Attorney Bilal Alyar | Istanbul Bar Association, Reg. No: 54965 | Last Updated: March 2026

Turkey ranks consistently among the top five countries globally for cryptocurrency adoption, with an estimated 15-20 million crypto users in a population of 85 million. The passage of Law No. 7518 on the Amendment of the Capital Markets Law in June 2024 marked a watershed moment — Turkey established one of the world’s most comprehensive regulatory frameworks for crypto asset service providers (CASPs), bringing the industry under the oversight of the Capital Markets Board (SPK/CMB). This guide, prepared by Attorney Bilal Alyar (Istanbul Bar Association, Registration No: 54965), provides a thorough analysis of Turkey’s crypto and blockchain legal landscape in 2026, covering regulation, licensing, taxation, compliance, and the practical implications for investors, businesses, and developers.

Turkey’s Crypto Regulatory Timeline: From Ban to Framework

Understanding Turkey’s current crypto regulations requires context on the regulatory journey: April 2021: The Central Bank of Turkey (TCMB) issued Regulation on Disuse of Crypto Assets in Payments, prohibiting the use of crypto assets for purchasing goods and services. This regulation did NOT ban crypto trading, holding, or investing — only payments. April 2021: The Thodex exchange collapse — CEO fled Turkey with an estimated $2 billion in user funds, affecting 400,000+ users. This event catalyzed legislative action. 2021-2023: MASAK (Financial Crimes Investigation Board) aggressively expanded enforcement against crypto-related money laundering, freezing thousands of accounts. June 2024: Law No. 7518 enacted, establishing SPK as the regulatory authority for all CASPs, introducing licensing requirements, and criminalizing unlicensed operations. July 2024-present: SPK issued implementing regulations and began processing license applications from existing exchanges under transitional provisions.

This timeline matters because many international sources still cite the April 2021 “ban” without context. To be clear: crypto trading, investing, and holding have been legal throughout this period. What changed was the introduction of a structured licensing and oversight framework — a positive development for market integrity and investor protection.

Law No. 7518: Defining the Crypto Asset Framework

Law No. 7518 amends the Capital Markets Law (Law No. 6362) to include crypto assets within the regulatory perimeter. Key definitions and provisions include:

Crypto Asset Definition (Article 3/z): “Intangible assets that are created virtually using distributed ledger technology or similar technology, distributed over digital networks, but which do not qualify as money, dematerialized capital market instruments, or electronic money.” This broad definition intentionally covers tokens, coins, utility tokens, and potentially NFTs (depending on their function), while excluding CBDCs, e-money, and tokenized securities (which fall under existing regulations).

Crypto Asset Service Provider (CASP) Definition: Any entity that operates a crypto asset trading platform, provides custody services, provides transfer services, acts as an intermediary for crypto asset transactions, or provides crypto asset portfolio management. This covers centralized exchanges (CEX), OTC desks, custodians, wallet providers (if custodial), and portfolio managers.

Licensing Requirement (Article 35/B): All CASPs must obtain an operating license from the SPK. Operating without a license is a criminal offense carrying imprisonment of 2-5 years and a judicial fine. There is no “registration” or “notification” alternative — a full license is required. Customer Asset Segregation (Article 35/C): Customer assets must be segregated from the CASP’s own assets at all times. Co-mingling of customer and company funds is prohibited and constitutes a criminal offense. TAKASBANK Integration: A centralized crypto asset settlement and custody platform under the Istanbul Settlement and Custody Bank (TAKASBANK) is being established for institutional-grade custody and settlement.

SPK Licensing: Requirements and Process

The SPK crypto license application process is rigorous and designed to ensure only well-capitalized, professionally managed entities enter the market:

Capital Requirements: Minimum paid-in capital of 50 million TRY (approximately $1.5 million USD at current rates) for trading platform operators. This capital must be fully deposited before application and maintained continuously. The SPK may impose higher capital requirements for platforms exceeding certain volume thresholds. The company must be established as a Joint Stock Company (Anonim Şirket — AŞ) — LLCs cannot apply.

Shareholder and Management Standards: All qualifying shareholders (10%+), board members, general managers, and compliance officers must pass fit-and-proper assessments covering: no criminal convictions for fraud, financial crimes, money laundering, terrorism financing, or organized crime; no bankruptcy or significant debt defaults; relevant professional qualifications and experience (minimum 5 years in finance/technology for senior management); and no prior regulatory sanctions from SPK, BDDK, or foreign financial regulators.

Technology Requirements: Cybersecurity framework aligned with ISO 27001, annual penetration testing by independent firms, business continuity and disaster recovery plans with documented testing, data center redundancy (primary + backup, both in Turkey), system capacity to handle 3x peak trading volumes, and real-time monitoring with 24/7 incident response. The SPK conducts on-site technology audits as part of the licensing process.

AML/KYC Systems: Full integration with MASAK requirements including: customer identity verification (MERSIS/e-Devlet integration for Turkish nationals, passport verification for foreigners), ongoing transaction monitoring with automated alert generation, sanctions screening (UN, Turkish national lists), suspicious transaction reporting infrastructure (10-day filing deadline), Travel Rule compliance for transfers above 15,000 TRY threshold, and 8-year record retention. The AML system must be operational and tested before license approval.

The 0.03% Crypto Transaction Tax

Turkey’s crypto tax framework is notably different from most jurisdictions. Instead of a capital gains tax, Turkey imposes a transaction-based levy:

Mechanism: The Banking and Insurance Transactions Tax (BSMV) was extended to crypto asset sales at a rate of 0.03% (3 basis points or 0.3 per mille). The tax is withhold at source by the licensed platform on every sell order and remitted to the tax authority. Buyers are not taxed — only sellers. Example: Selling $100,000 in Bitcoin on a Turkish exchange = $30 in BSMV. This rate is extremely low by international standards.

Capital Gains: As of 2026, there is no separate capital gains tax on crypto assets for individual investors. This is Turkey’s most significant competitive advantage for crypto investors. However, this treatment has an important nuance: individuals who trade crypto on a continuous, systematic, and profit-seeking basis may have their gains reclassified as commercial income (ticari kazanç) by the Revenue Administration (GİB), subject to progressive income tax rates of 15-40%. The distinction between “investment activity” (only the 0.03% levy) and “commercial activity” (fully taxable) is determined by frequency, volume, degree of organization, and whether the activity constitutes a regular income source.

Corporate Tax: Companies holding or trading crypto assets are subject to standard 25% corporate income tax on gains. Crypto assets are classified as intangible assets on the balance sheet. The 0.03% BSMV also applies. Companies must maintain detailed records of all transactions with FIFO or weighted average cost basis methods.

MASAK Compliance for Crypto Businesses

All crypto platforms must comply with Turkey’s anti-money laundering framework administered by MASAK. Key obligations:

Customer Due Diligence: Full identity verification before any transaction (no anonymous accounts). Enhanced due diligence for Politically Exposed Persons (PEPs), customers from high-risk countries, and transactions above 75,000 TRY. Beneficial ownership identification for corporate clients (25% threshold). Transaction Monitoring: Automated monitoring systems with rules calibrated to crypto-specific risks (rapid fiat-crypto-fiat cycles, structuring, mixing patterns, darknet wallet interactions). Reporting: Suspicious Transaction Reports filed within 10 business days. Terrorism financing suspicions reported immediately. Cash Transaction Reports for fiat conversions above 75,000 TRY. Account Freezing: MASAK can freeze accounts administratively for 7 days (terrorism financing) or through court order (money laundering). Unfreezing requires documented proof of legitimate fund sources.

DeFi, NFTs, and Smart Contracts Under Turkish Law

DeFi: Decentralized Finance protocols occupy a legal grey zone. SPK’s position is that any platform facilitating crypto asset trading — even through smart contracts — may fall under CASP requirements if it targets Turkish users and has an identifiable operator. Truly decentralized protocols with no identifiable operator may be outside SPK’s practical enforcement reach, but using them does not exempt users from tax reporting obligations. DeFi users in Turkey should be aware that MASAK is developing blockchain analytics capabilities to track DeFi interactions.

NFTs: Non-fungible tokens are classified based on their function: NFTs representing financial instruments (fractionalized ownership, yield-bearing) fall under SPK regulation. NFTs representing unique digital art, collectibles, or utility access are treated under general commercial law (Turkish Code of Obligations) and intellectual property law (Law No. 5846). The 0.03% BSMV applies to NFT sales on licensed platforms.

Smart Contracts: Smart contracts can be valid agreements under the Turkish Code of Obligations (TBK Article 1 — contract formation through mutual and corresponding declarations of intent). However, they cannot substitute for legally required formalities (notarization, Land Registry registration for real estate, etc.). Best practice is the “dual-layer” approach: a traditional legal agreement governing rights and obligations, with the smart contract automating execution.

Turkey vs. EU MiCA: Regulatory Comparison

Comparing Turkey’s framework with the EU’s MiCA reveals important differences: Licensing scope: Both require CASP licensing, but MiCA provides EU-wide “passporting” (one license for 27 countries) while Turkey’s license is domestic only. Token classification: MiCA creates three categories (ARTs, EMTs, other) with different requirements; Turkey uses a single broad definition. Stablecoin regulation: MiCA imposes strict reserve, redemption, and volume limits on stablecoin issuers; Turkey has not yet enacted stablecoin-specific rules beyond the payment ban. Consumer protection: MiCA requires mandatory whitepapers, cooling-off periods, and marketing restrictions; Turkey focuses on asset segregation and licensing standards. Tax: MiCA does not address taxation; Turkey’s 0.03% levy and absence of capital gains tax for individuals is a significant competitive advantage.

Setting Up a Crypto Business in Turkey

For entrepreneurs looking to start a crypto exchange or related business: Step 1: Establish a Turkish AŞ with minimum 50M TRY capital through standard company formation. Step 2: Recruit qualified board members, CTO, and compliance officer meeting SPK standards. Step 3: Build or acquire the technology platform meeting SPK specifications. Step 4: Implement MASAK-compliant AML/KYC systems. Step 5: Apply for SPK license. Step 6: Register with MASAK as an obligated entity. Total timeline: 6-12 months. Total initial investment: $3-10M depending on scope.

Crypto Crimes and Enforcement

Turkey has strengthened crypto-related criminal enforcement significantly since the Thodex scandal. Current criminal provisions include: Operating without SPK license: 2-5 years imprisonment + judicial fine (Law 7518). Misuse of customer assets: 3-7 years (aggravated breach of trust, TCK Article 155). Crypto fraud: 2-7 years (TCK Articles 157-158, aggravated if affecting multiple victims). Money laundering via crypto: 3-7 years + judicial fine (TCK Article 282). Market manipulation: 2-5 years (Capital Markets Law). Terrorism financing via crypto: 5-10 years (Law No. 6415). Turkish prosecutors have specialized cybercrime units and are increasingly sophisticated in blockchain analytics and cross-border cooperation.

Frequently Asked Questions

Is cryptocurrency legal in Turkey?

Yes. Holding, buying, selling, and trading cryptocurrency is fully legal. What is prohibited is using crypto as a payment method for goods and services (TCMB Regulation, April 2021). Trading on licensed platforms, converting to/from fiat, and using crypto as an investment are all permitted.

Which crypto exchanges are licensed in Turkey?

As of early 2026, the SPK has been processing license applications under transitional provisions. Major exchanges including BtcTurk, Paribu, and Bitay have applied. The SPK publishes the official list of licensed platforms on its website (spk.gov.tr). Operating without a license after the transition period is a criminal offense — users should verify their platform’s license status.

Do I need to pay tax on crypto gains?

Individual investors pay only the 0.03% transaction levy on each sale — there is no separate capital gains tax. However, if your trading is deemed commercial (continuous, systematic, profit-seeking), gains may be taxed at up to 40%. Corporate entities pay 25% corporate income tax on crypto gains plus the 0.03% levy.

Can a foreigner start a crypto business in Turkey?

Yes. There are no restrictions on foreign ownership of CASPs. The company must be a Turkish AŞ meeting SPK requirements. Remote company formation is possible via power of attorney, but the SPK licensing process typically requires in-country presence for inspections and meetings.

What if MASAK freezes my crypto account?

Engage a MASAK-experienced attorney immediately. Prepare documentation proving the legitimate source of funds. File an objection within the prescribed period. Response time is critical — some freeze orders have automatic expiration periods. Contact our office at +90 545 199 25 25 for urgent assistance.

Is crypto mining legal in Turkey?

Mining is not specifically regulated and is generally legal. However, large-scale mining operations face electricity regulations (license requirements from EPDK for consumption above certain thresholds), environmental rules, and standard business licensing. Income from mining should be declared for tax purposes — it may be classified as commercial income if conducted on a business scale.

Token Classification Under Turkish Law: Utility vs. Security vs. Payment

One of the most critical questions in Turkish crypto law is how different types of tokens are classified, as the classification determines the applicable regulatory regime. Law No. 7518 uses a broad definition that encompasses most crypto assets, but the practical application varies:

Utility Tokens: Tokens that provide access to a product, service, or platform function (e.g., governance tokens, in-app currencies, NFT marketplace access tokens). These fall under the general crypto asset definition if traded on secondary markets. If they function purely as prepaid service credits without secondary market trading, they may be outside SPK’s regulatory scope. The Turkish Consumer Protection Law (Law No. 6502) may apply if utility tokens are sold to consumers with specific functionality promises.

Security Tokens: Tokens that represent ownership stakes, profit-sharing rights, or debt instruments are classified as capital market instruments under the Capital Markets Law (Law No. 6362), separate from the crypto asset definition in Law No. 7518. Security token offerings (STOs) require SPK approval and must comply with existing securities regulations, including prospectus requirements, investor protection rules, and custody obligations. The penalty for unauthorized securities offerings is imprisonment of 2-5 years under Article 109 of the Capital Markets Law.

Payment Tokens: Tokens designed primarily as a medium of exchange (Bitcoin, Litecoin, certain stablecoins) are subject to the TCMB payment prohibition for goods and services, but can be freely traded as investment assets on licensed platforms. The critical distinction is between using crypto to pay for goods/services (prohibited) and using crypto as an investment instrument (permitted). Stablecoins (USDT, USDC) present a particular regulatory challenge — the TCMB has not issued specific stablecoin regulations, but their use as payment substitutes could technically fall under the payment ban.

NFTs: Non-fungible tokens are classified based on their function. Unique digital art or collectible NFTs are treated as intangible property under the Turkish Code of Obligations. Fractionalized NFTs or NFTs representing financial returns may be classified as crypto assets or securities. NFT marketplaces that enable secondary trading may require SPK licensing. The 0.03% BSMV applies to NFT sales on licensed platforms.

SPK Licensing Deep Dive: Two Key Communiqués

The SPK has issued two primary implementing regulations under Law No. 7518 that define the detailed requirements for crypto asset service providers:

Communiqué III-35/2.1 on Crypto Asset Trading Platforms: This communiqué establishes the requirements for operating a centralized crypto exchange in Turkey. Key provisions include: minimum paid-in capital of 50 million TRY for platform operators (the SPK may increase this for platforms exceeding certain volume thresholds); shareholders holding 10% or more must pass fit-and-proper assessments including criminal background checks, financial soundness verification, and professional qualification reviews; the platform must maintain a minimum liquidity reserve equal to 2% of customer assets; customer assets must be segregated from company assets and held in TAKASBANK custody accounts; the platform must implement a market surveillance system capable of detecting manipulation, wash trading, and insider trading; and the platform must connect to TAKASBANK’s settlement infrastructure for all trades.

Communiqué on Crypto Asset Service Providers: This broader communiqué covers non-exchange CASPs including custodians, transfer service providers, and portfolio managers. Requirements include: organizational structure with clear reporting lines, compliance officer (MASAK-registered), internal audit function, business continuity plan tested at least annually, IT security standards (ISO 27001 or equivalent), and customer complaint handling procedures. Both communiqués specify transitional provisions for existing operators — platforms operating before the law’s effective date had specific deadlines to submit license applications and achieve full compliance.

MASAK Compliance for Crypto: Beyond KYC

While KYC (Know Your Customer) is the most visible element of AML compliance, MASAK’s requirements for crypto platforms extend far beyond identity verification:

Customer Risk Assessment: Platforms must categorize customers into risk levels (low, medium, high) based on: nationality (certain countries carry higher risk under FATF guidance), transaction patterns, source of funds, profession/business activity, and politically exposed person (PEP) status. High-risk customers require enhanced due diligence (EDD) including more frequent monitoring, senior management approval for onboarding, and additional source-of-wealth documentation.

Transaction Monitoring: Automated systems must flag: rapid fiat-to-crypto-to-fiat cycles (potential layering), transactions structured to avoid reporting thresholds (structuring/smurfing), transfers to or from wallets associated with darknet markets, mixer/tumbler services, or sanctioned addresses, unusual trading patterns inconsistent with the customer’s profile, and large deposits from newly created accounts. MASAK expects platforms to calibrate their monitoring rules based on the latest typologies published in MASAK’s annual reports and FATF guidance papers.

Suspicious Transaction Reports (STRs): When monitoring identifies a potentially suspicious transaction, the platform must: conduct an internal investigation within 10 business days, determine whether the suspicion is substantiated, file an STR with MASAK if the suspicion persists (there is no minimum threshold — the obligation is triggered by suspicion, not by amount), and maintain strict confidentiality (the tipping-off prohibition prevents the platform from informing the customer that an STR has been filed). MASAK processes approximately 200,000+ STRs annually from all obligated entities, with the number of crypto-related reports increasing significantly since 2021. Failure to file when warranted can result in administrative fines up to 2 million TRY and personal criminal liability for the compliance officer.

Travel Rule Implementation: Turkey has implemented the FATF Travel Rule for crypto asset transfers. For transfers above 15,000 TRY (approximately $450 USD), the originating platform must transmit to the beneficiary platform: the originator’s name, account/wallet identifier, and address or national ID number. For transfers below this threshold, the originator’s name and account identifier must still be obtained and retained. Turkish platforms are increasingly adopting technical solutions (such as TRISA, OpenVASP, or Sygna Bridge) to facilitate Travel Rule compliance across jurisdictions.

Crypto Taxation: Detailed Analysis

Turkey’s crypto tax framework requires careful analysis based on the taxpayer’s status and activities:

The 0.03% Transaction Levy — Technical Details: The BSMV (Banking and Insurance Transactions Tax) was extended to crypto sales by Article 33 of Law No. 7518, adding crypto asset service providers to the list of BSMV-obligated entities under Law No. 6802. The tax is calculated on the gross sale value of each transaction (not on the profit) and is withheld at source by the platform. For a day trader executing 100 trades per day worth $10,000 each, the daily BSMV burden is $30 — a nominal amount that makes Turkey highly competitive for active traders. The BSMV is remitted to the tax authority monthly by the 15th of the following month.

When Trading Becomes “Commercial Activity”: The Revenue Administration (GİB) has not issued a specific ruling defining the threshold between investment and commercial activity for crypto. Based on analogies from securities trading case law and GİB precedent on other asset classes, the following factors suggest commercial activity classification: trading as a primary or significant income source, using leverage or margin, maintaining multiple exchange accounts for arbitrage, operating automated trading bots, providing trading services to others, and frequency/volume significantly exceeding what is typical for a personal investor. If classified as commercial, profits are taxed at progressive rates (15-40%) with deductions for business expenses including equipment, internet, electricity, and exchange fees.

Staking, Mining, and DeFi: These income streams do not have specific tax guidance in Turkey. Based on general principles: mining income is likely classified as commercial income if conducted on a business scale, and taxed accordingly. Staking rewards may be taxable upon receipt at the fair market value. DeFi yield farming and liquidity provision returns may create taxable events at each harvest/claim. Airdrops are potentially taxable as “other income” at the time of receipt. Conservative reporting is recommended until the GİB issues specific crypto tax guidance.

Enforcement Actions: What Happens When Things Go Wrong

Turkey’s enforcement approach to crypto-related violations has become increasingly sophisticated since the Thodex scandal:

Thodex Case (2021-2025): The collapse of the Thodex exchange — where CEO Faruk Fatih Özer fled Turkey with an estimated $2 billion in user funds — was the catalyst for Law No. 7518. Özer was arrested in Albania in 2023, extradited to Turkey, and sentenced to 11,196 years in prison in 2024 for aggravated fraud (TCK Article 158), criminal organization leadership, and money laundering. The case established important precedents for crypto-related criminal liability and the applicability of existing fraud statutes to crypto platform operators. Over 400,000 affected users filed claims, and the liquidation process is ongoing.

MASAK Enforcement: MASAK has frozen thousands of crypto exchange accounts since 2021, primarily in connection with: P2P trading fraud (users receiving payments from fraud victims and having their accounts frozen), exchange-level investigations (affecting all users of investigated platforms), international cooperation requests from foreign FIUs, and suspicious transaction patterns identified through automated monitoring. For individuals facing MASAK account freezes, engaging experienced legal counsel immediately is critical — response time and documentation quality significantly affect the outcome.

SPK Enforcement: Since Law No. 7518 took effect, the SPK has: issued warnings to unlicensed platforms operating without authorization, blocked access to foreign exchange websites targeting Turkish users without compliance, initiated criminal referrals for unlicensed operation, and published the official list of licensed platforms. Market manipulation in crypto assets — including wash trading, spoofing, and pump-and-dump schemes — is subject to the same penalties as manipulation in traditional securities markets (imprisonment of 2-5 years, Article 107 of the Capital Markets Law).

Cross-Border Crypto Transactions: International Dimensions

Turkey’s position as a bridge between East and West creates unique cross-border crypto legal issues:

International Transfers: Crypto transfers between Turkish and foreign platforms are legal but subject to Travel Rule compliance (for transfers above the threshold) and potential MASAK scrutiny for large or unusual patterns. Foreign platforms serving Turkish users must either obtain an SPK license or ensure they do not target Turkish customers — the SPK determines “targeting” based on factors including Turkish-language websites, Turkish Lira support, and marketing directed at Turkish users.

Tax Treaty Implications: Turkey’s 80+ double taxation agreements may affect the tax treatment of crypto income for non-resident investors trading on Turkish platforms. The 0.03% BSMV is generally treated as a creditable foreign tax in countries with DTAs. For foreign crypto businesses establishing a Turkish entity, transfer pricing rules (TBK Article 13) apply to intercompany crypto transactions, and the arm’s length principle must be observed.

Additional Frequently Asked Questions

Are stablecoins regulated differently in Turkey?

Stablecoins (USDT, USDC, BUSD, etc.) fall under the general crypto asset definition in Law No. 7518 and are subject to the same SPK licensing requirements for trading platforms and the 0.03% BSMV. The TCMB payment prohibition applies to stablecoins used as payment for goods/services. Specific stablecoin regulation — similar to the EU’s MiCA provisions on asset-referenced tokens and e-money tokens — is expected but has not yet been enacted. Stablecoin issuers targeting the Turkish market may face additional regulatory requirements once specific rules are adopted.

Can Turkish citizens trade on foreign crypto exchanges?

There is no law prohibiting Turkish citizens from using foreign exchanges. However, foreign platforms that do not hold an SPK license may face access restrictions in Turkey, and Turkish users of such platforms bear the full risk of operating outside the regulatory framework — including no access to the investor protection fund, no regulatory complaint mechanisms, and potential difficulty proving the legitimate source of funds if questioned by MASAK or tax authorities. Using licensed Turkish platforms provides regulatory protection and simplifies tax compliance.

What is TAKASBANK’s role in the new crypto framework?

TAKASBANK (İstanbul Takas ve Saklama Bankası A.Ş.) is Turkey’s central clearing and custody institution for capital markets. Under Law No. 7518, TAKASBANK is developing a crypto asset settlement and custody platform that will serve as the institutional-grade infrastructure for the Turkish crypto market. Key functions include: centralized custody of customer crypto assets (replacing individual platform custody), trade settlement (ensuring delivery-versus-payment), and custody reporting to the SPK. The TAKASBANK system is being rolled out in phases, with full implementation expected by late 2026. This institutional custody infrastructure is a significant differentiator from most other crypto regulatory frameworks globally.

How does Turkey’s crypto regulation compare globally?

Compared to the EU’s MiCA, Turkey’s framework is more centralized (single regulator vs. 27 national authorities) but lacks passporting (a Turkish license only covers Turkey). Compared to the US, Turkey offers greater regulatory clarity — the SEC/CFTC jurisdictional dispute that plagues US crypto regulation does not exist in Turkey, where the SPK has clear authority. Compared to Singapore and Hong Kong, Turkey’s licensing requirements are broadly similar but with the added advantage of the low 0.03% tax rate and absence of capital gains tax for individuals. Compared to Dubai/UAE, Turkey offers a more mature legal system with established court precedents, while Dubai offers zero personal income tax.

Crypto Dispute Resolution and Litigation in Turkey

As the Turkish crypto market matures, disputes between platforms and users, between trading counterparties, and between investors and project teams are becoming more common. The Turkish legal system provides several avenues for dispute resolution:

Civil Court Jurisdiction: Crypto-related civil disputes (breach of contract, damages, unjust enrichment) are heard by the Commercial Courts (Asliye Ticaret Mahkemesi) for business-to-business disputes and Consumer Courts (Tüketici Mahkemesi) for consumer claims against platforms. Jurisdiction is typically determined by the defendant’s domicile or the place of contract performance. For disputes involving MASAK account freezes, administrative courts (İdare Mahkemesi) have jurisdiction to review the legality of the freeze.

Evidence Challenges: Crypto litigation presents unique evidentiary issues under Turkish procedural law (HMK No. 6100). Blockchain transaction records can serve as documentary evidence, but their admissibility requires: expert testimony explaining the blockchain technology and how to interpret on-chain data, connection between wallet addresses and specific parties (often requiring forensic blockchain analysis), and authentication of off-chain records (exchange transaction histories, email communications, smart contract code). Turkish courts are increasingly familiar with blockchain evidence, particularly following the Thodex proceedings where extensive on-chain analysis was presented. However, the technical complexity means that expert witnesses (bilirkişi) play a critical role — selecting qualified blockchain forensics experts is essential for successful litigation.

Consumer Protection: Individual crypto investors who suffer losses due to platform misconduct (unauthorized trades, system failures, security breaches) may bring claims under the Consumer Protection Law (No. 6502) if they qualify as consumers (natural persons acting for non-commercial purposes). Consumer protection rights include: 14-day withdrawal right for certain services, protection against unfair contract terms in platform terms of service, right to compensation for defective services, and access to Consumer Arbitration Boards (Tüketici Hakem Heyetleri) for claims below certain thresholds (approximately 100,000 TRY in 2026). For claims above this threshold, Consumer Courts have jurisdiction with reduced court fees compared to commercial courts.

Arbitration: Many crypto platform terms of service include arbitration clauses, typically designating the Istanbul Arbitration Centre (ISTAC) or ICC. Arbitration offers advantages for crypto disputes: faster resolution (typically 6-12 months vs. 18-36 months in court), confidentiality (important for parties concerned about reputational impact), technical flexibility (arbitrators with crypto/technology expertise can be selected), and international enforceability under the New York Convention. However, arbitration clauses in consumer contracts may be challenged as unfair under Turkish consumer protection law if they unduly restrict the consumer’s access to justice.

Crypto and Turkish Criminal Law

Crypto-related criminal offenses in Turkey fall under both the specific provisions of Law No. 7518 and general criminal statutes:

Specific Crypto Offenses (Law 7518): Operating as a CASP without SPK license: imprisonment of 2-5 years plus judicial fine (Article 35/B(6)). Misappropriation of customer assets by platform operators: aggravated breach of trust (TCK Article 155/2), imprisonment of 3-7 years. Market manipulation in crypto assets: imprisonment of 2-5 years (Capital Markets Law Article 107, extended to crypto by Law 7518). Violation of customer asset segregation requirements: administrative penalties plus potential criminal liability.

General Criminal Provisions Applied to Crypto: Fraud (TCK Article 157): 1-5 years for basic fraud, 2-7 years for aggravated fraud (multiple victims, abuse of trust). Money laundering via crypto (TCK Article 282): 3-7 years plus judicial fine of up to 20,000 days. Forgery and falsification in crypto contexts (TCK Article 204-212): 2-6 years depending on the type of forgery. Unauthorized access to computer systems — hacking exchanges or wallets (TCK Article 243): 1-3 years. Data theft from crypto platforms (TCK Article 244): 2-5 years.

Enforcement Agencies: The Istanbul Cybercrime Bureau (İstanbul Siber Suçlarla Mücadele Şube Müdürlüğü) has a dedicated cryptocurrency unit with blockchain analytics capabilities (Chainalysis, Elliptic). The Financial Crimes Police (Mali Suçlarla Mücadele) handles cases referred by MASAK. Prosecutors in Istanbul, Ankara, and İzmir have developed specialization in crypto cases following Thodex and other major investigations. International cooperation through INTERPOL, Europol, and bilateral MLAT agreements enables cross-border crypto investigations.

Setting Up a Crypto Business: Practical Roadmap

For entrepreneurs seeking to launch a crypto business in Turkey, here is a practical roadmap from concept to licensed operation:

Phase 1 — Legal Entity and Capital (Month 1-2): Establish a Turkish Anonim Şirket (AŞ) with minimum 50 million TRY paid-in capital through standard company formation. Recruit board members and senior management meeting SPK fit-and-proper standards. Open corporate bank accounts and deposit the required capital. Phase 2 — Technology Development (Month 2-6): Build or acquire the trading platform matching SPK specifications: matching engine, order management, wallet infrastructure (hot/cold with multi-signature), API gateway, market data feeds, admin dashboard, and mobile applications. Implement cybersecurity framework aligned with ISO 27001. Deploy monitoring and incident response systems. Phase 3 — Compliance Infrastructure (Month 3-6): Implement KYC/AML systems meeting MASAK requirements: identity verification (integration with MERNIS/NVI for Turkish nationals, passport OCR for foreigners), transaction monitoring engine, sanctions screening module, STR filing system, and Travel Rule solution. Appoint and register compliance officer with MASAK. Develop internal compliance policies and procedures. Phase 4 — SPK Application (Month 5-8): Prepare the comprehensive license application dossier. Submit to SPK. Respond to information requests and schedule on-site inspections. Phase 5 — Launch (Month 8-12): Receive SPK license. Register with MASAK as an obligated entity. Connect to TAKASBANK infrastructure. Begin customer onboarding and trading. Total estimated budget: $3-10 million depending on scope and scale.