Turkey TR

On 29 June 2026, OFAC removed seven Turkish entities and individuals from the Russia-related EO14024 Specially Designated Nationals list, characterised as the first wholesale delisting of an entire third-country evasion network under that sanctions programme. This is a Tier-1-sourced, high-confidence development. The delisting is a narrow, entity-specific recalibration rather than a signal of broader US easing toward Turkish intermediaries: legal commentary tracking Turkiye's sanctions exposure continues to characterise the jurisdiction as a persistent transshipment and intermediary risk for dual-use goods destined for Russia, and no corresponding EU or OFSI action targeting the same or related Turkish entities has been identified this cycle. The juxtaposition of a wholesale delisting against continued risk commentary is itself the notable architecture-level signal: it indicates OFAC's designation and delisting apparatus is capable of fine-grained, network-specific recalibration even as the underlying jurisdictional risk assessment for Turkiye as a transshipment corridor remains unchanged. No parallel EU/OFSI-side sanctions development for Turkiye was located this cycle, leaving open whether this is a unilateral US recalibration or the leading edge of a broader multilateral reassessment. The jurisdiction risk tracker for Turkiye this cycle characterises overall risk direction as increasing, with sanctions architecture flagged alongside enabler-jurisdiction and crypto domains as primary areas of concern, even as the OFAC delisting itself points in the opposite direction for the specific network affected.

Outlook

Watch for whether the OFAC delisting is followed by any reciprocal or parallel EU/OFSI action, which would indicate a genuine multilateral recalibration rather than a US-specific one. Continued commentary characterising Turkiye as a transshipment risk jurisdiction for Russia-bound dual-use goods should be read as the standing baseline against which any further delisting or designation activity this cycle's evidence does not yet resolve.

Domestic payment-infrastructure and e-money institutions have functioned this cycle as Turkiye's primary enabler architecture for illegal-betting-related money laundering, a domestic rather than purely offshore facilitation pattern. The Central Bank of the Republic of Turkiye revoked Papara Elektronik Para A.S.'s e-money licence on 31 October 2025 under Law No. 6493 Articles 16 and 19, following a MASAK finding that approximately 26,012 Papara accounts were used for illegal-betting transactions totalling approximately TRY12.9 billion. This is a high-confidence finding corroborated across multiple secondary sources reporting official Central Bank and MASAK figures, though no direct primary MASAK or Central Bank statement was fetched this cycle. An Ankara administrative court stayed the revocation in December 2025, and the Central Bank reinstated Papara's licence under TMSF trusteeship in January 2026, meaning the enforcement action, while confirmed as having occurred, did not result in permanent market exit for the enabler entity — a nuance that matters for assessing whether administrative licence revocation functions as an effective deterrent, or whether judicial review substantially blunts its force.

In a larger and separately sourced case, Istanbul prosecutors indicted 57 suspects over a payment-infrastructure scheme run through Paymix and its parent Basel Holding, alleged to have concealed more than EUR4.5 billion in illegal-betting transaction flows. This action involved detention of 206 individuals across 28 provincial offices, indicating an investigation of considerable operational scale. This is an assessed rather than fully confirmed finding, corroborated by a single primary reporting source and by parallel reporting on AI-assisted account-freeze activity, but without a located primary MASAK statement describing the case's evidentiary basis.

Read together, these two cases point toward a structural rather than episodic enabler pattern: licensed domestic payment and e-money institutions, operating within Turkiye's own regulatory perimeter, functioning as large-scale conduits for illegal-betting proceeds, rather than the pattern more commonly emphasised in enabler-jurisdiction analysis of offshore intermediaries in permissive third countries. Combined exposure across the two cases exceeds EUR4.5 billion and approximately TRY12.9 billion in flows implicated. The gaps register for this cycle notes that no Tier-1 source was located establishing further enabler-jurisdiction network detail beyond the domestic payment-institution cases themselves, including whether a cross-border corridor forms part of the same laundering architecture; this absence should be read as an evidentiary gap rather than an indication that no such network exists.

Three-pillar framing is instructive here: both cases sit squarely within the AML pillar, addressed through MASAK's financial-intelligence function and enforcement powers, with no CFT or CPF dimension evidenced this cycle. This is consistent with the broader pattern that AML enforcement volume structurally dominates CFT/CPF findings; nothing in this cycle's evidence should be read as indicating an absence of CFT/CPF risk, only an absence of CFT/CPF-specific findings in the current evidence base. The enforcement pattern is also notable for its asymmetry between administrative and criminal tracks: Papara faced an administrative licence action, later stayed and substantially reversed by judicial review, while Paymix/Basel Holding faced direct criminal indictment and mass detention, a materially more severe track for what is, on the alleged transaction-value basis, a larger case. Both enforcement actions target the affected-firm-type category of payment companies specifically, rather than banks, reinforcing a pattern in which Turkiye's non-bank payment and e-money sector has borne the brunt of illegal-betting-related enforcement action this cycle.

Outlook

Watch for whether further Turkish payment or e-money institutions face licence action on the same illegal-betting-laundering theory as Papara, which would confirm this cycle's assessment of a structural rather than episodic domestic enabler pattern. The outcome of Papara's pending litigation and TMSF trusteeship, and of the Paymix/Basel Holding prosecution, will also indicate whether administrative and criminal enforcement tracks converge on a consistent deterrent outcome. A primary-source MASAK or prosecutorial statement providing further detail on any cross-border dimension of the enabler network would materially change the current domestic-only characterisation of this typology.

Turkiye's capital-markets regulator, the Capital Markets Board (SPK), continued rollout of its crypto-asset service provider (CASP) licensing regime under Law No. 7518 and implementing Communique III-35/B.2 this cycle. The regime is reported to require a minimum paid-in capital of approximately TRY150 million, mandatory segregation of customer funds from platform assets, and a MASAK-supervised AML/CFT compliance programme for licensed CASPs, with phased integration into TAKASBANK's delivery-versus-payment settlement infrastructure continuing through 2026. This is an assessed, Tier-3-sourced finding corroborated across multiple legal-commentary sources describing the same Law No. 7518 and Communique III-35/B.2 framework, though the underlying SPK Communique text itself was not directly fetched this cycle.

The most analytically significant development this cycle is not the licensing rollout in isolation but its intersection with the broader illegal-betting enforcement wave: crypto wallets have been implicated in the same laundering activity driving the Papara and Paymix enforcement actions, directly linking digital-asset market integrity to Turkiye's current highest-volume financial-crime enforcement vector. This indicates that as Turkiye's illegal-betting enforcement architecture matures, digital-asset rails are becoming a documented alternative or supplementary channel to traditional e-money and payment-company infrastructure for moving illegal-betting proceeds, with direct implications for how the CASP licensing regime's AML/CFT compliance-programme requirement will be tested in practice.

The CASP licensing regime itself should be read as still transitional rather than fully mature: this cycle's evidence does not establish that any platform has moved from provisional listing to final SPK licensure, and the phased TAKASBANK settlement integration extending through 2026 indicates the operational infrastructure underpinning the regime is still being built out. The regulatory-stage classification matters here: Law No. 7518's CASP licensing requirement is in force as a matter of statute, yet SPK's own provisional list explicitly does not equate to final licensure. This transitional design is common to newly stood-up licensing regimes, in which a population of applicant firms continues operating under provisional status while final licensing determinations are processed; the analytical risk is that this population operates under a lighter supervisory touch than final licensure would imply, precisely the window in which illegal activity — including the kind of illegal-betting-proceeds laundering implicated this cycle — can occur.

Turkiye's crypto framework sits outside the EU's MiCA regime and its AMLR/6AMLD/AMLA architecture, reflecting Turkiye's status as an autonomous, non-EEA jurisdiction; SPK's CASP regime should be read as an independently constructed domestic framework rather than a transposition of any EU instrument. Compliance-technology implications also connect this domain to the D6 active-defence typology: if the AI-assisted AVCI account-mapping tool deployed against payment-company-based illegal-betting laundering is extended to on-chain or exchange-level monitoring, it would represent a natural evolution of Turkiye's enforcement architecture into the crypto-asset space, though no evidence located this cycle confirms such an extension. For compliance functions with Turkish crypto-asset exposure, three practical implications follow: minimum capital and fund-segregation requirements under Communique III-35/B.2 are binding and in force notwithstanding the transitional licensing status; MASAK-supervised AML/CFT compliance-programme obligations apply now, not upon final licensure; and the demonstrated intersection between crypto-wallet activity and illegal-betting-proceeds laundering elevates the customer-typology risk associated with VASP-counterparty relationships specifically.

Outlook

The key development to watch is whether SPK formally converts any provisionally listed CASP to final licensure. Equally important is whether any confirmed link between crypto-wallet activity and illegal-betting laundering proceeds — currently an assessed rather than fully evidenced connection — is substantiated by a primary MASAK or SPK statement in a subsequent cycle; if it is, the CASP licensing regime's AML/CFT compliance-programme requirement will face its first significant real-world enforcement test.

Turkish prosecutors deployed an AI-assisted account-mapping system, referred to in reporting as AVCI, within the broader illegal-betting enforcement campaign, using it to freeze 6,314 bank accounts and identify 19 offshore finance houses tied to illegal betting sites. This is an assessed, Tier-3-sourced development rather than a confirmed primary-source disclosure, and no primary MASAK or Central Bank statement describing the tool's design, legal basis, or effectiveness metrics has yet been located. As an architecture-level matter, this is notable less for the specific account-freeze count than for what it signals about the compliance-technology posture of Turkish enforcement authorities: a shift toward automated, AI-assisted network mapping as a primary detection method for illegal-betting-related financial flows, deployed at a scale that would be difficult to achieve through manual investigation alone. This sits alongside, and appears to have directly informed, the parallel enforcement actions against Papara and Paymix payment infrastructure. Whether AVCI represents a durable addition to Turkiye's AML/CFT enforcement toolkit, or a campaign-specific tool built for this enforcement wave, is not yet resolved by available evidence; this is precisely the kind of active-defence capability that is often structurally under-documented relative to the enforcement actions it enables.

Outlook

A primary MASAK or Central Bank statement describing AVCI's legal basis, scope and effectiveness would materially upgrade confidence in this finding; until then it remains an assessed, secondary-sourced signal. Continued expansion of AI-assisted account-mapping methodology into the wider illegal-betting enforcement campaign, or a formal statement institutionalising the tool beyond this specific campaign, would be the key indicator that this is now a standing part of Turkiye's compliance-technology architecture rather than a bespoke enforcement asset for the current wave.

FATF adopted Turkiye's 5th-round Mutual Evaluation Report at its 19 June 2026 Plenary, an assessed development corroborated across two secondary sources, with full report publication and an accompanying Roadmap of Key Recommended Actions expected in late 2026; no primary FATF publication of the complete report is yet available. Turkiye remains off the FATF grey list, from which it was removed in June 2024, and this adoption should be read as the next procedural step in Turkiye's post-delisting standing rather than a signal of renewed grey-list risk. Turkish government commentary has separately stated that Turkiye faces no risk of returning to the grey list, though this is a political statement rather than a FATF determination and is treated here as context rather than as an independent finding.

The mutual evaluation's expected Roadmap of Key Recommended Actions is the structurally significant element to track: FATF's updated methodology typically requires measurable progress against such roadmaps within a defined multi-year window, and the content of that roadmap — not yet public — will determine whether Turkiye's AML/CTF regime faces renewed international scrutiny on specific technical-compliance or effectiveness gaps even while remaining off the grey list itself. This is an important architecture-over-incident distinction: grey-list status is a binary, highly visible marker, but the roadmap of recommended actions is where the substantive, ongoing supervisory relationship between FATF and Turkiye's authorities will actually play out over coming reporting cycles.

Set against this formal AML/CTF architecture, the domestic enforcement evidence from this cycle — record-scale action against payment-infrastructure enablers of illegal betting, AI-assisted account-mapping deployment, and continuing OFAC-designated sanctions-evasion exposure — provides a real-world effectiveness data point independent of FATF's own assessment process. The scale of the Papara and Paymix cases (a combined exposure exceeding EUR4.5 billion and approximately TRY12.9 billion in implicated flows) demonstrates that MASAK's financial-intelligence function is capable of identifying large-scale laundering activity through domestic payment-sector channels, a positive effectiveness signal for the AML pillar specifically, independent of whatever technical-compliance gaps FATF's forthcoming roadmap may identify.

The three-pillar balance point bears restating: all of this cycle's D7-relevant evidence sits within the AML pillar. No CTF-specific or CPF-specific finding was sourced for Turkiye this cycle, which — consistent with the general pattern that AML enforcement volume structurally dominates CTF/CPF findings — should not be read as an indication that Turkiye's CTF/CPF regime is inactive, only that this cycle's evidence base does not speak to it directly. Uncertainty band considerations also matter for compliance planning: the estimated 2026-Q4 impact date for the mutual evaluation report's full publication carries a quarter-level uncertainty band, meaning compliance functions should treat the roadmap's substantive content, rather than its exact publication date, as the operative planning horizon. It is also worth noting the absence, in this cycle's evidence, of any confirmed connection between the FATF mutual-evaluation process itself and the domestic illegal-betting enforcement wave; these are parallel rather than linked developments in the current record.

Outlook

The single most important structural marker to watch is the full publication of the 5th-round Mutual Evaluation Report, expected in late 2026, and specifically the content of its Roadmap of Key Recommended Actions. Domestically, whether the Papara and Paymix enforcement actions produce final judicial or prosecutorial outcomes consistent with a strengthened AML enforcement posture, or whether continued judicial review substantially blunts administrative enforcement outcomes, will be a further indicator of the AML pillar's practical effectiveness independent of the formal FATF assessment track.