CSSF - who it supervises in fintech
52 licensed entities in the official registers and 12 source-verified catalogue providers answer to Commission de Surveillance du Secteur Financier.
The CSSF supervises Luxembourg's financial centre - funds, banks, payment and e-money institutions and, under MiCA, crypto-asset service providers. For fintech infrastructure it matters far beyond the country's size: cross-border acquirers, PSP treasuries and several of the catalogue's heavyweight providers run on CSSF authorisations passported across the EEA. Official site: CSSF.
In the official registers
Register-sourced rows for this authority (EBA PSD2 + ESMA MiCA; as-of dates on each row). Registers have no legal significance - confirm current status with the supervisor.
| Licence class | Entities | Official register rows |
|---|---|---|
| Payment institutions | 21 | browse the rows → |
| E-money institutions | 18 | browse the rows → |
| MiCA crypto-asset service providers | 13 | browse the rows → |
Verified providers under CSSF supervision (12)
Catalogue providers whose official register row names this authority - each verified at source and cross-linked to its row:
Local IBANs: GB DE LU
Banking Circle S.A. (Luxembourg) - cross-border banking, accounts, payments and settlement for banks, PSPs and fintechs; issues the EURI euro stablecoin. Credit institution, CSSF (LUB00000408); not the unrelated 'Circle Group S.A.'.
Bitstamp (HQ Luxembourg; founded Slovenia 2011) - one of Europes oldest exchanges. CSSF MiCA CASP (16 May 2025). Acquired by Robinhood (US, 2025).
Clearstream Digital Custody (Clearstream Banking S.A., Deutsche Boerse group, Luxembourg) - institutional digital-asset custody and settlement (D7). CSSF-authorised.
LUXHUB (Luxembourg; founded 2018 by four Luxembourgish banks - BCEE, BGL BNP Paribas, Banque Raiffeisen and POST Luxembourg) - open-banking API platform: PSD2 compliance-as-a-service, AIS/PIS connectivity, and mutualised compliance for banks; selected by six Luxembourg banks as their Verification of Payee (VoP) provider under the Instant Payments Regulation.
Local IBANs: LU
Mangopay (Mangopay S.A., Luxembourg) - marketplace and platform payments with per-user virtual IBANs. EMI, CSSF.
Satispay (Satispay Europe SA; Italy / Luxembourg) - an independent Italian A2A mobile payment network and circuit. EMI Luxembourg (CSSF, reg W00000010), authorised by the Bank of Italy.
Unzer (Germany) - PSP and Wero acquirer. BaFin-licensed FI (DE + CSSF Luxembourg + Denmark FSA). NB: BaFin onboarding ban (2022) lifted Oct 2024.
Worldline (France) - large EU acquirer and issuer processor; acquired Ingenico (2020) and runs the PAYONE JV. FCA Payment Institution authorisation (UK).
3S Money (London, UK; founded 2018) - multi-currency business accounts for international trade: local accounts in the UK, Netherlands, Luxembourg, Denmark and Germany with multi-currency IBANs for high-value corporate payments. Licensed EMI with the FCA (UK) and CSSF (Luxembourg), plus DFSA (UAE) and Hong Kong registrations.
PPRO (London, UK; founded 2006 in Munich) - local-payments infrastructure for PSPs and enterprises: acquiring, collection and processing of local payment methods worldwide under one contract/API (clients include Citi, PayPal, Adobe). EEA rail via PPRO Payment Services S.A. (Luxembourg PI, CSSF) + UK FCA entity. Register-sourced: Payment institution (PI), Commission for the Supervision of Financial Sector, ref Z00000022; passported to 30 EEA states.
Zodia Custody (UK origin; Standard Chartered, Northern Trust, SBI). EEA entity Zodia Custody (Europe) S.A. - CSSF MiCA CASP (custody + transfers).
Convera (US; ex-Western Union Business Solutions) - B2B cross-border payments & FX, 140+ currencies, ~USD 190bn/yr. US origin - contrast. EEA rail: Convera Europe S.A. (Luxembourg PI, CSSF) - see the licence register entry.
Where licences cluster - and why regulator geography is strategy - is mapped from our own register dataset in who holds Europe's fintech licences. See all verified providers headquartered there: fintech infrastructure in Luxembourg.
FAQ
Who does the CSSF regulate in fintech?
Luxembourg-authorised payment institutions, e-money institutions and MiCA crypto-asset service providers - alongside the banks of the financial centre (supervised with the ECB). The register rows on this page are the official EBA and ESMA records for Luxembourg.
Why do payment companies choose Luxembourg?
A supervisor experienced with cross-border financial business, an ecosystem built for passporting, and credibility with banking counterparties. The trade-off is a demanding authorisation process - which is partly the point: a CSSF licence signals substance.