D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Bulgaria operates the Law on Measures Against Money Laundering (LMML) and Law on Measures Against Financing of Terrorism (LMFT), supervised principally by FID-SANS (State Agency for National Security) and the Bulgarian National Bank.
Sanctions is not yet covered for this jurisdiction in this report.
Beneficial Ownership is not yet covered for this jurisdiction in this report.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
Bulgaria's crypto-asset regulatory architecture completed a structural transition this cycle. The Markets in Crypto-Assets Act, in force since 8 July 2025, designated the Financial Supervision Commission as the competent authority for licensing crypto-asset service providers and supervising asset-referenced tokens, while assigning supervision of electronic-money tokens to the Bulgarian National Bank. This designation repealed the National Revenue Agency's Article 9a AML-register as the operative authorisation basis for virtual-asset service providers, a genuine narrowing of what had previously been a lighter-touch registration pathway.
The eighteen-month transitional grandfathering period, under which entities registered on the legacy NRA register before 30 December 2024 could continue operating without a MiCA licence, closed on 1 July 2026. That deadline has now passed, meaning entities that had not obtained, or been refused, FSC authorisation by that date are, in principle, no longer entitled to rely on the transitional basis. This is an architecture-level finding: the closure of a grandfathering window is a structural narrowing of the regulatory perimeter, not an isolated enforcement incident, and it is consistent with the FIM analytical principle that architecture changes carry more diagnostic weight than any single enforcement action.
Evidencing that the new regime is operationally live rather than merely transposed on paper, the FSC issued Bulgaria's first MiCA crypto-asset service provider licence, to Alaric Securities, in April 2026. This finding is treated with caution: it rests on a single lower-tier vendor source with no corroborating primary or law-firm confirmation located this cycle, and confidence is assessed accordingly.
A remaining coverage gap should be stated plainly: no Tier-1 FSC or EUR-Lex primary source was directly retrieved this cycle for the MiCA/CASP designation or the grandfathering-window closure. The findings above rest on law-firm commentary (CMS Law, Wolf Theiss) and vendor-blog sourcing rather than direct regulator or EU-instrument text, and confidence tiers on the underlying claims are capped accordingly.
The MiCA full-authorisation deadline for legacy NRA-registered VASPs sits on the regulatory horizon for the third quarter of 2026. General industry practice for legacy registrants had been to rely on the transitional grandfathering window; with that window now closed, entities that had not obtained FSC authorisation face, in principle, a compliance cliff. Watch for confirmation of any enforcement or licence-refusal action against a legacy registrant that failed to secure timely FSC authorisation, which would be the clearest incident-level test of how firmly the closure of the transitional pathway is being enforced in practice.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
Bulgaria's AML/CTF architecture received a materially positive assessment this cycle. MONEYVAL's 17 June 2026 enhanced follow-up report formally closed Bulgaria's 5th-round mutual evaluation, rating all 40 FATF Recommendations as compliant or largely compliant. This closure followed demonstrated improvement in technical compliance across eight further Recommendations: confiscation, the terrorist-financing offence, proliferation-financing-related targeted financial sanctions, non-profit organisations, correspondent banking, sanctions, and mutual legal assistance. The evaluation cycle being closed had run since April 2022, so this represents the conclusion of a multi-year monitoring process rather than a single-cycle event, an architecture-level finding consistent with the FIM principle of weighting structural findings over isolated incidents.
The source underlying this finding is a direct primary publication from the Council of Europe / MONEYVAL, and confidence is rated Confirmed, the highest tier available. The overall jurisdictional risk direction on the AML/CTF dimension is assessed as decreasing as a direct consequence of the clean evaluation closure. This should be read as a positive structural signal for Bulgaria's obliged-entity ecosystem: a jurisdiction that has closed out its mutual evaluation with full compliance or largely-compliant ratings across all 40 Recommendations presents a materially lower architecture-level AML/CTF risk profile than one still under active monitoring for outstanding deficiencies.
Bulgaria's national AML implementing instrument, the Measures Against Money Laundering Act, was positively assessed within MONEYVAL's June 2026 follow-up, though no BG-specific development regarding the EU AML Package's supervisory-perimeter shift (AMLA direct or indirect supervision) surfaced independently this cycle beyond what is captured in the mutual-evaluation closure itself.
With the 5th-round mutual evaluation now closed, the near-term AML/CTF outlook for Bulgaria is one of consolidation rather than active monitoring pressure. The improvement across eight further FATF Recommendations addressed specific technical-compliance gaps that had been outstanding since the original evaluation; the principal item to watch going forward is whether Bulgaria maintains this compliance trajectory as EU-level AML Package instruments, including AMLA's supervisory perimeter, phase in across the bloc, which would be the next structural test of the architecture just confirmed as sound by MONEYVAL.
This is a positive architecture signal reducing jurisdictional AML/CTF risk weighting for Bulgarian counterparties; historic monitoring-related reporting friction tied to the outstanding evaluation should ease going forward.
Any counterparty or client relying on the old NRA AML-register basis for VASP status in Bulgaria should now hold, or be seeking, FSC MiCA authorisation; the transitional basis is no longer available.
No material change for this persona this cycle
The closure of the mutual evaluation and the crypto-licensing transition together reduce reputational and regulatory-architecture risk associated with Bulgarian exposure, though the newly-closed crypto transitional window bears watching for residual legacy-registrant exposure.
Any technical integration with Bulgarian crypto-asset infrastructure should be verified against current FSC-licensed status rather than legacy NRA-register status, which is no longer an operative basis.
Risk models weighting Bulgarian counterparty or corridor exposure should reflect the closed mutual-evaluation status and the structurally narrowed crypto-licensing gap, both structural rather than episodic signals.
No material change for this persona this cycle
Audit trails referencing the MiCA/CASP designation and grandfathering-window closure should note the sourcing gap and seek primary-source confirmation where the finding materially informs a control decision.
Bulgaria closed its MONEYVAL 5th-round mutual evaluation with a clean compliance rating across all 40 FATF Recommendations.
Bulgaria's crypto-asset licensing regime completed its structural transition, closing the legacy NRA-register pathway on 1 July 2026.
No material change this cycle.
Bulgaria's AML/CTF architecture and crypto-licensing regime both moved in a materially positive, structurally clearer direction this cycle.
Bulgaria's crypto-asset supervisory architecture now sits fully with the FSC (CASPs/ARTs) and BNB (EMTs), with the first CASP licence issued in April 2026.
Bulgaria's jurisdictional risk direction is assessed as decreasing on the AML/CTF dimension following the clean MONEYVAL closure.
No material change this cycle.
Sourcing for Bulgaria's crypto-licensing transition rests on law-firm and vendor commentary, not direct FSC or EUR-Lex primary retrieval this cycle.
Illustrative scenario for analytical orientation only: as the AMLA Regulation (Reg (EU) 2024/1620) phases in direct and indirect supervision of cross-border obliged entities, alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-member-state 6AMLD transposition, jurisdictions that have just closed national transitional pathways, such as Bulgaria's MiCA grandfathering window closure this cycle, could see a second layer of supervisory tightening as AMLA's perimeter overlays existing national authorisation regimes. This could illustrate a scenario where entities that cleared the national transition still face a subsequent EU-level supervisory recalibration. This is illustration, not observation or prediction.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No BG-specific dark-fleet, tech-procurement, or commodity-rerouting material surfaced this cycle. |
| T2 · EU AML Package / AMLA | watch | Bulgaria's national AML implementing instruments (Measures Against Money Laundering Act) positively assessed in MONEYVAL's June 2026 follow-up; no BG-specific AMLA supervisory-perimeter development surfaced this cycle. |
| T3 · FATF Grey List | improving | Bulgaria not FATF-grey-listed; MONEYVAL (its FSRB) closed the 5th-round mutual evaluation in June 2026 with all 40 Recommendations compliant/largely compliant. |
| T4 · Beneficial-Ownership Register Status | no_change | No BG-specific BO-registry development surfaced this cycle distinct from the crypto-service-provider register repeal. |
| T5 · Crypto & Digital-Asset Integrity | material_change | Bulgaria's MiCA grandfathering window for pre-2024 NRA-registered VASPs closed 1 July 2026; FSC now sole CASP/ART authorising body, BNB for EMTs; FSC issued its first CASP licence in April 2026. |
| T6 · Sanctions Regime Divergence | no_change | No BG-specific EU/US/UK autonomous-listing divergence material surfaced this cycle. |