Financial Integrity Monitor

Bulgaria BG

Domains (D1–D6)
3
Sources
10
Role actions
8
Horizon <90d
1
Jurisdiction profile
Grey-ListTier BRisk: StableMixed

Bulgaria operates the Law on Measures Against Money Laundering (LMML) and Law on Measures Against Financing of Terrorism (LMFT), supervised principally by FID-SANS (State Agency for National Security) and the Bulgarian National Bank.

MoreIt has one of the EU's few free public beneficial-ownership registers, but MONEYVAL's 2022 MER found systemic effectiveness gaps in ML prosecution, confiscation, PF sanctions and VASP supervision, driving FATF grey-listing since October 2023.

Key deficiencies
  • Weak investigation/prosecution of high-scale corruption and organised-crime money laundering relative to risk profile
  • Gaps in proliferation-financing targeted-financial-sanctions (PF TFS) framework
  • Underdeveloped VASP-specific AML/CFT supervisory guidance despite market-entry registration controls
  • Confiscation not historically pursued as a systematic policy objective (partially remediated)
Recent developments (18m)
  • FATF/MONEYVAL Follow-Up Reports (Feb 2025, June 2025, Oct 2025, Feb 2026) progressively re-rated multiple Recommendations from Partially Compliant to Largely Compliant/Compliant
  • June 2026 FATF Plenary: initial determination that Bulgaria has substantially completed its action plan, triggering an on-site assessment ahead of possible delisting
  • Bulgaria adopted the euro on 1 January 2026, becoming the 21st euro-area member, ending lev-based cash/currency-conversion opacity risk over a transition period to August 2026
  • Bulgarian government seized control of Lukoil's Neftohim Burgas refinery and retail network (Nov 2025) after OFAC designated Rosneft and Lukoil, prompting Bulgaria-specific OFAC general licences
  • EPPO/GDCOC dismantled a shell-company network defrauding EU Human Resources Development Programme subsidies (2026)

Law made at European Economic Area level that applies in Bulgaria is covered once, on the European Economic Area page. This page covers Bulgaria’s own layer: implementation, national authorities, national options and local enforcement.

Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Bulgaria's anti-money-laundering standing improved materially this cycle: MONEYVAL closed Bulgaria's 5th-round mutual evaluation on 17 June 2026, rating all 40 FATF Recommendations compliant or largely compliant. The closure follows a re-rating exercise addressing confiscation, the terrorist-financing offence, proliferation-related targeted financial sanctions, non-profit organisations, correspondent banking, sanctions, and mutual legal assistance, and ends several years of enhanced follow-up that had run since the May 2022 mutual evaluation report. Bulgaria is not on the FATF grey list, and this closure removes a standing item of supervisory attention that had persisted across multiple prior cycles.

Other Developments

A structural consolidation of crypto-asset AML registration architecture is underway. The Bulgarian MiCA Act is understood to repeal the National Revenue Agency's Article 9a Anti-Money Laundering Act register of virtual-asset service providers, folding VASP AML-registration history into the Financial Supervision Commission's MiCA CASP register. Legacy NRA-registered VASPs' transitional operating right expired 1 July 2026. This is a single-source, probable-confidence finding not yet corroborated against the MiCA Act's own text, but it describes an architecture shift — consolidation of a national AML-specific register into a supranationally-harmonised licensing register — rather than an isolated incident. The same transitional cliff-edge creates a residual verification gap. Whether any BG-registered legacy VASP failed to secure CASP authorisation by the 1 July 2026 deadline, and was accordingly removed from or never correctly added to the register, has not been confirmed against the Financial Supervision Commission's own register this cycle.

Cross-Monitor Connections

The MiCA-driven consolidation of VASP AML registration architecture is the same underlying development the crypto monitor tracks under its crypto_licensing module, and the same transitional-expiry cliff-edge that world-payments and crypto both treat as a residual authorisation-status question for legacy providers. Readers of this brief's D2 and D5 domain sub-briefs should treat the crypto monitor's crypto_licensing coverage as the technical-architecture companion to this brief's AML-registration and financial-crime framing of the identical underlying MiCA Act change.

Outlook

The MONEYVAL closure removes Bulgaria from the enhanced-follow-up track that had run since 2022, and the near-term outlook on the AML/CTF regime itself is stable-to-positive absent a new deficiency finding. The open question sits in the crypto-adjacent architecture: whether the FSC's own register confirms that all legacy NRA-registered VASPs completed the transition to MiCA CASP authorisation by 1 July 2026, and whether Bulgaria's 6AMLD transposition status (not yet established this cycle) introduces any gap relative to the AMLR's direct application as an EU-27 member state.

weekly_brief_draft · JID BG
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

Continue reading

Globally, the EU AML Package sets the structural direction for beneficial-ownership and corporate-transparency supervision: three distinct instruments now govern the field across the European Economic Area — the AML Regulation (AMLR, Regulation (EU) 2024/1624), which applies directly and uniformly across Member States; the sixth AML Directive (6AMLD), which each Member State transposes into national law on its own timeline; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and begins shifting supervision of certain obliged entities from purely national authorities toward a hybrid EU-level regime combining direct AMLA supervision of the highest-risk cross-border entities with continued indirect national supervision of the rest. This is the durable architectural backdrop against which Bulgaria's own developments this cycle should be read.

In Bulgaria specifically, the directly relevant beneficial-ownership and corporate-transparency development this cycle is not a 6AMLD transposition milestone but a crypto-adjacent registration consolidation: the Bulgarian MiCA Act is understood to repeal the National Revenue Agency's Article 9a Anti-Money Laundering Act register of virtual-asset service providers, folding the AML-registration history of VASPs into the Financial Supervision Commission's MiCA CASP register. This is a single Tier-3-sourced, Probable-confidence finding, not yet corroborated against the MiCA Act's own statutory text, but it is properly read as an architecture-level change — the retirement of a national, AML-specific VASP register in favour of a supranationally-harmonised licensing register that itself carries AML-registration consequences — rather than as an isolated administrative footnote. Bulgaria's specific 6AMLD transposition status (whether not yet transposed, partially transposed, or fully transposed) has not been established this cycle, which limits how confidently the AMLR/6AMLD architecture described above can be tied to Bulgaria's domestic beneficial-ownership register practice specifically, as distinct from the crypto-registration consolidation, which is independently evidenced.

The practical consequence of the NRA register's repeal is that a compliance function checking a Bulgarian virtual-asset counterparty's AML-registration history can no longer rely on the legacy NRA Article 9a register as a current source; that history is now understood to sit within the FSC's MiCA CASP register instead. Because Bulgaria sits within the EEA legal bloc and is bound directly by the AMLR as an EU-27 member, the medium-term direction is toward greater harmonisation of this exact kind of registration architecture across Member States, even where the specific national implementing detail (such as which national register a given class of AML registration migrates into) is still resolving on a per-Member-State basis.

Outlook

The register-consolidation finding rests on a single Tier-3 source and has not been corroborated against the MiCA Act's own text; a future cycle that locates a primary-source confirmation, or a contradiction, of the NRA register's repeal would materially change the confidence with which this development can be reported. Separately, Bulgaria's 6AMLD transposition status remains an open gap and would clarify how far the broader EU AML Package architecture has moved from directly-applicable-regulation (AMLR) to domestically-legislated-directive (6AMLD) within Bulgaria specifically.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto, Digital Assets, and Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Continue reading

In Bulgaria, the directly relevant digital-asset development this cycle is the expiry, on 1 July 2026, of MiCA CASP authorisation grandfathering for legacy National Revenue Agency-registered virtual-asset providers. Before that date, providers that had held NRA registration under Bulgaria's prior virtual-asset regime could continue operating on a transitional basis while migrating to authorisation from the Financial Supervision Commission (for asset-referenced tokens and crypto-asset service providers generally) or the Bulgarian National Bank (for electronic money tokens). After 1 July 2026, that transitional bridge closed, and continued operation without completed MiCA CASP authorisation now falls outside the lawful perimeter and constitutes a MiCA compliance breach.

Globally, the MiCA framework and FATF's virtual-asset standards set the structural direction for how crypto-asset activity is brought within AML/CFT-relevant supervision; in Bulgaria, the transitional grandfathering cliff-edge is the concrete mechanism through which that structural direction is being enforced against the specific population of legacy-registered providers. The grandfathering cliff-edge creates a residual population of potentially unauthorised legacy VASPs pending confirmation against the FSC register — a finding assessed at Probable confidence, given that it rests on legal-commentary sourcing (CMS, Eternity Law) rather than a primary FSC publication confirming which specific legacy providers did or did not complete the transition in time.

This residual-population question is the single most consequential open item in Bulgaria's crypto/digital-asset financial-integrity exposure this cycle. A compliance function assessing exposure to Bulgarian virtual-asset counterparties should treat legacy NRA registration, standing alone, as no longer sufficient evidence of current lawful operating status; only confirmed FSC CASP authorisation (or BNB authorisation for EMT issuers) now supports that assurance. Whether any specific legacy provider in fact failed to transition, and what enforcement or de-registration consequence followed if so, has not been confirmed against the FSC's own register this cycle.

Outlook

The outlook for this domain turns entirely on primary-source confirmation from the Financial Supervision Commission's own register: a future cycle that surfaces the FSC's transitional-completion statistics, or any enforcement or removal action taken against a legacy provider that failed to transition, would resolve the current residual-population uncertainty. Absent that confirmation, the domain should continue to be tracked as a structural cliff-edge with an unconfirmed real-world application, rather than as a settled compliance picture.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Continue reading

Bulgaria's AML/CTF regime record strengthened materially this cycle with MONEYVAL's closure of the country's 5th-round mutual evaluation on 17 June 2026. All 40 FATF Recommendations are now rated compliant or largely compliant, following a re-rating exercise that specifically addressed confiscation, the terrorist-financing offence, proliferation-related targeted financial sanctions, non-profit-organisation oversight, correspondent banking, sanctions implementation, and mutual legal assistance. This closure ends an enhanced follow-up process that had run since the May 2022 mutual evaluation report identified technical-compliance deficiencies across several of these same areas.

The closure is assessed at Confirmed confidence, resting on Tier-1 sourcing directly from the Council of Europe / MONEYVAL and corroborated by FATF's own published follow-up materials. This is architecture-level good news: it reflects a multi-year remediation process across a broad range of FATF Recommendations reaching completion, rather than a single enforcement action or episodic event. Bulgaria is not on the FATF grey list, and the MONEYVAL closure removes what had been a standing item of supervisory and peer-review attention across multiple prior reporting cycles.

Set against this improving headline, two structural gaps remain in the evidence base. First, Bulgaria's specific 6AMLD transposition status — whether the directive has been fully transposed, partially transposed, or not yet transposed into national law — has not been established this cycle, notwithstanding that Bulgaria is bound directly by the AMLR as an EU-27 member state. Second, no BG-specific sanctions-evasion, enabler-jurisdiction, conflict-finance, or compliance-technology signal was located this cycle, reflecting that this dispatch was scoped exclusively to Bulgaria and did not run a standing multi-jurisdiction sweep across those adjacent domains; this is a scoping limitation on this cycle's coverage, not a finding that those risks are absent.

The crypto-adjacent AML registration consolidation — repeal of the NRA's Article 9a AML register in favour of the FSC's MiCA CASP register — sits alongside this cycle's core AML/CTF regime finding as a second, narrower architecture shift specific to the virtual-asset sector, distinct from the broader MONEYVAL-evaluated regime.

Outlook

With the MONEYVAL 5th-round evaluation closed and all 40 Recommendations rated compliant or largely compliant, the near-term outlook on Bulgaria's core AML/CTF regime is stable-to-positive absent a new FATF or MONEYVAL finding. The 6AMLD transposition-status gap is the most likely source of a future material development, as is any confirmation of how the crypto-sector AML-registration consolidation interacts with the broader regime evaluated by MONEYVAL.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
In Force2026-Q3 · ±quarter

BG MiCA Act CASP transitional-period expiry

Legacy NRA-registered virtual-asset providers may no longer rely on transitional operating rights; MiCA CASP authorisation from the FSC (or BNB for EMT issuers) is now required.
1 dated · 5 pending date · baseline fim-2026-07-09
Role action cards
MLRO

MONEYVAL closed Bulgaria's 5th-round mutual evaluation with all 40 FATF Recommendations compliant or largely compliant.

The closure removes a standing enhanced-follow-up obligation that had persisted since 2022; ongoing STR and reporting practices should remain aligned with the evaluated standards, and the crypto-sector AML-registration consolidation (NRA register repeal into the FSC MiCA CASP register) is a separate item warranting counterparty-due-diligence attention for any Bulgarian VASP relationship.

2 evidence refs
Compliance

The NRA's Article 9a AML register of VASPs is understood to have been repealed and consolidated into the FSC's MiCA CASP register.

Compliance functions verifying a Bulgarian VASP counterparty's AML-registration status should no longer rely on the legacy NRA register and should instead check the FSC's MiCA CASP register directly; this finding is Probable-confidence and single-source, so independent confirmation is advisable before relying on it operationally.

2 evidence refs
Legal

MiCA CASP transitional grandfathering for legacy Bulgarian VASPs expired 1 July 2026, creating an unconfirmed residual-authorisation-status population.

Legal counsel advising on Bulgarian virtual-asset counterparty risk should treat legacy NRA registration as no longer sufficient evidence of current lawful status; whether any specific provider failed to transition and what followed has not been confirmed against the FSC's own register.

1 evidence refs
Board

Bulgaria's AML/CTF standing improved materially this cycle with the MONEYVAL 5th-round closure.

This is a positive structural development for the institution's Bulgaria-related regulatory risk profile, reflecting a multi-year remediation process reaching completion rather than a single event; it should be read alongside the narrower crypto-sector registration consolidation, which is a separate and still-developing item.

1 evidence refs
CTO

Bulgaria's VASP AML-registration architecture has been consolidated from a National Revenue Agency register into the FSC's MiCA CASP register.

Any technical integration that had referenced the legacy NRA VASP register as a data source for counterparty AML status should be reviewed, since that register's function is understood to have been folded into the FSC's MiCA CASP register following the transitional expiry of 1 July 2026.

2 evidence refs
Risk

A residual population of legacy Bulgarian VASPs with unconfirmed post-1-July-2026 authorisation status represents an open counterparty-risk exposure.

Risk functions should flag Bulgarian virtual-asset counterparties for enhanced verification pending confirmation of current FSC CASP authorisation status, given the unresolved gap in whether all legacy NRA-registered providers completed the MiCA transition.

1 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

The MONEYVAL 5th-round evaluation closure provides a fresh, favourable external audit benchmark for Bulgaria's AML/CTF control framework.

Internal audit scoping exercises referencing Bulgaria's AML/CTF regime can now cite the closed 5th-round evaluation and its compliant/largely-compliant ratings across all 40 Recommendations as the current external benchmark, superseding the 2022 mutual evaluation report's deficiency findings.

1 evidence refs
Decision lens
MLRO

MONEYVAL closed Bulgaria's 5th-round mutual evaluation with all 40 FATF Recommendations compliant or largely compliant.

Compliance

The NRA's Article 9a AML register of VASPs is understood to have been repealed and consolidated into the FSC's MiCA CASP register.

Legal

MiCA CASP transitional grandfathering for legacy Bulgarian VASPs expired 1 July 2026, creating an unconfirmed residual-authorisation-status population.

Board

Bulgaria's AML/CTF standing improved materially this cycle with the MONEYVAL 5th-round closure.

CTO

Bulgaria's VASP AML-registration architecture has been consolidated from a National Revenue Agency register into the FSC's MiCA CASP register.

Risk

A residual population of legacy Bulgarian VASPs with unconfirmed post-1-July-2026 authorisation status represents an open counterparty-risk exposure.

Operations

No material change this cycle.

Audit

The MONEYVAL 5th-round evaluation closure provides a fresh, favourable external audit benchmark for Bulgaria's AML/CTF control framework.

Shared evidence: 3 refs
Scenario sketches

AMLA direct-supervision transition and cross-border obliged-entity migration

Illustrative scenario for analytical orientation only. As the AMLA Regulation (Reg (EU) 2024/1620) moves cross-border obliged entities from purely national AML supervision toward a hybrid EU-level regime combining AMLA direct supervision of the highest-risk entities with continued indirect national supervision of the rest, a Member State such as Bulgaria could see a subset of its largest cross-border obliged entities re-designated for AMLA direct supervision, while the crypto-sector AML-registration architecture (recently consolidated into the FSC's MiCA CASP register) could similarly become a candidate for future AMLA-level oversight if VASP AML risk is judged to warrant supranational rather than purely national supervision. This is an illustration of a structural possibility under the AMLA transition, not an observed development or a prediction of Bulgaria's specific designation outcome.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_change
T2 · EU AML Package / AMLAwatchNo BG-specific AMLR/6AMLD transposition delta located this cycle beyond the MiCA-driven repeal of the NRA Art. 9a AML register.
T3 · FATF Grey ListimprovingBG is not on the FATF grey list; MONEYVAL closed BG's 5th round follow-up in June 2026 with all 40 Recommendations compliant/largely-compliant.
T4 · Beneficial-Ownership Register Statusno_change
T5 · Crypto / VASP Regulatory Frameworkmaterial_changeMiCA CASP authorisation grandfathering for legacy NRA-registered VASPs expired 1 July 2026.
T6 · Sanctions Regime Divergenceno_change
Registers

Enforcement actions

  • Bulgaria appointed the head of its tax agency as external administrator over Lukoil's Neftohim Burgas refinery and the company's 220-station retail chain to keep fuel supply stable after OFAC's Rosneft/Lukoil SDN designation threatened to disrupt operations. 14 Nov 2025
  • OFAC issued Russia-related General License 130 (Nov 14, 2025), later amended as GL130A (Apr 14, 2026), specifically authorizing transactions involving named Lukoil entities in Bulgaria that would otherwise be prohibited following the Lukoil SDN designation. 14 Apr 2026
  • Eight suspects, including a public official, were detained and eight search warrants executed after an investigation found a network used shell companies and fabricated employment contracts to fraudulently secure nearly EUR1 million in EU employment subsidies. 1 Jul 2026
  • At its June 2026 Plenary, the FATF made an initial determination that Bulgaria has substantially completed its grey-list action plan, following successive Follow-Up Report re-ratings upgrading multiple Recommendations from Partially Compliant to Largely Compliant or Compliant. 19 Jun 2026
  • Litasco, Lukoil's Geneva-based trading arm and majority shareholder in the Burgas refinery, formally challenged Bulgaria's November 2025 seizure of its local assets and signalled readiness to pursue litigation if no resolution is reached. 25 Feb 2026

Sanctions changes

  • OFAC designated Rosneft and Lukoil (and subsidiaries) as Specially Designated Nationals under the Russian Harmful Foreign Activities Sanctions program in October 2025, directly implicating Lukoil's Bulgarian refining and retail operations. 22 Oct 2025
  • OFAC issued and subsequently amended Russia-related General License 130/130A, authorizing continued transactions with named Lukoil entities located in Bulgaria notwithstanding the parent-company SDN designation. 14 Apr 2026
  • Bulgaria's government indicated it will oppose the inclusion of Russian Orthodox Patriarch Kirill in a new EU sanctions package targeting Russia, breaking with the emerging EU consensus position. 17 Jun 2026
  • HM Treasury's February 2026 High-Risk Third Countries Advisory Notice lists Bulgaria among jurisdictions UK firms must treat as a 'High-Risk Third Country' under Regulation 33 of the MLRs, since the UK's post-2024 regime ties HRTC status directly to the live FATF grey/black lists. 13 Feb 2026

Regulatory horizon (register)

  • FATF on-site assessment and possible grey-list exit decision
  • EU AML Regulation (AMLR) becomes directly applicable
  • 6AMLD national transposition deadline for Bulgaria
  • End of mandatory lev/euro dual price display
  • AMLA first harmonised selection of directly-supervised obliged entities

Active schemes

  • [CRITICAL] Neftohim Burgas Russian-oil refining/export laundromat
  • [HIGH] Shell-company layering for EU subsidy and fund fraud
  • Bulgaria-based staffing in transnational crypto investment-scam rings
Sources
  1. Financial Action Task Force (FATF)
  2. FATF / MONEYVAL
  3. U.S. Department of the Treasury / OFAC
  4. HM Treasury (UK)
  5. Global Witness
  6. OCCRP
  7. Bloomberg
  8. Council of the European Union
  9. European Commission
  10. Global Witness
Coverage gaps
Despite consecutive technical-compliance re-ratings, the FAT…
Despite consecutive technical-compliance re-ratings, the FATF/MONEYVAL follow-up cycle from February 2025 through June 2026 repeatedly flagged that Bulgaria has not sufficiently increased investigations and prosecutions of money laundering tied to high-scale corruption and organised crime, and that action-plan deadlines on this point have expired.
Bulgaria's new government (2026) has signalled it will oppos…
Bulgaria's new government (2026) has signalled it will oppose an EU sanctions package element targeting Russian Orthodox Patriarch Kirill, following a pattern of historically close Bulgaria-Russia political and commercial ties (including the Lukoil refinery relationship) that has previously slowed sanctions implementation.
No Bulgaria-specific public-domain evidence of RegTech/SupTe…
No Bulgaria-specific public-domain evidence of RegTech/SupTech adoption, AI-driven transaction monitoring, or supervisory technology roadmaps was identified during this baseline; FID-SANS's supervisory-technology posture could not be substantiated beyond generic references to 'automated STR prioritisation' in FATF follow-up reports.
FATF follow-up statements from February 2025 through June 20…
FATF follow-up statements from February 2025 through June 2025 repeatedly identified gaps in Bulgaria's proliferation-financing targeted financial sanctions (PF TFS) framework, though the June 2026 statement suggests this deficiency has now been substantially addressed alongside the broader action-plan determination.

Evidence

Confidence-tiered claims

Remains on FATF 'Jurisdictions under Increased Monitoring' list as of 19 June 2026 statement; initial determination of substantial action-plan completion made, on-site assessment pending before exit. SRC-fim-BG-001
Probable · 1 source
Rated compliant on 13 and largely compliant on 27 of the 40 FATF Recommendations; 5th-round mutual evaluation closed June 2026. SRC-fim-BG-002
Probable · 1 source
Delegated Regulation (EU) 2026/46, in force 29 Jan 2026, added Russia, Bolivia and BVI to EU high-risk third-country AML list; Bulgaria bound directly as EU member. SRC-fim-BG-006
Probable · 1 source
No standalone UBO register; BO disclosure embedded in Commercial Register under MAMLA at 25% threshold; AMLD6 Art 11-13/15 access found functional but friction-laden (QES/PIC/in-person certificate required for fuller records) as of July 2026. SRC-fim-BG-007
Probable · 1 source
MiCA grandfathering for NRA-registered VASPs ended 1 July 2026; FSC/BNB supervisory split operative, 4 CASPs authorised as of August 2026; new annual crypto-transaction tax-reporting obligation began 1 Jan 2026, excluding wallet-to-wallet transfers between external private addresses. SRC-fim-BG-010
Probable · 1 source