Introduction
Virtual Mobile Network Operators in Turkey are becoming increasingly important as mobile communications, digital platforms, IoT services, eSIM-based connectivity, fintech applications, corporate mobile services and branded mobile offerings continue to develop. A Virtual Mobile Network Operator, commonly known as an MVNO, provides mobile communication services to subscribers without necessarily owning a complete radio access network. In Turkish regulatory terminology, this activity is generally referred to as Sanal Mobil Şebeke Hizmeti, abbreviated as SMŞH.
The MVNO model is attractive because it allows companies to enter the mobile communications market without building a full nationwide mobile network from the beginning. Instead, the MVNO may use the infrastructure or radio access network of an existing mobile network operator through a commercial agreement, while providing services under its own brand, managing its own subscribers, designing tariffs, issuing SIM or eSIM-based services, providing customer support and handling billing operations depending on its regulatory and technical structure.
However, MVNO activity in Turkey is not merely a commercial resale model. It is a regulated electronic communications activity. A company that wants to provide virtual mobile network services must consider Law No. 5809 on Electronic Communications, BTK authorization rules, CEVHER application requirements, number allocation, administrative fees, consumer protection, personal data protection, network security, mobile service quality, commercial agreements with host mobile operators and administrative sanction risks.
The Information and Communication Technologies Authority, known as BTK, is the main regulatory authority. BTK describes itself as the institution that regulates and supervises the telecommunications sector in Turkey and as Turkey’s first sectoral regulatory authority. BTK defines authorization as the registration of companies with the Authority for providing electronic communications services or networks, or the granting of specific rights and obligations to companies after registration.
For investors, technology companies, fintech businesses, IoT providers, corporate service providers and foreign telecom groups, MVNO licensing in Turkey requires careful legal planning. The correct question is not only whether the company can reach a commercial agreement with a mobile network operator. The more important question is whether the company satisfies the regulatory conditions to become an authorized virtual mobile network service operator.
What Is a Virtual Mobile Network Operator?
A Virtual Mobile Network Operator is a mobile service provider that offers mobile communication services under its own commercial identity while relying fully or partially on another operator’s physical mobile network. The host operator generally owns the radio access network, spectrum rights, base stations and core mobile infrastructure, although the exact level of technical independence may vary depending on the MVNO model.
In international practice, MVNOs may operate under different models. A light MVNO or branded reseller may focus mainly on marketing, brand management and customer acquisition. A service provider MVNO may manage billing, customer support and tariff design more independently. A full MVNO may operate substantial core network elements, issue SIM cards, manage numbering resources and control more technical aspects of service delivery. The legal consequences depend on the model, the scope of control and the relationship with the host mobile network operator.
In Turkey, the relevant regulated activity is Sanal Mobil Şebeke Hizmeti. BTK’s authorization application page specifically refers to the Virtual Mobile Network Service Operators Information Appendix and to documents concerning the fees that virtual mobile network service operators must pay to BTK within the framework of Law No. 5809. This shows that Turkish law treats virtual mobile network service as a distinct electronic communications authorization category requiring regulatory documentation and ongoing compliance.
Legal Framework for MVNOs in Turkey
The main legal framework for MVNOs in Turkey is Law No. 5809 on Electronic Communications. This law governs electronic communications services, networks, infrastructure, operators, authorization, numbering, spectrum, consumer rights, market regulation, technical standards, audits and administrative sanctions.
BTK’s authorization framework is central. BTK states that authorization primarily aims to increase the number of market players, create competition, establish a secure environment, encourage domestic and foreign investment, ensure efficient use of national resources, provide services widely and protect consumers. These objectives are directly relevant to MVNOs because virtual mobile services may increase competition in the mobile market, create niche offerings and expand consumer choice.
The legal framework also includes BTK secondary regulations, administrative sanctions rules, number allocation rules, tariff and consumer protection regulations, personal data protection law, cybersecurity obligations, commercial electronic communication rules and, depending on the service model, Law No. 5651 on internet-related obligations.
An MVNO is not merely a marketing company. Once authorized, it becomes an electronic communications operator and must comply with the obligations attached to its authorization. These obligations may include subscriber registration, tariff transparency, accurate billing, customer complaint management, number portability, data security, personal data processing, emergency access obligations, network security cooperation and payment of regulatory fees.
BTK Authorization for MVNOs
BTK authorization is the first regulatory requirement for an MVNO. Under Turkish telecom law, companies that provide electronic communications services or networks must obtain authorization before starting regulated activities. Authorization may take the form of notification or usage rights depending on the service type and whether scarce public resources such as numbers, frequencies or satellite positions are involved.
For MVNOs, the authorization analysis should include the scope of Sanal Mobil Şebeke Hizmeti, whether numbering resources will be requested, what type of mobile services will be offered, whether SIM or eSIM services will be issued, whether the company will manage subscribers directly and whether it will operate core network elements.
BTK’s CEVHER page states that applications for initial authorization, additional authorization, renewal and adequacy procedures are conducted through BTK’s CEVHER System. It also states that changes in information submitted by authorized operators must be notified through the Operator Information Update tab, with supporting documents uploaded where required.
Therefore, MVNO authorization is not a one-time formality. After authorization, the operator must keep its information updated and continue satisfying the conditions required by BTK. If the operator loses required conditions and does not correct the situation within the period granted by BTK, authorization may be cancelled.
Corporate Structure Requirements
A company applying for MVNO authorization in Turkey must be structured properly. BTK’s CEVHER application guidance states that, in order to be authorized by notification or by usage right together with notification, the applicant must be established as a limited liability company or joint-stock company solely for the purpose of carrying out activities subject to authorization or activities necessary to provide the authorized service.
The company’s articles of association must include wording such as providing electronic communications service or telecommunications service and/or establishing and operating a network or infrastructure. BTK’s guidance also warns that unrelated activities such as food, automotive, tourism or construction should not be included in the purpose and subject section where they are not necessary for the authorized service.
This is a practical issue for investors. Many technology companies are established with broad articles of association covering software, consultancy, e-commerce, digital marketing and general trade. Such a company may need to amend its articles of association before applying for MVNO authorization.
For foreign investors, this requirement is also important. A foreign group may establish a Turkish subsidiary, enter into a joint venture or acquire an existing authorized operator. In every model, the Turkish company’s corporate documents must satisfy BTK requirements.
Paid-In Capital Requirement
BTK requires minimum paid-in capital for authorization. According to BTK’s CEVHER application guidance, pursuant to the BTK Board Decision dated 10 March 2026 and numbered 2026/DK-YED/71, the paid-in capital requirement is TRY 2,500,000 for OKTH authorization and TRY 10,000,000 for other authorizations.
For MVNOs, this means that capital planning must be completed before the application. A company established with insufficient capital may need to complete a capital increase. This can delay the authorization process and affect the commercial launch timetable.
Paid-in capital is also relevant for investor confidence. A virtual mobile operator must manage customer acquisition, wholesale network costs, billing systems, customer service, SIM or eSIM management, regulatory fees, marketing costs and technical integrations. Therefore, undercapitalized market entry may create both regulatory and commercial risk.
Because monetary thresholds may change through BTK decisions, companies should verify current BTK requirements before applying.
Shareholder and Management Eligibility
BTK also imposes eligibility conditions on shareholders and managers. Its guidance states that real person shareholders holding at least ten percent of the company’s shares, persons authorized to manage and represent the legal entity and certain real person shareholders of legal entity shareholders must not have specified criminal convictions. These include certain information systems crimes, crimes against state security, crimes against the constitutional order, privacy offences, embezzlement, bribery, fraud, forgery, money laundering, tax evasion and certain violations under Law No. 5809.
This means that MVNO investors should conduct legal due diligence before filing an application. Shareholder chains, board members, managers, authorized signatories and ultimate beneficial owners should be reviewed.
This is particularly important in fintech-MVNO models, foreign investments, private equity structures, joint ventures and acquisitions of authorized telecom companies. A regulatory problem concerning shareholders or management may delay or prevent authorization.
Number Allocation and Numbering Issues
Numbering is one of the most important operational issues for MVNOs. If an MVNO intends to provide mobile numbers to subscribers, it must analyze BTK number allocation requirements. BTK’s CEVHER guidance expressly refers to the number allocation application form for numbers used in electronic communication networks. BTK also maintains a specific page for Virtual Mobile Network Service Numbers, which places SMŞH within the National Numbering Plan structure.
Numbering rights are not merely technical resources. They affect subscriber identity, mobile number portability, billing, emergency services, call routing, interconnection, customer contracts and fraud prevention. An MVNO should decide whether it will use numbers allocated directly to it, numbers arranged through a host operator or another structure permitted by the regulatory framework.
The number allocation strategy should be clarified before commercial launch. A company that advertises mobile services without securing the necessary numbering framework may face regulatory and contractual risk.
Agreement with a Host Mobile Network Operator
The core commercial foundation of an MVNO is its agreement with a host mobile network operator. Since the MVNO generally does not own nationwide radio access infrastructure, it must obtain wholesale access to a mobile network. The agreement may cover access to radio network, SIM/eSIM provisioning, traffic routing, voice, SMS, mobile data, roaming, number portability support, technical interfaces, service quality, billing data, customer records, emergency services, fraud prevention and cybersecurity cooperation.
A strong MVNO agreement should address:
Scope of wholesale mobile services.
Network access and coverage.
Quality of service.
Technical integration.
SIM and eSIM provisioning.
Numbering and number portability.
Interconnection and routing.
Billing data and reconciliation.
Customer support responsibilities.
Fraud management.
Personal data roles.
Traffic data processing.
Lawful official requests.
Cybersecurity incidents.
Service interruption and compensation.
Termination and migration of subscribers.
Regulatory change clauses.
The agreement must also be consistent with Turkish telecom law. Even if the MVNO and host operator agree commercially, the MVNO cannot avoid BTK requirements, consumer protection duties or data protection obligations.
MVNO Business Models in Turkey
MVNOs may serve different market segments. A retail MVNO may target consumers with low-cost tariffs, youth packages, international calling packages or niche data plans. A corporate MVNO may offer mobile services to large enterprises, banks, logistics companies, security companies, public institutions or field teams. A fintech MVNO may combine mobile connectivity with digital wallets, authentication, payment systems or customer loyalty products. An IoT MVNO may provide SIM or eSIM connectivity for vehicles, smart meters, industrial sensors, logistics trackers or smart city devices.
Each model creates different legal risks. A consumer-facing MVNO must focus heavily on subscriber contracts, cancellation, billing, customer service, number portability and complaint management. A corporate MVNO must focus on service level agreements, data security, business continuity and liability. An IoT MVNO must focus on device lifecycle management, eSIM control, location data, cybersecurity, cross-border connectivity and machine-to-machine communication.
The regulatory classification may also differ depending on whether the company acts as a full MVNO, service provider MVNO, reseller or IoT connectivity manager. Legal review should be based on technical reality, not marketing terminology.
Consumer Rights and Subscriber Protection
MVNOs providing services to individuals must comply with Turkish telecom consumer rules. BTK’s authorization objectives include protecting consumers and ensuring provision of services with a certain quality. This objective becomes practical through rules on subscription agreements, tariff transparency, billing, service quality, termination, number portability, complaint handling and personal data protection.
An MVNO should prepare clear subscriber agreements explaining:
Service type.
Tariff and fees.
Taxes and additional charges.
Commitment period, if any.
Cancellation conditions.
SIM or eSIM terms.
Number portability rules.
Coverage limitations.
Customer support channels.
Personal data processing.
Complaint procedures.
Marketing statements must be accurate. If the MVNO uses the host operator’s network coverage, this should be explained clearly. If service quality depends on host network availability, roaming settings or technical limitations, subscribers should not be misled.
Unfair invoices, unauthorized additional services, unclear cancellation fees, failure to terminate subscriptions, number portability delays and poor complaint handling may create BTK complaints and consumer disputes.
Number Portability
Number portability is a crucial subscriber right in mobile services. MVNOs must be able to manage port-in and port-out processes in accordance with Turkish rules. A subscriber should not be prevented from changing operators without lawful reason.
For an MVNO, number portability requires technical and legal coordination. The company must verify subscriber identity, process applications, coordinate with the host operator and number portability systems, inform customers and manage billing transition.
Number portability disputes may arise where a request is rejected due to identity mismatch, corporate authorization problem, incomplete application, technical delay or debt-related misunderstanding. The MVNO should document every stage of the process and provide clear explanations to subscribers.
SIM, eSIM and Identity Verification
SIM and eSIM management is a major compliance area for MVNOs. A mobile number can be connected to banking apps, e-government access, two-factor authentication, digital wallets, social media accounts and personal communications. Therefore, weak identity verification can cause serious harm.
MVNOs should implement robust processes for:
Subscriber identity verification.
Corporate line authorization.
SIM issuance.
eSIM profile activation.
Lost or stolen SIM procedures.
SIM replacement.
Fraud detection.
Dealer controls.
Remote onboarding.
Customer support authentication.
SIM swap fraud is one of the most serious mobile telecom risks. If an MVNO allows unauthorized SIM replacement or weak eSIM activation, subscribers may suffer financial fraud, identity theft, unauthorized account access or privacy violations. The operator may face consumer claims, data protection complaints and regulatory scrutiny.
Personal Data Protection and KVKK
MVNOs process significant personal data. This may include subscriber identity data, phone numbers, address information, payment data, billing records, SIM or eSIM identifiers, device identifiers, customer service recordings, traffic-related data, usage records, location data and complaint files.
Under KVKK, personal data must be processed lawfully and fairly, be accurate and kept up to date where necessary, be processed for specified, explicit and legitimate purposes, be relevant, limited and proportionate, and be stored only for the period required by legislation or by the processing purpose.
For MVNOs, data protection compliance should include:
Privacy notices.
Data processing inventory.
Subscriber consent mechanisms.
Data subject request procedures.
Retention and deletion policies.
Cross-border transfer analysis.
Vendor and processor agreements.
Dealer confidentiality controls.
Breach notification procedures.
Access logs.
Security policies.
Special attention should be given to traffic data and location data. These categories may reveal communication patterns and movement habits. They should be accessed only by authorized personnel and used only for lawful purposes.
Cybersecurity and Network Security
MVNOs depend on mobile network infrastructure and digital systems. Their cybersecurity risk includes subscriber database breaches, SIM swap attacks, eSIM provisioning attacks, customer portal vulnerabilities, billing system compromise, API abuse, dealer fraud, DDoS attacks, malware and unauthorized access to customer support systems.
BTK’s network and information security framework states that obligations under the Regulation on Network and Information Security in the Electronic Communications Sector apply to operators, and that additional obligations may apply to specific authorization types, including virtual mobile network service, depending on regulatory criteria.
An MVNO should implement:
Role-based access control.
Multi-factor authentication.
Privileged access management.
Secure API architecture.
Encryption of sensitive data.
Fraud detection systems.
SIM swap monitoring.
Incident response procedures.
Vendor security controls.
Dealer access restrictions.
Secure backup.
Cybersecurity training.
A cybersecurity incident involving mobile subscribers may trigger BTK scrutiny, KVKK breach notification, consumer claims and reputational damage. MVNOs should prepare incident response plans before launch.
Law No. 5651 and Internet-Related Obligations
MVNOs providing mobile internet access may also need to consider obligations under Law No. 5651, depending on their role in providing internet access and traffic data processing. If the MVNO qualifies as an access provider or participates in providing internet access to end users, access-blocking, traffic data, official request and log-retention issues may arise.
The exact legal responsibility depends on the technical and contractual arrangement between the MVNO and host mobile network operator. If the host operator manages access-provider obligations, this should be clearly regulated in the wholesale agreement. If the MVNO has direct responsibility for subscribers and traffic data, it must prepare its own procedures.
The MVNO should not assume that all Law No. 5651 obligations automatically belong to the host operator. Legal responsibility must be analyzed according to the actual service structure.
Administrative Fees and Regulatory Payments
Authorized operators must comply with regulatory payment obligations. BTK’s CEVHER guidance specifically refers to an agreement on the procedures and principles for payment of fees that virtual mobile network service operators are obliged to pay to BTK within the framework of Law No. 5809.
This is important for financial planning. MVNOs must consider not only wholesale network costs and customer acquisition costs but also regulatory fees, administrative costs, number-related fees, reporting obligations and compliance expenses.
Failure to meet regulatory payment obligations may create authorization risk. Finance and legal teams should maintain a regulatory calendar and ensure timely submission of financial documents and payments.
Technical Equipment and Device Compliance
MVNOs may issue SIM cards, support eSIM profiles, sell devices, distribute modems, provide IoT modules or offer mobile-connected hardware. Where devices or radio equipment are placed on the Turkish market, technical regulation and market surveillance rules may apply.
BTK’s Radio Equipment Regulation materials state that the regulation covers conditions for placing devices on the market, market surveillance and inspection, prohibition of unsafe devices, conformity assessment procedures and CE marking.
If an MVNO sells branded devices, IoT modules, routers or other connected equipment, it should review conformity obligations. A device that works technically may still create legal risk if placed on the market without proper compliance documentation.
Foreign Investors and MVNO Market Entry
Foreign telecom companies and technology investors may be interested in Turkey’s MVNO market. Turkey generally permits foreign investment, but regulated telecom services require local legal compliance. A foreign investor may establish a Turkish subsidiary, enter into a joint venture, acquire an authorized operator or partner with a Turkish host mobile network operator.
Foreign investors should review:
Turkish company formation.
BTK authorization requirements.
Articles of association.
Paid-in capital.
Shareholder and management eligibility.
Wholesale host operator agreement.
Number allocation.
KVKK and cross-border transfers.
Cybersecurity.
Consumer contracts.
Tax and accounting.
Employment and call center operations.
Regulatory fees.
Due diligence is especially important when acquiring an existing MVNO or authorized operator. The buyer should review authorization scope, BTK correspondence, sanctions, unpaid fees, consumer complaints, data breaches, contracts and technical systems.
Common Legal Risks for MVNOs
Common legal risks include:
Launching services without proper BTK authorization.
Providing services outside authorization scope.
Using numbers without proper allocation.
Signing an incomplete wholesale network agreement.
Misleading consumers about coverage or service quality.
Charging unclear cancellation fees.
Failing to manage number portability properly.
Weak SIM or eSIM identity verification.
SIM swap fraud.
Unlawful processing of location or traffic data.
Cross-border transfer violations.
Weak dealer controls.
Failure to notify BTK about corporate changes.
Non-payment of regulatory fees.
Cybersecurity incidents.
Inadequate complaint handling.
Unclear allocation of Law No. 5651 responsibilities.
Each risk should be addressed before launch through legal, technical and operational planning.
Practical Compliance Checklist for MVNOs in Turkey
A company planning to operate as an MVNO in Turkey should follow this checklist:
Define the MVNO business model.
Determine whether the company will be a reseller, service provider or full MVNO.
Prepare a Turkish limited liability or joint-stock company.
Draft telecom-specific articles of association.
Ensure paid-in capital compliance.
Review shareholder and management eligibility.
Prepare CEVHER authorization documents.
Identify whether usage rights or number allocation are required.
Prepare the SMŞH operator information appendix.
Negotiate a wholesale agreement with a host mobile network operator.
Define responsibilities for number portability.
Define responsibilities for Law No. 5651 compliance.
Prepare consumer subscription agreements.
Prepare tariff and campaign documents.
Prepare SIM and eSIM procedures.
Establish identity verification controls.
Create anti-fraud and SIM swap prevention rules.
Prepare KVKK privacy notices and data inventories.
Analyze cross-border data transfers.
Prepare cybersecurity and incident response procedures.
Train dealers and customer service teams.
Create complaint management procedures.
Maintain regulatory fee and reporting calendar.
Prepare audit-ready documentation.
Conclusion
Virtual Mobile Network Operators in Turkey operate at the intersection of telecommunications regulation, consumer law, data protection, cybersecurity, mobile network agreements and commercial strategy. The MVNO model may offer significant market opportunities, especially for niche brands, fintech platforms, IoT providers, corporate service providers and foreign investors. However, the regulatory burden is substantial.
An MVNO must obtain proper BTK authorization, structure its Turkish company correctly, meet capital and eligibility conditions, prepare CEVHER documents, manage number allocation, sign a legally sound agreement with a host mobile network operator, protect subscribers, comply with KVKK, secure SIM and eSIM processes, manage cybersecurity risks and satisfy regulatory payment obligations.
The most important legal issue is classification and preparation. A company should not launch mobile services merely by signing a commercial network agreement. It must ensure that the regulatory, contractual, technical, consumer and data protection framework is ready.
As mobile services evolve through eSIM, IoT, 5G, digital identity, connected vehicles and fintech integration, MVNOs may play an increasingly important role in Turkey’s electronic communications sector. Companies that build compliance into their market-entry strategy will reduce legal risk, protect subscribers and create a stronger foundation for sustainable growth.
Frequently Asked Questions
What is an MVNO in Turkey?
An MVNO, or Virtual Mobile Network Operator, provides mobile communication services without necessarily owning a complete radio access network. In Turkey, this activity is generally known as Sanal Mobil Şebeke Hizmeti or SMŞH.
Does an MVNO need BTK authorization in Turkey?
Yes. Virtual mobile network service is a regulated electronic communications activity. BTK’s authorization application page specifically refers to the Virtual Mobile Network Service Operators Information Appendix and related SMŞH documents.
What is BTK authorization?
BTK defines authorization as registration with the Authority for providing electronic communications services or networks, or the granting of specific rights and obligations to companies after registration.
What company type is required for MVNO authorization?
BTK guidance states that the applicant should generally be established as a limited liability company or joint-stock company solely for activities subject to authorization or activities necessary to provide the authorized service.
What is the paid-in capital requirement?
According to BTK guidance, under Board Decision dated 10 March 2026 and numbered 2026/DK-YED/71, paid-in capital is TRY 2,500,000 for OKTH authorization and TRY 10,000,000 for other authorizations.
Can an MVNO request mobile numbers?
An MVNO may need to analyze number allocation depending on its service model. BTK’s CEVHER guidance refers to a number allocation application form and BTK maintains a specific page for Virtual Mobile Network Service Numbers.
Does an MVNO need a host mobile network operator agreement?
Yes. Since an MVNO generally relies on another mobile network operator’s radio access network, a wholesale agreement with a host mobile network operator is essential.
Are MVNOs subject to KVKK?
Yes. MVNOs process subscriber data, phone numbers, billing records, SIM/eSIM identifiers, customer service records and potentially traffic or location data. Therefore, KVKK compliance is essential.
What are the main risks for MVNOs in Turkey?
The main risks include lack of BTK authorization, number allocation problems, unclear host network agreements, consumer disputes, SIM swap fraud, data protection violations, cybersecurity incidents, non-payment of regulatory fees and failure to update BTK records.
Can foreign investors establish an MVNO in Turkey?
Yes, but the foreign investor must structure the Turkish company properly, satisfy BTK authorization conditions, comply with capital and eligibility rules, and prepare local regulatory, data protection and consumer compliance.
No Responses