CMB/SPK Regulatory Framework — Law No. 7518 (2024)
Turkey's crypto regulatory landscape was transformed by the enactment of Law No. 7518 in July 2024, which amended the Capital Markets Law (Law No. 6362) to incorporate a comprehensive framework for crypto asset service providers. This legislation followed years of consultations and was partly driven by Turkey's placement on the FATF Grey List in 2021 (from which Turkey exited in June 2024 after implementing the required reforms, including the crypto licensing framework).
The Capital Markets Board of Turkey (CMB, or SPK — Sermaye Piyasası Kurulu in Turkish) is the competent authority for all crypto asset service providers. The CMB has broad powers to authorise, supervise, investigate, and enforce against VASPs operating in Turkey or targeting Turkish customers. The CMB's Secondary Regulations, published after Law No. 7518, set out the detailed requirements for VASP licensing, including capital requirements, operational standards, and ongoing obligations.
Who needs a CMB licence: any company providing crypto asset services in Turkey, including crypto exchanges, OTC desks, custody providers, crypto transfer services, and crypto advisory services, must obtain CMB authorisation. Providing these services without a CMB licence is a criminal offence under the amended Capital Markets Law, with penalties including imprisonment and fines.
FATF exit: Turkey exited the FATF Grey List in June 2024, directly linked to the passage of Law No. 7518. This significantly improves Turkey's correspondent banking relationships and makes the CMB licence more internationally credible.
VASP Licensing Requirements — Capital & Compliance
The CMB VASP licence requires applicants to meet substantial financial and operational requirements. The minimum paid-in capital requirement is TRY 50 million — a figure that, given Turkish lira volatility, requires careful planning in hard-currency terms. At typical 2024-2026 exchange rates this represents approximately EUR 1.2–1.6 million, but applicants should budget conservatively given TRY depreciation trends.
Travel Rule & AML — MASAK Compliance
Turkey's Financial Crimes Investigation Board (MASAK — Mali Suçları Araştırma Kurulu) supervises AML/CFT compliance for all financial institutions including CMB-licensed VASPs. MASAK has been substantially strengthened as part of Turkey's FATF action plan, with expanded powers to investigate, supervise, and sanction non-compliant entities.
The Travel Rule in Turkey requires VASPs to collect and transmit originator and beneficiary information for crypto transfers above TRY 15,000 (subject to regulatory adjustment). The information transmission must include: full legal name, account number or wallet address, national identification number (T.C. Kimlik No for Turkish nationals), and transaction reference. VASPs must maintain systems capable of real-time Travel Rule compliance across both outgoing and incoming transfers.
MASAK-specific obligations for Turkish VASPs include: filing Suspicious Transaction Reports (STRs) within prescribed timeframes; maintaining transaction records for minimum eight years; screening all customers and transactions against UN Security Council lists, EU restrictive measures lists, and Turkey's own proscribed persons list (maintained by MASAK); reporting any transactions linked to Turkey's designated terrorist organisations or persons.
Crypto Taxation in Turkey — 0% CGT for Individuals
Turkey offers one of the most favourable individual crypto tax environments in Europe and MENA: as of 2026, individual investors pay 0% capital gains tax on profits from crypto asset disposals. This policy has contributed to Turkey's exceptionally high retail crypto adoption and makes Turkey particularly attractive as a market for retail-focused crypto platforms.
The Turkish government has periodically discussed introducing a withholding tax on crypto transactions — proposals have included rates from 0.03% to 0.1% on transaction values — but as of 2026 no withholding tax had been enacted. Applicants should monitor Turkish fiscal legislation as this may change.
For corporate entities (Turkish A.Ş. companies), crypto trading profits are treated as ordinary business income and subject to the standard corporate income tax rate of 25%. For VASP-licensed exchanges, fee income from crypto trading is also subject to 25% CIT. VAT treatment of crypto services remains an area where official guidance is evolving, with exchange services generally treated as VAT-exempt financial transactions under the Turkish Value Added Tax Law.
Banking & Payment Infrastructure — Local Access
Banking access for CMB-licensed VASPs in Turkey is significantly better than in most emerging markets, with several major Turkish banks having established relationships with regulated crypto exchanges. The CMB licensing framework provides the regulatory basis for banks to extend accounts and payment services to crypto businesses, reducing the informal banking uncertainty that plagued the sector prior to 2024.
Major Turkish banks including Garanti BBVA, İş Bankası, and Yapı Kredi have been reported to provide banking services to compliant, CMB-licensed VASPs. The Turkish Interbank Card Center (BKM) and Turkey's instant payment system (FAST) provide efficient TRY settlement infrastructure. For TRY/crypto on-ramp and off-ramp services, partnerships with Turkish banks are essential and achievable with full CMB authorisation.
For international settlements and hard-currency treasury management, CMB-licensed VASPs typically maintain accounts at European or UAE banks. Turkey's foreign exchange regulations (enforced by the Central Bank of Turkey — TCMB) require attention: large outbound transfers may trigger reporting obligations, and companies must comply with export proceeds repatriation rules where applicable.
Turkey vs EU / UAE — Licensing Comparison
| Factor | Turkey (CMB) | EU (MiCA CASP) | UAE (VARA) |
|---|---|---|---|
| User base | 16M+ (highest penetration) | Varies by member state | ~1M (MENA focus) |
| Min. capital | TRY 50M (~EUR 1.4M) | EUR 150K–EUR 5M | AED 300K–5M+ |
| CGT (individuals) | 0% | Varies (0–28%) | 0% |
| Timeline | 6–12 months | 6–18 months (varies) | 4–12 months |
| Banking access | Good (local banks) | Excellent (EU banks) | Good (UAE banks) |
| Crypto trading volumes | Very high (top 5 global) | High across EU | Growing rapidly |
| Currency risk | High (TRY volatility) | Low (EUR) | Low (AED-USD peg) |