02Your obligation here
Turkey runs a single national regime for crypto-asset service providers, split between the market-conduct authority that licenses the activity and the financial-crime authority that supervises the AML/CFT side. The Capital Markets Board of Türkiye (CMB / SPK) licenses and supervises crypto-asset service providers, and MASAK is the AML/CFT supervisor and financial-intelligence unit that sits behind the licence. Whichever way your firm is structured, the obligation is the same in shape: a named, fit-and-proper compliance officer, a written AML/CFT programme, a documented risk assessment, risk-based customer due diligence, transaction monitoring, sanctions screening, and suspicious-transaction reporting to MASAK.
National regime
CMB / SPK The Capital Markets Board of Türkiye (Sermaye Piyasası Kurulu) licenses and supervises crypto-asset service providers. Public register: spk.gov.tr/kurumlar/kripto-varlik-hizmet-saglayicilari
AML/CFT & FIU
MASAK The Financial Crimes Investigation Board (Mali Suçları Araştırma Kurulu) is the AML/CFT supervisor and financial-intelligence unit that receives suspicious-transaction reporting. Site: masak.hmb.gov.tr
Any specific CMB / SPK rulebook threshold, capital requirement, filing deadline or transition date is confirmed against the regulator's own rulebook before it is stated. The sentence stays generic if unconfirmed.
03What we build in Turkey crypto
01Licensing & new-regime buildThe AML/CFT programme CMB / SPK expects behind a crypto-asset service provider authorisation: risk assessment, policies, the compliance and MLRO function, wallet and counterparty controls, the file that survives the review.Detail →
02RemediationAfter a regulator finding, a deficiency notice or a failed audit: gap analysis against the applicable framework, a fix that closes the finding, and the evidence trail to prove closure at re-inspection.Detail →
03Outsourced & bridge MLRO + FIUA senior compliance officer or bridge MLRO while you recruit, plus a managed FIU: alert triage, investigations, and suspicious-transaction reporting to MASAK.Detail →
04Independent AML auditThe independent review of your crypto-asset programme that the regulator and your board expect, tested against the current framework, with findings you can act on.Detail →
05Sanctions & integrity DDSanctions and screening controls, counterparty due diligence, and the crypto Travel Rule for originator and beneficiary information on transfers.Detail →
04Why it is urgent now
Standing exposure
Crypto-asset activity in Turkey is already supervised. CMB / SPK licenses crypto-asset service providers and maintains a public register, and MASAK supervises the AML/CFT side, so an operator without a defensible AML/CFT programme is exposed at the next review, not at some future deadline. The pressure is standing, not seasonal.
Tell us what you are trying to license, fix or run in Turkey crypto.
Fixed scope. No hourly billing. A costed plan within 48 hours.