title: Turkey Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/turkey/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Turkey TR schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 66 sourced findings · 88 sources in the cumulative register 14 Modules baseline.modules[] 66 Findings modules[].findings[] 7 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) No modules moved this cycle. ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal The Central Bank of the Republic of Turkey (CBRT) cancelled the e-money institution operating licence of Parakolay Elektronik Para A.Ş., a decision published in the Official Gazette on 10 October 2026. Within the same window, the CBRT also granted a new e-money institution operating licence to NXT Elektronik Para ve Ödeme Hizmetleri A.Ş., published in the Official Gazette (Sayı 33389) on 3 October 2026, one day before this window's anchor date and treated as borderline context rather than a confirmed in-window delta in its own right. Both actions proceed under Law No. 6493, which restricts the provision of payment services to banks, e-money institutions, payment institutions and PTT (the Turkish Post), and restricts e-money issuance specifically to banks, PTT and licensed e-money institutions. Taken together, the cancellation and the grant read as routine churn within an actively supervised e-money licence pool rather than any shift in the governing framework itself; no amendment to Law No. 6493 was identified this cycle. #### Other Developments No other module produced a confirmed in-window finding this cycle; research coverage across the remaining thirteen modules in the fourteen-module spine returned no sourced delta for Turkey within this window. #### Cross-Monitor Connections The Parakolay licence cancellation and associated e-money institution supervision sit within CBRT's ordinary prudential remit under Law No. 6493 and do not, on the evidence reaching this cycle, connect to a financial-crime or sanctions finding; any such connection would need separate corroboration from financial-integrity-focused sourcing before being drawn. #### Outlook The single-anchor sourcing behind the Parakolay cancellation, resting on the CBRT's own regulatory-decision index without independent second-source corroboration specific to that cancellation, means the module-source floor is not yet met for this finding. What would strengthen the picture going forward is either a second independent source corroborating the Parakolay cancellation specifically, or visibility into whether the licence-pool churn reflects anything beyond ordinary supervisory turnover. _1 earlier update not shown here._ ###### Standing brief · as of 23 August 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Turkiye's bank-centred payments licensing regime came under direct enforcement stress this cycle, with the Central Bank of the Republic of Turkiye revoking, and then judicially reinstating, e-money institution Papara's licence over an illegal-betting-linked money-laundering probe. CBRT revoked Papara's Law No. 6493 e-money licence on 31 October 2025 under Articles 16 and 19 following a MASAK investigation; an Ankara administrative court stayed the revocation in December 2025, and CBRT reinstated the licence under TMSF trusteeship in January 2026. Lexology Pro reporting characterises this as the fourth Turkish fintech e-money or payment-licence revocation over illegal-betting allegations within the year, indicating a systemic enforcement pattern against non-bank payment institutions rather than an isolated case. The bank-versus-non-bank distinction is analytically central to this case: Papara operates under the nonbank_pi_emi licensing track rather than as a licensed bank, and this cycle's evidence indicates non-bank payment institutions are bearing the brunt of illegal-betting-related enforcement risk in Turkiye's payments market, with direct implications for how such institutions should weight ongoing licensing and litigation risk relative to bank-licensed competitors. The judicial mechanics of the case are themselves noteworthy: Ankara's 25th Administrative Court's stay of execution allowed Papara to resume operations pending appeal notwithstanding CBRT's revocation decision, and CBRT's subsequent reinstatement under TMSF trusteeship represents an intermediate supervisory posture — neither full restoration of ordinary licensed status nor continued suspension — that is itself a distinctive feature of how Turkish authorities are currently managing enforcement actions against systemically relevant non-bank payment institutions. #### Other Developments **BDDK board reshuffle.** Turkiye's banking regulator, BDDK, saw a board composition change under Presidential Decision No. 2026/44 (6 February 2026 Official Gazette), appointing Yakup Asarkaya as Second Chairman under Chairman Sahap Kavcioglu. BDDK's board sits at the apex of Turkiye's prudential supervision of the banking and payments sector, and a chairmanship-level appointment during an active enforcement period involving one of the sector's most prominent e-money institutions is a governance signal worth tracking for any indication of enforcement-posture continuity or change under the reshuffled board. **Bank-fintech integration continues.** Aktif Bank's subsidiary Aktif Ventures launched Apilion, a banking-as-a-service API marketplace giving fintechs access to core banking, investment, payments and insurance infrastructure. This is a low-confidence, single-sourced development, but it is consistent with reporting characterising the Turkish market as one where fintechs grow in partnership with banks rather than in competition with them. Aktif Ventures' Apilion platform is positioned as infrastructure enabling fintechs to plug into core banking, investment, payments and insurance rails through a single API layer, which, if the reporting proves durable, would reinforce Turkiye's existing pattern of bank-anchored fintech infrastructure rather than disintermediated non-bank competition. **Unconfirmed Revolut-FUPS acquisition talks.** Deal-stage, unconfirmed reports describe Revolut in talks to acquire Turkish digital bank FUPS as a potential licensing fast-track into the Turkish payments market. This rests on a single lower-tier source and is explicitly a rumoured rather than confirmed transaction; any such deal would require BDDK approval. The rationale reported for the talks is explicitly a licensing fast-track: acquiring an already-licensed Turkish digital bank would allow Revolut to enter the market without pursuing its own BDDK licence application from scratch, consistent with how foreign entrants have historically approached market access in jurisdictions with demanding licensing processes. #### Cross-Monitor Connections The Papara enforcement action and its illegal-betting-related money-laundering basis is the subject of first-party analysis at the Financial Integrity Monitor, which this brief does not reproduce; World Payments Monitor's own treatment is confined to the payments-licensing, litigation and market-structure dimensions of the same underlying facts. The illegal-gambling market-access and enforcement dimension of the same enforcement wave is separately covered by the Advennt Gambling Regulatory Monitor from an operator-risk perspective. This division of labour matters for readers assessing overall Turkish payments-sector risk: the picture presented here should be read alongside, not instead of, that connected analysis, since all three monitors are drawing on overlapping but analytically distinct readings of the same underlying enforcement wave. #### Outlook The most consequential open question is whether Turkiye's non-bank payment institutions face further licence actions on the Papara pattern, which would confirm a systemic rather than episodic enforcement posture against the sector; the "fourth such revocation within the year" characterisation already reported suggests this is more likely than not. Separately, the practical effect of judicial review on CBRT enforcement outcomes bears continued monitoring, since it materially affects how much deterrent weight administrative licence action actually carries in the Turkish payments market. Whether the Revolut-FUPS talks, if confirmed, proceed to a BDDK-approved transaction would be a significant market-structure signal. For risk assessments generally, the Papara case is a reminder that non-bank e-money institutions handling high transaction volumes remain subject to abrupt, headline-level licensing action even where the underlying legal process ultimately produces a more nuanced outcome than the initial revocation headline suggested. trust tier: ai_unverified ###### Latest update · 29 September 2026 #### Regulatory Status Türkiye's payments regulatory environment this cycle shows simultaneous tightening on conduct and identity-verification standards alongside continued liberalisation of market access via banking-as-a-service partnerships. The BRSA approved a Migros subsidiary as a BaaS interface provider for Colendi Bank, and GetirFinans partnered with Fibabanka, both extending regulated banking products into non-bank retail interfaces. Presidential Decision No. 2026/44 refreshed the BRSA Board's composition, providing institutional backdrop to this activity. On the conduct side, an amended regulation on remote-customer-onboarding identity-verification methods for payment and electronic-money institutions was published in Official Gazette No. 33360 on 4 September 2026, and MASAK's enhanced transaction-purpose disclosure regime for transfers of TRY200,000 or more took effect on 1 January 2026, adding a documentation requirement at the transaction layer for qualifying large transfers. #### Outlook Watch for further BaaS partnership announcements, for any reported effect of the Gazette 33360 remote-identification amendment on onboarding practice, and for whether the MASAK disclosure threshold is revisited. ###### Standing brief · as of 23 August 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Turkiye's payments regulatory environment this cycle is defined by active enforcement stress on its non-bank payment-institution licensing regime and by a governance change at its prudential regulator. CBRT revoked, and subsequently reinstated under TMSF trusteeship, Papara Elektronik Para A.S.'s e-money licence over an illegal-betting-related money-laundering probe, in a sequence that included an Ankara administrative court's stay of the original revocation. Lexology Pro reporting characterises the Papara case as the fourth such Turkish fintech licence revocation over illegal-betting allegations within the year, indicating a systemic rather than isolated enforcement pattern against the sector. Separately, BDDK's board composition changed under Presidential Decision No. 2026/44, with Yakup Asarkaya appointed Second Chairman under Chairman Sahap Kavcioglu. Commercially, Turkiye's bank-centred fintech market structure continues to develop through both domestic incumbent-bank infrastructure investment (Aktif Bank's Apilion banking-as-a-service marketplace) and potential foreign-entrant activity (unconfirmed Revolut-FUPS acquisition talks, reportedly aimed at a licensing fast-track into the market). Both of these commercial developments rest on lower-tier sourcing and should be treated as developing rather than settled signals. #### Outlook The most consequential open questions for Turkiye's payments market this cycle are whether further non-bank payment institutions face licensing action on the Papara pattern, whether the Papara appeal resolves toward full reinstatement or a different outcome, and whether the Revolut-FUPS talks, if confirmed, proceed to a BDDK-approved transaction. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-06-27 Non-bank market access via PI and EMI licences under Law No. 6493 (2013); CBRT competent authority since 1 Jan 2020 (operational licensing from 18 Jan 2021); ~86 licensed PI/EMIs in 2024. Standing sub-brief · as of 23 August 2026 415 words · last cycle 2026-10-18 #### Licensing, Authorisation & Market Access Turkiye's payments and e-money licensing regime came under direct and material enforcement stress this cycle. The Central Bank of the Republic of Turkiye (CBRT) revoked Papara Elektronik Para A.S.'s e-money institution licence on 31 October 2025, acting under Law No. 6493 Articles 16 and 19 following a MASAK investigation into illegal-betting-related money laundering. Lexology Pro reporting characterises this as the fourth Turkish fintech e-money or payment-licence revocation over illegal-betting allegations within the same year, a high-confidence indicator that Turkish authorities are treating licensing enforcement as a primary lever against illegal-betting-related financial flows moving through the non-bank payment sector specifically. The subsequent procedural history is as important as the initial revocation for assessing licensing risk: an Ankara administrative court stayed the revocation in December 2025, allowing Papara to resume operations pending appeal, and CBRT then reinstated the licence under TMSF trusteeship in January 2026. This sequence — revocation, judicial stay, reinstatement under trusteeship — represents an outcome materially different from either a clean revocation or an unchallenged continuation of licensed status, and should be read by market participants as the realistic range of outcomes for a comparable licensing enforcement action in Turkiye's current environment. This cycle's evidence also includes a governance-level development at the prudential-regulator level: BDDK's board composition changed under Presidential Decision No. 2026/44 (6 February 2026 Official Gazette), with Yakup Asarkaya appointed Second Chairman under Chairman Sahap Kavcioglu. While this is a lower-materiality, monitored-tier development relative to the Papara licensing action, it is relevant context given BDDK's supervisory role over the banking and payments sector in which the Papara case unfolded. Carrying the bank-PSP versus non-bank PI/EMI distinction explicitly: Papara operates under the non-bank payment-institution/e-money-institution licensing track rather than as a licensed bank, and this cycle's enforcement activity is concentrated specifically on that non-bank track. No comparable licensing enforcement action against a bank-licensed payment-services provider was identified this cycle, a distinction market entrants weighing a bank-charter route against a non-bank e-money licence route in Turkiye should factor into their risk assessment. #### Outlook The described "fourth such revocation" pattern suggests further licensing action against non-bank payment institutions on a similar illegal-betting-laundering theory is more likely than not in coming cycles; whether any such future action follows the same revocation-stay-reinstatement sequence as Papara, or results in a cleaner outcome, will be an important signal for the practical deterrent weight of CBRT licensing enforcement. The BDDK board reshuffle's effect, if any, on future enforcement posture is not yet resolved by available evidence. Periodic update · new data 2026-10-18 #### Licensing, Authorisation & Market Access The CBRT cancelled the e-money institution operating licence of Parakolay Elektronik Para A.Ş., with the decision published in the Official Gazette on 10 October 2026. This cancellation sits alongside the CBRT's grant of a new e-money institution operating licence to NXT Elektronik Para ve Ödeme Hizmetleri A.Ş., published in the Official Gazette (Sayı 33389) on 3 October 2026, a day before the window's anchor date and treated here as context for the licence-pool picture rather than as its own confirmed in-window delta. Both actions operate under Law No. 6493, Turkey's payment-services and e-money framework, which restricts the provision of payment services to banks, e-money institutions, payment institutions and PTT (the Turkish Post), and restricts e-money issuance specifically to banks, PTT and licensed e-money institutions. The licensing authority for both the cancellation and the grant is the CBRT, consistent with its role as prudential supervisor of the non-bank payment-institution and e-money-institution sector under that law. Read together, a cancellation and a grant within the same narrow window indicate the CBRT continuing to actively manage its licence pool rather than any relaxation or tightening of entry standards generally; nothing in the evidence reaching this cycle points to a change in Law No. 6493 itself, only to individual licensing decisions made under its existing terms. The cancellation in particular reflects CBRT's willingness to remove institutions from the licensed pool, a supervisory action with direct consequence for the institution concerned and, by extension, for any merchants or customers relying on that institution's e-money services at the time of cancellation. Sourcing for the Parakolay cancellation rests on the CBRT's own regulatory-decision index as a single anchor; no independent second source corroborating that specific cancellation was located this cycle, which the gaps register flags explicitly as a module-source-floor shortfall for this finding. #### Outlook What would materially change the picture here is either independent corroboration of the Parakolay cancellation from a source beyond the CBRT's own index, or a subsequent licensing action that would indicate whether this round of churn reflects anything beyond ordinary supervisory turnover in the e-money institution pool. **1 earlier distinct update(s)** Periodic update · new data 2026-09-29 #### Licensing, Authorisation & Market Access Presidential Decision No. 2026/44 refreshed the composition of the Banking Regulation and Supervision Agency's Board this cycle, a governance-level development providing the institutional backdrop against which market-access decisions are being made. Against that backdrop, the BRSA approved a Migros subsidiary as a banking-as-a-service interface provider for Colendi Bank, extending the pattern of non-bank retail brands acting as customer-facing interfaces for licensed banking products. This does not represent a widening of the underlying licensing perimeter itself, since Colendi Bank remains the licensed entity and the Migros subsidiary operates as an interface provider rather than a bank or e-money institution in its own right. The distinction between bank/PSP licensure and non-bank interface provision remains the analytically load-bearing feature of this market-access development: the regulated activity continues to sit with the licensed bank, while market reach is extended through commercial partnership rather than through any new licence class. #### Outlook Watch for further BaaS interface approvals under this same structural pattern, and for whether the refreshed BRSA Board composition produces any near-term shift in licensing or supervisory posture beyond the governance change itself. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (5)** 1. T1 [https://www.tcmb.gov.tr/wps/wcm/connect/EN/TCMB+EN/Main+Menu/Core+Functions/Payment+Services](https://www.tcmb.gov.tr/wps/wcm/connect/EN/TCMB+EN/Main+Menu/Core+Functions/Payment+Services) retrieved 2026-06-27 2. T3 [https://chambers.com/articles/providing-payment-e-money-services-in-turkiye-how-to-obtain-a-license](https://chambers.com/articles/providing-payment-e-money-services-in-turkiye-how-to-obtain-a-license) retrieved 2026-06-27 3. T3 [https://faisalkhan.com/solutions/licensing/turkey-electronic-money-e-money-license/](https://faisalkhan.com/solutions/licensing/turkey-electronic-money-e-money-license/) retrieved 2026-06-27 4. T3 [https://multilaw.com/Multilaw/ZENTSO/BusinessGuides/Presentation/Section_Home.aspx?GuideId=2&GuideCountry=Turkey&GuideSection=742](https://multilaw.com/Multilaw/ZENTSO/BusinessGuides/Presentation/Section_Home.aspx?GuideId=2&GuideCountry=Turkey&GuideSection=742) retrieved 2026-06-27 5. T3 [https://www.nortonrosefulbright.com/en/knowledge/publications/0343df19/doing-business-in-turkey-fintech](https://www.nortonrosefulbright.com/en/knowledge/publications/0343df19/doing-business-in-turkey-fintech) retrieved 2026-06-27 ### W1b Conduct, Safeguarding & Promotions Confirmed confirmed 2026-06-27 Safeguarding under Law No. 6493 requires e-money issuers to convert received funds into e-money without delay and to hold customer funds in segregated, blocked bank accounts at Law No. 5411 banks during the term of use, separate from the institution's own assets. PIs/EMIs must additionally deposit minimum security amounts with the CBRT (tiered by activity). Institutions are activity-restricted to permitted payment/e-money services. Conduct is governed by framework agreements with users, KVKK data-protection obligations, mandatory data localisation within Türkiye, and MASAK AML reporting. The CBRT supervises, audits, and can suspend or revoke licences. Horizon · 2026-Q1 (±quarter) Annual CBRT minimum-capital / security-deposit re-determination_in_force_pending · T3_ Horizon · 2026-Q1 (±quarter) Annual CBRT minimum-capital / security-deposit re-determination_in_force_pending · T3_ Standing sub-brief · as of 27 June 2026 239 words · last cycle 2026-10-04 #### Conduct, Safeguarding & Promotions Türkiye's safeguarding regime for non-bank EMIs rests on bank-held blocked segregation. E-money issuers must transfer funds received for e-money issuance into a separate bank account at Law No. 5411 banks, with the holding bank blocking those amounts during the term of use, thereby segregating customer funds from institution assets. This is a segregation mechanism rather than an insurance or trust structure, and it shapes EMI cost and liquidity profiles accordingly. Layered on top is a security-deposit buffer. Historically, bill-payment-intermediation PIs faced a TRY 2m minimum, other PIs TRY 3m and EMIs TRY 5m deposited with the CBRT, but these figures are now historical: the CBRT determines amounts annually and significantly higher figures — including a TRY 15m floor for bill-payment-only activity — entered force on 30 June 2025. The exact current schedule following the January 2025 determinations is not precisely captured and requires T1/T2 confirmation; the figures carried here are assessed with the caveat that current amounts are materially higher than the legacy thresholds. The distinction matters most for non-bank PIs and EMIs, for whom rising annual minimum-security thresholds raise the capital cost of operating and may pressure smaller licensees. #### Outlook The annual CBRT minimum-capital and security-deposit re-determination is expected around Q1 2026, set in January and entering force mid-year, and is trending materially higher. Precise capture of the post-30 June 2025 schedule remains an open intelligence gap requiring confirmation from primary or specialist sources. Periodic update · new data 2026-09-29 #### Conduct, Safeguarding & Financial Promotions An amended regulation on remote-customer-onboarding identity-verification methods for payment and electronic-money institutions was published in Official Gazette No. 33360 on 4 September 2026, and entered into force on that date. The amendment revises the identity-verification methods available to payment service providers for remote customer onboarding, tightening the conduct standard applied at the point of customer acquisition. This sits alongside MASAK's enhanced transaction-purpose disclosure regime for large transfers, effective 1 January 2026, which layers an additional conduct-adjacent control onto the payment-rail environment by requiring banks to document transfer origin and purpose for transfers of TRY200,000 or more. Together, these two developments mark a tightening trajectory on the conduct and safeguarding axis for Turkish payment and e-money institutions this cycle, running in parallel with, rather than in tension with, the market-access liberalisation visible in the BaaS partnership activity tracked elsewhere this cycle. #### Outlook Watch for practitioner or industry commentary on how the Gazette 33360 remote-identification amendment affects onboarding friction or fraud rates in practice, and for whether MASAK's disclosure threshold is revisited or extended to lower transfer amounts. **Sources and findings (4)** 1. T3 [https://www.admdlaw.com/payment-security-settlement-systems-and-e-money-insutitions-in-turkey/](https://www.admdlaw.com/payment-security-settlement-systems-and-e-money-insutitions-in-turkey/) retrieved 2026-06-27 2. T2 [https://cms.law/en/tur/legal-updates/turkey-s-central-bank-adopts-new-secondary-legislation-on-payment-services-and-e-money](https://cms.law/en/tur/legal-updates/turkey-s-central-bank-adopts-new-secondary-legislation-on-payment-services-and-e-money) retrieved 2026-06-27 3. T3 [https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/turkey/](https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/turkey/) retrieved 2026-06-27 4. T3 [https://www.bicakhukuk.com/en/sanctions-liabilities-in-turkeys-electronic-payment-law/](https://www.bicakhukuk.com/en/sanctions-liabilities-in-turkeys-electronic-payment-law/) retrieved 2026-06-27 ### W2 Stablecoins & Digital Money Probable confirmed 2026-06-27 Crypto-as-payment banned since Apr 2021; CASPs regulated under Law No. 7518 (Jul 2024); no MiCA-equivalent stablecoin category; Digital TL CBDC pilot phase one complete. Standing sub-brief · as of 27 June 2026 249 words · last cycle 2026-06-27 #### Stablecoins & Digital Money Türkiye has no dedicated stablecoin category equivalent to MiCA EMTs; stablecoins currently fall under CML/CMB crypto-asset rules established by Law No. 7518. Industry commentary anticipates that stablecoin payment-rail issuance may migrate to CBRT payment-services law in future, but no official roadmap is published, and that forward-migration assertion rests on single-source commentary rather than confirmed policy. Law No. 7518, published in the Official Gazette No. 32590 on 2 July 2024, established Türkiye's first crypto-asset legal framework, authorising the CMB/SPK to license and supervise CASPs, with TÜBİTAK supplying technical standards and MASAK enforcing AML. Crypto-asset trading is therefore regulated, but crypto-as-payment is separately and structurally blocked: the CBRT Regulation on the Disuse of Crypto Assets in Payments, published 16 April 2021 and in force 30 April 2021, prohibits direct or indirect use of crypto assets in payments and bars PIs and EMIs from intermediating crypto trading platforms. This prevents non-bank PIs and EMIs from building crypto-settled payment products domestically, sharply constraining any prospective TRY-denominated stablecoin payment rail. On the public-money side, the bank-led CBDC programme is advancing. The CBRT completed phase one of the Digital Turkish Lira pilot in February 2024, confirming a two-tier programmable payment model with bank-supplied wallets, testing offline resilience and cross-border interoperability and aligning R&D with BIS standards. #### Outlook The stablecoin and digital-money module is established. The key uncertainty is whether stablecoin payment-rail issuance migrates into CBRT payment-services law; absent an official roadmap, the regulatory trajectory for TRY stablecoin payment instruments remains unconfirmed. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T3 [https://practiceguides.chambers.com/practice-guides/blockchain-2025/turkey/trends-and-developments](https://practiceguides.chambers.com/practice-guides/blockchain-2025/turkey/trends-and-developments) retrieved 2026-06-27 2. T3 [https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/turkey-turkiye/](https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/turkey-turkiye/) retrieved 2026-06-27 3. T3 [https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/turkey/](https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/turkey/) retrieved 2026-06-27 4. T3 [https://practiceguides.chambers.com/practice-guides/blockchain-2025/turkey/trends-and-developments](https://practiceguides.chambers.com/practice-guides/blockchain-2025/turkey/trends-and-developments) retrieved 2026-06-27 5. T3 [https://www.lightspark.com/knowledge/is-crypto-legal-in-turkey](https://www.lightspark.com/knowledge/is-crypto-legal-in-turkey) retrieved 2026-06-27 ### W3 Operational Resilience & Critical Infra Confirmed confirmed 2026-06-27 Operational resilience for Turkish payments draws on the CBRT's information-systems communiqué for PIs/EMIs and the BDDK's 2020 banking IT regulation (Regulation on Banks' Information Systems and Electronic Banking Services). Institutions must run annual information-systems risk assessments, submit reports to the CBRT by end-January, notify the KVKK board and customers of cyber incidents, and use independent auditors for IT systems. Türkiye mandates strict authentication (universal 2FA, an SMS-OTP ban for mobile banking), data localisation, and real-time incident reporting; cybersecurity oversight is shared among BDDK, CBRT and a Cybersecurity Authority empowered under Law No. 7545 (2025). Core RTGS/instant-payment infrastructure is CBRT-developed and self-assessed against BIS-IOSCO PFMI. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/turkey/) Standing sub-brief · as of 27 June 2026 171 words · last cycle 2026-06-27 #### Operational Resilience & Critical Infrastructure Türkiye operates among the strictest authentication regimes globally. Universal two-factor authentication is mandated and SMS-OTP is banned for mobile banking under the BDDK 2020 Regulation on Banks' Information Systems and Electronic Banking Services, with real-time incident reporting, data localisation, ISO 27001 and PCI DSS compliance required, and an annual IS risk assessment reported to the CBRT by end-January. The SMS-OTP ban forces PSPs — banks and non-banks alike — to adopt phishing-resistant authentication, raising onboarding and infrastructure costs. Cyber oversight is coordinated across BDDK for banking, the CBRT for payment systems, and a Cybersecurity Directorate whose powers were significantly expanded under Law No. 7545 enacted in March 2025. This third agency adds regulatory complexity for payment operators navigating overlapping BDDK, CBRT and Directorate mandates. The Law No. 7545 development is single-source and carried as assessed. #### Outlook The resilience module is established with high confidence on the authentication regime. The practical effect of the expanded Cybersecurity Directorate mandate on payment operators warrants monitoring as implementation detail emerges. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T2 [https://cms.law/en/tur/legal-updates/turkey-s-central-bank-adopts-new-secondary-legislation-on-payment-services-and-e-money](https://cms.law/en/tur/legal-updates/turkey-s-central-bank-adopts-new-secondary-legislation-on-payment-services-and-e-money) retrieved 2026-06-27 2. T3 [https://www.corbado.com/blog/turkey-financial-regulations-authentication](https://www.corbado.com/blog/turkey-financial-regulations-authentication) retrieved 2026-06-27 3. T3 [https://www.corbado.com/blog/turkey-financial-regulations-authentication](https://www.corbado.com/blog/turkey-financial-regulations-authentication) retrieved 2026-06-27 4. T1 [https://www.tcmb.gov.tr/wps/wcm/connect/EN/TCMB+EN/Main+Menu/Core+Functions/Payment+Systems/Payment+Systems+in+Turkey/Electronic+Fund+Transfer+System+and+Electronic+Securities+Transfer+System](https://www.tcmb.gov.tr/wps/wcm/connect/EN/TCMB+EN/Main+Menu/Core+Functions/Payment+Systems/Payment+Systems+in+Turkey/Electronic+Fund+Transfer+System+and+Electronic+Securities+Transfer+System) retrieved 2026-06-27 ### W4 Scheme & Network Compliance Probable confirmed 2026-06-27 Card-scheme infrastructure runs through the Interbank Card Center (BKM), a non-profit jointly owned by the CBRT (controlling stake since April 2020) and banks, which operates the domestic card authorisation/clearing switch, the local 3DS ACS, the BKM Express wallet and the domestic Troy card scheme. Visa and Mastercard dominate alongside Troy (~25M cards in 2026, with Discover/Diners reciprocal acceptance abroad). PCI DSS and 3D Secure 2.2 are enforced; the TR QR Code (TR Karekod) is the national QR standard. Card clearing settles on a deferred net basis (e.g. T+2 via Gosas for member banks). PSPs must share payment infrastructure with other PSPs on request under Article 8 of the Payment Services Regulation. Standing sub-brief · as of 27 June 2026 251 words · last cycle 2026-06-27 #### Scheme & Network Compliance The Interbank Card Center (BKM) operates the domestic card authorisation and clearing switch, the local 3DS ACS, the BKM Express wallet and the Troy domestic scheme, with the CBRT having acquired a controlling interest in BKM in 2020; Gosas clears card transactions on deferred net settlement at T+2. The exact 30 April 2020 date for the controlling-stake acquisition is not corroborated by primary sources, so year-only framing is adopted. CBRT control of BKM gives the central bank direct leverage over domestic card switching, the Troy scheme and 3DS infrastructure. Troy itself has scaled materially: it reached approximately 67 million cards as of August 2025, capturing a roughly 20% share of card transactions, and offers credit, debit and prepaid issuing, with acceptance on the US Discover network since 2017. This represents meaningful domestic-scheme displacement of Visa/Mastercard volume; a research-stated figure of around 25 million cards in 2026 is materially understated and stale, and the corrected figure is carried pending higher-tier confirmation. The access regime is mandatory. Article 8 of the CBRT Payment Services Regulation obliges all PSPs — banks, PIs and EMIs — to make their payment account services and payment infrastructure available to other PSPs on request, with a decision required within one month. This lowers entry barriers for non-bank PSPs but creates margin-squeeze friction with bank POS owners. #### Outlook The scheme module is established. Troy's continued card-base growth and transaction-share trajectory remain the key tracker, alongside the competitive dynamics created by mandatory Article 8 infrastructure access. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T3 [https://cundoglu.medium.com/real-time-payments-in-turkey-9aea211e98cd](https://cundoglu.medium.com/real-time-payments-in-turkey-9aea211e98cd) retrieved 2026-06-27 2. T3 [https://legalblogs.wolterskluwer.com/competition-blog/a-primer-on-payment-services-in-turkiye-competition-cooperation-and-confrontation/](https://legalblogs.wolterskluwer.com/competition-blog/a-primer-on-payment-services-in-turkiye-competition-cooperation-and-confrontation/) retrieved 2026-06-27 3. T3 [https://www.zunapro.com/turkey/en/blog/payment-systems-ecommerce-turkey](https://www.zunapro.com/turkey/en/blog/payment-systems-ecommerce-turkey) retrieved 2026-06-27 4. T3 [https://cashmanagement.bnpparibas.com/atlas-countries/turkey](https://cashmanagement.bnpparibas.com/atlas-countries/turkey) retrieved 2026-06-27 5. T3 [https://en.wikipedia.org/wiki/Troy_(card_scheme)](https://en.wikipedia.org/wiki/Troy_(card_scheme)) retrieved 2026-06-27 ### W5 Payment Corridor Dynamics Confirmed confirmed 2026-06-27 Domestic rails centre on the CBRT-owned FAST instant-payment system (launched January 2021, 24/7, sub-second settlement in central-bank money) with BKM-run overlay services (KOLAS easy-addressing, TR QR Code), plus the EFT (BPS/RPS) and ESTS RTGS systems. Cross-border settlement flows through correspondent banking and Visa/Mastercard rails; FAST currently operates within national boundaries with cross-border interoperability under exploration. Türkiye is a large remittance and e-export corridor; PayU/iyzico explicitly position Türkiye as a bridge between CEE and Africa for local-currency cross-border trade. International digital wallets (PayPal, Apple Pay, Google Pay) are not permitted to operate domestically. Standing sub-brief · as of 27 June 2026 149 words · last cycle 2026-06-27 #### Payment Corridor Dynamics The central plank of the corridor view is FAST, the CBRT-developed and owned instant-payment system, which launched a pilot on 18 December 2020 and opened to all customers on 8 January 2021. FAST executes 24/7 sub-second payments in central-bank money, with overlay services — KOLAS easy-addressing and the TR QR Code — commissioned to BKM, and direct participation open to banks and non-bank PSPs with no joining or annual fee. Fee-free non-bank participation in a 24/7 central-bank instant rail is a strong driver of account-to-account payment growth and a competitive threat to card volumes. On the cross-border dimension, FAST cross-border interoperability is described only as under exploration, with no concrete timeline or specific corridor go-live commitments evidenced. #### Outlook The domestic instant rail is confirmed and established. Cross-border interoperability is the open question; the absence of concrete corridor timelines is a flagged intelligence gap pending further evidence. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.tcmb.gov.tr/wps/wcm/connect/EN/TCMB+EN/Main+Menu/Core+Functions/Payment+Systems/Payment+Systems+in+Turkey/Electronic+Fund+Transfer+System+and+Electronic+Securities+Transfer+System](https://www.tcmb.gov.tr/wps/wcm/connect/EN/TCMB+EN/Main+Menu/Core+Functions/Payment+Systems/Payment+Systems+in+Turkey/Electronic+Fund+Transfer+System+and+Electronic+Securities+Transfer+System) retrieved 2026-06-27 2. T1 [https://fastpayments.worldbank.org/sites/default/files/2023-05/World%20Bank_FPS_FAST%20Turkey_Final.pdf](https://fastpayments.worldbank.org/sites/default/files/2023-05/World%20Bank_FPS_FAST%20Turkey_Final.pdf) retrieved 2026-06-27 3. T3 [https://cashmanagement.bnpparibas.com/atlas-countries/turkey](https://cashmanagement.bnpparibas.com/atlas-countries/turkey) retrieved 2026-06-27 4. T3 [https://www.amadeuscapital.com/global-fintech-giant-payu-acquires-turkeys-leading-fintech-company-iyzico-in-a-165-million-investment/](https://www.amadeuscapital.com/global-fintech-giant-payu-acquires-turkeys-leading-fintech-company-iyzico-in-a-165-million-investment/) retrieved 2026-06-27 ### W6 Industry Structure & Commercial Probable confirmed 2026-06-27 Türkiye's payments market is large and fast-growing — 110M+ active cards and ~86 licensed payment/e-money institutions in 2024, with combined PI/EMI transaction volume around TRY 5 trillion (vs ~TRY 120 trillion for banks). The structure blends bank-owned utilities (BKM, Troy) with a deep fintech layer: major acquirers/PSPs include PayTR, iyzico (Prosus/PayU-owned), Param, Stripe Turkey, and marketplace wallets (Trendyol Cüzdan, HepsiPay). Neobank/embedded-finance players Papara (a unicorn) and ColendiBank (BDDK-licensed 2024) are scaling. Fintech led Turkish startup investment in 2025 with a record ~$219.7M raised, and Sipay (valuation ~$875M) bills itself as Türkiye's largest fintech. Standing sub-brief · as of 23 August 2026 271 words · last cycle 2026-08-21 #### Industry Structure & Commercial Dynamics Turkiye's payments market structure showed continued bank-fintech integration this cycle alongside an unconfirmed foreign-entry signal. Aktif Bank's subsidiary Aktif Ventures launched Apilion, a banking-as-a-service API marketplace giving fintechs access to core banking, investment, payments and insurance infrastructure through a single integration layer. This is a low-confidence, single-sourced development, but it is consistent with broader commentary characterising the Turkish fintech sector as one that grows in partnership with incumbent banks rather than through disintermediated competition. Separately, and at a lower confidence tier still, reports describe Revolut in unconfirmed, deal-stage talks to acquire Turkish digital bank FUPS, with the reported rationale being a licensing fast-track into the Turkish payments market via acquisition of an already-licensed institution rather than a standalone BDDK application. Any such transaction would require BDDK approval, underscoring the regulator's continued gatekeeping role over market structure even in an acquisition-based entry route. Read together, these two developments point toward a market structure in which both domestic incumbent-bank infrastructure plays and potential foreign-entrant acquisition plays are actively being pursued as routes into or within the Turkish payments market, against a backdrop in which the non-bank payment-institution sector is simultaneously facing significant licensing-enforcement pressure. This combination — commercial expansion activity proceeding in parallel with licensing enforcement risk — is itself the notable structural read for this cycle. #### Outlook Confirmation or denial of the Revolut-FUPS talks would be the most significant near-term market-structure signal, given its implications for the pace of foreign entry via acquisition. Continued expansion of bank-anchored BaaS infrastructure such as Apilion would reinforce the current bank-centred structural pattern rather than a shift toward non-bank-led market structure. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (4)** 1. T3 [https://www.zunapro.com/turkey/en/blog/payment-systems-ecommerce-turkey](https://www.zunapro.com/turkey/en/blog/payment-systems-ecommerce-turkey) retrieved 2026-06-27 2. T3 [https://www.nortonrosefulbright.com/en/knowledge/publications/0343df19/doing-business-in-turkey-fintech](https://www.nortonrosefulbright.com/en/knowledge/publications/0343df19/doing-business-in-turkey-fintech) retrieved 2026-06-27 3. T3 [https://fintechmagazine.com/fintech/why-is-fintech-dominating-the-turkish-start-up-ecosystem](https://fintechmagazine.com/fintech/why-is-fintech-dominating-the-turkish-start-up-ecosystem) retrieved 2026-06-27 4. T3 [https://fintechnews.ae/29780/turkey/turkeys-leading-fintech-startups/](https://fintechnews.ae/29780/turkey/turkeys-leading-fintech-startups/) retrieved 2026-06-27 ### W7 Legal & Litigation Probable confirmed 2026-06-27 2025 AML/financial-crime crackdown on payment companies ahead of FATF on-site; Law No. 6493 Arts 27-40 enforcement framework; Competition Board PF/bank acquiring disputes. Standing sub-brief · as of 23 August 2026 248 words · last cycle 2026-08-21 #### Legal & Litigation Turkiye's payments-sector litigation landscape this cycle is defined by a single but structurally significant event: Ankara's 25th Administrative Court ruled to stay execution of CBRT's decision cancelling Papara's e-money licence, allowing the company to resume operations pending appeal. This establishes, for the first time in this evidence base, that judicial review can meaningfully constrain a Central Bank enforcement action in the Turkish payments sector pending appeal, rather than such enforcement actions taking immediate and unreviewable effect. The practical sequence that followed — CBRT reinstating Papara's licence under TMSF trusteeship in January 2026, rather than either restoring full ordinary licensed status or maintaining the original revocation — indicates that the litigation outcome produced an intermediate supervisory arrangement rather than a clean win for either the regulator or the licensee. This is an important precedent for assessing litigation risk and likely outcomes in any comparable future enforcement dispute between a Turkish non-bank payment institution and its prudential regulator: the realistic range of outcomes includes intermediate, trusteeship-style arrangements alongside the two more commonly anticipated poles of clean revocation or clean reinstatement. #### Outlook Whether the underlying appeal on Papara's licence status is ultimately resolved in the company's favour, in CBRT's favour, or in some further intermediate arrangement will be an important signal for the durability of this cycle's judicial-constraint precedent. Any subsequent licensing enforcement action against another Turkish payment institution will be a natural test of whether courts continue to be willing to stay CBRT enforcement decisions pending appeal. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (4)** 1. T3 [https://www.paturkey.com/news/2025/fatf-inspection-behind-turkeys-wave-of-money-laundering-raids-sources-say-25187/](https://www.paturkey.com/news/2025/fatf-inspection-behind-turkeys-wave-of-money-laundering-raids-sources-say-25187/) retrieved 2026-06-27 2. T3 [https://www.bicakhukuk.com/en/sanctions-liabilities-in-turkeys-electronic-payment-law/](https://www.bicakhukuk.com/en/sanctions-liabilities-in-turkeys-electronic-payment-law/) retrieved 2026-06-27 3. T3 [https://legalblogs.wolterskluwer.com/competition-blog/a-primer-on-payment-services-in-turkiye-competition-cooperation-and-confrontation/](https://legalblogs.wolterskluwer.com/competition-blog/a-primer-on-payment-services-in-turkiye-competition-cooperation-and-confrontation/) retrieved 2026-06-27 4. T3 [https://www.legal500.com/developments/thought-leadership/the-legal-regime-of-crypto-assets-in-turkey-and-the-role-of-regulatory-institutions/](https://www.legal500.com/developments/thought-leadership/the-legal-regime-of-crypto-assets-in-turkey-and-the-role-of-regulatory-institutions/) retrieved 2026-06-27 ### W8 Merchant Acquiring & Risk Probable confirmed 2026-06-27 Merchant acquiring is conducted by banks and CBRT-licensed payment facilitators/PIs; the Turkish Competition Board treats PFs and banks as competitors in this market while PFs depend on banks' POS access. Dispute/chargeback handling is centralised through BKM, which operates a standardised central chargeback system, and consumer-favourable rules (aligned with EU standards) place the burden of proving transaction authenticity on merchants. 3D Secure 2.2 and a deep installment (taksit) culture shape acquiring economics. iyzico (Prosus/PayU), PayTR, Param and Stripe Turkey are leading acquirers; iyzico cites buyer-protection services securing over 4 million consumer transactions. Standing sub-brief · as of 27 June 2026 138 words · last cycle 2026-06-27 #### Merchant Acquiring & Risk The acquiring module turns on an unresolved competition tension. The Turkish Competition Board treats payment facilitators and banks as competitors in the merchant-acquiring market while their POS-access relationship is also vertical, raising unresolved margin-squeeze concerns where no bank holds a dominant position. This horizontal-and-vertical relationship between payment facilitators and banks creates structural margin-squeeze risk shaping acquirer economics. Dispute and chargeback handling is centralised through BKM, with the merchant authenticity burden placed on the acquiring side. Merchant-acquiring operational economics — chargeback ratios, high-risk MCC handling and acquirer stress — are thinly evidenced beyond the competition-law framing and are an under-indexed area relative to the regulatory and structural findings. #### Outlook The acquiring module is established but assessed. The unresolved margin-squeeze question and the under-indexed operational economics are the priority areas for deeper evidencing in future cycles. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T3 [https://stripe.com/resources/more/payments-in-turkey](https://stripe.com/resources/more/payments-in-turkey) retrieved 2026-06-27 2. T3 [https://legalblogs.wolterskluwer.com/competition-blog/a-primer-on-payment-services-in-turkiye-competition-cooperation-and-confrontation/](https://legalblogs.wolterskluwer.com/competition-blog/a-primer-on-payment-services-in-turkiye-competition-cooperation-and-confrontation/) retrieved 2026-06-27 3. T3 [https://startupintros.com/orgs/iyzico](https://startupintros.com/orgs/iyzico) retrieved 2026-06-27 4. T3 [https://www.zunapro.com/turkey/en/blog/payment-systems-ecommerce-turkey](https://www.zunapro.com/turkey/en/blog/payment-systems-ecommerce-turkey) retrieved 2026-06-27 ### W9 Product Innovation & Market Development Confirmed confirmed 2026-06-27 Open banking is being built out through BKM's GATE infrastructure under CBRT authority, with Payment Initiation and Account Information Services (the ÖHVPS/DSSP framework) defined under Article 12 of Law No. 6493; certification (HHS/YÖS) deadlines were rescaled to a December 2025 ÖHVPS 2.0 transition, and the March 2025 amendment narrowed the connection obligation. Digital wallets were brought into the licensing perimeter (compliance deadline extended to 31 December 2025), with interoperable card-on-file treated as wallet/open-banking services. The CBRT runs the Digital Turkish Lira CBDC pilot, and instant-rail/QR products (FAST, TR Karekod, KOLAS) plus BNPL (Colendi, Garanti Pay) are expanding. Horizon · 2025-12 (±quarter) ÖHVPS 2.0 open-banking certification + production go-live deadline_in_force_pending · T3_ Horizon · 2025-12 (±quarter) Digital-wallet provider CBRT licensing compliance deadline_in_force_pending · T3_ Standing sub-brief · as of 27 June 2026 156 words · last cycle 2026-10-04 #### Product Innovation & Market Development Open banking is built through BKM's GATE infrastructure under CBRT authority, with payment initiation services and account information services defined under Article 12 of Law No. 6493. Institutions with a transition obligation must complete ÖHVPS 2.0 certification and go into production by 31 December 2025, while a March 2025 amendment narrowed the connection obligation. The digital-wallet compliance deadline was likewise extended to 31 December 2025. Together these deadlines bring TPPs and wallet providers fully into the CBRT perimeter, reshaping product-access economics for both banks and non-banks. This thematic product-access regulatory view sits alongside the Digital Turkish Lira CBDC pilot, whose phase-one completion is detailed under W2, as a forward driver of programmable-payment innovation. #### Outlook The product-innovation module is established and confirmed. The principal near-term event is the 31 December 2025 ÖHVPS 2.0 production go-live and digital-wallet licensing deadline, after which full participant onboarding into the CBRT open-banking perimeter can be assessed. Periodic update · new data 2026-09-29 #### Product Innovation & Market Development Two banking-as-a-service partnerships mark this cycle's product-innovation signal for Türkiye: GetirFinans's partnership with Fibabanka, and the BRSA's approval of a Migros subsidiary as a BaaS interface provider for Colendi Bank. Both extend consumer access to regulated banking products through non-bank retail and delivery-platform interfaces rather than through the licensed bank's own direct channels. This is a product-development pattern rather than a licensing-perimeter change: the bank (Fibabanka, Colendi Bank) remains the regulated entity of record, while the retail brand (GetirFinans, Migros) provides the consumer-facing surface. The commercial logic is straightforward market-access expansion via existing large consumer bases, and it is occurring in parallel with, not instead of, the conduct-tightening measures visible in the remote-onboarding and transfer-disclosure developments tracked elsewhere this cycle. #### Outlook Watch for additional BaaS interface launches following this pattern, and for whether any of the participating banks report material customer-acquisition or transaction-volume impact attributable specifically to the BaaS channel. **Sources and findings (4)** 1. T2 [https://bkm.com.tr/en/products-and-services/data-sharing-services-in-the-field-of-payment/](https://bkm.com.tr/en/products-and-services/data-sharing-services-in-the-field-of-payment/) retrieved 2026-06-27 2. T3 [https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/turkey/](https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/turkey/) retrieved 2026-06-27 3. T3 [https://architecht.com/en/corporate/blog/technology/open-banking-and-its-current-situation-in-turkiye/](https://architecht.com/en/corporate/blog/technology/open-banking-and-its-current-situation-in-turkiye/) retrieved 2026-06-27 4. T3 [https://practiceguides.chambers.com/practice-guides/blockchain-2025/turkey/trends-and-developments](https://practiceguides.chambers.com/practice-guides/blockchain-2025/turkey/trends-and-developments) retrieved 2026-06-27 ### W10 Consumer Protection & APP Fraud Probable confirmed 2026-06-27 Consumer protection rests on Türkiye's Consumer Protection Law (consumer-favourable, broadly EU-aligned) plus the CBRT payment-services conduct rules and KVKK data protection. Card-dispute/chargeback handling is centralised through BKM, with merchants bearing the authenticity burden. Türkiye has no dedicated UK-style mandatory APP-fraud reimbursement scheme; instead fraud control operates at system level — the CBRT mandates fraud controls through FAST instructions and the Security Overlay Service (SIPER) for risk-data sharing, plus a centralised Merchant Registration System and transaction monitoring. Universal 2FA and the SMS-OTP ban harden consumer authentication. Standing sub-brief · as of 27 June 2026 116 words · last cycle 2026-10-04 #### Consumer Protection & APP Fraud Türkiye has no dedicated UK-style mandatory APP-fraud reimbursement scheme. Fraud control instead operates at system level, via CBRT FAST instructions, the Security Overlay Service (SIPER) for risk-data sharing, a centralised Merchant Registration System and transaction monitoring, with BKM operating centralised chargebacks under a merchant authenticity burden, and universal 2FA and the SMS-OTP ban hardening authentication. The reliance on system-level controls rather than a reimbursement mandate shifts liability allocation away from a UK-style PSP reimbursement model. #### Outlook The consumer-protection module is established but assessed. Any move toward a mandatory reimbursement regime would materially change liability allocation; absent that, the system-level control architecture is the operative model and warrants monitoring for incremental change. Periodic update · new data 2026-09-29 #### Consumer Protection & APP Fraud MASAK's enhanced transaction-purpose disclosure regime for transfers of TRY200,000 or more, effective 1 January 2026, layers a consumer-facing conduct control directly onto ordinary bank-transfer rails. Banks must now document the origin and purpose of qualifying transfers, which functions as a friction point at the point of transaction rather than a purely back-office reporting requirement. While this rule was introduced as part of a wider enforcement campaign against illegal-gambling payment flows, a matter for the financial-integrity monitor's own domain analysis, its consumer-protection-relevant effect from a payments perspective is the additional disclosure step now required of any customer initiating a qualifying large transfer, regardless of the transfer's underlying purpose. This is a tightening development for the payments conduct environment, adding a documentation requirement at the transaction layer that did not previously exist at this threshold. #### Outlook Watch for any customer-facing friction or complaint volume reported in connection with the TRY200,000 disclosure threshold, and for whether the threshold itself is revised. **Sources and findings (4)** 1. T3 [https://stripe.com/resources/more/payments-in-turkey](https://stripe.com/resources/more/payments-in-turkey) retrieved 2026-06-27 2. T3 [https://www.lightspark.com/knowledge/instant-payments-turkey](https://www.lightspark.com/knowledge/instant-payments-turkey) retrieved 2026-06-27 3. T3 [https://www.corbado.com/blog/turkey-financial-regulations-authentication](https://www.corbado.com/blog/turkey-financial-regulations-authentication) retrieved 2026-06-27 4. T3 [https://stripe.com/resources/more/payments-in-turkey](https://stripe.com/resources/more/payments-in-turkey) retrieved 2026-06-27 ### W11 AML/CFT & Financial Crime (Sentinel.gi-fed) [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/turkey/#sec-dom-D7) Confirmed confirmed 2026-06-27 MASAK FIU; FATF grey-list exit 28 Jun 2024 (R.15 partially compliant); crypto Travel Rule fully in force; late-2025 on-site inspection over residual payments-sector gaps. Sentinel-fed. Horizon · 2025-H2 (±half_year) FATF on-site inspection of Türkiye (post-delisting verification)_consultation · T3_ Standing sub-brief · as of 27 June 2026 178 words · last cycle 2026-06-27 #### AML/CFT & Financial Crime (Sentinel.gi-fed) This module is sourced from the Sentinel.gi feed; the World Payments Monitor attributes the intelligence to Sentinel and does not re-analyse illicit finance. Per the Sentinel feed, Türkiye's FIU is MASAK; the country was grey-listed in October 2021 and removed on 28 June 2024 after completing its action plan, with one Recommendation (R.15) assessed partially compliant. CASPs are designated obliged parties, and a crypto Travel Rule (Official Gazette 25 December 2024) applies with a 15,000 TRY threshold. A late-2025 FATF on-site inspection reflects residual payments-sector supervision and enforcement gaps. The original illicit-finance analysis of these surfaces is routed to the FIM monitor via cross-monitor flags. Within the World Payments view, the FATF status and the on-site inspection are noted only as direct drivers of the payments-sector enforcement crackdown and of residual correspondent-banking de-risking pressure. #### Outlook The Sentinel-fed AML/CFT surface is stable but consequential. The outcome of the late-2025 FATF on-site inspection is the key forward signal, with potential to drive further payments-sector enforcement; refer to the FIM monitor for the underlying financial-crime analysis. no periodic updates on record for this sub-brief ** Sources and findings (10)** 1. T3 [https://www.paturkey.com/news/2025/fatf-inspection-behind-turkeys-wave-of-money-laundering-raids-sources-say-25187/](https://www.paturkey.com/news/2025/fatf-inspection-behind-turkeys-wave-of-money-laundering-raids-sources-say-25187/) retrieved 2026-06-27 2. T? FIM (sentinel.gi) per-JID baseline profile — Turkey (Türkiye) — AML/CFT regime built on Law No. 5549, MASAK as FIU with broad real-time data access, and a 2018 National Risk Assessment. Turkey exited the FATF grey list in June 2024 after enhanced follow-up since its 2019 MER; only Recommendation 15 (virtual assets) remains partially compliant. MASAK is gaining new crypto/bank account-freeze powers; CMB is building a VASP licensing regime. 3. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness 4. T1 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-002) — Sanctions: OFAC listing 5. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: enforcement-absence 6. T1 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-001) — Enforcement: OFAC — Six Turkey-based CNC machine-tool firms and linked individuals (Megasan, SSGCTM, Hidropark, AYTT, Minyon, et al.) 7. T2 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-004) — Sanctions: national divergence 8. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-004) — Enforcement: US DOJ — Türkiye Halk Bankasi AS (Halkbank) 9. T1 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-006) — Enforcement: European Union (Council) — Turkey-based third-country suppliers among 60 entities under tightened export restrictions 10. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: regulatory-failure ### W12 Correspondent Banking, Settlement & Access Probable confirmed 2026-06-27 Wholesale and correspondent-related settlement runs through the CBRT's EFT systems — interbank payments and banks' international correspondent transactions settle in the Turkish Lira Interbank Payments System (BPS), customer payments in the Customer Payments System (RPS) — with ESTS for securities, all open to banks operating in Türkiye and benchmarked against BIS-IOSCO PFMI. Cross-border card flows clear via BKM or correspondent banking. Although Türkiye was removed from the FATF grey list in June 2024, international banks that imposed enhanced due diligence during the 2021-2024 listing continue to apply elevated scrutiny, so Turkish counterparties face higher documentary requirements and residual de-risking pressure in cross-border transactions. Standing sub-brief · as of 27 June 2026 155 words · last cycle 2026-06-27 #### Correspondent Banking, Settlement & Access The analytical spine of this structural module is the bank versus non-bank access asymmetry in cross-border settlement. Interbank and banks' international correspondent transactions settle in the CBRT Turkish Lira Interbank Payments System (BPS), customer payments in the Customer Payments System (RPS), and securities in ESTS, all open to banks operating in Türkiye and benchmarked against BIS-IOSCO PFMI. These settlement systems are a bank-PSP domain; non-bank PIs and EMIs do not enjoy the same correspondent access. Despite the June 2024 FATF delisting, international and correspondent banks continue to apply elevated enhanced due diligence, leaving Turkish counterparties with higher documentary requirements and residual de-risking pressure. This sustains cross-border friction for Turkish counterparties even as the formal FATF status has improved. #### Outlook The correspondent-banking module is stable with high confidence. Residual de-risking is expected to persist despite the delisting; whether elevated EDD eases as FATF on-site verification concludes is the key forward variable. no periodic updates on record for this sub-brief ** Sources and findings (4)** 1. T1 [https://www.tcmb.gov.tr/wps/wcm/connect/EN/TCMB+EN/Main+Menu/Core+Functions/Payment+Systems/Payment+Systems+in+Turkey/Electronic+Fund+Transfer+System+and+Electronic+Securities+Transfer+System](https://www.tcmb.gov.tr/wps/wcm/connect/EN/TCMB+EN/Main+Menu/Core+Functions/Payment+Systems/Payment+Systems+in+Turkey/Electronic+Fund+Transfer+System+and+Electronic+Securities+Transfer+System) retrieved 2026-06-27 2. T3 [https://www.businessdataguide.com/blog/jurisdictions/turkey-company-search-guide](https://www.businessdataguide.com/blog/jurisdictions/turkey-company-search-guide) retrieved 2026-06-27 3. T3 [https://cashmanagement.bnpparibas.com/atlas-countries/turkey](https://cashmanagement.bnpparibas.com/atlas-countries/turkey) retrieved 2026-06-27 4. T3 [https://cepr.org/voxeu/columns/impact-de-risking-correspondent-banks-international-trade](https://cepr.org/voxeu/columns/impact-de-risking-correspondent-banks-international-trade) retrieved 2026-06-27 ### W13 Commercial Intelligence (M&A, Investment & Product) Probable confirmed 2026-06-27 Trailing-12-month commercial activity led by iyzico/Paynet $87M close, Midas $80M Series B (QED), ColendiBank launch and record ~$219.7M 2025 fintech funding. Standing sub-brief · as of 23 August 2026 225 words · last cycle 2026-10-04 #### Commercial Intelligence & Fintech Two discrete commercial events surfaced in Turkiye's fintech sector this cycle, both carrying lower-confidence sourcing. Aktif Bank's subsidiary Aktif Ventures launched Apilion, a banking-as-a-service API marketplace giving fintechs access to core banking, investment, payments and insurance infrastructure; this is a completed product release, though the amount of any associated investment was not disclosed and the finding rests on a single lower-tier source. Separately, reports describe Revolut in rumoured, deal-stage talks to acquire Turkish digital bank FUPS, with the deal rationale reported as a licensing fast-track into the Turkish payments market. This event carries "rumoured" status rather than "completed" or even "announced" status, the deal amount was not publicly disclosed, and the sourcing is a single lower-tier commercial-intelligence platform rather than a primary corporate announcement from either party. Any resulting transaction would require BDDK approval. Both events should be read as distinct from the structural bank-fintech-integration and market-access themes covered elsewhere: this module records the discrete commercial facts of the product launch and the rumoured acquisition talks themselves, not the broader structural or regulatory significance of either. #### Outlook Confirmation of the Revolut-FUPS talks progressing to a formal announcement, or their quiet lapse, will resolve the current rumoured status. Further product announcements building on or competing with the Apilion BaaS marketplace would be the natural next commercial-intelligence signal to watch in this space. Periodic update · new data 2026-09-29 #### Commercial Intelligence & Fintech Two discrete banking-as-a-service commercial events are of note this cycle: the GetirFinans/Fibabanka partnership and the BRSA's approval of a Migros subsidiary as a BaaS interface provider for Colendi Bank. Both are product-integration partnerships rather than M&A transactions; no acquisition, equity investment or funding round was evidenced for either. The amount and commercial terms of neither partnership were disclosed in the sources available this cycle, so no valuation or deal-size figure can be reported; deal terms should be treated as not publicly disclosed. These events continue a discernible trend of Turkish delivery-platform and retail brands (Getir, Migros) partnering with licensed banks to embed banking products into their existing consumer-facing applications. #### Outlook Watch for additional BaaS commercial partnerships following this pattern, and for whether commercial terms are disclosed in any future announcement from either bank or retail partner. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (5)** 1. T3 [https://www.crowdfundinsider.com/2025/02/236395-turkish-fintech-firm-iyzico-completes-87m-paynet-acquisition/](https://www.crowdfundinsider.com/2025/02/236395-turkish-fintech-firm-iyzico-completes-87m-paynet-acquisition/) retrieved 2026-06-27 2. T3 [https://www.dailysabah.com/business/tech/fintech-gaming-lead-turkiyes-startup-investments-in-2025](https://www.dailysabah.com/business/tech/fintech-gaming-lead-turkiyes-startup-investments-in-2025) retrieved 2026-06-27 3. T3 [https://assets.kpmg.com/content/dam/kpmg/tr/pdf/2025/11/Turkish%20Startup%20Investments%20Q3%202025.pdf](https://assets.kpmg.com/content/dam/kpmg/tr/pdf/2025/11/Turkish%20Startup%20Investments%20Q3%202025.pdf) retrieved 2026-06-27 4. T3 [https://fintechnews.ae/29780/turkey/turkeys-leading-fintech-startups/](https://fintechnews.ae/29780/turkey/turkeys-leading-fintech-startups/) retrieved 2026-06-27 5. T3 [https://fintechnews.ae/29780/turkey/turkeys-leading-fintech-startups/](https://fintechnews.ae/29780/turkey/turkeys-leading-fintech-startups/) retrieved 2026-06-27 ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Turkey| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 2 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 66 finding(s), 88 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).