← Regulations / Bulgaria / Operating Models / Crypto debit card

Crypto-funded debit card in Bulgaria

A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.

Conditional AI-Generated · Unreviewed

Crypto debit card is conditionally permitted in Bulgaria with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Registration with the National Revenue Agency (NRA) as a VASP for AML/CFT purposes (bg.aml.national-revenue-agency-nra--)
  • Customer Due Diligence (CDD) including identification and verification of natural persons (name, date/place of birth, nationality, permanent address, ID number via valid official documents) (bg.aml.natural-persons-name-date-and)
  • Entity-level CDD: company name, legal form, registration number, registered address, authorized representatives verified via commercial register extracts (bg.aml.legal-entities-company-name-legal)
  • Beneficial Owner identification at the 25%+1 shareholding threshold (bg.aml.for-legal-entities-vasps-must)
  • Ongoing transaction scrutiny to ensure consistency with customer knowledge and risk profile (bg.aml.regular-scrutiny-of-transactions-undertaken)
  • PEP screening obligations (bg.aml.politically-exposed-persons-peps-customers)
  • Enhanced due diligence for high-risk third countries as identified by EU/FATF (bg.aml.high-risk-third-countries-transactions-involving)
  • Suspicious Transaction Reports (STRs) to SANS Financial Intelligence Directorate (bg.aml.state-agency-for-national-security)
  • Record-keeping and up-to-date maintenance of customer documents and data (bg.aml.keeping-customer-documents-data-and)
  • Reporting of complex, unusual, large transactions or unusual patterns with no apparent economic purpose (bg.aml.complex-unusual-large-transactions-or)

Key Restrictions

  • Crypto-to-fiat conversion (off-ramp) is a VASP activity requiring NRA registration (bg.aml.exchange-between-virtual-assets-and)
  • E-money or payment institution licensing under Bulgarian/EU law is required to issue fiat-funded debit cards — a standalone crypto registration does not authorize e-money issuance
  • The program likely requires a partner bank or BIN sponsor with a Bulgarian or EU payment institution/e-money license to issue cards
  • Must comply with Bulgaria's full adoption of EU MiCAR framework (bg.tax.while-specific-english-language-opinions-on)
  • VAT exemption applies to exchange services (fiat↔crypto) under ZDDLS (bg.tax.exchange-services-fiat-to-crypto-crypto-to-fiat-the)
  • 10% capital gains tax on crypto-to-fiat conversions for individuals (bg.tax.tax-rate-10-flat-rate)

Key Risks

  • Dual licensing risk: the operator must navigate both VASP registration (NRA) and e-money/payment institution licensing (Bulgarian National Bank) — gaps in either create regulatory exposure
  • Enforcement risk under MAMLA includes administrative fines and cessation of activities for non-compliance with VASP registration or CDD obligations (bg.enforcement.violation-type-non-compliance-with-the)
  • Crypto-to-fiat conversion triggering the card top-up may be treated as a taxable event for the cardholder, creating customer tax friction
  • SANS (FIU) supervision of AML/CFT obligations for VASPs is active — STR obligations apply to all suspicious activity arising from card usage (bg.enforcement.outcome-administrative-fines-cessation-of)

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

aml 90% confidence

The Measures Against Money Laundering Act (SG No. 27/2018) remains Bulgaria's AML/CFT statute for crypto businesses: the Markets in Crypto-Assets Act (SG No. 54/2025), in force since 8 July 2025, amended it in § 18 to add FSC-authorised crypto-asset service providers as obliged entities (Article 4, item 19), repeal the NRA register (Article 9a) and repeal the former VASP items 38 and 39 from 1 July 2026.

aml 90% confidence

The Measures Against Money Laundering Act covered virtual-asset providers through Article 4, items 38 and 39; the Markets in Crypto-Assets Act repealed those items from 1 July 2026, replaced them with item 19 (FSC-authorised crypto-asset service providers) and added definitions of crypto-asset, crypto-asset service provider and self-hosted address (Supplementary Provisions § 1, items 33–35).

aml 95% confidence

Exchange between virtual assets and fiat currencies.

aml 90% confidence

Transfer of virtual assets.

aml 85% confidence

SANS does not supervise crypto-asset service providers: under the Markets in Crypto-Assets Act the Financial Supervision Commission authorises and supervises them (Art 3(1)) and monitors their crypto-transfer compliance under Regulation (EU) 2023/1113 (Art 20), and only notifies SANS when it starts enforcing a coercive administrative measure (Art 24).

aml 90% confidence

National Revenue Agency (NRA) (Национална агенция за приходите - НАП)

aml 80% confidence

Natural Persons: Name, date and place of birth, nationality, permanent address, unique identification number (e.g., national ID card, passport number). Identity must be verified using reliable, independent source documents or data (e.g., valid official identification document).

aml 80% confidence

Legal Entities: Company name, legal form, registration number, registered address, and the names of the individuals authorized to represent the company. Verification involves obtaining extracts from commercial registers or similar official documents.

aml 95% confidence

For legal entities, VASPs must identify the natural person(s) who ultimately own or control the customer, typically defined as holding 25% plus one share or more of the voting rights or exercising control via other means. This information must also be verified.

aml 83% confidence

Regular scrutiny of transactions undertaken throughout the course of the business relationship to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.

aml 95% confidence

Politically Exposed Persons (PEPs): Customers who hold or have held prominent public functions, their family members, or close associates.

aml 95% confidence

High-Risk Third Countries: Transactions involving customers or beneficial owners from countries identified by the EU or FATF as having strategic AML/CFT deficiencies.

aml 95% confidence

Complex, Unusual, Large Transactions, or Unusual Patterns: Transactions that have no apparent economic or lawful purpose.

aml 100% confidence

Keeping customer documents, data, and information up-to-date.

tax 92% confidence

MiCA and Bulgaria's Markets in Crypto-Assets Act do not set tax rules; the Act's only income-tax change (§ 20 of its transitional and final provisions) replaces "virtual currencies" with "crypto-assets" in Article 33(3) of the Income Taxes on Natural Persons Act and defines crypto-assets in § 1 item 63 of that Act by reference to the Markets in Crypto-Assets Act.

tax 0% confidence

Tax Rate: 10% flat rate on the positive difference (gain) between the sale price and the acquisition price. This falls under income from the sale of "financial assets" or "other property" under the Personal Income Tax Act (ZDDLF - Закон за данъците върху доходите на физическите лица).

tax 0% confidence

Exchange Services (Fiat-to-Crypto, Crypto-to-Fiat): The exchange of traditional currencies for virtual currencies (and vice-versa) is exempt from VAT (under the ZDDLS - Закон за данък върху добавената стойност). This is because the ECJ ruled that such transactions constitute a supply of services relating to currency, similar to traditional financial transactions, and thus fall under the VAT exemption for certain financial services.

enforcement 88% confidence

Since the Markets in Crypto-Assets Act (SG No. 54/2025) the FSC sanctions MiCA breaches under Article 37 (natural persons BGN 1,400 to 700,000; legal persons up to the higher of BGN 5,000,000 or 1.5% to 6.25% of annual turnover, depending on the provision) and travel-rule breaches under Article 39; on its § 5(3) list of former NRA-registered VASPs the FSC has cancelled 47 registrations by decisions dated 12 August 2025 to 24 June 2026. Amounts are stated in BGN as written in the Act; Bulgaria adopted the euro on 1 January 2026 at 1.95583 BGN per EUR.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a crypto-funded debit card program is permissible in Bulgaria but requires dual licensing: VASP registration with the NRA for crypto-to-fiat conversion and AML compliance, plus an e-money or payment institution license (or partnership with a licensed entity) to issue the fiat card, with full EU MiCAR adoption governing the crypto-asset side.

Questions this verdict aims to answer

  • What e-money / payment-institution license is required?
  • How is the crypto-to-fiat conversion regulated?
  • What KYC and AML obligations apply to cardholders?
  • What partner-bank or BIN-sponsor arrangements are required?