Turkey Crypto Regulation 2026: CMB VASP Licensing & Compliance
Turkey enacted its landmark Law No. 7518 in July 2024, establishing the Capital Markets Board (CMB/SPK) as the competent authority for crypto asset service providers. With 16M+ users — the highest crypto penetration rate in Europe and MENA — Turkey represents one of the world's most significant regulated crypto markets.
CMB/SPK Regulatory Framework — Law No. 7518 (2024)
Turkey's crypto regulatory environment was transformed by the enactment of Law No. 7518 in July 2024, which amended the Capital Markets Law (Law No. 6362) to incorporate a complete framework for crypto asset service providers. This legislation followed years of consultations and was partly driven by Turkey's placement on the FATF Grey List in 2021 (from which Turkey exited in June 2024 after implementing the required reforms, including the crypto licensing framework).
The Capital Markets Board of Turkey (CMB, or SPK — Sermaye Piyasası Kurulu in Turkish) is the competent authority for all crypto asset service providers. The CMB has broad powers to authorise, supervise, investigate, and enforce against VASPs operating in Turkey or targeting Turkish customers. The CMB's Secondary Regulations, published after Law No. 7518, set out the detailed requirements for VASP licensing, including capital requirements, operational standards, and ongoing obligations.
Who needs a CMB licence: any company providing crypto asset services in Turkey, including crypto exchanges, OTC desks, custody providers, crypto transfer services, and crypto advisory services, must obtain CMB authorisation. Providing these services without a CMB licence is a criminal offence under the amended Capital Markets Law, with penalties including imprisonment and fines.
FATF exit: Turkey exited the FATF Grey List in June 2024, directly linked to the passage of Law No. 7518. This significantly improves Turkey's correspondent banking relationships and makes the CMB licence more internationally credible.
VASP Licensing Requirements — Capital & Compliance
The CMB VASP licence requires applicants to meet substantial financial and operational requirements. Under CMB Communiqué III-35/B.2, minimum founding capital is TRY 150 million for a crypto asset trading platform and TRY 500 million for a custodian, paid in full in cash, and the CMB can raise both amounts each year in line with the official revaluation rate. Lira depreciation makes the hard-currency cost of this capital a planning item in its own right.
Travel Rule & AML — MASAK Compliance
Turkey's Financial Crimes Investigation Board (MASAK — Mali Suçları Araştırma Kurulu) supervises AML/CFT compliance for all financial institutions including CMB-licensed VASPs. MASAK has been substantially strengthened as part of Turkey's FATF action plan, with expanded powers to investigate, supervise, and sanction non-compliant entities.
The Travel Rule in Turkey requires VASPs to collect and transmit originator and beneficiary information for crypto transfers above TRY 15,000 (subject to regulatory adjustment). The information transmission must include: full legal name, account number or wallet address, national identification number (T.C. Kimlik No for Turkish nationals), and transaction reference. VASPs must maintain systems capable of real-time Travel Rule compliance across both outgoing and incoming transfers.
MASAK-specific obligations for Turkish VASPs include: filing Suspicious Transaction Reports (STRs) within prescribed timeframes; maintaining transaction records for minimum eight years; screening all customers and transactions against UN Security Council lists, EU restrictive measures lists, and Turkey's own proscribed persons list (maintained by MASAK); reporting any transactions linked to Turkey's designated terrorist organisations or persons.
Crypto Taxation in Turkey — 0% CGT for Individuals
Turkey offers one of the most favourable individual crypto tax environments in Europe and MENA: as of 2026, individual investors pay 0% capital gains tax on profits from crypto asset disposals. This policy has contributed to Turkey's exceptionally high retail crypto adoption and makes Turkey particularly attractive as a market for retail-focused crypto platforms.
The Turkish government has periodically discussed introducing a withholding tax on crypto transactions — proposals have included rates from 0.03% to 0.1% on transaction values — but as of 2026 no withholding tax had been enacted.
For corporate entities (Turkish A.Ş. companies), crypto trading profits are treated as ordinary business income and subject to the standard corporate income tax rate of 25%. For VASP-licensed exchanges, fee income from crypto trading is also subject to 25% CIT. VAT treatment of crypto services remains an area where official guidance is evolving, with exchange services generally treated as VAT-exempt financial transactions under the Turkish Value Added Tax Law.
Banking & Payment Infrastructure — Local Access
Banking access for CMB-licensed VASPs in Turkey is significantly better than in most emerging markets, with several major Turkish banks having established relationships with regulated crypto exchanges. The CMB licensing framework provides the regulatory basis for banks to extend accounts and payment services to crypto businesses, reducing the informal banking uncertainty that plagued the sector prior to 2024.
Major Turkish banks including Garanti BBVA, İş Bankası, and Yapı Kredi have been reported to provide banking services to compliant, CMB-licensed VASPs. The Turkish Interbank Card Center (BKM) and Turkey's instant payment system (FAST) provide efficient TRY settlement infrastructure. For TRY/crypto on-ramp and off-ramp services, partnerships with Turkish banks are essential and achievable with full CMB authorisation.
For international settlements and hard-currency treasury management, CMB-licensed VASPs typically maintain accounts at European or UAE banks. Turkey's foreign exchange regulations (enforced by the Central Bank of Turkey — TCMB) require attention: large outbound transfers may trigger reporting obligations, and companies must comply with export proceeds repatriation rules where applicable.
Turkey vs EU / UAE — Licensing Comparison
| Factor | Turkey (CMB) | EU (MiCA CASP) | UAE (VARA) |
|---|---|---|---|
| User base | 16M+ (highest penetration) | Varies by member state | ~1M (MENA focus) |
| Min. capital | TRY 150M (platform) | EUR 150K–EUR 5M | AED 300K–5M+ |
| CGT (individuals) | 0% | Varies (0–28%) | 0% |
| Timeline | 6–12 months | 6–18 months (varies) | 4–12 months |
| Banking access | Good (local banks) | Excellent (EU banks) | Good (UAE banks) |
| Crypto trading volumes | Very high (top 5 global) | High across EU | Growing rapidly |
| Currency risk | High (TRY volatility) | Low (EUR) | Low (AED-USD peg) |
Turkey's CMB VASP Licensing Requirements
Turkey Crypto Sector Compliance Adoption Rates (2026)
Frequently Asked Questions
Turkey CMB VASP Licence
Turkish A.Ş. incorporation, CMB application management, MASAK AML compliance, and local management provision.
Free Consultation →Practical Licensing Insight
- Application success rates vary significantly by jurisdiction — well-prepared applications with complete documentation have 2-3x higher approval rates.
- Budget 20-30% above the published government fees for legal support, compliance setup, and local representation.
- Banking access is typically the longest lead-time item — start bank due diligence in parallel with the licence application.
Based on CryptoLicenses.net consulting data, 2024-2026
Ready to Get Licensed?
Tell us about your project and we'll identify the right jurisdiction, outline the requirements, and give you a realistic cost estimate — at no charge.
- 🇨🇭 Swiss-registered firm, Zug
- ⚡ Response within a few hours
- 🔒 Strictly confidential
- ✓ 80+ jurisdictions covered