

A foreign sales manager diverts company customer payments to a personal account in Turkey. Learn about criminal complaints, breach of trust, fraud allegations, bank evidence, asset tracing, compensation and recovery options.
A company operating in Turkey may discover that a sales manager has instructed customers to make payments to the manager’s personal bank account rather than the company’s authorized corporate account. The situation can become particularly serious where the manager conceals collections, issues unauthorized payment instructions, deletes correspondence or represents to customers that the personal account belongs to or is authorized by the company. Depending on the precise facts, the conduct may create criminal, civil, employment and commercial consequences simultaneously. The company should move quickly to preserve banking and digital evidence, identify affected customers, determine the total amount diverted and evaluate whether urgent measures are available to prevent dissipation of the proceeds.
Not every accounting disagreement or unpaid company debt automatically constitutes a criminal offense. Criminal liability depends on how the money was obtained, the authority given to the manager, the representations made to customers, how the funds were subsequently used and whether there was intentional misappropriation or deception.
Potential criminal characterization must therefore be based on the actual conduct rather than merely the existence of missing money.
Where money or property comes under a person’s control because of an employment, commercial or fiduciary relationship and is subsequently misappropriated contrary to the purpose for which possession was transferred, breach-of-trust issues may arise.
The manager’s job description, collection authority and contractual responsibilities can become important evidence.
The case may involve fraud where customers were intentionally deceived through false representations or fraudulent conduct and consequently transferred money to the manager.
For example, a manager who falsely tells customers that a personal IBAN is the company’s new payment account may create a substantially different criminal scenario from an employee who initially receives money lawfully but later refuses to transfer it.
The company should reconstruct exactly how every disputed payment occurred.
Was the customer sent a personal IBAN by email? Was the instruction communicated through WhatsApp? Was an altered invoice supplied? Was the company’s corporate account replaced with a personal account on an authentic invoice? Did the manager issue an unauthorized receipt?
These details can materially affect the investigation.
Emails, WhatsApp messages, SMS messages and other correspondence showing payment instructions can be among the most important evidence.
Customers should be asked to preserve the original communications rather than merely sending cropped screenshots.
Screenshots can be useful, but the company should also preserve original emails, electronic files, devices and relevant metadata where available.
Digital evidence should be collected in a manner that allows its authenticity and integrity to be demonstrated if challenged.
A company understandably may want to terminate access as soon as misconduct is discovered. Access can be restricted for security purposes, but potentially relevant corporate emails and system records should be preserved before accounts or devices are wiped.
If the manager used a company laptop, mobile phone or other corporate device, preserve it carefully. Avoid unnecessary modification of files before forensic examination is considered.
Unauthorized access to the employee’s private communications or personal accounts should be avoided.
The company should not focus only on the transaction that revealed the misconduct.
Review customer accounts handled by the manager and identify unusual payment instructions, unpaid invoices, altered account details and discrepancies between customer statements and corporate bank records.
A practical investigation table can record the customer, invoice number, invoice amount, payment date, recipient account, communication used to provide payment instructions and amount recovered or outstanding.
This can help establish the overall scale of the alleged scheme.
Where customer payments were transferred to a personal bank account, banking records may become central evidence.
The company may not have direct access to another person’s private bank records, but relevant information can potentially be obtained through lawful investigative and judicial procedures.
Ask affected customers to preserve transfer receipts showing the sender, recipient, amount, date and transaction description.
These records can help connect individual customer payments with the disputed account.
Do not assume that an IBAN necessarily belongs personally to the sales manager.
The account may belong to a relative, another employee, an intermediary or a company controlled by another person. The identity of the account holder and the reason funds were transferred there should be investigated.
If diverted customer funds were rapidly transferred to relatives or third parties, the money trail may become important.
The company should preserve any evidence suggesting where the proceeds moved after the original customer payment.
Where money has been withdrawn in cash, tracing the proceeds can become more difficult. This makes rapid preservation of financial evidence particularly important.
If genuine company invoices were modified to substitute a personal bank account or other payment information, the investigation may extend beyond simple misappropriation.
The original and altered versions should be preserved and compared.
Do not edit or recreate a suspicious invoice merely to demonstrate the difference. Preserve the exact electronic document received by the customer and the company’s authentic version.
Document metadata and transmission records may become relevant.
If the manager issued receipts or documents suggesting that the company had received payment when it had not, preserve them.
The wording, logo, signature and document format may assist in establishing how customers were persuaded to pay.
Potentially, yes. Where the available evidence indicates criminal conduct, the company can evaluate filing a criminal complaint with the competent authorities.
The complaint should explain the factual sequence and provide supporting evidence rather than simply alleging that the manager “stole company money.”
A structured complaint can identify the employee’s position, authority, customer transactions, payment instructions, diverted amounts, relevant bank accounts, communications and suspected method of concealment.
Supporting documents should be organized chronologically.
The company should calculate the known loss while recognizing that additional transactions may later be discovered.
If the exact amount is not yet known, the complaint can explain why further financial investigation is required.
If there is evidence of ongoing diversion or a serious risk that funds will disappear, waiting months for a perfect internal audit may undermine recovery efforts.
Criminal strategy and internal financial investigation can proceed in coordination.
During a criminal investigation, relevant financial evidence may be obtained through legally authorized investigative measures where the applicable requirements are satisfied.
The company should identify the accounts and transactions as precisely as possible to assist the investigation.
Asset-preservation measures in criminal proceedings are subject to statutory conditions and judicial procedures. They are not automatically available merely because a company alleges financial misconduct.
Where the legal requirements are satisfied, however, urgent preservation measures may become highly important if there is a genuine risk of dissipation.
Companies should not rely exclusively on the criminal investigation to recover their loss.
Depending on the circumstances, civil or commercial remedies may also be considered to preserve assets or pursue monetary recovery.
Potentially. Recovery may occur through restitution, civil claims, enforcement proceedings, settlement or other available mechanisms depending on the facts and procedural posture.
The company should separately calculate principal loss, additional expenses and any other legally recoverable damages.
A difficult question arises when the customer says, “I already paid your sales manager.”
Whether the customer’s obligation to the company was discharged can depend on the manager’s actual or apparent authority, the payment instructions, previous commercial practice and other circumstances.
This issue should be analyzed separately from the criminal liability of the manager.
Review the employment contract, job description, internal authorization rules and historical business practice.
If the manager was formally authorized to collect customer payments, the legal analysis may differ from a situation in which the manager had no collection authority whatsoever.
If the company allowed the manager to communicate payment instructions routinely, customers may argue that they reasonably believed the instruction was authorized.
Companies should therefore avoid assuming automatically that every affected customer must pay the invoice a second time.
Determine whether customers had previously paid through accounts communicated by the manager and whether the company accepted such transactions.
Historical practice can become important in later commercial disputes.
A criminal case against the manager should also trigger a corporate-control review.
Ask how one employee could change payment instructions, whether invoice templates were protected, whether customers independently verified bank changes and whether corporate accounting identified missing payments promptly.
Companies handling substantial receivables can require independent verification before customers accept changes to bank-account information.
Payment instructions should ideally originate from controlled corporate systems.
International companies may have management abroad while Turkish sales personnel communicate directly with customers. This can allow local employees to exercise substantial practical control over invoicing and collection communications.
Headquarters should maintain direct visibility over corporate bank details and receivable reconciliation.
Foreign nationality does not prevent a criminal investigation in Turkey where Turkish criminal jurisdiction applies.
However, language rights, interpretation, notification and potential immigration consequences may require additional consideration.
The company should avoid treating suspicion as a final criminal judgment. The employee may claim that payments were authorized, represented commissions, were transferred onward to the company or arose from another commercial arrangement.
The investigation should therefore preserve both incriminating and potentially explanatory evidence.
In some businesses, informal payment practices may have been tolerated historically. That does not necessarily make them legally advisable, but it can affect criminal intent.
Management instructions and previous accounting treatment should therefore be examined carefully.
A manager entitled to commission generally cannot simply redirect the company’s gross customer payments to a personal account unless a valid arrangement authorizes that method.
Commission entitlement and ownership of customer receivables are separate issues.
If disciplinary or termination action is contemplated, employment-law requirements should be considered alongside the criminal strategy.
The company should secure records and system access without destroying evidence.
Corporate managers should not threaten the employee or force a confession.
Any internal interview should be conducted lawfully and documented appropriately.
A company should not automatically instruct employees to secretly record conversations with the suspect.
The admissibility and legality of recordings can depend heavily on the circumstances.
If cash collections, meetings or document exchanges occurred at company premises, relevant CCTV footage should be preserved before automatic deletion.
Only footage genuinely connected with the events should be retained and handled in accordance with applicable rules.
Customer-management and accounting systems may show invoice changes, payment status modifications, deleted notes or unusual access patterns.
Preserve system logs where available.
Where payment instructions were sent through corporate systems, access logs may assist in identifying the user and device responsible.
Technical evidence should be interpreted carefully rather than assuming that a login automatically proves who physically performed an action.
Deletion does not necessarily mean evidence has disappeared permanently. Corporate backups, customer devices or lawful forensic examination may preserve relevant information.
The company should avoid attempting improvised recovery methods that could alter evidence.
If there is a genuine risk that a suspect will leave the country, the company should inform its lawyer and investigating authorities promptly.
Any travel restriction or coercive criminal-procedure measure must be ordered through the legally competent authority; the company cannot impose such measures itself.
Repayment can materially affect the financial position and may have consequences depending on the criminal characterization and procedural stage.
However, repayment should not automatically be assumed to erase every potential criminal consequence.
If repayment or settlement is negotiated, identify exactly what amount is being returned, which transactions it covers and whether additional claims remain.
Do not surrender original evidence merely because partial repayment is offered.
Diverted payments may create discrepancies between issued invoices, reported receivables and actual corporate collections.
Accounting records should be corrected through appropriate lawful procedures rather than informally rewritten.
Material misappropriation may require review by internal or external auditors depending on the company’s structure and obligations.
The objective should be to understand the full exposure rather than conceal the incident.
If the manager could alter invoices or payment details, determine whether other employees have the same capability.
A single discovered incident may reveal a broader internal-control vulnerability.
Once credible diversion is identified, affected customers may need verified corporate payment instructions so that additional funds are not sent to unauthorized accounts.
Communications should be carefully drafted to avoid making unsupported public accusations.
Internal protective action can be taken without publishing unnecessary accusations.
Premature public allegations can create separate legal risks.
When a foreign sales manager is suspected of diverting customer payments to a personal account in Turkey, the company should immediately preserve emails and messages, secure corporate devices, obtain customer payment receipts, identify every disputed transaction, verify the account holder, preserve invoice versions and system logs, calculate the preliminary loss, restrict unauthorized access, evaluate a criminal complaint, consider lawful asset-preservation and civil recovery measures, review employment action and notify affected customers through controlled corporate channels.
Not automatically. Criminal liability depends on authority, intent, deception, use of the money and the surrounding facts.
Potentially, where the evidence supports suspicion of a criminal offense. The complaint should be supported by transaction and communication evidence.
They can be highly relevant where they contain payment instructions, but authenticity, completeness and the manner in which the evidence was obtained may be important.
Relevant banking evidence may potentially be obtained through lawful investigative procedures where the legal requirements are met.
Potentially, but criminal asset measures require statutory conditions and competent judicial or prosecutorial procedures. Separate civil preservation remedies may also need consideration.
Not necessarily. Whether the original payment discharged the customer’s debt can depend on the manager’s authority, apparent authority and previous commercial practice.
Preserve both the authentic and altered versions. Depending on the circumstances, document-related criminal issues may arise in addition to the diversion of funds.
Repayment can be important, but it should not automatically be assumed to eliminate all criminal consequences. The effect depends on the alleged offense and procedural circumstances.
Access may need to be restricted, but potentially relevant corporate data should first be preserved. Destruction of evidence should be avoided.
Preserve the money trail and digital evidence before confronting the suspected manager. Customer transfer receipts, original payment instructions, corporate emails, invoices, account information and system records can determine whether the case can be proven and whether diverted funds can ultimately be traced and recovered.
Cases involving a sales manager who redirects company receivables can develop into criminal investigations, bank-account tracing, digital-evidence disputes, asset recovery proceedings, employment disputes and customer-payment litigation. Fırat Fesih Kaya Law Office assists foreign-owned companies, international investors and businesses facing internal fraud and suspected employee misappropriation in Turkey. Lawyer Fırat Fesih Kaya provides legal assistance in preserving evidence, preparing criminal complaints, coordinating financial and digital evidence, evaluating asset-preservation measures and pursuing recovery of company funds.
Phone: +90 312 434 22 22
Mobile: +90 532 769 22 22
Email: info@firatfesihkaya.av.tr
Address: Mevlana Boulevard No:221, Yıldırım Tower, Office No:148, 06520 Balgat, Çankaya, Ankara, Turkey