Introduction
Unauthorized credit card charges in Turkey are a serious consumer protection issue. A consumer may notice an unknown transaction on a credit card statement, receive an SMS for a purchase they did not make, discover recurring subscription charges, face online card fraud, or see payments made after the card was lost or stolen. These situations may involve financial loss, identity misuse, card data theft, merchant misconduct, bank security failures, or misleading subscription practices.
Turkish law protects cardholders through a combination of Law No. 5464 on Bank Cards and Credit Cards, Law No. 6502 on the Protection of Consumers, banking regulations, card scheme chargeback procedures, and dispute resolution mechanisms before banks, the Türkiye Bankalar Birliği Individual Customer Arbitration Panel, Consumer Arbitration Committees, Consumer Courts, and in some cases criminal authorities.
Law No. 5464 regulates the issuance and use of bank cards and credit cards and aims to ensure the effective functioning of the card payment system. The law applies to card system operators, card issuers, merchant acquirers, merchants, and cardholders. Law No. 6502 also covers consumer transactions, including banking and similar contracts, where the cardholder acts for non-commercial and non-professional purposes.
What Is an Unauthorized Credit Card Charge?
An unauthorized credit card charge is a transaction made without the cardholder’s valid consent. It may occur through physical card theft, lost card misuse, online card data theft, phishing, fake websites, malware, social engineering, SIM card fraud, unauthorized recurring payments, or use of saved card information by a merchant after cancellation.
Common examples include:
Unknown online purchases, foreign currency transactions, gaming or app payments, hotel or travel charges not approved by the consumer, subscription renewals after cancellation, repeated small transactions, card-not-present transactions, and purchases made after the card was lost or stolen.
However, not every disputed charge is legally “unauthorized.” Some charges may be authorized but disputed for another reason. For example, the consumer may have purchased goods that were never delivered, received defective goods, been charged twice, or forgotten a trial subscription renewal. These cases may still create refund or chargeback rights, but the legal basis differs.
First Step: Immediately Notify the Bank
The first practical rule is immediate notification. If a consumer notices an unauthorized transaction, suspects card fraud, loses the card, or believes card information has been stolen, the bank must be contacted without delay. The card should be blocked, online transactions may need to be disabled, and a formal spending objection should be filed.
Law No. 5464 requires card issuing organizations to keep systems continuously open for notices, requests, complaints, and objections relating to proper and safe card use. The same law also requires card issuers to provide transaction records within a reasonable period, up to 30 days, or 60 days for foreign transactions, if requested by the cardholder.
This means the bank cannot treat the consumer’s complaint as an informal customer service issue. It must have an operational mechanism for cardholder objections and must respond through legally regulated channels.
Lost or Stolen Card: Cardholder Liability
One of the most important protections under Turkish law concerns lost or stolen cards. Article 12 of Law No. 5464 states that if the card or card information is lost or stolen, the cardholder is liable for damages arising from unlawful use within the 24 hours before notification, but only up to 150 New Turkish Liras. This limitation does not apply if the cardholder fails to notify the bank or if the unlawful use is caused by the cardholder’s gross negligence or intentional misconduct.
In practical terms, the consumer should notify the bank as soon as possible. The 24-hour period is important, but delay can be risky. If the bank argues that the consumer failed to notify, acted with gross negligence, shared the password, ignored security warnings, or enabled fraud by intentional conduct, the dispute may become more difficult.
Consumers should record the date, hour, and channel of notification. If the report is made by phone, the consumer should request a reference number. If possible, the report should also be followed by a written objection through mobile banking, internet banking, email, branch application, or registered communication.
What Counts as Gross Negligence?
Gross negligence is not every ordinary mistake. It generally refers to a serious lack of care that makes fraud possible in an obvious way. Examples may include writing the card password on the card, sharing SMS verification codes with unknown persons, giving card details to a clearly fraudulent caller, ignoring repeated bank warnings, or failing to notify the bank after clearly discovering that the card was lost.
Banks may sometimes rely on “gross negligence” too broadly. A consumer being deceived by a sophisticated fraud scheme does not automatically prove gross negligence. Each case must be evaluated according to the bank’s security systems, warnings, authentication methods, transaction pattern, consumer behavior, and available evidence.
The bank should not reject every unauthorized transaction by simply stating “the password was used” or “the transaction was 3D Secure.” These facts may be relevant, but they do not automatically resolve all disputes. The full circumstances must be examined.
Spending Objection and Chargeback
In Turkey, consumers commonly use the phrase harcama itirazı, meaning spending objection. In international card practice, this may correspond to chargeback or reverse payment procedures. Chargeback is not the same as a lawsuit. It is a card-system dispute mechanism initiated through the card-issuing bank.
The BKM merchant guide explains that cardholders may submit transaction objections to their card-issuing banks, that the cardholder’s bank transmits the objection to the merchant’s bank, and that this interbank transmission is known as chargeback or reverse charge. The guide also states that merchants must examine objections received through their banks and provide necessary information and documents within the required period.
Chargeback may be used not only for pure fraud but also for non-delivery, duplicate charges, cancelled transactions, defective or counterfeit products, wrong amount, or services not provided. The consumer should explain the exact reason for objection and attach evidence.
Legal Time Limits for Credit Card Objections
Law No. 5464 states that card issuers must respond to cardholder complaints and objections, with reasons, within 20 days after application. It also states that credit card transactions may be objected to by applying to the card issuer within 10 days after the last payment date; the cardholder must clearly identify the statement items objected to and state the reasons. Importantly, even if the statement becomes final because no objection was made within that period, general legal action rights are not lost.
This is very important. Consumers should not wait. The safest approach is to object immediately after noticing the suspicious transaction. A late objection may make the banking process harder, but it does not necessarily eliminate all legal remedies.
A strong objection should include the transaction date, amount, merchant name, card number’s last four digits, statement period, reason for objection, and requested remedy.
Unauthorized Charge or Merchant Dispute?
Consumers should distinguish between two main categories.
The first category is unauthorized use. The consumer did not approve the transaction at all. This includes stolen card use, card data theft, phishing, fraudulent online payments, or transactions made after the card was lost.
The second category is authorized but disputed transaction. The consumer approved payment but later disputes the charge because the product was not delivered, the service was not provided, the amount was wrong, the subscription was cancelled, the goods were defective, or the merchant misled the consumer.
This distinction matters because evidence and legal arguments differ. For unauthorized use, the focus is consent, authentication, card security, notice to the bank, and possible fraud. For merchant disputes, the focus is contract, delivery, cancellation, withdrawal, defective goods or services, and refund obligations.
Recurring Subscription Charges
Unauthorized credit card disputes often involve subscriptions. A consumer may sign up for a free trial, cancel a service, delete an app, or stop using a platform, but the merchant continues to charge the card. Sometimes the consumer never clearly approved renewal. Sometimes the cancellation process was hidden or ineffective.
In these cases, the consumer may have both a card dispute and a consumer law claim. If the charge was never authorized, it may be challenged as unauthorized. If the original subscription was authorized but renewal was unclear, the issue may involve unfair contract terms, misleading commercial practice, subscription cancellation rights, or lack of proper consent.
The consumer should preserve trial terms, subscription page screenshots, cancellation confirmation, emails, app store records, bank statements, and messages with the provider. Deleting an app is usually not enough; cancellation should be completed through the proper channel and documented.
Duplicate Charges and Wrong Amounts
Another common issue is duplicate charging. A consumer may pay once, but the merchant charges twice. Or the merchant may charge a higher amount than shown on the invoice or payment screen. These disputes are often easier to prove if the consumer has receipts, invoices, POS slips, order confirmations, and bank statements.
Under Law No. 5464, payment or commission claims against the cardholder must be clearly included in the card agreement, and the agreement cannot contain clauses that prejudice the cardholder’s rights or provide unilateral unfair benefits to the card issuer. Under Law No. 6502, all fees and expenses claimed from the consumer under consumer contracts must be disclosed, and proving that such information was given belongs to the party drafting the contract.
If the issue is a merchant charging the wrong amount, the consumer should first file a bank objection and also demand correction from the merchant in writing.
Non-Delivery and Online Purchase Problems
Credit card disputes also arise when a consumer pays online but never receives the goods or services. In this situation, the transaction may not be “unauthorized,” but the consumer may still have refund or chargeback rights because the merchant did not perform.
Law No. 6502 defines defective goods broadly and treats failure to deliver goods within the contractual period as non-compliant performance. If goods are defective, the consumer may rescind the contract, request price reduction, ask for free repair, or request replacement with a defect-free product; if the consumer chooses rescission or price reduction, the amount must be refunded immediately.
For online purchases, consumers should preserve order confirmations, product page screenshots, delivery promises, cargo tracking records, refund requests, seller messages, and bank statements. These documents support both chargeback and consumer law claims.
Merchant’s Use of Card Information
Merchants are subject to strict confidentiality obligations concerning card information. Law No. 5464 provides that merchants may not disclose, store, copy, reproduce, sell, purchase, or exchange card and cardholder information acquired through card use without prior written consent, except in legally permitted situations. Merchant acquirers must monitor compliance with these obligations, and card issuers must also keep personal data confidential and prevent unauthorized access.
This is important where a merchant stores card details and later charges the consumer without authorization. If the consumer did not approve storage or future payments, the merchant’s conduct may raise banking, consumer, data protection, and possibly criminal issues.
A consumer who suspects unauthorized storage or misuse of card information should request written explanation from the merchant and bank, block the card, file a spending objection, and consider further legal complaints depending on the facts.
What Evidence Should Consumers Collect?
Evidence is decisive in unauthorized credit card charge disputes. Consumers should collect:
Credit card statement, SMS transaction notification, mobile banking screenshot, disputed transaction details, bank objection form, bank response, merchant correspondence, invoice or receipt, POS slip, order confirmation, cancellation confirmation, delivery or non-delivery records, screenshots of subscription terms, police report if fraud is serious, and call center reference numbers.
For lost or stolen card cases, the consumer should document when the card was last used, when the loss was discovered, when the bank was notified, and what transactions occurred before and after notification.
For online fraud, the consumer should preserve website links, screenshots, email headers, fake messages, shipping records, and communication with the seller.
How to Write a Strong Spending Objection
A spending objection should be precise. It should not merely say “I object to this transaction.” It should explain why the charge is unauthorized or unlawful.
A practical structure is:
“I object to the transaction dated [date], in the amount of [amount], shown with merchant description [merchant name]. I did not authorize this transaction. I request immediate investigation, cancellation of the charge, refund of the amount, blocking of the card if necessary, and written response. I also request copies of transaction records, authentication logs, merchant information, and any documents relied upon by the bank.”
If the dispute is not pure fraud but non-delivery or defective service, the objection should say:
“I paid for [product/service] on [date], but the merchant failed to deliver/provide the service. I requested refund on [date], but no refund was made. I request chargeback/spending objection review and refund.”
Bank’s Response Obligation
For card-related complaints and objections, card issuing organizations must respond within 20 days with reasons. TBB’s Individual Customer Arbitration Panel guidance also states that for credit card-related applications, the bank’s response period is 20 days; if the dispute continues after the bank’s response, the consumer may apply to the Panel within 60 days from the response, and if the bank does not respond, the consumer may apply within the relevant 60-day period after the waiting period.
If the bank rejects the objection, the consumer should request the detailed basis of rejection. A generic response such as “the transaction was made with password” may not be enough in a complex fraud dispute. The consumer may ask for transaction details, authentication method, IP or device data where available, merchant response, and chargeback result.
Türkiye Bankalar Birliği Individual Customer Arbitration Panel
For disputes with banks, the Türkiye Bankalar Birliği Bireysel Müşteri Hakem Heyeti is an important alternative dispute mechanism. TBB states that only real persons can apply, that individual-content disputes must be involved, that the person must first apply to the bank in writing and obtain a bank response or confirmation document, and that applications already brought before courts, insurance arbitration, or Consumer Arbitration Committees are not accepted by the Panel.
TBB also states that the application form and information brochure are free; applications may be submitted by post, fax, or email if the signed form is scanned, and a fully electronic application may be made through the e-Government service. Required documents include the bank’s written response or confirmation, the consumer’s petition to the bank, and documents showing the disputed transactions.
The application must be concrete. TBB specifically warns that the request must be expressed clearly and specifically; merely saying “please remove my grievance” is not enough.
Consumer Arbitration Committees and Consumer Courts
If the dispute is against a seller, merchant, online platform, subscription provider, travel company, or service provider rather than only the bank, the consumer may need to use the ordinary consumer dispute route.
For 2026, disputes below TRY 186,000 fall within the jurisdiction of Provincial or District Consumer Arbitration Committees. The Ministry of Trade announced that this threshold applies from 1 January 2026.
If the claim is TRY 186,000 or more, or if the dispute requires court proceedings, mandatory mediation and Consumer Court litigation may be necessary. The correct route depends on whether the claim is against the bank, the merchant, or both.
For example, if the bank refuses a valid unauthorized-use claim, the bank dispute route is central. If the merchant charged after cancellation or failed to deliver goods, the consumer may also bring a consumer claim against the merchant.
BDDK Complaint Route
The Banking Regulation and Supervision Agency also provides an electronic complaint system. BDDK states that complaints submitted through its e-complaint system are forwarded to the relevant bank and then evaluated together with the bank’s response. BDDK’s contact page also explains that applications concerning refunds of fees, charges, expenses, and commissions should be directed to the Central Bank channel, while applications other than amount refund against supervised institutions can be submitted through BDDK’s electronic complaint system.
This route is especially relevant for supervisory or regulatory complaints. However, if the consumer seeks a direct monetary refund, the bank objection, TBB Panel, Consumer Arbitration Committee, or Consumer Court route may be more directly relevant depending on the facts.
Criminal Complaint in Fraud Cases
Some unauthorized credit card charges involve criminal conduct. Phishing, identity theft, card cloning, fake websites, malware, social engineering, or organized fraud may justify a criminal complaint. Filing a criminal complaint does not replace the bank objection process. Both should be pursued where appropriate.
The consumer should file the bank objection immediately and preserve evidence. If the incident involves fraud, a criminal complaint may support the factual record. The consumer should provide transaction details, phone numbers, bank messages, fake website screenshots, account information, and any communication with the fraudster.
Practical Advice for Consumers
Consumers should monitor card transactions regularly. SMS notifications and mobile banking alerts should be active. Unknown transactions should be challenged immediately. The card should be blocked if there is any suspicion of compromise.
Consumers should never share card passwords, mobile banking passwords, SMS verification codes, or 3D Secure codes. Banks do not ask for such information by phone or message. If a caller pressures the consumer by saying the account is at risk, the consumer should hang up and call the bank through official channels.
If a disputed charge appears, the consumer should act in this order: block the card if necessary, file a spending objection, request written confirmation, collect evidence, contact the merchant if relevant, follow the bank’s response period, and apply to TBB, Consumer Arbitration Committee, or court if the issue is not resolved.
Practical Advice for Banks and Merchants
Banks should treat unauthorized charge complaints as serious security and legal matters. They should investigate authentication records, merchant data, transaction patterns, fraud warnings, customer notification time, and whether the customer acted with gross negligence. Generic rejection letters create legal risk.
Merchants should not store card information without proper authorization. They should not charge consumers after cancellation, process recurring payments without clear consent, or use misleading subscription practices. If a chargeback is received, the merchant must respond with evidence through its bank within the required period.
Online platforms should provide clear payment screens, cancellation systems, refund records, and transaction evidence. Hidden subscriptions and unclear renewal practices often become card disputes.
Conclusion
Consumer rights against unauthorized credit card charges in Turkey are protected through banking law, consumer law, chargeback procedures, and formal dispute mechanisms. Law No. 5464 gives cardholders important protections, especially in lost or stolen card cases, while also requiring banks to maintain systems for complaints and objections and respond within legal periods. The cardholder’s liability for unlawful use within 24 hours before notification is limited by the statutory rule, unless notification is not made or the loss is caused by gross negligence or intentional conduct.
Consumers should act quickly. The bank should be notified immediately, the card should be blocked if needed, and a written spending objection should be filed. The objection should clearly identify the transaction, reason, evidence, and requested refund. If the bank rejects the claim, the consumer may apply to the Türkiye Bankalar Birliği Individual Customer Arbitration Panel after first applying to the bank, subject to the Panel’s procedural rules.
If the dispute concerns a merchant, seller, subscription provider, or online platform, Consumer Arbitration Committees or Consumer Courts may also be relevant. For 2026, consumer disputes below TRY 186,000 fall within the Consumer Arbitration Committee route.
Yanıt yok