The Luxembourg Commission de Surveillance du Secteur Financier (CSSF) has published a 2026 update to its Sub-Sector Risk Assessment on Specialised Professionals of the Financial Sector providing corporate services (SSRA TCSP), revising the 2020 assessment and updating recommendations for the sector. The CSSF expects all supervised entities carrying out trust and company service provider (TCSP) activities to incorporate the assessment’s findings, conclusions and recommendations into their AML/CFT frameworks to ensure ML/FT risks are effectively mitigated. The review was prepared with support from the Public-Private Partnership for specialised professionals of the financial sector (PPP PSF-SP), involving representatives from ALCO, L3A, LPEA, LAFO, ALRiM, Luxembourg’s Financial Intelligence Unit and the CSSF. It draws on subsequent Luxembourg risk work, including the 2022 vertical risk assessments on legal persons and legal arrangements and on terrorist financing, the revised 2025 National Risk Assessment of Money Laundering, and the 2023 FATF Mutual Evaluation Report, and adds new sections and appendices covering terrorist financing risks, proliferation financing risks, new or developing risks, and high-level summaries on banks and investment firms performing TCSP activities.