Obtaining a Crypto Licence in Turkey

What the sections below do is walk through how crypto licensing in Turkey works once the regulatory updates are taken in. Set out here are the capital sums now asked of joint-stock companies, the rules that keep client balances walled off and the standards covering the storage of keys. The provider classification (KVHS) gets a full airing, as does the way a firm handles the technical board at TÜBİTAK and the regime that governs the audit of reserves carried out every three months.

Obtaining a crypto licence in Turkey: the legislative base and the roles of SPK, MASAK, TCMB and TÜBİTAK

Turkey has let go entirely of the notion of a digital-asset market that answers to no rules. At the heart of the reform lies Law No. 7518, the act that recast Capital Markets Law No. 6362 on a broad scale. Through those amendments, formal definitions of blockchain platforms and of custodial services found their way into the legal framework. A company aiming to obtain a crypto licence in Turkey is bound to mould its business processes to the state standards. Open commercial operations without first clearing the prescribed procedures and criminal prosecution follows close behind.

Two purpose-made communiqués from the Capital Markets Board (SPK) carry the fine detail of how the crypto business in Turkey is regulated. The order of incorporation and the make-up of companies are fixed by Act No. III-35/B.1. The rules of listing, the workings of transfer and the asks on capital adequacy fall to Document No. III-35/B.2.

The competence of state bodies in the crypto-asset sector

At the top of the controlling chain stands the SPK, the body that hands out the official permissions. Round-the-clock AML/CFT oversight is run by the financial-intelligence unit (MASAK), which makes providers stand up client verification and hold to the cross-border rules on relaying transaction data (the Travel Rule). For the technical side it is the Scientific and Technological Research Council (TÜBİTAK) that judges how well the databases hold up to attack. Through the Central Registry Agency (MKK) the venues’ internal records are kept aligned with the state sector.

The present regulation of crypto-assets takes account of the firm line held by the Central Bank (TCMB). The body keeps an outright ban on folding tokens into the real economy as a means of settlement.

Crypto licensing in Turkey: the CASP/KVHS classification and the kinds of crypto licence-permitted services

Turkish legislation reaches for the home-grown term KVHS in place of the English abbreviation, the label it pins on a provider of crypto-asset services. Participants in the market are sorted by law into two camps: trading venues and depositary institutions. The former hold the exchange environment together — buying, selling and the swapping of tokens. Opening a lawful exchange point asks the applicant to pass full licensing as a crypto-asset service provider in Turkey through the Capital Markets Board (SPK).

The second, separate segment is made up of custodial organisations, the ones answerable for holding digital assets. A company that means to administer the wallets of third-party projects needs to obtain a custodial licence in Turkey, with heightened obligations to protect data. At the same time, the official grant of a permission for a crypto platform allows a strictly fixed list of operations:

• receiving, logging and executing the orders clients give on their deals;
• handling settlement, setting up clearing and the offsetting of mutual claims;
• first-round distribution, helping to issue and to place tokens;
• putting tokens on, and taking them off, the in-house listing;
• advising on investment when the user’s portfolio clears the set thresholds.

Every crypto licence issued in Turkey lays tight limits on what the IT systems may do. Because of the Central Bank’s circulars, firms are barred from building payment gateways for commerce or issuing cards tied to a wallet balance. Local licensing of a crypto exchange in Turkey turns it into a closed investment hub that runs apart from the retail trade in goods.

Foreign platforms are not spared either: a full licence to hold crypto-assets in Turkey binds them too once they run directed marketing. A Turkish-language interface, the recruiting of local bloggers or the wiring-in of local top-up channels all read, to the regulator, as activity aimed at the home market. As it polices the field, the body shuts off foreign resources that go without authorisation, which leaves official SPK permission for a crypto exchange in Turkey as the sole lawful path to serving the country’s residents.

For clarity, the basic kinds of crypto service and the regulatory specifics of the parties involved fall into two lawful lines:

• Trading platforms (Platformlar): arranging the exchange, matching orders, running listings and initial placements.
• Holding organisations (Saklama Kuruluşları): custodial keeping of tokens and the management of closed cryptographic keys.

Arranging a crypto licence for a company in Turkey: demands on the applicant, the shareholders and the management

The opening arrangement of a crypto licence for a company in Turkey obliges the applicant to meet stiff corporate conditions. The firm is registered only as a joint-stock company (Anonim Şirket) with registered shares. The charter has to state plainly that the sole object of the legal entity is the supply of services in the digital-token field. Any handing of holdings to third parties calls for prior clearance with the Capital Markets Board (SPK).

The SPK demands on a crypto company in Turkey now in force provide for an end-to-end audit of every ultimate beneficiary. Shareholders are bound to prove that the capital is of lawful origin and to show their financial soundness. The market is shut to anyone with convictions for economic crime or financial fraud.

Thorough licensing of a crypto company in Turkey is built on the international fit-and-proper principle for management. The regulator looks closely at the directors’ professional experience, their education and their business reputation. Independent units of internal control, risk management, IT audit and compliance are set up within the staff.

For the business to be authorised successfully, a compulsory hierarchy of internal bodies is formed.

• a board of directors sitting as the highest executive layer;
• a stand-alone Crypto-Asset Committee watching over technological risk;
• a certified compliance officer as the point of contact with the financial-intelligence unit;
• an internal-audit function answering directly to the top of the firm;
• an IT department running network-security monitoring around the clock.

To obtain a crypto licence for a company in Turkey, the Crypto-Asset Committee has to be staffed correctly. This body is made up of at least three people, one of them a member of the board of directors. The majority of those on it must hold a specialist track record in information technology, law or finance of no less than seven years.

Securing a crypto licence in Turkey: capital, financial norms and SPK limits

Stiff prudential barriers for those active on the market have been laid down by the Capital Markets Board (SPK). As it works through its full crypto licensing in Turkey, the controlling body keeps its sights on the sector’s stability over the long haul and on shielding investor money. What the directives in force shut out completely is the registration of nominal enterprises propped up by thin backing. The monetary conditions move with whichever line of commercial activity is chosen.

Steep demands on the financial base of technology firms are written into the current regime. At present a crypto platform in Turkey has to show capital of 250,000,000 lira. A heavier fund still is asked of depositary institutions that intend to administer closed keys and keep tokens. For a custodial service of that sort the threshold sits at 630,000,000 lira.

Beyond the starting sums, the supervisory body has approved a scale of dynamic liquidity for the larger operators. Arranging a crypto licence for a company in Turkey obliges the management to keep watch without let-up over the volume of funds taken in. Where the valuation of balances held passes 1,250,000,000 lira, the firm must set aside a further 1.5% of the excess. That surcharge falls away entirely once the enterprise’s own balance reaches 1,900,000,000 lira.

SPK financial norms for crypto-service providers

The constant monitoring of reserves bears directly on the accompanying investment service. Trading venues may give individual advice only to users whose verified portfolio stands at no less than 60,000,000 lira. To cut the risk of an instant pull-out of assets, a limit on automatic transfers without manual sign-off by the compliance service has been brought in. It runs to 1,250,000 lira for a single transaction.

A crypto licence in Turkey and the technical demands: custody, cold wallets, the audit of reserves and AML

Crypto licensing in Turkey today ties the enterprise’s IT infrastructure to its legal duties. Companies are obliged to roll out a protected architecture of information systems that heads off unauthorised access to the servers. The regime calls for encryption mechanisms, duplicate database stores and plans for the emergency recovery of networks.

The rule on keeping assets apart holds a place all its own. Every user’s fiat money and tokens must sit on dedicated accounts walled off from the platform’s own holdings. What this legal arrangement does is guard clients against the firm going bankrupt or its accounts being seized over the legal entity’s debts.

Balances are kept safe by holding to the custodial regimes. The rules say the bulk of client tokens has to live inside protected custodial infrastructure. Hot wallets come into play only within the limits of operating liquidity, there to make instant withdrawals work. Under the demands now placed on crypto platforms in Turkey, an exchange may contract solely with those depositary institutions that have cleared inspection at the Capital Markets Board (SPK).

Every three months the companies are bound to undergo an independent technical audit of proof of reserves:

• laying open the precise blockchain addresses of each wallet that is used;
• giving the auditors cryptographic evidence that the private keys are owned;
• a close match of internal user balances against the coins genuinely on hand;
• evidencing the fiat balances on the segregated bank accounts;
• going through the IT logs to bring any concealed tampering with issuance to light.

The technical report has to show the spread of funds across networks, the access-management models and details of the custodians. The check covers the largest assets by volume until the combined coverage reaches at least 80% of the total client balances. Full, hundred-per-cent backing has to be confirmed for every position.

Alongside this, a compliance system is set in motion in keeping with the demands of the financial-intelligence unit, MASAK. The client-verification routine is carried out before the first operation, taking in mechanisms of remote identification by biometric parameters. In arranging a crypto licence in Turkey, the founders put the international Travel Rule into effect. On transactions from 15,000 lira the platform must pass verified details of the sender to the receiving side.

The process of getting a crypto licence in Turkey: stages, timescales, documents and official fees

Authorising a digital-currency service provider rests on clearing two regulatory filters one after the other. This careful process of getting a crypto licence in Turkey leaves no room for a platform thrown open on a whim with its infrastructure half-ready. At every step the Capital Markets Board (SPK) goes carefully over the information handed in, gauging how clean the business is corporately and how mature the team is technologically.

When they framed the regulatory stages of crypto licensing, the lawmakers built in a special transitional regime for projects already in existence. An operating venue had either to announce its intention of going through authorisation or to begin winding itself up. Public lists of such organisations are kept by the SPK. Sitting on the register of operating providers marks passage of the first control, yet it is no substitute for the final permitting document. By the regulator’s decision of the twenty-sixth of March, the separate deadlines for supplying custodial contracts were pushed back, set to run until the large depositaries stand fully ready to take balances in en masse.

To pass the audit successfully, the applicant puts together an extensive dossier:

• the formal application lodged with the Capital Markets Board;
• the joint-stock company’s charter in notarised form, plus a trade-register extract;
• papers showing the directors carry no convictions and no bankruptcies;
• bank statements that prove the fund shares were paid up in full;
• a business plan laying out the service types and how the project earns;
• the AML/CFT policies together with the in-house verification regimes;
• technical files on the IT systems and the schemes that protect data;
• signed contracts or agreements with licensed custodians;
• staff diplomas that attest to the track record required.

All the assembled documents for a crypto licence in Turkey are subject to translation into Turkish and apostille. Any inaccuracy in the description of the wallet algorithms or any gap in the management’s background brings the review of the case to a halt. The exact timescale for getting a crypto licence in Turkey, meanwhile, hangs on the speed of the IT checks at the scientific and technological council. As a rule the whole period takes from six to nine months from the day the initial application is filed.

A crypto licence in Turkey: taxation, prohibitions and restrictions

Running a business lawfully once the permitting documents are in hand calls for keeping to the tax and regulatory rules. The authorities have not brought in a standalone “crypto tax” to replace the standard charges. All the activity of crypto-asset service providers (KVHS) is taxed within the framework of classic corporate law.

A company carrying KVHS status ranks as a full taxpayer and meets the standard corporate profit tax at 25%. The fiscal updates bring in a parallel-calculation rule: the minimum domestic tax cannot drop under 10% of income adjusted before most of the reliefs come off. Dividends paid out to non-residents draw a withholding levy of 15%, while the standard VAT on the commercial services that go alongside lands at 20%.

Securing a licence for a crypto exchange in Turkey leaves the project still bound by a set of hard operating taboos. An outright ban on putting coins to work as a payment mechanism comes from the Central Bank, which blocks the building of settlement gateways for online shops and the issue of debit cards alike. From the Capital Markets Board (SPK) come two further bars: no margin leverage or futures offered to retail clients, and no drawing-in of users by new players ahead of the final leave to operate.

Weighty restrictions on crypto exchanges in Turkey reach as far as the cross-border dealings of foreign participants. Without registering a local joint-stock company, an international platform has no right to serve residents of the country. Let a foreign site lean on the local language, push targeted advertising or deal with local banks, and the regulator brands the activity unlawful and sets communications providers to blocking the resource.

Pay no heed to the admission rules and hard enforcement comes down on the offender. Supplying services in the digital-currency field without the SPK’s approval is made a criminal matter by Article 109/A of the Capital Markets Law, which sets imprisonment at three to five years. The court adds a fine on top, pitched at somewhere between 5,000 and 10,000 days.

In closing: obtaining a crypto licence in Turkey

Obtaining a crypto licence in Turkey under the renewed legal regime is an ambitious, resource-hungry undertaking that demands full transparency and sizeable financial outlay from an international business. The system of prudential oversight the authorities have built, with the Capital Markets Board at its head, has done away entirely with the scope for grey or nominal schemes. High demands on the charter fund, the compulsory three-monthly audit of reserves and the firm control exercised by the financial-intelligence unit MASAK turn the Turkish jurisdiction into a mature, safe and predictable market for institutional investors.