Crypto Exchange Licensing in Turkey: Rules, Costs, and Restrictions for 2026

Trying to launch a crypto exchange in Turkey without a license is no longer just risky-it’s illegal. Since the regulatory framework solidified in early 2025, the landscape has shifted from a gray area of uncertainty to a strict, highly monitored environment. If you are an investor or a fintech founder looking at the Turkish market, you need to understand that the Capital Markets Board (CMB) now holds the keys to entry. The days of operating under the radar are over, especially after the massive crackdowns on unlicensed platforms in mid-2025.

This guide breaks down exactly what it takes to get licensed as a Crypto Asset Service Provider (CASP) in Turkey. We will cover the capital requirements, the operational hurdles, the costs involved, and the strict restrictions that define this unique market. Whether you are planning to incorporate locally or expand an existing international platform, these rules dictate your survival in one of the world’s most active crypto markets.

The Regulatory Framework: Who Is in Charge?

To navigate Turkish crypto law, you first need to know who is watching. The primary authority is the Capital Markets Board (CMB), also known by its Turkish acronym SPO. This body issues licenses and oversees the operational integrity of exchanges. However, they do not work alone. The Central Bank of Turkey (TCMB) plays a critical role in enforcing monetary policy, specifically the ban on using cryptocurrency for payments. Additionally, the Financial Crimes Investigation Board (MASAK) handles anti-money laundering (AML) enforcement, giving them the power to freeze accounts without prior court approval if suspicious activity is detected.

The foundation of this system was laid with two communiqués published in the Official Gazette on March 13, 2025. Communiqué I established the founding and operational principles for CASPs, while Communiqué II detailed the specific procedures for capital adequacy and compliance. These documents transformed Turkey into a jurisdiction with formal, albeit restrictive, crypto regulation. Unlike some countries that offer "sandbox" environments for experimentation, Turkey demands full compliance from day one.

Licensing Requirements: Capital and Structure

The barrier to entry in Turkey is financial and structural. You cannot simply register a sole proprietorship or a limited liability company and start trading. The regulations mandate that any entity seeking a CASP license must be established as a joint-stock company (Anonim Şirket). Furthermore, shares must be issued in cash and registered by name, ensuring clear ownership trails for regulators.

Here is where the real commitment comes in: minimum paid-in capital. For a standard crypto asset trading platform, you need a minimum of 150 million Turkish Lira (approximately $4.1 million USD as of mid-2025 rates). If you plan to offer custodial services-holding users' assets on their behalf-the requirement jumps significantly to 500 million TL (approximately $13.7 million USD). These figures are designed to filter out small operators and ensure that only well-capitalized entities can withstand market volatility and potential liabilities.

Beyond the money, the people matter. Founders, board members, and key management personnel must pass strict "fit-and-proper" tests. This includes checks for financial integrity, clean legal records, and professional competence. The CMB scrutinizes shareholder backgrounds thoroughly, meaning opaque corporate structures or owners with past regulatory violations will likely result in immediate rejection.

Ongoing Costs and Operational Fees

Getting the license is just the beginning. The ongoing cost of doing business in Turkey is structured to ensure continuous contribution to the state and regulatory bodies. While there is no single fixed "licensing fee" listed in the statutes, the operational tax burden is significant. Licensed crypto-asset trading platforms must pay an annual fee equal to 1% of their total income (excluding interest income) to the Capital Markets Board. Simultaneously, they must pay another 1% of total income to the Scientific and Technological Research Council of Türkiye (TUBITAK).

This creates a total annual fee burden of 2% of revenues. For a high-volume exchange, this is a substantial expense that must be factored into pricing models and profit forecasts. Additionally, you must invest heavily in compliance infrastructure. This isn't optional software; it's a mandatory operational layer. You need dedicated risk management teams, sophisticated price monitoring systems to detect wash trading or manipulation, and comprehensive transaction recording systems. These systems must capture even canceled and unexecuted transactions, providing regulators with a granular view of market activity.

AML/KYC Compliance: The MASAK Factor

If capital is the gatekeeper, Anti-Money Laundering (AML) and Know-Your-Customer (KYC) protocols are the daily reality. Turkey has implemented some of the strictest identity verification rules in the region. Under current regulations, CASPs must perform mandatory identity verification for all transactions exceeding 15,000 Turkish Lira (approximately $425 USD). This threshold is low enough to catch a vast majority of retail transactions.

The stakes for non-compliance are incredibly high. MASAK, the Financial Crimes Investigation Board, has the authority to freeze crypto wallets and linked bank accounts instantly if they suspect illicit activity. They do not need prior court approval for these freezes. This means that if your exchange fails to flag a suspicious pattern or lacks robust real-time reporting capabilities, your customers' funds could be locked up, and your license could be revoked. Real-time reporting to regulatory authorities is mandatory, requiring seamless integration between your trading engine and government monitoring systems.

Restrictions on Foreign Operators and Payments

One of the most misunderstood aspects of Turkish crypto regulation is the treatment of foreign entities. Turkey’s framework is notably restrictive regarding non-resident CASPs. International exchanges that do not hold a local Turkish license face severe limitations. They are restricted from actively marketing to Turkish residents and cannot maintain a physical presence within Turkish territory. Attempting to serve Turkish users through a foreign entity without local incorporation is considered a violation of local laws.

Furthermore, the prohibition on using cryptocurrency as a means of payment remains firmly in place. The Central Bank of Turkey (TCMB) banned merchants from accepting crypto for goods and services back in 2021, and this rule has not changed. Your exchange can facilitate the buying, selling, and swapping of digital assets, but it cannot function as a payment processor for everyday commerce. Any attempt to bridge crypto directly to fiat for merchant settlements runs afoul of TCMB regulations.

Market Reality: Enforcement and Competition

The theory of regulation meets harsh reality in enforcement. In July 2025, Turkish authorities took decisive action against unlicensed platforms, blocking access to 46 major exchanges, including popular decentralized options like PancakeSwap. This move drastically reduced competition, funneling users toward licensed domestic operators. While this sounds like a boon for licensed exchanges, it also increased scrutiny. With fewer places for users to go, the pressure on licensed entities to maintain impeccable compliance standards has intensified.

The political dimension should not be ignored either. The detention of ICRYPEX founder in July 2025, amid allegations linking crypto funding to political dissent, highlighted the intersection of financial regulation and national security concerns. For international applicants, this underscores the importance of having local legal counsel who understands not just the letter of the law, but the broader regulatory context. English-speaking legal support is crucial, as specialized law firms provide bilingual submission documents and facilitate communication with regulators throughout the complex application process.

Timeline and Preparation Strategy

Do not expect a quick turnaround. Legal practitioners report that preparing a comprehensive application typically takes 6 to 12 months. This timeline includes corporate restructuring to meet joint-stock requirements, developing compliant technical infrastructure, and compiling extensive documentation for the CMB. For international applicants, the learning curve is steep. You need to master Turkish corporate law, CMB regulatory expectations, and MASAK compliance protocols simultaneously.

Your strategy should focus on three pillars: adequate capitalization, robust compliance technology, and experienced local leadership. Applications that demonstrate strong internal control policies, cybersecurity measures, and audit frameworks have a higher probability of success. While the CMB does not publish acceptance rates, industry experts suggest that well-prepared applications with transparent ownership structures and sufficient liquidity are viewed favorably.