sms compliance

Sent logo
Sent TeamMay 3, 2025 / sms compliance / Turkey

Turkey SMS Guide: İYS Registration, KVKK Compliance & API Integration 2025

Complete Turkey SMS compliance guide: İYS registration requirements, KVKK consent rules, BTK regulations, alphanumeric sender ID setup, timing restrictions (08:00-21:00 UTC+3), and Twilio/Sinch API integration for Turkcell, Vodafone & Türk Telekom networks.

Turkey SMS Best Practices, Compliance, and Features

Turkey SMS Market Overview: Turkcell, Vodafone & Türk Telekom

Locale name:Turkey
ISO code:TR
RegionMiddle East & Africa
Mobile country code (MCC)286
Dialing Code+90

Market Conditions: Turkey operates a highly mobile-first market with widespread SMS usage for business communications and authentication. Three major mobile operators – Turkcell (34% market share), Vodafone (30.6%), and Türk Telekom (28.2%) – jointly hold over 95% of subscriptions as of 2025. While OTT messaging apps like WhatsApp dominate personal communications, SMS remains crucial for business messaging and verification due to its reliability and universal reach. Android devices dominate with approximately 85% market share, while iOS devices account for less than 15% (2025 data). The national 5G auction scheduled for August 2025 may impact future messaging infrastructure.


SMS Features & Technical Capabilities for Turkey

Turkey supports robust SMS capabilities including concatenated messages and Unicode, though two-way messaging is not available and promotional content faces strict regulations.

Two-way SMS Support

Turkey does not support two-way SMS for business messaging. Your business cannot receive replies to SMS messages through standard A2P channels.

Alternative Solutions:

  • Use WhatsApp Business API for interactive messaging
  • Implement web-based response forms
  • Direct customers to dedicated support channels
  • Consider OTT messaging platforms for two-way communication

Concatenated Messages (Segmented SMS)

Support: Yes, concatenation works with most sender ID types, though support varies by carrier. Message length rules: GSM-7 encoding supports 160 characters per segment. Messages exceeding this limit split automatically into multiple segments. Encoding considerations: GSM-7 encoding allows 160 characters per message, while UCS-2 (required for Turkish special characters like ı, ş, ğ, ü, ö, ç) reduces the limit to 70 characters per segment.

MMS Support

Turkey does not support MMS messages. When you send an MMS, the system automatically converts it to an SMS containing a URL link to the media content, ensuring message delivery while maintaining compliance with local regulations.

Recipient Phone Number Compatibility

Number Portability

Turkey supports number portability. Recipients can keep their phone numbers when switching between mobile operators. The SMS infrastructure handles ported numbers automatically without impacting message delivery or routing.

Sending SMS to Landlines

You cannot send SMS to landline numbers in Turkey. Attempts to send SMS to landlines result in failed delivery and an error response (400 error code 21614 for Twilio API). The message will not be logged or charged.

Turkey SMS Compliance: BTK, İYS & KVKK Requirements

The Information and Communication Technologies Authority (BTK) regulates SMS communications in Turkey. As of February 15, 2021, promotional traffic without proper registration is strictly prohibited and results in message blocking and financial penalties. All commercial SMS must comply with Turkish Electronic Communications Law No. 5809. As of January 1, 2025, new restrictions prohibit unsolicited marketing calls and SMS/MMS messages with links sent from abroad to non-subscribers.

Obtain explicit consent before sending any commercial messages in Turkey. Under KVKK (Turkish Data Protection Law) Article 5, you cannot process personal data without explicit consent from the data subject. Important: As of November 2023, the Turkish Data Protection Authority requires separate explicit consent specifically for SMS marketing – you cannot bundle it with other processing activities. Follow these consent management practices:

  • Maintain detailed records of when and how you obtained consent
  • Use double opt-in verification processes
  • Obtain separate consent specifically for commercial SMS messages (not bundled with other agreements)
  • Clearly state the purpose and frequency of messages during opt-in
  • Provide transparent terms and conditions in Turkish
  • Store consent documentation for at least 3 years

Enforcement Update: The Turkish Data Protection Authority has shifted to active enforcement. In August 2024, it issued penalties totaling ₺503,935,000 (~€14 million) for KVKK non-compliance, including violations related to commercial message consent.

HELP/STOP and Other Commands

  • Include opt-out instructions in Turkish in all commercial messages
  • Use standard keywords: "IPTAL" (cancel), "DUR" (stop), and "YARDIM" (help)
  • Provide opt-out mechanisms free of charge for recipients
  • Process commands within 24 hours of receipt

Do Not Call / Do Not Disturb Registries

Turkey maintains the İYS (İleti Yönetim Sistemi – Message Management System), a national commercial electronic message management system. You must:

  • Register with İYS before sending commercial messages
  • Check numbers against the İYS database regularly
  • Remove opted-out numbers within 3 business days
  • Maintain internal suppression lists for immediate opt-outs

Common İYS Integration Issues:

  • Issue: API timeout errors during peak hours → Solution: Implement retry logic with exponential backoff
  • Issue: Database synchronization lag → Solution: Cache İYS responses for 24 hours, revalidate before campaigns
  • Issue: Incorrect API credentials → Solution: Verify your İYS merchant code and API key in the portal
  • Issue: Number format mismatches → Solution: Normalize all numbers to E.164 format (+90XXXXXXXXXX) before checking

Time Zone Sensitivity

Turkey observes strict timing regulations for commercial SMS:

  • Permitted Hours: 08:00 to 21:00 local time (Turkey Time, UTC+3 year-round)
  • No Daylight Saving Time: Turkey permanently observes UTC+3 (Turkey Time/TRT) since 2016, with no clock changes throughout the year
  • Restricted Days: No promotional messages on national holidays
  • Emergency Messages: Time restrictions don't apply to critical service notifications

Turkey SMS Sender ID Options: Alphanumeric vs Long Codes

Alphanumeric Sender ID Registration Process

Operator network capability: Supported Registration requirements: Pre-registration required, takes approximately 2 weeks Sender ID preservation: Yes, when properly registered Restrictions: Must contain legitimate business name, no generic terms allowed

Approved Examples: BANKNAME, RETAILCO, HOTELTR, AIRLINETR Rejected Examples: INFO, PROMO, ALERT, 12345, SALE

Long Codes

Domestic vs. International:

  • Domestic long codes not supported
  • International long codes supported but delivered on best-effort basis

Sender ID preservation: No, international long codes may be modified Provisioning time: N/A Use cases: Not recommended for commercial messaging in Turkey

Short Codes

Support: Not currently supported in Turkey Provisioning time: N/A Use cases: N/A

Prohibited Content & Industry Restrictions for Turkey SMS

The following content types and industries face strict restrictions:

  • Gambling and betting services
  • Political content
  • Religious content
  • Adult content
  • Cryptocurrency promotions
  • Unauthorized financial services

Content Filtering

Turkish carriers implement strict filtering rules:

  • Messages with unregistered sender IDs are filtered
  • Content containing restricted keywords is blocked
  • URLs must be from approved domains
  • Messages must not contain deceptive or misleading content

Filtering Detection Strategies:

  • A/B test message content across small recipient samples
  • Monitor delivery rate differences between message variants
  • Track time-to-delivery metrics (filtered messages often delay 5+ minutes)
  • Test with known good numbers from each carrier
  • Compare delivery rates across Turkcell, Vodafone, and Türk Telekom
  • Set up automated alerts when delivery rates drop below baseline

Turkey SMS Best Practices: Timing, Frequency & Localization

Messaging Strategy

  • Keep messages under 160 characters when possible
  • Include clear calls-to-action
  • Avoid URL shorteners unless carriers approve them
  • Use proper Turkish characters and encoding

Message Templates for Common Use Cases:

Use CaseTemplate Example
OTP/2FA[BRAND] doğrulama kodunuz: 123456. Kod 5 dakika geçerlidir. İptal: IPTAL
Appointment Reminder[BRAND] randevunuz yarın 14:00'te. Onay: EVET, İptal: HAYIR
Order Confirmation[BRAND] siparişiniz #12345 alındı. Takip: bit.ly/xyz İptal: DUR
Delivery Update[BRAND] paketiniz yolda. Tahmini teslimat: Bugün 18:00. İptal: IPTAL

Sending Frequency and Timing

  • Limit messages to 1 – 2 per customer per week
  • Respect religious observances (especially during Ramadan)
  • Avoid sending during national holidays
  • Space out bulk campaigns to prevent network congestion

Turkish National Holidays to Avoid:

  • January 1: New Year's Day
  • April 23: National Sovereignty and Children's Day
  • May 1: Labor and Solidarity Day
  • May 19: Commemoration of Atatürk, Youth and Sports Day
  • July 15: Democracy and National Unity Day
  • August 30: Victory Day
  • October 29: Republic Day
  • Religious holidays: Ramadan Bayramı (3 days), Kurban Bayramı (4 days)

Localization

  • Use Turkish as your primary language
  • Include Turkish characters with proper encoding
  • Consider cultural sensitivities in your message content
  • Provide customer support in Turkish

Opt-Out Management

  • Process opt-outs within 24 hours
  • Maintain detailed opt-out logs
  • Include clear opt-out instructions in Turkish
  • Conduct regular audits of opt-out lists

Testing and Monitoring

  • Test across all major Turkish carriers
  • Monitor delivery rates by carrier
  • Track opt-out rates and patterns
  • Regularly test opt-out functionality
  • Monitor for carrier filtering changes

Key Metrics and KPIs to Track:

  • Delivery rate (target: >95%)
  • Delivery time (target: <30 seconds)
  • Opt-out rate (alert if >2%)
  • Carrier-specific delivery success
  • Content filtering rate (alert if >1%)
  • İYS database check failures

Monitoring Tools and Alerting Thresholds:

  • Use Datadog, New Relic, or Grafana for real-time monitoring
  • Set alerts for delivery rates <90%
  • Alert on opt-out spikes (>5% increase week-over-week)
  • Monitor API error rates (alert if >1%)
  • Track webhook delivery failures

Turkey SMS API Integration: Twilio, Sinch, MessageBird & Plivo

Twilio

Twilio provides a robust REST API for sending SMS to Turkey. Authentication requires your Account SID and Auth Token.

typescript
import { Twilio } from 'twilio';

// Initialize Twilio client with credentials
const client = new Twilio(process.env.TWILIO_ACCOUNT_SID, process.env.TWILIO_AUTH_TOKEN);

async function sendSMSTurkey(to: string, message: string) {
  try {
    // Ensure phone number is in E.164 format for Turkey (+90)
    const formattedNumber = to.startsWith('+90') ? to : `+90${to}`;

    const response = await client.messages.create({
      body: message,
      to: formattedNumber,
      // Must use registered alphanumeric sender ID for Turkey
      from: 'YOUR_REGISTERED_SENDER_ID',
      // Optional: Specify validity period (in seconds)
      validityPeriod: 3600
    });

    console.log(`Message sent successfully: ${response.sid}`);
    return response;
  } catch (error) {
    console.error('Error sending message:', error);
    throw error;
  }
}

Sinch

Sinch offers a REST API with OAuth2 authentication for secure SMS delivery to Turkey.

typescript
import axios from 'axios';

async function sendSinchSMS(to: string, message: string) {
  const SINCH_API_TOKEN = process.env.SINCH_API_TOKEN;
  const SINCH_SERVICE_PLAN_ID = process.env.SINCH_SERVICE_PLAN_ID;

  try {
    const response = await axios.post(
      `https://sms.api.sinch.com/xms/v1/${SINCH_SERVICE_PLAN_ID}/batches`,
      {
        from: 'YOUR_REGISTERED_SENDER_ID',
        to: [`+90${to.replace(/\D/g, '')}`],
        body: message,
        // Enable delivery reports
        delivery_report: 'summary'
      },
      {
        headers: {
          'Authorization': `Bearer ${SINCH_API_TOKEN}`,
          'Content-Type': 'application/json'
        }
      }
    );

    return response.data;
  } catch (error) {
    console.error('Sinch SMS Error:', error.response?.data || error);
    throw error;
  }
}

MessageBird

MessageBird provides a straightforward API for sending SMS to Turkey with detailed delivery reporting.

typescript
import messagebird from 'messagebird';

const messageBirdClient = messagebird(process.env.MESSAGEBIRD_API_KEY);

function sendMessageBirdSMS(to: string, message: string): Promise<any> {
  return new Promise((resolve, reject) => {
    messageBirdClient.messages.create({
      originator: 'YOUR_REGISTERED_SENDER_ID',
      recipients: [`+90${to.replace(/\D/g, '')}`],
      body: message,
      // Enable status reports
      reportUrl: 'YOUR_WEBHOOK_URL',
      type: 'sms'
    }, (err, response) => {
      if (err) {
        reject(err);
        return;
      }
      resolve(response);
    });
  });
}

Plivo

Plivo offers a feature-rich API with support for Turkish character sets and delivery tracking.

typescript
import plivo from 'plivo';

const client = new plivo.Client(
  process.env.PLIVO_AUTH_ID,
  process.env.PLIVO_AUTH_TOKEN
);

async function sendPlivoSMS(to: string, message: string) {
  try {
    const response = await client.messages.create({
      src: 'YOUR_REGISTERED_SENDER_ID', // Registered sender ID
      dst: `+90${to.replace(/\D/g, '')}`, // Clean and format number
      text: message,
      // Optional parameters for Turkish messages
      type: 'sms',
      url: 'YOUR_CALLBACK_URL',
      method: 'POST'
    });

    return response;
  } catch (error) {
    console.error('Plivo SMS Error:', error);
    throw error;
  }
}

API Rate Limits and Throughput

  • Twilio: 100 messages per second per account
  • Sinch: 30 requests per second
  • MessageBird: 60 messages per second
  • Plivo: 50 messages per second

Strategies for Large-Scale Sending:

  • Implement queue systems (Redis/RabbitMQ)
  • Use batch APIs where available
  • Implement exponential backoff for retries
  • Monitor throughput and adjust sending rates

SMS Delivery Tracking & Error Code Management

  • Implement comprehensive logging with Winston or similar
  • Track delivery receipts via webhooks
  • Monitor common error codes:
    • 21614: Invalid number format
    • 30007: Carrier rejection
    • 30008: Blocked content
  • Store message status updates in database

Retry Strategies:

  • Implement exponential backoff: 1s, 2s, 4s, 8s, 16s
  • Retry transient errors (rate limits, timeouts) up to 3 times
  • Do not retry permanent errors (invalid numbers, blocked content)
  • Queue failed messages for manual review after 3 retry attempts
  • Use circuit breaker pattern to prevent cascading failures

Frequently Asked Questions (FAQ)

What are the main SMS regulations in Turkey for 2025?

Turkey's SMS regulations are governed by BTK (Information and Communication Technologies Authority) and Turkish Electronic Communications Law No. 5809. As of January 1, 2025, new restrictions prohibit unsolicited marketing calls and SMS/MMS messages with links sent from abroad to non-subscribers. Since February 15, 2021, promotional traffic has been strictly prohibited without proper registration and consent. You must register with İYS (Message Management System), obtain separate explicit consent for SMS marketing under KVKK Article 5, and send messages only between 08:00 – 21:00 Turkey Time (UTC+3 year-round, no DST). Non-compliance results in message blocking and financial penalties.

How do I register for İYS (Message Management System) in Turkey?

İYS (İleti Yönetim Sistemi) is Turkey's national commercial electronic message management system. Register at https://iys.org.tr before sending any commercial SMS. The system manages consent and opt-out mechanisms for all commercial electronic messages. After registration, you must check numbers against the İYS database regularly, remove opted-out numbers within 3 business days, and maintain internal suppression lists. All businesses sending commercial SMS in Turkey must complete İYS registration – this is a legal requirement, not optional.

Under KVKK (Turkish Data Protection Law) Article 5, you must obtain explicit consent before processing personal data for SMS marketing. As of November 2023, the Turkish Data Protection Authority mandates separate explicit consent specifically for SMS marketing purposes – you cannot bundle this consent with other processing activities or agreements. Maintain detailed records of when and how you obtained consent, use double opt-in verification, clearly state message purpose and frequency, provide terms in Turkish, and store consent documentation for at least 3 years. The authority issued ₺503,935,000 (~€14 million) in penalties for KVKK violations in August 2024.

How long does alphanumeric sender ID registration take in Turkey?

Alphanumeric sender ID registration in Turkey requires approximately 2 weeks for approval. Pre-registration is mandatory before sending commercial SMS. Your sender ID must contain your legitimate business name – generic terms are not allowed. Once registered and approved, your sender ID is preserved during message delivery. Domestic long codes are not supported in Turkey, and international long codes are delivered on a best-effort basis with potential modification. Short codes are not currently supported.

What are the permitted hours for sending commercial SMS in Turkey?

Send commercial SMS only between 08:00 and 21:00 Turkey Time (UTC+3 year-round). Turkey permanently observes UTC+3 (Turkey Time/TRT) since 2016 with no daylight saving time changes throughout the year. Do not send promotional messages on national holidays. Time restrictions do not apply to critical service notifications or emergency messages. Violations of timing regulations can result in message blocking and financial penalties from BTK.

Which mobile operators dominate Turkey's SMS market?

Turkey's mobile market has 3 major operators holding over 95% of subscriptions: Turkcell (34% market share, strongest network coverage including rural areas), Vodafone (30.6%, excels in urban and tourist locations), and Türk Telekom (28.2%, competitive pricing for city users). The national 5G auction is scheduled for August 2025. Android devices dominate with 85% market share, while iOS accounts for less than 15%. Test your SMS delivery across all 3 major carriers before launching campaigns.

Can I send two-way SMS or MMS in Turkey?

Turkey does not support two-way SMS for business messaging – your business cannot receive replies through standard A2P channels. Turkey also does not directly support MMS messages. When you attempt to send an MMS, the system automatically converts it to an SMS containing a URL link to media content, ensuring delivery while maintaining local regulation compliance. For interactive messaging requirements, consider WhatsApp Business API or other approved OTT messaging channels.

What character encoding should I use for Turkish SMS messages?

Use GSM-7 encoding for standard characters (160 characters per segment) or UCS-2 encoding for Turkish special characters like ı, ş, ğ, ü, ö, ç (70 characters per segment). Concatenation is supported for most sender ID types, though support varies by carrier. Messages exceeding segment limits are automatically split. Include proper Turkish characters with correct encoding to ensure readability and compliance. Test across all major carriers to verify proper character display.

What content is prohibited in Turkish SMS messages?

Turkish carriers implement strict filtering for prohibited content including: gambling and betting services, political content, religious content, adult content, cryptocurrency promotions, and unauthorized financial services. Carriers filter messages with unregistered sender IDs, block content containing restricted keywords, require URLs from approved domains only, and reject deceptive or misleading messages. Register your sender ID, avoid restricted industries, use approved domains, and monitor carrier filtering changes regularly.

What are the penalties for SMS non-compliance in Turkey?

BTK enforces significant penalties for SMS regulation violations. The Turkish Data Protection Authority issued ₺503,935,000 (~€14 million) in penalties for KVKK non-compliance in August 2024, including consent violations. Non-compliance consequences include: immediate message blocking by carriers, financial penalties from BTK and KVKK, removal from İYS registration, reputational damage, and potential legal action under Turkish Electronic Communications Law No. 5809. The authority shifted from guidance to active enforcement – ensure full compliance before launching campaigns.

Recap and Additional Resources

Key Takeaways:

  • Pre-register alphanumeric sender IDs (approximately 2 weeks)
  • Implement proper opt-out handling with İYS integration
  • Respect time restrictions (08:00-21:00 Turkey Time, UTC+3 year-round, no DST)
  • Comply with January 1, 2025 restrictions on messages with links from abroad
  • Use proper Turkish character encoding (UCS-2 for special characters)
  • Obtain separate explicit consent for SMS marketing (KVKK requirement as of November 2023)
  • Monitor delivery reports and enforcement updates

Pre-Launch Checklist:

  • Complete BTK registration with Turkish Telecom Authority
  • Register with İYS (Message Management System) at https://iys.org.tr
  • Register alphanumeric sender ID (allow 2 weeks for approval)
  • Implement İYS database checking in your sending workflow
  • Set up opt-out management system with 24-hour processing
  • Configure time zone restrictions (08:00-21:00 UTC+3 only)
  • Implement delivery tracking and compliance monitoring
  • Test across Turkcell, Vodafone, and Türk Telekom networks
  • Verify Turkish character encoding (UCS-2) works correctly
  • Test with small volumes (100-500 messages) before scaling
  • Document consent collection process for KVKK compliance
  • Set up automated holiday blocking for Turkish national holidays

Additional Information:

Frequently Asked Questions

How to send SMS messages in Turkey?

Use a registered alphanumeric sender ID and send messages between 8:00 AM and 9:00 PM local time. Ensure your content complies with regulations and includes opt-out instructions in Turkish like 'IPTAL', 'DUR', or 'YARDIM'. You'll need to integrate with an SMS API like Twilio, Sinch, MessageBird, or Plivo, providing clear opt-out instructions.

What is the best SMS sender ID type for Turkey?

Alphanumeric sender IDs are recommended. They preserve your brand identity and are supported in Turkey, but require pre-registration which takes about two weeks. Avoid long codes and short codes as they aren't fully supported for commercial messaging.

Why does Turkey not support two-way SMS?

Two-way SMS for business messaging (A2P) is not supported in Turkey due to regulatory restrictions. Businesses cannot receive replies to their SMS messages through standard channels.

When should I send SMS messages in Turkey?

Send messages between 08:00 and 21:00 local time (UTC+3), avoiding national holidays. Respect religious observances, particularly during Ramadan, and space out bulk campaigns to prevent network congestion.

Can I send promotional SMS messages in Turkey?

No, promotional SMS messages are strictly prohibited in Turkey as of February 15, 2021. Focus on transactional messages and ensure explicit consent (opt-in) for all commercial communications.

What are the character limits for SMS in Turkey?

Standard SMS messages are limited to 160 characters with GSM-7 encoding. Using UCS-2 for Turkish characters reduces the limit to 70 characters per segment. Concatenated messages are supported for longer content.

What is required for SMS compliance in Turkey?

Explicit consent (opt-in), registration with the ??YS system, and adherence to strict content regulations are mandatory. Messages must include opt-out keywords ('IPTAL', 'DUR', 'YARDIM'), respect permitted sending hours, and avoid prohibited content.

How to handle opt-outs for SMS in Turkey?

Provide clear opt-out instructions in every message using keywords like 'IPTAL', 'DUR', or 'YARDIM'. Process opt-outs within 24 hours and maintain detailed records for at least three years. Regular audits of your opt-out lists are recommended.

What are the penalties for non-compliant SMS in Turkey?

Non-compliant SMS can lead to message blocking and financial penalties enforced by the Information and Communication Technologies Authority (BTK). This includes sending promotional messages, violating opt-out regulations, or sending outside permitted hours.

How to send bulk SMS messages in Turkey?

Use batch APIs, queue systems like Redis/RabbitMQ, and implement exponential backoff for retries. Monitor throughput and adjust sending rates dynamically to comply with API rate limits.

What is the ??YS system in Turkey?

The ??YS (Message Management System) is a national database for managing commercial electronic messages. Businesses must register with ??YS before sending commercial SMS, check recipient numbers against it, and remove opted-out numbers promptly.

What SMS APIs are available for sending messages in Turkey?

Popular options include Twilio, Sinch, MessageBird, and Plivo. These platforms provide REST APIs for integrating SMS functionality into your applications, offering varying features and pricing.

How do I handle SMS delivery errors in Turkey?

Implement robust error handling and logging. Monitor delivery receipts through webhooks and track common error codes like 21614 (invalid number), 30007 (carrier rejection), and 30008 (blocked content). Store message status updates in a database.