Introduction
Unauthorized capital market activities in Turkey are among the most serious violations under Turkish Capital Market Law. Capital market activities such as brokerage, investment advice, portfolio management, order transmission, custody, public offering intermediation, leveraged transactions and certain crypto asset services cannot be provided freely by any person or company. These activities require authorization from the Capital Markets Board of Türkiye, known as the CMB in English and SPK in Turkish.
The legal framework is mainly based on Capital Markets Law No. 6362, especially Articles 34, 37, 99 and 109. The CMB explains that capital market activities consist of activities of capital market institutions, investment services and activities falling within the law, and ancillary services; it also states that investment services include receiving and transmitting orders, executing orders, dealing on own account, portfolio management, investment advice, underwriting, non-underwritten public offering intermediation, operation of multilateral trading systems and custody services.
Unauthorized activity is not merely an administrative irregularity. Article 109/2 of Capital Markets Law No. 6362 provides that persons engaging in unauthorized capital market activities may be punished with imprisonment from two to five years and a judicial fine from five thousand to ten thousand days. The CMB states that, where unauthorized activity is detected, it files criminal complaints with public prosecutors.
What Is a Capital Market Activity?
A capital market activity is not limited to buying and selling shares on Borsa İstanbul. Under Turkish law, the concept is much broader. Investment services and activities include receiving and transmitting orders concerning capital market instruments, executing customer orders, trading capital market instruments on own account, portfolio management, investment advisory, intermediation in public offerings with or without underwriting, operating multilateral trading systems or other organized markets, custody and management of capital market instruments on behalf of customers, portfolio custody and other activities determined by the CMB.
This means that a person who says “I am only helping people buy stocks” may still be conducting a regulated activity if they receive orders, transmit orders, manage portfolios, give individualized investment advice or intermediate transactions. Similarly, a company that collects money from investors and trades on their behalf may be conducting portfolio management or brokerage activity, even if it describes the service as “financial coaching,” “investment club,” “private signal service” or “wealth mentoring.”
The legal test is based on substance, not labels. If the activity is conducted as a profession, commercial activity or regular service, and if it falls within investment services or capital market activities, CMB authorization may be required. Calling the service “education,” “mentorship,” “copy trading,” “algorithmic signal,” “community investment” or “private group analysis” does not automatically remove the licensing requirement.
Why CMB Authorization Is Required
Capital market activities involve investor money, market integrity, confidential information, order execution, custody, risk disclosure and financial advice. If these services are provided by unauthorized persons, investors may lose their savings, market prices may be distorted and legal accountability may become difficult.
CMB authorization ensures that investment institutions satisfy minimum legal, financial, organizational and operational requirements. Authorized institutions are subject to CMB supervision, capital adequacy rules, internal control obligations, customer protection rules, public disclosure standards and professional conduct principles. The SPK maintains official pages and systems concerning investment institutions, including intermediary institutions and banks authorized for capital market activities.
For investors, the first rule is simple: before sending money, opening an account or accepting investment advice, the investor should verify whether the institution is authorized by the CMB for the specific service. A company may be registered at the trade registry but still lack capital market authorization. A foreign license does not automatically authorize capital market services in Turkey.
Unauthorized Brokerage Activities
Unauthorized brokerage occurs when a person or entity receives, transmits or executes orders concerning capital market instruments without the required CMB authorization. This may involve shares, debt instruments, derivatives, foreign instruments, contracts for difference, leveraged products or other instruments that fall within capital market rules.
Common examples include persons collecting orders through WhatsApp or Telegram, unlicensed websites enabling Turkish investors to trade foreign stocks or forex products, persons using personal bank accounts to receive investor money, and companies offering “brokerage-like” services without appearing on CMB-authorized institution lists.
A person does not need to operate a full trading platform to create risk. If they receive customer instructions and transmit them to another platform, this may still be order reception and transmission. If they place trades on behalf of customers, it may be order execution or portfolio management. If they hold customer assets, custody rules may also become relevant.
Unauthorized Portfolio Management
Portfolio management is a regulated investment service. If a person manages another person’s money or securities under discretion, selects investments, executes trades and receives a fee, profit share or other benefit, CMB authorization may be required.
Unauthorized portfolio management often appears in informal structures. A person may say, “Transfer the money to me, I will trade for you.” Another may open accounts in their own name and trade for several investors. Some may promise monthly returns, profit sharing or principal protection. Others may operate “copy trading” pools where followers’ money is controlled by the organizer.
These arrangements are legally dangerous. They may constitute unauthorized portfolio management, unauthorized brokerage, fraud, breach of trust or money laundering-related conduct depending on the facts. If investor money is collected into personal accounts, recovery may become very difficult.
Unauthorized Investment Advice
Investment advice is also regulated. General market commentary is not always investment advice, but personalized recommendations based on an investor’s financial situation, risk profile or investment objectives may require authorization.
The line between general education and investment advice is often crossed in practice. For example, a social media account that says “This is not investment advice” but privately tells paying members exactly which stock to buy, at what price, when to sell and how much to allocate may create legal risk. Paid Telegram, WhatsApp, Discord or X groups may fall into this danger zone, especially when recommendations are repeated, systematic and commercial.
The CMB has warned investors about social media and messaging-platform groups where unauthorized persons may direct investors and cause victimization, and has stated that promotion or marketing of unauthorized market activities may also lead to criminal complaints.
Illegal Leveraged Forex and CFD Transactions
Unauthorized leveraged transactions are one of the most common forms of illegal capital market activity. The CMB has clearly stated that leveraged transactions offered to investors residing in Türkiye by persons other than CMB-authorized institutions constitute unauthorized capital market activity.
These cases often involve foreign websites, call centers, fake forex companies, “global investment platforms,” offshore CFD providers and persons who tell Turkish investors that they can trade forex with high leverage abroad. Investors are often contacted by phone, social media or online advertisements. They may first be shown small profits, then encouraged to deposit larger sums, and later prevented from withdrawing funds.
The CMB has also stated that it carries out legal actions to block access to websites where unauthorized leveraged transactions are offered to Turkish residents. It warns investors to conduct leveraged transactions only through institutions authorized by the CMB and to be careful about phone calls and similar solicitations.
Facilitating Unauthorized Capital Market Activity
Criminal exposure is not limited to the person directly providing the unauthorized service. The CMB states that it files criminal complaints not only against persons conducting unauthorized market activities, but also against those who facilitate such activities by promoting or advertising them, or by allowing their bank accounts or telephone lines, or those of companies they represent, to be used.
This is highly important. A person may say, “I only let them use my bank account,” or “I only advertised the platform,” or “I only referred investors.” These defenses may not be sufficient if the person’s conduct helped the unauthorized activity operate.
Examples include influencers promoting illegal forex platforms, company representatives letting bank accounts receive investor deposits, call center operators contacting victims, persons renting phone lines, website designers knowingly building illegal investment platforms, and intermediaries collecting investor forms or documents for unauthorized providers.
Unauthorized Public Offerings
Unauthorized activity may also occur through illegal public offerings. A company cannot generally invite the public to buy shares or investment-like rights without complying with CMB public offering rules. Public calls promising profit participation, dividends or investment returns may trigger capital market law.
The CMB’s 2019 announcement concerning an unlawful public offering case stated that a company had made a general call for the purchase of its shares by promising dividends and then conducted share sales; the CMB found that the elements of the offence under Article 109 relating to unlawful public offering and unauthorized capital market activity were completed, and decided to file a criminal complaint.
This is relevant for start-ups, private companies, cooperatives, farming projects, real estate projects and online investment schemes. If money is collected from the public in exchange for shares, profit rights, revenue sharing or investment returns, the structure must be reviewed under capital market law before any public solicitation.
Foreign Platforms Targeting Turkish Investors
Foreign platforms create a major compliance issue. A company licensed abroad may still violate Turkish law if it targets Turkish residents without CMB authorization. Turkish-language websites, Turkish customer support, Turkish influencers, Turkish bank payment channels, local representatives, phone calls to Turkish residents and advertising campaigns directed at Türkiye may all create regulatory risk.
The CMB’s warnings on unauthorized leveraged transactions are especially relevant here. The Board states that leveraged transactions offered to Türkiye-resident investors by unauthorized persons constitute unauthorized capital market activity and that websites offering such transactions may be subject to access-blocking procedures.
For foreign platforms, the safest approach is to obtain Turkish legal advice before marketing to Türkiye. For investors, the safest approach is to verify CMB authorization instead of relying on claims such as “regulated abroad,” “global broker,” “UK licensed,” “Dubai registered,” or “offshore protected.”
Crypto Asset Service Providers and Unauthorized Activity
Crypto asset regulation has become part of the broader unauthorized capital market activity landscape after amendments to Capital Markets Law No. 6362. The CMB’s Denetleme Dairesi görev tanımı expressly includes inspection of unauthorized crypto asset service provider activity, unauthorized investment advice, unauthorized portfolio management, unauthorized leveraged transactions and unauthorized intermediation in capital market instruments.
The SPK publishes a temporary “Faaliyette Bulunanlar Listesi” for crypto asset service providers that declared they would continue operating under the transitional regime. However, the SPK expressly states that appearance on this list does not mean that the listed entities are authorized under the relevant legislation.
This distinction is crucial for investors. Being on a temporary list is not the same as having final authorization. Crypto investors should verify the current regulatory status of a platform and should understand that crypto custody, trading, wallet management and transfer services may create separate legal obligations.
CMB Measures Under Article 99
When unauthorized capital market activity is detected, the CMB is not limited to filing a criminal complaint. The CMB states that, under Article 99 of Capital Markets Law No. 6362, it is authorized to take necessary measures to stop unauthorized activities, and without prejudice to civil and criminal responsibility, to file lawsuits for cancellation of the consequences of unauthorized activities and return of cash or capital market instruments to rightful owners within one year from detection and in any event within five years from occurrence.
This is important for investor protection. Unauthorized activity often causes collective harm. If many investors transfer funds to an illegal platform, individual lawsuits may be difficult. CMB measures can help stop ongoing activity and address consequences. However, investors should not assume that all losses will automatically be recovered. Recovery depends on facts, available assets, evidence, timing and the legal route chosen.
Criminal Sanctions Under Article 109
Article 109/2 is the core criminal provision for unauthorized capital market activity. The CMB’s investor guidance states that persons engaging in unauthorized capital market activity may be punished with imprisonment from two to five years and a judicial fine from five thousand to ten thousand days.
The offence may be committed by individuals or through companies. Company managers, representatives, promoters, account holders and other facilitators may be examined depending on their role. In practice, prosecutors and the CMB may look at who controlled the platform, who received investor funds, who gave instructions, who marketed the service, who communicated with investors and who benefited financially.
The existence of criminal sanctions does not prevent civil claims. Investors may also seek return of funds or damages through civil litigation, enforcement proceedings, criminal restitution-related mechanisms or other legal routes depending on the facts.
Relationship With Fraud and Breach of Trust
Unauthorized capital market activity may overlap with other crimes. If the platform or person intentionally deceives investors, the facts may also involve fraud. If investor funds are entrusted to a person and then misused, breach of trust may arise. If documents, account statements or platform screens are fabricated, forgery or qualified fraud may be considered.
For example, a fake forex platform may show artificial profits on a dashboard to induce further deposits. A person managing investor money may claim losses occurred in trading, while actually spending funds for personal purposes. A so-called investment company may issue fake account statements or fake CMB authorization documents. These facts may support additional criminal allegations beyond Article 109.
Therefore, a legal complaint should not be limited to one article without factual analysis. The complaint should describe all conduct: unauthorized activity, deception, money transfer, false promises, withdrawal refusal, identity of account holders, platform records and communications.
Investor Warning Signs
Investors should be cautious when they encounter the following warning signs:
A person or platform promises guaranteed profit.
A foreign platform says Turkish authorization is unnecessary.
Money is requested into a personal bank account.
The platform is not listed among CMB-authorized institutions.
The representative pressures the investor to deposit quickly.
Withdrawals are delayed unless more money is deposited.
Profits are shown only on a private dashboard, not in a regulated account.
The company refuses to provide license details.
The offer is made through Telegram, WhatsApp, Instagram or cold calls.
The promoter says “SPK does not apply to us because we are abroad.”
These indicators do not automatically prove a crime, but they create significant legal risk. Investors should verify before transferring funds.
Evidence in Unauthorized Capital Market Activity Cases
Evidence is decisive. Investors who suspect unauthorized capital market activity should preserve bank transfer receipts, platform screenshots, account statements, WhatsApp messages, Telegram group messages, e-mails, phone numbers, website addresses, IP-related information if available, names of representatives, advertisements, social media posts, contracts, identity documents sent to the platform and withdrawal request records.
If the case involves a foreign website, screenshots should include the URL, date and platform content. If the platform later disappears, early evidence may become the only proof. If money was sent to domestic bank accounts, account holder information and transfer explanations are important. If phone calls were used, call logs and names of callers should be preserved.
A strong criminal complaint should include a clear chronology: when the investor was contacted, what was promised, where money was sent, how the platform operated, when withdrawal was requested, how refusal occurred and who benefited.
Practical Legal Remedies for Investors
An investor harmed by unauthorized activity may consider several routes. First, a complaint may be made to the CMB or through public complaint channels such as CİMER, especially in cases of unauthorized leveraged transactions. The CMB’s leveraged-transaction warning specifically advises investors to submit complaints through CİMER concerning such calls and activities.
Second, a criminal complaint may be filed with the public prosecutor. Third, a civil lawsuit or enforcement proceeding may be considered against account holders, platform operators, company representatives or other responsible persons. Fourth, interim attachment or asset-freezing-style measures may be evaluated where legal conditions exist. Fifth, in crypto-related cases, blockchain tracing and exchange record requests may be necessary.
The correct route depends on the amount, evidence, identity of suspects, whether funds went abroad, whether bank accounts are domestic, whether a company exists, and whether other victims are involved.
Compliance Checklist for Businesses
Any person or company planning to provide investment-related services in Turkey should complete a compliance review before starting operations.
First, identify whether the proposed service involves capital market instruments. Second, determine whether the activity includes order reception, order transmission, order execution, portfolio management, investment advice, custody, public offering intermediation, leveraged transactions, crypto asset services or another regulated activity. Third, verify whether CMB authorization is required. Fourth, review whether the company, managers and staff satisfy licensing and organizational requirements. Fifth, prepare customer agreements, risk disclosures, internal controls and AML procedures. Sixth, avoid marketing until authorization status is clear. Seventh, do not collect investor money into personal or unrelated accounts. Eighth, do not use foreign licensing claims as a substitute for Turkish law compliance.
This checklist is especially important for fintech companies, trading apps, copy-trading platforms, social investment platforms, token projects, foreign brokers, signal providers and investment education businesses.
Conclusion
Unauthorized capital market activities in Turkey are serious violations that may result in imprisonment, judicial fines, access blocking, CMB measures, civil liability and investor claims. The legal framework is based mainly on Capital Markets Law No. 6362 and CMB regulations. Investment services such as order reception and transmission, order execution, dealing on own account, portfolio management, investment advice, public offering intermediation, operation of trading systems and custody services require CMB authorization when conducted as regulated capital market activities.
Article 109/2 provides criminal sanctions of two to five years’ imprisonment and judicial fines from five thousand to ten thousand days for unauthorized capital market activity, and the CMB files criminal complaints when it detects such conduct.
For investors, the most important protection is verification. Before investing, the institution’s CMB authorization should be checked. Before joining an investment group, investors should ask whether the person is licensed to provide investment advice or portfolio management. Before using a foreign forex or CFD platform, investors should remember that unauthorized leveraged transactions targeting Türkiye-resident investors are treated by the CMB as unauthorized capital market activity.
For businesses, the key rule is simple: do not provide investment services in Turkey without legal authorization analysis. For victims, early evidence preservation and rapid legal action are critical. In conclusion, unauthorized capital market activity is not merely a regulatory technicality; it is a high-liability field involving criminal law, securities regulation, investor protection and financial evidence. Any investor, platform, intermediary, promoter, fintech company or suspect involved in such a matter should obtain professional legal advice immediately.
Yanıt yok