Money Laundering and MASAK Compliance in Türkiye: What Foreign Businesses Need to Know

Money laundering in Türkiye is governed by two layers of law: a preventive regime built on the Prevention of Laundering Proceeds of Crime Law No. 5549, supervised by MASAKMASAKThe Financial Crimes Investigation BoardTürkiye's financial intelligence unit — the body that receives suspicious-transaction reports and supervises anti-money-laundering duties.Glossary → (the Financial Crimes Investigation Board), and a criminal offence — laundering assets derived from an offence — set out in Article 282 of the Turkish Penal Code (Law No. 5237). If your company is a bank, a financial institution, a real-estate agent, a precious-metals dealer, or in some cases a lawyer or accountant, you are likely an "obliged party" with customer-identification (KYC) and suspicious-transaction reporting duties. This guide explains who is caught, what the duties are, how the criminal offence works, and where foreign companies are most exposed.

How Türkiye Regulates Money Laundering: Two Separate Layers

Türkiye attacks money laundering on two fronts, and it helps to keep them apart because they answer to different bodies and carry different consequences.

• The preventive (administrative) layer is built on the Prevention of Laundering Proceeds of Crime Law No. 5549 (Suç Gelirlerinin Aklanmasının Önlenmesi Hakkında Kanun). It does not wait for a crime to be proven. Instead, it imposes ongoing duties — customer identification, record-keeping, monitoring, and reporting — on businesses that handle money or high-value assets, so that dirty money is harder to move in the first place. This layer is supervised by MASAK, the Financial Crimes Investigation Board (Mali Suçları Araştırma Kurulu), which sits within the Ministry of Treasury and Finance.
• The criminal layer is the offence of laundering assets derived from an offence under Article 282 of the Turkish Penal Code (Türk Ceza Kanunu, Law No. 5237). This is what a prosecutor charges when someone actually conceals, transfers, or disguises the proceeds of a crime. A conviction here is a criminal matter, tried before the criminal courts.

A business can therefore have a compliance problem under Law No. 5549 without anyone being convicted of laundering, and a person can be prosecuted under Article 282 TCKTCKTurkish Criminal Code No. 5237The statute that defines crimes and their penalties in Türkiye — including fraud, breach of trust, forgery, laundering and offences committed through an organisation.Glossary → even if they were never an obliged party. The two layers overlap but are not the same — which is exactly why foreign companies often get caught off guard by one while focused on the other.

What Is MASAK and What Does It Do?

MASAK (Mali Suçları Araştırma Kurulu), the Financial Crimes Investigation Board, is Türkiye's financial-intelligence unit. In plain terms, it is the body that collects, analyses, and acts on information about suspicious money flows. It is the central point where the preventive system feeds into possible criminal investigations.

MASAK's main functions include:

• Receiving reports from obliged parties — especially suspicious-transaction reports (STRs) — and analysing them;
• Setting and supervising compliance obligations under Law No. 5549, including issuing regulations and guidance on customer identification and reporting;
• Auditing and inspecting obliged parties to check they are meeting their duties;
• Sharing intelligence with prosecutors and law-enforcement when its analysis suggests laundering or terrorist financing, and cooperating with foreign counterparts.

Who Is an "Obliged Party" Under Law No. 5549?

The duties under Law No. 5549 fall on "obliged parties" (yükümlüler) — categories of business that handle money or high-value assets and are therefore at the front line of catching laundering. The list is set by the law and its implementing regulation, and the broad categories include:

• Banks and financial institutions — including financing, leasing, factoring, and capital-market intermediaries, and electronic-money and payment institutions;
• Insurance and private-pension companies;
• Real-estate agents and intermediaries involved in buying and selling property;
• Dealers in precious metals, stones, and jewellery, and dealers in other high-value goods (such as certain art, antiques, and vehicles);
• Notaries and certain post and cargo operators;
• Crypto-asset service providers, which have been brought into the regime as the sector has been regulated;
• Independent professionals — including accountants, financial advisers, and lawyers in defined situations.

One point is widely misunderstood: lawyers and accountants are not obliged parties for everything they do. For independent professionals, the obligations are generally tied to specific financial or real-estate transactions carried out on a client's behalf — handling property purchases, managing client money or assets, or assisting with the formation or management of companies. A lawyer's core function of defending a client or representing them in litigation sits differently, and questions of legal privilege and the right to a defence are part of the picture. The test turns on the activity, not the job title, so professionals operating in Türkiye should map this to their actual practice rather than guess.

KYC: The Customer-Identification Duty

The cornerstone of the preventive regime is "know your customer" (KYC) — formally, customer identification (kimlik tespiti). Obliged parties must establish and verify who they are dealing with before, or at the point of, doing business.

In practice the customer-identification duty generally requires obliged parties to:

• Identify and verify the customer — for an individual, using official identity documents; for a company, using registration and authority documents — when establishing a business relationship or carrying out transactions at or above the thresholds set in the regulations;
• Identify the beneficial owner (gerçek faydalanıcı) — the real natural person who ultimately owns or controls the customer — so that companies cannot be used as a screen;
• Understand the purpose and nature of the business relationship, and apply enhanced scrutiny to higher-risk customers and transactions;
• Keep records of identification and transactions for the period required by law, so the information is available if MASAK or a prosecutor asks.

Suspicious-Transaction Reporting (STR)

The second core duty is reporting. When an obliged party has information, suspicion, or reasonable grounds to suspect that assets involved in a transaction are linked to laundering or to a predicate offence, it must file a suspicious-transaction report (STR) (şüpheli işlem bildirimi) to MASAK within the time and in the form set by the regulations.

Two features of this duty matter especially:

• Confidentiality (no tipping-off): The obliged party must keep the fact that a report has been made confidential. Telling the customer that they have been reported — "tipping off" — is prohibited, and breaching that confidentiality is itself a violation.
• Protection for reporting in good faith: The regime is designed so that a good-faith report does not expose the reporting party to liability to the customer. The point is to encourage reporting, not to punish it.

Separately from STRs, obliged parties also have general and continuous-monitoring duties, and certain transactions must be reported regardless of suspicion under the rules MASAK sets. The precise thresholds, formats, and deadlines are detailed and change over time, so they should be confirmed against the current MASAK regulations rather than memory.

The Criminal Offence: Article 282 TCK

Separate from the compliance regime, Article 282 of the Turkish Penal Code (Law No. 5237) makes it a crime to launder the proceeds of an offence — broadly, to subject assets derived from a crime to processes intended to conceal their illicit origin or to create the impression that they were lawfully obtained, including by taking such assets abroad or running them through transactions to disguise their source.

A few features are important to understand:

• A predicate offence is required. Laundering is built on top of an underlying crime that generated the assets (for example, fraud, bribery, tax evasion under the Tax Procedure Law No. 213, drug offences, or other crimes). The assets must derive from an offence.
• Intent matters. The offence targets conduct aimed at concealing or disguising the criminal origin of assets. The mental element — what the person knew or intended — is central and heavily contested in practice.
• It can stand on its own. A person who launders may be different from the person who committed the underlying crime, and the laundering charge is assessed in its own right.

Laundering under Article 282 is treated as a serious offence, and convictions can carry imprisonment together with judicial fines, with the position affected by aggravating factors such as committing the offence through a public duty or as part of an organisation. Because the exact range, available reductions, and limitation periods depend on the specific facts and the current text of the law, the precise consequences in any case must be assessed by a lawyer on the file rather than assumed from a general description.

Penalties and Consequences — Kept in Perspective

It is worth separating the two kinds of consequence, because foreign businesses sometimes blur them.

• Administrative consequences under Law No. 5549. Failing to meet KYC, monitoring, reporting, training, or record-keeping duties can expose an obliged party to administrative fines and supervisory measures imposed through the MASAK framework. These apply to the business as a compliance failure — they do not require proof that anyone laundered money. The amounts and triggers are set by law and updated over time.
• Criminal consequences under Article 282 TCK. Actually laundering criminal proceeds is a criminal offence that can lead to imprisonment and judicial fines for the individuals involved, decided by the criminal courts under the procedures of the Code of Criminal Procedure (CMK, Law No. 5271). Asset-freezing and confiscation measures can also come into play during an investigation.

This guide keeps penalties qualitative on purpose. The exact figures, day-fine multipliers, and sentence ranges change with legislative amendments and depend on the facts, so any specific number should be confirmed against the current law for your situation.

Where Foreign Companies Are Most Exposed — and How to Prepare

For an international business operating in or with Türkiye, the risk rarely comes from an intention to do anything wrong. It comes from friction points where the rules are stricter or different than expected. The most common pressure points are:

• Onboarding and KYC mismatches. A Turkish bank, notary, or agent applies Law No. 5549 to your company and asks for ownership, authority, and source-of-funds documents you did not anticipate. Delays here can stall deals.
• Beneficial-ownership transparency. Multi-layered foreign holding structures can be difficult to verify. If the ultimate owner cannot be established to the obliged party's satisfaction, the transaction may stall or trigger a report.
• Large cash and property transactions. Real-estate purchases, high-value goods, and significant cash movements draw enhanced scrutiny and may be subject to reporting.
• Cross-border transfers. Moving funds in and out of Türkiye, especially through or alongside intermediaries, attracts attention where the source or purpose is unclear.
• Directors' and managers' exposure. Where a company is used to move tainted funds, individuals in control can face questions — which connects to the wider topic of criminal liability of company executives in Türkiye.

Many of these overlap with other economic-crime risks, including fraud, which is a common predicate offence behind laundering allegations. If your business is an obliged party, the goal is a programme that does what Law No. 5549 expects and can be shown to a MASAK auditor — in broad terms, a written risk-based compliance policy with a designated officer where required, risk-based customer due diligence including beneficial-ownership checks, ongoing transaction monitoring with a documented and confidential STR process, record-keeping for the required period, staff training, and periodic review to keep pace with changing MASAK regulations.

Our team advises foreign companies and individuals on economic and white-collar criminal-law matters in Türkiye, including MASAK compliance reviews and defence where a laundering question arises. If you are unsure whether you are an obliged party, or you have received a MASAK request, contact us for a confidential review of your position.

Frequently asked questions