Cyber Fraud Lawyer Turkey: TCK 158/1-f Charges and Defense

As commerce and daily life shift rapidly into the digital realm, Article 158/1-f of the Turkish Penal Code (TCK) has become one of the most frequently applied statutes in fraud litigation. This specific article governs fraud committed by using "information systems, banks, or credit institutions as a tool."

Turkish law treats these digital crimes much more severely than traditional, face-to-face fraud. The legal rationale is straightforward: digital tools allow perpetrators to reach a massive number of victims instantly, while simultaneously masking their true identity.

If you are navigating a cyber-fraud or banking crime case, understanding the nuances of TCK 158/1-f is crucial.

Key Takeaways: What You Need to Know

• The "4-Year Floor": Unlike standard fraud types, crimes involving IT systems or banks carry an aggravated minimum sentence of exactly 4 years in prison.

• Social Media Liability: A scam run entirely through Facebook, Instagram or X is "Qualified Fraud" (Nitelikli Dolandırıcılık), because the platform is the tool through which the victim is deceived. Where the listing only puts buyer and seller in touch and the lie is then told face to face, Yargıtay case law treats the information system as incidental and the offence falls under TCK 157.

• The "Payment vs. Tool" Defense: A critical defense strategy hinges on proving whether a bank was merely used to transfer money after a deception occurred elsewhere, or if the bank itself was the tool of deception.

• Commercial Tech Fraud: Posting fake advertisements on popular platforms constitutes using an information system to deceive, which triggers heavy penalties.

• New in 2026: Law No. 7589 of 16 July 2026 added a fourth paragraph to Article 158 that halves the sentence where a person's only role was handing over a card, an account, or the credentials needed to use one.

• No Suspension, No Deferral: A four-year sentence sits above the two-year ceilings for suspension (erteleme, TCK 51) and deferral of the judgment (HAGB, CMK 231), and qualified fraud is outside the criminal mediation scheme.

  
  

Information Systems as a "Weapon" (Bilişim Dolandırıcılığı)

Under TCK 158/1-f, an "information system" encompasses computers, the internet, and social media platforms. If the internet is the medium utilized to deceive a victim, the crime is legally aggravated.

The "Social Media Marketplace" Typology

A highly common scenario involves fraudulent sales on platforms like Facebook, Twitter, or Instagram.

• The Scenario: A seller posts an ad for a high-value item (e.g., an iPhone) at an unusually low price. The victim transfers the money, but the seller either disappears or sends a worthless item (like an eraser, a cucumber, or a toy).

• Legal Classification: Where the whole transaction stays online — the victim pays in reliance on the listing and the messages, and the two never meet — the deception travelled through an information system and the case is prosecuted as Qualified Fraud. If the parties met in person and the deception was completed there, the Yargıtay applies TCK 157 instead.

• Precedent: In a notable Supreme Court case, a defendant advertised an "Original iPhone 4S" online but shipped a cheap imitation. The court ruled this as Qualified Fraud via information systems because the digital advertisement was the primary tool used to deceive the buyer.

The Bank: Deception Tool vs. Payment Tool

The law strictly penalizes the use of banks or credit institutions to commit fraud. However, there is a critical legal distinction that experienced defense lawyers utilize. For TCK 158/1-f to apply regarding banks, the bank's institutional reliability must be the actual mechanism that tricks the victim.

In practice the question is where the lie did its work. If the victim was persuaded by a listing or a message and then sent money by IBAN, the bank moved funds and nothing more. If the accused opened the account with false papers, presented a worthless cheque, or claimed to be calling from the bank's fraud desk, the institution carried the lie. Impersonating a bank employee also has its own subparagraph — Article 158/1-l — with the same floor.

What a TCK 158/1-f Conviction Actually Costs

The four-year floor and a fine tied to the money

Article 158/1 sets qualified fraud at three to ten years' imprisonment plus a judicial fine (adlî para cezası) of up to 5,000 days. The closing sentence then overrides the bottom of the range for five subparagraphs — (e), (f), (j), (k) and (l). Where one applies — and (f) is one of them — the prison sentence cannot be set below four years and the fine cannot be less than twice the unlawful benefit obtained. The fine is a multiple of the money taken, imposed alongside the prison term, and it survives repayment.

Four years closes the doors that usually stay open

Article 51/1 TCK allows a sentence to be suspended (erteleme) only at two years or less. Article 231/5 CMK, as rewritten by Law No. 7589 of 16 July 2026, applies the same two-year ceiling to deferral of the judgment (hükmün açıklanmasının geri bırakılması). A four-year floor sits above both. Even the discretionary reduction in Article 62 TCK, capped at one sixth, takes four years only to three years and four months. Mediation is closed too: Article 253/1-b CMK sends simple fraud under Article 157 to a mediator (uzlaştırma), but not Article 158.

One scheme, many victims

Article 43 TCK treats repeated offences against one victim, or a single act affecting several, as a chained offence (zincirleme suç) — one sentence increased by a quarter to three quarters. It does not cover the ordinary online pattern: separate deceptions of separate victims, sentenced separately. Article 158/3 adds one half where three or more act together, and doubles the sentence for organised offending.

Defending a TCK 158/1-f File

The 2026 amendment for people who lent an account

Law No. 7589 of 16 July 2026 added a fourth paragraph to Article 158. Where participation in an offence under Article 157 or 158 is limited to handing over a payment instrument such as a bank card, or the information or devices needed to operate an account at a bank, brokerage house, payment service provider or crypto-asset service provider, the sentence is halved. That is the "money mule" role, and it is how most foreign nationals end up in these files. It is a reduction, not an acquittal, and it does nothing for organisers.

Is it really Article 158 — or 157, 159 or 245?

Article 157 carries one to five years and no floor, reached by showing the bank or platform was incidental to the deception. Article 159 drops the penalty to six months to one year of imprisonment or, in the alternative, a judicial fine, and makes prosecution dependent on the victim's complaint, where the fraud served to collect a claim founded on an existing legal relationship — the argument in commercial files with a real contract behind them. Article 245 covers misuse of another person's card, three to six years, or four to eight for a forged card; the dividing line is whether a human being was deceived at all. See our guide to TCK Articles 243 to 245.

Effective remorse under Article 168

Article 168 TCK applies to fraud. Full restitution before prosecution begins allows a reduction of up to two thirds; shown after prosecution starts but before judgment, up to one half. Partial repayment needs the victim's consent under Article 168/4. Timing sets the size of the discount, so the restitution question belongs in the first weeks, not on the eve of the hearing.

Test the digital evidence, not the summary of it

Ask for the underlying material — IP allocation records with time zones stated, call detail records, subscriber data behind the marketplace account, forensic images of seized devices — not the screenshots reproduced in the file.

Which Court, and How Long the Risk Lasts

Article 12 of Law No. 5235 gives the heavy penal court (ağır ceza mahkemesi) offences carrying more than ten years, together with a list of named offences. Qualified fraud sat on that list until Law No. 7571, published in the Resmî Gazete on 25 December 2025, deleted the words "nitelikli dolandırıcılık (m. 158)" from it. The maximum for qualified fraud is exactly ten years and no more, so a TCK 158/1-f case opened today is heard by the criminal court of first instance (asliye ceza mahkemesi), with challenge by way of istinaf appeal. Files that were already being tried in an ağır ceza mahkemesi on that date, or awaiting istinaf or temyiz review, stay there: the transitional provision introduced by the same law bars any decision of lack of jurisdiction or quashing on that ground.

Under Article 66/1-d TCK, offences carrying more than five and less than twenty years prescribe after fifteen years, calculated on the statutory upper limit (Article 66/4) and, for a chained offence, running from the last act (Article 66/6). A scheme that ended years ago is still chargeable. Much of our criminal defence work runs under a power of attorney, but a defendant's own statement is normally required at some stage.

If You Are the One Who Lost the Money

Report to the Chief Public Prosecutor's Office (Cumhuriyet Başsavcılığı), not only to the bank, and do it fast — there is no complaint deadline, but funds already moved on are rarely recovered. Bring the IBAN and transfer receipt, the advertisement URL and the full message thread. Ask the prosecutor to pursue seizure over the receiving accounts, and join the case as an intervening party (katılan). Where proceeds crossed several accounts, a parallel MASAK file often follows.

Common questions about cyber fraud charges in Türkiye

What is TCK 158/1-f in Turkish law?

It is the subparagraph of the Turkish Penal Code covering fraud committed by using information systems, banks or credit institutions as a tool — one of twelve aggravating subparagraphs in Article 158. Article 157 carries one to five years; Article 158 carries three to ten, with a four-year floor for (f).

What is the minimum sentence for cyber fraud in Turkey?

Four years. Article 158/1 provides that in subparagraphs (e), (f), (j), (k) and (l) the sentence cannot fall below four years and the judicial fine cannot be less than twice the benefit obtained.

Is social media fraud considered qualified fraud in Turkey?

Usually, but not automatically. Where the scheme runs entirely on Facebook, Instagram, X or any comparable platform — the victim and the seller never meet, and the money leaves in reliance on the listing or the messages — it is qualified fraud under TCK 158/1-f, and the amount involved does not change that. Where the platform only brings the two together and the deception is completed in person, Yargıtay case law treats the information system as incidental and the offence is charged under TCK 157.

What is the difference between a payment tool and a deception tool?

Whether the bank merely moved the money or its credibility did the deceiving. Tricked face to face and then asked to transfer by IBAN, the bank is a payment tool and the case can be argued down to Article 157. A forged cheque, a manipulated credit application or a caller claiming to work for the bank makes it a deception tool.

I only let someone use my Turkish bank account. Am I liable?

Possibly, but the exposure changed this year. Article 158/4, added by Law No. 7589 of 16 July 2026, halves the sentence where participation is limited to handing over a payment instrument or the credentials needed to use an account.

Can I settle with the victim and have the case dropped?

Not dropped, but repayment still changes the outcome. Qualified fraud is outside the mediation list in Article 253/1-b CMK and is prosecuted of the court's own motion, so there is no complaint to withdraw. Full restitution instead triggers Article 168.

Where This Leaves You

The floor is statutory, suspension and deferral are out of reach, and the fine tracks the money. What changes the outcome is decided early: whether the charge comes down to Article 157 or 159, whether Article 158/4 applies, whether the logs connect the accused to the account, and whether restitution lands inside the Article 168 window.

This guide is general information on Turkish law, not legal advice on your own matter. Rules and practice change; check the position before you act.