

Fake Investment Platform Fraud in Turkey: How Can Foreign Investors Recover Their Money? 2026 Guide
Lost money to a fake investment, forex, stock or cryptocurrency platform in Turkey? Learn how foreign investors can report investment fraud, trace bank and crypto transfers, freeze suspicious accounts, preserve digital evidence and pursue recovery in Turkey in 2026.
A foreign investor may believe that they are transferring money to a legitimate stock, forex, cryptocurrency or investment platform in Turkey when the entire platform is actually part of a fraud scheme.
The fraud frequently begins with a sponsored social-media advertisement, WhatsApp message, Telegram investment group, online investment adviser or telephone call promising unusually high returns.
The victim opens what appears to be a professional investment account. A dashboard displays increasing profits. An alleged investment adviser calls regularly and encourages additional deposits.
When the investor finally asks to withdraw the money, the situation changes.
The platform may demand:
“withdrawal tax”
“account activation fee”
“insurance payment”
“AML clearance fee”
“commission”
or another deposit before supposedly releasing the investment.
The victim pays again.
The money still does not arrive.
This type of fraud is a significant enforcement issue in Turkey in 2026. In an official April 2026 investigation, the Istanbul Anatolian Chief Public Prosecutor’s Office stated that suspects used sponsored social-media advertisements to direct victims through phishing methods to fake investment websites and allegedly obtained substantial proceeds by promising high returns. Financial analysis identified activity involving 15 bank accounts and four crypto-asset accounts connected with 27 suspects. Nineteen suspects were detained pending trial following the operation.
A separate 2026 investigation described alleged investment groups operating through digital communication platforms, using shell companies containing words such as “investment” and “finance” to increase credibility. Prosecutors reported 269 identified victims, alleged proceeds of approximately TRY 600 million and very substantial transaction volumes identified through financial analysis.
For a foreign investor, the central question is therefore not merely:
“Was the investment platform fake?”
It is:
“Where did my money go, can the receiving accounts be identified, and what legal steps can be taken before the funds disappear?”
Fake investment platform fraud generally involves convincing a victim that money is being invested when the funds are actually being transferred to accounts controlled directly or indirectly by fraudsters.
The alleged investment may involve:
The platform may be completely fictitious, or fraudsters may imitate the identity of a genuine financial institution.
A typical scheme may follow this sequence:
Social-media advertisement → Investment adviser → Small initial deposit → Fake profit → Larger deposits → Withdrawal request → Additional fees → Platform disappears
The initial deposit is often deliberately kept relatively small.
For example, the victim transfers:
USD 1,000
The fake platform may soon display:
USD 1,650
The victim believes the investment is profitable.
The alleged adviser then says:
“If you increase your capital to USD 20,000, you can access our premium investment strategy.”
The displayed balance may later rise to USD 35,000 or USD 50,000 even though no genuine investment has occurred.
One of the most effective elements of investment fraud is the online dashboard.
It may display:
But the figures displayed on the website may simply be numbers controlled by the fraudsters.
The first evidentiary question should therefore be:
Was the victim’s money actually invested, or was it transferred to unrelated bank or cryptocurrency accounts?
The April 2026 official prosecution announcement is especially relevant.
Prosecutors stated that sponsored advertisements using the name “invescogrubu” were allegedly used to direct victims through phishing techniques to fake investment websites. Victims were allegedly promised high returns. Financial analysis identified substantial transaction activity across bank and crypto-asset accounts associated with suspects.
This demonstrates that fake investment fraud investigations may combine:
website evidence + advertisements + bank records + cryptocurrency records + digital communications + financial analysis.
For victims, preserving this entire evidence chain can be crucial.
Once withdrawal becomes impossible, fraudsters frequently demand additional payments.
Examples include:
“Pay 15% tax before withdrawal.”
“Your account has been frozen by the regulator.”
“Pay an anti-money-laundering deposit.”
“Your profit exceeds the withdrawal limit.”
“Pay an international transfer fee.”
Do not assume that another payment will unlock the account.
A demand for repeated additional payments after a withdrawal request can be an important warning sign.
A fraudster may tell the foreign investor:
“You owe Turkish tax on your investment profit. Send the tax to this IBAN.”
The victim should not assume that a payment demanded by a private individual or suspicious platform is an official Turkish tax obligation.
Preserve the demand as evidence.
Do not preserve only one screenshot.
Record:
If the website later disappears, these records may become important evidence.
Foreign victims should preserve complete communications from:
Do not preserve only the messages that appear incriminating.
The complete conversation may show how trust was established and how the victim was induced to transfer increasingly large amounts.
This can be extremely important.
Save evidence concerning:
The 2026 “invescogrubu” investigation specifically involved sponsored social-media advertisements allegedly used to direct victims to fake investment sites.
This should be checked carefully.
Turkey’s Capital Markets Board states that regularly conducting investment services and activities requires authorization and that investors can verify authorized institutions through the Board’s records. The Board also states that unauthorized capital-market activity can lead to criminal proceedings and regulatory measures.
A professional-looking website, Turkish telephone number, office photograph or company name does not by itself establish authorization.
This distinction is particularly important.
Fraudsters may tell the victim:
“We are a registered Turkish company.”
Even if a company with a similar name exists, that does not automatically establish that it is authorized to provide regulated investment services.
The Capital Markets Board states that investment services and activities may be performed only within the applicable authorization framework.
Therefore, the investigation should distinguish:
company registration
from
authorization to conduct investment activity.
The 2026 prosecution investigation involving alleged investment groups is particularly instructive.
Prosecutors stated that shell companies using words such as “investment” and “finance” were allegedly used to increase credibility. The investigation reportedly identified hundreds of victims and substantial financial activity.
A company name containing “Investment,” “Capital,” “Finance,” “Global” or similar terminology should therefore not be treated as proof of legitimacy.
Where the activity falls within the capital-markets framework, regulatory issues may arise in addition to the criminal investigation.
The Capital Markets Board explains that unauthorized capital-market activity may result in a criminal complaint and that the Board has powers under the Capital Markets Law concerning unauthorized activities. It also states that, under Article 99, it may seek measures concerning unauthorized activity and, within the statutory framework, bring proceedings aimed at reversing consequences and returning cash or capital-market instruments to right holders.
However, a complaint to a regulator should not be treated as a substitute for urgent criminal and financial tracing where the investor’s money has already been transferred to fraudsters.
A criminal complaint should explain the fraud chronologically.
A useful structure is:
How contact began → What investment was promised → Who communicated with the investor → Which platform was used → How much money was transferred → Where the money was sent → What profits were displayed → What happened when withdrawal was requested → What additional payments were demanded.
Attach the supporting evidence.
Do not simply state:
“I lost USD 100,000.”
Prepare a transaction table.
For example:
January 8 — USD 5,000 — Bank Account A
January 19 — USD 15,000 — Bank Account B
February 3 — USD 25,000 — Cryptocurrency exchange
February 17 — USD 55,000 — Company Account C
This can help investigators reconstruct the financial trail.
The fake website may disappear.
The investment adviser may stop answering.
The Telegram account may be deleted.
But the financial trail may remain extremely important.
Preserve:
Do not rely only on screenshots from the fake platform.
Potentially.
Recent Turkish fake-investment investigations demonstrate the use of financial analysis involving both bank and cryptocurrency accounts.
A transaction chain might look like:
Foreign investor → Turkish bank account → Money-mule account → Company account → Cryptocurrency exchange
or:
Foreign investor → Foreign account → Turkish intermediary → Cryptocurrency wallet
The investigation may attempt to reconstruct each stage.
Depending on the circumstances and the applicable procedural measure, suspicious accounts and suspected criminal proceeds may become subject to restrictions or seizure during the investigation.
Speed matters because fraudsters often transfer the money onward rapidly.
If the money remains in an identifiable account when the fraud is reported, the practical recovery position may be very different from a case in which the funds have already moved through several accounts, been withdrawn in cash or converted into cryptocurrency.
The registered owner of the receiving account may not be the person operating the fake investment platform.
The chain may be:
Investor → Account holder → Fraud organizer
or:
Investor → Account holder → Cash withdrawal → Organizer
Turkish prosecutorial authorities have issued warnings in 2026 about allowing bank accounts and IBANs to be used by third parties, including schemes involving cryptocurrency and promises of high investment returns.
The investigation should therefore identify both the receiving account and the person who ultimately controlled or benefited from the money.
Yes, where the funds were withdrawn in cash.
Relevant evidence may include:
Because CCTV may eventually be overwritten, potentially relevant footage should be identified promptly.
This is common in modern investment-fraud investigations.
The April 2026 fake-investment investigation expressly referred to both bank and crypto-asset accounts.
Preserve:
A cryptocurrency wallet address can help trace transactions, but a wallet address alone does not automatically identify the human controlling it.
A common fraud structure is:
“Open an account at this legitimate cryptocurrency exchange, buy cryptocurrency and send it to your investment wallet.”
The exchange itself may be legitimate while the destination wallet belongs to fraudsters.
Therefore, distinguish:
legitimate exchange
from
fraudulent investment destination.
Preserve the complete transaction history.
Some victims are instructed to install software or applications that supposedly allow an “investment adviser” to assist them.
If this occurred, preserve:
Do not factory-reset the device before considering preservation of relevant digital evidence.
Do not assume the displayed balance represents real assets.
A dashboard may show:
USD 250,000 available balance
while the actual transferred money was moved elsewhere months earlier.
Financial tracing should focus on the real bank and cryptocurrency transactions.
Fraudsters may say:
“Your account has been frozen because you violated investment rules.”
Ask:
Who supposedly imposed the freeze?
Which authority?
What decision number?
Which financial institution holds the money?
A statement displayed on a fraudulent website is not proof that any genuine legal freeze exists.
Verify the claim independently.
In June 2026, the Capital Markets Board itself warned about fraud attempts in which individuals misused the names or titles of Board personnel to make financial demands. The Board stated that it and its personnel do not request money or donations through telephone calls, SMS, email, social media or similar communications and advised victims of such conduct that they may report it to judicial authorities and exercise their legal rights concerning losses.
Fake investment advertisements may misuse:
A photograph or video does not establish endorsement.
The investor should preserve the advertisement itself because it may demonstrate how the fraud was presented.
The evidentiary approach should remain practical.
Preserve:
Do not assume a familiar face or voice proves genuine endorsement.
Potentially, particularly if the funds can still be identified and secured.
But recovery is not automatic.
Important factors include:
The earlier the financial trail is reconstructed, the greater the opportunity to identify potentially recoverable assets.
Where property belonging to a victim is identified and secured, the criminal-procedure framework may permit its return depending on the nature of the property and procedural circumstances.
The key issue is proving:
the property belongs to the victim.
Bank statements, transaction records and other source documents are therefore essential.
Cross-border transfers make the investigation more complex but do not automatically make the money untraceable.
Relevant evidence may include:
Foreign evidence may require international judicial cooperation depending on where the relevant account and institution are located.
Yes, where the alleged offence falls within Turkish criminal jurisdiction and the relevant procedural requirements are satisfied.
Foreign nationality does not prevent a victim from reporting fraud.
The complaint should clearly identify:
Physical absence from Turkey does not necessarily make legal action impossible.
Depending on the case and procedural requirements, representation may be arranged and evidence can be organized for submission.
However, the investor should not delay simply because they have returned abroad.
For foreign investors located outside Turkey, representation may facilitate communication and procedural follow-up.
The appropriate form of authorization depends on where it is executed and the legal steps required.
Where the conduct involves unauthorized capital-market activity, reporting the activity to the Capital Markets Board may be relevant.
The Board specifically invites information concerning persons or entities collecting money for capital-market investment without authorization and explains that unauthorized activity can trigger regulatory and criminal action.
But where money has already been stolen, regulatory reporting should normally be considered alongside, not instead of, criminal and recovery measures.
Potentially, depending on the exact method and statutory elements.
Fake websites, digital communications, bank transfers and technology-based deception can raise aggravated-fraud issues under Turkish criminal law.
The April 2026 fake-investment prosecution is a concrete example of Turkish authorities treating sophisticated digital investment fraud as a serious criminal investigation involving coordinated searches, arrests and financial analysis.
Yes.
The Capital Markets Board states that conducting unauthorized capital-market activity is separately regulated under the Capital Markets Law and can result in criminal sanctions.
Therefore, depending on the facts, a case may involve both:
fraud allegations
and
unauthorized capital-market activity.
The precise legal characterization must be determined from the conduct involved.
This distinction is essential.
Losing money on a genuine investment does not automatically mean fraud occurred.
The investigation should distinguish between:
genuine investment risk
and
intentional deception through a fake investment operation.
Warning signs of a potentially fraudulent operation may include:
A poor investment return alone is different.
Civil recovery may need to be evaluated in addition to criminal proceedings.
Potential recovery strategy depends on:
A criminal complaint alone should not be assumed to guarantee full financial recovery.
Do not stop at the company name.
Investigate:
The 2026 investigation concerning investment- and finance-named shell companies illustrates why corporate appearance does not necessarily establish a legitimate investment operation.
This can be highly valuable.
Save:
These records can help demonstrate the transition from the promised investment relationship to the alleged fraudulent withholding of funds.
Even if the platform is fraudulent, deleting the account may destroy evidence available to the victim.
Preserve the dashboard and transaction history first.
Victims sometimes threaten:
“I am going to the police tomorrow.”
This may cause suspects to delete accounts, abandon telephone numbers or move funds.
The appropriate communication strategy should be considered carefully once fraud is suspected.
This is a major secondary risk.
After losing money, the victim may receive another message:
“We recovered your cryptocurrency.”
“We are blockchain investigators.”
“Pay USD 5,000 and we will release your stolen funds.”
“We work with Turkish authorities.”
This may be another fraud.
Never send additional money merely because someone claims to have located the stolen investment.
Social media, search engine, WhatsApp, Telegram, telephone or referral?
Do not rely on its own website.
Identify every beneficiary.
This may affect tracing.
A registered entity can still be misused.
Create a chronological list.
Preserve blockchain records.
A small initial withdrawal may have been used to build trust.
Preserve the response.
Document every demand.
Preserve device evidence.
Preserve the representation.
Preserve whatever evidence remains.
This can be critical for tracing.
Recovery strategy may become international.
Fake investment platform fraud is an active Turkish enforcement issue in 2026.
The April 2026 “invescogrubu” investigation involved alleged phishing through sponsored advertisements, fake investment websites, promises of high returns and financial analysis covering both bank and cryptocurrency accounts.
Another 2026 investigation involved supposed investment groups and shell companies carrying investment- and finance-related names. Prosecutors reported hundreds of victims and extensive financial activity.
At the regulatory level, the Capital Markets Board continues to state that investment services and activities require authorization and warns investors against persons collecting money for investment purposes without the necessary authorization. The Board also has statutory powers concerning unauthorized capital-market activities.
The Board separately issued a June 2026 warning after fraudsters allegedly misused the names and titles of Board personnel to seek money from individuals and organizations.
For foreign investors, the practical 2026 response should therefore be:
Stop further payments → preserve the platform → preserve communications → document every transfer → verify authorization → identify recipient accounts → report the fraud promptly → trace bank and cryptocurrency movements → seek preservation or seizure of identifiable proceeds → evaluate criminal, regulatory and civil recovery routes.
No. A withdrawal problem alone does not prove fraud. However, a fictitious platform, false authorization, fake profits, unrelated receiving accounts and repeated demands for additional withdrawal fees can justify urgent investigation.
Yes. Official 2026 investigations demonstrate active investigations into fake investment websites, sponsored advertisements, bank accounts and cryptocurrency accounts.
Potentially, but recovery depends on where the money went, how quickly the matter is reported, whether funds or other assets can be identified and secured, and whether the perpetrators can be identified. Recovery cannot be guaranteed.
Yes, where the alleged offence falls within Turkish jurisdiction and the procedural conditions are satisfied. Foreign nationality does not prevent a victim from reporting fraud.
Preserve the exchange account, wallet addresses, transaction hashes and complete transaction history. Cryptocurrency can make recovery more complex, but blockchain and exchange records may still provide important evidence.
No. Company registration and authorization to provide regulated investment services are different questions. The Capital Markets Board states that investment services and activities require the applicable authorization.
Do not send additional money merely because the platform demands a supposed tax or regulatory fee. Verify any claimed legal obligation independently through legitimate channels.
Unauthorized capital-market activity can fall within the Board’s regulatory powers, and the Board states that it can take measures and make criminal referrals concerning unauthorized activity.
Preserve the advertisement. Do not assume that the person actually endorsed the investment. The Capital Markets Board itself warned in 2026 about fraudsters misusing the identities or titles of Board personnel.
Stop further payments, preserve the complete digital and financial evidence, identify every receiving account or cryptocurrency transaction and begin legal and financial tracing as quickly as possible.
Fake investment fraud can involve far more than a fraudulent website.
A sophisticated case may involve sponsored social-media advertisements, fake financial advisers, shell companies, money-mule accounts, cryptocurrency exchanges, foreign bank accounts, fabricated trading dashboards and repeated demands for taxes or withdrawal fees.
For foreign investors, the recovery strategy should focus on the actual financial trail:
Where was the money sent? Who received it? Was the recipient authorized to provide investment services? Where was the money transferred next? Was cryptocurrency involved? Are funds or other assets still identifiable?
Fırat Fesih Kaya Law Office provides criminal-law and legal recovery assistance to foreign investors, foreign nationals, executives and international business owners who become victims of fake investment platforms and online investment fraud in Turkey.
Lawyer Fırat Fesih Kaya assists foreign clients with criminal complaints, prosecutor proceedings, fake investment websites, suspicious bank transfers, financial tracing, frozen recipient accounts, cryptocurrency evidence, money-mule accounts, digital evidence, unauthorized investment activity and cross-border fraud investigations.
Early legal action can be especially important in investment fraud because the apparent balance displayed on the fraudulent platform may have no relationship to the actual location of the victim’s money. The real recovery analysis begins with the bank and cryptocurrency transaction trail.
Phone: +90 312 434 22 22
Mobile: +90 532 769 22 22
Email: info@firatfesihkaya.av.tr
Address: Mevlana Boulevard No:221, Yıldırım Tower No:148, 06520 Balgat, Çankaya, Ankara, Turkey
This publication is provided for general informational purposes and does not constitute legal advice. Criminal remedies and financial recovery depend on the structure of the alleged fraud, location of the perpetrators and assets, transfer method, regulatory status of the platform and evidence available in the individual case.