guide

Last updated June 25, 2026

CSSF Source of Funds and Source of Wealth Evidence in Luxembourg: AML/CFT Customer Guide

Direct answer

Source of funds and source of wealth requests can feel repetitive until you see the AML logic behind them. This article explains how Luxembourg professionals use a risk-based approach, why source of funds is not the same as source of wealth, and how customers can build a clearer evidence file with a document index, a money-route explanation, and records that match the profile and transaction. It is especially useful if a bank or supervised professional is asking follow-up questions and you want to understand what they are trying to verify.

Source of funds usually explains the immediate money used in a transaction or relationship: salary, sale proceeds, dividend, inheritance transfer, savings, loan disbursement, business revenue or liquidation proceeds. Source of wealth usually explains how the customer accumulated overall wealth: employment history, business ownership, investment gains, family wealth, property sales or long-term savings. The two overlap, but they answer different questions.

This guide is for customers, founders, investors, compliance analysts, expats, payment users and advisers who need to respond to a bank, payment institution, e-money institution, investment firm, fund service provider or other CSSF-supervised professional without turning an AML request into a dispute. It is not legal advice and does not replace the professional's own AML/CFT obligations.

Official sources used

This guide uses the CSSF AML/CFT page, the CSSF financial-crime page, CSSF materials on AML/CFT supervision and relevant CSSF customer-facing AML/CFT context as the source base. Source check date: 20 May 2026. Readers should verify the current CSSF page and their provider's instructions before acting.

• CSSF: Anti-Money Laundering and Countering the Financing of Terrorism
• CSSF: Financial crime
• CSSF: Fight against money laundering and terrorist financing
• CSSF: Search entities
• CSSF AML/CFT onboarding checks guide
• CSSF AML/CFT supervision inspections guide

Understand what the professional is trying to prove

An AML/CFT request is not only an administrative form. The professional is trying to understand whether the customer's identity, activity, wealth, transaction pattern and funds are coherent with the relationship. The request may feel intrusive, but the compliance question is concrete: can the professional explain why the money is legitimate and why the relationship fits the customer's profile?

The CSSF AML/CFT page describes the CSSF's role in ensuring that persons subject to its supervision comply with professional AML/CFT obligations and implement a risk-based approach. For customers, that means evidence requests can vary by risk and product.

A low-risk salaried employee opening a basic account may need less evidence than a complex cross-border company, politically exposed person, crypto investor, private banking client or customer using opaque corporate structures. The same amount can be routine for one profile and unusual for another.

The best response is therefore not to argue that another customer was asked for less. It is to make your own profile coherent.

Separate source of funds from source of wealth

Customers often answer a source-of-wealth question with a source-of-funds document. A bank asks how wealth was accumulated; the customer sends the latest bank statement. That may prove current balance but not explain the economic origin of that balance.

Source of funds is transactional. It asks where this transfer, deposit or subscription money came from. Source of wealth is biographical and economic. It asks how the customer built the wealth that makes the transaction plausible.

A complete pack often needs both. For example, a property sale may be the source of funds for a new investment, while the customer's source of wealth may be employment income used to buy the property years earlier plus appreciation.

The article should help readers answer both questions in one coherent narrative.

Use a document index instead of sending scattered files

The professional should not have to reconstruct the story from random screenshots. A document index makes the pack reviewable. It names each document, date, issuer, amount and relevance.

A good index might include a salary contract, six months of payslips, tax assessment, savings account statement, property sale deed, notary statement and transfer confirmation. Each item should connect to the explanation.

Screenshots should be secondary where formal documents exist. If screenshots are used, include full context, dates and account identifiers where safe. Cropped images without names, dates or source can create more questions.

The index also protects the customer. If the professional later asks for documents already supplied, the customer can refer to attachment numbers and dates.

Explain the money route

The origin of money and the route of money are different. A salary may be legitimate, but if funds moved through multiple accounts, platforms, currencies or third parties, the route still needs explanation.

A route map should show account A to account B to investment account, including dates and amounts. It should explain any third-party account, exchange platform, family transfer, company account, escrow account or notary account.

Unexplained detours are a common reason for follow-up questions. They can look like layering even where the customer has a legitimate explanation. The goal is not to hide complexity but to explain it before it becomes suspicious.

A simple table often works better than a long letter: date, from, to, amount, currency, purpose and document reference.

Match the evidence to the customer profile

An employed customer can usually document income through employment contract, payslips, employer certificate, tax returns and bank statements. A freelancer needs invoices, contracts, tax filings, business accounts and client payment records. A founder needs company accounts, sale agreements, dividend decisions or liquidation documents.

A retired customer may need pension statements, savings history, sale proceeds and tax assessments. A student or dependent may need family support documents and the supporter source-of-funds evidence. A recently relocated expat may need documents from several countries.

The professional's risk review looks for coherence. If a student sends a large transfer without explaining family support or inheritance, the profile and funds do not match. If a founder sends a large dividend without company records, the source remains incomplete.

Evidence should therefore be profile-specific, not generic.

Prepare for high-risk triggers

Certain facts can intensify due diligence: high value, unusual transactions, high-risk countries, complex ownership, cash-intensive activity, crypto proceeds, politically exposed persons, sanctions exposure, adverse media, sudden account changes, inconsistent documents or third-party funding.

A high-risk trigger does not automatically mean wrongdoing. It means the professional must understand more. Customers should answer with more structure, not more irritation.

Where high-risk geography is involved, include legitimate purpose, counterparties, contracts, tax documents and route explanation. Where a PEP or family connection exists, disclose accurately and provide public-role context where relevant.

Attempting to minimize or obscure a trigger can make the file worse. A clear explanation is usually safer.

Treat crypto proceeds with extra care

Crypto-related source-of-funds packs often fail because customers send exchange screenshots without explaining acquisition, trading history, wallet ownership, conversion route and tax treatment. The professional needs to understand how the crypto value was acquired and converted.

Useful evidence can include exchange account statements, transaction history, wallet addresses, purchase records, sale records, tax filings, mining records or employer/payment records where relevant. The pack should avoid jargon and explain the sequence in ordinary language.

If funds moved through self-custody wallets, document wallet control and transaction hashes. If funds came from DeFi activity, expect complexity and possible refusal where the provider cannot get comfortable.

Do not assume that blockchain transparency alone is enough. AML/CFT review still needs customer identity, economic purpose and source explanation.

Handle inheritance and gifts with formal documents

Inheritance and gifts are common legitimate sources but often poorly documented. A customer may send a message from a parent or executor, but the professional may need formal evidence: probate, notarial deed, estate distribution, gift agreement, bank transfer record and evidence of the donor's source where risk requires it.

For family gifts, identify donor, relationship, amount, date, purpose and whether repayment is expected. If the donor is funding a property purchase, investment subscription or relocation account, the donor's own source of funds may matter.

For inheritance, distinguish the estate source from the transfer route. A notarial account, executor account or estate account can explain the immediate route.

The goal is to show that the money is not unexplained third-party funding.

Use tax documents carefully

Tax documents are powerful because they connect income, wealth and official reporting. They can include tax assessments, returns, certificates, employer statements or corporate accounts. But they should be used carefully because they contain sensitive personal data.

Provide the relevant pages, explain what each document proves, and redact unrelated data only where redaction does not destroy evidentiary value. If redaction is extensive, explain why.

Tax documents can prove long-term income better than a current bank statement. They are especially useful where wealth accumulated over years.

If tax filings are pending or unavailable due to relocation, explain timing and provide substitute evidence.

Explain business proceeds and founder wealth

Business owners need a stronger pack than salaried employees because business money can come from revenue, shareholder loans, dividends, asset sales, company sale proceeds, director remuneration or intercompany flows. Each has different evidence.

A founder receiving sale proceeds should provide the sale agreement, closing statement, cap table or shareholding evidence, board or shareholder decisions where relevant, tax evidence and bank transfer records.

A business account receiving customer payments should not be treated as personal source-of-wealth evidence without explanation. Separate company revenue from personal wealth extraction.

For Luxembourg onboarding, this distinction is important because banks and other professionals need to know the customer, beneficial owner and transaction purpose.

Handle property sale proceeds

Property sale proceeds can be strong evidence when properly documented. Useful documents include purchase history, sale agreement, notarial deed, mortgage redemption statement, tax or municipal documents and bank receipt from the notary or buyer.

The pack should explain whether the customer owned all or part of the property, whether there was a mortgage, how net proceeds were calculated and where funds were transferred.

If the property was inherited or gifted before sale, include that earlier source as well. The sale explains immediate funds, but source of wealth may require acquisition history.

A clean property file can answer both source-of-funds and source-of-wealth questions.

Document third-party payments

Third-party payments require special care. A professional may ask why funds are coming from someone other than the named customer. Legitimate reasons include spouse support, parent support, employer reimbursement, notary transfer, escrow release, loan disbursement or corporate payment.

The evidence should identify the third party, relationship, legal basis, source of their funds where needed and why the money belongs to or benefits the customer.

If the third party is a company, include company authority and beneficial ownership context. If it is a family member, include relationship and gift or loan terms.

Unexplained third-party funding is a common AML/CFT concern. Explain it early.

Use a concise explanation letter

A source-of-funds pack should include a short explanation letter. The letter should state who the customer is, what transaction or relationship is being reviewed, what the source of funds is, what the source of wealth is, what documents are attached and how the money moved.

The letter should be factual rather than defensive. It should not accuse the professional of harassment or discrimination. If the request seems excessive, answer first and then ask for clarification.

A useful structure is: profile, transaction, source of funds, source of wealth, route, attachments, open points. This lets the compliance reviewer follow the evidence.

The letter should be updated if new documents are added.

Respond to follow-up questions without contradiction

Follow-up questions are common. They do not necessarily mean the file is failing. They may mean the reviewer needs a missing date, document, explanation or confirmation.

Answer follow-ups consistently with the original pack. If a prior answer was incomplete or wrong, correct it explicitly rather than silently changing the narrative.

Contradictions can create suspicion even where the money is legitimate. Keep a master chronology and document index so each answer uses the same facts.

If the professional asks an unclear question, ask for clarification in writing and offer the closest available evidence.

Recognize when refusal risk is rising

Refusal risk rises when the customer cannot explain ownership, cannot prove the source, refuses reasonable information, sends inconsistent documents, uses unverifiable third parties, insists on speed over evidence or reacts aggressively to compliance questions.

A professional may delay onboarding, block a transaction, restrict account activity or terminate the relationship where AML/CFT concerns cannot be resolved within its risk appetite and legal duties.

Customers should treat serious source-of-funds questions as time-sensitive. If the transaction matters, prepare a complete pack rather than arguing over principle.

Where a refusal occurs, ask for the reason the professional is able to provide and preserve the record for complaint or adviser review.

Know what not to send

Do not send forged, altered or misleading documents. Do not crop documents to hide relevant account names, dates or amounts. Do not ask someone else to route funds simply to make a transaction look simpler. Do not invent a gift or loan story after the fact.

Do not overload the provider with irrelevant private documents. More pages are not better if they do not answer the source question. A targeted pack is stronger than a chaotic archive.

Do not send passwords, full card data or unnecessary credentials. If secure upload channels are offered, use them.

If a document is unavailable, say so and provide an alternative explanation and substitute evidence.

Coordinate AML evidence with complaint strategy

Sometimes a customer dispute begins as an AML evidence request: account frozen, payment delayed, onboarding refused or relationship exited. Before filing a complaint, assess whether the professional asked for evidence that remains unanswered.

A complaint about delay is stronger if the customer can show timely and complete responses. It is weaker if the professional has unanswered questions about source of funds.

If the customer believes the request is disproportionate, the file should still show cooperation and explain why the documents supplied are adequate. Refusing to answer rarely improves the record.

The best complaint evidence is often the AML response pack itself: it proves what was supplied, when and how.

Build a reusable Luxembourg financial evidence folder

Expats, founders and investors in Luxembourg should build a reusable evidence folder before urgent requests arrive. The folder can include identity documents, residence, employment, tax, business, property, bank and investment evidence.

This does not mean sending everything to every provider. It means being able to assemble a precise pack quickly. The folder should be secure, current and organized by source type.

A reusable folder reduces friction when opening accounts, subscribing to investments, applying for credit, receiving large transfers or responding to payment questions.

It also reduces stress. Compliance review feels less personal when evidence is already organized.

Use provider portals and secure channels

Many providers ask customers to upload AML/CFT evidence through secure portals. Use the channel requested where possible, keep upload confirmations and avoid sending sensitive documents to generic addresses unless instructed.

If email is required, consider password-protected documents only if the provider accepts them and passwords are shared through a separate channel. Follow provider instructions because unreadable files can delay review.

File names matter. Use clear names such as 01-employment-contract, 02-payslips-Jan-Jun, 03-tax-assessment, 04-property-sale-deed.

After upload, keep a local copy of exactly what was submitted.

Apply the same discipline to companies and funds

Corporate customers, fund investors and professional clients need more than personal bank statements. They may need ownership charts, registers, financial statements, board resolutions, investor subscription documents, source-of-wealth declarations and beneficial-owner evidence.

Complex structures should be explained visually. A simple ownership chart can prevent confusion about who owns what and where funds originate.

If the entity receives funds from shareholders, investors, related parties or operating revenue, explain each channel separately. Mixing them creates ambiguity.

The more complex the structure, the more important it is to explain economic purpose.

Final quality check before submission

Before submitting the pack, check that the source of funds, source of wealth, money route, customer profile and transaction purpose all tell the same story. A compliance reviewer should be able to summarize the file in a few sentences.

Remove irrelevant documents, label the rest, add missing dates and confirm that amounts reconcile. If the transfer is EUR 250,000, the documents should show how that amount or a larger amount arose and moved.

Check whether the documents are current. Old evidence may explain wealth history but not current availability of funds. Combine history with recent statements where needed.

The final pack should feel like a controlled dossier, not a panic response.

Prepare a reconciliation table for amounts

Amount mismatches are a frequent source of follow-up. A customer may prove a property sale of EUR 600,000 but transfer EUR 412,350 after mortgage repayment, fees and taxes. Without reconciliation, the reviewer sees a gap. With reconciliation, the difference is ordinary.

A reconciliation table should show gross source, deductions, intermediate account balances, currency conversion, transfer fees and final amount. It should reference documents for each number. This is especially useful for property, business sale, inheritance and investment liquidation proceeds.

Where currency conversion is involved, include the exchange date, rate, provider and statement. Do not expect the professional to infer conversion from two disconnected account statements.

A clear reconciliation table reduces the number of follow-up questions and makes the file more credible.

Document purpose as well as origin

AML/CFT review is not only about where money came from. It is also about why the transaction is happening. A legitimate source can still be inconsistent with an unclear purpose, unusual destination or product mismatch.

Purpose evidence can include property purchase contracts, investment subscription documents, tuition invoices, relocation costs, business invoices, loan agreements or family-support explanations. The purpose should fit the customer's profile and expected account activity.

If the customer opens an account for salary but immediately routes large third-party payments, the activity may appear inconsistent. Explain expected activity honestly at onboarding and update the professional if circumstances change.

Purpose documentation helps the professional understand not only the past origin of wealth but the forward-looking risk of the relationship.

Know when to pause the transaction

Sometimes the safest practical decision is to pause a transaction until the evidence pack is complete. Pushing a high-value transfer through while documentation is incomplete can create delays, rejected payments, account restrictions or relationship exits.

Customers should plan ahead for property purchases, investment subscriptions, business transfers and relocation funding. Source-of-funds evidence should be prepared before deadlines become urgent.

If a deadline already exists, tell the professional early and provide the best available pack with a document index. But do not substitute pressure for evidence. Compliance teams cannot ignore unresolved AML/CFT questions because a customer is in a hurry.

A planned transaction is easier to document than an emergency transfer.

Convert provider feedback into a stronger pack

If a professional says the evidence is insufficient, ask which link in the chain remains unclear: origin, ownership, route, purpose, amount reconciliation, document authenticity, date, third party or risk factor. This turns a broad rejection into a solvable checklist.

The customer should then answer the specific gap rather than resending the same pack. If the provider asks for origin of wealth and the customer resends only current bank statements, the file does not improve.

Keep each feedback cycle documented. Record date of request, documents supplied, question answered and open issue. This can later support a complaint if the process becomes unreasonable.

A professional response that identifies a gap is useful data. Treat it as a diagnostic, not only as an obstacle.

Distinguish privacy discomfort from proportionality objections

Source-of-funds and source-of-wealth requests often feel invasive. That feeling is understandable, but it is not the same as a well-supported proportionality objection. A customer who wants to challenge a request should first identify exactly what is being requested, why it appears excessive, what risk it is meant to address and what alternative evidence can answer the same question.

A constructive response might say that a full ten-year account history contains unrelated private data, while offering tax assessments, salary certificates, annual statements and a property sale deed that prove the relevant wealth history. This approach recognizes the AML/CFT purpose while protecting unnecessary privacy exposure.

The customer should avoid a categorical refusal unless advised and prepared for consequences. A professional may be unable to continue the relationship without enough information. The better strategy is to offer proportionate, targeted evidence and ask whether it satisfies the control objective.

This distinction helps preserve the relationship and creates a better record if the matter later becomes a complaint.

Prepare for periodic refreshes after onboarding

Source-of-funds work does not necessarily end after account opening. Professionals may refresh customer due diligence when documents expire, activity changes, risk profile changes, ownership changes, large transfers occur, sanctions risk changes or monitoring identifies unusual activity.

Customers should expect some requests after onboarding, especially for business accounts, private banking, investment relationships, payment institutions and cross-border structures. A refresh request is not automatically an accusation. It may be a routine control triggered by time or profile change.

The best response is to update the existing evidence folder. Confirm what has changed, what has not changed and which documents prove the current profile. If a company changed ownership, include the new ownership chart and registers. If income increased, include new payslips, accounts or tax records.

Periodic refreshes are easier when the original file was organized. A clean first pack becomes the baseline for later updates.

Use adverse-media and sanctions context carefully

If a customer, counterparty, country, sector or transaction appears in adverse media or sanctions-adjacent context, the evidence pack needs additional care. The customer should not ignore the issue or assume the professional will overlook it.

Where the media report is wrong, outdated or about a different person, provide evidence. Where the connection is real but lawful, explain the context, dates, role and why the transaction is legitimate. Where sanctions may be relevant, obtain qualified advice before moving funds or making statements.

Do not attempt to route transactions through another person or entity to avoid questions. That can make a lawful situation look worse and may create serious legal risk.

A careful adverse-media explanation should be factual, documented and narrow. It should not make broad legal conclusions the customer cannot support.

Document beneficial ownership and control

For companies, funds, trusts and family structures, source-of-funds review often depends on beneficial ownership and control. The professional needs to understand who ultimately owns or controls the customer and who benefits from the funds.

Useful documents may include registers, articles, shareholder agreements, organizational charts, trust deeds where applicable, board minutes, signatory evidence and identification documents for beneficial owners. The exact package depends on the structure and provider instructions.

The ownership chart should show percentages, control rights and jurisdictions. If there are nominee, fiduciary or layered entities, explain their role and provide official evidence where possible.

A source-of-funds explanation without beneficial ownership clarity may fail because the reviewer cannot connect money to the person or entity behind the relationship.

Customer evidence matrix

The matrix below is a practical starting point. The right documents depend on the provider, risk profile, product, amount and country facts. Customers should not treat it as a guarantee that a professional must accept a file.

FAQ

Is a bank allowed to ask for source-of-funds evidence? CSSF-supervised professionals have AML/CFT obligations and apply a risk-based approach. The exact request depends on the relationship, product, transaction and risk profile.

Is source of funds the same as source of wealth? No. Source of funds explains the specific money used in a transaction. Source of wealth explains how the customer accumulated overall wealth.

Can a provider refuse onboarding if I do not provide evidence? A professional may be unable to establish or continue a relationship where required AML/CFT information is missing or inconsistent. The exact consequences depend on the provider and facts.

Should I complain if a request feels excessive? First build a complete and coherent response pack. If the professional's handling remains unreasonable, delayed or unexplained, preserve the evidence and assess the complaint route.

Do official CSSF pages give a customer document checklist for every case? No single checklist covers every customer. The risk-based approach means evidence should be proportionate to the specific facts.

Source risk and update note

AML/CFT rules, CSSF guidance, provider risk appetites and sanctions expectations evolve. This guide was checked against official CSSF sources on 20 May 2026. It is practical publication guidance, not legal advice, and readers should verify the current CSSF pages and obtain qualified advice for high-value, cross-border, sanctioned, criminal, tax-sensitive or litigation-sensitive matters.