Introduction to Turkish Banking & Finance Law
Turkish Banking & Finance Law is one of the most strategically important areas of Turkish commercial law. Turkey has a large, dynamic and highly regulated financial system that connects domestic banking, international trade, project finance, capital markets, fintech, payment services, digital banking, participation banking, foreign exchange transactions and financial consumer protection. For foreign investors, multinational companies, fintech entrepreneurs, lenders, borrowers and financial institutions, understanding the Turkish banking and finance regulatory framework is essential before entering into any financial transaction in Turkey.
The core statute governing banks in Turkey is Banking Law No. 5411, which was adopted on 19 October 2005 and published in the Official Gazette on 1 November 2005. The purpose of this law is to ensure confidence and stability in financial markets, support the efficient functioning of the credit system and protect the rights and interests of depositors. The law applies to deposit banks, participation banks, development and investment banks, foreign bank branches operating in Turkey, financial holding companies, the Banking Regulation and Supervision Agency, the Savings Deposit Insurance Fund and relevant banking sector associations.
Turkish Banking & Finance Law is not limited to traditional banking. It also covers payment institutions, electronic money institutions, digital banks, banking-as-a-service models, leasing companies, factoring companies, financing companies, capital market transactions, asset-backed structures, anti-money laundering obligations, financial consumer rules and cross-border financing arrangements. This broad structure makes Turkish finance law a multidisciplinary field combining regulatory law, contract law, corporate law, administrative law, criminal compliance, data protection and dispute resolution.
For businesses operating in Turkey, banking and finance law is not merely a technical compliance issue. It directly affects how loans are structured, how collateral is created, how payments are processed, how foreign exchange obligations are performed, how financial products are marketed, how fintech platforms are licensed and how disputes with banks or financial institutions are resolved.
Main Regulatory Authorities in Turkish Banking and Finance Law
The Turkish financial system is supervised by several public authorities, each with a different function.
The Banking Regulation and Supervision Agency, commonly known as the BRSA or BDDK, is the primary authority responsible for banking regulation and supervision in Turkey. It grants banking permissions, supervises banks, regulates prudential standards, monitors ownership structures, imposes administrative sanctions and oversees risk management, internal control and corporate governance rules. The BRSA also follows international standards and participates in international supervisory work, including Basel Committee-related studies and financial stability initiatives.
The Central Bank of the Republic of Türkiye, known as the CBRT or TCMB, plays a major role in monetary policy, payment systems, payment services, financial infrastructure and certain foreign exchange-related matters. The CBRT’s legal framework includes Law No. 6493 on payment and securities settlement systems, payment services and electronic money institutions, as well as secondary regulations on payment systems, QR code payments, information systems, IBAN rules and the disuse of crypto assets in payments.
The Capital Markets Board of Turkey, known as the CMB or SPK, regulates capital markets, investment services, securities offerings, publicly held companies, intermediary institutions, portfolio management companies, crowdfunding and crypto-asset service providers within the scope of the Capital Markets Law. The Capital Markets Law was amended by Law No. 7518 in 2024 to include crypto-asset definitions and related regulatory authority.
The Financial Crimes Investigation Board, known as MASAK, is the key authority for anti-money laundering and counter-terrorist financing obligations. Financial institutions, payment companies, crypto-asset service providers and several other obliged parties must comply with customer due diligence, suspicious transaction reporting, recordkeeping and compliance program requirements under Turkish AML legislation. Law No. 5549 sets the general legal framework for the prevention of laundering proceeds of crime.
Banking Activities Under Turkish Law
Banking Law No. 5411 provides a broad list of activities that banks may conduct in Turkey. These include accepting deposits, accepting participation funds, granting cash and non-cash loans, payment and collection transactions, fund transfers, correspondent banking, cheque account services, commercial bill transactions, safekeeping services, issuing payment instruments such as credit cards and bank cards, foreign exchange transactions, trading money market instruments, precious metal transactions, derivative transactions, capital market instrument trading, guarantee transactions, investment advisory services, portfolio management, factoring, forfeiting, interbank market transactions, financial leasing, insurance agency services and other activities permitted by the BRSA.
This wide definition demonstrates that Turkish banking law does not treat banks merely as deposit-taking entities. Banks are central actors in the entire financial ecosystem. They provide credit, guarantee commercial risk, facilitate international payments, issue financial instruments, provide investment-related services and operate as intermediaries between the real economy and financial markets.
However, Turkish law also distinguishes between different types of banks. Deposit banks may accept deposits and grant loans. Participation banks operate according to interest-free finance principles and accept participation funds rather than conventional deposits. Development and investment banks generally do not accept deposits or participation funds but may provide financing and investment-related services. These distinctions are important when choosing the appropriate license, structuring a financial product or determining which institution may lawfully provide a specific service.
Establishing a Bank in Turkey
Establishing a bank in Turkey requires permission from the BRSA. Banking Law No. 5411 provides that the establishment of a bank in Turkey, or the opening of the first Turkish branch of a foreign bank, requires permission from the Banking Regulation and Supervision Board. The law also requires that a bank to be established in Turkey must be incorporated as a joint stock company, have registered shares issued for cash, possess a transparent ownership structure, have qualified founders and managers, and submit business plans, capital adequacy projections, budget plans and internal control, risk management and internal audit programs.
The Turkish banking license process is therefore not a simple company incorporation procedure. It is a highly detailed regulatory approval process involving fit-and-proper assessments, source-of-funds analysis, capital adequacy review, corporate governance evaluation, ownership transparency, internal systems evaluation and financial projections.
Foreign banks may also operate in Turkey through branches or representative offices, subject to BRSA permission. A representative office cannot accept deposits or participation funds and is generally limited to liaison, research and promotional activities. A branch, by contrast, may engage in banking activities within the scope of its license.
For foreign investors, the key practical issue is that Turkish banking regulation focuses heavily on ownership transparency, ultimate beneficial ownership, financial strength, reputation, risk management capacity and supervision compatibility. A structure that is commercially attractive but opaque from a regulatory perspective may face serious approval difficulties.
Capital Adequacy, Liquidity and Prudential Supervision
Capital adequacy is a cornerstone of Turkish banking regulation. Under Banking Law No. 5411, banks must calculate, achieve, maintain and report a capital adequacy ratio that cannot be less than eight percent, within the framework of BRSA regulations. The BRSA may increase the minimum ratio or set different ratios for individual banks by considering their internal systems, asset structure and financial condition. Banks must also calculate, maintain and report minimum liquidity levels in accordance with BRSA rules issued with the approval of the Central Bank.
These prudential rules are particularly important for financial stability. Banking is based on confidence. If banks do not maintain sufficient own funds, liquidity buffers and risk controls, even temporary market volatility may create systemic concerns. Turkish law therefore gives the BRSA significant authority to intervene before problems become irreversible.
Prudential supervision also affects bank lending. The Turkish Banking Law defines “loans” broadly. Cash loans, non-cash loans, letters of guarantee, counter-guarantees, suretyships, avals, endorsements, acceptance loans, purchased bonds, funds lent through deposits, receivables arising from installment sales, overdue loans, accrued but unpaid interest, reverse repo receivables, derivative risks and other transactions recognized by the BRSA may be treated as loans. Participation bank financing structures and certain development and investment bank financings are also treated as credit facilities for banking law purposes.
This broad definition is crucial in practice. A transaction may be economically equivalent to credit even if it is not called a “loan” in the contract. Therefore, Turkish banking law requires legal and regulatory analysis of the real economic substance of financial transactions.
Loan Agreements and Finance Transactions in Turkey
Loan agreements in Turkey are generally governed by the Turkish Code of Obligations, Turkish Commercial Code, Banking Law, consumer protection legislation, foreign exchange legislation, collateral law and sector-specific regulations. Commercial loans, project finance loans, syndicated loans, shareholder loans, acquisition finance facilities and working capital loans may all raise different legal issues.
A properly drafted Turkish loan agreement should address the loan amount, purpose, maturity, repayment schedule, interest or profit share mechanism, default interest, representations and warranties, covenants, information undertakings, financial ratios, events of default, acceleration rights, tax gross-up, withholding tax risks, governing law, dispute resolution and collateral enforcement.
Collateral is one of the most important parts of finance law in Turkey. Common security instruments include mortgages over immovable property, pledges over movable assets, share pledges, bank account pledges, receivables assignments, commercial enterprise pledges, guarantees, suretyships, letters of guarantee and promissory notes. In cross-border finance transactions, Turkish counsel should carefully review whether the security is validly created, perfected, enforceable and compatible with mandatory Turkish law.
Foreign currency loans, foreign exchange-indexed obligations and cross-border payments require additional attention due to Turkey’s foreign exchange rules and Central Bank regulations. Parties must verify whether the borrower is eligible to use a foreign currency loan, whether the transaction must be reported, whether a Turkish bank must intermediate the transfer and whether repayment obligations comply with applicable foreign exchange legislation.
Banking Confidentiality and Customer Data
Banking confidentiality is a fundamental principle under Turkish law. Banking Law No. 5411 contains confidentiality provisions applicable to BRSA personnel, Savings Deposit Insurance Fund personnel, outsourcing institutions and others who obtain confidential information through banking-related duties. Confidential information concerning banks, subsidiaries, affiliates and customers may not be disclosed except where permitted by law. This obligation continues even after the relevant person leaves office.
In practice, banking confidentiality intersects with personal data protection law, anti-money laundering obligations, tax reporting duties, court orders, criminal investigations, administrative audits and cross-border data transfers. Banks must balance confidentiality with mandatory reporting obligations. For example, a bank may be required to report suspicious transactions to MASAK, provide information to courts or prosecutors, respond to regulatory authorities or comply with tax information requests.
Financial institutions operating digital channels must also comply with information security, cyber resilience and data governance requirements. The rise of digital banking, mobile banking, open banking and API-based financial services has made banking data a key legal and commercial asset. Any fintech or financial institution entering the Turkish market should treat data compliance as a core regulatory requirement rather than a secondary IT issue.
Digital Banking and Banking-as-a-Service in Turkey
Turkey has introduced a specific regulatory framework for digital banks and banking-as-a-service models. The Regulation on the Operating Principles of Digital Banks and Banking as a Service Model was published in the Official Gazette on 29 December 2021. Its purpose is to determine the procedures and principles for branchless banks that provide services only through electronic banking channels and for the provision of banking services as a service model to fintech companies and other businesses.
This regulation is particularly important for fintech companies, embedded finance projects, platform businesses and technology companies that want to integrate financial services into their customer experience. A digital bank is a credit institution that provides banking services through electronic banking distribution channels instead of physical branches. Banking-as-a-service allows an interface provider to enable customers to perform banking transactions by accessing services offered by a service bank through open banking services.
However, this does not mean that every technology company can freely offer banking services. Turkish law draws a clear line between licensed banking activities and technology interface services. If a fintech company holds itself out as a bank, accepts deposits, grants loans or provides regulated payment services without authorization, it may face serious administrative and legal consequences.
Therefore, fintech businesses should carefully determine whether they need a banking license, payment institution license, electronic money institution license, CMB authorization, crypto-asset service provider authorization or a contractual partnership with an already licensed institution.
Payment Services and Electronic Money in Turkey
Payment services and electronic money institutions are regulated mainly under Law No. 6493 on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions and related CBRT regulations. The CBRT’s payment systems legal framework includes the law itself, regulations on payment and securities settlement systems, oversight rules, TR QR Code rules, crypto-asset payment restrictions, information systems communiqués and IBAN-related rules.
Payment institutions and electronic money institutions play an increasingly important role in Turkey’s financial ecosystem. They provide digital wallets, money transfers, merchant payment solutions, prepaid instruments, open banking-related services and other payment services. Their operations require licensing, minimum capital, internal control systems, safeguarding of funds, information system compliance, outsourcing controls and consumer-facing disclosure rules.
For businesses, the key legal question is whether a service constitutes a regulated payment service. If a company merely provides technical infrastructure, software or marketplace services, it may fall outside licensing requirements. However, if it transfers funds, issues electronic money, initiates payment orders, provides account information services or holds customer balances, regulatory authorization may be required.
Crypto Assets and Financial Regulation in Turkey
Turkey’s crypto-asset framework has developed significantly in recent years. The CBRT introduced the Regulation on the Disuse of Crypto Assets in Payments, which entered into force on 30 April 2021. This regulation defines crypto assets for payment-related purposes and provides that crypto assets cannot be used directly or indirectly in payments. It also prohibits payment service providers from developing business models that directly or indirectly use crypto assets in payment services or electronic money issuance, and prevents payment and electronic money institutions from intermediating fund transfers to or from certain crypto-asset platforms.
The CBRT explained that crypto assets may involve significant risks due to lack of central authority, market volatility, potential use in illegal activities, wallet theft risks and irrevocability of transactions.
In 2024, Turkey amended the Capital Markets Law through Law No. 7518 and introduced crypto-asset concepts into the capital markets regulatory framework. This development is important because it moved crypto regulation beyond a payment restriction model and toward a capital markets-based supervision model. Crypto-asset service providers, platforms, custody services and related activities may therefore require CMB authorization and compliance with secondary regulations.
Businesses dealing with crypto assets in Turkey should not assume that “crypto is unregulated.” The legal position is more nuanced: crypto assets cannot be used as a payment instrument under CBRT rules, while crypto-asset service providers are increasingly regulated under the Capital Markets Law and AML framework.
Anti-Money Laundering and Financial Crime Compliance
AML compliance is one of the most important areas of Turkish Banking & Finance Law. Banks, payment institutions, electronic money institutions, crypto-asset service providers, financing companies, leasing companies, factoring companies and other obliged parties must comply with customer identification, beneficial ownership checks, suspicious transaction reporting, recordkeeping, risk management and compliance program obligations.
MASAK supervises AML/CFT obligations under Law No. 5549 and secondary legislation. Financial institutions must implement internal policies, training, monitoring, reporting mechanisms and risk-based controls. The importance of AML compliance has increased substantially due to cross-border transactions, crypto assets, digital onboarding, international sanctions and correspondent banking relationships.
Turkey announced its removal from the FATF grey list on 28 June 2024, but this does not reduce the need for strict AML compliance. On the contrary, financial institutions and fintech businesses are expected to maintain strong compliance systems in line with international standards.
For foreign companies operating in Turkey, AML compliance is not only a regulatory matter. Banks may refuse to open accounts, process payments or maintain relationships where the customer’s ownership structure, source of funds, business model or transaction pattern is unclear. Therefore, companies should prepare transparent corporate documents, ultimate beneficial ownership information, tax records, contracts, invoices and commercial explanations before approaching Turkish banks.
Financial Leasing, Factoring and Financing Companies
Turkish finance law also regulates non-bank financial institutions such as financial leasing companies, factoring companies, financing companies and savings finance companies. Law No. 6361 regulates the incorporation and operating principles of these companies and the legal framework of related finance contracts.
Financial leasing is commonly used for machinery, equipment, vehicles and commercial assets. Factoring allows businesses to obtain liquidity by transferring receivables. Financing companies provide consumer finance, vehicle finance and other credit products. Savings finance companies operate under a specific model where participants contribute funds and receive financing according to contractual rules.
These institutions are not banks, but they are still heavily regulated. They must comply with licensing, capital, corporate governance, internal control, reporting and consumer protection obligations. Their contracts must also be carefully drafted because disputes often arise regarding default, early payment, assignment of receivables, collateral, insurance, termination, delivery of leased assets and enforcement.
Financial Consumer Protection and Banking Disputes
Banking and finance disputes in Turkey may arise between banks and commercial customers, banks and consumers, borrowers and lenders, fintech companies and users, payment institutions and merchants, or investors and financial service providers.
Common banking disputes include unauthorized transactions, loan acceleration disputes, excessive fees, unfair contract terms, credit card debts, mortgage enforcement, bank account freezes, letters of guarantee, foreign exchange losses, investment product mis-selling, payment service failures, fraud-related transfers and breach of banking confidentiality.
For consumers, Turkish Consumer Protection Law may apply to certain banking and finance products. Banks must provide clear information, avoid unfair terms and comply with fee limitations and disclosure obligations. Financial consumers may use consumer courts, consumer arbitration committees or other complaint mechanisms depending on the nature and amount of the dispute.
Commercial banking disputes are often resolved through Turkish courts, enforcement offices, arbitration clauses or negotiated restructuring. In finance disputes, evidence is critical. Loan agreements, account statements, payment records, bank instructions, electronic logs, SWIFT messages, security documents, board resolutions, notices and correspondence must be carefully reviewed.
Cross-Border Finance and Foreign Investors
Turkey is a significant market for cross-border finance transactions. Foreign lenders, export credit agencies, international banks, private equity funds, project finance lenders and multinational investors regularly participate in Turkish financing structures.
Cross-border finance transactions may involve Turkish law-governed security documents, foreign law-governed facility agreements, Turkish corporate approvals, tax analysis, foreign exchange rules, withholding tax questions, stamp tax, notarization, apostille, legal opinions and enforcement analysis.
Foreign lenders should pay special attention to Turkish security perfection rules. For example, mortgages must be registered with the land registry. Share pledges may require written agreements and registration or notification depending on the type of shares. Movable pledges may require registration under the applicable movable pledge regime. Receivables assignments should be structured carefully to ensure enforceability against debtors and third parties.
Foreign investors should also consider dispute resolution. Turkish courts may recognize and enforce foreign judgments under the International Private and Procedural Law, subject to legal requirements. Foreign arbitral awards may be enforced under the New York Convention, provided that enforceability conditions are satisfied.
Why Legal Support Is Essential in Turkish Banking & Finance Law
Turkish Banking & Finance Law is highly technical and changes frequently due to economic policy, financial stability concerns, technology, international compliance standards and market developments. A contract that looks commercially acceptable may fail legally if licensing rules, collateral perfection, foreign exchange restrictions, AML obligations or consumer protection rules are ignored.
Legal support is especially important in the following situations:
Foreign investors entering the Turkish banking, finance or fintech market should obtain regulatory analysis before launching services. Borrowers should review loan and security documents before signing. Lenders should verify the enforceability of collateral and corporate authority. Fintech companies should determine whether their business model requires authorization. Banks and financial institutions should maintain compliance programs, internal policies and customer documentation. Consumers and commercial customers should seek legal advice when facing unlawful charges, account restrictions, unfair loan terms or enforcement proceedings.
In Turkish banking disputes, early legal intervention may prevent unnecessary enforcement, asset seizure, account blockage or reputational damage. In regulatory matters, proactive compliance is almost always more effective than defending against administrative sanctions after a violation has occurred.
Conclusion
Turkish Banking & Finance Law forms the legal backbone of Turkey’s financial markets. It regulates banks, financial institutions, payment companies, digital banks, fintech platforms, credit transactions, collateral structures, consumer finance, AML compliance, crypto-asset services and financial disputes. The system is supervised by multiple authorities, especially the BRSA, CBRT, CMB and MASAK.
For banks and financial institutions, compliance with licensing, capital adequacy, liquidity, internal control, confidentiality and AML rules is essential. For borrowers and investors, careful contract drafting, collateral structuring and regulatory review can significantly reduce legal risk. For fintech and digital finance companies, determining the correct regulatory category is the first and most important step before market entry.
Turkey remains a major financial market connecting Europe, Asia and the Middle East. However, the opportunities in Turkish banking and finance must be approached with a clear understanding of the legal framework. Whether the matter involves a bank license, a fintech platform, a loan agreement, a payment service, a crypto-asset business, a financial leasing transaction or a banking dispute, professional legal guidance is indispensable for protecting rights, reducing risk and ensuring regulatory compliance in Turkey.
Yanıt yok