In recent years, supervisory inspections under the Anti-Money Laundering Measures Act (AMLM Act) have become much more targeted and in-depth. Regulators in Bulgaria no longer simply check for the formal existence of internal rules and policies – they assess their real effectiveness: how well a company’s systems and processes actually reduce the risk of money laundering and terrorist financing.

What we will cover in this article:

• Which authorities carry out AML supervision in Bulgaria
• When inspections are conducted
• Stages and logic of an AML inspection
• What inspectors examine in detail
• Consequences when problems are identified
• Examples of common deficiencies
• Practical tips for the inspection
• How to prepare proactively
• How Compliance Navi can help you

Which authorities carry out AML supervision?

AML/CFT supervision in Bulgaria is performed by several main institutions, depending on the sector in which the obliged entity operates:

• Bulgarian National Bank (BNB) – Oversees banks, payment institutions, electronic money institutions, and other financial institutions within its scope. Inspections cover not only compliance with the AMLM Act and its Implementing Regulations but also internal guidelines and sector-specific standards based on good practices and international recommendations (e.g., FATF).
• Financial Supervision Commission (FSC) – Oversees insurers, insurance brokers, investment intermediaries, management companies, pension insurance companies, and other participants in the non-banking financial sector. Conducts both scheduled and thematic inspections, often in coordination with other authorities.
• State Agency for National Security (SANS) – Financial Intelligence Directorate (FID) – Bulgaria’s FIU. It is not a sectoral supervisor but coordinates the collection and analysis of information on suspicious transactions. It can conduct inspections independently or together with the BNB/FSC, request documents, and issue binding instructions to amend internal rules.

When are inspections carried out?

Inspections may be initiated in several situations:

• Scheduled inspections – Planned in the supervisor’s annual or multi-year program. Financial sector entities with normal risk are usually inspected every 2–3 years, while high-risk entities are inspected more often.
• Thematic inspections – Focused on a specific risk, process, or industry (e.g., procedures for establishing the source of funds or sanctions screening implementation).
• Inspections triggered by a signal or event – Initiated following a client complaint, whistleblower report, another authority’s alert, or media publication.
• Joint inspections – Conducted together by SANS and the relevant sectoral supervisor, often in complex cases requiring information exchange and coordinated actions.

Legal basis and resources inspectors use:

1. Notification and initial request – The entity receives an official letter detailing the inspection team, scope, period under review, and deadlines for providing the first set of documents (internal AML/CFT rules, risk assessment, KYC/EDD procedures, client data, training evidence, staff list, STRs, etc.).
2. Document review and sampling – Inspectors compare internal rules with regulatory requirements and test their actual application through sampling of client files, monitoring alerts, and sanctions hits.
3. On-site inspection – Interviews with the MLRO, compliance, and operational teams; demonstrations of key processes (e.g., client onboarding, handling of sanctions matches).
4. Follow-up questions and explanations – Additional questionnaires may be sent during the inspection, requiring evidence-based answers.
5. Report and instructions – The final report includes findings, risk assessment, prescribed measures, deadlines, and responsible persons.

What inspectors examine in detail:

• Risk appetite definition and its alignment with the business model
• Internal rules vs. actual processes
• Client, UBO, and PEP identification and verification procedures
• Transaction monitoring scenarios, alert handling, and efficiency
• Sanctions risk management – lists, screening frequency, escalation
• AML/CFT training – frequency, attendance, effectiveness assessment
• MLRO role organisation and governance reporting

Consequences when problems are identified:

When gaps or deficiencies are found during an AML inspection, the consequences depend on the severity, the sector, and the entity’s history. Supervisors usually apply a proportionate approach, but the main scenarios include:

1. Remediation orders – Mandatory measures to correct deficiencies (e.g., procedure updates, new controls, updated rules, staff retraining) with a set deadline (usually 30–90 days).
2. Administrative penalties – Fines under the AMLM Act, which can be substantial, often accompanied by remediation orders.
3. Restrictions on activity – Temporary or permanent prohibitions on onboarding certain clients or offering certain products.
4. Reputational damage – Public disclosure of serious findings can harm relationships with partners, clients, and service providers.
5. Personal consequences – Managers and MLRO’s may face restrictions on holding senior roles in the future.

Example deficiencies and consequences:

• Failure to conduct AML training – Fine of BGN 10,000 and 30-day deadline to organise training.
• Outdated risk assessment – Fine of BGN 15,000 and order to prepare an updated assessment.
• Incomplete high-risk client files – Fine of BGN 20,000 and 30-day remediation deadline.
• No sanctions screening procedure – Fine of BGN 25,000 and order to implement automated screening.

Important: While fines can usually be paid quickly, the deeper issue is that such findings show regulators, partners, and clients that the company lacks effective internal controls. This undermines trust, raises doubts about risk management capabilities, and may lead to loss of key relationships. Rebuilding reputation after such findings is a long and costly process, requiring both corrective actions and time to prove sustained compliance.

Practical tips for AML inspections:

• Be open and transparent with inspectors
• Never conceal or falsify information
• Ensure data provided matches previous regulatory reports
• Meet remediation deadlines and document the actions taken
• Appoint a single, knowledgeable contact person for the inspection team
• Correct factual inaccuracies in the findings with evidence
• Set realistic timelines for action plans
• Keep key documents updated and ready for review
• Review recent reports sent to regulators in advance
• Conduct internal audits to identify issues before the regulator does
• Stay calm and professional, even in tense moments
• Document all interactions during the inspection
• Use feedback from inspectors to improve processes

How to prepare proactively:

• Align internal rules with actual practice and good sector practices
• Keep risk assessments current and aligned with sectoral risk assessments
• Maintain complete, well-organised client files, especially for PEPs and high-risk clients
• Adjust transaction monitoring settings to match your risk profile
• Test sanctions screening regularly with recent updates
• Keep training evidence up to date
• Prepare the team for typical supervisory questions

Conclusion

AML inspections in Bulgaria are now focused on the effectiveness of measures, not just on documentation. Good preparation, clear processes, and traceable actions are key to a successful inspection. They should be seen not only as control exercises but as opportunities to strengthen financial crime prevention systems.

How Compliance Navi can help:

• Pre-audit simulation to identify and fix weaknesses before the real inspection
• Updating/adapting internal rules to match legal requirements and best practices
• Reviewing client base and risk assessment readiness
• Training MLROs, compliance teams, and first-line staff for effective communication with inspectors
• Support during and after inspections, including drafting responses, action plans, and evidence of implementation