⚖️ MASAK Compliance Turkey: Anti-Money Laundering Obligations for Foreign Investors

MASAK compliance Turkey is the set of legal obligations imposed on businesses operating in Turkey under the authority of the Financial Crimes Investigation Board (Mali Suçları Araştırma Kurulu), requiring customer identification, suspicious transaction reporting, and establishment of internal AML compliance programs to prevent money laundering and terrorist financing. Foreign investors who incorporate companies, open bank accounts, or acquire real estate in Turkey become “obliged entities” under Law No. 5549, often without realizing it until their first routine bank compliance check or, in more serious cases, until their accounts are frozen.

How can a company be tax-compliant in every respect and still face a frozen bank account? The answer lies in the structural gap between tax compliance and AML compliance: two separate legal regimes that rarely intersect. MASAK does not coordinate with the tax office before freezing an account, and a company can be current on every filing with the Revenue Administration while failing a single suspicious transaction reporting obligation.

Why does approval from the Ministry of Treasury and Finance not guarantee immunity from MASAK scrutiny? Because investment incentives and tax exemptions operate on a different legal track entirely. MASAK’s monitoring system runs independently, and ministry approval is not a compliance certificate. In this regime, the safest position is the one built before scrutiny begins, not the one assembled after it does.

This guide, prepared by Fatih Oznur of Oznur & Partners, explains what MASAK requires from foreign-owned businesses in Turkey as of 2026: the monetary thresholds that trigger reporting duties, the timeline for suspicious transaction reports, the administrative fines for non-compliance, and the situations in which legal counsel is not optional.

⚖️ What Is MASAK and Which Foreign Investors Are Obliged Entities Under Law No. 5549?

MASAK (Mali Suçları Araştırma Kurulu) is Turkey’s financial intelligence unit, operating under the Ministry of Treasury and Finance. Established under Law No. 4208 in 1997 and currently governed by Law No. 5549 on the Prevention of Laundering Proceeds of Crime, MASAK receives and analyzes suspicious transaction reports, conducts financial intelligence investigations, and imposes administrative sanctions on non-compliant entities.

The most common misconception among foreign investors is that MASAK obligations apply only to banks and large financial institutions. This is incorrect.
Under Article 3 of Law No. 5549, “obliged entity” status extends to a wide range of businesses, including:

• All banks and financial institutions operating in Turkey
• Insurance and reinsurance companies, brokers, and loss adjusters
• Capital markets intermediaries, portfolio management companies, and investment funds
• Factoring, financing, and leasing companies
• Currency exchange offices and money transfer services
• Notaries public
• Lawyers (subject to certain privilege exceptions)
• Certified public accountants and independent auditors
• Real estate agents and real estate consultancy firms
• Used vehicle dealers, antique dealers, and art galleries involved in cash transactions above specified thresholds
• Sports clubs organized as joint-stock companies
• Cryptocurrency asset service providers under the updated 2025-2026 framework
• Payment and electronic money institutions

For foreign investors, the most relevant categories are bank account holders (which includes virtually every company incorporated in Turkey), real estate purchasers, company shareholders at the point of formation, and any entity handling cash or wire transfers exceeding TL 500,000 in a single or linked transaction.

This is precisely why foreign investors increasingly ask: “Does my Turkish limited liability company need a MASAK compliance officer even if I am the sole shareholder and the company has no local employees?” The answer depends on transaction volume and sector risk classification, not on ownership structure. A single-shareholder LLC processing TL 2 million annually in international wire transfers carries the same suspicious transaction reporting obligations as a regulated financial institution, with one critical difference: the financial institution has a compliance department, and the foreign-owned LLC typically does not.

⚖️ What Are the Core MASAK Compliance Obligations for Foreign-Owned Businesses in Turkey?

Law No. 5549 and the associated Regulation on Measures to Prevent Laundering Proceeds of Crime and Financing of Terrorism impose four primary obligations on all obliged entities operating in Turkey. Failure to fulfill any one of them triggers administrative fines and, in repeated or willful violations, potential criminal liability.

Customer Identification Obligation

Every obliged entity must verify the identity of any person performing a transaction, as well as any person on whose behalf a transaction is performed. Verification requires official documents: a passport for foreign individuals, a trade registry gazette for legal entities. Records must be retained for at least eight years from the date of the last transaction. For foreign investors, this obligation is triggered when opening a bank account, incorporating a Turkish company through a notary, purchasing real estate, executing any transaction exceeding TL 500,000, or establishing any business relationship where there are reasonable grounds to suspect money laundering or terrorist financing.

Suspicious Transaction Reporting Obligation

Under Article 4 of Law No. 5549, obliged entities must file a Suspicious Transaction Report (STR) with MASAK whenever they suspect or have reasonable grounds to suspect that assets involved in a transaction are derived from illegal activities, are being used for illegal purposes, or are connected to terrorist financing or weapons financing. The report must be filed within ten working days from the date the suspicion arose, as set out in Article 27 of the Regulation on Measures. There is no minimum monetary threshold:

any transaction amount can trigger the obligation if the pattern suggests laundering. In practice, Turkish banks are filing STRs at increasing rates on unusual patterns, including wire transfers from FATF-monitored jurisdictions and cash deposits structured just below reporting thresholds.

Compliance Program Establishment Obligation

Under Articles 7-27 of the Regulation on Measures, obliged entities must establish institutional policies and procedures covering: risk management policies identifying and mitigating money laundering risks specific to the entity’s sector; monitoring and control activities to detect suspicious transactions; appointment of a compliance officer (and deputy, depending on entity size) responsible for implementing the program and reporting to MASAK; training activities for all personnel on AML obligations and internal procedures; and internal audit activities to assess program effectiveness.

As of 2026, following the amendments published in the Official Gazette on December 25, 2024 (Issue No. 32763), compliance officers must be authorized by MASAK through an examination administered by the Capital Markets Licensing, Registry and Training Organization (SPL). The first electronic examinations began on December 10, 2025. A compliance officer who is not MASAK-authorized cannot legally serve in that capacity, and the entity that appointed them remains exposed to fines as if no officer were appointed at all.

Record Keeping and Retention Obligation

All identification documents, transaction records, and STR copies must be retained for eight years from the date of the last transaction or the date the business relationship ended, whichever is later. Electronic records are permitted but must be accessible for MASAK inspection without delay. For foreign investors, this means that even after selling a Turkish company or property, the records relating to those transactions must be preserved by the obliged entity that facilitated them.

⚖️ 2026 Administrative Fine Schedule for MASAK Non-Compliance

Under Articles 28-30 of Law No. 5549, MASAK imposes escalating administrative fines on obliged entities that fail to fulfill AML obligations. The 2026 fine amounts reflect heightened enforcement activity, particularly targeting real estate transactions, cryptocurrency service providers, and cross-border wire transfers involving non-cooperative jurisdictions.

Violation Type	2026 Fine Range (TL)	Key Factors
Failure to identify customers or verify identity	50,000 – 500,000	Number of customers, duration of violation
Failure to file suspicious transaction report (STR)	100,000 – 1,000,000	Transaction amount, willful omission
Failure to establish compliance program	250,000 – 2,000,000	Entity size, sector risk classification
Failure to appoint authorized compliance officer	150,000 – 750,000	Duration without authorized officer
Failure to provide information or documents to MASAK	100,000 – 500,000	Delay period, level of cooperation
Failure to retain records for the 8-year period	50,000 – 250,000	Record type, reason for loss
Repeated violation within 3 years	Double the original fine	Same violation type
Second repetition within 3 years	Four times the original fine, up to TL 5,000,000	Statutory maximum applies

Beyond administrative fines, willful violations can trigger criminal prosecution under Article 282 of the Turkish Penal Code for money laundering offenses, carrying potential imprisonment of 3 to 7 years. For foreign investors, a criminal conviction carries additional immigration consequences: potential deportation and inadmissibility for future Turkish residence permit applications or citizenship proceedings. The General Directorate of Migration Management coordinates with MASAK, and a pending AML investigation is treated as a negative factor in any public order assessment.

⚖️ Obliged Entities vs. Non-Obliged Entities: A Practical Classification

Understanding whether your business qualifies as an obliged entity under Law No. 5549 is the necessary first step. The classification determines which obligations apply directly to the entity and which are handled by an intermediary such as a bank or notary.

Activity or Entity Type	Obliged Entity Under Law No. 5549?	Key MASAK Obligations
Turkish bank account holder (individual or company)	Yes (through the bank)	Bank handles identification and STR filing; account holder must provide accurate information on request
Turkish LLC with annual transactions under TL 1 million, no high-risk sector designation	Indirect (through bank and notary)	No direct compliance program required; bank monitors transactions
Turkish LLC with annual transactions over TL 5 million or operating in a high-risk sector	Directly obliged	Must establish compliance program, appoint MASAK-authorized compliance officer, file STRs independently
Real estate purchase by foreign individual (one-time transaction)	Individual is not directly obliged	The real estate agent or lawyer facilitating the transaction is the obliged entity
Real estate agent firm	Yes	Must identify buyers and sellers, file STRs on cash transactions above threshold
Cryptocurrency exchange operating in Turkey	Yes (since 2025 amendments)	Full compliance program, travel rule implementation, enhanced due diligence required
Law firm receiving client funds in escrow	Yes (with privilege exceptions)	Client identification required; STR filing exception applies to legally privileged advice

The most common error foreign investors make is assuming that because their bank handles customer identification, they have no direct MASAK obligations. This is accurate only for the smallest companies with low transaction volumes and no high-risk sector designation. Once a Turkish entity processes more than TL 5 million annually or operates in a designated high-risk sector, the compliance program obligation is direct, belongs to the company itself, and cannot be delegated to the bank.

⚖️ When Does a Foreign-Owned Business Need a Lawyer for MASAK Compliance?

Not every MASAK-related matter requires legal representation. Routine tasks, such as standard customer identification, basic record keeping, and filing straightforward STRs, can be handled internally by a properly trained compliance officer. The following situations, however, require legal counsel before the entity takes any action.

MASAK information request (bilgi talebi). When MASAK sends a formal request under Article 11 of Law No. 5549, the entity is legally obligated to respond. The scope of the request, the documents to be produced, and the interpretation of specific questions all require legal review. A lawyer can assess whether the request exceeds MASAK’s authority, identify privilege issues in communications with the entity’s own counsel, and prepare a response that does not inadvertently expand the investigation’s scope.

MASAK investigation (ön araştırma or soruşturma). MASAK conducts both preliminary and formal investigations. In either case, the entity must provide access to records, facilities, and personnel. Legal representation is essential for coordinating with MASAK investigators, protecting privileged communications, managing the scope of document production, and preparing a defense strategy if administrative fines or criminal referral are likely.

Frozen bank account based on MASAK suspicion. Under Article 11/A of Law No. 5549, banks are authorized to temporarily freeze accounts when there is suspicion of money laundering or terrorist financing. No court order is required for the initial freeze. A lawyer can request the basis for the freeze, communicate with MASAK directly, and file a legal challenge if the freeze lacks proper legal grounds. For the full procedure, including timelines and available legal remedies, see the dedicated guide on frozen bank accounts in Turkey.

Compliance program design and audit. A lawyer is essential for reviewing a compliance program’s adequacy under current MASAK regulations, identifying gaps that could trigger fines, and ensuring the program preserves the entity’s legal privilege in any future investigation. For foreign-owned businesses with cross-border operations, a lawyer can also coordinate Turkish AML obligations with home-country requirements such as FATCA, EU AMLD directives, and FATF recommendations.

Complex STR involving multi-jurisdictional structures. Standard STRs can be filed by a trained compliance officer. When the transaction involves trusts, offshore entities, or multi-layered ownership chains, lawyer review ensures the STR accurately describes the legal relationships without disclosing privileged information or inadvertently prejudicing the client in a broader investigation.

Sophisticated investors routinely ask: “When is the right moment to engage a lawyer for MASAK compliance, before contact from MASAK or after?” The answer is before. A lawyer who reviews the compliance program, trains the compliance officer, and establishes protocols for handling MASAK requests can prevent most enforcement actions entirely. Legal intervention after MASAK has already opened an investigation is reactive, more costly, and less likely to avoid fines than proactive compliance structuring.

⚖️ How Do MASAK Risks Differ for Foreign Investors Compared to Turkish-Owned Businesses?

Turkish law does not distinguish between Turkish-owned and foreign-owned entities for MASAK compliance purposes. The obligations are identical. The practical risk profile, however, differs significantly in three areas.

Awareness deficit. Turkish business owners typically receive MASAK briefings through banks, accountants, and chambers of commerce. Foreign investors, particularly those operating remotely, often incorporate a Turkish company, open a bank account, and begin transacting without any AML briefing from their formation service provider. This awareness gap is the single most common compliance failure among foreign-owned Turkish companies, and it is fully preventable.

Cross-border transaction scrutiny. Wire transfers from foreign shareholders to Turkish company accounts, dividend repatriation, and payments to international suppliers all fall within MASAK’s monitoring scope. Transactions involving FATF-monitored jurisdictions or EU-sanctioned countries receive elevated scrutiny. Foreign investors from certain regions should structure transactions with documented business rationale from the outset, not as an afterthought when a bank compliance officer raises questions.

Immigration consequences of non-compliance. For a Turkish-owned business, a MASAK administrative fine is a financial penalty and nothing more. For a foreign investor, a MASAK investigation or criminal referral affects residence permit renewals, citizenship applications, and future entry into Turkey. A pending AML investigation is grounds for denying or revoking residence permits under the General Directorate of Migration Management’s coordination with MASAK. Foreign investors pursuing Turkish citizenship by investment should be aware that any unresolved MASAK matter will stall the application until fully resolved.

Which legal framework gives the most predictable AML compliance environment for a foreign-owned SME? Turkey’s enforcement is neither the strictest in the region nor the most lenient. The key variable is timing: foreign-owned entities that engage experienced legal counsel before problems arise can achieve full compliance at manageable cost. The entities that ignore MASAK obligations discover the enforcement consequences escalate faster than the original exposure would have warranted.

❓ Frequently Asked Questions About MASAK Compliance for Foreign Investors

✅ Does a foreign-owned Turkish company need to appoint a MASAK compliance officer?

It depends on the company’s transaction volume and sector risk classification. Under the Regulation on Measures, any obliged entity that processes transactions above MASAK’s thresholds or operates in a high-risk sector must appoint a compliance officer. As of 2026, the compliance officer must hold MASAK authorization through the SPL examination, which began in December 2025. Small companies with low transaction volumes and no high-risk designation are exempt from the compliance officer requirement but remain subject to customer identification and STR filing obligations independently.

✅ What is the monetary threshold for filing a suspicious transaction report with MASAK?

There is no minimum monetary threshold for STR filing. Under Article 4 of Law No. 5549, the reporting obligation arises whenever an obliged entity suspects or has reasonable grounds to suspect that assets involved in a transaction, regardless of amount, are derived from illegal activities or are being used for illegal purposes. Internal compliance programs should establish escalation thresholds to guide staff, but no amount is categorically exempt from review if the transaction pattern is suspicious.

✅ How long does a company have to file a suspicious transaction report after suspicion arises?

Under Article 27 of the Regulation on Measures, the STR must be filed within ten working days from the date the suspicion arose. The clock starts when a reasonably diligent compliance officer, applying the entity’s internal procedures, would have formed suspicion based on available information. Filing beyond the ten-day window triggers administrative fines under Article 28 of Law No. 5549, assessed independently of the underlying transaction.

✅ Can a foreign investor’s bank account in Turkey be frozen based on a MASAK suspicion?

Yes. Under Article 11/A of Law No. 5549, banks are authorized to temporarily freeze accounts when there is suspicion that assets are linked to money laundering or terrorist financing. No court order is required for the initial freeze. MASAK can also directly instruct the bank to freeze an account. Once frozen, the account holder has limited access to funds, and the freeze can be extended. A lawyer can request the legal basis for the freeze from the bank, communicate directly with MASAK, and file a challenge before the relevant court if the freeze lacks proper legal grounds.

✅ What are the 2026 MASAK administrative fines for non-compliance?

The 2026 fines range from TL 50,000 to TL 5,000,000 depending on violation type, entity size, and whether the violation is repeated. Failure to file an STR carries a first-violation fine of TL 100,000 to TL 1,000,000. Failure to establish a compliance program carries TL 250,000 to TL 2,000,000. Repeated violations within three years are doubled; a second repetition within three years is quadrupled, subject to the TL 5,000,000 statutory maximum. The complete schedule is published at masak.hmb.gov.tr.

✅ Does MASAK compliance apply to lawyers providing legal services to foreign investors in Turkey?

Yes, with important exceptions. Under Article 3 of Law No. 5549, lawyers are designated as obliged entities. Under Article 4, however, an exception applies to information received from or about a client in the course of determining legal position or performing legal defense services, including advice on initiating or avoiding legal proceedings. Turkish lawyers must identify their clients but are generally not required to file STRs on information protected by legal professional privilege. The exception does not cover funds held in escrow that fall outside the scope of privileged legal advice.

✅ How long must MASAK compliance records be retained after a transaction is completed?

All identification documents, transaction records, and STR copies must be retained for eight years from the date of the last transaction or the date the business relationship ended, whichever is later. Electronic retention is permitted provided the records are accessible for MASAK inspection without delay. After the eight-year period, records should be destroyed in accordance with Law No. 6698 on Protection of Personal Data.

✅ What happens to MASAK obligations when a foreign investor sells their Turkish company or real estate?

The obliged entity at the time of the transaction retains the record-keeping obligation for eight years, even after that entity ceases operations or the business relationship ends. For a company sale, the successor entity inherits the record-keeping obligation unless records are formally transferred and the seller assumes retention responsibility by written agreement. For a property sale, the real estate agent or lawyer who facilitated the transaction remains obliged to retain records. Foreign investors selling Turkish assets should obtain written confirmation from the relevant obliged entity that records will be preserved for the full statutory period.

✅ Can a foreign investor apply for Turkish citizenship while under a MASAK investigation?

An application can be filed, but approval is unlikely until the investigation is resolved. The Ministry of Interior and the General Directorate of Migration Management coordinate with MASAK on citizenship applications. A pending AML investigation or unresolved administrative fine is treated as a negative factor in the public order and security assessment required for citizenship approval. If the investigation concludes with no violation found or with a fine that has been paid, the application can proceed. If the investigation results in a criminal referral for money laundering, the citizenship application will be denied and existing residence permits may be revoked.

✅ Does Turkey share MASAK compliance information with foreign governments and financial intelligence units?

Yes. MASAK is a member of the Egmont Group of Financial Intelligence Units and exchanges information with over 170 FIUs worldwide under the Egmont principles. Turkey also maintains bilateral AML information-exchange agreements with the United States, EU member states, the United Kingdom, and other jurisdictions. A MASAK investigation or fine can be shared with an investor’s home-country FIU, potentially triggering parallel compliance obligations or enforcement actions in that jurisdiction.

⚖️ Related Legal Resources

🔹 AML Compliance and Banking

Frozen Bank Account in Turkey — Covers the legal basis for account freezes under Article 11/A of Law No. 5549, the role of MASAK in initiating freezes, timelines, and the legal remedies available to account holders in Turkish courts.

Banking and Finance Lawyer Turkey — Covers banking regulatory compliance, loan structuring, cross-border finance transactions, and BDDK-regulated entity obligations for foreign investors operating in Turkey’s financial sector.

🔹 Regulatory Compliance and Corporate Governance

Regulatory Compliance Lawyer in Turkey — Covers the full scope of Turkish regulatory compliance obligations for foreign-owned businesses, including MASAK, BDDK, SPK, and sector-specific licensing requirements.

Company Formation in Turkey — Covers LLC and joint-stock company incorporation procedures, minimum capital requirements under 2026 regulations, notarial identification obligations, and the compliance baseline that applies from the date of registration.

Corporate Law in Turkey — Covers shareholder agreements, board governance, capital structure, and the corporate law framework applicable to foreign-owned entities under the Turkish Commercial Code.

🔹 Investment, Citizenship and Immigration

Turkish Citizenship Lawyer — Covers the investment thresholds, application process, and public order assessment framework that applies to citizenship applications, including the impact of pending MASAK investigations on eligibility.

Foreign Investment Advisory — Covers investment structuring, incentive applications, sector-specific restrictions, and the regulatory due diligence required before committing capital to a Turkish project.

Real Estate Lawyer in Turkey — Covers title deed procedures, foreign ownership restrictions, VAT exemptions for foreign buyers, and the MASAK obligations that apply to real estate agents and legal counsel facilitating property transactions.

MASAK compliance in Turkey is not a one-time task completed at incorporation. It is a continuous obligation that evolves with the company’s transaction profile, sector classification, and the regulatory calendar. The investors who treat it as a standing legal responsibility, rather than a box checked once at the notary, are the ones who never learn what the enforcement side of Law No. 5549 looks like from the inside.