Turkey TR

Turkey exited the FATF list of Jurisdictions under Increased Monitoring in June 2024 and remains in enhanced follow-up, with Recommendation 15 on virtual assets the sole partially-compliant rating outstanding against the full Recommendation set. That baseline is the frame against which the CNC transit architecture must be read: a Konya and Istanbul-based cluster of CNC machine-tool and electronics firms acts as a durable, re-forming re-export node for Western-origin dual-use goods reaching Russian military-industrial end users, evidenced by repeated designation of the same corporate cluster across successive OFAC and EU sanctions rounds.

This cycles central development is an evidentiary correction rather than a new scheme: the 29 June 2026 OFAC action against six of these firms and associated individuals has been verified as a delisting, not a new designation, drawing on the primary OFAC source titled Russia-related Designations Removals. It is assessed as the first bulk removal of an entire third-country group designated solely under the Russia sanctions programme. Applying the architecture-over-incident principle central to this domain, delisting named nodes does not demonstrate dismantlement of the underlying transit architecture, and the scheme status has been revised from active to disrupted pending reassessment, pending evidence either of genuine wind-down or of reconstitution under renamed entities.

The decade-long Halkbank Iran-sanctions prosecution, alleging an approximately twenty billion dollar oil-for-gold conduit, was formally dismissed on 17 June 2026 following a March 2026 deferred prosecution agreement, with no fine, no admission of wrongdoing, and a mandated independent compliance review, after the US Supreme Court declined in October 2025 to hear the banks sovereign-immunity appeal. No parallel EU or UK enforcement action against the same underlying conduct has occurred, an enforcement-versus-enablement asymmetry this domain treats as structurally significant. The proximity of the Halkbank dismissal to the CNC bulk delisting, within a two-week window, is flagged as a possible coincident resolution pattern warranting cross-monitor review, though the evidence for coordination is thin and indirect and is carried at possible confidence only.

Sanctions-regime divergence compounds the architecture. The EU sixteenth package added fifty-three entities including one Turkey-established entity in February 2025, and the twentieth package in April 2026 designated further Turkey-linked entities while reserving activation of its new anti-circumvention tool for Kyrgyzstan rather than Turkey, despite a comparable transit-hub profile, a choice more consistent with political calculation given Turkeys NATO-ally status than with a pure capacity deficit. Across the three principal regimes, OFAC designates Turkey-linked entities most aggressively and frequently, the EU lists fewer but a growing number, and UK OFSI shows no comparable Turkey-specific listings in the review window, together generating a compliance-arbitrage gap for intermediaries transacting across the three jurisdictions.

A proliferation-financing gap distinct from the AML findings above deserves equal-rigour surfacing: the 2019 mutual evaluation found Turkey lacks a clear legal basis to implement UNSCR 2231 on Iran and has delayed UNSCR 1718 DPRK designation transposition, with no assets identified under either regime and no independently proposed UNSCR 1267 designation to date. This CPF-pillar deficiency has not been confirmed remediated and sits alongside the finding that Turkey does not currently appear on the EU high-risk third-country list, most recently updated in December 2025 with a net reduction from forty-one to thirty-five listed countries, nor the UK MLR advisory notice of June 2026.

Taken together, the jurisdiction read for Turkey across this domain is one of increasing risk direction, a mixed enforcement-versus-enablement balance, and a structural rather than episodic character, drawing on twelve underlying sources spanning FATF, OFAC and EU Council primary material together with corroborating investigative reporting. The countrys own architecture functions as a transit and enablement layer for sanctions evasion rather than Turkey itself being a sanctioned party, and this domains status is accordingly carried as active with a deteriorating trajectory.

Outlook

The next FATF Plenary in October 2026 is the nearest scheduled opportunity to test whether the Recommendation 15 gap narrows, and any further OFAC action against the CNC cluster or its successors would test whether the disrupted-pending-reassessment status should move toward confirmed reconstitution or toward genuine dismantlement. Whether the EU extends its anti-circumvention tool to Turkey, and whether UK OFSI issues any Turkey-specific Russia-sanctions designation, remain the clearest tests of whether regime divergence narrows or widens. This is illustrative forward orientation only, not a prediction of outcome.

Turkey sits outside the European Unions AML Package architecture entirely, a durable structural fact that frames how any Turkey-specific beneficial-ownership signal should be read. That architecture now comprises three distinct instruments: the AML Regulation, directly applicable across EU member states as Regulation (EU) 2024/1624; the sixth Anti-Money Laundering Directive, transposed individually by each member state; and the AMLA Regulation, Regulation (EU) 2024/1620, establishing the Anti-Money Laundering Authority and a direct and indirect supervision perimeter that shifts oversight of high-risk cross-border obliged entities from purely national authorities toward a hybrid EU-level regime. Because Turkey is not an EU or EEA member, none of the AMLR, the sixth Directive or the AMLA supervisory perimeter apply to it directly, and no transposition status arises; Turkey is instead assessed under the EUs autonomous high-risk third-country listing methodology, on which it does not currently appear. The AMLR application date of July 2027 nonetheless carries an indirect due-diligence effect on EU counterparties dealing with Turkish correspondents, a next-watch event for this domain even though Turkey itself remains outside the perimeter.

Within Turkey, beneficial-ownership verification in designated non-financial businesses and professions, principally real estate and precious-metals and stones dealers, was assessed in the 2019 mutual evaluation as suffering from limited risk understanding and minimal on-site supervision. No evidence in the review window confirms substantive remediation of this specific finding, even though Turkeys overall 2024 FATF delisting suggests some broader evolution in risk understanding; absent independent confirmation, the DNFBP-specific gap should be treated as persistent.

That persistence finds a concrete illustration in the formal arrest, in December 2025, of a real-estate developer and former Galatasaray football executive on money-laundering charges tied to an illegal betting investigation. The case is a domestic enforcement instance rather than a structural reform, but it illustrates continued exposure of real-estate and sports-sector structures to proceeds laundering in a DNFBP segment whose supervisory capacity has not been shown to have improved since 2019.

Turkey has no fully public centralised beneficial-ownership registry; its MERSIS corporate registry data remains accessible to the financial intelligence unit MASAK rather than to the public at large, a status that has not changed this cycle and is not linked to any announced CMB or MASAK digitalisation initiative tied to further FATF follow-up.

Outlook

The clearest forward markers for this domain are indirect rather than Turkey-specific: the EU AMLR application date of July 2027 will extend due-diligence expectations onto EU counterparties transacting with Turkish correspondents, and any future EU high-risk third-country list update, expected around the fourth quarter of 2026, could in principle incorporate an escalated reading of Turkeys DNFBP and BO gaps even absent a change in FATF status. Any CMB or MASAK announcement of BO-registry digitalisation tied to further FATF follow-up would be the clearest domestic signal of movement. This is illustrative forward orientation only, not a prediction of outcome.

This domain reads the CNC transit architecture and the Halkbank resolution through an enabler-jurisdiction lens rather than treating them as freestanding sanctions events. The repeated designation of the same Konya and Istanbul-based CNC and trading-firm cluster across successive OFAC and EU rounds between 2024 and 2026, without matching Turkish domestic prosecution, illustrates a designation-without-domestic-consequence pattern in which sanctioned intermediaries and closely related successor firms continue to reappear in evasion networks. The verified correction of the 29 June 2026 OFAC action from a new designation to a bulk delisting of the same cluster does not alter this reading: absent evidence of dismantlement, the underlying facilitator role persists structurally rather than being resolved by the removal of named entities from a list.

The Halkbank case closure reinforces the same pattern from the professional-facilitator angle: a decade-long prosecution over an alleged twenty billion dollar oil-for-gold conduit ended via deferred prosecution agreement with no fine, no admission of wrongdoing, and only a mandated compliance review, while no parallel EU or UK enforcement action against the same underlying conduct has emerged. Sanctions-designation intensity divergence across OFAC, the EU and UK OFSI, including the EUs choice to activate its anti-circumvention tool against Kyrgyzstan rather than Turkey despite a comparable transit-hub profile, further illustrates how enabler-jurisdiction status can persist through regime-shopping by intermediaries rather than through any single jurisdictions deliberate policy choice.

Signal in this domain this cycle is limited to a reframing of developments captured more fully under the sanctions-architecture and conflict-finance domains; no new professional-facilitator-specific enforcement action or legal-framework development was identified in the review window.

Outlook

Whether Turkish domestic prosecution follows any of the repeated OFAC or EU designations against the CNC cluster, and whether the EU extends its anti-circumvention tool to Turkey in a future sanctions package, are the clearest forward tests of whether the enabler-jurisdiction pattern narrows. This is illustrative forward orientation only, not a prediction of outcome.

Turkey occupies a dual role in this domain this cycle, functioning simultaneously as a transit corridor for sanctions-evasion shipping and as a destination market for conflict-derived commodity. Sanctioned tankers carrying Russian crude increasingly hug the Turkish and Georgian Black Sea coastline and conduct ship-to-ship transfers in Turkish-adjacent waters while continuing to transit the Bosphorus and Dardanelles under Turkish maritime jurisdiction, combining price-cap evasion with direct war-economy financing. Turkish-flagged and Turkish-managed vessels are directly implicated in this routing, and several vessels have suffered Ukrainian drone or mine strikes off the Turkish coast since late 2025, corroborating the operational persistence of the route rather than its status as an isolated incident.

A second, distinct channel launders occupied-territory commodity rather than evading transport sanctions directly. Grain grown in Russian-occupied Ukrainian territory, falsely declared as to origin, is shipped to Turkish milling companies, laundering it into ordinary commercial grain-trade channels; Ukraine has characterised the trade as a war crime. In this channel Turkey functions as a destination and enabling market rather than as the originating jurisdiction, a distinction that matters for where compliance obligations and red-flag indicators should attach along the trade-finance chain.

Both channels carry concrete red-flag indicators for trade-finance and correspondent-banking customer typologies: coastal-hugging vessel routing and ship-to-ship cargo transfers in territorial-adjacent waters to reduce drone-strike exposure, and falsified declarations of conformity understating cargo origin on grain shipments, are both observable at the trade-documentation stage rather than only after the fact. The shadow-fleet channel sits under existing OFAC Executive Order 14024 screening obligations for banks; the grain-laundering channel currently carries no codified obligation reference in this bundle, a gap worth flagging for downstream trade-finance control design.

Both channels underscore a broader point about the three-pillar balance this domain is built to correct: shadow-fleet routing and price-cap evasion are typically captured within existing AML sanctions-screening frameworks, while trade-based laundering of conflict-derived commodity such as occupied-territory grain more often escapes attention precisely because the commodity itself, unlike a tanker on a sanctions list, carries no inherent screening trigger. Treating the grain-laundering channel with the same analytical weight as the higher-profile shadow-fleet routing is itself the corrective this domain is designed to apply.

Both channels are explicitly routed to adjacent monitors: the occupied-Ukraine grain-laundering channel to SCEM as a conflict-commodity flow, and the Black Sea shadow-fleet coastal routing to ERM as commodity-flow evasion data, reflecting this domains structural overlap with commodity-flow and conflict-finance monitoring housed elsewhere in the Asymmetric Intelligence suite.

Outlook

Continued Ukrainian strikes on shadow-fleet vessels off the Turkish coast, and any further reporting on the scale or destination pattern of occupied-territory grain shipments through Turkish millers, are the clearest forward indicators for this domain. Whether either channel attracts a codified sanctions or trade-documentation obligation beyond current OFAC screening requirements is an open question for the next review cycle. This is illustrative forward orientation only, not a prediction of outcome.

Turkeys crypto-asset regulatory build-out is directly and explicitly linked to its FATF compliance trajectory. Enabling legislation for the Capital Markets Boards VASP licensing regime was advanced explicitly to help secure the countrys 2024 FATF delisting, and full licensing and supervisory capacity remains the key forward milestone for closing Recommendation 15, the sole outstanding partially-compliant rating in Turkeys enhanced follow-up. The regime remains in a build-out phase toward full capacity targeted around 2027; no enforcement signal in this review window confirms that operational supervisory capacity has yet been reached.

A related but distinct compliance-technology development, tracked separately under this brief, would see the financial intelligence unit MASAK gain direct authority to freeze bank and cryptocurrency accounts; a bill to this effect was reported in preparation in September 2025, but no subsequent reporting confirms parliamentary introduction nearly ten months on, leaving its status uncertain rather than imminent.

Against this build-out, Istanbul continues to feature as a nexus for Islamic State Khorasan Province crypto-financing activity. ISKP operatives have used Istanbul as a base for media and cryptocurrency fundraising, converting donations into crypto for onward transfer to affiliated cells, and a follow-on financier, publicly identified as Ozgur Altun, also known as Abu Yasir al-Turki, was captured near the Afghanistan-Pakistan border in a joint Turkish-Pakistani operation during 2025. Fundraising infrastructure associated with this network has since decentralised in response, and this specific finding rests on a single tier-three vendor source without independent tier-one or tier-two corroboration this cycle, a sourcing limitation that should temper confidence in the granular detail even as the broader ISKP crypto-financing typology is independently well attested.

FinCEN Advisory FIN-2025-A001, addressing ISIS-linked terrorist-financing typologies, applies generally to VASP and money-services-business reporting obligations that intersect with the ISKP crypto-financing pattern observed via the Istanbul nexus; this is a general industry-obligation citation rather than a claim about any specific firms conduct, and the 2025 Turkish-Pakistani arrest constitutes the concrete enforcement-adjacent signal corresponding to this domains assessment this cycle.

The overall domain trajectory is assessed as improving rather than deteriorating, reflecting genuine institutional build-out running in parallel with a terror-finance facilitation risk that has not yet closed; this is a highly crypto-adoptive jurisdiction building supervisory capacity while simultaneously remaining a transit point for terrorist-financing fundraising, and the two trends should be read together rather than allowing the positive regulatory-build narrative to obscure the persistent CTF exposure, consistent with the three-pillar balance principle that CTF findings should not be structurally under-weighted relative to AML enforcement volume.

Outlook

The clearest forward test for this domain is whether the Capital Markets Board VASP licensing regime reaches full operational supervisory capacity ahead of its approximately 2027 target, which would be the concrete milestone for closing the Recommendation 15 gap at the next FATF Plenary opportunities. Whether MASAKs account-freeze bill is ever formally introduced to the Grand National Assembly, and whether further reporting corroborates or revises the single-source ISKP Istanbul-nexus finding, are the two other markers to watch. This is illustrative forward orientation only, not a prediction of outcome.

Signal in this domain this cycle is limited to a single tracked item: a bill reported in September 2025 to grant the financial intelligence unit MASAK direct authority to freeze bank and cryptocurrency accounts, which would materially strengthen proactive, forward-looking asset-freezing capability against a deficiency the 2019 mutual evaluation flagged as absent. No subsequent reporting in the nearly ten months since the initial report confirms formal introduction of the bill to the Grand National Assembly or its passage, and this absence of follow-up is itself treated as analytically significant: the expected 2026 timeline carried in earlier tracking should now be read as stalled or uncertain rather than as an imminent reform on schedule. Turkeys most recently published National Risk Assessment dates to 2018, a further limitation on external visibility into MASAKs current risk-based supervisory posture and into whether internal risk understanding has kept pace with the 2024 to 2026 crypto and sanctions-transit developments tracked elsewhere in this brief. This is consistent with an enablement-as-signal reading: the absence of confirmed legislative movement in a jurisdiction that itself flagged the freeze-power gap as a FATF-relevant deficiency is itself worth surfacing explicitly, rather than treating stalled reform as a null result. No further compliance-technology or active-defence development, such as a supervisory-technology deployment or a public MASAK risk-assessment update, was identified in the review window.

Outlook

The clearest forward marker for this domain is whether the MASAK account-freeze bill is formally introduced to the Grand National Assembly; absent that introduction, the item should continue to be carried as uncertain rather than upgraded toward an active reform. A published, updated National Risk Assessment would be the other concrete signal to watch for improved external visibility into supervisory posture. This is illustrative forward orientation only, not a prediction of outcome.