Skip to main content

Luxembourg (LU)

Luxembourg is a tiny but remarkably prosperous constitutional monarchy at the heart of Europe — a founding member of both the EU and NATO — celebrated as the world's most productive economy per capita, the EU's premier financial centre, and home to the highest minimum wage on the continent.

Capital: Luxembourg City
Region: Europe
Language: Luxembourgish
Currency: EUR (€)
Cost of living: Very expensive (index 90)
Emergency: 112

Scam Warnings

Common scams targeting expats in Luxembourg.

Luxembourg has a low crime rate overall but scams are rising, particularly in three areas: investment fraud exploiting the country's financial reputation, rental fraud driven by one of Europe's most acute housing shortages, and LuxTrust/MyGuichet phishing. Three golden rules: never approve a LuxTrust authentication you did not initiate, never pay a rental deposit before an in-person viewing, and check every investment firm at cssf.lu before transferring money.

Investment and cryptocurrency fraud targeting finance professionals

critical

Luxembourg's large financial community is specifically targeted by sophisticated investment fraudsters. The CSSF issued 757 public warnings and received a rising number of reports in 2025, noting an increasing number of fake websites using names like "Luxembourg Invest," "LUX Advisory," or "LX Management" to falsely imply regulatory oversight. A July 2025 CSSF alert warned of fraudsters impersonating the CSSF itself to claim false tax refunds or recovery fees. "Pig butchering" romance-investment hybrid scams are also present: a romantic contact builds trust over weeks before introducing a fraudulent trading platform.

How to spot it
  • - Unsolicited approach via LinkedIn, WhatsApp, or a dating app about investment opportunities
  • - Guaranteed or very high returns (5 % or more monthly) with little or no stated risk
  • - Platform is newly created and not found in the CSSF supervised entities register (cssf.lu)
  • - Difficulty withdrawing funds; new "tax" or "compliance" fees required to release money
  • - Romantic component preceding the investment pitch — building personal trust before the ask
  • - Platform name contains "Luxembourg," "LUX," or "EU" suggesting false regulatory coverage
What to do: Check cssf.lu to verify any investment firm is CSSF-registered before transferring money. Never invest based on unsolicited social media or messaging app contact. Report suspected investment fraud to CSSF (cssf.lu/en/financial-fraud) and Police Grand-Ducale (police.public.lu).

LuxTrust and MyGuichet.lu phishing

critical

Fraudsters send fake emails and SMS impersonating LuxTrust, MyGuichet.lu, the ACD (Administration des contributions directes — tax authority), SECU, or CNS. They ask you to "confirm your identity" or "update your credentials" via a fake link that leads to a pixel-perfect copy of the real portal. If you authenticate, criminals gain access to your government accounts, tax filings, and potentially your bank. The CSSF has also warned specifically about fraudsters impersonating CSSF to contact consumers.

How to spot it
  • - URL is not luxtrust.lu, guichet.lu, impotsdirects.public.lu, or a *.public.lu domain
  • - Email or SMS asks you to click a link to "verify," "renew," or "update" your LuxTrust account
  • - Request for your LuxTrust PIN, activation code, or one-time password via phone or email
  • - Urgency language: "Your account will be suspended in 24 hours"
  • - Grammar or formatting inconsistent with official Luxembourg government communications
What to do: Never click links in messages about LuxTrust or government portals — always navigate directly by typing the URL. LuxTrust and Luxembourg government authorities will NEVER ask for activation codes or PINs by phone or email. Report phishing to abuse@luxtrust.lu and to GOVCERT.LU (govcert.lu), Luxembourg's Computer Incident Response Centre.

Fake rental listings exploiting the housing crisis

critical

Luxembourg's extreme housing shortage — among the most acute in Europe — means renters are under intense pressure to commit quickly. Criminals post fake apartment listings on athome.lu, immotop.lu, and social media at prices slightly below the (already very high) market rate to seem plausible. The "landlord" is typically abroad and requests an advance deposit by bank transfer or crypto before any viewing. Luxembourg's average advertised rents for a two-bedroom apartment often exceed €2,000 per month, meaning deposits of €4,000–6,000 or more can be lost.

How to spot it
  • - Landlord requests a deposit BEFORE any viewing of the property
  • - Landlord claims to be abroad and cannot show the property in person
  • - Price is noticeably below market rate for the location and size
  • - Communication is via WhatsApp or email only — no Luxembourg or Belgian phone number
  • - Photos look professionally staged but landlord cannot answer specific questions about the property
  • - Offer to send keys by post without a visit or identity check
What to do: NEVER transfer any money before physically viewing a property and verifying the landlord's identity and ownership. Report fake listings to Police Grand-Ducale (police.public.lu) and the platform. For high-value transactions, use only estate agents registered with the Chambre Immobilière du Grand-Duché de Luxembourg.

Fake IT support and remote access fraud

warning

A browser pop-up or cold call claims your computer has a "virus" or has been "hacked" and directs you to call a support number or install remote access software. The caller poses as Microsoft, Apple, or your bank's IT department and either installs malware, accesses banking credentials, or charges for fake technical services. Since June 2026, Police Grand-Ducale has operated a "Ligne bleue" for non-urgent citizen reports.

How to spot it
  • - Unsolicited browser pop-up with an alarming message and a phone number to call
  • - Cold call from "Microsoft," "Apple," "Windows security," or your bank's IT claiming to detect a problem
  • - Request to install remote desktop software (TeamViewer, AnyDesk, UltraViewer)
  • - Request for payment via gift cards, cryptocurrency, or wire transfer for "tech support services"
What to do: Microsoft, Apple, and banks do NOT call you unsolicited about computer security. Close the pop-up immediately (use Task Manager if needed) and hang up. Do not install any software requested by unsolicited callers. Run your own antivirus. Report to Police Grand-Ducale cybercrime unit (police.public.lu).

Work authorisation scams targeting non-EU nationals

warning

Fraudulent immigration consultants and fake job agencies charge non-EU nationals substantial fees for Luxembourg job offers or work permit assistance. Victims may pay thousands of euros for fabricated employment contracts or promised residence permits that never materialise. Luxembourg's genuinely tight labour market and high wages make these promises believable.

How to spot it
  • - Any request for significant upfront payment for a job offer or work permit "processing"
  • - Job offer from an employer you have not interviewed with — delivered via a third-party intermediary
  • - Promise to "guarantee" a Luxembourg residence permit for a fee
  • - Urgency: "Act now or the position will be filled"
  • - No verifiable physical Luxembourg company address (check lbr.lu)
What to do: Legitimate Luxembourg employers do not charge employees for job offers. Work permits are applied for by the employer with the Direction de l'Immigration at no cost to the employee beyond the standard €80 government application fee. Verify any employer at lbr.lu (Luxembourg Business Registers). Report to Police Grand-Ducale and Direction de l'Immigration (guichet.lu).

Overpayment and fake cheque scam for goods sold online

warning

When selling items on Anibis.lu, Facebook Marketplace, or second-hand groups, a buyer "accidentally" sends a cheque or bank transfer for more than the agreed price and asks you to refund the difference. The original payment is later reversed or the cheque bounces, leaving you out of pocket by both the item and the "refund." Vehicles and electronics are the most common target items.

How to spot it
  • - Buyer offers to pay by cheque for a peer-to-peer marketplace transaction
  • - Payment amount is more than the agreed sale price with a request for a cash or transfer refund
  • - Buyer is willing to purchase without viewing or testing the item in person
  • - Buyer communicates only via WhatsApp and is not located in Luxembourg
What to do: Only accept SEPA bank transfers (not cheques or international wires) and wait until your own bank confirms the funds are fully cleared — not just pending — before handing over goods or sending any refund. Cheques can take ten or more business days to bounce. Meet buyers in person. Report fraud to Police Grand-Ducale.

CSSF and financial regulator impersonation

warning

A new and specifically Luxembourg-relevant scam: criminals impersonate CSSF officers, claiming the victim has failed to pay taxes on crypto-asset gains or that their funds are "frozen" pending a compliance check, and demanding payment to resolve the matter. The CSSF issued a dedicated public warning about this in 2025, noting victims were being contacted by phone and email.

How to spot it
  • - Unsolicited call or email from someone claiming to be a CSSF officer or inspector
  • - Demand for payment of a "tax," "fine," or "compliance fee" to avoid legal action
  • - Request for sensitive financial information (account numbers, portfolio details)
  • - Caller threatens confiscation of funds or criminal prosecution unless you pay immediately
What to do: The CSSF does not initiate unsolicited phone calls demanding payment. If you receive such a call, hang up. Verify by contacting CSSF directly at cssf.lu using the published contact details. Report impersonation immediately to CSSF and Police Grand-Ducale (police.public.lu).

Reporting

Where to report: Police Grand-Ducale cybercrime unit: police.public.lu (online reporting form available). GOVCERT.LU (Computer Incident Response Centre Luxembourg — CIRCL) for cyber incidents: govcert.lu. CSSF (financial and investment fraud): cssf.lu/en/financial-fraud. Direction de l'Immigration (immigration fraud): guichet.lu. Consumer rights: Direction de la protection des consommateurs (mpc.gouvernement.lu) and ULC (ulc.lu).

Consumer helpline: ULC (Union Luxembourgeoise des Consommateurs): +352 49 60 22-1 or ulc.lu — consumer advice and complaints (weekdays). GOVCERT.LU for cybercrime and phishing reports: govcert.lu (24/7 online reporting).