Turkey

Identity Verification & KYC For Turkey

Q: What are the KYC requirements in Turkey?

Turkish KYC requirements are set by Law No. 5549 and MASAK. All obliged entities must verify customer identity, conduct CDD, apply risk-based monitoring and retain records for eight years. KYC Turkey compliance requires documents including TC Kimlik Kartı, Turkish national ID alternatives, passport and foreigner ID card for non-citizens. eKYC Turkey solutions using NFC chip verification accelerate identity verification while meeting BDDK and MASAK standards.

Q: What is MASAK and what does AML compliance Turkey require?

MASAK is Turkey's Financial Intelligence Unit under the Ministry of Treasury and Finance. AML compliance Turkey obligations require financial institutions to conduct CDD, submit suspicious transaction reports via the MASAK Online system, maintain eight-year records and appoint a compliance officer at senior management level. MASAK compliance applies to banks, payment providers, crypto platforms and all obliged entities.

Q: How does KVKK compliance affect KYC data handling in Turkey?

KVKK (Law No. 6698) requires all data controllers to register with VERBIS before processing personal data. KYC data is classified as personal data and must be encrypted, purpose-limited and subject to data subject access rights. KVKK compliance means cross-border transfers require equivalent protection standards. Turkish identity verification Turkey must align with both KVKK data protection and AML compliance requirements.

Q: What documents are accepted for Turkish national ID KYC verification?

Primary documents for Turkish national ID KYC include TC Kimlik Kartı and Turkish Passport. Secondary documents include Sürücü Belgesi, Yabancı Kimlik Kartı and İkamet İzni for foreign nationals. Chip-based national ID cards with NFC receive preference. eKYC Turkey solutions support all 26 Turkish document types including biometric verification.

Q: What are the KYB requirements for verifying Turkish businesses?

Turkish KYB verification requires Ticaret Sicil Gazetesi, Faaliyet Belgesi and Articles of Association for entity identity. Tax identity uses VKN. UBO identification is mandatory under Law No. 5549, requiring Ortaklık Yapısı, Pay Defteri and Gerçek Faydalanıcı Bildirimi documentation. KYB Turkey compliance includes verification of all beneficial owners at 25% ownership thresholds.

Q: How does Shufti support crypto KYC Turkey compliance under CMB regulations?

Crypto KYC Turkey compliance is governed by CMB Law No. 7518, which requires platforms to obtain Capital Markets Board licences by June 2026. Shufti provides full KYC onboarding, jurisdiction verification for Travel Rule compliance, sanctions screening and eight-year record retention. Our crypto KYC Turkey solutions support CMB licence applications and post-licensing MASAK reporting obligations.

Q: What is the data retention requirement for AML records in Turkey?

Law No. 5549 mandates eight-year retention of all AML records from the end of the business relationship. This covers KYC files, transaction records and STR documentation. AML compliance Turkey requires automated retention schedules and maintains audit-ready records for MASAK examinations and regulatory inspections.

Q: How does Turkey's FATF membership affect AML compliance Turkey obligations?

Turkey has been a FATF member since 1991 and was removed from the grey list in June 2024 after addressing compliance gaps. Post-greylisting, MASAK and BDDK enforce heightened AML standards. FATF's 40 Recommendations guide Turkish AML policy and international correspondent banking expectations. AML compliance Turkey now requires demonstrable controls exceeding minimum standards.

Q: What are the penalties for non-compliance with Turkish KYC and AML regulations?

Non-compliance with Turkish KYC and Law No. 5549 AML obligations results in administrative penalties and potential criminal sanctions. MASAK compliance violations attract fines; failure to maintain eight-year records, conduct proper KYC Turkey verification, or submit STRs results in enforcement action. Crypto platforms failing to obtain CMB licences by June 2026 face liquidation. Enhanced penalties apply to repeat violations.

Shufti automates KYC, KYB and AML compliance for Turkish financial institutions, aligning identity verification workflows with Law No. 5549, MASAK and BDDK requirements.

Operational performance for Turkey KYC

Our Numbers Speak Volumes

99.25%

Pass rates

< 5 sec

Verification
Time

95%

EIDV
Coverage

Evidence-Ready Checks Across People & Businesses

Individual Documents We Verify

Shufti supports 26 Turkish document types.

View All Supported Documents

Turkish National ID Card

Chip-based biometric ID for Turkish citizens. NFC microchip stores facial photo and fingerprints. Primary document for KYC onboarding in regulated financial services.

Turkish Passport

Biometric ePassport with ICAO-compliant machine-readable zone. Accepted for cross-border KYC onboarding and residency confirmation across regulated sectors.

Turkish Driver's Licence

Photo-bearing secondary identity document issued by traffic authorities. Accepted for KYC verification and supports address confirmation for residency checks.

Foreigner ID Card

Issued to foreign nationals legally resident in Turkey. Assigned unique 11-digit YKN number. Primary document for non-citizens accessing regulated financial services.

Business Entity Identity

Trade Registry Gazette

Official publication of company registration, formation and corporate changes. Primary source for verifying entity identity, ownership and legal standing in Turkey.

Certificate of Activity

Issued by Turkish municipal authorities or chambers of commerce. Confirms active business status and sector classification for KYB verification purposes.

Articles of Association

Corporate constitution filed with the Turkish Trade Registry. Establishes governance structure, shareholder rights and management authority for KYB assessment.

Business Tax Identity

Tax ID Number

Unique 10-digit tax ID assigned by the Turkish Revenue Administration upon business registration. Required for all regulated transactions and tax compliance reporting.

Tax Plate

Official tax registration certificate displayed at business premises. Confirms current tax compliance status and registered business address for KYB evidence.

Ownership & Control (UBO)

Ownership Structure

Documentation of all shareholders and equity distribution. Required for beneficial ownership analysis and UBO identification under Law No. 5549 obligations.

Shareholder Register

Official register maintained by the company recording share ownership and transfer history. Primary source for establishing current and historical ownership structure.

UBO Declaration

Mandatory declaration identifying all beneficial owners under Law No. 5549. Thresholds at 25% ownership. Filed with the Turkish Trade Registry for MASAK compliance.

Languages We Cover

Turkish Latin Script Processing

All Turkish identity documents use Latin script with special characters: ç, ğ, ı, ö, ş, ü. Shufti's OCR engine handles Turkish-specific characters accurately without loss.

Name Matching and Diacritic Controls

Turkish names include diacritics that vary in transliteration. Shufti applies fuzzy matching across diacritic variants, alternate spellings and Latin-only approximations.

Cross-Document Evidence Consistency

Identity confirmed consistently across national ID, passport, utility bills and business documents. Discrepancies in name variants or address data flagged for compliance review.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer TC Kimlik Kartı Re-Submissions

NFC chip verification and biometric matching reduce manual re-captures for Turkey's primary national ID card.

MASAK-Ready Audit Trails

Every KYC decision, document scan and screening result logged with timestamp, supporting MASAK compliance examinations.

Turkish Name Matching Accuracy

Diacritic-aware fuzzy matching resolves ç, ğ, ı, ö, ş, ü variants; reduces false declines from transliteration mismatches.

One Workflow for KYC, KYB and AML

BDDK banking checks, MASAK screening and KVKK data obligations managed in one back office without separate integrations.

Turkish National ID KYC Entry Point

TC Kimlik Kartı is the primary entry point for identity verification; passport and driver's licence accepted as fallback.

Enterprise-grade compliance infrastructure

Turkey IDV/KYC Challenges

Dual ID Standard Friction

Legacy Nüfus Cüzdanı and new chip-based TC Kimlik Kartı both remain valid. Verification logic must handle both without rejecting genuine users.

Crypto KYC Compliance Race

CMB Law No. 7518 requires crypto platforms to obtain licences by June 2026. Platforms must build KYC and AML infrastructure at speed to meet the deadline.

PEP Screening Complexity

Turkey's political class spans national, provincial and municipal tiers with frequent cabinet reshuffles. PEP databases require continuous updating.

Post-Greylisting Scrutiny

Turkey exited the FATF grey list in June 2024. MASAK and BDDK now enforce heightened standards. International correspondent banks demand verifiable AML evidence.

Shufti’s IDV/KYC Solutions for Turkey

KYC Solutions

Face Verification

Biometric facial matching compares live selfie to TC Kimlik Kartı chip data or passport photo. Liveness detection blocks spoofing attempts common in Turkish digital onboarding flows.

Age Verification

Selfie-based age estimation provides instant age assessment without document submission. Document verification via Turkish national ID or passport activates as fallback when age confirmation is required.

Address Verification

Shufti can verify any address-bearing document. Turkish addresses confirmed against bank statements from Ziraat Bankası, Türkiye İş Bankası and Garanti BBVA, plus utility bills from TEDAŞ and Türk Telekom.

Document Verification

Supports 26+ Turkish document types including TC Kimlik Kartı, Pasaport and Sürücü Belgesi. NFC chip authentication and MRZ extraction validate document authenticity and extract data accurately.

KYB Solutions

Business Verification

Turkish companies verified via Ticaret Sicil Gazetesi, Faaliyet Belgesi and VKN cross-reference. Director and beneficial owner identification meets Law No. 5549 UBO obligations for MASAK compliance.

Enhanced Due Diligence (EDD)

Structured EDD for high-risk Turkish entities: crypto platforms, money service businesses and politically connected companies. Evidence packages organised for MASAK examination and BDDK audit readiness.

AML Screening

Business AML Screening

Entities and controllers screened against MASAK sanctions list, UN Security Council designations, EU sanctions and OFAC SDN. Covers directors, shareholders and UBOs as required by Turkish AML obligations.

Transaction Screening

Ongoing monitoring for Turkish payment flows, crypto transactions and cross-border transfers. Flags patterns consistent with MASAK suspicious transaction report triggers and enforces Travel Rule requirements.

REGULATORY ALIGNMENT

Built to Fit Turkey's Compliance Landscape

Banking Regulation and Supervision Agency (BDDK)

Regulates Turkish banks and credit institutions; sets KYC standards for licensed entities. Shufti's audit trails and KYC workflows support BDDK licensing and CDD obligations.

Capital Markets Board (SPK / CMB)

Oversees Turkish capital markets, securities and crypto asset service providers. Shufti supports CMB Law No. 7518 KYC compliance for platforms seeking licences by June 2026.

Financial Crimes Investigation Board (MASAK)

Turkey's FIU; processes STRs and conducts AML compliance examinations under Law No. 5549. Shufti's screening logs and STR-ready records support MASAK reporting obligations.

Personal Data Protection Authority (KVKK)

Enforces Law No. 6698; maintains the VERBIS data controller registry and investigates complaints. Shufti's encryption and retention controls align with KVKK compliance mandates.

Central Bank of the Republic of Türkiye (TCMB)

Manages Turkish monetary policy, exchange rates and payment system oversight. Shufti enables compliant identity verification for TCMB-regulated payment operators.

Ministry of Treasury and Finance (HMB)

Sets national fiscal policy; administers MASAK and the AML/CFT regulatory framework. Shufti's tools support HMB-directed AML enforcement and government-mandated KYC standards.

Information Technologies and Communication Authority (BTK)

Regulates Turkish telecoms, internet services, cybersecurity and electronic signatures. Shufti meets BTK cybersecurity standards; e-signature aligns with Turkish digital law.

Deployment Choice

No major cloud provider operates a full in-country region in Turkey as of 2026. Regulated entities deploy via EU-based cloud regions or on-premise Turkish data centres.

Regulatory Alignment

Aligned to KVKK Law No. 6698 data protection principles and Law No. 5549 AML recordkeeping obligations.

Retention controls

Configurable retention and purge settings aligned to the Law No. 5549 eight-year minimum recordkeeping obligation.

Encryption posture

Strong encryption applied to personal and financial data in transit and at rest in line with KVKK technical security requirements.

Data Controls & Privacy for Turkey

BUILT FOR COMPLIANCE TEAMS

Turkey AML Sources That Strengthen Decision

Grand National Assembly of Turkey

Republic of Turkey Ministry of Treasury and Finance - TF Current List

Turkey Competition Authority (TRCA)

Anadolu Ajansı

Anadolu Agency

Hurriyet

Sabah

Grand National Assembly of Turkey

Republic of Turkey Ministry of Treasury and Finance - TF Current List

Turkey Competition Authority (TRCA)

Anadolu Ajansı

Anadolu Agency

Hurriyet

Sabah

Grand National Assembly of Turkey

Republic of Turkey Ministry of Treasury and Finance - TF Current List

Turkey Competition Authority (TRCA)

Anadolu Ajansı

Anadolu Agency

Hurriyet

Sabah

Grand National Assembly of Turkey

Republic of Turkey Ministry of Treasury and Finance - TF Current List

Turkey Competition Authority (TRCA)

Frequently Asked Questions

What are the KYC requirements in Turkey?

Turkish KYC requirements are set by Law No. 5549 and MASAK. All obliged entities must verify customer identity, conduct CDD, apply risk-based monitoring and retain records for eight years. KYC Turkey compliance requires documents including TC Kimlik Kartı, Turkish national ID alternatives, passport and foreigner ID card for non-citizens. eKYC Turkey solutions using NFC chip verification accelerate identity verification while meeting BDDK and MASAK standards.

What is MASAK and what does AML compliance Turkey require?

MASAK is Turkey's Financial Intelligence Unit under the Ministry of Treasury and Finance. AML compliance Turkey obligations require financial institutions to conduct CDD, submit suspicious transaction reports via the MASAK Online system, maintain eight-year records and appoint a compliance officer at senior management level. MASAK compliance applies to banks, payment providers, crypto platforms and all obliged entities.

How does KVKK compliance affect KYC data handling in Turkey?

KVKK (Law No. 6698) requires all data controllers to register with VERBIS before processing personal data. KYC data is classified as personal data and must be encrypted, purpose-limited and subject to data subject access rights. KVKK compliance means cross-border transfers require equivalent protection standards. Turkish identity verification Turkey must align with both KVKK data protection and AML compliance requirements.

What documents are accepted for Turkish national ID KYC verification?

Primary documents for Turkish national ID KYC include TC Kimlik Kartı and Turkish Passport. Secondary documents include Sürücü Belgesi, Yabancı Kimlik Kartı and İkamet İzni for foreign nationals. Chip-based national ID cards with NFC receive preference. eKYC Turkey solutions support all 26 Turkish document types including biometric verification.

What are the KYB requirements for verifying Turkish businesses?

Turkish KYB verification requires Ticaret Sicil Gazetesi, Faaliyet Belgesi and Articles of Association for entity identity. Tax identity uses VKN. UBO identification is mandatory under Law No. 5549, requiring Ortaklık Yapısı, Pay Defteri and Gerçek Faydalanıcı Bildirimi documentation. KYB Turkey compliance includes verification of all beneficial owners at 25% ownership thresholds.

How does Shufti support crypto KYC Turkey compliance under CMB regulations?

Crypto KYC Turkey compliance is governed by CMB Law No. 7518, which requires platforms to obtain Capital Markets Board licences by June 2026. Shufti provides full KYC onboarding, jurisdiction verification for Travel Rule compliance, sanctions screening and eight-year record retention. Our crypto KYC Turkey solutions support CMB licence applications and post-licensing MASAK reporting obligations.

What is the data retention requirement for AML records in Turkey?

Law No. 5549 mandates eight-year retention of all AML records from the end of the business relationship. This covers KYC files, transaction records and STR documentation. AML compliance Turkey requires automated retention schedules and maintains audit-ready records for MASAK examinations and regulatory inspections.

How does Turkey's FATF membership affect AML compliance Turkey obligations?

Turkey has been a FATF member since 1991 and was removed from the grey list in June 2024 after addressing compliance gaps. Post-greylisting, MASAK and BDDK enforce heightened AML standards. FATF's 40 Recommendations guide Turkish AML policy and international correspondent banking expectations. AML compliance Turkey now requires demonstrable controls exceeding minimum standards.

What are the penalties for non-compliance with Turkish KYC and AML regulations?

Non-compliance with Turkish KYC and Law No. 5549 AML obligations results in administrative penalties and potential criminal sanctions. MASAK compliance violations attract fines; failure to maintain eight-year records, conduct proper KYC Turkey verification, or submit STRs results in enforcement action. Crypto platforms failing to obtain CMB licences by June 2026 face liquidation. Enhanced penalties apply to repeat violations.

Build a Turkey-ready KYC, KYB & AML programme with Shufti

Check Pricing Request Demo

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in Turkey

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now

Build a Trusted, Verified Workforce

Screen freelancers and drivers at scale. Verify residency and reduce onboarding friction while maintaining trust between users.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Reduce fraud without blocking growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes and risk-led enforcement actions.

Learn More Try Now