In its 2025 National Risk Assessment (NRA), Luxembourg has taken a significant step by classifying virtual asset service providers (VASPs) as high-risk entities for money laundering. This decision sheds light on the growing concern regarding the cryptocurrency sector’s vulnerability to financial crime.
The report indicates that several factors contribute to the high-risk classification of VASPs, including transaction volumes, client outreach, distribution channels, and the international scope of their operations. This assessment follows a trajectory of heightened scrutiny towards the crypto industry, initially identified as an emerging risk in the 2020 report, and subsequently labeled as facing very high risk in the 2022 assessment due to its internet-based and cross-border nature.
EU’s Emerging Regulatory Framework
As a founding member of the European Union, Luxembourg is at the forefront of evolving crypto regulations aimed at enhancing oversight within the industry. A pivotal element of this regulatory framework is the Markets in Crypto-Assets (MiCA) directive, which advocates for uniform crypto regulation across all 27 EU member states. In recent months, crypto asset service providers have begun obtaining licenses to legally operate within the EU, with companies such as Kraken and Crypto.com successfully launching regulated services.
MiCA also sets forth new requirements for stablecoins, a sector where Tether (USDT)—the market leader—has declined to comply with the new regulations, consequently facing actions from various platforms including Crypto.com, Coinbase, and Binance, all of which have begun to delist USDT on their EU platforms.
Cryptocurrency and Money Laundering Risks
With the increasing integration of cryptocurrencies within the global financial ecosystem, their attractiveness for illicit activities, particularly money laundering, has surged. Recent reports have detailed instances such as the arrest of twelve individuals involved in a substantial cross-border money laundering operation in Hong Kong, where approximately 15 million dollars were laundered through numerous bank accounts.
In a related effort, European law enforcement successfully dismantled a purported “mafia crypto bank,” resulting in the arrest of 17 individuals and the seizure of assets valued around 23.5 million euros, which included substantial cash, crypto, high-end vehicles, and weaponry.
As these events unfold, it becomes clear that enhanced regulatory frameworks and vigilance are essential in the fight against money laundering in the crypto space. The steps taken by Luxembourg and other EU member states illustrate a proactive approach to addressing these looming challenges and safeguarding the integrity of the financial system.
