National Supervisory Authority & Licensing Qualification Dossier • Middle East & GCC
MASAK
TürkiyeFinancial Crimes Investigation Board (Türkiye)
Source / Native Reference: 土耳其金融犯罪调查委员会
- Supervisory tier
- Tier-2
- License classes
- 2
- Licensed records
- 2
- Active / regulated
- 1
Statutory Supervisory Mandate & Scope
Financial Crimes Investigation Board (Türkiye) (MASAK) oversees anti-money laundering registration, Virtual Asset Service Provider (VASP) compliance, Money Services Business (MSB) supervision, and financial crime intelligence in Türkiye.
Prudential Tier Assessment
Tier-2Tier-2 national Financial Intelligence Unit (FIU) and AML/CFT / Virtual Asset Service Provider (VASP) supervisor in Türkiye.
National licensing qualifications & statutory authorisation classes (MASAK)
Authorisation categories, permitted institutional and retail activities, minimum initial capital adequacy, and ongoing prudential solvency rules enforced by MASAK in Türkiye.
| License class / code | Official designation | Permitted institutional & retail activities | Minimum initial / base capital | Ongoing prudential & solvency rule |
|---|---|---|---|---|
| VASP / DCE Registration | Virtual Asset Service Provider & Custodial Wallet Registration | Fiat-to-crypto exchange, crypto-to-crypto exchange, virtual asset transfer, and custodial wallet administration. | USD $50,000 – $150,000 equivalent share capital (or statutory fit-and-proper + local MLRO presence). | Continuous KYC/CDD onboarding, blockchain analytics transaction monitoring, and annual independent AML audit. |
| MSB / Currency Exchange Registration | Money Services Business & Remittance Registration | Money transmission, foreign currency dealing, and payment instrument issuance. | Subject to state/national surety bond and minimum net worth requirements. | Currency Transaction Reports (CTRs) and Suspicious Activity Reports (SARs/STRs) via goAML / BSA E-Filing. |
Investor compensation, client money segregation & digital-asset regime
Statutory counterparty protections, custody reconciliation mandates, and virtual-asset licensing status under MASAK.
AML/CFT Registration Only (Non-Prudential / No Investor Compensation Scheme)
- Maximum coverage per client
- Not covered by statutory investor compensation (FIU/MSB registration supervises AML/CFT compliance rather than prudential solvency)
- Eligible counterparties & scope
- Counterparties must verify whether the entity also holds a separate prudential securities or banking licence.
MASAK VASP Custodial Wallet & Client Ledger Separation Rules
- Reconciliation & audit cadence
- On-chain and off-chain omnibus ledger reconciliation; separation of customer virtual assets from corporate treasury.
- Approved custodian requirements
- Multi-signature / MPC hardware security module (HSM) custody and segregated fiat settlement accounts.
MASAK Statutory VASP / Digital Currency Exchange Registration
- Travel Rule, custody & stablecoin rules
- Mandatory originator and beneficiary Travel Rule data transmission for virtual asset transfers.
Primary Governing Statutes & Rulebooks
- Anti-Money Laundering and Counter-Terrorist Financing Act of Türkiye
- FATF Recommendations 15 (Virtual Assets & VASPs) & 16 (Wire Transfer / Travel Rule)
- MASAK Mandatory VASP / MSB Registration & Beneficial Ownership Regulations
Regulatory Reporting & Audit Obligations
Prompt filing of Suspicious Transaction Reports (STRs) and Threshold Transaction Reports with MASAKAppointment of a resident Money Laundering Reporting Officer (MLRO) and annual independent AML/CFT compliance audit5-year retention of KYC identity records and Travel Rule cryptographic counterparty data
Cross-Border Equivalence & Passporting
Territorial registration required in Türkiye whenever soliciting or onboarding domestic residents.
Supervised institutions & MASAK licence records in our database
2 licence records referencing MASAK (1 regulated/registered, 1 flagged with warnings/revocations).
MASAK (Türkiye): institutional licensing & due diligence FAQ
Key statutory capital, compensation, custody segregation, and verification answers for compliance teams.
What are the primary licensing classes and minimum capital requirements under MASAK (Türkiye)?
MASAK (Financial Crimes Investigation Board (Türkiye)) supervises financial institutions in Türkiye under Anti-Money Laundering and Counter-Terrorist Financing Act of Türkiye and FATF Recommendations 15 (Virtual Assets & VASPs) & 16 (Wire Transfer / Travel Rule). Key statutory authorisation classes include: VASP / DCE Registration (Virtual Asset Service Provider & Custodial Wallet Registration — min. capital: USD $50,000 – $150,000 equivalent share capital (or statutory fit-and-proper + local MLRO presence).); MSB / Currency Exchange Registration (Money Services Business & Remittance Registration — min. capital: Subject to state/national surety bond and minimum net worth requirements.). Ongoing prudential supervision requires strict adherence to capital adequacy and liquidity buffers.
Does MASAK provide statutory investor compensation and mandatory client asset segregation?
Under MASAK's framework, investor protection is governed by AML/CFT Registration Only (Non-Prudential / No Investor Compensation Scheme) with maximum coverage of Not covered by statutory investor compensation (FIU/MSB registration supervises AML/CFT compliance rather than prudential solvency) (Counterparties must verify whether the entity also holds a separate prudential securities or banking licence.). For client money and custody assets, supervised firms must comply with MASAK VASP Custodial Wallet & Client Ledger Separation Rules, performing on-chain and off-chain omnibus ledger reconciliation; separation of customer virtual assets from corporate treasury. with multi-signature / mpc hardware security module (hsm) custody and segregated fiat settlement accounts..
How does MASAK regulate digital assets, crypto exchanges (VASPs/CASPs), and stablecoins?
MASAK's digital-asset regime is structured around MASAK Statutory VASP / Digital Currency Exchange Registration (Active mandatory AML/CFT and VASP registration with public register verification.). Custody and AML/CFT compliance obligations require: Mandatory originator and beneficiary Travel Rule data transmission for virtual asset transfers.
How can I verify an institution's MASAK licence number and check our 2 recorded licence entries?
Our database currently tracks 2 licence records referencing MASAK (1 marked regulated or registered). To verify a counterparty at the primary source, open MASAK's official public register (https://en.hmb.gov.tr/fcib-duties-powers), search by the exact reference number and legal entity name, and confirm that the firm's domain and permitted activities match its statutory authorisation.
Related regulatory & market structure briefings
Research and compliance analysis from RegTech Codex relevant to MASAK and Türkiye.
RegTech & Prudential Compliance
European Financial Regulatory Architecture in 2026: DORA ICT Operational Resilience, MiCA CASP Prudential Supervision, and EU AMLA Direct Oversight
A comprehensive statutory compliance briefing analyzing Regulation (EU) 2022/2554 (DORA) ICT incident reporting and TLPT mandates, Regulation (EU) 2023/1114 (MiCA) Class 1-3 CASP and EMT/ART reserve rules, Regulation (EU) 2023/1113 Travel Rule, and Frankfurt AMLA direct supervision.
Regulatory Compliance & Licensing
FATF Travel Rule (Recommendation 16) Cross-Border VASP Compliance, EU AMLR/AMLA Supervision & FCA/MAS Client Asset Segregation Audits: 2026 Codex
Cross-border Virtual Asset Service Provider (VASP) compliance refers to the synchronized execution of cryptographic wire-transfer messaging under FATF Recommendation 16, direct supranational AML supervision under EU Regulation (EU) 2024/1624 (AMLR) and Regulation (EU) 2024/1113 (TFR), and statutory daily client asset segregation reconciliations mandated by the UK FCA CASS 7/CASS 15 and MAS PSN02/CMSA frameworks.
EU MiCA & DORA Compliance
EU DORA & MiCA Compliance Rules: ICT Incident Reporting, CTPP Oversight & CASP Licensing (2026)
The EU Digital Operational Resilience Act (DORA) mandates major ICT incident reporting within 4 hours (Source: Regulation EU 2022/2554, 2025-01-17) and full MiCA CASP authorization by July 1, 2026 (Source: ESMA, 2026-07-01).
EU MiCA & DORA Compliance
EU Digital Operational Resilience Act (DORA) ICT Risk & 4-Hour Incident SLA: Statutory Capital Floors, Prudential Ratios & Licensing Thresholds (4 Hours Major ICT Incident Alert Benchmark)
EU Digital Operational Resilience Act (DORA) ICT Risk & 4-Hour Incident SLA (EU-DORA-2022-2554) stands at 4 Hours (Major ICT Incident Alert) (Source: ESMA / EBA / EIOPA Joint RTS, 2026-10-20), governing initial permanent
Statutory licensing classes, base capital rules, and investor protection summaries for MASAK (Türkiye) are maintained for institutional benchmarking and do not constitute legal advice. Always verify current rulebooks and active firm authorisations directly on MASAK’s official public register.