Law on Crypto Assets
Turkey\'s first legislative regulation concerning crypto assets (the "Crypto Law") was published in the Official Gazette on 2 July 2025 and entered into force.
Below, we present a summary of the Crypto Law, which introduces new provisions to the Capital Markets Law. The full text of the Law can be accessed here, and a comparative text showing the amendments to the Capital Markets Law can be accessed here.
1. General Overview
The Crypto Law grants authority to the Capital Markets Board ("Board") regarding (a) crypto assets that confer rights specific to capital market instruments[1] and (b) the sale or distribution of crypto assets that are created through the development of distributed ledger technology or similar technological infrastructure and whose value is inseparable from such technology.
The Board\'s authority essentially consists of establishing the principles under which the purchase, sale, and distribution of the relevant crypto assets may be conducted through crypto platforms[2] without being subject to other provisions of the Capital Markets Law concerning capital market instruments, and supervising the operations of these platforms.
In other words, the Crypto Law does not regulate blockchain technology itself or, unlike the European Union\'s Markets in Crypto-Assets (MiCA) regulation, the entirety of crypto asset markets. Accordingly, crypto assets that do not possess the characteristics described above may fall outside the scope of the Crypto Law. However, such crypto assets may be subject to other legislation, and where crypto assets subject to other legislation and initially offered for sale subsequently become traded on crypto asset platforms, the relevant transactions shall fall within the Board\'s jurisdiction regardless of the nature of such crypto assets.
The Crypto Law provides for the procurement of technical reports from the Scientific and Technological Research Council of Turkey (TUBITAK) or other relevant institutions and organizations in order to determine the characteristics of crypto assets.
2. Issuances
The Crypto Law will enable the issuance of capital market instruments as crypto assets (i.e., tokenization), and the Board shall have the authority to establish the principles regarding the monitoring of such instruments by crypto asset service providers instead of the Central Securities Depository (CSD). However, the Board also has the authority to mandate integration between the records of crypto asset service providers and the CSD system.
The Board further has the authority to establish regulatory acts concerning capital market instruments issued as crypto assets, to adopt special and general decisions, and to impose measures and sanctions.
Additionally, as stated above, the Board has the authority to establish the principles under which crypto assets created through the development of distributed ledger technology or similar technological infrastructure, whose value is inseparable from such technology, may be sold or distributed through platforms.
Platforms shall be required to establish a written listing procedure concerning the determination of crypto assets to be traded on or initially sold or distributed through the platform, as well as the termination of trading thereof. The Board has the authority to establish the principles and rules regarding this procedure. In establishing these principles and rules, the Board may consult TUBITAK or other institutions it deems necessary and may include technical criteria relating to the technological characteristics of crypto assets.
The prices of crypto assets listed on platforms shall be freely determined. On the other hand, the provisions of the Capital Markets Law concerning market abuse shall apply to acts and transactions that cannot be explained by a reasonable economic justification and that are of a nature to disrupt the reliable, transparent, and stable functioning of transactions on the platform.
Pursuant to the Crypto Law, the principle is that crypto assets owned by platform customers shall be held in the customers\' own wallets[3]. Custody services for crypto assets that customers do not wish to hold in their own wallets shall be provided by (a) banks authorized under the regulations to be issued by the Board and approved by the Banking Regulation and Supervision Agency, or (b) other organizations authorized by the Board to provide crypto asset custody services, and it is mandatory for customer funds to be held in banks. The principle is that such funds held in banks shall be monitored in individual accounts opened on a customer-by-customer basis, separately from the relevant investment firm\'s own cash assets.
3. Crypto Asset Service Providers
Definitions
The Crypto Law defines crypto asset service providers as "platforms, custodians, and other organizations providing crypto services (e.g., initial sale, distribution) to be determined by the Board."
Platforms are the entities and marketplaces commonly known in the market as "exchanges." Crypto asset custody service is defined as "the custody and management of crypto assets belonging to platform customers, or the private keys providing transfer rights from the wallet related to such assets, or other custody services to be determined by the Board."
Operating License
Crypto asset service providers are required to obtain a license from the Board in order to be established and commence operations. Service providers may only carry out the activities to be determined by the Board within the scope of the license they have obtained. The Board is required to enact the secondary legislation concerning licenses within six months of the Crypto Law entering into force.
Entities conducting crypto asset service provider activities as of the date the Crypto Law enters into force are required to apply to the Board within one month of the effective date and submit a declaration stating that they will either (a) make the necessary applications to obtain an operating license by meeting the conditions to be stipulated in the secondary legislation to be enacted by the Board, or (b) adopt a liquidation resolution within three months without causing harm to the rights and interests of their customers, and will not accept new customers during the liquidation process. However, it is debatable how realistic and consistent with the constitutional principle of legal foreseeability this obligation to make such a choice is, when the conditions to be stipulated in the secondary legislation are not yet known.
Entities wishing to commence operations after the effective date of the Crypto Law are required to apply to the Board before commencing their activities and declare that they will make the necessary applications to obtain an operating license by meeting the conditions to be stipulated in the secondary legislation. Once the secondary legislation enters into force, it will no longer be possible for new entities to commence operations without first obtaining an operating license.
Crypto asset service providers shall be required to become members of the Turkish Capital Markets Association.
Establishment and Operating License Conditions
The shareholders and board members of crypto asset service providers shall be subject to stringent conditions. For example, such persons must (a) possess the necessary financial strength and the integrity and reputation required by their activities, (b) not be bankrupt, (c) not have been convicted of dishonourable offences, various financial crimes, or crimes against the state, (d) not have been sentenced to imprisonment for five years or more for an intentionally committed offence, (e) not have a final conviction for offences prescribed in the Capital Markets Law, and (f) not have a trading ban imposed for insider trading and market fraud. Natural persons holding at least 10% of the capital or voting rights of legal entity shareholders, as well as shareholders holding privileged shares granting the right to be represented on the board of directors regardless of such threshold, must also meet these conditions.
In order for crypto asset service providers to obtain establishment and operating licenses, their information systems and technological infrastructure must comply with the criteria to be determined by TUBITAK. These systems are subject to independent audit to be conducted by independent audit firms included in the list announced by the Board.
Additionally, Board approval is required for share transfers of crypto asset service providers.
Platforms are required to pay one percent of all revenues (excluding interest income) earned in the previous year to the Board and one percent to TUBITAK by the end of May each year.
In the event the Board determines that crypto asset service providers are unable to fulfill, or will be unable to fulfill in the short term, their cash payment and crypto asset delivery obligations, or independently thereof, that their financial structures are seriously deteriorating, or that their financial condition has weakened to the extent that it cannot meet their commitments, the Board has the authority to (a) demand the strengthening of their financial structures within a period not exceeding three months, or (b) without granting any time, temporarily suspend the service providers\' activities, revoke their operating licenses, and restrict or revoke the signature authorities of the managers and employees whose responsibility is established.
4. Liability and Penalties
Unauthorized Activities
Natural persons and authorized representatives of legal entities operating as crypto asset service providers without obtaining a license from the Board shall be sentenced to (a) imprisonment of three to five years and (b) a judicial fine of five thousand to ten thousand days.
The following activities by platforms established abroad shall also be deemed unauthorized crypto asset service provision: (a) conducting activities targeting persons resident in Turkey (e.g., opening a place of business in Turkey, creating a Turkish-language website, engaging in promotion and marketing activities through persons or institutions resident in Turkey), or (b) offering a prohibited activity relating to crypto assets under Board regulations to persons resident in Turkey. Crypto asset service providers established abroad are required to terminate their activities targeting persons resident in Turkey within three months of the Crypto Law entering into force.
Additionally, the activities of ATMs and similar electronic devices that enable customers to convert crypto assets to cash or cash to crypto assets and to carry out transfers of crypto assets must be terminated within three months of the Crypto Law entering into force.
Losses
Crypto asset service providers are liable for crypto asset losses arising from the operation of their information systems, cyber-attacks and information security breaches, as well as all conduct of their personnel. This liability falls within the scope of Article 71 of the Turkish Code of Obligations, which stipulates that "where damage arises from the activities of an enterprise that poses a significant danger, the enterprise owner and, if applicable, the operator shall be jointly and severally liable for such damage."
Capital Markets Offences
With respect to unlawful activities and transactions of crypto asset service providers, the provisions of the Capital Markets Law concerning (a) measures applicable to unlawful activities or transactions of capital market institutions, (b) measures applicable to unauthorized capital market activities, and (c) measures applicable to announcements, advertisements, and disclosures contrary to the law shall be applied. For example, in cases of unauthorized activities and advertisements conducted via the internet, the Board may order the removal of content or the blocking of access; advertisements and announcements made outside the internet in violation of the principles established by the Board may also be suspended and confiscated.
Embezzlement Offence
Board chairpersons, board members, and other personnel of crypto asset service providers who, in connection with their duties as crypto asset service providers, embezzle money, instruments or securities in lieu of money, other assets, or crypto assets that have been entrusted to them or for which they are responsible for protection, custody, and supervision, whether for their own benefit or for the benefit of third parties, shall (a) be sentenced to imprisonment of eight to fourteen years and a judicial fine of up to five thousand days, and (b) be required to compensate the losses of the crypto asset service provider. Furthermore, upon the Board\'s request, the court may order the personal bankruptcy of such persons (and, where the embezzlement offence is committed for the purpose of providing benefits to third parties, of the persons who obtained such benefits). The assets of persons against whom a personal bankruptcy order is issued shall be used to pay customer losses directly where such assets are in cash, or after being converted into cash where they are not.
The explanatory memorandum of the Crypto Law states that "[w]here crypto assets are held not in customers\' own wallets but with service providers, it is extremely difficult to trace the trail and carry out the necessary procedures to protect investors when bad faith conduct occurs," and it is noted that these regulations have been made to prevent potential incidents similar to the FTX and Thodex cases observed in recent times. The memorandum further states that "given the irreversible nature of transactions due to the unique structure of crypto assets and the difficulties experienced in tracking assets ... the criminal provisions have been set more severely compared to other financial institutions."
5. Secondary Legislation
The procedures and principles concerning the implementation of the Crypto Law shall be determined through secondary regulations to be issued by the Board. The main subjects that such secondary regulations will address are as follows:
- Regulations concerning the establishment and activities of crypto asset service providers. These regulations include principles and rules on matters such as the shareholders, managers, personnel, capital adequacy, share transfers, information systems, permitted activities, and obligations of service providers. These regulations must be enacted within six months of the Crypto Law entering into force.
- Procedures and principles concerning the initial sale, distribution, purchase and sale, exchange, transfer, and custody of crypto assets through platforms.
- Procedures and principles concerning the establishment of a written listing procedure by platforms for the determination of crypto assets to be traded on or initially sold or distributed through them, and the termination of trading thereof.
- Procedures and principles concerning the execution, scope, amendment, fees and charges, termination and cancellation of agreements to be signed between crypto asset service providers and customers, and the minimum matters required to be included in such agreements.
- Procedures and principles concerning the provision of investment advisory and portfolio management services relating to crypto assets.
- Procedures and principles concerning the publications, announcements, advertisements, notices, and commercial communications of crypto asset service providers.
The foregoing constitutes a general assessment of the relevant matters and does not constitute a legal opinion. Each case should be examined separately and evaluated within the framework of its own characteristics, and the legal structure should be arranged accordingly. We await your information in order to present an end-to-end version of this roadmap in line with your needs.