Financial Integrity Monitor

Bulgaria BG

Domains (D1–D6)
2
Sources
10
Role actions
8
Horizon <90d
1
Jurisdiction profile
Grey-ListTier BRisk: StableMixed

Bulgaria operates the Law on Measures Against Money Laundering (LMML) and Law on Measures Against Financing of Terrorism (LMFT), supervised principally by FID-SANS (State Agency for National Security) and the Bulgarian National Bank.

MoreIt has one of the EU's few free public beneficial-ownership registers, but MONEYVAL's 2022 MER found systemic effectiveness gaps in ML prosecution, confiscation, PF sanctions and VASP supervision, driving FATF grey-listing since October 2023.

Key deficiencies
  • Weak investigation/prosecution of high-scale corruption and organised-crime money laundering relative to risk profile
  • Gaps in proliferation-financing targeted-financial-sanctions (PF TFS) framework
  • Underdeveloped VASP-specific AML/CFT supervisory guidance despite market-entry registration controls
  • Confiscation not historically pursued as a systematic policy objective (partially remediated)
Recent developments (18m)
  • FATF/MONEYVAL Follow-Up Reports (Feb 2025, June 2025, Oct 2025, Feb 2026) progressively re-rated multiple Recommendations from Partially Compliant to Largely Compliant/Compliant
  • June 2026 FATF Plenary: initial determination that Bulgaria has substantially completed its action plan, triggering an on-site assessment ahead of possible delisting
  • Bulgaria adopted the euro on 1 January 2026, becoming the 21st euro-area member, ending lev-based cash/currency-conversion opacity risk over a transition period to August 2026
  • Bulgarian government seized control of Lukoil's Neftohim Burgas refinery and retail network (Nov 2025) after OFAC designated Rosneft and Lukoil, prompting Bulgaria-specific OFAC general licences
  • EPPO/GDCOC dismantled a shell-company network defrauding EU Human Resources Development Programme subsidies (2026)
Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Bulgaria closed its MONEYVAL 5th-round mutual evaluation on 17 June 2026, with the enhanced follow-up report rating all 40 FATF Recommendations compliant or largely compliant after demonstrating improved technical compliance on eight further Recommendations, including confiscation, the terrorist-financing offence, proliferation-financing-related targeted financial sanctions, non-profit organisations, correspondent banking, sanctions, and mutual legal assistance. This is a materially positive architecture signal, closing a monitoring cycle that had run since April 2022, and it is assessed to reduce jurisdictional risk weighting on the AML/CTF dimension going forward.

Alongside the clean evaluation closure, Bulgaria's crypto-asset regulatory architecture completed a parallel structural transition. The Markets in Crypto-Assets Act, in force since 8 July 2025, designated the Financial Supervision Commission as the competent authority for crypto-asset service providers and asset-referenced tokens, and the Bulgarian National Bank for electronic-money tokens, repealing the National Revenue Agency's Article 9a AML-register as the operative authorisation basis for virtual-asset service providers. The eighteen-month grandfathering period that allowed legacy NRA-registered entities to continue operating without a MiCA licence closed on 1 July 2026. Entities that had not secured FSC authorisation by that date are, in principle, no longer entitled to rely on the transitional basis.

Other Developments

First MiCA licence issued. The FSC issued Bulgaria's first MiCA crypto-asset service provider licence, to Alaric Securities, in April 2026, evidencing that the new authorisation regime is operationally live rather than merely transposed on paper. This finding rests on a single lower-tier source and is treated with appropriate caution pending further corroboration.

Cross-Monitor Connections

The closure of Bulgaria's MiCA grandfathering window is directly relevant to the crypto monitor's licensing tracking for the jurisdiction, since the same structural transition, FSC as sole CASP/ART authority, BNB for electronic-money tokens, is the shared factual basis for both this brief and the crypto sub-brief. On the AML/CTF side, the MONEYVAL closure bears on how the crypto monitor and the world-payments monitor should each weight Bulgaria's underlying financial-crime architecture when assessing licensing and payments-corridor risk respectively; a clean mutual evaluation outcome is relevant architecture context for any parallel assessment of Bulgaria's payments infrastructure risk.

Outlook

The near-term picture for Bulgaria on the financial-integrity dimension is one of structural narrowing of previously lighter-touch pathways rather than fresh incident-driven risk. The MiCA full-authorisation deadline for legacy NRA-registered VASPs sits on the regulatory horizon for the third quarter of 2026, and entities relying on the now-closed transitional basis face a compliance cliff. Watch for confirmation of enforcement action against any legacy registrant that failed to secure FSC authorisation before the 1 July 2026 deadline, which would be the clearest incident-level test of how firmly the FSC is prepared to close the transitional gap this architecture change opened.

weekly_brief_draft · JID BG
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto, Digital Assets, and Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

Bulgaria's crypto-asset regulatory architecture completed a structural transition this cycle. The Markets in Crypto-Assets Act, in force since 8 July 2025, designated the Financial Supervision Commission as the competent authority for licensing crypto-asset service providers and supervising asset-referenced tokens, while assigning supervision of electronic-money tokens to the Bulgarian National Bank. This designation repealed the National Revenue Agency's Article 9a AML-register as the operative authorisation basis for virtual-asset service providers, a genuine narrowing of what had previously been a lighter-touch registration pathway.

The eighteen-month transitional grandfathering period, under which entities registered on the legacy NRA register before 30 December 2024 could continue operating without a MiCA licence, closed on 1 July 2026. That deadline has now passed, meaning entities that had not obtained, or been refused, FSC authorisation by that date are, in principle, no longer entitled to rely on the transitional basis. This is an architecture-level finding: the closure of a grandfathering window is a structural narrowing of the regulatory perimeter, not an isolated enforcement incident, and it is consistent with the FIM analytical principle that architecture changes carry more diagnostic weight than any single enforcement action.

Evidencing that the new regime is operationally live rather than merely transposed on paper, the FSC issued Bulgaria's first MiCA crypto-asset service provider licence, to Alaric Securities, in April 2026. This finding is treated with caution: it rests on a single lower-tier vendor source with no corroborating primary or law-firm confirmation located this cycle, and confidence is assessed accordingly.

A remaining coverage gap should be stated plainly: no Tier-1 FSC or EUR-Lex primary source was directly retrieved this cycle for the MiCA/CASP designation or the grandfathering-window closure. The findings above rest on law-firm commentary (CMS Law, Wolf Theiss) and vendor-blog sourcing rather than direct regulator or EU-instrument text, and confidence tiers on the underlying claims are capped accordingly.

Outlook

The MiCA full-authorisation deadline for legacy NRA-registered VASPs sits on the regulatory horizon for the third quarter of 2026. General industry practice for legacy registrants had been to rely on the transitional grandfathering window; with that window now closed, entities that had not obtained FSC authorisation face, in principle, a compliance cliff. Watch for confirmation of any enforcement or licence-refusal action against a legacy registrant that failed to secure timely FSC authorisation, which would be the clearest incident-level test of how firmly the closure of the transitional pathway is being enforced in practice.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Continue reading

Bulgaria's AML/CTF architecture received a materially positive assessment this cycle. MONEYVAL's 17 June 2026 enhanced follow-up report formally closed Bulgaria's 5th-round mutual evaluation, rating all 40 FATF Recommendations as compliant or largely compliant. This closure followed demonstrated improvement in technical compliance across eight further Recommendations: confiscation, the terrorist-financing offence, proliferation-financing-related targeted financial sanctions, non-profit organisations, correspondent banking, sanctions, and mutual legal assistance. The evaluation cycle being closed had run since April 2022, so this represents the conclusion of a multi-year monitoring process rather than a single-cycle event, an architecture-level finding consistent with the FIM principle of weighting structural findings over isolated incidents.

The source underlying this finding is a direct primary publication from the Council of Europe / MONEYVAL, and confidence is rated Confirmed, the highest tier available. The overall jurisdictional risk direction on the AML/CTF dimension is assessed as decreasing as a direct consequence of the clean evaluation closure. This should be read as a positive structural signal for Bulgaria's obliged-entity ecosystem: a jurisdiction that has closed out its mutual evaluation with full compliance or largely-compliant ratings across all 40 Recommendations presents a materially lower architecture-level AML/CTF risk profile than one still under active monitoring for outstanding deficiencies.

Bulgaria's national AML implementing instrument, the Measures Against Money Laundering Act, was positively assessed within MONEYVAL's June 2026 follow-up, though no BG-specific development regarding the EU AML Package's supervisory-perimeter shift (AMLA direct or indirect supervision) surfaced independently this cycle beyond what is captured in the mutual-evaluation closure itself.

Outlook

With the 5th-round mutual evaluation now closed, the near-term AML/CTF outlook for Bulgaria is one of consolidation rather than active monitoring pressure. The improvement across eight further FATF Recommendations addressed specific technical-compliance gaps that had been outstanding since the original evaluation; the principal item to watch going forward is whether Bulgaria maintains this compliance trajectory as EU-level AML Package instruments, including AMLA's supervisory perimeter, phase in across the bloc, which would be the next structural test of the architecture just confirmed as sound by MONEYVAL.

Regulatory horizon
In Force2026-Q3 · ±quarter

MiCA full-authorisation deadline for legacy NRA-registered VASPs

Entities that had not obtained (or been refused) an FSC MiCA licence by 1 July 2026 are, in principle, no longer entitled to rely on the NRA-register transitional basis.
1 dated · 5 pending date · baseline fim-2026-07-09
Role action cards
MLROHigh

Bulgaria closed its MONEYVAL 5th-round mutual evaluation with a clean compliance rating across all 40 FATF Recommendations.

This is a positive architecture signal reducing jurisdictional AML/CTF risk weighting for Bulgarian counterparties; historic monitoring-related reporting friction tied to the outstanding evaluation should ease going forward.

2 evidence refs
ComplianceAssessed

Bulgaria's crypto-asset licensing regime completed its structural transition, closing the legacy NRA-register pathway on 1 July 2026.

Any counterparty or client relying on the old NRA AML-register basis for VASP status in Bulgaria should now hold, or be seeking, FSC MiCA authorisation; the transitional basis is no longer available.

2 evidence refs
LegalPossible

No material change this cycle.

No material change for this persona this cycle

BoardAssessed

Bulgaria's AML/CTF architecture and crypto-licensing regime both moved in a materially positive, structurally clearer direction this cycle.

The closure of the mutual evaluation and the crypto-licensing transition together reduce reputational and regulatory-architecture risk associated with Bulgarian exposure, though the newly-closed crypto transitional window bears watching for residual legacy-registrant exposure.

2 evidence refs
CTOAssessed

Bulgaria's crypto-asset supervisory architecture now sits fully with the FSC (CASPs/ARTs) and BNB (EMTs), with the first CASP licence issued in April 2026.

Any technical integration with Bulgarian crypto-asset infrastructure should be verified against current FSC-licensed status rather than legacy NRA-register status, which is no longer an operative basis.

2 evidence refs
RiskAssessed

Bulgaria's jurisdictional risk direction is assessed as decreasing on the AML/CTF dimension following the clean MONEYVAL closure.

Risk models weighting Bulgarian counterparty or corridor exposure should reflect the closed mutual-evaluation status and the structurally narrowed crypto-licensing gap, both structural rather than episodic signals.

2 evidence refs
OperationsPossible

No material change this cycle.

No material change for this persona this cycle

AuditPossible

Sourcing for Bulgaria's crypto-licensing transition rests on law-firm and vendor commentary, not direct FSC or EUR-Lex primary retrieval this cycle.

Audit trails referencing the MiCA/CASP designation and grandfathering-window closure should note the sourcing gap and seek primary-source confirmation where the finding materially informs a control decision.

3 evidence refs
Decision lens
MLRO

Bulgaria closed its MONEYVAL 5th-round mutual evaluation with a clean compliance rating across all 40 FATF Recommendations.

Compliance

Bulgaria's crypto-asset licensing regime completed its structural transition, closing the legacy NRA-register pathway on 1 July 2026.

Legal

No material change this cycle.

Board

Bulgaria's AML/CTF architecture and crypto-licensing regime both moved in a materially positive, structurally clearer direction this cycle.

CTO

Bulgaria's crypto-asset supervisory architecture now sits fully with the FSC (CASPs/ARTs) and BNB (EMTs), with the first CASP licence issued in April 2026.

Risk

Bulgaria's jurisdictional risk direction is assessed as decreasing on the AML/CTF dimension following the clean MONEYVAL closure.

Operations

No material change this cycle.

Audit

Sourcing for Bulgaria's crypto-licensing transition rests on law-firm and vendor commentary, not direct FSC or EUR-Lex primary retrieval this cycle.

Shared evidence: 5 refs
Scenario sketches

AMLA supervisory transition and the closure of national grandfathering pathways

Illustrative scenario for analytical orientation only: as the AMLA Regulation (Reg (EU) 2024/1620) phases in direct and indirect supervision of cross-border obliged entities, alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-member-state 6AMLD transposition, jurisdictions that have just closed national transitional pathways, such as Bulgaria's MiCA grandfathering window closure this cycle, could see a second layer of supervisory tightening as AMLA's perimeter overlays existing national authorisation regimes. This could illustrate a scenario where entities that cleared the national transition still face a subsequent EU-level supervisory recalibration. This is illustration, not observation or prediction.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo BG-specific dark-fleet, tech-procurement, or commodity-rerouting material surfaced this cycle.
T2 · EU AML Package / AMLAwatchBulgaria's national AML implementing instruments (Measures Against Money Laundering Act) positively assessed in MONEYVAL's June 2026 follow-up; no BG-specific AMLA supervisory-perimeter development surfaced this cycle.
T3 · FATF Grey ListimprovingBulgaria not FATF-grey-listed; MONEYVAL (its FSRB) closed the 5th-round mutual evaluation in June 2026 with all 40 Recommendations compliant/largely compliant.
T4 · Beneficial-Ownership Register Statusno_changeNo BG-specific BO-registry development surfaced this cycle distinct from the crypto-service-provider register repeal.
T5 · Crypto & Digital-Asset Integritymaterial_changeBulgaria's MiCA grandfathering window for pre-2024 NRA-registered VASPs closed 1 July 2026; FSC now sole CASP/ART authorising body, BNB for EMTs; FSC issued its first CASP licence in April 2026.
T6 · Sanctions Regime Divergenceno_changeNo BG-specific EU/US/UK autonomous-listing divergence material surfaced this cycle.
Registers

Enforcement actions

  • Bulgaria appointed the head of its tax agency as external administrator over Lukoil's Neftohim Burgas refinery and the company's 220-station retail chain to keep fuel supply stable after OFAC's Rosneft/Lukoil SDN designation threatened to disrupt operations. 14 Nov 2025
  • OFAC issued Russia-related General License 130 (Nov 14, 2025), later amended as GL130A (Apr 14, 2026), specifically authorizing transactions involving named Lukoil entities in Bulgaria that would otherwise be prohibited following the Lukoil SDN designation. 14 Apr 2026
  • Eight suspects, including a public official, were detained and eight search warrants executed after an investigation found a network used shell companies and fabricated employment contracts to fraudulently secure nearly EUR1 million in EU employment subsidies. 1 Jul 2026
  • At its June 2026 Plenary, the FATF made an initial determination that Bulgaria has substantially completed its grey-list action plan, following successive Follow-Up Report re-ratings upgrading multiple Recommendations from Partially Compliant to Largely Compliant or Compliant. 19 Jun 2026
  • Litasco, Lukoil's Geneva-based trading arm and majority shareholder in the Burgas refinery, formally challenged Bulgaria's November 2025 seizure of its local assets and signalled readiness to pursue litigation if no resolution is reached. 25 Feb 2026

Sanctions changes

  • OFAC designated Rosneft and Lukoil (and subsidiaries) as Specially Designated Nationals under the Russian Harmful Foreign Activities Sanctions program in October 2025, directly implicating Lukoil's Bulgarian refining and retail operations. 22 Oct 2025
  • OFAC issued and subsequently amended Russia-related General License 130/130A, authorizing continued transactions with named Lukoil entities located in Bulgaria notwithstanding the parent-company SDN designation. 14 Apr 2026
  • Bulgaria's government indicated it will oppose the inclusion of Russian Orthodox Patriarch Kirill in a new EU sanctions package targeting Russia, breaking with the emerging EU consensus position. 17 Jun 2026
  • HM Treasury's February 2026 High-Risk Third Countries Advisory Notice lists Bulgaria among jurisdictions UK firms must treat as a 'High-Risk Third Country' under Regulation 33 of the MLRs, since the UK's post-2024 regime ties HRTC status directly to the live FATF grey/black lists. 13 Feb 2026

Regulatory horizon (register)

  • FATF on-site assessment and possible grey-list exit decision
  • EU AML Regulation (AMLR) becomes directly applicable
  • 6AMLD national transposition deadline for Bulgaria
  • End of mandatory lev/euro dual price display
  • AMLA first harmonised selection of directly-supervised obliged entities

Active schemes

  • [CRITICAL] Neftohim Burgas Russian-oil refining/export laundromat
  • [HIGH] Shell-company layering for EU subsidy and fund fraud
  • Bulgaria-based staffing in transnational crypto investment-scam rings
Sources
  1. Financial Action Task Force (FATF)
  2. FATF / MONEYVAL
  3. U.S. Department of the Treasury / OFAC
  4. HM Treasury (UK)
  5. Global Witness
  6. OCCRP
  7. Bloomberg
  8. Council of the European Union
  9. European Commission
  10. Global Witness
Coverage gaps
Despite consecutive technical-compliance re-ratings, the FAT…
Despite consecutive technical-compliance re-ratings, the FATF/MONEYVAL follow-up cycle from February 2025 through June 2026 repeatedly flagged that Bulgaria has not sufficiently increased investigations and prosecutions of money laundering tied to high-scale corruption and organised crime, and that action-plan deadlines on this point have expired.
Bulgaria's new government (2026) has signalled it will oppos…
Bulgaria's new government (2026) has signalled it will oppose an EU sanctions package element targeting Russian Orthodox Patriarch Kirill, following a pattern of historically close Bulgaria-Russia political and commercial ties (including the Lukoil refinery relationship) that has previously slowed sanctions implementation.
No Bulgaria-specific public-domain evidence of RegTech/SupTe…
No Bulgaria-specific public-domain evidence of RegTech/SupTech adoption, AI-driven transaction monitoring, or supervisory technology roadmaps was identified during this baseline; FID-SANS's supervisory-technology posture could not be substantiated beyond generic references to 'automated STR prioritisation' in FATF follow-up reports.
FATF follow-up statements from February 2025 through June 20…
FATF follow-up statements from February 2025 through June 2025 repeatedly identified gaps in Bulgaria's proliferation-financing targeted financial sanctions (PF TFS) framework, though the June 2026 statement suggests this deficiency has now been substantially addressed alongside the broader action-plan determination.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.