Regulatory scope reference

MiCA compliance in Bulgaria: who is in scope and what is owed

How MiCA applies to companies operating in or serving Bulgaria — scope tests, the obligations that follow, and the primary sources to verify each one against.

Markets in Crypto-Assets Regulation (MiCA) establishes a harmonized regulatory framework across the European Union, affecting entities based in or offering services to clients in Bulgaria. Supervision is coordinated through European authorities such as ESMA and the EBA alongside national competent authorities. Entities operating in this jurisdiction must evaluate their scope and obligations under the framework described in Regulation (EU) 2023/1114 (MiCA) — full text.

Extraterritorial Scope and Market Reach in Bulgaria

The application of Regulation (EU) 2023/1114 (MiCA) — full text reaches any entity providing crypto-asset services or issuing crypto-assets within the European Union, including Bulgaria. Organisations established outside the EU are generally caught if their services are targeted at clients or addresses located within the EU. Teams can review structured operational parameters via the mica-readiness framework and methodology guidance found in the methodology-library.

When firms target Bulgarian residents without a physical establishment, regulators evaluate whether the activity constitutes proactive solicitation or reverse solicitation. Relying solely on passive access requires strict adherence to legal exemptions, as documented in the cross-border-compliance resources. For specific technical assessments, entities often reference tools such as the tools/token-classifier to determine initial applicability under the statute.

Assessing whether an entity is in scope requires mapping specific business models against definitions provided by ESMA — Markets in Crypto-Assets Regulation (MiCA). Organisations must check if their underlying ledger technology, token structure, or custodial arrangements trigger regulatory oversight. Further analytical assistance is available through automated evaluation scripts and the agents directory.

Classification of Entities and Regulated Services

Entities falling under the regulatory perimeter are typically categorized based on their activities, such as issuing asset-referenced tokens, issuing e-money tokens, or providing core intermediary services. A designated crypto-asset-service-provider must secure formal authorization before operating. Technical classifications can be refined by using the tools/mica-asset-classifier and the tools/stablecoin-classifier.

Asset issuers must carefully distinguish their products between an asset-referenced-token and an e-money-token, as different capital and reserve requirements apply. Tokens classified as a significant-asset-referenced-token face heightened supervisory scrutiny from European authorities. Detailed procedural steps are outlined in the guides/mica-regulation-crypto-compliance material.

To provide practical clarity on these distinctions, the classification matrix below outlines common operational categories under the regulatory text:

Mandatory Disclosures and White Paper Obligations

Issuers offering crypto-assets to the public in Bulgaria must draw up, notify, and publish a crypto-asset-white-paper that complies with disclosure mandates. This document must contain detailed information about the issuer, the project, the rights attached to the tokens, and the underlying risks. Compliance teams can consult the faq for general procedural inquiries regarding publication workflows.

The content requirements for these disclosures are strictly enforced under Regulation (EU) 2023/1114 (MiCA) — full text to protect retail purchasers from misleading marketing materials. Marketing communications must be clearly identifiable as such and must not contain materially inconsistent statements compared to the published white paper. Additional compliance checkpoints are maintained within the learn database.

Supervisory bodies, including those described in European Commission — crypto-assets policy, monitor these publications to ensure market integrity. Issuers failing to meet transparency standards face administrative measures and supervisory powers. Practitioners frequently cross-reference these standards with insights published in the blog.

Operational and Prudential Requirements for Service Providers

Firms authorized as a crypto-asset-service-provider must satisfy continuous organizational, governance, and financial safeguards. These include maintaining an appropriate own-funds-requirement and establishing robust ICT risk management frameworks. Technical infrastructure must withstand operational stress, as detailed in the calculators resource for financial resource estimations.

When holding client assets, entities must implement strict protocols for the custody-of-crypto-assets to prevent loss, theft, or administrative commingling. Market participants are also bound by prohibitions against insider dealing and market manipulation, governed by rules comparable to market-abuse-crypto. Operational readiness can be benchmarked using the mica-readiness diagnostic tool.

Passporting mechanisms allow entities authorized in one EU member state to provide services across other jurisdictions, including Bulgaria, following notification procedures outlined under passporting. Guidance on executing cross-border operations efficiently is available through cross-border-compliance.

Exceptions and Reverse Solicitation Boundaries

Certain activities fall outside the standard authorization requirements, provided they meet strict statutory exceptions. A frequent area of analysis involves reverse solicitation, where a client initiates the purchase of services entirely at their own exclusive initiative. Regulatory authorities interpret this exception narrowly, prohibiting firms from using marketing campaigns to induce such requests.

Firms relying on the reverse solicitation exemption must document client interactions meticulously to withstand supervisory review. Failure to prove that the client initiated the relationship can result in enforcement action for unauthorized service provision in Bulgaria. Detailed analytical perspectives on these boundaries are regularly discussed in the blog.

Legal and compliance teams should verify specific jurisdictional interpretations through the primary text of Regulation (EU) 2023/1114 (MiCA) — full text and consult local regulatory guidance. General inquiries regarding regulatory boundaries can also be addressed via the faq section.

Supervisory Enforcement and Ongoing Compliance Verification

Supervision of crypto-asset markets involves cooperation between national competent authorities in Bulgaria and pan-European bodies like ESMA — Markets in Crypto-Assets Regulation (MiCA). These regulators possess investigative powers, including the ability to request data, conduct on-site inspections, and suspend public offerings. Compliance teams can review procedural standards in the methodology-library.

Organisations must maintain continuous compliance tracking and update their documentation as regulatory guidelines evolve. Internal audit logs, white paper revisions, and governance minutes should be systematically archived. Further operational tools are accessible via the agents interface and the calculators suite.

For additional context regarding comparative international frameworks, compliance officers occasionally review external standards such as guides/uk-fca-crypto-compliance-guide or guides/cftc-crypto-regulation-guide, though primary adherence must remain anchored to EU law. Reference materials can be found across the learn portal.

BizLegal AI is regulatory research software, not a law firm. This page is general information, not legal advice, and does not create a lawyer-client relationship. Verify every deadline, threshold and obligation against the primary source cited before you act on it, and consult qualified counsel in the relevant jurisdiction.

Frequently asked questions

Does MiCA apply to all tokens issued or sold to residents in Bulgaria?

The regulation applies broadly to crypto-assets offered to the public or admitted to trading within the European Union, including Bulgaria. However, certain instruments such as fully decentralized tokens without a clear issuer or specific central bank digital currencies may fall outside the standard scope. Issuers must evaluate their specific token characteristics against statutory definitions.

What triggers the requirement for authorization as a crypto-asset service provider?

Providing services such as custody, administration, exchange, execution of orders, or portfolio management on a professional basis to third parties triggers authorization requirements. Entities must apply through their home national competent authority or utilize appropriate passporting mechanisms before onboarding clients.

How does reverse solicitation affect cross-border service delivery?

Reverse solicitation applies when a client exclusively initiates a service request from an unlicensed provider without prior solicitation. Regulators interpret this exemption restrictively, and firms cannot rely on general marketing or digital advertising to justify reliance on this provision.

Where can compliance teams verify official regulatory texts and updates?

Official regulatory texts are published in the Official Journal of the European Union. Practitioners can also review updates provided by European supervisory authorities and consult specialized compliance resources for structural readiness assessments.

Sources

Last reviewed 2026-11-07.