Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Europe

Identity verification
built for Bulgaria Flag of Bulgaria

Лична карта, биометричен паспорт, and EU/EEA documents on one session — EU AMLD6 + GDPR + Measures Against Money Laundering Act 2018. $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Bulgaria.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Two pressures shape Bulgarian identity fraud: deepfake and synthetic-identity attacks on the wave of BNB-licensed payment institutions and FSC-supervised MiCA crypto operators onboarding through digital channels, and cross-border forgery pressure across the Schengen zone as Bulgarian banks onboard Romanian and North Macedonian residents. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Measures Against Money Laundering Act 2018 (MAMLA — AMLD6 transposition)
  • AMLD6 (EU Directive 2018/843)
  • GDPR (Regulation 2016/679)
  • MiCA (Markets in Crypto-Assets Regulation)
  • DORA (Digital Operational Resilience Act)
  • EU Regulation 2019/1157 (chip ID cards)
Regulators

Who supervises identity verification in Bulgaria.

These are the supervisors a Bulgaria verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • BNB

    Българска народна банка (Bulgarian National Bank) — central bank and prudential supervisor for banks, payment institutions, and electronic-money issuers. Sets Customer Due Diligence requirements under the Measures Against Money Laundering Act 2018.

  • FSC

    Комисия за финансов надзор (Financial Supervision Commission) — supervises investment firms, insurers, pension funds, and Crypto-Asset Service Providers under MiCA. Issues licensing and AML compliance requirements.

  • DANS

    Държавна агенция 'Национална сигурност' (State Agency for National Security) — acts as Bulgaria's Financial Intelligence Unit. Receives Suspicious Activity Reports from obligated entities under the Measures Against Money Laundering Act 2018.

  • KZLD

    Комисия за защита на личните данни (Commission for Personal Data Protection) — Bulgaria's supervisory authority for GDPR (Regulation 2016/679). Governs every identity verification on Bulgarian residents.

  • Audit Chamber

    Сметна палата на Република България (Audit Chamber of the Republic of Bulgaria) — PEP Level 1 institution; senior officials listed in Didit's AML screening layer as required by MAMLA and AMLD6.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Bulgaria database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • лична карта (the polycarbonate chip LD aligned with EU Reg. 2019/1157), биометричен паспорт (with the chip read on e-Passports), шофьорска книжка, and разрешение за пребиваване for non-EU residents.
  • Returns the name, ЕГН (единен граждански номер — personal identification number), date of birth, and expiry.
Read the docs
Stage 01Capture and read the ID
  • Лична карта (LD) — chip read on polycarbonate card
  • Шофьорска книжка · Разрешение за пребиваване
  • Биометричен паспорт — chip read on e-Passport
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Bulgarian watchlists:

  • Audit Chamber of the Republic of Bulgaria — PEP Level 1 (senior state audit officials).
  • Ministry of Defense — PEP Level 2 (senior ministry officials).
  • Ministry of Public Service — PEP Level 2 (senior civil service officials).
  • Commission for Protection of Competition (BGCPC) — SIE (state-invested entities under MAMLA).
  • Bulgarian Persons of Interest — SIP (special-interest persons database).
  • Financial Supervision Commission (FSC) — Warnings (regulatory enforcement notices).
  • EU Consolidated Financial Sanctions List — applies under EU enforcement in Bulgaria.
  • OFAC Specially Designated Nationals (SDN) — US Treasury designations.
  • MONEYVAL — Council of Europe AML evaluation findings.
  • UN Security Council Consolidated Sanctions List — global designations.
  • Europol Most Wanted — cross-border law enforcement designations.
  • FATF 40 Recommendations — risk-jurisdiction monitoring.
  • Eurojust — EU judicial cooperation designations.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Document validation — no public registry API in Bulgaria.

Bulgaria does not currently expose a public government consumer API open to third-party integrators for cross-checking national ID records against the civil registry. Identity validation in Bulgaria therefore relies on three complementary layers that Didit runs in parallel:

  • Document OCR + chip read — every field on the лична карта or паспорт is extracted and validated against ISO/ICAO templates in real time.
  • Biometric liveness + face match — the selfie is confirmed as live and matched against the document portrait, eliminating synthetic and replay attacks.
  • AML screening — the extracted name is screened across 1,300+ global and Bulgarian watchlists, catching sanctions, PEPs, and adverse-media hits that a registry lookup would not surface.

If an authoritative database validation API becomes available for Bulgaria, Didit will add it to the POST /v3/database-validation/ catalogue automatically — no integration changes required on your side.

Read the docs
Stage 04Document validation — no public registry API in Bulgaria

Document validation — no public registry API in Bulgaria — see the docs for the full module surface.

Documents covered

Every Bulgaria document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for Bulgaria.

One card per dataset Didit cross-checks against — civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Bulgaria.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page