# Digital asset regulation and tokenization in Turkey

> **Is crypto legal in Turkey?** Yes, in a mixed or conditional environment: there is no proven severe barrier, but businesses face specific uncertainties. Law 6362 and Communiqués III-35/B.1 and III-35/B.2 govern the authorization of platforms and custodians. In the Metlabs Regulatory Index it scores 61/100 and ranks 59 of 76 countries assessed (assessed October 16, 2026).

- **Author:** Javier Yáñez López, Legal & Regulatory at Metlabs
- **Last reviewed:** 2026-10-16
- **Latest regulatory change:** 2026-09-03
- **Metlabs Regulatory Index:** 61/100, rank 59 of 76 countries assessed
- **Web version:** https://metlabs.io/en/blockchain-regulation/turkey/

Turkey subjects crypto-asset platforms and custody to SPK supervision, with corporate, operational and technological requirements. Inclusion in the operating-provider list does not establish final authorization; certain transitional obligations were deferred in March 2026. Tokenized securities require a separate assessment: the SPK does not allow crypto-assets based on capital market instruments to be issued or listed until it regulates such issuance. The prohibition on using crypto-assets for payments remain relevant to the business model.

A business providing crypto-asset services in Türkiye must check its precise activity and provider status with the SPK. Inclusion on the operating entities list does not amount to a final license, and company establishment is separate from permission to begin operations.

If issuing a tokenized asset, the project must also define its rights and the rules governing the represented instrument or asset. Design needs to incorporate payment restrictions, custody conditions and MASAK controls from the start rather than assume that a technically possible transfer is legally permitted.

## Activities covered by the Act and SPK communiqués

Law 7518, adopted on 26 June 2024 and in force since its publication on 2 July 2024, brought crypto-asset services within Capital Markets Law 6362. The [SPK describes the scope](https://www.spk.gov.tr/duyurular/basin-duyurulari/2024/kripto-varlik-hizmet-saglayicilara-iliskin-duyuru_02072024): professional trading, exchange, transfer and custody, including key management. The rules distinguish platforms, custodians and ancillary services; there is no general authorization covering every use of blockchain.

Communiqués [III-35/B.1](https://cmb.gov.tr/data/6281521a1b41c617eced0ee8/Communiqu%C3%A9%20III-35.B.1%20Regarding%20Principles%20on%20the%20Establishment%20and%20Operation%20of%20Crypto%20Asset%20Service%20Providers.pdf) and [III-35/B.2](https://cmb.gov.tr/data/6281521a1b41c617eced0ee8/Communiqu%C3%A9%20III-35%20B.2%20Regarding%20Operating%20Procedures%20and%20Principles%20and%20Capital%20Adequacy%20of%20Crypto%20Asset%20Service%20Providers.pdf), published on 13 March 2025, develop establishment, operations and solvency requirements. Exclusions for certain NFTs, gaming assets or own-wallet use require a functional assessment. A token's label alone cannot exclude a financial offering or an activity undertaken for customers.

## Authority roles and what the public list establishes

The Capital Markets Board, SPK, authorizes and supervises services within its regime. MASAK performs anti-money laundering and counter-terrorist financing functions. The Central Bank, CBRT, regulates payments; bank custodians also need banking supervisor BDDK approval. TÜBİTAK contributes technical criteria without replacing financial authorization.

The [operating-provider list](https://spk.gov.tr/kurumlar/kripto-varlik-hizmet-saglayicilar/faaliyette-bulunanlar-listesi) expressly states that inclusion does not mean authorization. It also contains individual restrictions: an entity may continue certain services while being restricted from onboarding customers. Selecting a provider requires checking its specific status, permitted services and subsequent decisions, rather than treating the list as an approval mark.

## Distinguishing establishment, operations and transition

Communiqué III-35/B.1 requires, with particular provisions for banks, a joint-stock company, registered shares, paid-up capital and transparent ownership. For 2026, the [SPK updated the minimum capital](https://spk.gov.tr/data/695546ca8f95db281807a9c3/2025-68.pdf) to 250 million Turkish lira for platforms and 630 million for custodians. Establishment approval and operating permission are separate stages: after establishment approval, the operating-permission application must be filed within six months, extendable up to one year. Article 17 links ordinary commencement to the relevant certificate; the application must demonstrate organization, staff, infrastructure and compliance with activity-specific conditions.

For providers in transition, [Decision 18/617 of 26 March 2026](https://spk.gov.tr/data/69c595a68f95db1e4440bc26/2026-18.pdf) defers setting deadlines for custody agreements and certificates until authorized custodians widely provide those services. June 2026 should therefore no longer be treated as a universal deadline. In its [bulletin of 4 June 2026](https://spk.gov.tr/data/6a21eb938f95db12a4589b32/2026-34.pdf), the SPK approved crypto-asset custody operating permissions for Akbank, Türkiye Garanti Bankası and Yapı ve Kredi Bankası; no new deadlines appear in the bulletins published up to 7 October 2026. Continuation depends on transitional rules and entity-specific decisions.

Article 9 of Communiqué III-35/B.2 distinguishes a resident's exclusive initiative from solicitation targeting Turkey. A Turkish-language website, local presence or promotion through intermediaries can trigger domestic requirements. [Article 99/A of Law 6362](https://www.resmigazete.gov.tr/eskiler/2024/07/20240702-1.htm) treats activity directed at Turkish residents by foreign platforms as unauthorized, Article 109/A punishes it with three to five years' imprisonment and a judicial fine, and the SPK orders the blocking of the websites concerned. A foreign license or a platform's international accessibility does not replace this territorial assessment.

## What a platform must check before distributing tokens

[Article 16 of Communiqué III-35/B.2](https://cmb.gov.tr/data/6281521a1b41c617eced0ee8/Communiqu%C3%A9%20III-35%20B.2%20Regarding%20Operating%20Procedures%20and%20Principles%20and%20Capital%20Adequacy%20of%20Crypto%20Asset%20Service%20Providers.pdf) addresses assets represented through distributed ledgers and refers to capital-market legislation where applicable. Documentation and smart contracts must reflect the issuance rights and conditions. A platform's authorization does not, by itself, permit every offering of shares, debt or investment interests. In addition, under the [principle decision published in SPK bulletin 2024/48](https://spk.gov.tr/data/66ec7a468f95db223cb0e1a1/2024-48.pdf), until the SPK regulates the issuance of capital market instruments as crypto-assets under Article 13 of Law 6362, crypto-assets based on those instruments, indices, asset baskets or precious metals may not be issued or listed on platforms. No such regulation appears in the official sources consulted up to 16 October 2026.

The structure must identify the obligor, represented right, transfer arrangements and underlying-asset formalities. Recording a token in a wallet does not automatically establish real-estate or company ownership. [SPK requires customer funds and assets to be separated](https://spk.gov.tr/data/66ec7a468f95db223cb0e1a1/2024-48.pdf); this operational separation does not guarantee the validity or value of the claim against the issuer.

## Payment restrictions and MASAK obligations

The [CBRT payment regulation](https://www.tcmb.gov.tr/wps/wcm/connect/c241af16-e730-45b5-bb0d-31d3af28884e/Regulation%2Bon%2Bthe%2BDisuse%2Bof%2BCrypto%2BAssets%2Bin%2BPayments.pdf?CACHE=NONE&CONTENTCACHE=NONE&MOD=AJPERES), applicable from 30 April 2021, prohibits the direct or indirect use in payments of crypto-assets within its definition. It also imposes specific restrictions on payment and electronic-money providers. This should not be interpreted as an identical ban on every bank transfer or tokenized financial instrument.

Operational rules prohibit certain leveraged transactions, derivatives, credit and short sales. The [MASAK guide updated in September 2025](https://masak.hmb.gov.tr/duyuru/kripto-varlik-hizmet-saglayicilar-rehberi-guncellendi-ve-yayimlandi) addresses identification, transfer information, timing and amount restrictions, politically exposed persons and suspicious-transaction reporting. The travel rule requires verified originator data for transfers of 15,000 Turkish lira or more. [MASAK General Communiqué No. 29](https://www.resmigazete.gov.tr/eskiler/2025/06/20250628-4.htm), in force since 28 June 2025, requires platforms to wait at least 48 hours after a purchase, exchange or deposit before executing withdrawals to wallets not registered with a provider or to foreign providers without that information-sharing obligation (72 hours for the first withdrawal), and caps stablecoin withdrawals at USD 3,000 per day and USD 50,000 per month.

Since 3 September 2026, [Communiqué III-42.1.b](https://www.resmigazete.gov.tr/eskiler/2026/09/20260903-3.htm) allows remote identification of foreign individuals by electronic passport, with fund movements limited to the customer's own bank account abroad. These controls must inform product design; technical ability to transfer a token does not determine legal admissibility.

## What to verify before operating or issuing in Türkiye

Before contracting or applying, check the provider’s certificate, services and individual restrictions. Transitional operators need to assess the March 2026 decision and subsequent decisions on custody contracts and deadlines, without treating an old date as a universal expiry.

Issuance requires reviewing asset conditions, smart contract contents and distribution rules. Commercial planning must address solicitation directed at Turkish residents and payment and trading restrictions, with identification and transfer procedures suited to the actual activity.

## Key takeaways

- The provisional list is not a register of final licenses.
- The March 2026 deferral concerns specific transitional obligations.
- Soliciting customers from abroad can trigger Turkish requirements.
- Service authorization neither removes payment restrictions nor establishes ownership of a tokenized asset.

## Regulatory milestones

- **2021-04-30** — Payment restrictions apply. The CBRT regulation on the use of crypto-assets in payments, published on 16 April 2021, enters into force. (source: [CBRT · Payments regulation](https://www.tcmb.gov.tr/wps/wcm/connect/c241af16-e730-45b5-bb0d-31d3af28884e/Regulation%2Bon%2Bthe%2BDisuse%2Bof%2BCrypto%2BAssets%2Bin%2BPayments.pdf?CACHE=NONE&CONTENTCACHE=NONE&MOD=AJPERES))
- **2024-07-02** — Law 7518 takes effect. Law 7518, adopted on 26 June 2024, is published in Official Gazette No. 32590 and enters into force, incorporating the service-provider regime into Law 6362. (source: [SPK · 2 July 2024 announcement on Law 7518](https://www.spk.gov.tr/duyurular/basin-duyurulari/2024/kripto-varlik-hizmet-saglayicilara-iliskin-duyuru_02072024))
- **2025-03-13** — SPK implementing rules. Communiqués III-35/B.1 and III-35/B.2 are published. (source: [SPK · Communiqué III-35/B.1](https://cmb.gov.tr/data/6281521a1b41c617eced0ee8/Communiqu%C3%A9%20III-35.B.1%20Regarding%20Principles%20on%20the%20Establishment%20and%20Operation%20of%20Crypto%20Asset%20Service%20Providers.pdf), [SPK · Communiqué III-35/B.2](https://cmb.gov.tr/data/6281521a1b41c617eced0ee8/Communiqu%C3%A9%20III-35%20B.2%20Regarding%20Operating%20Procedures%20and%20Principles%20and%20Capital%20Adequacy%20of%20Crypto%20Asset%20Service%20Providers.pdf))
- **2025-06-28** — MASAK withdrawal limits. MASAK General Communiqué No. 29 sets 48- and 72-hour waiting periods and limits on stablecoin withdrawals. (source: [Resmî Gazete · MASAK General Communiqué No. 29](https://www.resmigazete.gov.tr/eskiler/2025/06/20250628-4.htm))
- **2026-03-26** — Transitional obligations deferred. Decision 18/617 links new deadlines to widespread provision of authorized custody. (source: [SPK · Decision 18/617](https://spk.gov.tr/data/69c595a68f95db1e4440bc26/2026-18.pdf))
- **2026-06-04** — First authorized custodians. The SPK approves crypto-asset custody operating permissions for three banks. (source: [SPK · Bulletin 2026/34](https://spk.gov.tr/data/6a21eb938f95db12a4589b32/2026-34.pdf))
- **2026-09-03** — Remote identification of foreign nationals. Communiqué III-42.1.b allows providers to identify foreign individuals remotely using an electronic passport. (source: [Resmî Gazete · Communiqué III-42.1.b](https://www.resmigazete.gov.tr/eskiler/2026/09/20260903-3.htm))

## Frequently asked questions

### Does inclusion in the SPK list mean a provider is licensed?

No. SPK distinguishes the operating-provider list from final authorization. The certificate, services and any individual restrictions must be checked.

### Is June 2026 still the general authorization deadline?

Decision 18/617 deferred setting certain transitional deadlines according to the availability of authorized custody services. June should not be treated as a universal expiry date. In June 2026 the SPK granted custody operating permissions to three banks, but no new general deadline is on record.

### Can a Turkish-language website bring a foreign provider within the national regime?

Article 9 of Communiqué III-35/B.2 includes a Turkish-language website among activities directed at residents. Local presence and marketing also matter; exclusive client initiative is conditional. SPK · Communiqué III-35/B.2.

### Does a platform license permit leveraged crypto-asset trading?

Article 14 of Communiqué III-35/B.2 prohibits the specified leveraged, derivative, margin and short-selling operations involving listed assets. Permission does not remove those restrictions. SPK · Communiqué III-35/B.2.

### Does the payment prohibition automatically cover every tokenized security?

Apply the CBRT Regulation’s definition, which excludes securities and other capital market instruments from its crypto-asset concept. That does not exempt those instruments from their own rules. CBRT · Payments regulation.

## How to cite this guide

Yáñez López, J. (2026, October 16). Digital asset regulation and tokenization in Turkey. Metlabs. https://metlabs.io/en/blockchain-regulation/turkey/