On-shore VASP in Turkey
Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.
On-shore VASP is conditionally permitted in Turkey with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- MASAK classifies CASPs as 'obliged entities' under AML/CFT regulations — must implement strict KYC protocols.
- Travel Rule adopted with threshold of TRY 75,000 (per MASAK communiqué amendments, Dec 25, 2024).
- Ongoing AML compliance enforced by MASAK under the Regulation on Measures Regarding Prevention of Laundering Proceeds of Crime and Terrorism Financing.
- December 2024 AML legislation amendments further enhance CASP AML/KYC requirements.
- Transaction monitoring, suspicious transaction reporting (STR) obligations to MASAK.
- Customer due diligence (CDD) required for all customers at onboarding and ongoing.
Key Restrictions
- Crypto PAYMENTS are banned outright — CBRT regulation (April 16, 2021) prohibits using crypto for goods/services payments; this ban remains in effect despite the 2024 licensing framework.
- At least 95% of customer crypto assets must be held in cold wallets managed by authorized custodians; max ~5% in hot wallets.
- Custody must be provided only by authorized banks or authorized institutions; private key management must use TÜBİTAK-compliant secure hardware modules.
- Integration with MKK (Turkish Central Securities Depository) required for reconciliation and reporting.
- Must establish a Turkish entity with Turkish-resident board members.
- TRY 50M (~$1.5M) minimum paid-up capital for CASP license; TRY 500M (~$13.7M) for custodians.
- Platform must register in the CMB's institutional ledger (kurum kaydı) system; existing operators must comply by June 30, 2025.
- Crypto lending prohibited (CMB Resolution, Sept 19, 2024).
- Foreign CASPs face additional restrictions on providing custody services.
Key Risks
- Criminal penalties for unlicensed operation under the Crypto Assets Law (2024) — significant enforcement exposure.
- Thodex precedent (2021, ~$2B fraud, CEO fled) has driven aggressive regulatory posture and public scrutiny.
- Crypto payments ban creates a paradoxical environment: high adoption and trading volumes but no utility as payment medium.
- Tax framework still under development — regulatory ambiguity on tax treatment.
- CMB active in blocking unlicensed platforms (e.g., PancakeSwap blocked in 2024) — demonstrates willingness to enforce.
- High crypto adoption rate in Turkey (one of world's highest) attracts both retail volume and enforcement attention.
- Transitional compliance deadline of June 30, 2025, for existing operators creates near-term urgency.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
VASP: Crypto Asset Service Provider License from SPK under Crypto Assets Law (2024). TRY 50M (~$1.5M USD) minimum paid-up capital. Must establish Turkish entity with Turkish-resident board members. 6-12 months. One of world's highest crypto adoption rates.
EXCHANGE: CASP license — TRY 50M minimum. Crypto PAYMENTS banned (CBRT regulation, April 2021) — ban remains despite licensing framework. Criminal penalties for unlicensed operation.
Crypto Assets Law (2024) — CASP licensing, investor protection, criminal penalties for unlicensed operation. Came after Thodex fraud (2021, CEO fled with ~$2B).
Capital Markets Board (CMB): The primary regulatory authority responsible for establishing regulatory measures, making decisions, and implementing sanctions related to crypto assets. The CMB grants operating licenses to crypto asset service providers (CASPs).
Financial Crimes Investigation Board (MASAK): Enforces anti-money laundering (AML) regulations concerning cryptocurrencies and classifies CASPs as "obliged entities" subject to strict AML and Know-Your-Customer (KYC) protocols.
Central Bank Regulation on Prohibition of Payments with Crypto Assets: Published in Official Gazette No. 31456 on April 16, 2021; bans crypto use for goods/services. https://www.resmigazete.gov.tr/eskiler/2021/04/20210416-3.htm
Law on Amendments to the Capital Markets Law: Entered into force July 2, 2024; mandates CMB licensing for CASPs, defines operations, and sets transitional rules. https://www.resmigazete.gov.tr/eskiler/2024/07/20240702-1.htm
CMB Communiqués and Resolutions (Secondary Legislation, post-July 2024): Cover establishment, capital adequacy, custody, risk management, and conduct; enforce 2024 licensing powers (e.g., DEX blocks).
MASAK enforces AML for CASPs, including custody.
CMB Resolutions/Communiqués: Govern licensing, capital (TRY 500M/~$13.7M for custodians), prohibitions (e.g., Sept 19, 2024).
AML Legislation Amendments: December 2024 updates enhance CASP requirements.
Minimum capital for custodians: TRY 500 million (~$13.7 million).
Platforms must register in the CMB's “kurum kaydı” (institutional ledger) system and comply by June 30, 2025, for existing operators.
Only authorized banks or institutions may provide custody; foreign CASPs face restrictions.
CMB Resolution dated September 19, 2024, further details prohibitions like lending.
At least 95% in cold wallets managed by authorized custodians (max ~5% in hot wallets for operations).
Use TÜBİTAK-compliant secure hardware modules for private keys.
Integration with MKK (Turkish Central Securities Depository) for reconciliation and reporting.
Travel Rule adopted — threshold: TRY 75,000
Official Gazette amendments (Dec 25, 2024): https://www.resmigazete.gov.tr/ (search MASAK communiqués)
MASAK Regulation on Measures: https://www.masak.gov.tr/en/mevzuat/regulation-on-measures-regarding-prevention-of-laundering-proceeds-of-crime-and-terrorism-financing
Regulator/Prosecutor: Turkish prosecutors
Regulator: Turkish authorities (likely law enforcement)
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — an on-shore VASP may operate in Turkey only after obtaining a CASP license from the CMB (TRY 50M minimum capital, 6-12 month process), establishing a Turkish entity with Turkish-resident directors, complying with MASAK AML obligations including Travel Rule (TRY 75K threshold), meeting strict custody requirements (95% cold storage via authorized custodians, TÜBİTAK-compliant HSM), and integrating with MKK, while facing an absolute ban on crypto payments for goods/services.
Questions this verdict aims to answer
- What license(s) are required to operate locally?
- What capital, governance, and reporting obligations apply?
- What is the application process and timeline?