Lost cryptocurrency or money to a crypto scam in Turkey? Learn how to file a criminal complaint, preserve blockchain evidence, trace bank and wallet transfers, seek asset seizure, identify suspects and pursue compensation.

Becoming a victim of cryptocurrency fraud in Turkey can involve more than simply losing Bitcoin, USDT, Ethereum or money transferred to a supposed investment platform. Modern crypto fraud schemes frequently combine bank transfers, cryptocurrency exchanges, personal wallets, foreign platforms, fake investment websites, WhatsApp or Telegram communications and multiple intermediary accounts. The most important issue for a victim is speed. Cryptocurrency transactions may be transferred through several wallets within minutes, converted into other assets or moved through foreign exchanges. Nevertheless, the fact that a cryptocurrency transfer is technically irreversible does not mean that legal recovery is automatically impossible. Turkish criminal proceedings can be used to identify bank-account holders, investigate cryptocurrency accounts, obtain digital evidence, trace financial movements and, where the statutory requirements are satisfied, seek protective measures over assets. In practice, recovery depends heavily on whether the money trail can be reconstructed and whether identifiable assets remain accessible. Turkey’s regulatory and AML framework for crypto-asset service providers has also developed significantly; MASAK’s updated guidance addresses customer identification, transfer information, suspicious transaction reporting and other compliance obligations applicable to crypto-asset service providers. (Masak)

What Is Cryptocurrency Fraud in Turkey?

Cryptocurrency fraud is not one single type of scheme. The criminal characterization depends on how the victim was deceived and what happened to the assets. A victim may have transferred money after being shown a fake investment platform, sent cryptocurrency directly to a fraudster’s wallet, provided access credentials to a fake exchange representative or transferred money into third-party bank accounts after being promised cryptocurrency profits.

Fake Cryptocurrency Investment Platforms

One of the most common scenarios begins with an advertisement or unsolicited message promising unusually high returns. The victim is directed to a professional-looking website or mobile application where an apparently genuine investment balance is displayed.

The Profits May Be Completely Fictitious

The platform may show that an initial USD 10,000 investment has increased to USD 25,000 even though no genuine investment activity has occurred.

The Victim Is Encouraged to Deposit More

Fraudsters may assign a supposed “investment consultant” who repeatedly encourages additional deposits.

Withdrawal Problems Begin Later

When the victim asks to withdraw the balance, the platform may demand a “tax,” “insurance fee,” “AML deposit,” “withdrawal commission,” “wallet verification payment” or “liquidity fee.”

This Can Be a Second Stage of the Fraud

Victims should be extremely cautious about paying additional money merely because they are told that doing so will unlock previously deposited funds.

WhatsApp and Telegram Cryptocurrency Fraud

Many schemes begin on messaging applications. The victim may be added to an investment group where supposed investors post fabricated profit screenshots and praise an alleged financial expert.

Fake Group Members May Be Part of the Scheme

The fact that dozens of people appear to be earning money does not establish that the investment is genuine.

Romance and Cryptocurrency Investment Fraud

A person may build an online relationship with the victim over weeks or months before recommending a particular cryptocurrency platform.

The Emotional Relationship Is Used to Establish Trust

Once substantial funds are transferred, the supposed romantic partner may disappear or demand additional deposits.

Cryptocurrency Recovery Scams

Victims who have already lost money are particularly vulnerable to a second fraud.

Typical Recovery Scam

Someone contacts the victim and says: “We found your cryptocurrency on the blockchain. Pay us a recovery fee and we will release it.”

Be Extremely Careful

A genuine blockchain transaction can often be observed publicly, but the ability to identify a wallet does not mean that a private company can simply reverse the transfer.

What Should a Crypto Fraud Victim Do Immediately?

The first priority is to stop making additional payments and preserve evidence. Do not continue sending money merely because the fraudster claims that one final payment will release the investment.

Do Not Delete Communications

Preserve WhatsApp, Telegram, Signal, SMS and email conversations.

Preserve the Entire Conversation

A complete conversation is usually more useful than selected screenshots because it can show how trust was established, what representations were made and who provided the payment instructions.

Preserve the Website

Save the website address, screenshots, account pages, transaction history and any displayed company information.

Preserve Usernames

Telegram usernames, WhatsApp numbers, email addresses and social-media accounts may help identify connections between participants.

Preserve Cryptocurrency Wallet Addresses

Wallet addresses are among the most important pieces of evidence.

Preserve Transaction Hashes

The transaction hash or transaction ID can allow the relevant blockchain movement to be identified precisely.

Preserve Exchange Records

Download transaction histories showing cryptocurrency purchases and withdrawals.

Preserve Bank Statements

If Turkish lira, euros or dollars were transferred before cryptocurrency was purchased, retain those banking records.

Do Not Focus Only on the Final Crypto Wallet

The strongest investigation may begin with the traditional banking system rather than the blockchain.

Example

The victim transfers TRY 500,000 to Account A. Account A sends TRY 480,000 to Account B. Account B transfers funds to a cryptocurrency service provider. USDT is purchased and sent to Wallet X.

The investigative chain becomes Victim → Bank Account A → Bank Account B → Crypto Platform → USDT → Wallet X.

Each Stage Can Produce Different Evidence

The banks may identify account holders. The cryptocurrency platform may hold customer information. Communications may identify the person providing instructions. Blockchain records may reveal subsequent wallet movements.

File a Criminal Complaint Promptly

A victim of cryptocurrency fraud can report the incident to the competent law-enforcement and prosecutorial authorities. The complaint should ideally explain the scheme chronologically rather than merely state, “I lost money in cryptocurrency.”

The Complaint Should Explain How the Deception Occurred

Describe the initial contact, representations made, supposed investment opportunity, payment instructions, subsequent demands and the moment the fraud became apparent.

Identify Every Payment

Each bank or cryptocurrency transfer should be listed separately.

A Useful Structure Is

Date → Amount → Currency/Crypto Asset → Sender Account/Wallet → Recipient Account/Wallet → Transaction ID → Reason Given by Fraudster.

Identify Every Known Suspect

Include names, telephone numbers, usernames, bank-account holders, cryptocurrency addresses, company names and website details.

Do Not Wait Until You Know the Fraudster’s Real Identity

One purpose of the criminal investigation is to identify unknown suspects through banking, communications, digital and financial evidence.

Bank Account Holders Can Be Important

Where the victim first transferred fiat currency into a Turkish bank account, the registered account holder can provide an immediate investigative lead.

But the Bank Account Holder May Not Be the Principal Fraudster

Fraud networks can use third-party or money-mule accounts. Turkish judicial authorities have repeatedly warned that fraud organizations recruit people to provide bank and digital accounts for payment flows. (ALAŞEHİR ADLİYESİ)

Therefore the Investigation Should Follow the Money Beyond the First Account

Stopping at the first IBAN can leave the principal organizers unidentified.

Cryptocurrency Platform Information Can Be Critical

Where assets passed through a crypto-asset service provider, investigators may seek information capable of identifying the relevant account and transactions.

Turkey’s Crypto AML Framework Is Important for Victims

Crypto-asset service providers operate within an increasingly detailed AML compliance framework. MASAK’s updated September 2025 guidance addresses customer identification, remote identification, enhanced measures, the Travel Rule, crypto transfer restrictions, suspicious transaction reporting and information/document obligations. (Masak)

Suspicious Transaction Reporting Can Assist Financial Intelligence

Crypto-asset service providers are among the sectors covered by MASAK’s suspicious transaction reporting framework. MASAK’s sectoral guidance specifically includes crypto-asset service providers. (Masak)

The Travel Rule Can Matter

Transfer-information requirements can make certain cryptocurrency transactions more traceable through regulated providers than victims sometimes assume.

Cryptocurrency Is Not Necessarily Anonymous

Blockchain addresses may be pseudonymous, but interaction with regulated exchanges can create links between wallet activity and identifiable customers.

Blockchain Analysis

A transaction can potentially be followed from one wallet to another using blockchain data.

Example

Victim Wallet → Wallet A → Wallet B → Exchange Deposit Address.

If Wallet B ultimately sends the cryptocurrency to an account at an identifiable exchange, that point can become particularly important for investigation and potential asset preservation.

Speed Matters

The longer fraudsters have to move assets through additional wallets and platforms, the more difficult recovery can become.

Asset Seizure in Cryptocurrency Fraud Investigations

A criminal complaint should not focus only on punishment. Where the factual and legal requirements are satisfied, protective measures concerning identifiable proceeds or assets may become critically important for eventual recovery.

Bank Accounts

If fraud proceeds remain in a Turkish bank account, timely investigative measures can be particularly important.

Cryptocurrency Accounts

Where crypto assets remain at an identifiable service provider, investigators may examine whether appropriate protective measures are legally available.

Other Assets

A financial investigation can sometimes identify real estate, vehicles, company interests or other assets potentially relevant to recovery and criminal proceedings.

Seizure and Final Recovery Are Not the Same Thing

Asset seizure is generally a protective criminal-procedure measure. It does not automatically mean that the seized property will immediately be paid to the victim.

Why Seek Protective Measures?

Because a successful criminal case can have little practical value to a victim if all recoverable assets have disappeared by the time proceedings end.

Evidence of the Connection With the Fraud Is Important

The complaint should connect the requested investigative measures with the actual financial trail rather than request indiscriminate freezing of unrelated property.

What If the Money Has Already Been Converted Into USDT?

Conversion into USDT does not necessarily end the investigation. Preserve the exchange transaction and subsequent wallet transfer.

What If the USDT Was Sent Through Several Wallets?

Preserve every identifiable transaction hash and wallet address.

What If the Cryptocurrency Was Sent to a Foreign Exchange?

Cross-border elements can make recovery more complicated, but they do not necessarily make investigation impossible. International evidence and cooperation issues may become relevant depending on the exchange and jurisdiction.

Do Not Assume “Foreign Exchange” Means the Money Cannot Be Traced

The legal and practical options depend heavily on the platform, jurisdiction, account information and remaining assets.

What If the Cryptocurrency Went to a Self-Custody Wallet?

Identification can become more difficult because there may be no centralized intermediary holding customer records at that wallet. Nevertheless, subsequent transfers may eventually reach identifiable services.

Continue Mapping the Blockchain Trail

The destination after the first wallet may be more important than the first wallet itself.

What If Cryptocurrency Was Sent Through Multiple Blockchains?

Cross-chain transactions and conversion between assets can make tracing more complex, but each transaction should still be documented.

Do Not Submit Hundreds of Unexplained Blockchain Screenshots

Create a chronological map that allows investigators to understand the flow.

Example

15 March – TRY 200,000 transferred to Turkish IBAN. 15 March – Funds transferred to crypto platform. 15 March – USDT purchased. 16 March – 5,200 USDT transferred to Wallet A. 16 March – Wallet A transferred 5,180 USDT to Wallet B.

This structure is far easier to investigate than disconnected screenshots.

Fake Exchange Websites

Some victims never purchase genuine cryptocurrency at all. They transfer money to fraudsters while a fake website merely displays fictional crypto balances.

Determine Whether Real Cryptocurrency Ever Existed

This distinction can materially change the evidence strategy.

If No Real Crypto Was Purchased

The investigation may primarily involve bank transfers, payment institutions and the people controlling the fake platform.

If Real Crypto Was Purchased

Blockchain and exchange evidence becomes more important.

Fake Wallet Applications

Fraudsters may convince victims to install applications that merely simulate a cryptocurrency wallet or trading platform.

Preserve the Application Information

Screenshots, download source, installation records and login information may assist digital investigation.

Remote Access Fraud

Victims may be persuaded to install remote-access software so the supposed investment adviser can “help” them purchase cryptocurrency.

This Can Give the Fraudster Control of the Device

Preserve information concerning any remote-access application used.

Unauthorized Cryptocurrency Transfers

Not every crypto fraud case involves voluntary transfer. An attacker may gain access to the victim’s exchange account or wallet.

Preserve Security Notifications

Login alerts, password changes, withdrawal confirmations and IP/device notifications can become important.

Contact the Relevant Platform Quickly

Where an exchange account has been compromised, immediate reporting may help preserve records and potentially restrict remaining activity depending on the platform’s procedures.

SIM Swap and Authentication Fraud

Where the victim’s telephone number or authentication method was compromised, telecommunications and account-security evidence may become relevant.

Phishing Websites

Save the exact domain, messages directing you there and screenshots of the page.

Do Not Revisit a Dangerous Website From a Device Containing Sensitive Financial Information

Preserve existing evidence without exposing additional credentials.

Social Engineering Evidence

The fraudster may have impersonated a bank employee, investment adviser, police officer, prosecutor or exchange representative.

Preserve the False Identity

Names, profile pictures, telephone numbers and documents sent to you may help connect the scheme with other victims.

Turkish Authorities Investigate Digital and Banking Evidence Together

A March 2026 prosecutor announcement concerning organized banking fraud described the use of victim statements, banking movements, communication records and seized digital materials together when evaluating the alleged fraud scheme. (İstanbul Anadolu Adliyesi) This illustrates why crypto-fraud victims should preserve both the financial trail and the communications surrounding it.

Can MASAK Help Recover Cryptocurrency?

MASAK should not be treated as a private asset-recovery service. Its role concerns financial intelligence and the prevention and detection of money laundering and related financial crime. The victim’s immediate legal route ordinarily centers on reporting the alleged offense and ensuring that the financial evidence is brought into the criminal investigation.

MASAK Information May Become Relevant to the Investigation

Financial institutions and crypto-asset service providers have suspicious transaction reporting obligations where the statutory conditions exist. MASAK confirms that transactions involving assets suspected of being illegally obtained or used for unlawful purposes are subject to reporting obligations. (Masak)

Should the Victim Contact the Bank?

Where bank transfers were involved, prompt notification can be useful. Inform the bank that the transaction is disputed and preserve the complaint/reference information.

Do Not Assume the Bank Can Simply Reverse a Completed Transfer

Recovery depends on the status of the funds and applicable procedures.

Should the Victim Contact the Cryptocurrency Exchange?

Where an identifiable exchange was involved, promptly preserve the account and transaction information and notify the relevant platform through its official procedures.

Beware of Fake Exchange Support

Fraudsters often impersonate customer-support personnel after the initial scam.

Never Give Your Seed Phrase to “Support”

A legitimate recovery process does not require handing an unknown person the private keys or seed phrase that gives them control of your assets.

Never Pay an “Unlock Fee” to an Unknown Recovery Agent

This is a common secondary fraud pattern.

Can the Victim Claim Compensation?

Potentially. Criminal proceedings and private-law compensation mechanisms can interact, but the correct route depends on the facts, identity of responsible persons, nature of the loss and procedural circumstances.

Identify the Actual Loss

The victim should document exactly how much money or cryptocurrency was transferred.

Cryptocurrency Value Can Change Dramatically

The timing and legal basis of valuation can therefore become important when calculating a monetary claim.

Preserve the Quantity of Cryptocurrency

Do not document only the Turkish lira value.

Example

Record 25,000 USDT transferred on 10 June 2026, not merely “approximately TRY X lost.”

Preserve Fiat Conversion Records

If TRY 1 million was used to purchase cryptocurrency before transfer, preserve that evidence as well.

Can Compensation Be Claimed From the Bank Account Holder?

This depends on the account holder’s actual involvement and the legal basis of liability. The person whose IBAN received the money may be a principal offender, knowing intermediary, negligent participant or another victim of the scheme. Liability should not be assumed solely from account ownership.

Can Multiple People Be Responsible?

Yes. Crypto fraud schemes can involve recruiters, call-center personnel, bank-account providers, cryptocurrency account holders, website operators and organizers.

Identify the Entire Network

A recovery strategy focusing only on the person who sent the WhatsApp message may miss the people holding the assets.

What If There Are Many Victims?

Multiple complaints involving the same telephone numbers, wallets, websites or bank accounts can strengthen the ability to identify an organized transaction pattern.

Preserve Unique Identifiers

Wallet addresses, IBANs, telephone numbers, usernames and website domains can connect separate incidents.

Foreign Victims of Cryptocurrency Fraud in Turkey

A foreign national can pursue legal remedies in Turkey where the circumstances create Turkish criminal jurisdiction and the appropriate procedural requirements are satisfied.

Being Outside Turkey Does Not Automatically Eliminate Legal Options

However, jurisdiction, representation, evidence submission and procedural logistics should be evaluated according to the individual case.

Foreign-Language Evidence

WhatsApp conversations, contracts, exchange statements or documents in another language may need appropriate translation for use in Turkish proceedings.

Do Not Discard Original Documents After Translation

Preserve the original evidence.

What Evidence Should Be Prepared Before Filing the Complaint?

The most useful file usually combines the story of the deception with the financial trail. The complaint should allow someone unfamiliar with the case to understand exactly how the victim was contacted, what was promised, how much was transferred, where it went and what happened when withdrawal or repayment was requested.

Create a Fraud Timeline

A strong chronology can be structured as First Contact → Investment Representation → Initial Deposit → Additional Payments → Attempted Withdrawal → Additional Fee Demand → Discovery of Fraud → Criminal Complaint.

Create a Financial Timeline

Separately map Bank Account → Crypto Platform → Asset Purchased → Wallet Address → Subsequent Wallets → Known Exchange or Recipient.

Create a Suspect Matrix

Record each known Name/User Name → Phone → Email → Bank Account → Wallet → Platform → Role in Scheme.

Preserve Evidence in Original Form

Screenshots are useful, but downloadable statements, emails, transaction records and original electronic files can provide stronger evidence.

Do Not Edit Screenshots

Cropping out dates, account information or surrounding context can reduce their usefulness.

Preserve URLs and Domain Information

Fake investment websites may disappear quickly.

Preserve Voice Messages

Voice communications may later assist identification.

Preserve Bank Transfer Descriptions

Transfer descriptions can help connect payments with representations made by the fraudster.

First 24 Hours After Discovering Cryptocurrency Fraud

Stop additional payments, preserve every communication, secure your exchange and banking accounts, change compromised credentials where necessary, preserve transaction records and identify every wallet and IBAN involved.

First 48 Hours

Prepare the chronological fraud narrative and reconstruct the financial chain. Identify which assets were transferred through Turkish banks or identifiable cryptocurrency platforms.

First 72 Hours

Prepare the criminal complaint and supporting evidence, identify urgent investigative requests and organize the evidence so that investigators can follow the money without reconstructing the entire scheme from hundreds of unorganized screenshots.

What Should You Never Do?

Do not send another payment to “release” your funds, do not hire an unknown Telegram recovery agent, do not provide anyone with your seed phrase, do not delete conversations, do not alter transaction records and do not publicly threaten suspects in a way that gives them time to destroy evidence or move remaining assets.

2026 Asset Recovery Strategy for Cryptocurrency Fraud Victims in Turkey

The strongest recovery strategy combines the criminal complaint with immediate financial tracing. The victim should first determine whether the fraud involved genuine cryptocurrency or merely a fake investment interface. Every fiat and cryptocurrency transfer should then be reconstructed from the victim to the final identifiable destination. Turkish bank accounts should be identified together with their holders, while cryptocurrency exchange accounts, wallet addresses and transaction hashes should be documented separately. Where regulated cryptocurrency service providers appear in the chain, the investigation should focus on available customer and transfer information; Turkey’s current MASAK framework expressly includes customer identification, transfer-information requirements, suspicious transaction reporting and information/document obligations for crypto-asset service providers. (Masak) The complaint should identify assets potentially capable of being preserved and explain their relationship with the alleged fraud rather than merely requesting that “all accounts be frozen.” Digital evidence should establish how the deception occurred, while banking and blockchain evidence should establish where the money went. The practical roadmap is therefore: stop further payments → preserve communications → secure accounts → identify every IBAN → preserve transaction hashes → identify every wallet → obtain exchange histories → determine whether real cryptocurrency existed → reconstruct the fiat-to-crypto trail → identify intermediary accounts → identify regulated exchanges → file the criminal complaint promptly → request investigation of banking and platform records → seek appropriate protective measures where the statutory conditions are satisfied → trace subsequent wallet transfers → identify ultimate beneficiaries → document the exact financial loss → preserve evidence for compensation and restitution claims → continue monitoring identified wallets and proceedings until the recovery possibilities are exhausted.

Frequently Asked Questions

1. Can cryptocurrency stolen through fraud be recovered in Turkey?

Potentially, but recovery is never guaranteed. The chances depend on how quickly the fraud is reported, whether the assets can be traced, whether identifiable exchanges or bank accounts were used and whether recoverable assets remain accessible.

2. Where should I report cryptocurrency fraud in Turkey?

Cryptocurrency fraud can be reported through the criminal justice system, including a criminal complaint to the competent prosecutor or law-enforcement authorities. A well-prepared complaint should include both the deception evidence and the complete financial trail.

3. What is the most important evidence in a crypto fraud case?

Wallet addresses, transaction hashes, bank statements, exchange histories, WhatsApp or Telegram conversations, telephone numbers, usernames, website information and payment instructions can all be critical.

4. Can Turkish authorities trace USDT or Bitcoin?

Blockchain transactions can potentially be followed through wallet addresses and transaction records. Identification of the person behind a wallet depends on additional evidence, including whether the assets interact with an identifiable service provider.

5. Can a cryptocurrency exchange account be investigated?

Yes, where legally relevant to a criminal investigation. Turkey’s current AML framework imposes customer-identification, transfer-information, suspicious-transaction-reporting and information/document obligations on crypto-asset service providers. (Masak)

6. Should I pay a “tax” or “withdrawal fee” to recover money from a suspicious crypto platform?

Extreme caution is necessary. Demands for additional payments after withdrawal is requested are common in crypto investment fraud schemes. Additional payments can simply increase the victim’s loss.

7. Can bank accounts receiving cryptocurrency fraud money be frozen?

Protective measures may potentially be available where the applicable criminal-procedure requirements are satisfied. Speed can be important where fraud proceeds remain identifiable.

8. What if the cryptocurrency has already been transferred to several wallets?

Preserve every known wallet address and transaction hash. Subsequent transactions may eventually connect with an identifiable cryptocurrency service provider or other evidence capable of assisting the investigation.

9. Can a foreigner who was defrauded pursue a case in Turkey?

Potentially, yes, where Turkish criminal jurisdiction and the applicable procedural requirements are satisfied. Foreign nationality by itself does not prevent a victim from pursuing remedies in Turkey.

10. How quickly should I act after discovering cryptocurrency fraud?

Immediately. Cryptocurrency can move between wallets rapidly, websites can disappear and digital accounts can be deleted. Early preservation of banking, blockchain and communications evidence can materially improve the investigation and asset-recovery strategy.

Legal Support for Cryptocurrency Fraud Victims in Turkey

Victims of cryptocurrency fraud may need coordinated action involving criminal complaints, bank-account tracing, cryptocurrency wallet analysis, exchange records, digital evidence, asset-seizure requests and compensation claims. Acting quickly is particularly important where substantial Bitcoin, USDT, Ethereum or fiat currency has recently been transferred.

Fırat Fesih Kaya Law Office provides legal assistance to Turkish and foreign victims of cryptocurrency, investment and internet fraud in Turkey.

Fırat Fesih Kaya can assist with preparing criminal complaints, organizing bank and blockchain evidence, tracing disputed transfers, identifying intermediary accounts, seeking appropriate protective measures, following prosecutor investigations and pursuing available compensation and asset-recovery remedies.

Phone: +90 312 434 22 22
Mobile Phone: +90 532 769 22 22
Email: info@firatfesihkaya.av.tr
Address: Mevlana Boulevard No: 221, Yildirim Tower, Balgat, Cankaya / Ankara, Turkey