanding of the purpose of the relationship remains incomplete. The suspicious transaction report is filed with the Financial Intelligence Unit through its goAML portal, and a refusal to enter into a relationship is among the situations that may justify it.

On the establishment law side, the grounds are enumerated and turn less on the file than on conduct: false statements or the use of falsified documents, failure on at least two occasions to comply with filing obligations, a final criminal conviction connected with the activity, or the accumulation of substantial debts towards public creditors may found a refusal as well as a withdrawal of the permit.

Two consequences follow. The requirements must be satisfied throughout the life of the business, not only on the day of the application. And an inaccurate document weighs more than a missing one, a false statement being a self-standing ground for refusal where a missing document merely suspends the examination.

Sources and verification

Written for Financial Services Luxembourg and reviewed before publication by Mickaël LOC, licensed accountant (authorisation 10077274). The documents, thresholds, deadlines and grounds for refusal cited in this article were verified on 15 September 2026 against the official sources listed below.

On the guichet.lu side: the page on the private limited liability company, for the share capital of 12,000 euros fully subscribed and paid up at incorporation and contributions in kind valued in the articles; the page on blocking the share capital, for the blocking and release certificates; the pages on the constitutive deed, on filing the articles and on registration and publications with the trade and companies register, for registration within fifteen days and the one-month filings; the page on the declaration to the register of beneficial owners, for the one-month deadline; the page on an initial or amended business permit application, for the list of documents generated by MyGuichet, the chancery fees of 50 euros, processing in principle within three months following receipt of the complete file, the manager's real link, the physical presence and the fixed place of operation; the page on professional standing, for facts no older than ten years, the two sets of documents by length of residence and the grounds for refusal or withdrawal. On the side of the indirect tax portal of the Registration Duties, Estates and VAT Authority: the guide to professional obligations for accounting and economic and tax advisory professionals, for the mandatory copy of the identity document outside the European Union, certification by passport for third-country nationals, the identification of representatives and the verifiable character of the reasonable measures taken on the beneficial owner; the page on on-site inspections. On the justice.public.lu side: the page on filing a suspicious transaction report through the goAML portal. On the CSSF and legilux side: the amended law of 12 November 2004 and the Grand-Ducal Regulation of 1 February 2010.

Four limits must be flagged. The primary texts were not read in their original source: legilux.public.lu, cssf.lu and the PDF files on pfi.public.lu and guichet.lu are unreachable from our drafting environment, and those sources were consulted through indexed extracts. The detailed content of the « documents to attach » sheets published as PDFs by guichet.lu could not be opened: our document tables are therefore tables of practice, not a regulatory enumeration. The period of validity required of a criminal record extract could not be confirmed and is not stated. Lastly, no official source quantifies the bank's account opening lead time: the order of magnitude cited is a firm observation. Readers can confirm these points on guichet.public.lu, on pfi.public.lu and on legilux.public.lu.

This article states the law as it stands at the date of publication. The documents required, the thresholds, the deadlines and the grounds for refusal change, and any decision binding your structure must be checked on the date you rely on it. Report an error to contact@financialservices.lu: the correction is dated in the article.