Cyber Fraud Lawyer Turkey: TCK 158/1-f Charges and Defense

As commerce and daily life shift rapidly into the digital realm, Article 158/1-f of the Turkish Penal Code (TCK) is the provision at the centre of online and banking fraud litigation. This specific article governs fraud committed by using "information systems, banks, or credit institutions as a tool."

Turkish law treats these digital crimes much more severely than traditional, face-to-face fraud. The usual explanation is straightforward: digital tools allow perpetrators to reach a massive number of victims instantly, while simultaneously masking their true identity.

If you are navigating a cyber-fraud or banking crime case, understanding the nuances of TCK 158/1-f is crucial.

Key Takeaways: What You Need to Know

• The "4-Year Floor": Unlike standard fraud types, crimes involving IT systems or banks carry an aggravated minimum sentence of exactly 4 years in prison.

• Social Media Liability: A scam run entirely through Facebook, Instagram or X is "Qualified Fraud" (Nitelikli Dolandırıcılık), because the platform is the tool through which the victim is deceived. Where the listing only puts buyer and seller in touch and the lie is then told face to face, the defence can argue that the information system was not used as the tool of the deception, as Article 158/1-f requires, and that the offence stays under TCK 157.

• The "Payment vs. Tool" Defense: A critical defense strategy hinges on proving whether a bank was merely used to transfer money after a deception occurred elsewhere, or if the bank itself was the tool of deception.

• Commercial Tech Fraud: Posting fake advertisements on popular platforms constitutes using an information system to deceive, which triggers heavy penalties.

• New in 2026: Law No. 7589 of 16 July 2026 added a fourth paragraph to Article 158 that halves the sentence where a person's only role was handing over a card, an account, or the credentials needed to use one.

• No Suspension, No Deferral at the Floor: A four-year sentence sits above the two-year ceilings for suspension (erteleme, TCK 51) and deferral of the judgment (HAGB, CMK 231); only a statutory reduction, such as Article 158/4 or effective remorse under Article 168, can bring the final sentence back within them. Qualified fraud is outside the criminal mediation scheme.

  
  

Information Systems as a "Weapon" (Bilişim Dolandırıcılığı)

In TCK 158/1-f, the term "information system" is not defined, either in Article 158 or elsewhere in the Penal Code; in its ordinary meaning it reaches computers, the internet and social media platforms. If the internet is the medium utilized to deceive a victim, the crime is legally aggravated.

The "Social Media Marketplace" Typology

A typical scenario involves fraudulent sales on platforms like Facebook, Twitter, or Instagram.

• The Scenario: A seller posts an ad for a high-value item (e.g., an iPhone) at an unusually low price. The victim transfers the money, but the seller either disappears or sends a worthless item (like an eraser, a cucumber, or a toy).

• Legal Classification: Where the whole transaction stays online — the victim pays in reliance on the listing and the messages, and the two never meet — the deception travelled through an information system, which Article 158/1-f requires to be used as the tool of the fraud (araç olarak kullanılması suretiyle), and the case falls under Qualified Fraud. If the parties met in person and the deception was completed there, the argument that the platform was incidental — and that the offence is simple fraud under TCK 157 — is open.

• Illustration: A seller advertises an "original" phone online and ships a cheap imitation. Because the online listing is the means by which the buyer is deceived, the facts fit the wording of Article 158/1-f — an information system used as the tool of the fraud.

The Bank: Deception Tool vs. Payment Tool

The law strictly penalizes the use of banks or credit institutions to commit fraud. However, there is a critical legal distinction that experienced defense lawyers utilize. Article 158/1-f applies where a bank or credit institution is used "as a tool" (araç olarak) of the fraud. The defence argument turns on that wording: whether the bank's institutional reliability was the mechanism that tricked the victim, or the bank only moved money after the deception was complete.

The question is where the lie did its work. If the victim was persuaded by a listing or a message and then sent money by IBAN, the bank moved funds and nothing more. If the accused opened the account with false papers, presented a worthless cheque, or claimed to be calling from the bank's fraud desk, the institution carried the lie. Impersonating a bank employee also has its own subparagraph — Article 158/1-l — with the same floor.

What a TCK 158/1-f Conviction Actually Costs

The four-year floor and a fine tied to the money

Article 158/1 sets qualified fraud at three to ten years' imprisonment plus a judicial fine (adlî para cezası) of up to 5,000 days. The closing sentence then overrides the bottom of the range for five subparagraphs — (e), (f), (j), (k) and (l). Where one applies — and (f) is one of them — the prison sentence cannot be set below four years and the fine cannot be less than twice the unlawful benefit obtained. The fine is a multiple of the money taken, imposed alongside the prison term, and it survives repayment.

Four years closes the doors that usually stay open

Article 51/1 TCK allows a sentence to be suspended (erteleme) only at two years or less (three years where the person was under eighteen or had turned sixty-five when the act was committed). Article 231/5 CMK, as rewritten by Law No. 7589 of 16 July 2026, applies the same two-year ceiling to deferral of the judgment (hükmün açıklanmasının geri bırakılması). A four-year floor sits above both. Even the discretionary reduction in Article 62 TCK, capped at one sixth, takes four years only to three years and four months. Both ceilings look at the sentence finally imposed, however, so the statutory reductions discussed below, Article 158/4 and effective remorse under Article 168, can bring a case back within them. Mediation is closed too: Article 253/1-b CMK sends simple fraud under Article 157 to a mediator (uzlaştırma), but not Article 158.

One scheme, many victims

Article 43 TCK treats repeated offences against one victim, or a single act affecting several, as a chained offence (zincirleme suç) — one sentence increased by a quarter to three quarters. It does not cover the ordinary online pattern: separate deceptions of separate victims, sentenced separately. Article 158/3 adds one half where three or more act together, and doubles the sentence for organised offending.

Defending a TCK 158/1-f File

The 2026 amendment for people who lent an account

Law No. 7589 of 16 July 2026 added a fourth paragraph to Article 158. Where participation in an offence under Article 157 or 158 is limited to handing over a payment instrument such as a bank card, or the information or devices needed to operate an account at a bank, brokerage house, payment service provider or crypto-asset service provider, the sentence is halved. That is the "money mule" role. It is a reduction, not an acquittal, and it does nothing for organisers.

Is it really Article 158 — or 157, 159 or 245?

Article 157 carries one to five years, without the four-year floor, reached by showing the bank or platform was incidental to the deception. Article 159 drops the penalty to six months to one year of imprisonment or, in the alternative, a judicial fine, and makes prosecution dependent on the victim's complaint, where the fraud served to collect a claim founded on an existing legal relationship — the argument in commercial files with a real contract behind them. Article 245 covers misuse of another person's card, three to six years, or four to eight for a forged card; the dividing line is whether a human being was deceived at all. See our guide to TCK Articles 243 to 245.

Effective remorse under Article 168

Article 168 TCK applies to fraud. Full restitution before prosecution begins allows a reduction of up to two thirds; shown after prosecution starts but before judgment, up to one half. Partial repayment needs the victim's consent under Article 168/4. Timing sets the size of the discount, so the restitution question belongs in the first weeks, not on the eve of the hearing.

Test the digital evidence, not the summary of it

Ask for the underlying material — IP allocation records with time zones stated, call detail records, subscriber data behind the marketplace account, forensic images of seized devices — not the screenshots reproduced in the file.

Which Court, and How Long the Risk Lasts

Article 12 of Law No. 5235 gives the heavy penal court (ağır ceza mahkemesi) offences carrying more than ten years, together with a list of named offences. Qualified fraud sat on that list until Law No. 7571, published in the Resmî Gazete on 25 December 2025, deleted the words "nitelikli dolandırıcılık (m. 158)" from it. The maximum for qualified fraud is exactly ten years and no more, and Article 14 of Law No. 5235 fixes jurisdiction on the statutory maximum without regard to aggravating grounds such as Article 158/3, so a TCK 158/1-f case opened today is heard by the criminal court of first instance (asliye ceza mahkemesi), with challenge by way of istinaf appeal. Files that were already being tried in an ağır ceza mahkemesi on that date, or awaiting istinaf or temyiz review, stay there: the transitional provision introduced by the same law bars any decision of lack of jurisdiction or quashing on that ground.

Under Article 66/1-d TCK, offences carrying more than five and less than twenty years prescribe after fifteen years, calculated on the statutory upper limit (Article 66/4) and, for a chained offence, running from the last act (Article 66/6). A scheme that ended years ago is still chargeable. Much of our criminal defence work runs under a power of attorney, but a defendant's own statement is normally required at some stage.

If You Are the One Who Lost the Money

Report to the Chief Public Prosecutor's Office (Cumhuriyet Başsavcılığı), not only to the bank, and do it fast — there is no complaint deadline for Articles 157 and 158, but funds that have already moved on are harder to trace. Bring the IBAN and transfer receipt, the advertisement URL and the full message thread. Ask the prosecutor to pursue seizure over the receiving accounts, and join the case as an intervening party (katılan). Where proceeds crossed several accounts, a parallel MASAK inquiry may follow.

Common questions about cyber fraud charges in Türkiye

What is TCK 158/1-f in Turkish law?

It is the subparagraph of the Turkish Penal Code covering fraud committed by using information systems, banks or credit institutions as a tool — one of twelve aggravating subparagraphs in Article 158. Article 157 carries one to five years; Article 158 carries three to ten, with a four-year floor for (f).

What is the minimum sentence for cyber fraud in Turkey?

Four years. Article 158/1 provides that in subparagraphs (e), (f), (j), (k) and (l) the sentence cannot fall below four years and the judicial fine cannot be less than twice the benefit obtained.

Is social media fraud considered qualified fraud in Turkey?

Usually, but not automatically. Where the scheme runs entirely on Facebook, Instagram, X or any comparable platform — the victim and the seller never meet, and the money leaves in reliance on the listing or the messages — it is qualified fraud under TCK 158/1-f, and the amount involved does not change that. Where the platform only brings the two together and the deception is completed in person, the defence can argue that the information system was not the tool of the deception that Article 158/1-f requires, which points the charge to TCK 157.

What is the difference between a payment tool and a deception tool?

Whether the bank merely moved the money or its credibility did the deceiving. Tricked face to face and then asked to transfer by IBAN, the bank is a payment tool and the case can be argued down to Article 157. A forged cheque, a manipulated credit application or a caller claiming to work for the bank makes it a deception tool.

I only let someone use my Turkish bank account. Am I liable?

Possibly, but the exposure changed this year. Article 158/4, added by Law No. 7589 of 16 July 2026, halves the sentence where participation is limited to handing over a payment instrument or the credentials needed to use an account.

Can I settle with the victim and have the case dropped?

Not dropped, but repayment still changes the outcome. Qualified fraud is outside the mediation list in Article 253/1-b CMK and is prosecuted ex officio, without any complaint requirement, so there is no complaint to withdraw. Full restitution instead triggers Article 168.

Where This Leaves You

The floor is statutory, suspension and deferral are out of reach unless a statutory reduction brings the sentence to two years or less, and the fine tracks the money. What changes the outcome is decided early: whether the charge comes down to Article 157 or 159, whether Article 158/4 applies, whether the logs connect the accused to the account, and whether restitution lands inside the Article 168 window.

This guide is general information on Turkish law, not legal advice on your own matter. Rules and practice change; check the position before you act.