Cybercrime Charges Foreigners Face in Turkey: 2026 Guide

The internet does not pause at the Turkish border. Whether you are an expat running a small business in Antalya, a digital nomad on a long-term visa, or a foreign employee at a Turkish company, you can find yourself facing a cybercrime charge for online activity you may not have realised was illegal here. Turkey treats internet offences seriously: the Turkish Penal Code (Türk Ceza Kanunu) sets out specific articles for information-system crimes, and prosecutors often pursue them aggressively. This article explains the cybercrime charges that foreigners in Turkey are most likely to face, the steps that follow an accusation, and how to protect yourself.

What Counts as Cybercrime Under Turkish Law

Turkish law treats "cybercrime" (bilişim suçları) as any criminal act carried out through an information system, computer, or network. The core offences sit in the Turkish Penal Code, particularly Article 243 on unauthorised access to an information system, Article 244 on disrupting or altering data, and Article 245 on misuse of bank or credit cards. Beyond the Penal Code, the Internet Law (Law No. 5651) governs online content, access blocks, and the duties of hosting and access providers. The Personal Data Protection Law (KVKK) adds another layer when an offence involves the personal data of others.

Some of these provisions reach acts committed entirely abroad if the victim or the targeted system is in Turkey. That cross-border reach surprises many foreign clients: sending a phishing email from another country to a Turkish bank customer, for example, can attract Turkish jurisdiction.

Common Cybercrime Offences That Affect Foreigners

The offences that most often appear in case files involving foreign suspects fall into a few patterns.

Unauthorised access and data tampering. Logging into someone else's email, social media account, or company server without permission — even briefly — is a criminal offence. Modifying, deleting, or copying data without authorisation is treated more seriously and can attract longer sentences.

Online fraud. Aggravated fraud committed through information systems is one of the most prosecuted online offences and is covered by Article 158 of the Penal Code. Romance scams, fake online stores, and crypto-related deceptions all sit here. Penalties for aggravated fraud are significantly higher than for ordinary fraud.

Bank and credit card misuse. Using someone else's card details — including a stolen number bought online — is a separate offence under Article 245.

Online insult and defamation. Posting an insulting comment about another person on social media can trigger a criminal complaint. Foreigners are often blindsided by how strictly Turkish courts treat hakaret (insult) compared to their home countries. We discuss this in more detail in our article on legal remedies for social media defamation.

Privacy and data offences. Recording, sharing, or publishing someone's private images, conversations or personal data without consent is criminalised under the Penal Code's privacy provisions and reinforced by the KVKK regime. See our overview on KVKK compliance in Turkey for the data-protection side.

Penalties and Collateral Consequences for Non-Citizens

Cybercrime sentences in Turkey range from short prison terms for first-time minor offences to several years for serious data tampering, large-scale fraud, or organised activity. Many cases also carry judicial fines, either as an alternative or in addition. Courts routinely order the confiscation of devices, the removal of online content, and access blocks under the Internet Law.

For foreigners, a conviction has consequences far beyond the courtroom. A prison sentence — even one converted into a fine or suspended — can trigger deportation proceedings and an entry ban, cancel an existing residence or work permit, and block future Turkish citizenship applications. Investigations themselves can lead to a judicial-control measure (adli kontrol) that prevents you from leaving the country until the case ends. If you are detained, our guide on detention and judicial control for foreigners explains the mechanics.

Building a Defence: What to Do When You Are Charged

Three principles matter from the very first moment.

Stay quiet until your lawyer arrives. You have the right to remain silent and the right to a lawyer at every stage, including the first police statement. Use both. Anything you say without counsel can be used against you.

Insist on a sworn translator. If you do not speak Turkish well, the law requires a qualified interpreter at the police, prosecutor, and court stages. Do not sign any document — including a statement or a notification — unless you fully understand it.

Preserve digital evidence early. Cybercrime cases turn on technical details: IP logs, device ownership, timestamps, cloud backups, and chat history. A defence lawyer can request a forensic image, dispute the police report, and identify gaps in the chain of custody.

A good defence often focuses on intent (did you actually mean to commit the act?), authorisation (did you have permission?), and identification (can the prosecution truly tie the keystrokes to you?). For payment-fraud and scam cases, our guide on legal remedies for fraud victims also illuminates how the procedural framework works from the other side.

Frequently Asked Questions

Q: I was hacked and my account was used to send messages. Am I responsible?

If you can show that your account was genuinely compromised, you should not be held criminally liable for what someone else did. But you must report the incident promptly — to the police and, where relevant, to the platform — so you have a paper trail. Late reports often look suspicious to investigators.

Q: Can I be charged in Turkey for something I posted from abroad?

Yes, in some cases. If the post targeted a person in Turkey or its effects reached Turkey, defamation, threats, and certain content-related offences can lead to a Turkish prosecution even if you were never physically here.

Q: Will a cybercrime conviction affect my residence or work permit?

It can. A conviction may be reported to the Migration Authority (Göç İdaresi), which can cancel your permit and issue a deportation decision. Prison sentences above certain thresholds almost always trigger removal proceedings.

Q: Do I need a Turkish lawyer if my home-country lawyer is helping me?

Yes. Foreign-licensed lawyers cannot appear before Turkish prosecutors or criminal courts. A Turkish lawyer must be on the file from the police-statement stage onwards.

Q: How long do cybercrime cases take?

Investigations often take several months because they require digital-forensics reports. Trials in the criminal court of first instance (Asliye Ceza Mahkemesi) typically run six to eighteen months; serious cases handled by the heavy criminal court (Ağır Ceza Mahkemesi) take longer. Appeals add further time.

How Mona Hukuk Can Help

Our Antalya-based team handles cybercrime defence for foreigners at every stage — from the first police statement and judicial-control hearings to trial and appeal. We work directly with Turkish- and English-speaking clients; for other languages we coordinate with sworn translators, and bring in trusted digital-forensics experts when the case demands it. Where the consequences extend to immigration status, we pair criminal defence with residence-permit and deportation-appeal strategy so that nothing falls between the cracks.

Contact us at info@monahukuk.com or call +90 (242) 606 14 32 to schedule a consultation in Antalya.