Pig-Butchering Scams in Bulgaria
Romance-crypto investment scams target Bulgarians via Viber and Facebook, with victims channelling leva or euro to fake platforms through Bulgarian banks or local crypto exchanges.
Part of: Pig-Butchering Scams
Last reviewed: 1 June 2026
Bulgaria sits at an interesting intersection for pig-butchering fraud: the country is both a target market for international scam operations and occasionally a source of fraudulent call-centre activity. Bulgarian-speaking victims are approached via Viber — the dominant messaging app in Bulgaria — Facebook, and Instagram by contacts posing as successful Bulgarian expatriates in Western Europe or foreign investors.
The Financial Supervision Commission (FSC/KFN) regulates investment services and has issued multiple warnings about unlicensed crypto and forex platforms, but public awareness remains uneven. Victims convert leva to euro or USDT through established Bulgarian exchanges or informal channels before funds enter the fraudulent platform.
How this scam works on Bulgaria
Contact begins with a Viber message or Facebook friend request from a profile presenting as a Bulgarian living in Germany, the Netherlands, or the UK with a luxury lifestyle. After weeks of warm conversation, the scammer mentions a 'private investment channel' they have been using, showing fabricated profit screenshots.
Victims send leva via bank transfer to a local mule account or convert to USDT on an exchange. The fake trading platform — often branded to look like a regulated Bulgarian or EU broker — shows growing balances. Withdrawal attempts trigger a request for a 'Bulgarian National Revenue Agency (NRA) tax clearance fee' payable in crypto.
Bulgaria's large diaspora in Western Europe creates a natural social-engineering entry point: scammers mimicking expatriate Bulgarians benefit from genuine familiarity with the cultural context.
Common red flags
- Viber or Facebook contact presenting as a Bulgarian expat who quickly mentions investment opportunities
- Trading platform not listed in the FSC (KFN) registry at fsc.bg
- Funds requested via bank transfer to a personal Bulgarian IBAN
- Withdrawal blocked pending payment of an 'NRA tax clearance fee' in crypto
- Contact becomes evasive or emotional when you ask for a video call or in-person meeting
- Scammer claims to be verified by 'EU crypto regulations' without specifying a real licence
How to protect yourself
- Check the FSC (KFN) registry at fsc.bg for any investment operator before depositing
- Verify broker EU passporting status through ESMA's FIRDS or the relevant EU home regulator
- Never send funds to individual IBAN accounts for investment purposes
- Discuss any large investment decision with an independent FSC-regulated advisor
- Be especially sceptical of contacts presenting as Bulgarians abroad
- Report unverified platforms to the FSC before investing
How to report it
- Report to the Financial Supervision Commission (FSC/KFN) at fsc.bg
- File a complaint with the General Directorate Combating Organised Crime (GDBOP) cybercrime unit
- Notify your bank to attempt a recall on any recent transfers to unknown IBANs
Frequently asked questions
Does Bulgaria have a specific crypto fraud unit?
The GDBOP (General Directorate Combating Organised Crime) of Bulgaria's Ministry of Interior handles organised financial crime including online investment fraud. A dedicated cybercrime reporting portal is available at cybercrime.bg.