Online Fraud in Türkiye: Preserving Evidence and Reporting

10/10/2026
Online Fraud in Türkiye: Preserving Evidence and Reporting
Criminal and IT Law

Steps after suspected online fraud in Türkiye: contact the bank, preserve evidence, report to the prosecutor, account suspension, IBAN involvement and recovery.

1. When does an online incident amount to fraud?

Fraud requires deceptive conduct misleading a person, resulting in an unlawful benefit and corresponding loss. Article 157 defines the basic offence. Article 158(1)(f) addresses the qualifying use of information systems, banks or credit institutions as instruments; impersonating specified officials or institutional employees may engage paragraph (l).

A product not arriving, a late delivery or an unpaid contractual promise is not automatically proof of fraud. The deception, intent when acting, payment and surrounding circumstances must be investigated. Merely using a bank transfer is not enough to classify every dispute as bank-based aggravated fraud.

For Article 158(1)(f), the statutory framework includes a four-year minimum and ten-year maximum imprisonment, with a judicial fine under the provision. The final sentence depends on participation, aggravation, reductions and the relevant law at the offence date; these are not a fixed sentence for every account holder.

2. Common scenarios and the offence distinction

False listings

A fabricated sale, deposit demand or imitation payment page can be part of deception. Preserve the listing and the entire transaction, not only the final message.

Compromised social accounts

An apparent friend or colleague requests urgent money. Account takeover and the later deception may raise distinct offences.

Phishing

A fake login or payment page captures credentials. The subsequent access and transfer method determine the legal classification.

Impersonated bank staff

The caller uses an institutional identity to obtain codes, credentials or a transfer. Keep the caller details and the precise instructions.

Unlawful access under Article 243, interference with systems or data under Article 244 and card misuse under Article 245 have separate elements. A computer cannot itself be deceived in the same way as a person. Who was misled, what was accessed and how the benefit was obtained matter; offences should not be assigned solely from a short label.

3. First steps after a suspicious payment

  1. Contact your bank or payment provider immediately through its official channel. Identify the transfer, amount, time, recipient account and suspected deception. Request the available transaction tracing, protective action and recovery process; keep the reference number.
  2. Protect compromised access. Use trusted channels to secure affected accounts, cards and sessions. Do not give further codes to the caller or install a suggested remote-access tool.
  3. Preserve evidence. Save the original communications, receipts, listing URLs and account identifiers before content disappears.
  4. Report the facts. Under Criminal Procedure Code Article 158, reports can be made to the prosecutor or law enforcement, in writing or orally for recording. Unknown perpetrators do not prevent a report.
  5. Explain the money trail and request the appropriate measures. Provide the evidence you hold; the authorities determine legal classification and investigative steps.

A criminal report and a bank's transaction-dispute process are different. Neither should be assumed to replace the other or every civil recovery deadline.

4. Account suspension, seizure and return of money

Article 128/A of the Criminal Procedure Code covers specified offences including Article 158(1)(f) and (l), relevant aggravated theft and card misuse. Where reasonable suspicion exists, the relevant bank, payment provider or cryptoasset service provider may suspend a used account for up to forty-eight hours.

A victim cannot personally order another account frozen, and a phone request does not guarantee that the institution will find the statutory conditions satisfied. The institution must promptly notify the prosecutor with the account movements and records. If the benefit has moved to another institution, the statutory notification mechanism becomes relevant.

Seizure is separate: Article 128/A permits the specified judicial decision or, in urgent circumstances, a prosecutor's written order, with time-limited judicial approval. Under paragraph (5), seized criminal proceeds are returned during investigation or trial when established to belong to the victim.

Recovery depends on identifying and preserving the funds and the competent authority's assessment. It is not an automatic refund within forty-eight hours.

5. Which evidence should be preserved?

  • Original bank receipts, transaction references, account statements and any dispute correspondence.
  • The recipient IBAN, displayed account name, telephone numbers and relevant usernames.
  • Listing, profile and website URLs, with screenshots showing date and context where possible.
  • Complete message histories, emails, SMS notices and call details; retain original files and devices.
  • Delivery or non-delivery records, invoices and any genuine contract or platform information.

Screenshots can be useful but do not conclusively identify the person operating an account. Banks' records, device and IP information, ATM footage and communications data may require collection by authorised investigators. A victim should not unlawfully access another account or obtain private telecommunications records.

Where content may disappear, an appropriate formal evidence-preservation procedure can be considered. Record a factual chronology and distinguish what you saw from assumptions about the offender's identity.

6. Providing an account: intent, participation and the 2026 rule

An account receiving money is an important investigative lead, not automatic proof of its holder's guilt. Knowledge, intent, access, actual control, withdrawals, communications and the person's contribution must be examined. Participation under Articles 37 and 39 depends on the established role.

Article 158(4), added by Article 13 of Law No. 7589, provides a half reduction where participation in the specified fraud offences is limited to providing the necessary payment instruments or account-use information or tools to another person, with the purpose of obtaining an unlawful benefit for oneself or another.

The law was adopted on 16 July 2026 and published in the Official Gazette on 31 July 2026, No. 33326; Article 13 took effect on publication under Article 26. This is a conditional reduction, not an amnesty or permission to rent an account.

Opening the false listing, deceiving the victim or other additional involvement may change whether the limited-participation condition is met. Publicly giving an IBAN for a legitimate payment is not equivalent, by itself, to knowingly providing criminal account access.

7. Completion, attempt and the offence date

Whether the unlawful benefit entered the offender's effective control matters for completion. A block on a transfer does not automatically mean either completion or attempt in every case; timing and actual control must be investigated.

If deception is attempted but no benefit is obtained, attempt may arise where its statutory elements are met. Multiple transfers may raise questions of a single act, successive offences or a chain; “the last transfer is always the offence date” is too broad.

These distinctions affect the applicable law, evidence and limitation. Keep the dates and amounts of every payment and attempted payment separately.

8. Reporting, reconciliation and limitation

Aggravated fraud under Article 158(1)(f) is not dependent on a victim's complaint as a prosecution condition. Withdrawal therefore does not automatically end proceedings. This does not remove the practical need to report promptly and preserve evidence.

Basic fraud under Article 157 appears in the criminal-reconciliation list in Article 253; aggravated fraud is distinct. The exact charge and any combined offences affect the available procedure.

For an adult and the ordinary Article 158(1)(f) penalty framework, Article 66 ordinarily gives a fifteen-year prosecution limitation period. Age at the offence, more serious qualifying circumstances, interruption, suspension and the actual offence classification can change the calculation. This is not a recommendation to delay a report or a universal civil recovery period.

9. Effective remorse and the special transitional provision

Under the ordinary Article 168 framework for fraud, personal remorse and full restitution before prosecution can reduce the penalty by up to two thirds. After prosecution begins but before judgment, the reduction can be up to one half. Partial restitution also requires the victim's consent under paragraph (4).

The ordinary pre-judgment rule has a specific 2026 transitional exception. Temporary Article 1(7) of Law No. 7589 concerns qualifying execution-stage convictions under Articles 157 or 158, within the new Article 158(4) scope, where Article 168 had not previously been applied. Full compensation within six months of the court's warning can permit Article 168(2) relief under the provision. Execution is not deferred or suspended under that paragraph until full compensation. Its additional coverage and procedural conditions must be checked in the actual file.

This does not create a general right for every convicted person to obtain a reduction by paying after judgment. The law also contains a separate transitional rule for certain files in appellate review. Do not confuse adoption date, publication, applicability to the conduct and the stage of the case.

Victims should document genuine repayment precisely. A promise of future payment is not proof that loss has already been fully repaired.

10. Civil recovery and practical precautions

A claim against the offender, recipient or a bank or provider requires its own legal basis. Criminal involvement, civil fault, payment-service rules and the bank's obligations are separate questions. A criminal conviction or report does not guarantee that a bank must refund every transfer.

  • Verify an urgent money request through a separate trusted channel.
  • Open a platform directly rather than following a caller's payment link.
  • Never provide one-time codes, card credentials or remote access to an unexpected caller.
  • Do not lend account access for a commission or an unexplained transfer.
  • Beware of anyone demanding another payment to “release” or “recover” the first loss.

11. Legislation and official sources

Older judgments about account involvement or effective remorse must be read with the later amendment and transitional rules; an individual outcome is not a universal presumption of guilt.

General information

General information on Turkish law as at October 2026. Classification, intent, evidence, offence date and procedural stage must be assessed individually. Prompt action may help preserve money and evidence but does not guarantee recovery or conviction. Turkish legal texts govern.

Share