DAC8 + CARF in Bulgaria 2026 — What Crypto Holders Must Report

The era of invisible crypto holdings is over. On 1 January 2026 the EU's DAC8 directive (Council Directive (EU) 2023/2226) entered into force, and on the same date the OECD's parallel Crypto-Asset Reporting Framework (CARF) went live across 52 committed jurisdictions. From this point onwards every regulated crypto-asset service provider (CASP) collecting customer data in the EU — and most regulated platforms outside it — will report each user's identity, holdings and transactions to the user's home tax authority. The first reports are due to national regulators by 31 January 2027, and EU tax authorities will exchange the data by 30 September 2027. For Bulgarian tax residents that means the National Revenue Agency (NRA) is about to receive an X-ray of every regulated wallet you have ever touched. This guide explains exactly what changes, why Bulgaria is still the best place in Europe to be a compliant crypto holder, and the four steps to take before the first 2027 exchange.

What DAC8 Is — in Plain English

DAC8 is the eighth amendment to the EU's Directive on Administrative Cooperation in the field of taxation, the umbrella legal instrument that lets tax authorities of the 27 Member States share information automatically. Each amendment has expanded the scope:

• DAC1 (2011) — the original framework for spontaneous exchange.
• DAC2 (2014) — financial accounts (CRS into EU law).
• DAC6 (2018) — cross-border tax arrangements that look aggressive.
• DAC7 (2021) — digital platforms (Airbnb, Booking, Etsy, eBay).
• DAC8 (2023) — crypto-asset service providers and e-money issuers.

The EU was the first major jurisdiction to legislate crypto reporting. The OECD's CARF, adopted in 2022 and operationalised across 52 jurisdictions, mirrors DAC8 almost word-for-word so that the EU regime and the non-EU regime work as a single network. Whether you trade through Bitstamp in Slovenia, Coinbase Europe in Ireland, Kraken USA, Binance via its Cayman entity, OKX from Hong Kong or a Swiss-licensed institutional desk — if the venue is in a CARF-committed jurisdiction, the data flows.

How Bulgaria Has Implemented DAC8

Bulgaria transposed DAC8 by amending the Tax and Insurance Procedure Code (TIPC, Bulgarian: ДОПК) in late 2025. The transposition expands the existing automatic exchange chapter (Chapter Sixteen, Section VIII of the TIPC, originally enacted for DAC7) by adding crypto-asset reporting obligations for all CASPs registered or operating in Bulgaria. The implementing instrument is an ordinance of the Minister of Finance specifying the technical schema (XML), TIN matching, due-diligence procedures and templates.

For practical purposes the regime mirrors the EU directive verbatim — Bulgaria did not gold-plate. Reporting CASPs are licensed under MiCA (in force in Bulgaria from 8 July 2025 under the Markets in Crypto-Assets Act; transitional period to 1 July 2026). The Bulgarian Financial Supervision Commission (FSC) issues CASP licences; the NRA receives the reporting feed.

Who Reports What — the Data the NRA Will Receive

Two categories of reporting subjects exist:

• Reporting Crypto-Asset Service Providers (RCASPs) — every authorised CASP, plus crypto-asset operators (CAOs) and exchanges, including platforms providing custodial services, exchange services, transfer services and trading on behalf of customers. Decentralised protocols without a controlling entity are out of scope; everything else is in.
• Reportable users — individuals or entities tax-resident in any EU Member State (DAC8) or any CARF-committed jurisdiction (CARF).

Data points reported per user, per asset, per year

Read that table again. The NRA receives the year-end balance of every asset and the gross flow of every transaction. With this information the NRA can independently reconstruct cost basis and verify any capital gains return filed under Article 33 of the Bulgarian Personal Income Taxes Act (PITA).

Timeline — the Calendar that Matters

Thresholds, De Minimis and the “Casual Holder” Myth

One of the most repeated misconceptions on crypto forums is that small holdings are exempt. They are not. DAC7 (the goods platforms regime) does have a de minimis — fewer than 30 transactions and under EUR 2,000 per year of sales escape reporting. DAC8 has no de minimis whatsoever. A single transaction in the year, or any year-end balance above zero, makes you a reportable user.

This design choice is deliberate. The whole point of CARF is to be airtight at the wallet level. Negative reporting (telling the regulator nothing of consequence) is what the regime is built to eliminate.

Why Bulgaria Is Still the Best EU Destination for Crypto Holders — Now Even More So

The headline is counter-intuitive: DAC8 makes Bulgaria more attractive, not less. Here is why.

The rates are unchanged. A Bulgarian tax resident pays 10% PIT on individual capital gains from crypto disposals (Article 33 PITA). The same person trading through an EOOD pays 10% corporate income tax (Article 5 CITA) on the company profit, plus 5% dividend tax on the distribution (Article 38 PITA). Total: 15% combined — the lowest in the EU. See our 2026 ranking of the lowest-tax EU countries and the EOOD vs Freelancer calculator.

The compliance burden is symmetric across the EU. Every Member State implements the same DAC8. A Bulgarian resident faces the same level of reporting visibility as a German, French or Italian resident — but pays a fraction of the tax. Pre-DAC8, residents of high-tax jurisdictions could partly compensate by being “invisible”. That avenue is now closed. Therefore, the relative advantage of a low-rate jurisdiction is greater post-DAC8 than pre-DAC8.

MiCA gives Bulgaria a clean regulatory canvas. The Markets in Crypto-Assets Act adopted in Bulgaria on 20 June 2025 (in force 8 July 2025) gives the FSC a clear mandate to license CASPs and an explicit transitional period to 1 July 2026 for incumbents. Bulgarian-licensed CASPs are now genuinely European-passportable. For a founder considering where to seat a CASP business, Bulgaria offers low tax, English-fluent counsel, EU passporting and a regulator that is engaged but not adversarial.

The DAC8 Readiness Action Plan — 4 Steps Before 30 September 2027

Step 1 — Establish your tax residency status, in writing

The whole DAC8 reporting chain pivots on which country the CASP records as your country of residence. CASPs use the TIN you supplied at onboarding, your declared residence address and (where available) a self-certification. If your situation has changed in 2024 or 2025, the data the CASP will report in January 2027 may attribute you to the wrong country — or to two countries.

Update your KYC profile on every CASP you use to reflect your Bulgarian address, your Bulgarian personal number (ЕГН) and, where requested, attach the official NRA Tax Residency Certificate (form ОКд-273). If you do not yet hold one, see our guide to obtaining the Bulgarian Tax Residency Certificate.

Step 2 — Reconcile your historical positions

Pull a complete transaction history from every CASP you have ever used, plus on-chain data for self-custody. Run it through a CARF-compatible tool (Koinly, CoinTracker, Accointing, ZenLedger) that can produce a Bulgarian-format Article 33 PITA report. Cross-check that report against what you previously filed. Investigate discrepancies in:

• Cost basis. Bulgaria allows FIFO (first-in, first-out) by default; you can elect average-cost in some cases. Pick one method and apply it consistently.
• Staking, lending and DeFi rewards. Taxable as “other income” under Article 35 PITA at fair market value on receipt. Disposals subsequently trigger Article 33.
• Airdrops, forks, NFT mints. Treated as other income on receipt at fair market value. NFT secondary sales follow Article 33.
• Lost or stolen assets. Provable losses can offset gains in the same year (Article 33(5) PITA) but require evidence (police report, on-chain transaction trail).

Step 3 — File corrective returns where needed

Bulgaria's tax prescription period is 5 years ordinary plus a 10-year absolute period (Article 171 TIPC). For criminal tax fraud (Article 255 CC) the prescription is 15 years (22.5 absolute). A self-initiated corrective return before the 2027 cross-check normally results in minimal or zero administrative penalties; the same correction discovered by audit triggers full penalties plus interest, and in larger cases criminal liability. The asymmetry is brutal. If your historical reconciliation reveals an unfiled gain, the timing of remediation matters more than the size.

Step 4 — Pick the right entity going forward

For a Bulgarian resident generating ongoing crypto income, the entity choice usually breaks down into three routes:

Run the numbers through our EOOD vs Freelancer calculator with your specific income level. Above approximately EUR 70,000–80,000 per year the EOOD becomes more efficient because the maximum insurable income cap (EUR 2,148/month for 2026) makes social contributions decoupled from earnings.

What If You Use Non-EU Platforms?

CARF was designed precisely to solve this problem. The OECD secured commitments from 52 jurisdictions including Switzerland, the United Kingdom, Singapore, the UAE (the DIFC and ADGM specifically), the Cayman Islands, the BVI, Hong Kong, Australia, Canada, the Bahamas, Bermuda, Gibraltar, Guernsey, Jersey, Isle of Man, Liechtenstein, Mexico, South Africa, Indonesia and a long tail of smaller financial centres. The list grows every quarter.

If a platform is licensed in any CARF-committed jurisdiction, it must report under that jurisdiction's CARF rules. The home regulator exchanges the data with the user's country of residence. For a Bulgarian resident on Binance Cayman, OKX Hong Kong, Bybit BVI or Bitfinex BVI, the practical effect is identical to DAC8: the NRA receives the file.

Jurisdictions that have NOT committed to CARF as of 2026: Russia, Iran, North Korea, Cuba, Venezuela and a handful of micro-states with no relevant crypto infrastructure. Effectively, every platform a normal user will encounter is in scope.

Special Case: US Persons Tax-Resident in Bulgaria

If you are a US citizen or green card holder living in Bulgaria, you are simultaneously subject to:

• US worldwide taxation (US citizenship-based taxation) — you must file IRS Form 1040 every year regardless of where you live.
• Bulgarian tax residency — if you spend more than 183 days in Bulgaria or your centre of vital interests is here.
• The US-Bulgaria Double Tax Treaty (signed 23 February 2007, in force 15 December 2008) — gives Bulgaria taxing rights on most capital gains for Bulgarian residents.
• FATCA — your Bulgarian CASP and Bulgarian bank report your accounts to the IRS via the NRA.
• FBAR — you separately file FinCEN Form 114 for any non-US financial accounts (including most crypto wallets at custodial CASPs) where the aggregate exceeded $10,000 at any point in the year.
• Form 8938 — attached to Form 1040 for foreign financial assets above the relevant threshold.

The combination of FATCA + DAC8 + CARF + FBAR means a US person in Bulgaria is reported four times: once by the Bulgarian CASP to the NRA (DAC8), once by the same CASP to the IRS via the NRA (FATCA), and twice by the individual (FBAR + Form 8938). For practical guidance see our forthcoming articles on the US-Bulgaria DTT and the moving to Bulgaria as a US expat tax guide.

Penalties — What Happens If You Are Wrong

Three layers of consequence stack on top of each other:

Administrative (PITA + TIPC)

• PITA Article 80 — EUR 50 to EUR 1,000 for filing a false or incomplete return, doubled for repeat offences.
• TIPC Article 124(1) — EUR 200 to EUR 500 for failure to provide requested information.
• PITA Article 81 — tax due plus statutory interest at BNB base rate + 10 percentage points per annum (currently around 11.5% p.a.).

Tax reassessment (TIPC)

• Under Article 122 TIPC the NRA may apply an indirect method — assessing tax on accretion of wealth where reported income does not match observed asset growth. DAC8 data is a textbook trigger.

Criminal (Criminal Code Article 255)

• Basic: 1 to 6 years imprisonment + a fine where evaded tax exceeds BGN 3,000 (approximately EUR 1,534).
• Large scale (BGN 3,000 to BGN 12,000 / EUR 1,534 to EUR 6,136): 2 to 8 years.
• Particularly large scale (above BGN 12,000): 3 to 10 years plus confiscation.
• Bulgarian criminal prescription for offences in this range is 15 years (22.5 absolute).

The economics of remediation are unambiguous: file a corrective return now, before the September 2027 exchange, and the cost is usually just the tax due plus interest. After the exchange, the cost can include criminal exposure.

Key Takeaways

• DAC8 and CARF entered into force on 1 January 2026. First exchange to the NRA: 30 September 2027.
• Bulgaria implemented DAC8 without gold-plating — the regime mirrors the EU directive.
• No de minimis: any account, any balance, any transaction is reportable.
• The NRA receives a complete X-ray: identity, year-end balances, all buys, sells, swaps, transfers and external addresses.
• Bulgaria's 10% PIT / 15% combined remains the lowest in the EU. DAC8 makes the relative advantage stronger, not weaker.
• Use the window before 30 September 2027 to reconcile historical positions and file corrective returns.
• For US persons resident in Bulgaria, DAC8 layers on top of FATCA, FBAR and Form 8938 — total reporting load is heavy but manageable.
• Penalties for under-reporting after DAC8 stack across administrative, tax and criminal regimes. Self-correction before the exchange is the only sensible play.

Frequently Asked Questions

Sources and Further Reading

• Council Directive (EU) 2023/2226 (DAC8) — full text on EUR-Lex
• OECD — Crypto-Asset Reporting Framework (CARF)
• European Commission — DAC8 explained
• Bulgarian National Revenue Agency (NRA)
• Bulgarian Financial Supervision Commission (FSC) — CASP licensing
• Bulgarian Tax Residency Guide (Innovires)
• Lowest-Tax EU Countries 2026 (Innovires)
• EOOD vs Freelancer calculator (Innovires)