Bulgaria Crypto Licence 2026: The Definitive CASP Guide

If you want a full EU crypto licence and you want to keep the running cost lean, Bulgaria is the value option most cost-sensitive operators end up shortlisting. A CASP authorisation from the Financial Supervision Commission (FSC) under MiCA passports across all 27 EU member states on a notification basis — the same credential a Frankfurt or Paris licence gives you — but Bulgaria wraps it in a flat 10% corporate tax and a low overall cost base that the EU heavyweights cannot match. With the legacy VASP transition period now over, it is also one of the cheapest ways to re-establish EU-facing authorisation from scratch.

In our practice, the teams that pick Bulgaria are the ones doing the maths on the total cost of being licensed in Europe, not just the day-one setup. The capital is fixed by MiCA and identical everywhere; the substance and the DORA programme are real work wherever you go. What differs jurisdiction to jurisdiction is tax, running cost and the regulator’s temperament — and on that axis Bulgaria is genuinely hard to beat. This is the definitive guide to what a Bulgaria crypto licence actually is in 2026: the regime, the capital, the passport, the 10% tax draw, the substance, and the honest trade-off.

What a Bulgaria CASP licence is — and what it replaced

A Bulgaria crypto licence is a Crypto-Asset Service Provider (CASP) authorisation, issued by the Financial Supervision Commission (Комисия за финансов надзор) under the Markets in Crypto-Assets Regulation — MiCA, Regulation (EU) 2023/1114. The FSC is the competent authority for CASP licensing in Bulgaria (the Bulgarian National Bank handles the prudential side of e-money tokens). It is the single EU credential for firms that provide crypto services: running an exchange, safeguarding client assets, executing orders, operating a trading platform, or advising on crypto-assets.

The word “replaced” is doing real work here. Before MiCA, Bulgaria — like most of the bloc — ran a light national register for crypto providers with minimal substance behind it. MiCA retired that model across the EU. The CASP licence that took its place is a proper financial-services authorisation, supervised by the FSC, carrying capital, governance, AML and technology obligations the old registration never had. If you have read our VASP, CASP and MiCA explainer, this is the same EU-wide shift landing in Bulgaria. Anyone still marketing a “Bulgarian VASP licence” in 2026 is describing something that is either a CASP or a registration that has already expired — and the difference is expensive to get wrong.

Capital by service class

MiCA sets minimum capital by the class of service you provide, and — this is the point operators most often miss — those tiers are the same in every EU country. You do not pick Bulgaria for cheaper capital; the capital is fixed by the regulation. You pick it for the tax, the cost base and the FSC’s process. What Bulgaria determines is which class (or classes) your business falls into.

Two things matter in planning. First, the capital is funded, not a fee — it stays in the business as working capital, held in a bank or e-money account within the EEA, not paid away to the regulator. Second, the classes are cumulative: an exchange with custody sits in Class 2, and a full order-book trading venue lands you in Class 3 at €150,000. Most exchange and broker projects sit at €125,000. Scoping the right class before you incorporate is the single decision that most affects your budget — our Bulgaria crypto licence cost breakdown models the full year-one number, capital included, and our Bulgaria crypto licence requirements guide sets out the complete document and governance checklist behind it.

One licence, 27 markets: the EU passport

The reason a CASP licence is worth the substance is the passport. Under MiCA Article 65, once the FSC authorises you, you can provide your licensed services into every other EU/EEA member state on a notification basis — the regulator in each host country is notified, and you are in. You license once in Sofia and passport everywhere, instead of applying licence-by-licence across 27 jurisdictions.

That is the single biggest upgrade in crypto licensing to date, and it is why an EU CASP is not really comparable to an offshore registration. An offshore VASP gets you legally live in one place; a Bulgarian CASP gets you the entire European single market — the largest regulated crypto market in the world — from one file. It also carries weight with the parties that decide whether you can actually operate: banks that hold your funds, the EMI and PI partners that provide your fiat rails, auditors and institutional counterparties. An FSC licence is an EU credential, and it opens doors an offshore permit never will.

The 10% tax advantage — the real reason to choose Bulgaria

Here is why cost-sensitive teams keep landing on Bulgaria. The country levies a flat 10% corporate tax — the standard headline rate, applied to almost all businesses, with none of the reduced-band conditions or graduated schedules you have to qualify for elsewhere. For a typical CASP, that is genuinely among the lowest effective corporate tax rates in the European Union. A profitable exchange or brokerage keeps materially more of its margin under a Bulgarian entity than under most EU peers, year after year — and unlike a one-off setup saving, a tax edge compounds for as long as you operate.

Tax is the headline, but it sits on top of a broadly low cost base — office, staff and professional-services costs in Bulgaria run well below the EU average, which matters because the FSC substance requirements are recurring, not one-off. The combination is the whole pitch: a full MiCA licence with the same passport as anywhere in the bloc, at a tax and running cost that lets a lean team actually afford to keep it.

The real substance requirement

This is where the modern Bulgaria licence separates hardest from the old register, and where the real work goes. A CASP authorisation requires a Bulgarian company with genuine local substance, not a nominee shell. That means a registered office and a real operating presence in Bulgaria, initial capital funded into an EEA account, and management the FSC assesses as qualified and fit-and-proper, with relevant financial-services or crypto experience on the board.

On top of the entity, you need a live compliance function. A dedicated MLRO (money-laundering reporting officer) and AML/CFT policies aligned to the EU’s 5th and 6th AML directives, the EU Transfer of Funds Regulation (the Travel Rule) for originator and beneficiary data on transfers, and suitability and source-of-funds checks on shareholders and UBOs. And since 17 January 2025, MiCA firms must run a DORA-compliant ICT programme — operational resilience, incident reporting, resilience testing and third-party ICT oversight — which for a crypto business also means serious custody, key-management and cybersecurity controls. None of this existed under the old register, and it is exactly what gives the CASP licence its standing. Building it properly is a project in itself, and the crypto-friendly banking and EMI/PI partners around it are usually the hardest single piece to line up.

Timeline, the deadline, and who it suits

Plan for roughly three to six months end to end on a complete, well-prepared file — incorporation, funding, file-building and the FSC’s assessment. The FSC reviews a complete application against a defined statutory clock and issues a reasoned decision, so the variable that decides your timeline is not the regulator’s queue but your own preparation. The classes must be scoped, the Bulgarian company incorporated and capitalised, the programme of operations and the AML, DORA and safeguarding policies drafted to FSC standard, and management genuinely fit-and-proper. Poorly prepared applications stall in review questions, which is where most of the timeline risk sits.

The one date to keep on the wall is 1 July 2026 — the outer limit of the MiCA transitional window (Article 143(3)) for legacy providers. That window has now closed, so new entrants apply directly to the FSC for a full CASP authorisation; there is no lighter interim route to fall back on. So who is it for? Bulgaria suits operators who genuinely need the EU market, can meet the capital and substance bar, and want the lowest sustainable cost of holding a full EU licence — exchanges, brokers, custodians and early-stage teams building a long-term European base. If your market is global or non-EU, an offshore or Gulf regime is often faster and cheaper, and no single licence covers every market — many groups run an EU CASP for Europe and a separate licence for the rest of the world.

The honest trade-off

Bulgaria is not a cheap, fast registration, and it would be dishonest to sell it that way. A modern CASP file costs real money in capital and substance, takes three to six months to build and clear, and requires a live compliance and DORA programme you maintain for as long as you hold the licence. What it buys is the entire EU single market from one authorisation, an FSC credential that unlocks banking an offshore permit cannot, and the lowest durable tax and running cost among serious EU options. For a business meant to operate in Europe for years, that combination is the whole point.

If a low-cost EU crypto base is where your project is heading, we run the entire file — the Bulgarian company, the substance and management, the AML and DORA framework, the FSC application and the crypto-friendly banking around it — with our fees and the state costs shown separately, never blended. See the scope on our Bulgaria crypto licence page, then book a free consultation and we’ll model the real year-one economics — the right service class, the capital, and the 10% tax position — before you commit a euro.

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.