IT law is a dynamic field that covers crimes committed in the digital world, protection of personal data (KVKK), e-commerce obligations, and cybersecurity. Today, individuals and businesses face many risks ranging from the theft of social media accounts to fraud on crypto exchanges, from illegal betting sites to allowing others to use their bank accounts. Working with an IT law attorney in Antalya is of great importance to prevent loss of rights and to manage the legal process correctly.
One of the most common scenarios in recent years is allowing others to use a bank account or IBAN. Through advertisements on social media or the internet, citizens may be deceived with offers such as “account rental” or “commission-based money transfers.”
However, this act may constitute fraud, money laundering, or aiding the laundering of criminal proceeds under the Turkish Penal Code. If you allow your bank account to be used:
What should be done?
In Turkey, illegal betting sites are spreading rapidly, especially through social media and messaging apps. They reach users with promises of easy money and high odds; however, they prevent withdrawals, charge unfair commissions, or disappear completely.
Risks:
For Victims:
Although cryptocurrencies are popular investment tools, there are many fake exchanges and investment apps in this field. They ask users to deposit money, but prevent withdrawals or disappear completely, or cause losses through manipulative actions.
Points to Consider:
Work only with platforms authorized by the Capital Markets Board (SPK) or licensed internationally.
Ignore “investment invitations” received via SMS, e-mail, or WhatsApp.
Check the company’s commercial registration and contact details before investing.
For Victims of Fraud:
Keep your money transfer receipts.
Save your communications with the platform as evidence.
Apply to the prosecutor’s office and law enforcement.
Report to MASAK and SPK through your attorney.
Phishing attacks through fake e-mails, SMS, or websites aim to steal users’ personal data. This information can be used for fraud, theft of social media accounts, or other illegal activities.
How to Protect Yourself?
Verify the address before clicking on links.
Use two-factor authentication (2FA) for banking.
Check e-mails and messages for suspicious links or attachments.
If You Are a Victim:
Immediately change your account passwords.
Notify your bank and the relevant platform.
File a criminal complaint with the prosecutor’s office.
For e-commerce businesses, it is mandatory to prepare legally compliant contracts and policies:
Distance sales contracts
Preliminary information forms
Cookie and privacy policies
ETBIS registration and e-invoice obligation
In addition, under KVKK, a data inventory must be prepared, information notices and consent forms must be drafted, VERBIS registration must be completed, and technical/administrative measures must be taken. In case of a data breach, notification to the Personal Data Protection Authority is mandatory.
IT law cases require not only legal knowledge but also technical expertise. In Antalya, working with an attorney specialized in cybercrimes, online betting, crypto fraud, KVKK violations, and e-commerce contracts ensures that evidence is collected lawfully, cases proceed quickly, and loss of rights is prevented.
1. I encountered harmful or illegal content online, what should I do?
Take a screenshot, save the URL, and report it via BTK’s official platform “ihbarweb.org.tr.” You can also file a criminal complaint with the prosecutor’s office if necessary.
2. How can I check if a website has been blocked?
The BTK (Information Technologies Authority) website lists blocked domains. In addition, access bans may be imposed by court order.
3. My privacy has been violated online, what should I do?
If a photo or video has been shared without your consent, collect evidence and apply to the Public Prosecutor’s Office. An access ban order can also be requested under Law No. 5651.
4. My identity information was stolen online, what should I do?
Immediately report the incident through e-Devlet (Turkish e-Government), notify your banks, and file a criminal complaint.
5. What is the crime of unauthorized access to an IT system (Article 243 of the Turkish Penal Code)?
It is a crime to access a system without authorization or to remain in it unlawfully. The penalty may include imprisonment and judicial fines depending on the act.
6. What is the crime of disrupting a system or deleting data (Article 244 TPC)?
It is a crime to disrupt the functioning of a system, alter or delete data, or render it inaccessible. Penalties are heavier if committed against public institutions or banks.
7. How does credit card fraud (Article 245 TPC) occur?
Using someone else’s card without consent, producing fake cards, or shopping with counterfeit cards are all crimes. Severe imprisonment and judicial fines may be imposed.
8. What is the crime of using prohibited devices or software?
Producing, selling, or possessing devices and programs used in card fraud or cybercrimes is punishable.
9. Where should cybercrimes be reported?
You can report to the Cyber Crimes Unit of the police, the Public Prosecutor’s Office, or the BTK.
10. What is the statute of limitations for cybercrimes?
It varies depending on the crime. For example, fraud is 8 years, while more serious offenses may extend up to 15 years.
11. Are all crimes committed on the internet considered cybercrimes?
No. Crimes such as insult or threat committed online are considered crimes “committed via the internet,” but not always direct cybercrimes.
12. Is fraudulent crypto exchange or coin offering a crime?
Yes. These acts constitute fraud. They can be reported to the Capital Markets Board (SPK) and criminal investigations may be initiated.
13. Is accessing or using illegal betting sites a crime?
Yes. Playing, organizing, or facilitating payments for illegal betting is a crime under Law No. 7258.
14. Am I responsible if I allow someone else to use my bank account/IBAN?
Yes. If your account is used in fraud or money laundering, you may face criminal liability and investigation.
15. I was a victim of phishing, what should I do?
Change your passwords immediately, inform your bank, save all evidence, and apply to the prosecutor’s office.
16. If customer data from my e-commerce site is stolen, what is my liability?
According to the Personal Data Protection Law (KVKK), you must notify the Data Protection Authority. Failure to do so may result in heavy fines.
17. What penalties apply for a KVKK data breach?
Unauthorized data sharing or failing to take necessary measures may result in administrative fines up to 1 million TRY, depending on the scale of the violation.
18. What is a digital forensics report and how is it obtained?
It is a technical report prepared by experts examining digital evidence. It can be requested by the court, prosecutor, or the parties.
19. Can I file a lawsuit for insults or threats on social media?
Yes. Save evidence (screenshots, links) and file a criminal complaint with the prosecutor’s office.
20. My private messages were shared without consent, what should I do?
This constitutes both a violation of privacy and a cybercrime. You can request an access ban and initiate criminal proceedings.
21. Can companies be held liable for cybercrimes?
Yes. Legal entities may face security measures such as fines or cancellation of licenses.
22. How should evidence be collected in cybercrime cases?
Keep original screenshots, log records, bank receipts, and communications. If possible, have them officially notarized to ensure validity.