In short: Turkish banking law connects Banking Law No. 5411 and BDDK supervision with licensing, foreign bank branches, representative offices, lending, bank M&A, digital banking, outsourcing, payment services, bank secrecy, MASAK and customer protection.
Why it matters: A foreign bank or lender must select the correct Turkish regulatory footprint before it incorporates, lends, acquires shares, appoints a vendor or transfers customer data. A representative office, licensed branch, Turkish subsidiary, cross-border lender and fintech interface provider do not have the same legal status.
Our Banking Legal Services in Turkey
Turkish Trade Lawyers advises foreign banks, international banking groups, financial institutions, lenders, bank investors, technology providers and businesses working with the Turkish banking sector on Turkish banking law and regulatory matters.
Banking Market Entry
Subsidiary, branch, representative office, investment and commercial-service structures for foreign banks and banking groups.
BDDK Licensing and Approvals
Establishment permissions, operating licences, scope of activities and transactions requiring BDDK approval.
Foreign Bank Branches and Offices
Applications and compliance for first branches, subsequent branches and representative offices in Türkiye.
Bank M&A and Share Acquisitions
Regulatory due diligence, share transfers, changes of control, BDDK permissions and restructuring.
Corporate, Syndicated and Project Finance
Turkish-law loan agreements, security packages, guarantees, intercreditor arrangements and enforcement strategy.
Digital Banking and BaaS
Digital bank structures, service model banking, interface providers and technology-regulatory arrangements.
Outsourcing and Information Systems
IT, cloud, cybersecurity, operational support, vendor agreements and BDDK outsourcing requirements.
Bank Secrecy, AML and KVKK
Customer secrets, data sharing, MASAK compliance, international transfers and financial consumer obligations.
Regulatory Investigations
BDDK inspections, information requests, administrative proceedings and responses to regulatory findings.
Banking Disputes and Enforcement
Loan, guarantee, bank-customer, technology, interbank and regulatory disputes, litigation and arbitration.
How Can a Foreign Bank Enter the Turkish Market?
A foreign banking group can consider establishing a Turkish bank, opening a branch, opening a representative office, acquiring shares in an existing Turkish bank, joining a banking joint venture, providing cross-border financing, investing in a digital bank, supplying technology or entering a banking-as-a-service arrangement.
The correct structure depends on what the foreign institution actually wants to do in Türkiye. A representative office cannot perform the same activities as a licensed bank branch; a foreign lender providing financing from abroad is different from a bank carrying on regulated banking operations in Türkiye; and a fintech interface provider is different from a licensed digital bank. Market-entry analysis should therefore come before entity formation.
Who Regulates Banks in Türkiye?
Several public authorities may be relevant to the same banking business depending on its activity, product, data and financial position.
What Laws Regulate Banks in Turkey?
The central statute is Banking Law No. 5411. It regulates bank establishment, foreign bank branches, representative offices, operating permissions, permitted activities, share transfers, governance, lending, credit limits, capital, internal systems, financial reporting, confidentiality, supervision and regulatory intervention.
The law is supplemented by BDDK rules on credit transactions, connected customer groups, capital adequacy, liquidity, corporate governance, internal systems, mergers and divisions, outsourcing, digital banks, service model banking, confidential information, information systems and electronic banking. A foreign bank should therefore analyse the complete regulatory framework rather than Banking Law No. 5411 in isolation.
Are Establishment Permission and Operating Permission the Same?
No. A banking project generally involves separate establishment and operating-permission stages. Under Article 6 of Banking Law No. 5411, establishing a bank or opening the first Turkish branch of a bank established abroad requires permission from the Banking Regulation and Supervision Board.
Following establishment, the applicant must demonstrate operational readiness. The review can cover incorporation, trade-registry registration, capital, information systems, accounting, internal controls, reporting, organizational units, personnel and management structure. The operating permission stage should therefore be planned as a regulatory project, not treated as an automatic consequence of company incorporation.
Foreign Bank Branches and Representative Offices in Turkey
A foreign bank may apply to open its first Turkish branch subject to BDDK approval. The application can require constitutional documents, board resolutions, a business plan, proposed activities, internal audit and control arrangements, risk management, organization, financial projections, capital adequacy, audited statements, shareholder information, regulatory status and international operations.
A representative office is a different structure. Its permitted activities principally concern promoting the overseas bank, developing institutional relationships, conducting market research and reporting market information to the foreign head office. It is not a substitute for a licensed banking operation and should not be used to conduct ordinary income-generating banking activity. Ongoing reporting and personnel compliance should also be addressed.
Corporate Lending, Syndicated Finance and Security in Türkiye
Cross-border lending and carrying on banking business in Türkiye are separate legal questions. A foreign bank can potentially finance a Turkish corporate borrower from abroad without establishing a Turkish deposit-taking business, but the transaction should be reviewed for regulatory footprint, foreign-currency rules, tax, payment mechanics, security and enforcement.
Turkish-law finance documentation may cover facility amounts, purpose, conditions precedent, representations, covenants, interest, fees, repayment, events of default, sanctions and AML representations, security, guarantees, assignment, confidentiality and dispute resolution. Syndicated and project finance transactions can additionally require agency, intercreditor, parallel-debt, direct-agreement, insurance, cash-waterfall and insolvency analysis.
Security may include mortgages, share pledges, movable pledges, receivables assignments, bank-account security, guarantees and security over project assets. Perfection, ranking, registry filings, third-party consent and enforcement should be checked before funds are advanced.
What Rules Apply to Bank Acquisitions in Turkey?
Acquiring a Turkish bank is not an ordinary private M&A transaction. Article 18 of Banking Law No. 5411 requires BDDK permission for specified direct and indirect bank share acquisitions and transfers. Regulated thresholds include 10%, 20%, 33% and 50%, among other circumstances.
Bank M&A due diligence should extend beyond ordinary corporate matters to licences, capital, liquidity, connected-customer exposure, credit portfolios, provisions, internal systems, AML, customer secrets, technology, regulatory investigations, consumer complaints, litigation, ownership restrictions and BDDK approvals. Share purchase agreements should make regulatory permission and closing conditions explicit.
Digital Banking, Banking as a Service and Outsourcing
Digital banking, service model banking, electronic banking and open-banking arrangements can trigger specific BDDK requirements. The proposed business model should identify the licensed bank, interface provider, customer-facing party, technology provider, payment flow, data controller or processor roles and allocation of regulatory responsibility.
Banks frequently outsource technology, cloud infrastructure, call-centre, valuation, ratings, audit, cybersecurity, data and operational support services. Vendor agreements should address BDDK access and audit rights, information systems, confidentiality, customer secrets, KVKK, cybersecurity incidents, business continuity, subcontractors, service locations, records, regulatory cooperation and exit planning.
Non-bank payment and electronic-money institutions generally operate under Law No. 6493 and TCMB supervision, while banks remain principally within the Banking Law and BDDK framework. Legal classification should be confirmed before launching a product.
Bank Secrecy, MASAK, KVKK and Consumer Banking
Customer information is subject to a banking confidentiality framework in addition to ordinary personal-data protection. A bank-data review should map customer secrets, group sharing, cloud platforms, international transfers, access controls, retention, security incidents and disclosures required by law or customer instruction.
Banks are obliged parties under the AML framework. Compliance can include customer identification, beneficial ownership, understanding the relationship, transaction monitoring, suspicious-transaction assessment and reporting, recordkeeping, confidentiality and responses to MASAK requests. Financial consumer rules can separately affect consumer lending, bank cards, fees, disclosures, electronic contracting and complaints.
Banking Regulatory Investigations, Resolution and Disputes
Licensing and BDDK approval risk
Activities beyond a representative-office or permitted cross-border model, bank establishment, first branches and material share transfers may require prior approval.
Lending and security risk
Foreign-law finance documents should be coordinated with Turkish mandatory rules, security perfection and local enforcement procedures.
AML and secrecy risk
Customer due diligence, transaction monitoring and bank-secret duties can create parallel regulatory, contractual and liability exposure.
Technology and digital risk
Information systems, outsourcing, cybersecurity, electronic banking and BaaS models require accurate role and responsibility allocation.
M&A and prudential risk
Ownership, management, capital, liquidity, credit limits and connected-customer rules can affect a transaction before closing.
Investigation and enforcement risk
BDDK, MASAK, consumer, privacy, civil, arbitration and enforcement proceedings can arise from the same banking event.
Banking disputes may involve unpaid loans, security enforcement, guarantees, letters of credit, syndicated finance, project finance, bank-customer claims, technology agreements, outsourcing, share transfers, confidentiality and interbank matters. Depending on the facts, the appropriate route can include negotiation, mediation, Turkish court litigation, arbitration, enforcement or administrative proceedings.
TMSF can become relevant in distressed or resolution scenarios involving deposit insurance, intervention, asset transfers, licence revocation, liquidation and creditor rights. Foreign shareholders and creditors should obtain banking-specific advice rather than treating a regulated bank failure as an ordinary corporate insolvency.
Frequently Asked Questions About Banking Law in Türkiye
What is the main banking law in Turkey?
The principal statute is Banking Law No. 5411, administered primarily by BDDK / BRSA. The law covers bank establishment, operating permissions, branches, representative offices, share transfers, governance, lending, internal systems, confidentiality and supervision.
Who regulates banks in Turkey?
The principal banking regulator is BDDK / BRSA. Depending on the matter, TCMB, MASAK, TMSF and the Personal Data Protection Authority can also have regulatory or supervisory relevance.
Can a foreign bank establish a bank in Turkey?
Yes, subject to Banking Law No. 5411 and BDDK establishment and operating permissions. The application can involve review of founders, shareholders, financial resources, ownership, management, business plans, capital, internal systems, risk management, information systems and regulatory history.
Can a foreign bank open a branch in Turkey?
Yes. Opening the first Turkish branch of a bank established abroad requires BDDK permission under Article 6 of Banking Law No. 5411. The application is a substantive prudential review of the foreign bank and its proposed Turkish activities.
Can a foreign bank open a representative office in Turkey?
Yes, subject to BDDK approval. A representative office is not a banking branch and is limited principally to promotion, institutional relationships, market research and reporting to the foreign head office. It cannot be used to conduct ordinary revenue-generating banking activity.
Can a foreign bank lend to a Turkish company without establishing a Turkish bank?
Potentially yes, depending on the structure. Cross-border corporate lending should be reviewed for Turkish regulatory footprint, loan documentation, currency rules, tax, security, guarantees, payment mechanics, enforceability and enforcement.
Does acquiring shares in a Turkish bank require BDDK approval?
Specified acquisitions do. Article 18 of Banking Law No. 5411 requires approval for transactions crossing regulated ownership thresholds, including 10%, 20%, 33% and 50%, among other circumstances.
Can Turkey license digital banks?
Yes. Türkiye has a specific framework for digital banks and service model banking. The proposed model, licensing route, information systems, outsourcing, customer onboarding and relationship with any interface provider should be assessed under the BDDK framework.
Is banking as a service regulated in Turkey?
Yes. Service model banking is regulated under the digital banking framework and defines the relationship between a licensed service bank and interface providers. Licensing, customer-facing roles, data, outsourcing, liability and compliance responsibilities should be documented.
Can a foreign fintech operate as an interface provider?
Potentially, but the model must satisfy the Turkish banking-as-a-service framework, including requirements concerning the interface provider, the licensed service bank, customer communications, technology, data and responsibility allocation.
Are banks subject to MASAK obligations in Turkey?
Yes. Banks are expressly included among obliged parties under Law No. 5549. Obligations can include customer due diligence, beneficial-owner identification, transaction monitoring, suspicious-transaction reporting, recordkeeping and regulatory responses.
Does KVKK apply to banks in Turkey?
Yes, but banking information is additionally subject to customer-secret and bank-secret rules under Banking Law No. 5411. A banking data review should address both KVKK requirements and the special confidentiality framework.
Is customer consent enough for a Turkish bank to send information abroad?
Not necessarily. Banking secrecy rules impose additional requirements, and the transfer should be assessed for customer request or instruction, purpose, proportionality, applicable BDDK rules and the KVKK international-transfer framework.
Can banks outsource technology services in Turkey?
Yes, subject to BDDK banking-outsourcing and information-system requirements. Vendor agreements may need provisions on regulatory access, audits, confidentiality, customer secrets, cybersecurity, incidents, continuity, subcontractors, records and exit planning.
Are payment institutions regulated by BDDK?
Generally, non-bank payment and electronic-money institutions operate under Law No. 6493 and are regulated and supervised by TCMB, while banks are principally regulated under Banking Law No. 5411 and the BDDK framework.
Can Turkish Trade Lawyers advise foreign banks financing Turkish companies?
Yes. We advise on Turkish lending, security, guarantees, syndicated lending, project finance, enforcement, regulatory issues and disputes involving foreign lenders and Turkish borrowers.
Banking Legal Counsel for Foreign Financial Institutions
Banking in Türkiye combines regulatory licensing, prudential rules, contracts, security, data, AML, technology and dispute-resolution workstreams. A transaction may involve BDDK approval, Banking Law No. 5411, local finance documents, bank secrecy, MASAK, KVKK and enforcement strategy at the same time.
Turkish Trade Lawyers advises foreign banks, international banking groups, lenders, financial institutions, bank investors and technology businesses from market entry and licensing through lending, outsourcing, regulatory investigations and banking disputes.
