Bulgaria FSC CASP Authorisation 2026 — Practitioner Guide

Sofia as the low-cost EU alternative

Bulgaria is the EU’s lowest-cost operating jurisdiction. Corporate income tax is 10% — the lowest standard rate in the EU. Labour costs in Sofia are a fraction of Western European levels. The legal-services and accounting market is mature for financial-services work and operates at materially lower fees than comparable services in Lithuania, Cyprus, or Western EU jurisdictions.

For platforms prioritising capital efficiency without trading away the EU passport, Bulgaria is a credible alternative to Lithuania and Cyprus. The FSC applies professional EU-standard supervision; the cost advantage is in operating costs, not in regulatory leniency. The combination — serious supervisor plus low operating cost — is unusual in the EU CASP map.

The supervisory architecture

Bulgaria designed its MiCA implementation around the FSC as the primary CASP supervisor. Amendments to the Markets in Financial Instruments Act and the AML Measures Act assigned the FSC:

• CASP authorisation under MiCA Article 63
• Prudential supervision under MiCA Article 67
• Conduct supervision under MiCA Articles 66-73
• Consumer protection and marketing communications

The DANS Financial Intelligence Directorate retained AML supervisory authority for crypto-asset entities and continues to receive suspicious-transaction reports. The Bulgarian National Bank supervises credit-institution CASPs under MiCA Article 60.

The NRA register and its transition

Bulgaria operated a pre-MiCA crypto-asset service-provider register through the National Revenue Agency (NRA) under the 5AMLD transposition. The register was AML-focused — it satisfied the EU’s 5AMLD obligation to capture crypto-asset business but did not impose substantive conduct or prudential requirements.

At MiCA application, the NRA register wound down with a 12-month transitional window for registered entities to file a CASP authorisation application with the FSC. The transitional regime granted operational continuity; it did not grant presumption of authorisation. By mid-2026 the steady-state regime is the live pathway.

What the FSC looks for

The FSC’s CASP application standards reflect professional EU-norm supervision. The recurring themes:

Governance fit for the planned business. A management body sized for the scale of operations with documented fit-and-proper assessments. Independent compliance and internal audit functions for larger files. Three-lines-of-defence framework.

Substance in Bulgaria. Registered office in Bulgaria. At least one senior manager resident in Bulgaria. Compliance function staffed with Bulgaria-resident professionals. The FSC has been clear that substance arrangements are tested at first supervisory contact.

Prudential and ICT. Article 67 own-funds calculation reviewed in detail. ICT risk-management framework consistent with DORA expectations. Operational-resilience arrangements documented and tested.

AML programme aligned with DANS expectations. AML programme designed for DANS supervisory engagement with MLRO appointed, KYC and transaction-monitoring infrastructure, STR reporting to DANS, and ongoing compliance reviews.

Consumer protection in Bulgarian. Client-facing materials in Bulgarian for Bulgaria-targeted services. Marketing communications compliance under MiCA Article 7 with Bulgarian consumer-law overlays.

The realistic Bulgarian timeline

The FSC’s application pipeline is moderate and the supervisor’s substantive review tracks the EU median:

• Pre-filing preparation including Bulgarian translation: 6-10 weeks
• FSC pre-screen and completeness cycle: 4-6 weeks
• Active five-month clock: 16-22 weeks
• Decision and onboarding: 2-4 weeks

Five to eight months end-to-end is the working assumption. Class 1 files for limited service sets sometimes complete faster; Class 3 trading-platform files use the full statutory window.

When Bulgaria is the right home supervisor

Bulgaria works well for:

• Platforms prioritising capital efficiency — Sofia operating costs are a fraction of Western EU levels
• Operations with budget constraints that need real EU supervision rather than offshore alternatives
• Businesses comfortable with Bulgarian-language operational requirements
• Pan-EU crypto operations using the passport from a low-cost base
• Eastern European-headquartered groups looking for a credible local EU jurisdiction

Bulgaria is a weaker fit if:

• The reputational signal of a Tier 1 EU supervisor is strategically important — the FSC is professional but not in the Tier 1 supervisor club
• The customer base is concentrated in Western Europe and Bulgarian-language operations create operational friction
• Bank-access friction with Western European correspondents complicates the operating cash flow
• The operating model requires English-language formal supervisory dialogue

For a buyer triaging EU options: Bulgaria sits alongside Lithuania and Cyprus as a low-cost EU passport-hub option, with a distinctive 10% corporate-tax advantage that the alternatives cannot match. The supervisor is serious; the cost-effectiveness is real; the trade-off versus Tier 1 jurisdictions is reputational rather than substantive.