Turkey EMI License & Payment Institution
The Complete Guide to CBRT Payments Licensing
The Turkey EMI license (Elektronik Para Kuruluşu) and its sibling, the Payment Institution license (Ödeme Kuruluşu), are the keys to one of the most underrated payments markets in the world: 85 million people, a young digitally-native population, a remittance corridor network spanning Europe, Central Asia, and the Gulf, and a central bank that built its own instant-payment rail (FAST) and card scheme (TROY). Turkey is also one of the harder gates in this series: licensing moved to the Central Bank of the Republic of Türkiye in 2020, capital requirements have been raised repeatedly, approvals are deliberate, and the resulting scarcity has produced a genuine secondary market in licensed Turkish institutions.
This guide covers the whole landscape: the regulator and Law 6493, both license classes with capital and safeguarding mechanics, the two-stage application process with honest timelines, the operating obligations that surprise foreign entrants (data localization above all), the crypto perimeter, and how licensed Turkish entities change hands under the CBRT's share-transfer approval regime.
Who Regulates Payments in Turkey, and Under What Law
The Central Bank of the Republic of Türkiye (CBRT/TCMB) licenses and supervises payment institutions and electronic money institutions under Law No. 6493 on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions, with the detailed rulebook in the CBRT's implementing regulation and communiqués. Licensing authority transferred from the banking regulator (BDDK) to the CBRT in 2020, and the central bank has run the gateway with visible deliberateness since.
Around the CBRT sit the institutions every licensee joins or touches: TÖDEB (the Payment and Electronic Money Institutions Association of Türkiye), whose membership is mandatory for licensees; BKM (the Interbank Card Center) for card infrastructure and the domestic TROY scheme; the FAST instant-payment system operated by the CBRT; and MASAK, Turkey's financial intelligence unit, for AML/CFT obligations.
One perimeter fact up front: crypto is a separate world in Turkey. Payments with crypto-assets have been prohibited since the CBRT's 2021 regulation, and crypto-asset service providers are licensed by the Capital Markets Board (SPK) under the 2024 crypto framework — a Turkish EMI or PI is a fiat institution, and combining the two businesses in one entity is not on the menu.
The Two License Classes Compared
Payment Institution (Ödeme Kuruluşu) | E-Money Institution (EMI / Elektronik Para Kuruluşu) | |
|---|---|---|
What it allows | Payment services: money remittance, payment account operation, acquiring, bill-payment intermediation, payment initiation | Everything the PI can do plus issuing electronic money — wallets, stored balances, prepaid products |
Legal form | Joint-stock company (anonim şirket) incorporated in Turkey | Same |
Minimum capital | CBRT-set minimums, raised repeatedly in recent years — recent baselines have run around TRY 11M+ for payment services (lower for bill-payment-only intermediation), and the CBRT has continued indexing upward; verify the current figure at scoping | Recent baselines around TRY 27.5M+, likewise raised repeatedly; verify current |
Safeguarding | Customer funds safeguarded at banks in dedicated accounts | E-money float fully safeguarded at banks |
Ongoing equity | Volume-linked own-funds requirements layered on top of the minimums | Same, scaled to float and volume |
The decision logic mirrors every dual-class regime in this series: if the product holds customer balances — wallets, stored value, prepaid — you need the EMI; if funds only transit (remittance, collections, acquiring), the PI suffices at lower capital. Turkish practice adds one wrinkle: because the CBRT gateway is slow and capital minimums keep rising, many groups take the EMI even for transit-first models, to avoid ever standing in the queue twice.
Applying for a Turkey EMI license: The Two-Stage Process
Turkey runs a formal two-stage gateway:
Stage one — the license application. The Turkish joint-stock company files with the CBRT: business plan and financial projections; shareholder and UBO documentation with fit-and-proper files (foreign shareholders are permitted and common, but the chain is examined in full); capital commitment; governance and organizational design; AML/CFT program to MASAK standards; and the information-systems architecture. The CBRT reviews, questions, and — when satisfied — grants an approval in principle.
Stage two — operational approval. The company then builds to specification: capital paid in and evidenced, systems deployed and audited, staff hired, TÖDEB membership, safeguarding accounts opened. An independent information-systems audit by a CBRT-recognized auditor is a gate, not a formality. Operations begin only on final approval.
The honest totals: 12–18 months end-to-end for a well-run application, with professional costs typically US$150,000–US$300,000 — Turkish-language execution throughout, and the information-systems workstream frequently the critical path.
The obligation that surprises foreign entrants most: data localization. Turkish payments regulation requires licensees' primary and secondary information systems to be located in Turkey. Global groups running centralized cloud stacks must re-architect for Turkey — budget it as a first-class workstream, not an IT footnote. Add to that: Turkish-resident management expectations, board and general-manager fit-and-proper approvals, independent audits, and CBRT reporting.
Operating Realities Once Licensed
FAST and TROY access convert the license into infrastructure: instant payments through the central bank's own rail, and domestic card issuance through the national scheme, both available to licensed institutions and both genuinely used at scale by Turkish consumers.
The banking layer: safeguarding accounts at Turkish banks are the norm and generally accessible to licensed institutions — Turkey's banks are payments-sophisticated — but corridor and FX operations run inside Turkey's exchange-rate and capital-flow management environment, which shifts with macro policy. Model corridor economics on current rules, and stress-test them.
TÖDEB membership carries conduct rules and sector standards with real supervisory weight.
Inflation-era compliance: capital minimums, fee caps, and thresholds get revised; a Turkish license is an obligation to track the communiqué flow, in Turkish, permanently.
Buying a Licensed Turkish Institution
Because the CBRT gateway is slow and capital keeps rising, licensed Turkish PIs and EMIs carry scarcity value, and a genuine secondary market exists — quiet, relationship-driven, intermediated by Istanbul counsel and specialist advisors rather than open listings.
Indicative market character (2026): licensed EMIs have traded in the low-to-mid millions of US dollars depending on capital position, banking, FAST/TROY integrations, and operating history; payment institutions below that band. As everywhere: dormant or barely-operating licenses trade at deep discounts and deserve them, and entities with live volume, clean CBRT standing, and strong bank relationships price at the top.
Change of control — the CBRT approval regime: share acquisitions in a licensed institution that reach or cross the 10%, 20%, 33%, or 50% thresholds (directly or indirectly, including at parent level) require prior CBRT permission, with the incoming chain assessed to ultimate beneficial owners: fitness, financial soundness, source of funds, and plans for the institution. Practical clearance on a well-prepared file: 3–6 months, structured as a condition precedent to closing in every properly built deal.
Diligence priorities for Turkish targets: capital actually paid and unimpaired against the current minimums (the moving-target problem is real); safeguarding reconciliation quality; the information-systems localization position and audit history; MASAK compliance record; TÖDEB standing; FX and corridor-rule compliance; and management continuity, since the CBRT approved the institution as constituted.
Turkey EMI License: Apply vs. Acquire vs. Partner
Route | Time to Capability | Cost Character | Honest Verdict |
|---|---|---|---|
Apply (EMI) | 12–18 months | US$150–300K + capital | The clean route for committed entrants with Turkish leadership hired early |
Acquire (licensed EMI/PI) | 3–6 months (CBRT approval) | Low-to-mid US$ millions (EMI) | The scarcity play; capital-currency and systems diligence decide it |
Partner (agent/program of a licensee) | Months | Margin share | A legitimate bridge; Turkish principals are selective |
Turkey EMI License Cost
Item | Indicative Amount |
|---|---|
Professional application build | US$150,000–US$300,000 |
Minimum capital — PI | Recent baselines ~TRY 11M+, rising; verify current |
Minimum capital — EMI | Recent baselines ~TRY 27.5M+, rising; verify current |
Information-systems localization | First-class budget line, not a footnote |
Licensed EMI acquisition | Low-to-mid US$ millions |
CBRT share-transfer approval | 3–6 months, pre-closing, thresholds at 10/20/33/50% |
TÖDEB membership + audits + reporting | Standing operational cost |
Common Mistakes in the Turkish Market
Budgeting capital against last year's minimums. The CBRT revises; the file must meet the number on grant day, not filing day.
Treating data localization as negotiable or deferrable. It is neither, and it is frequently the critical path.
Running the application in English-first drafts; the process, the regulator, and the association operate in Turkish.
Assuming a payments license touches crypto. Crypto payments are prohibited and CASP licensing lives at the Capital Markets Board — separate entity, separate regulator, separate strategy.
Closing a share purchase before CBRT permission at a threshold crossing — the thresholds bite indirectly and at parent level too.
Frequently Asked Questions
How long does a Turkey EMI license take?
Plan 12–18 months end-to-end through the CBRT's two-stage process — approval in principle, then operational approval after the build and the independent systems audit. Acquiring a licensed institution compresses entry to the 3–6 month share-transfer approval.
What is the difference between a Turkish PI and EMI?
The PI provides payment services (remittance, accounts, acquiring, bill-payment intermediation); the EMI adds electronic-money issuance — wallets and stored balances — at materially higher capital. Balances mean EMI.
How much capital is required?
CBRT-set minimums that have been raised repeatedly: recent baselines around TRY 11M+ for payment institutions and TRY 27.5M+ for EMIs, with volume-linked own-funds on top — verify the current communiqué figures at scoping, and again before grant.
Can foreigners own a Turkish payment institution?
Yes — foreign shareholding is permitted and common, through a Turkish joint-stock company, with the full chain to ultimate beneficial owners examined and share-transfer thresholds (10/20/33/50%) requiring prior CBRT permission.
What is the data localization rule?
Licensees' primary and secondary information systems must be located in Turkey. Global cloud architectures must be re-engineered for the Turkish entity, and the CBRT-recognized systems audit tests it.
Can a Turkish EMI do crypto?
No. Crypto payments have been prohibited since 2021, and crypto-asset service providers are licensed separately by the Capital Markets Board under the 2024 framework. Fiat and crypto run in separate entities under separate regulators.
What are FAST and TROY?
FAST is the CBRT's instant-payment system; TROY is the national card scheme run through BKM. Licensed institutions can integrate with both — the infrastructure payoff of the Turkish license.
Do licensed Turkish institutions come up for sale?
Yes — scarcity created a real market, quiet and counsel-intermediated. EMIs have traded in the low-to-mid millions of dollars; every deal closes conditional on CBRT share-transfer approval at the crossed threshold.
Is Turkey worth it next to an EU license?
They are different prizes: the EU license passports across thirty countries; the Turkish license owns one enormous, young, instant-payment-native market and its corridor network. Groups serious about the region hold both.
What other jurisdictions do you cover for licensing?
Quite a few — Switzerland is one of many markets we work in. We cover licensing and market entry across the US, UK, Singapore, UAE, Australia, and other key jurisdictions, and can help you compare your options across several countries at once. You can see all the jurisdictions we cover here.
How Faisal Khan LLC Helps With Turkey EMI Licensing
We work with operators on both Turkish routes — building a CBRT application for a PI or EMI, or acquiring a licensed institution through the share-transfer approval process — and the first thing we do is stress-test which one your timeline and capital actually support, since the CBRT's two-stage gate runs 12–18 months and the minimums keep moving underneath you. On a fresh build we help you scope the right class, budget capital against the current communiqué rather than last year's number, and treat data localization as the first-class workstream it is instead of the IT footnote most global groups mistake it for. On the buy side we point the diligence at what actually decides a Turkish deal: whether the capital is paid and unimpaired against today's minimums, the systems-localization and audit position, and MASAK and TÖDEB standing. We also help you structure corridors across Turkey's remittance network, and keep the crypto perimeter clean — that's the Capital Markets Board's regime, a separate entity and a separate strategy.
This guide is published by Faisal Khan LLC for general informational purposes. It does not constitute legal, tax, accounting, or investment advice, and no regulatory outcome is guaranteed. Figures are indicative as of July 2026 — Turkish capital minimums and rules change frequently; always confirm current requirements with the CBRT and qualified Turkish counsel before acting.