Lead Signal
Bulgaria's baseline payments-regulation picture is dominated by three coincident structural shifts reshaping market access, licensing and settlement dynamics for payment service providers and e-money institutions operating in the country. On 1 January 2026 Bulgaria joined the euro area, ending its ERM II peg and folding its payment rails into SEPA and TARGET, with the BNB Governor now a full ECB Governing Council member. Bulgaria's national Markets in Crypto-Assets Act (MICAL) entered into force on 8 July 2025, among the first full EU-member MiCA transpositions, and the EU's Digital Operational Resilience Act (DORA) has applied directly in Bulgaria since 17 January 2025, covering banks, payment institutions and e-money institutions under joint Bulgarian National Bank (BNB) and Financial Supervision Commission (FSC) supervision. Bulgaria remains on the FATF grey list since October 2023, but by 7 May 2026 the Justice Ministry reported 24 of 25 identified gaps addressed, with the sole remaining strategic deficiency relating to the effectiveness of money-laundering investigations and prosecutions, and the government targets delisting by mid-2026. Bulgaria's simultaneous euro-area accession, full MiCA transposition and DORA applicability represent a coordinated deepening of EU financial-market integration, materially reshaping market access, licensing and settlement dynamics for PSPs and EMIs operating in-country.
Other Developments
BNB continues to operate as sole PI/EMI licensing and prudential authority under the Law on Payment Services and Payment Systems (PSPSA), with EMI capital fixed at BGN 700,000 and tiered PI capital thresholds of BGN 40,000, 100,000 and 250,000 by service scope. MONEYVAL's latest follow-up report confirms BNB's investigative powers over unlicensed activity and its ability to impose administrative fines of BGN 5,000-80,000 alongside criminal exposure of three to five years' custody under the Penal Code. Bulgarian EMIs still operate a PSD2/EMD2-aligned safeguarding segregation model, and Bulgaria has not yet transposed the proposed PSD3/PSR reform that would introduce a discretionary central-bank safeguarding-account option and a duty to avoid concentration risk in safeguarded funds. Under MICAL, the Financial Supervision Commission is the default competent authority for crypto-asset service providers and asset-referenced-token issuers, while e-money tokens remain carved out as e-money under the PSPSA with BNB as licensing authority; EMT issuers must maintain a 1:1 segregated reserve and offer par-value redemption at any time. Bulgaria continues to apply the EU default Interchange Fee Regulation caps of 0.2% for debit and 0.3% for credit cards without a stricter national ceiling, while the domestic BGN clearing systems RINGS and BISERA6, operated by BORICA AD, are being discontinued in favour of SEPA products, with the settlement BIC BNBGBGSD decommissioned as of 1 January 2026. Blink, BORICA's SCT Inst-compliant instant-payment rail, reaches over 90% of bank accounts and joined the Eurosystem's TIPS service in December 2024, giving Bulgaria full SEPA instant reachability in euro, and BORICA is developing Apple Pay and Google Pay integration for Blink alongside new donation and travel-focused services. Bulgaria's banking sector remains concentrated and predominantly foreign-owned, with 23 licensed credit institutions and the top three banks controlling roughly two-thirds of sector assets, against a backdrop of continuing consolidation illustrated by KBC's 2022 acquisition of Raiffeisenbank Bulgaria and United Bulgarian Bank's 2023 acquisition of KBC Bank Bulgaria. The landmark domestic payments litigation precedent remains the European Court of Human Rights ruling that Bulgarian law denied Korporativna Targovska Banka effective judicial review of BNB's 2014 licence-withdrawal decision, violating fair-trial and property rights, and no new large-scale PSP/EMI enforcement litigation has been identified for 2025-2026 beyond the DORA-transposition infringement action. Settlement in Bulgaria's merchant-acquiring market remains largely batch-based, T+1 to T+3, despite the country's advanced instant-transfer infrastructure, with gambling, adult-content and crypto verticals requiring specialised underwriting, while Paynetics operates as a licensed non-bank acquirer offering embedded card acquiring, issuing and account management. IBAN-spoofing fraud losses exceeded EUR 16 million in 2024, prompting BORICA to launch a Verification of Payee service from October 2025 under EU Regulation (EU) 2024/886, while the Commission for Consumer Protection continues to administer the Consumer Protection Law and handle complaints escalated from the FSC. Following euro adoption, BNB became a full ECB shareholder with a capital-key share of 0.9783%, worth EUR 105.9 million, up from under EUR 4 million as a non-euro-area national central bank, while the Eurosystem's harmonised access policy offers payment and e-money institutions settlement accounts dedicated to payment operations only, meaning non-bank PSPs with direct settlement access still require separate safeguarding arrangements. Sofia-based Paypercut raised a EUR 5 million seed round in early June 2026 co-led by Concentric, Passion Capital and Araya Ventures, bringing its total funding to EUR 7 million; Morphosis Capital, a Bulgaria/CEE-focused private capital investor, closed its second fund at EUR 130 million in September 2025; and tbi bank announced a partnership with FintechOS in September 2025 to modernise its deposit and credit business lines, with the deal value not publicly disclosed.
Cross-Monitor Connections
Bulgaria's FATF grey-list status and its correspondent-banking enhanced-due-diligence implications are an AML/illicit-finance surface matter whose original analytical ownership sits with the Financial Integrity Monitor; WPM carries only the Sentinel-fed provenance on grey-list trajectory and MONEYVAL technical-compliance ratings as they bear on payments-market access and correspondent relationships.
Outlook
The proposed PSD3/PSR reform, not yet transposed in Bulgaria, is expected around the fourth quarter of 2026 and would introduce a central-bank safeguarding option for EMIs. MICAL's transitional grandfathering regime for previously registered virtual-asset service providers expires on 1 July 2026, after which full MICAL licensing will be required. Euro-area PSPs operating in Bulgaria face an EU Instant Payments Regulation compliance deadline of 1 January 2027. The government's own target for FATF grey-list delisting sits in the third quarter of 2026, pending resolution of the sole remaining strategic deficiency relating to money-laundering investigation and prosecution effectiveness.