Introduction
Loyalty programs, cashback campaigns, reward wallets, store credits, points, promotional balances, gift credits, and in-app rewards are widely used in Turkey’s digital economy. Retailers, marketplaces, fintech companies, food delivery platforms, travel apps, gaming platforms, digital wallets, banks, e-commerce businesses, telecom operators, and subscription platforms use reward systems to attract users, increase transaction volume, improve retention, and encourage repeat purchases.
At first glance, loyalty rewards may look like simple marketing tools. A customer buys a product and earns points. A platform gives cashback after payment. A marketplace issues a promotional coupon. A wallet app gives a reward balance for referrals. A merchant gives store credit after product return. These models are commercially common and often lawful when structured properly.
However, reward systems can become legally sensitive when they start functioning like money, electronic money, payment instruments, wallet balances, transferable value, stored value, or financial products. Under Turkish law, the legal issue is not the label used by the business. A company may call the value “points,” “cashback,” “bonus,” “reward,” “credit,” “wallet balance,” or “campaign gift,” but regulators, courts, consumers, banks, payment partners, and tax authorities will look at the real function of the product.
The core legal question is this: Does the loyalty or cashback system remain a closed promotional benefit, or does it become a regulated payment, electronic money, or financial service?
This article explains when loyalty programs, cashback systems, and reward wallets in Turkey may trigger payment services, electronic money, consumer protection, advertising, KVKK, MASAK, cybersecurity, tax, and contractual liability issues.
1. What Is a Loyalty Program?
A loyalty program is a commercial arrangement designed to reward customers for purchasing goods or services, using a platform, maintaining membership, making referrals, or reaching certain activity thresholds. The reward may be expressed as points, discounts, coupons, cashback, store credit, gift balance, tier status, free services, or future purchase benefits.
Common loyalty structures include:
Customer points earned after purchases.
Discount coupons for future purchases.
Cashback credited after payment.
Referral rewards.
Membership-based bonus points.
Store credit after returns.
Reward wallets inside marketplace apps.
Travel miles or hotel points.
Gaming and in-app rewards.
Subscription platform credits.
Brand-specific gift balances.
Tier benefits such as gold, platinum, or premium status.
The legal analysis depends on how these rewards work. A simple discount coupon usable only with one merchant is usually different from a transferable reward wallet accepted by many merchants. A non-cash promotional point is different from a balance redeemable for Turkish lira. A brand-specific loyalty benefit is different from a payment instrument accepted across a network.
2. Why Loyalty Programs Can Become Legally Sensitive
Loyalty programs become legally sensitive when they begin to resemble financial services. In Turkey, payment services and electronic money are regulated under Law No. 6493 on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions. The official text states that the objective of the law is to regulate payment systems, payment services, payment institutions, and electronic money institutions.
The risk arises because many modern reward programs are no longer simple discount schemes. They may involve stored balances, wallet functionality, merchant acceptance, transferability, fund flows, payment initiation, or conversion into cash-like value.
A loyalty program may require legal review if:
The reward can be used like money.
The reward can be stored in a wallet.
The reward can be transferred to other users.
The reward can be used at multiple unrelated merchants.
The reward can be redeemed for cash.
The reward is loaded after the user pays money.
The reward can be withdrawn to a bank account.
The platform holds user funds.
The reward is accepted as payment for goods or services.
The reward can be combined with payment instruments.
The reward wallet is operated by a fintech company.
The reward is issued by a payment institution or electronic money institution.
The more the reward behaves like a payment balance, the higher the regulatory risk becomes.
3. Closed-Loop Loyalty Programs
A closed-loop loyalty program is usually limited to one merchant, one brand, one group, or a narrow commercial ecosystem. For example, a coffee shop may give points that can be used only to buy coffee from that same brand. A clothing retailer may give a discount coupon usable only in its own stores. A marketplace may give a promotional coupon valid only for a specific campaign.
Closed-loop programs are generally lower risk because they are closer to marketing discounts than financial products. The customer does not usually receive general purchasing power. The points are not transferable. They are not redeemable for cash. They are not accepted by unrelated third-party merchants. They may expire under campaign terms.
However, closed-loop does not mean unregulated in every sense. Consumer protection, advertising, contract, unfair terms, tax, and KVKK rules may still apply. If the campaign says “earn 100 TL cashback,” the consumer must be able to understand where, when, and how that benefit can be used. If points expire, the expiration rule should be clearly disclosed. If personal data is used for profiling, KVKK compliance is required.
4. Open-Loop Reward Wallets
An open-loop reward wallet is much riskier. In an open-loop model, the reward value may be usable across multiple unrelated merchants, platforms, or payment channels. The customer may accumulate a balance and spend it in a broader network. The reward may function like stored value.
This may raise payment services or electronic money questions. TÖDEB explains that payment services under Law No. 6493 include payment account operations, transfers, issuance or acceptance of payment instruments, money remittance, payment initiation services, and account information services.
A reward wallet may begin to resemble a regulated financial product if:
It stores monetary value.
It is accepted by multiple merchants.
It can be used to pay for goods or services.
It can be transferred between users.
It can be funded by user payments.
It creates a balance that resembles electronic money.
It is integrated with a card, QR, wallet, or payment account.
It allows redemption or withdrawal.
It is marketed as a spending balance.
A business should not assume that calling the balance “reward points” avoids regulation. If the balance is economically used like money, legal classification becomes essential.
5. Cashback Models
Cashback is a reward model where a customer receives back part of the amount spent. Cashback may be structured in several ways:
Cashback as a discount on the same transaction.
Cashback as a coupon for future purchases.
Cashback as points usable only within one merchant.
Cashback as a wallet balance.
Cashback as electronic value accepted by third parties.
Cashback withdrawable to a bank account.
Cashback convertible into cash, e-money, or crypto assets.
The lowest-risk model is usually a direct commercial discount. For example, the merchant reduces the price by 10% or gives a non-transferable coupon for the next purchase. The higher-risk model is a balance credited into a wallet that can be spent broadly, transferred, or withdrawn.
A cashback program should answer:
Is cashback paid in money or points?
Can the user withdraw it?
Can it be transferred?
Where can it be spent?
Who issues it?
Who funds it?
Who holds the balance?
Does it expire?
Can it be used with third-party merchants?
Does it create payment functionality?
A cashback product that looks like a promotional campaign may become a regulated payment product if it creates stored value.
6. When Loyalty Points May Become Electronic Money
Electronic money analysis is one of the most important issues. Under Law No. 6493, electronic money institutions and payment institutions are part of the regulated payment services framework. The law regulates electronic money institutions together with payment services and payment institutions.
A reward or loyalty balance may raise electronic money concerns where:
Funds are received from the user or another party.
A digital monetary value is issued.
The value is stored electronically.
The value is used for payment transactions.
The value is accepted by persons other than the issuer.
The user can redeem or spend the value.
For example, if a platform allows customers to load money, receive a “reward wallet balance,” and use that balance with many merchants, this is not a simple loyalty program. It may be electronic money or payment service activity depending on the structure.
By contrast, if a retailer gives non-transferable points that can only be used for a discount on its own products, electronic money risk is lower. The difference lies in monetary value, acceptance network, redeemability, transferability, and fund flow.
7. Payment Instrument Risk
A loyalty or cashback system may also become a payment instrument. TÖDEB lists issuance or acceptance of a payment instrument among payment services under Law No. 6493.
A reward card, QR code, wallet app, barcode, virtual card, or account-linked reward balance may become a payment instrument if it allows the user to initiate payment transactions or transfer value to merchants.
Payment instrument risk may arise where:
The reward balance is linked to a card.
The user scans QR codes to spend rewards.
A wallet app is used to pay merchants.
The reward account can be used at checkout.
Merchants accept the reward as payment.
The platform settles merchants after reward use.
The provider controls the payment flow.
In such cases, the company should review whether it needs a payment institution or electronic money license, or whether it must partner with a licensed payment service provider.
8. Store Credit After Returns
Store credit is common in e-commerce and retail. After a return or cancellation, the merchant may offer store credit instead of refunding money. This can be lawful in some commercial contexts if the consumer accepts it and if mandatory consumer refund rights are not violated.
However, store credit becomes legally sensitive if it is imposed unfairly, unclear, non-refundable where a refund is legally required, or structured like a transferable wallet balance.
Consumer law is important here. Law No. 6502 includes rules on consumer contracts and unfair terms. The official English translation defines unfair terms as contractual terms not negotiated with the consumer that create an imbalance against the consumer contrary to good faith.
A store credit policy should clearly disclose:
When store credit is issued.
Whether the consumer may choose cash refund.
Where the credit can be used.
Whether it expires.
Whether it is transferable.
Whether it can be combined with campaigns.
What happens if the account is closed.
Whether legal withdrawal and refund rights are preserved.
A merchant should not use store credit to avoid mandatory refund obligations.
9. Gift Cards and Gift Balances
Gift cards and gift balances are another sensitive category. A gift card may be sold for money and later used to purchase goods or services. If the card is usable only with a single merchant, risk may be limited. If it is accepted broadly across unrelated merchants, it may resemble payment value or electronic money.
Key legal questions include:
Who sells the gift card?
Who holds the funds?
Where can the card be used?
Can the balance be redeemed for cash?
Can it be transferred?
Can it be reloaded?
Does it expire?
Is it accepted by third-party merchants?
Is it issued by a licensed payment service provider?
The broader the acceptance network and the more cash-like the balance, the stronger the need for payment law analysis.
10. Reward Wallets in Marketplaces
Marketplaces often use reward wallets to increase buyer retention. Users may receive cashback after purchases, promotional credits for referrals, compensation credits after complaints, or refund balances stored in the platform wallet.
Marketplace reward wallets are particularly risky because marketplaces usually involve many sellers. If the reward balance can be used to buy goods from many independent sellers, the platform may be facilitating payment across a merchant network.
Legal issues include:
Does the marketplace issue stored value?
Do sellers accept reward balances as payment?
Does the marketplace settle sellers using its own funds?
Is the reward funded by the marketplace, seller, or customer?
Is the balance redeemable?
Is it transferable?
Can it be used outside the marketplace?
Are user funds safeguarded?
Is a licensed payment institution involved?
Marketplace reward systems should be structured carefully. If the platform creates a wallet usable across sellers, payment services and electronic money rules may become relevant.
11. Referral Rewards
Referral rewards are popular in fintech and e-commerce. A user invites a friend and receives points, cashback, or balance after the friend makes a purchase or opens an account.
Referral programs raise legal issues in three main areas:
Payment law, if the reward becomes a wallet balance.
Advertising law, if referral marketing is misleading.
Data protection law, if users provide third-party contact data.
If referral rewards are paid as non-transferable coupons, payment law risk may be lower. If referral rewards are credited as cash-like wallet balances, the risk increases.
Referral terms should clearly explain:
Eligibility conditions.
Reward amount.
Timing of reward.
Fraud restrictions.
Expiration.
Use limitations.
Whether the reward is cash or non-cash.
Whether the reward can be withdrawn.
Whether self-referrals are prohibited.
Whether abuse may lead to account closure.
Referral programs should also avoid pyramid-like structures or misleading earnings promises.
12. Loyalty Programs and Consumer Protection
Consumer protection is central to loyalty and cashback programs. Even where the program is not a regulated financial product, it must be transparent and fair. Consumers should understand the real economic value of the reward.
Important consumer law risks include:
Misleading “cashback” wording where no cash is paid.
Hidden expiration dates.
Unclear minimum spending requirements.
Changing point value without notice.
Unfair account closure and point cancellation.
Restrictive redemption rules.
Misleading advertising about reward value.
Failure to honor earned points.
Making rewards impossible to use in practice.
Unfair terms in standard consumer contracts.
Law No. 6502 protects consumers’ economic interests and regulates unfair terms in consumer contracts. A loyalty program should therefore be drafted in clear language and should not give the company unlimited discretion to cancel, devalue, or confiscate rewards without justified reasons.
13. Advertising and Promotional Claims
Loyalty and cashback programs are often advertised aggressively. Statements such as “earn cash,” “free money,” “guaranteed cashback,” “spend anywhere,” “instant reward,” or “no conditions” may mislead consumers if conditions exist.
The Turkish Ministry of Trade states that influencer commercial advertising guidelines are based on Law No. 6502 and the Regulation on Commercial Advertising and Unfair Commercial Practices. This matters because loyalty and cashback campaigns are frequently promoted through social media, influencers, affiliate links, and referral codes.
Advertising should clearly disclose:
Reward amount.
Eligibility requirements.
Merchant limitations.
Minimum spending.
Expiration.
Withdrawal restrictions.
Use restrictions.
Campaign period.
Whether cashback is cash, coupon, point, or wallet balance.
Whether only selected products qualify.
A campaign that says “100 TL cashback” but gives only a non-withdrawable coupon usable on limited products may be challenged as misleading if the limitation is not clear.
14. KVKK and Loyalty Data
Loyalty programs are data-heavy. Businesses use loyalty data to understand customer habits, purchase frequency, location, preferences, spending levels, product interests, family patterns, travel behavior, financial capacity, and response to campaigns.
Under KVKK, personal data may only be processed in accordance with legal principles. Article 4 requires processing to be lawful and fair, accurate where necessary, for specified, explicit and legitimate purposes, relevant and proportionate, and retained only as long as necessary.
Loyalty platforms commonly process:
Identity data.
Contact data.
Purchase history.
Location data.
Device data.
Payment data.
Campaign participation data.
Referral data.
Preference profiles.
Behavioral scores.
Segment classifications.
Reward redemption history.
Data protection risks include:
Using loyalty data for unrelated marketing.
Sharing data with group companies without proper basis.
Excessive profiling.
Unclear consent mechanisms.
Cross-border transfer to foreign analytics providers.
Use of sensitive inferences.
Data breach involving purchasing habits.
Indefinite retention of transaction history.
A loyalty program should have a privacy notice, data inventory, lawful basis analysis, retention policy, vendor agreements, and data subject request process.
15. Profiling and Personalized Offers
Modern loyalty systems often use AI and analytics to personalize offers. For example, a platform may identify users likely to buy baby products, medicine, travel tickets, luxury goods, or financial services. Personalized offers can improve marketing efficiency, but they also increase KVKK and consumer protection risk.
Personalization should not become unfair manipulation. Businesses should avoid exploiting vulnerable consumers, using sensitive inferences without legal basis, or making discriminatory offers.
A lawful profiling structure should include:
Clear privacy disclosures.
Purpose limitation.
Data minimization.
Opt-out mechanisms where required.
Review of automated decision impacts.
Security controls.
Vendor due diligence.
Internal access restrictions.
Retention limits.
If a loyalty system uses financial behavior to personalize credit, wallet, insurance, or investment offers, additional sector-specific rules may apply.
16. Loyalty Programs and MASAK Risk
Ordinary loyalty programs are not necessarily AML-regulated. However, MASAK risk may arise if reward wallets, stored value, transferable balances, gift cards, or cashback systems are used to move value.
Law No. 5549 states that its objective is to determine the principles and procedures for prevention of laundering proceeds of crime. If a reward system becomes linked to payment services, electronic money, wallet balances, merchant settlement, or high-value transfers, AML/KYC obligations may become relevant depending on the provider’s legal status.
AML risk indicators may include:
Multiple accounts farming rewards.
Fake referrals.
Cashback abuse.
Reward conversion into cash.
Gift card resale.
Use of stolen cards to generate rewards.
Refund abuse.
Merchant collusion.
Transfer of rewards between accounts.
High-volume closed-loop value circulation.
Use of loyalty value to hide fraud proceeds.
A reward wallet that allows transferability and redemption should include fraud monitoring and, if operated by a regulated entity, AML controls.
17. Cashback Abuse and Fraud
Cashback programs are vulnerable to fraud. Users may create fake accounts, refer themselves, place orders and cancel them after receiving rewards, use stolen payment cards, exploit merchant refunds, or collude with merchants.
Common abuse patterns include:
Multiple accounts using the same device.
Referral loops.
Orders placed only to earn rewards.
Returns after cashback is credited.
Use of fake identities.
Stolen card transactions.
Merchant self-purchases.
Coupon stacking beyond campaign limits.
Automated bot abuse.
Gift balance resale.
A legally strong cashback program should contain anti-abuse clauses, verification rights, account suspension rules, clawback rights, and dispute procedures. However, the clauses should not be overly broad or unfair to consumers. The platform should document abuse before canceling rewards.
18. Reward Expiration and Devaluation
Expiration and devaluation are common sources of disputes. A company may want points to expire after a period or reserve the right to change conversion rates. These rules can be lawful if transparent and fair, but they create consumer protection risk if applied suddenly or retroactively.
Best practices include:
Clear expiration dates.
Advance notice before expiration.
Easy access to balance and expiry information.
No hidden conditions.
No retroactive devaluation of already-earned rewards unless legally justified.
Clear campaign-specific rules.
Grace periods where commercially appropriate.
Accessible customer support.
A clause saying “the company may cancel all points at any time without reason” is risky in consumer relationships. Standard terms should be balanced and consistent with good faith.
19. Tax and Accounting Issues
Loyalty and cashback programs may create tax and accounting issues. The legal treatment depends on the model. Points may be treated as marketing expense, discount, deferred revenue, customer liability, promotional cost, or payment-related balance depending on the structure.
Key questions include:
Is the reward a discount or separate payment?
When is the expense recognized?
Is the reward liability recorded?
How are unused points treated?
Is VAT affected by discounts?
Who funds cashback: merchant, platform, bank, or payment provider?
How are referral rewards documented?
Is withholding required for certain payments?
How are cashback payments to businesses treated?
How are reward balances reconciled?
Tax analysis should be aligned with contract structure and accounting treatment. A reward wallet that stores monetary value requires more careful accounting than a simple coupon campaign.
20. Reward Wallets and Crypto Assets
Some platforms may want to issue rewards in crypto assets or stablecoins. This creates additional legal risk. Turkey restricts the direct or indirect use of crypto assets in payments under the CBRT’s crypto payment regulation. Therefore, a crypto reward that can be used to pay merchants or settle purchases may create payment-law problems.
Crypto rewards also raise issues related to crypto asset service provider regulation, custody, tax, AML, KVKK, volatility, and consumer protection. A platform should not issue crypto rewards to Turkish users without detailed legal review, especially if the reward can be traded, withdrawn, or used for payment-like purposes.
21. Contracts and Terms of Use
Every loyalty, cashback, or reward wallet program should have clear terms. The terms should be visible before participation and written in plain language.
The terms should cover:
Program eligibility.
Reward calculation.
Reward funding source.
Qualifying transactions.
Excluded products or services.
Reward timing.
Use restrictions.
Expiration.
Transferability.
Cash redemption.
Fraud and abuse rules.
Account suspension.
Cancellation rights.
Changes to program terms.
Data processing.
Tax responsibility.
Complaint channels.
Governing law and dispute resolution.
If the reward wallet may involve payment services or e-money, the terms should also identify the licensed provider and explain fund flows, wallet balance rules, redemption, fees, and user rights.
22. When a Loyalty Program Is More Likely to Stay Outside Payment Regulation
A loyalty program is more likely to remain outside payment or e-money regulation where:
It is limited to one merchant or narrow brand group.
Rewards are promotional discounts.
Rewards cannot be redeemed for cash.
Rewards cannot be transferred.
Rewards cannot be used with unrelated merchants.
Users do not load money.
The balance is not marketed as money.
The program is not linked to a payment instrument.
The program is not used for merchant settlement.
The program has clear campaign rules.
The program is not operated by a payment or e-money institution as a wallet balance.
Even then, consumer protection, advertising, KVKK, tax, and contract rules still apply.
23. When a Loyalty Program May Become a Regulated Financial Product
A loyalty or cashback program may require payment law review where:
Rewards are stored as monetary value.
Rewards are accepted by multiple unrelated merchants.
Users can transfer rewards to others.
Rewards can be redeemed into cash.
Rewards can be withdrawn to bank accounts.
Users can load funds into the reward wallet.
The platform settles merchants after reward payments.
The reward is linked to a card, QR, wallet, or payment account.
The reward is marketed as spendable balance.
The program is integrated with payment initiation.
The provider holds customer funds.
The program is operated at scale across a merchant network.
In these cases, the company should assess whether Law No. 6493, electronic money rules, payment services rules, CBRT authorization, fund safeguarding, and MASAK obligations apply.
24. Practical Compliance Checklist
A company operating a loyalty, cashback, or reward wallet program in Turkey should consider:
Classify the reward model before launch.
Determine whether the reward is a discount, coupon, store credit, cashback, wallet balance, or monetary value.
Check whether users can redeem, transfer, or withdraw rewards.
Check whether rewards are accepted by third-party merchants.
Review Law No. 6493 payment services and e-money risk.
Work with a licensed payment or e-money institution where required.
Draft clear consumer terms.
Disclose expiration, restrictions, and campaign conditions.
Avoid misleading “cash” language where no cash is paid.
Prepare KVKK privacy notices.
Review profiling and personalized offer practices.
Review influencer and advertising compliance.
Implement fraud and abuse controls.
Document reward funding and accounting.
Review tax treatment.
Prepare complaint handling procedures.
Monitor merchant and user abuse.
Review cross-border data transfers.
Train marketing, product, finance, legal, and customer support teams.
This checklist should be adapted to each model. A supermarket point program, marketplace cashback wallet, fintech reward balance, referral campaign, gift card, gaming wallet, and bank-linked cashback product have different risks.
Why Legal Support Is Important
Loyalty programs often begin as marketing ideas but can evolve into financial products. A fintech lawyer can help determine whether a reward system is a simple promotional campaign or a regulated payment, e-money, wallet, or financial service.
Legal support may be needed for:
Payment services classification.
Electronic money analysis.
Reward wallet structuring.
Cashback campaign terms.
Gift card and stored value review.
Marketplace reward programs.
KVKK compliance.
Consumer protection review.
Advertising and influencer compliance.
MASAK and fraud risk analysis.
Tax coordination.
Merchant agreement drafting.
User terms drafting.
Complaint and dispute strategy.
Legal review should begin before launch. Once users have accumulated rewards, changing the program may create consumer disputes, accounting issues, data protection problems, and regulatory risk.
Conclusion
Loyalty programs, cashback systems, and reward wallets are powerful tools for customer retention in Turkey’s digital economy. They can be lawful and commercially effective when structured transparently. However, they may become legally sensitive when rewards begin to function like money, electronic money, payment instruments, stored value, transferable balances, or merchant payment mechanisms.
The key legal distinction is between a closed promotional benefit and a regulated financial product. A non-transferable coupon usable only with one merchant is generally different from a wallet balance accepted across many merchants and redeemable for cash. The more a reward system resembles a payment account, electronic money, or payment instrument, the more carefully it must be reviewed under Law No. 6493 and CBRT-related rules.
Even where payment regulation does not apply, loyalty and cashback programs must comply with consumer protection, advertising, KVKK, tax, contract, fraud prevention, and cybersecurity requirements. Consumers should clearly understand what they earn, where they can use it, when it expires, whether it is cash or non-cash, and what restrictions apply.
A legally strong reward program is transparent, limited by clear terms, supported by proper data protection, protected against abuse, and aligned with the actual fund flow. Companies that design loyalty systems with legal compliance from the beginning will be better positioned to avoid disputes, regulatory scrutiny, and customer mistrust.
Yanıt yok