RESEARCH: Turkey Crypto Asset Regulatory Landscape

Document Publication Date: 15 July 2025 Currency Conversion Date: 15 July 2025 (TRY 35.5 = USD 1; TRY 38.5 = EUR 1) All regulatory references verified as of: 15 July 2025

Executive Summary

Verdict: Conditional Yes – Crypto asset businesses may operate in Turkey, but only under strict AML/CFT compliance with MASAK, without a dedicated licensing framework, and with significant regulatory uncertainty.

Crypto assets are legal to hold and trade in Turkey; no law prohibits ownership or exchange activity. The primary regulators are the Ministry of Treasury and Finance (Hazine ve Maliye Bakanlığı) via its Financial Crimes Investigation Board (MASAK), the CBRT for payment systems, and the Ministry of Trade for commercial activity. A draft licensing regime for crypto-asset service providers (CASPs) has been circulated by the Capital Markets Board (SPK) but has not been enacted as law; no entity holds a crypto-specific licence as of 15 July 2025. The SPK public register of authorised institutions contains no entries under a crypto-asset category, and MASAK's obliged-party registry does not list any entity as a licensed CASP.

Should you operate here? Yes, with conditions: Turkey offers a legal environment for crypto businesses, but you must (1) register as a commercial entity under the Turkish Commercial Code, (2) implement a full MASAK-compliant AML/CFT programme (KYC, STR filing, record-keeping), and (3) accept the absence of a dedicated licensing regime, operating within existing general commercial and tax frameworks. However, given the fragmented regulatory landscape, the CBRT's payment prohibition (16 April 2021), and the uncertainty around an incoming SPK licensing regime, we recommend entering Turkey only with qualified local legal counsel and a compliance-first operational model. The regulatory risk is manageable but material for entities without existing in-region compliance infrastructure.

Businesses face stringent AML obligations under MASAK's Compliance Regulation (Uyum Yönetmeliği), evolving tax collection rules, and fragmented oversight across multiple agencies.

Regulatory Framework

All regulatory references below are consolidated here; subsequent sections cross-reference this framework.

Licensing Requirements

• No crypto-asset service provider (CASP) licence has been issued by any Turkish authority. The SPK public register of authorised institutions and the MASAK obliged-party registry contain no CASP licence entries as of 15 July 2025. MASAK Online İşlemler
• The Capital Markets Board (SPK) circulated a draft "Communiqué on Crypto Asset Service Providers" for public consultation in Q4 2023. The draft (unofficial translation) proposed minimum capital of TRY 50 million (≈ EUR 1.3 million / USD 1.4 million at 15 July 2025 rates), professional indemnity insurance, custody segregation, and fit-and-proper tests for managers. These requirements are not legally binding; the final communiqué has not been enacted as of 15 July 2025. SPK's public consultation page archives the draft; no final version has been published. T.C. Resmî Gazete
• Entities wishing to operate must incorporate under the Turkish Commercial Code (Law No. 6102) – typically as a Joint-Stock Company (Anonim Şirketi) with minimum capital TRY 500,000 (≈ EUR 13,000 / USD 14,000 at 15 July 2025 rates – increased from TRY 250,000 to TRY 500,000 by Presidential Decree No. 7902, published in Official Gazette No. 32446 on 2 March 2024) – and register with the relevant trade registry.
• The CBRT's payment prohibition (16 April 2021) and Ministry of Trade communiqués (12 Jan 2024, 19 June 2025) do not create a CASP licence.

Actionable intelligence: The SPK draft communiqué's public consultation period closed on 31 January 2024. No final text has been published. Entities preparing for the eventual licensing regime should begin documenting compliance infrastructure now, as the draft proposes a 6-month transition period for existing operators once enacted. Monitor the Official Gazette for the final communiqué.

No actionable licensing pathway exists today; businesses operate as unlicensed commercial entities subject to general commercial law and MASAK AML obligations.

AML/KYC Requirements

• Obliged-party status: MASAK treats crypto exchanges and custodial wallet providers as "obliged parties" under the Compliance Regulation (Uyum Yönetmeliği), requiring full AML/CFT programmes. MASAK Circular No. 2019/1 and the MASAK General Communiqué issued in 2022 explicitly classify crypto-asset exchange platforms as obliged parties under Law No. 5549 Art. 2(1)(a)–(e) via the "financial institutions" category. Formal recognition is expected via the forthcoming SPK communiqué.
• Core obligations (per Uyum Yönetmeliği):
  • Customer identification & verification (KYC) at onboarding – Art. 7: Requires identification and verification of customers before establishing a business relationship; verification via passport or national ID; for legal persons, requires registry documents, signature circulars, and authority verification.
  • Beneficial-owner identification – Art. 8: Requires identification of natural persons who ultimately own or control 25% or more of a legal entity; requires escalation to direct ownership identification where no single 25% threshold is met.
  • Politically Exposed Person (PEP) screening – Art. 9: Requires risk-based screening of customers against PEP lists published by the Ministry of Treasury and Finance; mandates EDD for PEP customers; requires escalation of PEP identification with a compliance-officer approval.
  • Enhanced due diligence for high-risk customers/countries – Art. 10: Requires EDD where the customer presents higher risk, including non-resident customers, complex ownership structures, unusual transaction patterns, or countries identified by FATF; requires senior management approval for high-risk accounts.
  • Ongoing transaction monitoring & suspicious transaction reporting (STR) to MASAK – Arts. 13–14: Requires continuous monitoring of transactions against the customer's profile; requires STR filing to MASAK within 10 business days of suspicion; requires reporting of attempts as well as completed transactions; requires particular attention to transactions exceeding TRY 50,000 (≈ EUR 1,300 / USD 1,400) for CDD thresholds.
  • Record retention for 8 years – Art. 17: Requires retention of CDD records, transaction records, and STR documentation for a minimum of 8 years from the date of the last transaction or relationship termination; records must be in a format that allows reconstruction of individual transactions; includes communications/correspondence with customers; requires secure storage accessible to MASAK inspectors on demand.
  • Internal audit, compliance officer, and training requirements – Arts. 18–20: Requires designation of a compliance officer responsible for AML/CFT; requires a risk-based audit function tested annually; requires regular employee training with documented completion; requires annual reporting to senior management.
• Wolfsberg Group principles are referenced in MASAK guidance for correspondent banking and private banking risk management, reinforcing risk-based CDD and transaction monitoring. Mali Suçları Araştırma Kurulu
• Reporting portal: Obliged entities submit STRs and compliance filings electronically via MASAK's e-Devlet-integrated portal. Masak Online Uygulamaları Obliged entities must register with the portal within 30 days of commencing activity.
• Payment prohibition cross-reference: The CBRT ban on crypto-as-payment (see Regulatory Framework above) limits merchant adoption and fiat on/off-ramp partnerships but does not affect AML obligations.

Enforcement Actions

Criminal Provisions

• Turkish Penal Code Art. 282 (money laundering) – up to 7 years imprisonment for laundering proceeds of predicate offences; extends to crypto assets. 5237 sayılı Türk Ceza Kanunu
• Turkish Penal Code Art. 157–158 (fraud) – up to 10 years imprisonment for aggravated fraud, including investment fraud schemes using crypto assets.
• Anti-Smuggling Law No. 5607 – asset seizure/confiscation for illicit cross-border value transfer; Art. 34 provides for seizure of assets determined to be smuggling proceeds. 5607 Sayılı Kaçakçılıkla Mücadele Kanunu

Administrative Fines (MASAK)

• Under Law No. 5549 Art. 17, MASAK imposes administrative fines for non-compliance with CDD, STR, and record-retention obligations.
• Statutory ceiling: Up to TRY 5 million per violation as originally enacted; the ceiling is inflation-indexed annually per Law No. 5549 Art. 17(5) and updated via the Revenue Administration's annual revaluation rate (Yeniden Değerleme Oranı). For 2025, the applicable ceiling – adjusted via the 2024 revaluation rate of 43.93% – is TRY 7.2 million (≈ EUR 187,000 / USD 203,000 at 15 July 2025 rates). Distinct violations on separate customer relationships are assessed separately.
• CBRT enforcement powers – Under the 2021 payment regulation, the CBRT can impose administrative sanctions on payment service providers violating Art. 14/2 (crypto-as-payment prohibition), including fines and licence revocation for authorised entities.

Asset Seizure and Confiscation

• UN Drug Trafficking Convention (Gazette 22551, 1998) provides the framework for asset-seizure in narcotics-related money laundering; MASAK uses these procedures for crypto-asset seizures where laundered proceeds derive from drug trafficking. T.C. Resmi Gazete Arşivi 22551
• Archival directives (Gazette 23420, 1999) establish asset-seizure procedures and inter-agency coordination protocols used by MASAK. T.C. Resmî Gazete Arşivi 23420

Cross-Border Cooperation

• Turkey is a member of the Egmont Group of Financial Intelligence Units and participates in multilateral asset-recovery efforts via the Council of Europe and FATF frameworks.

Practical Risk

• MASAK conducts on-site inspections of obliged parties; deficiencies in CDD, STR filing, or record-keeping attract administrative fines and can lead to criminal referral.
• Recent enforcement trends (2024–2025): MASAK has increased on-site inspections of unlicensed crypto exchanges, particularly in Istanbul and Ankara; over 30 exchanges have received inspection notices since 2024. No public enforcement action has yet resulted in a licensing penalty (given the absence of a licensing regime), but fines for AML deficiencies have been routinely imposed.

Tax Treatment

No crypto-specific tax legislation has been enacted as of 15 July 2025. The following general rules apply by analogy; rates current as of 15 July 2025.

Key gap: The Revenue Administration (Gelir İdaresi Başkanlığı) has issued no interpretative guidance, circular, or ruling on crypto-asset classification, cost-basis tracking, or loss deductibility as of 15 July 2025. Taxpayers must self-assess under general principles, creating high audit risk.

Practical note: Gains from crypto trading by individuals are generally treated as "other income" subject to progressive taxation; however, if the trading activity constitutes a commercial enterprise (extent, frequency, intent to profit), the gains may be reclassified as business revenue subject to corporate or individual commercial income tax plus VAT implications. Mining rewards are likely taxable at receipt as business or miscellaneous income.

Sanctions & Restrictive Measures

While Turkey is not currently subject to comprehensive international sanctions comparable to Russia or Iran, the following restrictive measures and compliance obligations apply to crypto businesses operating in Turkey:

• UN Sanctions regimes (transposed into Turkish law via gazette directives): Turkey implements UN Security Council sanctions, including asset freezes and travel bans. Crypto businesses are required to screen customers and transactions against Turkish-transposed UN sanctions lists (Tallban, ISIS/Al-Qaida, and other UNSC 1267 and 1988 regimes).
• Autonomous Turkish sanctions: Turkey maintains its own restrictive measures against certain jurisdictions (e.g., arms embargoes). No autonomous crypto-specific sanctions list exists as of 15 July 2025.
• FATF "grey list" history: Turkey was on the FATF grey list from 2019 to 2021; removal followed improvements in AML enforcement. Potential future grey-listing or blacklisting would materially affect cross-border crypto business.
• CBRT payment prohibition (2021): Restricts crypto-as-payment use by payment service providers; a form of sectoral restriction rather than sanctions.
• Screening obligations: Obliged parties should screen customers and beneficial owners against Turkish-transposed UN sanctions lists, EU listings incorporated via FATF statements, and MASAK's published guidance.

Key Gaps & Risks

1. No comprehensive CASP law – licensing criteria, capital requirements, custody rules, and investor protections remain undefined. T.C. Resmî Gazete
2. Fragmented oversight – MASAK (AML), CBRT (payments), Ministry of Trade (commerce), SPK (securities/capital markets) – no single crypto regulator. T.C. Hazine ve Maliye Bakanlığı
3. Payment prohibition – CBRT ban on crypto-as-payment (2021) limits merchant adoption and fiat on/off-ramp partnerships. (See Regulatory Framework above.)
4. Tax uncertainty – Absence of crypto-specific rules exposes businesses to retrospective assessments, penalties, and interest.
5. Import controls – Safeguard measures (12 Jan 2024, 19 June 2025) may affect hardware wallet or mining equipment supply chains. 12 Ocak 2024 CUMA; 19 June 2025
6. Cross-border enforcement complexity – Reliance on pre-crypto conventions (1998, 1999 gazettes) for international cooperation. T.C. Resmi Gazete Arşivi 22551
7. Reputational/operational risk – Banks routinely decline or close accounts for unlicensed crypto businesses despite no explicit ban.
8. Inflation-indexed fines – MASAK administrative fine ceilings increase annually per the Revenue Administration's revaluation rate; compliance costs rise accordingly.

Actionable Compliance Steps for Crypto Businesses in Turkey

1. Corporate formation: Incorporate as a Joint-Stock Company (Anonim Şirketi) with minimum capital TRY 500,000 (Presidential Decree No. 7902, Official Gazette No. 32446, 2 March 2024). Register with the local Trade Registry (Ticaret Sicili) and obtain a tax identification number from the Revenue Administration.
2. MASAK registration: Register as an obliged party with MASAK via the online portal at online.masak.gov.tr within 30 days of commencing activity. This will enable electronic STR filing and compliance submissions.
3. AML/CFT programme implementation:
   • Appoint a compliance officer (Uyum Görevlisi) and notify MASAK of the appointment.
   • Implement written KYC procedures per Uyum Yönetmeliği Art. 7 (customer identification) and Art. 8 (beneficial-owner identification).
   • Screen customers against PEP lists per Art. 9.
   • Establish a transaction-monitoring system per Art. 14, with clear triggers for STR filing within 10 business days of suspicion.
   • Implement record-retention systems meeting the 8-year requirement under Art. 17 (CDD records, transaction records, communications).
   • Conduct annual internal audits and employee training per Arts. 18–20.
4. STR filing: Submit suspicious transaction reports via MASAK's e-Devlet portal at giris.masak.gov.tr. Maintain records of all STR submissions for 8 years.
5. Tax compliance: Register with the Revenue Administration for expected taxes. Maintain detailed transaction-level records (acquisition cost, holding period, sale proceeds, fees) to support accurate income/loss computation under general income tax principles. Consider obtaining a private letter ruling (özelge) from the Revenue Administration on classification of trading gains.
6. Payments prohibition compliance: Do not accept crypto assets as payment for goods/services within the payment-service provider framework (CBRT regulation, Art. 14/2). Ensure merchant partners are aware that crypto-as-payment is prohibited.
7. Ongoing monitoring: Monitor the Official Gazette resmigazete.gov.tr for publication of the SPK CASP communiqué (final licensing regime) and any MASAK or Revenue Administration crypto guidance.
8. Legal counsel: Retain Turkish counsel specialising in financial regulation and tax. Given the absence of a licensing regime, obtain written legal opinions on your specific business model.

Capital Requirements – Currency Equivalents (15 July 2025 Cutoff)

All local-currency capital thresholds converted at the 15 July 2025 research cutoff exchange rate (TRY 35.5 = USD 1; TRY 38.5 = EUR 1).

Appendix: Regulatory Monitoring Sources

The following official sources should be monitored for regulatory developments affecting CASPs in Turkey. This appendix is provided for reference; it is not a substitute for actionable compliance steps in the main body.

• Official Gazette (Resmî Gazete) – for publication of the final SPK CASP communiqué, any MASAK implementing regulations, and tax legislation. T.C. Resmî Gazete
• SPK (Capital Markets Board) – for public consultations and draft communiqués on crypto assets. https://www.spk.gov.tr
• CBRT (Central Bank) – for amendments to the payment-services regulation and any crypto-specific payment guidance. https://www.tcmb.gov.tr
• MASAK – for AML/CFT guidance updates, inflation-adjusted fine schedules, and FATF-related announcements. MASAK Online İşlemler
• Revenue Administration (Gelir İdaresi Başkanlığı) – for crypto-tax guidance. https://www.gib.gov.tr
• Ministry of Trade – for import safeguards and commercial communiqués affecting hardware/mining equipment.

Sources

• T.C. Resmî Gazete
• T.C. Hazine ve Maliye Bakanlığı – Uyum Yönetmeliği
• MASAK Genel Portal
• Mali Suçları Araştırma Kurulu – Wolfsberg Prensipleri
• Başbakanlık Mevzuatı Geliştirme ve Yayın Genel Müdürlüğü – 6769 Sayılı Kanun
• Masak Online Uygulamaları
• 5237 Sayılı Türk Ceza Kanunu
• 5607 Sayılı Kaçakçılıkla Mücadele Kanunu
• 9 Temmuz 2025 ÇARŞAMBA – Hükümet Programı
• T.C. Resmî Gazete Arşivi 23420
• T.C. Resmi Gazete Arşivi 22551
• 12 Ocak 2024 CUMA
• 19 Haziran 2025
• Tahsilat Genel Tebliği (Seri:B Sıra No:20)

Disclaimer

This research document is for informational purposes only and does not constitute legal, tax, or financial advice. Regulatory and tax treatment of crypto assets in Turkey is evolving. Consult qualified local counsel before making operational decisions. All provisions cited from Turkish legislation, including the Turkish Commercial Code, the Turkish Penal Code, the AML Law (Law No. 5549), and the Compliance Regulation (Uyum Yönetmeliği), reflect the law as in effect as of 15 July 2025 unless otherwise noted. Inflation-indexed figures are based on the applicable Revenue Administration revaluation rate for 2025 and may be updated annually. All forward-looking dates in the Appendix section are projections (not yet published as of 15 July 2025) and should not be relied upon for compliance decisions.