Who Needs an LEI in Luxembourg? A Company Checklist

Who needs an LEI in Luxembourg depends on what the entity does, not simply on whether it is registered as a company. A Luxembourg legal entity may need an LEI before a bank or broker handles a reportable trade, for derivatives reporting, or in connection with a financial client’s DORA register; other rules use an LEI only if one is available.

What this means in Luxembourg

A Luxembourg company can check its registration details through the Registre de commerce et des sociétés (RCS), operated by Luxembourg Business Registers (LBR). When an LEI is requested, the issuer validates the company’s reference data against the register using its RCS number. Having an RCS registration does not, by itself, answer whether the company needs an LEI: the activity prompting the request matters.

Consider a limited company planning to invest surplus cash in bonds through its bank, or a trading company hedging currency risk with FX forwards. The first should establish whether its bank needs an LEI before a reportable trade; the second should consider the identifier needed for derivatives reporting. A software company may instead receive an LEI request from a bank client preparing its DORA register of information. These are distinct reasons for a request, rather than a general requirement for every Luxembourg company.

For financial entities supervised by the CSSF – DORA submission timeframe for register of information, the submission period ran from 11 February 2026 to 31 March 2026 through eDesk, using a reference date of 31 December 2025. The CSSF stated that the submitting financial entity’s LEI had to be communicated to it beforehand to upload through eDesk. This concerns the submitting entity; it should not be confused with a blanket LEI requirement for every supplier named in its register.

Key points: when is an LEI mandatory?

• For a legal-entity client, an investment firm must obtain the LEI before providing a service that triggers a MiFIR transaction report.
• Derivatives and securities financing transactions have reporting rules that use LEIs to identify relevant legal entities.
• Under DORA’s register rules, an EU ICT provider that is a legal person can be identified by a valid, active LEI or EUID; only an LEI may be used for a provider established outside the Union.
• A reference to an LEI ‘where available’ does not, by itself, require a company to obtain one.

An LEI is a unique 20-character alphanumeric code based on ISO 17442. It represents one entity and connects to reference data drawn from authoritative local sources; that data is freely accessible, as explained by GLEIF – The Legal Entity Identifier (LEI).

LEI requirements by activity

Situation	Rule	Who may request or use the LEI
A company buys or sells reportable shares, bonds, ETFs or other financial instruments.	Regulation (EU) No 600/2014 (MiFIR), Article 26(6), requires investment firms to identify legal-person clients by LEI in transaction reports. Commission Delegated Regulation (EU) 2017/590 (RTS 22), Article 13(2) and (3), requires the firm to obtain and check the client’s LEI before providing a service that triggers reporting.	The bank or broker handling the reportable transaction.
A company enters into a derivative, such as an FX forward or interest rate swap.	Regulation (EU) No 648/2012 (EMIR), Article 9(1), requires reporting of derivative contracts and their modifications or termination by the following working day; reporting may be delegated. Commission Implementing Regulation (EU) 2022/1860, Article 3, specifies LEI identification for relevant legal entities and renewal of reference data for counterparty 1 and the entity responsible for reporting.	The party arranging or handling derivatives reporting, which may include the bank.
A counterparty enters into a securities financing transaction, such as a repo or securities lending.	Regulation (EU) 2015/2365 (SFTR), Article 4, requires reporting by the next working day and includes global LEIs in the reporting format.	The counterparty or its reporting arrangements.
A legal-person ICT provider is recorded in a financial entity’s DORA register.	Commission Implementing Regulation (EU) 2024/2956, Article 3(5), provides for a valid, active LEI or EUID, and both where available. For a provider established outside the Union, only an LEI may be used.	The financial-entity client preparing its register.

DORA, Regulation (EU) 2022/2554, has applied since 17 January 2025. A Luxembourg software supplier asked for an LEI by a financial client should confirm which identifier the client needs for its register. The Luxembourg DORA and ICT supplier guide covers that request in more detail.

Where an LEI is used only if available

Not every mention of an LEI creates a duty to obtain one. Under Regulation (EU) 2023/1113, Article 4, payment messages carry the payer’s and payee’s current LEI where it exists, or an available equivalent official identifier in its absence. That provision does not require a company to obtain an LEI.

For verification of payee, Regulation (EU) 2024/886, Article 5c(1)(b), allows the payer’s bank to offer verification for a legal-person payee using its IBAN together with an identifier such as an LEI, EUID or fiscal number. This is an option, not a general LEI obligation; see the Luxembourg verification-of-payee explanation.

Regulation (EU) 2024/1624 (AMLR), Article 22(1), will apply from 10 July 2027. It provides for obliged entities to collect a legal-entity customer’s LEI ‘where available’; it will not require the customer to obtain one.

Who may not need one?

A Luxembourg company with no activity that calls for an LEI, and no counterparty request for one, does not need to assume that registration in the RCS alone makes an LEI mandatory. Conversely, a company that does not trade securities should still consider whether derivatives or an ICT client request apply. The answer depends on the transaction and the entity’s role, so check an uncertain case with the relevant bank, regulator or adviser.

How to check and obtain an LEI

1. Search the entity’s name in GLEIF LEI Search before placing a new order. The public record shows whether an existing LEI has ISSUED or LAPSED status.
2. Identify why the LEI is requested: a reportable trade, derivatives or securities financing reporting, or a financial client’s DORA register. Give the bank or client the identifier it needs for that purpose.
3. If the entity has no LEI, prepare its RCS number and registration details. GLEIF – Get an LEI: find LEI issuing organizations says an entity may use any issuer accredited for its jurisdiction, not only an issuer in its own country.
4. If an existing record has LAPSED status, address its renewal rather than assuming a new identifier is needed. For EMIR reports, the specified counterparties must ensure their LEI reference data is renewed in accordance with the accredited issuer’s terms.

For Luxembourg applicants, LEIFast lists a new LEI at 49 € for 1 year, 135 € for 3 years or 195 € for 5 years, with the GLEIF fee included and tax added where required. See LEIFast prices for Luxembourg before ordering. For an existing LEI, see LEIFast’s transfer page. LEIFast is a Registration Agent of WM Datenservice, a GLEIF-accredited issuer; it does not issue LEIs itself.

If a bank or client has requested an LEI, first check the public record and confirm the reason for the request. If the Luxembourg entity has no LEI, use the LEIFast order form for a new LEI with its RCS details.