Quick Answer
KYC (Know Your Customer) refers to the mandatory identity and ownership verification procedures that banks, accountants, lawyers, and other regulated professionals in Bulgaria must carry out under anti-money laundering law. The process is structured, risk-based, and ongoing. Companies that approach it with accurate documentation and a clear ownership structure will find it straightforward.
What KYC Means in Practice
KYC is the operational side of anti-money laundering compliance. It is not a Bulgarian peculiarity — it is a standardised process required across the European Union under successive Anti-Money Laundering Directives, transposed into Bulgarian law through the Measures Against Money Laundering Act (MAMLA). Whenever a company engages with a regulated professional in Bulgaria — opening a bank account, appointing an accountant, working with a notary or lawyer — a KYC process will follow.
For foreign founders and cross-border investors, the experience can feel repetitive or unusually detailed. In practice, each institution conducts its own review independently. That is not an administrative quirk — it is a statutory obligation. Understanding the structure of the process is the most effective preparation.
Who Is Required to Perform KYC Checks?
Under MAMLA, “obliged entities” must apply customer due diligence measures before and during any business relationship. The obligation extends across a wide range of professional categories:
- Banks and payment institutions
- Accounting firms and auditors
- Lawyers and notaries
- Corporate service providers
The scope matters for one practical reason: even if your bank has already verified your identity and ownership structure, your accountant is required to do the same independently. Each obliged entity carries its own statutory duty. There is no sharing of completed KYC between institutions.
What Is Verified During KYC?
KYC procedures cover four core areas: identity verification of individuals connected to the company, ownership and control structure, the nature of the business relationship, and ongoing monitoring. Each of these has a practical documentation dimension.
Identity Verification
For individuals — shareholders, directors, and ultimate beneficial owners — regulated entities will request a valid passport or national identity document and proof of residential address. Depending on the risk profile of the relationship, a declaration of source of funds may also be required. Documents issued outside the EU are sometimes required to be notarised or apostilled before they can be accepted.
Corporate Documentation
For the company itself, the standard package typically includes:
- A recent extract from the Bulgarian Commercial Register
- Articles of association
- Shareholder register
- Relevant management resolutions
If the company is incorporated abroad, equivalent registry extracts and incorporation documents are required, typically accompanied by certified translations.
UBO Identification and Verification
UBO verification is a central and non-negotiable component of KYC. Regulated professionals will request an ownership structure chart, identification of all individuals holding more than 25% of shares or voting rights, information on indirect holdings, and clarification of any control mechanisms that operate outside the shareholding structure. A full explanation of how UBO obligations work in Bulgaria is available in our article on Ultimate Beneficial Owner (UBO) in Bulgaria.
One practical point worth noting: UBO information must be filed in the Bulgarian Commercial Register, but filing alone does not satisfy the KYC requirement. Banks and other obliged entities will cross-check declared ownership against registry records, review the full ownership chain, and assess any indirect or layered holdings. Discrepancies between the declared and registered structure must be reported. Keeping the Commercial Register filing accurate and current removes a significant source of friction in onboarding.
Enhanced Due Diligence: When Standard KYC Is Not Enough
KYC in Bulgaria follows a risk-based approach, meaning the intensity of the review is calibrated to the assessed risk level of the relationship. In certain situations, Enhanced Due Diligence (EDD) applies. This is not a punitive measure and does not imply suspicion. It reflects the regulatory classification of a higher-risk category.
The table below summarises the most common EDD triggers and their practical implications:
| Trigger | Example | Practical Effect |
|---|---|---|
| Complex ownership chain | Multi-layer holding structure | Full chain documentation required |
| High-risk jurisdiction | Shareholder resident in FATF-listed country | Extended verification and source-of-funds review |
| Politically Exposed Person (PEP) | Director holds public office | Additional management declarations |
| Cash-intensive model | High-volume retail or hospitality | Business activity review |
| Significant cross-border flows | Regular international transfers | Source-of-funds documentation |
For companies with complex structures — particularly holding arrangements with multiple jurisdictions — it is worth noting that EDD sometimes extends the review timeline simply because international verification takes longer. Companies planning due diligence processes in Bulgaria that involve foreign entities should factor this into their onboarding schedule.
KYC Is an Ongoing Obligation
One of the most common misunderstandings about KYC is that it is a one-time exercise. It is not. Obliged entities are required to perform periodic document refreshes, monitor ownership changes, and revisit their risk assessment whenever the nature of the business relationship changes. This explains why a bank may request updated identification several years into a relationship, even when nothing has changed operationally. It is a regulatory refresh cycle, not an indication of a problem.
For companies, the practical implication is straightforward: keep identification documents valid, ensure that UBO filings remain accurate, and respond promptly when documentation is requested. Delays in providing updates are the most common source of friction in otherwise routine compliance processes.
Common Misconceptions About KYC in Bulgaria
“My bank already has this.” Each obliged entity conducts its own KYC review independently. Sharing completed documentation between institutions is generally not permitted under the applicable regulatory framework.
“Why do I have to send this again?” Periodic review is legally required. Expired documents, change of address, ownership changes, and regulatory refresh cycles all trigger updates, regardless of the length or stability of the existing relationship.
“Small companies are exempt.” Company size does not remove KYC obligations. Risk level may vary, but the obligation to verify identity and ownership applies to all companies engaging with regulated entities in Bulgaria.
“This feels intrusive.” The process is standardised across the EU and reflects the same requirements that apply in Germany, the Netherlands, or any other member state. Transparency and traceability in financial relationships are the objective.
Conclusion and Next Steps
KYC in Bulgaria is not an exceptional local requirement. It is the practical implementation of EU anti-money laundering standards, applied consistently across the professional services sector. The process is structured, the documentation requirements are predictable, and the outcome — for companies that approach it with accurate records and clear ownership structures — is straightforward onboarding.
The Bulgaria Business & Tax Knowledge Hub covers the broader compliance landscape for companies operating in or relocating to Bulgaria, including related obligations across tax, corporate governance, and employment.
If your company is undergoing onboarding with a Bulgarian bank or professional advisor, or if your ownership structure involves multiple jurisdictions, a compliance review is advisable before the process begins. You may explore our governance and compliance advisory services or contact us for tailored guidance. For reference, our AML/KYC policy sets out how Aidos applies these standards in its own client onboarding process.
FAQ — KYC in Bulgaria
What does KYC mean in Bulgaria?
KYC (Know Your Customer) refers to mandatory identity and ownership verification procedures required under Bulgarian anti-money laundering law. Whenever a company engages with a regulated entity — such as a bank, accounting firm, or lawyer — those professionals must verify who they are working with and who ultimately controls the company before establishing or continuing a business relationship.
Is KYC mandatory for all companies in Bulgaria?
Yes. Any company that engages with an obliged entity in Bulgaria is subject to KYC procedures. This applies regardless of the size or nationality of the company. The obligation rests with the professional or institution conducting the check, but the company must provide the required documentation to proceed.
How long does KYC verification take?
For straightforward Bulgarian structures, initial onboarding typically completes within a few business days. Cross-border or layered ownership structures can extend the review period, particularly where documents must be verified internationally or where enhanced due diligence applies. Preparing a complete and accurate documentation package in advance is the most effective way to reduce the timeline.
What triggers enhanced due diligence?
Enhanced due diligence is triggered by a higher risk classification. Common triggers include complex ownership chains, involvement of jurisdictions classified as high-risk under EU guidelines, politically exposed persons connected to the company, cash-intensive business models, and significant cross-border financial flows. It involves additional documentation requirements but does not indicate suspicion of wrongdoing.
Why do banks request UBO information separately from the Commercial Register?
Filing UBO information in the Commercial Register satisfies the registration obligation but does not complete the KYC process. Banks and other obliged entities are required to independently verify the declared ownership, cross-check it against registry records, and assess the full ownership chain — including indirect holdings. If discrepancies are found, they must be reported. Accurate and current registry filings significantly simplify this process.
Disclaimer
This article is for informational purposes only and does not constitute tax, legal, or accounting advice. Each case requires individual assessment under Bulgarian and applicable international law.
Last reviewed: March 2026
© 2011–2026 Aidos Accountancy Services. All rights reserved.