

What happens when a foreigner is accused of sending threatening WhatsApp messages in Turkey? Learn about TCK Article 106, screenshots, deleted messages, phone examinations, fake WhatsApp accounts, criminal complaints, penalties and defense strategies.
A foreigner accused of threatening someone on WhatsApp in Turkey may face a criminal investigation even when the alleged threat consists of only a few messages sent during an argument, commercial dispute, relationship breakdown or debt disagreement. WhatsApp evidence is increasingly important in Turkish criminal proceedings because prosecutors may examine not only screenshots but also the sender’s telephone number, the recipient, the date and time of the messages, the exact wording, the surrounding conversation and other digital evidence capable of establishing who actually sent the communication. Official prosecutorial guidance concerning telephone-message allegations specifically emphasizes identifying the sending and receiving numbers, dates, times, frequency and exact wording and, where the messages remain on the complainant’s device, examining the phone and recording the messages in an official report. (OLTU ADLİYESİ) For foreign suspects, the central defense questions are therefore usually not simply “Is there a screenshot?” but rather: Does the message legally constitute a threat? Was it actually sent by the accused person? Is the screenshot complete and authentic? What was the context of the conversation? Was the account or telephone accessible to another person? Has part of the conversation been deleted? And does the prosecution have sufficient evidence to establish criminal responsibility?
The principal provision is Article 106 of the Turkish Penal Code (TCK). The offense should not be reduced to any angry, unpleasant or intimidating expression. The precise wording, seriousness, context and object of the alleged threat must be evaluated.
A message alleging future harm to another person’s life, physical integrity or sexual integrity can fall within the core threat provision when the statutory elements are satisfied. Threats involving serious damage to property or other harm are treated differently within Article 106.
A threat does not cease to be legally relevant merely because it was communicated electronically rather than face to face.
At the same time, using WhatsApp does not automatically transform an angry message into a criminal threat.
The actual words and surrounding circumstances remain critical.
A direct message such as “I will kill you” can obviously create serious criminal exposure when the prosecution establishes authenticity, authorship and the remaining elements of the offense.
The analysis can be considerably more complicated.
Statements such as “you will regret this,” “you’ll see,” “this isn’t over” or similar expressions should not automatically be evaluated in isolation. Context can determine whether the statement communicates a legally relevant threat or merely anger, frustration or another meaning.
Consider the difference between:
“You will regret not accepting my business proposal.”
and
“If you go to the police, I will come to your house and kill you.”
The wording, surrounding messages and circumstances are fundamentally different.
One of the most common problems in WhatsApp cases is that the complainant submits a screenshot containing only the alleged threatening sentence.
The messages immediately before and after it may materially change the meaning.
A proper defense should examine the conversation from before the dispute began through the relevant aftermath.
A foreign investor and Turkish business partner argue about company money.
The foreigner writes:
“If you take my money, you will pay for this.”
The complainant alleges criminal threats.
The defense should examine whether the phrase actually communicated unlawful harm or whether, in context, it referred to litigation, enforcement proceedings or another lawful response.
Statements such as “I will sue you,” “I will report this to the prosecutor” or “I will start enforcement proceedings” should not automatically be equated with threatening unlawful violence.
The complete context still matters.
A different problem arises where someone attempts to collect a genuine or alleged debt using threatening language.
Having a legitimate receivable does not generally provide unlimited permission to threaten another person. Turkish criminal-law analysis can become particularly fact-specific where threats are allegedly used to collect a claimed debt.
Messages written during heated commercial disputes can later become criminal evidence.
A director who writes “pay me tomorrow or I will destroy you” may have intended financial or legal consequences, while the recipient may interpret the message as physical intimidation.
The wording and context must therefore be reconstructed carefully.
A screenshot can initiate an investigation, but the defense should examine what the screenshot actually proves.
It may display a message, telephone number, profile name, photograph and time.
A saved contact name is not necessarily proof of the legal identity of the sender.
A complainant can save a telephone number under any name.
A screenshot shows:
“John Smith: I will kill you.”
The words “John Smith” may simply be the contact name selected by the complainant.
The investigation should establish the actual telephone number and its connection with the suspect.
Subscriber information can become relevant.
A SIM card registered to one person may have been used by someone else.
International numbers can create additional identification difficulties.
The defense should determine whether the number actually belonged to or was controlled by the foreign suspect during the relevant period.
Where the alleged message came from a foreign number, evidence concerning subscriber identity and actual control may become important.
A suspect may claim that someone else accessed the WhatsApp account.
This defense should be supported by evidence where possible rather than raised as a generic explanation.
WhatsApp can operate through linked computers and other devices.
Therefore, physical possession of the primary telephone may not always answer every question concerning access.
If the phone was stolen before the alleged messages were sent, preserve any police report, replacement-SIM records and communications documenting the loss.
Similarly, preserve evidence concerning replacement or cancellation.
Business WhatsApp accounts may be accessible to several employees.
Determine who had physical or remote access at the relevant time.
Another person may use a foreigner’s photograph, name or other identity information.
A profile photograph alone does not establish account ownership.
Screenshots can potentially be altered.
Therefore, where authenticity is genuinely disputed, the defense should examine the original device and surrounding digital evidence rather than accepting a standalone image without question.
An unsupported assertion that “the screenshot is Photoshopped” is rarely an effective defense.
Specific inconsistencies should be identified.
Do they correspond with the alleged chronology?
Is the number visible or merely a saved contact name?
Are there unexplained gaps?
Do responses indicate that omitted messages existed?
Unusual inconsistencies may justify further examination.
Deletion creates another evidentiary problem.
A complainant may preserve only messages favorable to their allegation while deleting their own aggressive statements.
The legal meaning of an alleged threat can depend on what immediately preceded it.
The complainant submits:
Suspect: “You will pay for this.”
But an earlier omitted exchange reads:
Complainant: “I am keeping your €100,000 and you will never recover it.”
Suspect: “You will pay for this. My lawyer will start proceedings tomorrow.”
The complete conversation presents a materially different picture.
Other devices, backups, notifications, forwarded messages or witnesses may sometimes provide additional context depending on the circumstances.
A foreign suspect who still possesses the conversation should not delete it.
Resetting a phone after learning of a criminal complaint can destroy potentially favorable evidence.
Preserving a copy can be useful, but the original device should also be retained where authenticity may become disputed.
Threat allegations are not limited to written messages.
WhatsApp voice messages can also become evidence.
Where authorship is disputed, the identity of the speaker may require examination together with the surrounding evidence.
Do not rely solely on a separately edited recording.
A complainant may allege that threats occurred during a WhatsApp voice or video call.
Evidence that a call occurred and evidence concerning the content of that call are different questions.
If another person heard the conversation, witness evidence may become relevant.
Sending an image can also form part of an alleged threat.
For example, sending a photograph of a weapon accompanied by intimidating language may significantly affect the legal evaluation.
Article 106 contains aggravated circumstances, including particular ways in which threats are committed. Therefore, allegations involving weapons, multiple participants, concealed identity or organizations require separate examination.
A victim may receive threats from an unknown number.
The fact that the complainant believes a former partner or business associate sent the messages does not itself establish authorship.
Investigators may examine whether the sender knew information available only to particular persons.
Similar language may be relevant as supporting context, but should not automatically be treated as conclusive identification.
Messages sent immediately after a particular confrontation can provide circumstantial evidence.
Contemporary Turkish investigations routinely evaluate digital material together with statements, communications information and other evidence. Recent official criminal investigations have also demonstrated the importance placed on phones, computers and other digital material when alleged offenses are committed through electronic communications. (İstanbul Anadolu Adliyesi)
A WhatsApp argument may contain both threatening and insulting expressions.
These are separate criminal-law questions.
The prosecutor should classify each statement according to its content.
Repeated unwanted messaging may also create issues separate from the threat allegation.
Do not assume that defending the threat allegation automatically resolves every other allegation arising from the conversation.
A message can potentially raise more serious or different issues where the sender attempts to force another person to provide money, property or another benefit.
“Pay me €50,000 or I will publish your private photographs.”
This should not automatically be analyzed only as a simple WhatsApp threat.
The factual and procedural risks can become substantially greater where threats are allegedly used to obtain money.
Official 2026 investigations demonstrate that messages and calls from foreign telephone numbers can form part of investigations where persons are allegedly pressured into making payments. (İstanbul Anadolu Adliyesi)
WhatsApp threat allegations frequently arise following separation or relationship breakdown.
This does not mean that threatening language becomes lawful because the parties were arguing.
It means that the evidence should be evaluated completely and accurately.
Frequency can matter.
Official investigative guidance specifically directs attention to how many times allegedly threatening or insulting messages were sent. (OLTU ADLİYESİ)
These situations can present materially different factual circumstances.
Alcohol consumption does not automatically eliminate criminal responsibility.
The precise circumstances require individual legal assessment.
Likewise, “I was angry” is not by itself a complete defense.
The question remains whether the words and circumstances satisfy the elements of the alleged offense.
Messages often use conditional wording:
“If you report me, I will…”
“If you don’t pay, I will…”
“If you come here again, I will…”
Conditional language can still require criminal-law analysis. The condition does not automatically make the communication lawful.
A foreigner may claim that a statement was intended as a joke.
Previous communication style, emojis, responses and the relationship between the parties may become relevant.
This is especially important in cases involving non-native Turkish speakers.
A foreigner may use a translated expression without understanding its precise tone.
Messages written through translation software can sometimes produce unusually aggressive language.
If the foreigner drafted the message in another language before translating it, preserve the original text where available.
The accused person’s intention and the objective meaning of the communication must still be examined.
Certain expressions may have different intensity in different languages.
An accurate translation should reflect meaning rather than simply substitute words mechanically.
A foreigner summoned by police or the prosecutor should first understand exactly which message forms the basis of the accusation.
Ask which number, date, time and wording are alleged.
Was the message allegedly sent from the suspect’s Turkish phone, foreign phone or business account?
If the message is genuine but taken out of context, the complete conversation can become central to the defense.
A false categorical denial can damage credibility if device or other evidence subsequently confirms authorship.
Sometimes the strongest defense is not “I didn’t send it.”
It may instead be:
“I sent the message, but the complete conversation demonstrates that I was referring to lawful proceedings and did not threaten unlawful harm.”
Foreign suspects should ensure that they understand the accusation and questions.
Names, telephone numbers, dates and exact quotations should be checked carefully.
A suspect should understand and exercise the procedural defense rights available under Turkish criminal procedure.
Digital-device examination and seizure are governed by criminal-procedure rules and should be assessed according to the precise investigative measure involved.
Deleting messages or altering data after becoming aware of an investigation can eliminate potentially useful defense evidence.
Potentially, depending on the precise allegations, evidence and applicable criminal-procedure conditions.
However, a WhatsApp threat complaint does not automatically mean detention or arrest.
Judicial-control measures may become relevant depending on the circumstances.
A criminal investigation does not automatically prevent a foreigner from leaving Turkey. A travel restriction requires a separate procedural basis.
A criminal complaint does not automatically cancel a residence permit.
Being accused of sending a threatening WhatsApp message does not itself mean that a foreigner will automatically be deported.
Criminal proceedings and immigration proceedings should be analyzed separately.
A person abroad should not simply ignore a Turkish criminal investigation.
The file status, summons and any procedural measures should be determined.
Not every complaint is genuine.
Commercial, family, relationship and shareholder disputes can produce false or exaggerated criminal allegations.
The fact that the complainant has a reason to dislike the suspect does not establish that the messages are fabricated.
The defense should focus on authenticity, authorship, context and legal meaning.
Do not automatically file retaliatory criminal complaints.
Any complaint should be supported by genuine evidence.
Each person’s conduct should be evaluated separately.
One person’s threatening message does not automatically excuse the other’s.
This is especially important where both parties are complainants and suspects.
The procedural position can depend on the precise form of the threat and other alleged offenses. Historically, the first paragraph of TCK Article 106 has been included within the Turkish criminal procedure framework concerning reconciliation in applicable cases. (Mevzuat) The current file should nevertheless be evaluated according to the precise offense alleged and the law applicable at the relevant procedural stage.
The original telephone, complete WhatsApp conversation, telephone-number information, voice messages, photographs, call history, relevant emails, preceding communications and any evidence explaining the context should be preserved.
Use:
Date → Time → Sender → Exact Message → Previous Message → Response → Context → Alleged Meaning.
Use:
Telephone Number → Registered User → Actual User → Device → Linked Devices → Relevant Date → Access by Others.
Use:
Prosecution Allegation → Screenshot → Original Conversation → Authorship Evidence → Context → Defense Explanation → Supporting Evidence.
For foreign-language cases:
Original Message → Literal Translation → Contextual Translation → Alleged Threatening Meaning → Defense Explanation.
Preserve the phone and complete conversation. Do not delete or edit messages. Identify the alleged threatening statement and determine which account and number allegedly sent it.
Reconstruct the entire conversation, identify relevant witnesses and preserve evidence concerning telephone ownership, account access, linked devices and translation issues.
Prepare the chronology, evaluate whether authorship or legal meaning is disputed, identify missing or deleted portions of the conversation and prepare the suspect’s statement based on the complete evidence.
Do not delete the WhatsApp conversation, do not reset the telephone, do not pressure the complainant to withdraw the complaint, do not create fake screenshots, do not categorically deny sending a message before checking the records, do not rely exclusively on “I was joking,” do not assume that foreign nationality prevents prosecution and do not ignore separate immigration questions where serious procedural developments arise.
An effective defense should begin by separating authorship, authenticity, context and criminal meaning. First, the exact allegedly threatening message must be identified. Second, the prosecution evidence connecting the telephone number or WhatsApp account to the foreign suspect should be examined. Third, the complete conversation should be preserved because isolated screenshots may omit messages that materially alter meaning. Fourth, any genuine dispute concerning screenshot manipulation, account compromise, shared devices or linked computers should be supported with objective evidence. Fifth, where the suspect admits sending the message, the defense should determine whether the words objectively amount to a criminal threat or instead refer to lawful litigation, commercial consequences or another non-criminal meaning. Sixth, foreign-language and translation issues should be analyzed carefully where the suspect is not fluent in Turkish. Finally, the criminal file should be distinguished from any separate immigration consequences. The practical roadmap is therefore: identify the alleged message → preserve the original phone → preserve the complete WhatsApp conversation → identify the sending number → establish actual account control → examine linked devices → check dates and times → compare screenshots with original messages → identify deleted or omitted context → preserve voice messages and photographs → examine translation issues → identify witnesses → distinguish threats from insults or lawful warnings → assess any blackmail or extortion allegation separately → prepare the prosecutor statement from the complete evidence → challenge unsupported authorship allegations → challenge manipulated or incomplete evidence where justified → assess judicial-control risks → separately evaluate residence or immigration consequences → preserve all digital evidence until the criminal proceedings are concluded.
Yes. A threat can potentially be communicated through WhatsApp. The wording, context, seriousness, authorship and other statutory elements must be evaluated.
A screenshot may be evidence, but its evidentiary value depends on the circumstances. Authorship, authenticity, completeness and surrounding evidence can all become important.
A saved contact name does not automatically establish who actually controlled the account. The underlying number and other identification evidence should be examined.
That can be relevant if genuinely supported by evidence. Device access, linked devices, SIM records and surrounding circumstances should be investigated.
Ordinarily, stating an intention to pursue lawful legal remedies should not automatically be equated with threatening unlawful harm. However, the entire wording and context should be considered.
Anger alone does not automatically eliminate criminal responsibility. The actual message and circumstances still require legal assessment.
The complete conversation should be reconstructed as far as possible. Messages preceding the alleged threat may materially affect its interpretation.
A criminal complaint does not automatically create a travel ban. Judicial-control measures require a separate legal basis and assessment.
Not automatically. A criminal accusation and immigration proceedings are separate matters, although serious criminal developments may require separate immigration-law analysis.
Preserve the original telephone and complete conversation, do not delete messages, identify the exact statement being alleged as a threat and prepare the factual context before giving a detailed defense.
Foreign nationals accused of threatening someone through WhatsApp in Turkey may face issues involving TCK Article 106, screenshot evidence, disputed account ownership, deleted messages, voice recordings, telephone examinations, prosecutor statements, judicial-control measures and potential immigration consequences. The complete conversation and technical evidence can be particularly important where a single screenshot gives an incomplete picture of the dispute.
Fırat Fesih Kaya Law Office provides legal assistance to foreign nationals, investors, company directors and international clients facing criminal investigations arising from WhatsApp messages and other electronic communications in Turkey.
Fırat Fesih Kaya can assist with WhatsApp threat investigations, prosecutor statements, disputed screenshots, digital evidence, account-ownership disputes, allegations involving threatening voice messages, criminal defense, judicial-control measures and related proceedings affecting foreigners in Turkey.
Phone: +90 312 434 22 22
Mobile Phone: +90 532 769 22 22
Email: info@firatfesihkaya.av.tr
Address: Mevlana Boulevard No: 221, Yildirim Tower, Balgat, Cankaya / Ankara, Turkey