Introduction
Buy Now Pay Later, commonly known as BNPL, is one of the fastest-growing financial technology models in digital commerce. It allows consumers to purchase goods or services immediately and pay the price later, either in installments or through a deferred payment plan. BNPL services are attractive because they offer convenience, quick approval, digital onboarding, and a smoother checkout experience compared with traditional credit products.
However, BNPL is not merely a marketing feature. From a legal perspective, it may involve consumer credit, installment sales, payment services, electronic money, merchant financing, data processing, credit scoring, advertising law, debt collection, and consumer protection. In Turkey, the most important legal issue is classification. The same BNPL label may describe very different legal structures.
As of the current regulatory landscape, Turkey does not have a single standalone statute specifically dedicated to BNPL. Legal analysis generally requires a case-by-case assessment based on who grants the payment deferral, whether interest or similar benefit is charged, whether a bank or financing company is involved, whether the BNPL provider handles funds, whether the service is integrated into a marketplace or payment system, and whether consumers are clearly informed about costs and risks. Legal commentary on Turkish BNPL regulation also emphasizes that BNPL is not regulated by a specific standalone law in Turkey and that each model must be assessed according to its structure.
This article explains how BNPL services may be legally classified in Turkey and examines the main consumer law risks, licensing issues, payment services implications, data protection duties, AML/KYC concerns, advertising rules, default risks, and liability issues for fintech companies, e-commerce platforms, merchants, banks, financing companies, and foreign BNPL providers.
1. What Is Buy Now Pay Later?
Buy Now Pay Later is a commercial and financial model that allows the customer to receive the product or service immediately while paying later. The repayment may be made in a single deferred payment or in multiple installments. In practice, BNPL can be structured in different ways.
A merchant may allow the consumer to pay the sale price in installments directly. A bank may provide a consumer loan or card-based installment facility. A financing company may pay the merchant immediately and collect installments from the consumer. A fintech platform may act as an intermediary between the consumer, merchant, and licensed financial institution. A marketplace may integrate a deferred payment option into its checkout process. A payment institution or e-money institution may provide the payment infrastructure while another licensed institution provides credit.
This diversity is why legal classification matters. The name “BNPL” does not determine the law. Turkish law will examine the actual legal and economic relationship.
Key questions include:
Who pays the merchant?
Who grants the payment deferral?
Does the consumer owe money to the merchant, bank, financing company, or fintech platform?
Is interest, commission, late fee, service fee, or similar economic benefit charged?
Is the repayment term short or long?
Is the transaction a consumer loan, installment sale, payment service, or commercial receivable structure?
Does the BNPL provider need a license?
Does the platform process personal data for credit scoring?
What happens if the consumer defaults?
Does the consumer have withdrawal or early payment rights?
These questions must be answered before launching a BNPL product in Turkey.
2. Main Legal Framework Applicable to BNPL in Turkey
BNPL may fall under several Turkish legal regimes.
The first and most important regime is consumer protection law. Law No. 6502 on Consumer Protection aims to protect consumers’ health, safety, and economic interests, compensate consumer losses, inform consumers, and regulate consumer protection mechanisms. BNPL offered to individuals for non-commercial purposes may trigger consumer law rules on installment sales, consumer loans, distance contracts, unfair terms, pre-contractual information, advertising, and dispute resolution.
The second relevant regime is consumer credit regulation. The Regulation on Consumer Credit Agreements covers consumer credit agreements, including credit card agreements that allow postponement of payment for more than three months against interest or a similar benefit or that permit payment in installments. This is highly relevant where BNPL resembles credit rather than a simple merchant discount or short-term invoice deferral.
The third regime is financial institution regulation. Banks are regulated under Banking Law No. 5411, while financing companies are regulated under Law No. 6361 on Financial Leasing, Factoring, Financing and Savings Financing Companies. Law No. 6361 regulates the incorporation and operating principles of financial leasing, factoring, financing, and savings financing companies. If the BNPL model involves a licensed bank or financing company extending credit to consumers, the applicable banking or financing company framework must be considered.
The fourth regime is payment services and electronic money regulation. Law No. 6493 regulates payment and securities settlement systems, payment services, payment institutions, and electronic money institutions. If a BNPL platform handles payment flows, operates payment accounts, initiates payments, issues electronic money, or manages digital wallets, payment services law may apply.
The fifth regime is personal data protection law. BNPL providers usually process identity data, transaction data, credit assessment data, device data, payment history, income information, and risk scores. Law No. 6698 on the Protection of Personal Data protects fundamental rights and freedoms, particularly privacy, in relation to personal data processing.
BNPL may also raise AML/KYC, cybersecurity, tax, debt collection, advertising, and e-commerce law issues depending on the product design.
3. Why Legal Classification Is the Core Issue
The central legal problem in BNPL is classification. A BNPL service may be classified as:
A seller’s installment sale
A deferred payment sale
A consumer loan
A credit card installment transaction
A financing company product
A payment service
An electronic money or digital wallet feature
A marketplace settlement structure
A merchant receivable assignment model
A hybrid fintech-credit model
Each classification has different legal consequences.
For example, if the merchant simply allows payment in installments without a third-party lender, consumer law rules on installment sales and distance sales may be central. If a financing company pays the merchant and collects from the consumer, the structure may resemble consumer credit or financing. If a payment institution only processes the payment but does not grant credit, payment services law is relevant but lending authorization may still be required by another party. If a BNPL fintech uses a wallet balance or account structure, electronic money and user fund protection issues may arise.
A BNPL company should not assume that it can avoid licensing by calling itself a “technology provider.” If the company effectively grants credit, assumes consumer repayment risk, pays the merchant upfront, collects installments from the consumer, or earns fees connected to the financing, the model requires careful legal review.
4. BNPL as a Seller-Financed Installment Sale
The simplest BNPL model is a seller-financed installment sale. In this structure, the merchant sells the product to the consumer and allows the consumer to pay later or in installments. No separate bank, financing company, or fintech lender grants credit. The consumer’s payment obligation remains primarily toward the merchant.
This model may fall within consumer protection rules on installment sales, distance contracts, price transparency, unfair terms, cancellation, return rights, and defective goods. Law No. 6502 contains provisions on consumer contracts and installment-related matters, including rules on early payment and consumer rights in certain installment structures.
Key legal risks in seller-financed BNPL include:
Failure to clearly disclose the total price
Unclear installment schedule
Hidden fees or commissions
Misleading “zero interest” claims
Unfair default penalties
Improper limitation of return rights
Confusion between product return and credit cancellation
Inadequate distance contract information
Failure to provide proper electronic contract records
Aggressive debt collection after default
If the merchant charges no interest or additional fee, the consumer law risk may be lower, but transparency obligations remain. If the merchant charges commission, service fee, late fee, or similar economic benefit, the structure may need closer review under consumer credit principles.
5. BNPL as Consumer Credit
BNPL may be classified as consumer credit when a bank, financing company, or other authorized financial institution finances the consumer’s purchase. This is common where the merchant receives payment immediately and the consumer repays the financial institution later.
The Regulation on Consumer Credit Agreements is especially relevant because it covers consumer credit agreements and certain credit card or overdraft arrangements involving postponement of payment for more than three months against interest or a similar benefit or installment payment structures.
If BNPL is consumer credit, the provider must consider:
Pre-contractual information requirements
Written or valid distance contract formation
Annual cost and fee disclosure
Interest and commission transparency
Consumer withdrawal rights
Early repayment rights
Default and acceleration rules
Insurance and ancillary product restrictions
Creditworthiness assessment
Consumer complaint mechanisms
Consumer arbitration and court jurisdiction
Advertising and fair practice rules
A BNPL model that avoids the word “loan” may still be treated as credit if the economic reality shows that the consumer receives financing. The decisive factor is substance, not terminology.
6. Banks and Financing Companies in BNPL Models
BNPL in Turkey is often implemented through banks and financing companies. Legal commentary notes that BNPL models in Turkey are commonly carried out by banks and financial companies under the relevant banking and financing company legislation.
Banks may provide credit products under the Banking Law framework, while financing companies operate under Law No. 6361. Law No. 6361 sets the legal basis for the establishment and operating principles of financing companies. A fintech startup that wants to offer BNPL without obtaining a lending license may need to partner with a licensed bank or financing company.
However, partnership does not eliminate legal risk. The contract between the merchant, fintech platform, and financial institution must clearly define:
Who grants the credit
Who performs credit assessment
Who provides consumer disclosures
Who signs the consumer credit agreement
Who pays the merchant
Who collects installments
Who handles defaults
Who deals with returns and cancellations
Who processes personal data
Who handles consumer complaints
Who bears fraud and chargeback risk
If these roles are unclear, consumers may not know whom to sue or complain against, and regulators may challenge the structure.
7. BNPL and Payment Services Law
Many BNPL products are embedded into checkout flows. The BNPL provider may process payments, settle merchant amounts, collect consumer installments, operate digital wallets, or initiate payment transactions. These functions may trigger payment services law.
Law No. 6493 regulates payment services, payment institutions, and electronic money institutions. A BNPL platform may need payment services authorization if it:
Collects payments from consumers
Transfers funds to merchants
Operates payment accounts
Initiates payments from customer accounts
Manages merchant settlement
Provides wallet-based repayment tools
Issues or accepts payment instruments
Provides account information services
Handles refunds through a payment account
A payment institution or e-money institution should be careful not to perform lending activities unless properly authorized. Payment authorization does not automatically authorize credit granting. Therefore, BNPL models often require separation between the payment function and the credit function.
A compliant structure may involve a licensed payment institution processing transactions and a licensed bank or financing company providing the credit. The contracts must clearly separate the roles.
8. BNPL, Digital Wallets, and Electronic Money
BNPL may be integrated with digital wallets. For example, a consumer may use a wallet to buy goods immediately and repay later. A platform may allow wallet balances, merchant refunds, or installment repayments through an app. This may raise electronic money issues.
Electronic money and payment services are regulated under Law No. 6493. If the BNPL platform receives funds, issues stored value, allows consumers to hold balances, or enables payments through wallet balances, e-money classification must be reviewed.
Important questions include:
Does the user load money into a wallet?
Does the BNPL provider issue a digital balance?
Can the balance be used with third-party merchants?
Can refunds be stored as wallet balance?
Can users transfer balances to others?
Can balances be redeemed to bank accounts?
Does the wallet provider hold customer funds?
Is a licensed e-money institution involved?
A BNPL platform should avoid mixing credit, wallet, and payment functions without clear regulatory structuring. Each layer may require a different license and different consumer disclosures.
9. Pre-Contractual Information and Transparency
Consumer transparency is one of the most important legal requirements in BNPL. Consumers must understand the real cost of using the service before accepting it.
A BNPL checkout screen should clearly disclose:
Total purchase price
Number of installments
Installment amounts
Payment dates
Interest, if any
Commission, service fee, or processing fee
Late payment fee
Default consequences
Early payment options
Right of withdrawal, where applicable
Return and cancellation process
Identity of the lender or financing provider
Identity of the payment service provider
Complaint channels
Data processing information
Misleading simplicity is a major BNPL risk. A checkout button saying “Pay in 3 installments” may be commercially effective, but legally insufficient if the consumer is not informed about fees, default consequences, creditor identity, and cancellation rules.
Transparency should be built into the user interface. The consumer should not need to read dozens of pages to learn the basic financial terms.
10. Distance Contracts and Digital Onboarding
BNPL services are usually concluded online. The consumer may accept terms through a mobile app, website, checkout pop-up, SMS confirmation, digital signature, or one-time password. This makes electronic contract formation and evidence critical.
Law No. 6502 includes provisions on distance contracts and financial services concluded at a distance. Consumer loan and distance financial service rules may become relevant depending on the structure.
BNPL providers should retain:
Accepted contract version
Timestamp of acceptance
IP address and device information
Consumer identity verification records
Pre-contractual information records
Payment schedule confirmation
Fee disclosure screen
OTP or authentication logs
Consumer communication records
Cancellation or withdrawal requests
If a dispute arises, the provider must prove that the consumer accepted the BNPL terms knowingly and that mandatory information was provided before contract formation.
11. Right of Withdrawal and Returns
BNPL creates practical problems when the consumer returns the purchased product or withdraws from the financial service. The product contract and financing contract may be legally separate but commercially connected.
For example, if the consumer returns a product purchased through BNPL, what happens to the installment plan? If the merchant cancels the sale, who informs the lender? If the consumer withdraws from credit, does the product sale remain valid? If only part of the order is returned, how is the payment schedule adjusted?
BNPL agreements should clearly regulate:
Product return process
Credit cancellation process
Refund timing
Partial refunds
Merchant confirmation duties
Adjustment of installment schedule
Return of fees
Early repayment after return
Consumer notification
Responsibility for delays
Poor coordination between merchant and financing provider is one of the biggest BNPL dispute risks. A consumer should not be forced to pay installments for a product properly returned under consumer law.
12. Late Payment, Default, and Debt Collection
BNPL products can create financial distress if consumers do not understand repayment obligations. Late payment rules must be clear, proportionate, and lawful.
A BNPL agreement should explain:
Payment due dates
Late payment fees
Default interest, if any
Grace periods
Acceleration conditions
Collection process
Credit reporting consequences, where applicable
Communication channels
Consumer objection rights
Dispute resolution routes
Debt collection must be conducted lawfully. Aggressive collection practices, repeated harassment, misleading threats, improper disclosure of debt to third parties, or unfair penalty clauses may create consumer law and tort liability risks.
BNPL providers should also consider responsible lending principles. Offering multiple small BNPL plans without assessing affordability may lead to over-indebtedness and reputational harm.
13. Creditworthiness Assessment and Responsible Lending
BNPL often markets itself as simpler and faster than traditional credit. However, if the model is credit-like, the provider should consider whether the consumer can reasonably repay.
Creditworthiness assessment may involve income data, repayment history, existing BNPL exposure, open banking data, credit bureau data, merchant category, transaction history, and risk scoring. This creates both consumer protection and data protection risks.
A responsible BNPL model should avoid:
Approving excessive limits without assessment
Encouraging vulnerable consumers to over-borrow
Hiding total repayment burden
Using unclear fees instead of transparent pricing
Targeting minors or financially vulnerable groups
Using aggressive checkout nudges
Failing to warn consumers about missed payments
Where AI or automated credit scoring is used, the provider should also consider explainability, accuracy, bias, and consumer objection rights under data protection principles.
14. Advertising and “Zero Interest” Claims
BNPL advertising is legally sensitive because consumers may be attracted by phrases such as “interest-free,” “instant approval,” “no cost,” “pay later,” “free installment,” or “no credit card needed.” These statements must be accurate.
If the consumer pays no interest but the merchant pays a commission that is indirectly reflected in the product price, the marketing should not mislead consumers. If there are late fees, service fees, account fees, processing fees, or insurance costs, the advertisement should not suggest that the product is completely free.
Misleading advertising may create administrative and consumer law risks. BNPL marketing should be clear, balanced, and consistent with the actual contract.
Advertising should avoid:
Guaranteed approval claims
Risk-free credit language
Hidden fee structures
Misleading “free” statements
Pressure tactics
Countdown manipulation
Failure to disclose lender identity
Claims implying state guarantee or bank deposit protection
Targeting consumers who cannot afford repayment
A BNPL provider should review all checkout screens, social media ads, influencer campaigns, website banners, and merchant-side advertisements.
15. Data Protection and KVKK Risks
BNPL providers process significant personal data. This may include identity data, contact data, shopping history, income information, payment behavior, device data, IP address, bank account data, credit risk scores, open banking data, and default history.
Law No. 6698 requires personal data to be processed lawfully, fairly, for specific purposes, proportionately, and securely. BNPL providers should prepare:
Privacy notices
Data processing inventory
Lawful basis analysis
Explicit consent mechanisms where required
Data retention policies
Cross-border transfer assessment
Data processing agreements with vendors
Customer rights procedures
Security measures
Breach response plans
BNPL data is commercially valuable, but it should not be freely reused for unrelated marketing, profiling, or data monetization without proper legal basis. A consumer’s shopping and repayment history can reveal private life, financial vulnerability, medical purchases, family needs, and debt patterns.
BNPL providers should also be careful when using third-party credit scoring vendors, fraud detection tools, open banking analytics, or foreign cloud systems.
16. AML and KYC Issues
BNPL is generally lower risk than some payment and crypto products, but it can still create AML and fraud risks, especially where high-value goods, repeated purchases, synthetic identities, stolen credentials, mule accounts, refund abuse, or merchant fraud are involved.
Law No. 5549 sets out the Turkish AML framework for preventing laundering proceeds of crime. Depending on the provider’s regulatory status, BNPL companies, financing partners, banks, payment institutions, or e-money institutions may need to apply customer identification, suspicious transaction monitoring, recordkeeping, and reporting procedures.
BNPL-specific red flags may include:
Multiple accounts using the same device
High-value purchases by newly created accounts
Rapid repeat purchases followed by default
Use of stolen identities
Refunds to different accounts
Merchant collusion
Unusual purchasing of easily resold goods
Mismatch between customer profile and transaction volume
Repeated failed identity verification attempts
Suspicious use of prepaid or wallet balances
Fraud prevention should be integrated with KYC, payment monitoring, and merchant risk management.
17. Merchant and Platform Liability
BNPL often involves at least three parties: the consumer, merchant, and BNPL provider. Sometimes a bank or financing company is also involved. This creates complex liability questions.
If the product is defective, the consumer may seek remedies from the merchant. If the payment plan is incorrect, the consumer may complain to the BNPL provider. If the credit agreement is invalid or unclear, the lender may face liability. If the merchant fails to process a return, the consumer may continue being charged installments.
BNPL contracts should define:
Merchant obligations
Product return duties
Refund communication
Settlement timing
Fraud liability
Chargeback allocation
Consumer complaint handling
Prohibited products and services
Marketing approval rules
Data sharing
KYC requirements for merchants
Termination rights
Reserve and set-off rights
A BNPL provider should not onboard merchants without due diligence. Merchant fraud can damage consumers and expose the platform to regulatory and reputational risk.
18. Foreign BNPL Platforms Serving Turkish Consumers
Foreign BNPL platforms must be cautious when entering Turkey. A foreign license does not automatically authorize BNPL services in Turkey. If the platform targets Turkish consumers, supports Turkish merchants, processes Turkish lira payments, advertises in Turkish, or integrates with Turkish payment systems, Turkish law may apply.
Foreign BNPL providers should review:
Whether local licensing is required
Whether a Turkish bank or financing company partner is needed
Whether payment services authorization is triggered
Whether consumer credit rules apply
Whether KVKK cross-border transfer rules are satisfied
Whether Turkish consumer law disclosures are required
Whether MASAK obligations apply
Whether advertising is compliant
Whether tax obligations arise
Cross-border BNPL should not be launched through translation of foreign terms alone. Turkish regulatory classification must be completed first.
19. Dispute Resolution in BNPL
BNPL disputes may arise before consumer arbitration committees, consumer courts, enforcement offices, regulators, or civil courts depending on the claim and value.
Common disputes include:
Unauthorized BNPL account opening
Failure to cancel installments after product return
Hidden fees
Incorrect payment schedule
Unfair late fees
Misleading advertising
Defective goods financed through BNPL
Data misuse
Credit rejection disputes
Default collection complaints
Refund delays
Merchant fraud
Identity theft
Evidence is critical. BNPL providers should preserve contract records, checkout screens, payment schedules, consumer approvals, KYC documents, transaction logs, merchant settlement records, return confirmations, refund records, and customer correspondence.
Consumers should preserve screenshots, order confirmations, payment schedules, return documents, complaint records, and bank statements.
20. Practical Compliance Checklist for BNPL Providers in Turkey
A BNPL provider operating in Turkey should consider the following checklist:
Classify the BNPL model before launch.
Determine whether the structure is seller-financed, lender-financed, payment-based, or wallet-based.
Assess whether consumer credit rules apply.
Assess whether bank or financing company authorization is required.
Assess whether payment services or e-money licensing is triggered.
Prepare clear consumer disclosures.
Draft BNPL terms in plain language.
Disclose total cost, fees, installments, and default consequences.
Prepare return and refund procedures.
Coordinate merchant and lender obligations.
Review advertising and “zero interest” claims.
Establish creditworthiness and responsible lending procedures.
Prepare KVKK privacy notices.
Review credit scoring and data processing tools.
Assess cross-border data transfers.
Implement fraud and AML controls.
Draft merchant agreements.
Prepare complaint handling procedures.
Maintain audit-ready records.
Monitor regulatory developments continuously.
This checklist should be adapted to the exact business model. A merchant installment product, bank-financed BNPL product, fintech checkout product, wallet-based BNPL service, and foreign BNPL platform will not have identical legal obligations.
Why Legal Support Is Important
BNPL law in Turkey requires analysis of consumer protection, consumer credit, banking, financing companies, payment services, electronic money, data protection, AML, advertising, e-commerce, and contract law. A BNPL product may look simple at checkout, but its legal structure can be complex.
A fintech lawyer can assist with:
BNPL legal classification
Consumer credit analysis
Bank and financing company partnership structures
Payment services and e-money review
Merchant agreement drafting
Consumer terms drafting
KVKK compliance
Credit scoring and AI risk review
Advertising compliance
AML and fraud risk assessment
Cross-border BNPL analysis
Consumer dispute strategy
Regulatory correspondence
Administrative sanction defense
Legal support should begin before launch. Once consumers have already entered payment plans, restructuring a non-compliant BNPL model may require contract revisions, customer notifications, merchant renegotiation, and regulatory remediation.
Conclusion
Buy Now Pay Later services create significant opportunities in Turkey’s fintech and e-commerce markets. They can improve checkout conversion, expand consumer access to goods and services, and provide merchants with flexible payment tools. However, BNPL also creates serious legal risks because it sits at the intersection of consumer credit, installment sales, payment services, electronic money, data protection, advertising, debt collection, and consumer protection.
Turkey does not currently regulate BNPL through one single standalone BNPL statute. Instead, each model must be classified according to its actual structure. If the merchant grants payment deferral, installment sale rules may be central. If a bank or financing company provides credit, consumer credit and financial institution rules apply. If the fintech platform handles payments or wallet balances, Law No. 6493 may become relevant. If consumer data is used for scoring, KVKK compliance is essential.
The most important legal principle is transparency. Consumers must know who provides the financing, what the total cost is, when payments are due, what happens after return or cancellation, what fees apply, how data is used, and what consequences arise after default.
For BNPL providers, compliance is not only a regulatory obligation. It is also a trust-building strategy. Companies that design clear contracts, lawful credit structures, responsible lending procedures, secure data processing, fair advertising, and effective complaint mechanisms will be better positioned to grow sustainably in Turkey’s digital finance market.
Yanıt yok