Turquie KYC, KYB & AML compliance checklist
Une checklist pratique et sourcée pour mettre en œuvre les exigences KYC, KYB et AML en Turquie.
- Dernière revue
- Dernière revue:
- Version
- Version 1.0
Guide d’implémentation portable
Obtenir la checklist PDF
11 domaines de contrôle · 38 contrôles d’implémentation
Dernière revue: 8 October 2026 · Version 1.0
Télécharger la checklistRéponse directe
Que couvre la checklist de conformité pour Turquie ?
La checklist pour Turquie traduit les principales règles KYC, KYB et AML en 11 domaines de contrôle et 38 contrôles d’implémentation, avec les autorités, obligations de déclaration et preuves à conserver.
Faits réglementaires clés
- Primary AML law
- Law No. 5549
- FIU
- Financial Crimes Investigation Board (MASAK)
- STR timing
- Within 10 business days from suspicion; immediately where delay is prejudicial
- Records
- 8 years from the applicable document, record or transaction trigger
- Beneficial ownership
- Identify the natural person who ultimately owns or controls; apply current Measures Regulation tests
- Sanctions
- Laws No. 6415 and 7262; Presidential and Official Gazette decisions
- Privacy law
- Personal Data Protection Law No. 6698, as amended
- FATF public lists
- Not listed at 19 June 2026
Détail d’implémentation
Exigences et actions de conformité pour Turquie
Ouvrez chaque domaine pour consulter l’exigence, l’action recommandée, les preuves à conserver et la source primaire utilisée.
01Scope, authorities, and licensingClassify the activity, Türkiye nexus and competent supervisor before launch.3 éléments+
Determine whether each activity is an obliged-party activity.
- Action d’implémentation
- Map services and delivery models to the categories in Law 5549 and the current Measures Regulation, including financial institutions, designated businesses and professions and crypto-asset service providers.
- Preuves à conserver
- Perimeter memo, service map and authority confirmation.
- Source primaire
- Law 5549 article 2(d); Measures Regulation article 4
Obtain each activity-specific authorisation before operating.
- Action d’implémentation
- Classify banking, payments, electronic money, money transfer, capital markets, insurance, exchange and crypto services under the live sector regime.
- Preuves à conserver
- Licence matrix, approvals and conditions.
- Source primaire
- Applicable BRSA, CBRT, CMB and Treasury legislation
Use current Turkish legislation and MASAK publications.
- Action d’implémentation
- Track Official Gazette amendments, MASAK communiqués, sector guides and supervisory decisions; treat English translations as aids only.
- Preuves à conserver
- Source register, translations and change log.
- Source primaire
- Law 5549 and implementing legislation
02Governance and risk assessmentControls must be risk-based, documented and effective at entity and financial-group level.3 éléments+
Maintain an enterprise ML/TF/PF risk assessment.
- Action d’implémentation
- Assess customers, countries, products, delivery channels, transactions, new technologies and group exposure using current national and sector risk information.
- Preuves à conserver
- Methodology, assessment, approval and updates.
- Source primaire
- Law 5549 article 5; Compliance Programme Regulation
Operate the required compliance programme.
- Action d’implémentation
- Where applicable, appoint an authorised compliance officer and maintain policies, risk management, monitoring, training, internal control and audit.
- Preuves à conserver
- Appointment, programme, reports, testing and remediation.
- Source primaire
- Law 5549 article 5; Compliance Programme Regulation
Apply group-wide controls without weakening local duties.
- Action d’implémentation
- Govern permitted intra-group CDD, account and transaction information sharing and apply stricter local restrictions where required.
- Preuves à conserver
- Group standard, legal analysis and access controls.
- Source primaire
- Law 5549 article 5(2)
03Natural-person identificationIdentify and verify the customer, beneficiary and representative at every applicable trigger.4 éléments+
Complete CDD before the relevant transaction or relationship.
- Action d’implémentation
- Identify and verify the person conducting the transaction and the person on whose behalf or for whose benefit it is conducted using reliable evidence.
- Preuves à conserver
- Identity attributes, document provenance and verification result.
- Source primaire
- Law 5549 article 3; Measures Regulation
Apply the current trigger and monetary threshold rules.
- Action d’implémentation
- Configure relationship, suspicious-transaction and occasional-transaction triggers from the current Measures Regulation and MASAK amendments; do not hard-code an undated lira amount.
- Preuves à conserver
- Dated threshold register, configuration and change tests.
- Source primaire
- Law 5549 article 3(2); Measures Regulation articles 5-6
Verify representatives and authority.
- Action d’implémentation
- Identify the representative and represented person and authenticate the mandate before accepting instructions.
- Preuves à conserver
- Representative KYC, mandate and validation.
- Source primaire
- Measures Regulation customer-identification provisions
Do not establish or continue an inadequately identified relationship.
- Action d’implémentation
- Apply the current prohibition and termination rules where CDD cannot be completed and assess whether an STR is required without tipping off.
- Preuves à conserver
- Failure reason, restriction and STR assessment.
- Source primaire
- Measures Regulation article 22
04KYB and beneficial ownershipVerify legal existence, authority, ownership and ultimate control.4 éléments+
Verify the legal person and authorised persons.
- Action d’implémentation
- Obtain current trade-registry, constitutional, tax, activity, director and signatory evidence and validate authority through the live registry process.
- Preuves à conserver
- MERSIS or registry extract, documents and discrepancy log.
- Source primaire
- Measures Regulation; Turkish Commercial Code; Trade Registry Regulation
Identify the natural person who ultimately owns or controls.
- Action d’implémentation
- Trace direct, indirect, layered, nominee and other control arrangements and apply the current ownership, control and senior-managing-official fallback sequence.
- Preuves à conserver
- Ownership chart, calculations, control rationale and verified identities.
- Source primaire
- Measures Regulation article 17/A
Do not treat a percentage as a safe harbour.
- Action d’implémentation
- Use the current regulatory ownership indicator while still testing control by other means and applying the prescribed fallback where no natural person is identified.
- Preuves à conserver
- Criterion-by-criterion analysis and escalation.
- Source primaire
- Measures Regulation article 17/A
Reconcile AML CDD with registry and tax beneficial-owner duties.
- Action d’implémentation
- Capture the applicable MERSIS, trade-registry and Revenue Administration declarations separately from the AML identification conclusion.
- Preuves à conserver
- Registry evidence, declaration receipts and discrepancy decisions.
- Source primaire
- Tax Procedure Law General Communiqué 529; registry rules
05PEPs, EDD, and remote onboardingApply enhanced controls to PEPs and higher-risk relationships.3 éléments+
Identify domestic and foreign PEP exposure.
- Action d’implémentation
- Screen customers, beneficial owners, family members and close associates and apply the approval, source-of-wealth, source-of-funds and monitoring measures required by current MASAK rules.
- Preuves à conserver
- Screening, classification, approval and corroboration.
- Source primaire
- MASAK General Communiqué No. 21; Measures Regulation
Apply enhanced measures to higher risk.
- Action d’implémentation
- Obtain additional identity, purpose, ownership, wealth and funds evidence; increase review and monitoring intensity and document the rationale.
- Preuves à conserver
- Risk trigger, enhanced CDD and approval.
- Source primaire
- Measures Regulation enhanced-measures provisions
Control remote identification by sector.
- Action d’implémentation
- Use only a method permitted by the competent supervisor and retain liveness, authentication, fraud, consent and exception evidence.
- Preuves à conserver
- Method assessment, session evidence and exceptions.
- Source primaire
- Applicable BRSA, CBRT, CMB and insurance remote-identification rules
06Monitoring and suspicious reportingOngoing scrutiny supports timely reporting to MASAK.4 éléments+
Monitor and refresh on a risk basis.
- Action d’implémentation
- Compare activity with purpose, expected behaviour, customer risk and source of funds; update CDD when events, material changes or doubts arise.
- Preuves à conserver
- Scenarios, alerts, reviews and refresh history.
- Source primaire
- Measures Regulation ongoing-monitoring provisions
Escalate suspicion without waiting for proof.
- Action d’implémentation
- Assess completed and attempted transactions promptly and record the information, suspicion or reasonable grounds and formation time.
- Preuves à conserver
- Case chronology, facts and decision.
- Source primaire
- Law 5549 article 4
Report to MASAK within the statutory period.
- Action d’implémentation
- Submit through the current MASAK Online route within 10 business days from formation of suspicion and immediately where delay is prejudicial.
- Preuves à conserver
- Suspicion timestamp, submission and acknowledgement.
- Source primaire
- MASAK General Communiqué No. 13 article 5
Prevent tipping off and protect report information.
- Action d’implémentation
- Restrict access, communications and disclosure to the statutory exceptions.
- Preuves à conserver
- Access logs, scripts, training and incidents.
- Source primaire
- Law 5549 article 4(2)
07Payments, wires, thresholds, and crypto-assetsSeparate CDD triggers, periodic reporting and activity-specific licensing.4 éléments+
Carry and screen required transfer information.
- Action d’implémentation
- Apply current originator and beneficiary fields, missing-data procedures, sanctions checks and sector travel-rule requirements.
- Preuves à conserver
- Field matrix, samples and repair queue.
- Source primaire
- Measures Regulation wire-transfer provisions; MASAK crypto guidance
Apply current periodic-reporting rules only to covered activity.
- Action d’implémentation
- Maintain a dated matrix of reportable transaction types, amounts, periods and exemptions issued by the Ministry; do not present a CDD threshold as a universal reporting threshold.
- Preuves à conserver
- Rule register, reports, receipts and reconciliation.
- Source primaire
- Law 5549 article 6; current MASAK reporting rules
Obtain payment and electronic-money authorisation.
- Action d’implémentation
- Map account, wallet, acquiring, transfer, agent and outsourcing features to Law 6493 and current CBRT secondary rules.
- Preuves à conserver
- Product memo, authorisation and control tests.
- Source primaire
- Law 6493; CBRT payment-services regulations
Obtain crypto-asset authorisation and apply current AML rules.
- Action d’implémentation
- Map trading, transfer, custody and key-management services to Capital Markets Law articles 35/B-35/C, CMB communiqués III-35/B.1 and III-35/B.2, and MASAK travel-rule and STR guidance.
- Preuves à conserver
- CMB status, permissions, product map and AML tests.
- Source primaire
- Law 6362 as amended by Law 7518; CMB communiqués III-35/B.1 and III-35/B.2
08Targeted financial sanctionsUse current UN-derived and domestic freezing decisions.3 éléments+
Screen designations, ownership and control.
- Action d’implémentation
- Screen relevant parties at onboarding, transactions and list updates against current UN and Türkiye decisions and resolve potential indirect control.
- Preuves à conserver
- List versions, screening logs and match decisions.
- Source primaire
- Laws 6415 and 7262
Implement published freezes without delay.
- Action d’implémentation
- Block prohibited disposal or availability when a Presidential asset-freezing decision is published and notify or coordinate through the prescribed MASAK route.
- Preuves à conserver
- Decision, restriction timestamp and notification.
- Source primaire
- Law 7262 article 3; Law 6415 and implementing regulation
Use licences, exemptions, delisting or release only under written authority.
- Action d’implémentation
- Apply the designation-specific procedure and preserve every condition and approval.
- Preuves à conserver
- Legal analysis, permission and release record.
- Source primaire
- Law 6415; implementing regulations
09Records and regulator accessRetention triggers are record-specific.3 éléments+
Retain AML documents and records for eight years.
- Action d’implémentation
- Run the period from the document date, last record date or last transaction date as applicable and preserve reconstructable evidence.
- Preuves à conserver
- Schedule, trigger, samples and retrieval test.
- Source primaire
- Law 5549 article 8
Preserve STR, CDD, monitoring and compliance evidence.
- Action d’implémentation
- Keep decisions, supporting material, acknowledgements, training, controls and audits subject to statutory and lawful-hold requirements.
- Preuves à conserver
- Case files, schedule and legal holds.
- Source primaire
- Law 5549 articles 4, 5 and 8
Produce complete records to competent authorities.
- Action d’implémentation
- Maintain controlled access and an auditable process for MASAK and supervisory information requests.
- Preuves à conserver
- Access matrix, production log and integrity checks.
- Source primaire
- Law 5549 articles 7-8
10Privacy, biometrics, breaches, and transfersApply Law 6698 as amended and current Personal Data Protection Board instruments.4 éléments+
Map processing conditions, notices and data-subject rights.
- Action d’implémentation
- Inventory personal and special-category data, identify an Article 5 or 6 condition, provide Article 10 information and support Article 11 rights.
- Preuves à conserver
- Data map, legal-basis record, notices and rights log.
- Source primaire
- Law 6698 articles 4-6 and 10-11
Apply enhanced controls to biometric and special-category data.
- Action d’implémentation
- Document necessity and proportionality, apply current Board adequate measures and implement security appropriate to the sensitivity and onboarding risk.
- Preuves à conserver
- Assessment, controls, test results and approvals.
- Source primaire
- Law 6698 article 6; KVKK biometric-data guideline
Notify personal-data breaches without delay.
- Action d’implémentation
- Escalate, contain, document and notify the Board and affected persons using the current Board decision and form; do not convert the Board's 72-hour interpretation into a statutory text claim.
- Preuves à conserver
- Incident chronology, assessment and notifications.
- Source primaire
- Law 6698 article 12(5); Board Decision 2019/10
Use the amended cross-border transfer regime.
- Action d’implémentation
- Apply adequacy, an Article 9 appropriate safeguard or a limited incidental-transfer exception and file standard-contract notifications within five business days where used.
- Preuves à conserver
- Transfer map, mechanism, contract and notification receipt.
- Source primaire
- Law 6698 article 9; 2024 Cross-Border Transfer By-Law
11Practical evidence packsEvidence must reconstruct decisions end to end.3 éléments+
Maintain an onboarding pack.
- Action d’implémentation
- Bundle identity, authority, KYB, beneficial ownership, PEP, sanctions, purpose, risk, privacy and approvals.
- Preuves à conserver
- Complete sample and retrieval result.
- Source primaire
- Operational control supporting Law 5549
Maintain STR and sanctions case packs.
- Action d’implémentation
- Link activity, suspicion time, report, receipt, confidentiality, restrictions and communications.
- Preuves à conserver
- Case pack, timeline and access record.
- Source primaire
- Law 5549 article 4; Laws 6415 and 7262
Maintain a launch and legal-change pack.
- Action d’implémentation
- Record perimeter, licences, reporting, sanctions, privacy, vendors, current thresholds and tests.
- Preuves à conserver
- Signed pack, source register and approvals.
- Source primaire
- Official sources listed below
Registre des sources primaires
18 sources utilisées pour cette checklist
Utilisez ces liens pour vérifier la législation, les lignes directrices, les procédures de déclaration et les statuts internationaux.
- Law No. 5549 on Prevention of Laundering Proceeds of CrimeMASAK · Primary legislation - official English translation
- Measures Regulation and consolidated AML legislation registerMASAK · Official legislation register
- MASAK General Communiqué No. 13 - suspicious transaction reportingMASAK · Official binding communiqué
- Current sector suspicious transaction reporting guides and MASAK Online routeMASAK · Official filing guidance
- Law No. 6415 on Prevention of Financing of TerrorismMASAK · Primary legislation - official English translation
- Law No. 7262 on Prevention of Financing of ProliferationMASAK · Primary legislation - official English translation
- Current asset-freezing decisions and listsMASAK · Official sanctions register
- Company establishment and MERSIS guideMinistry of Trade · Official registry guidance
- Payment Services and Electronic Money Law No. 6493Central Bank of the Republic of Türkiye · Primary sector legislation and official framework
- Crypto-asset service-provider communiqués III-35/B.1 and III-35/B.2Capital Markets Board · Official supervisory announcement
- Capital Markets Board legislation systemCapital Markets Board · Official legislation register
- Personal Data Protection Law No. 6698Personal Data Protection Authority · Primary legislation - official English translation
- Cross-border transfer by-law and standard contractsPersonal Data Protection Authority · Official regulation and instruments
- Guideline on processing biometric dataPersonal Data Protection Authority · Official regulator guidance
- FATF Türkiye country assessment pageFATF · Authoritative assessment
- FATF Plenary outcomes - 19 June 2026FATF · Authoritative current assessment status
- FATF increased monitoring - 19 June 2026FATF · Authoritative current public-list status
- FATF call for action - 19 June 2026FATF · Authoritative current public-list status
Réponses directes
Questions KYC, KYB et AML pour Turquie
Who receives suspicious transaction reports?+
MASAK receives reports through the current MASAK Online route and sector guide.
When must an STR be filed?+
Within ten business days from formation of suspicion, and immediately where delay is prejudicial.
How long are AML records retained?+
Eight years from the applicable document date, last record date or last transaction date under Law 5549 article 8.
What is Türkiye's beneficial-owner threshold?+
Apply the current Measures Regulation ownership indicator, control-by-other-means test and senior-managing-official fallback; a percentage is not a safe harbour.
Is there one universal transaction threshold?+
No. CDD triggers and periodic-reporting duties vary by transaction, obliged-party category and current MASAK rule; maintain a dated threshold register.
Can onboarding be electronic?+
Yes where the applicable sector supervisor permits the method and all identity, liveness, authentication, fraud and record controls are met.
Are crypto-asset services regulated?+
Yes. CMB licensing and operating rules and MASAK AML, reporting and travel-rule obligations apply according to the service.
How are cross-border data transfers handled?+
Use the amended Law 6698 article 9 hierarchy: adequacy, an appropriate safeguard, or a limited incidental-transfer exception; standard contracts require notification within five business days.
Is Türkiye on a FATF public list?+
No at 19 June 2026. FATF adopted a new mutual evaluation in June 2026, and absence from a list is not a low-risk conclusion.
Méthode de recherche et de revue
VOVE ID Compliance Research cartographie le périmètre réglementaire, traduit les obligations en contrôles opérationnels, relie les affirmations importantes aux sources et date chaque revue.
General information, not legal advice. Reviewed 8 October 2026. Confirm controlling Turkish text, current monetary thresholds, sector rules, MASAK Online specifications, sanctions decisions, registry and beneficial-owner procedures, KVKK decisions and licensing conditions with the competent authority and qualified Türkiye counsel.