smsroute
Get Started
149 countries · crypto-native · no KYC

SMS API in Turkey 2026: The IYS Registry and KVKK

Turkey runs consent through a central government system called IYS. Every commercial-message permission must be registered there within 3 business days, or it's invalid. It's unlike almost any other market.

Start Sending SMS View API docs
smsroute editorial team · Last reviewed · 4 min read
$0.020/msg to Turkey from 105ms median 97.5% delivered
SMS API in Turkey 2026: The IYS Registry and KVKK — smsroute
$0.020
per SMS to Turkey
3 direct
Turkcell · Vodafone · Türk Telekom
105 ms
median submission
97.5%
delivered success
An SMS API in Turkey runs into a rule almost no other market has: IYS. IYS (İleti Yönetim Sistemi) is a central Message Management System run by Turkey's Ministry of Trade (Turkish Ministry of Trade, 2020). Every business that sends commercial electronic messages must register there. And here's the catch: consents must be registered to IYS within 3 business days of receiving them, per the system's rules. Unregistered consents are considered invalid. So in Turkey, having a customer's permission isn't enough. That permission has to live in a government registry, on time, or it doesn't count. It's a centralized consent model, and it's mandatory.
On this page
  1. Turkey centralizes consent in one system
  2. The IYS system and KVKK
  3. Sending compliantly in Turkey
  4. Sending to Turkey in practice

Turkey centralizes consent in one system

An SMS API in Turkey runs into a rule almost no other market has: IYS. IYS (İleti Yönetim Sistemi) is a central Message Management System run by Turkey's Ministry of Trade (Turkish Ministry of Trade, 2020). Every business that sends commercial electronic messages must register there. And here's the catch: consents must be registered to IYS within 3 business days of receiving them, per the system's rules. Unregistered consents are considered invalid. So in Turkey, having a customer's permission isn't enough. That permission has to live in a government registry, on time, or it doesn't count.

SMSRoute's published route page for Turkey lists direct-carrier delivery via Turkcell, Vodafone, Türk Telekom from $0.02/message, with 105ms median submission and 97.5% delivered success (smsroute.cc route pages, 2026). For A2P traffic, using a registered sender ID (alphanumeric or long code) helps improve deliverability. A Turkish fintech app uses this route to deliver one-time passwords, with a 105ms median submission ensuring users receive login codes within seconds.

The IYS system and KVKK

The IYS system and KVKK — comparison diagram
Requirement Detail
IYS registration Mandatory for all commercial-SMS senders
Consent registration Register each consent to IYS within 3 business days
Unregistered consent Invalid. The message isn't lawful.
KVKK Turkey's data-protection law (GDPR-equivalent)
Recipient consent Required before any commercial message

IYS is the defining feature. It's a centralized permission database, per the Ministry of Trade, and every service provider sending commercial SMS must use it. The three-business-day window is strict: get a consent, register it to IYS within three days, or it's invalid. On top of IYS, KVKK (Turkey's Personal Data Protection Law) governs how you handle the personal data itself, mirroring GDPR consent principles. Two layers exist: IYS for the permission registry, KVKK for the data. When sending via an SMS API, ensure your messages are formatted in international format (E.164) for proper routing. Missing the deadline risks a fine up to 1.9 million TL, as seen in KVKK’s 2023 penalty against a firm for late IYS registration.

Sending compliantly in Turkey

  1. Register with IYSComplete IYS registration before sending commercial SMS. It's a legal requirement, not optional. Non-resident senders have their own registration path.
  2. Log every consent to IYS within 3 daysEach consent you collect must be registered to IYS within three business days. Build this into your consent flow, because a late registration makes the consent invalid.
  3. Comply with KVKKHandle personal data under KVKK. It must be documented, lawful, and minimised. The data-minimisation discipline applies, since KVKK mirrors GDPR.
  4. Separate transactional from commercialIYS governs commercial messages. Transactional traffic (OTP, alerts) rests on the service relationship. The transactional carve-out applies here as elsewhere.

The IYS three-day rule is the trap. In most markets, valid consent is valid the moment you get it. In Turkey, a consent you didn't register to IYS within three business days is invalid, even if the customer genuinely agreed. The registry, on time, is what makes co

Sending to Turkey in practice

SMSRoute is a no-KYC SMS API with crypto billing (BTC, ETH, USDT, XMR, LTC, and SOL) serving the international route to Turkey, with live pricing on the send SMS to Turkey page. For transactional and OTP traffic (which rests on the service relationship rather than IYS-registered marketing consent), the international route delivers to Turkish users. Put your app name in the message body. Use a REST API to integrate quickly, and consider implementing retry logic for failed deliveries. For high-volume sending, you may want to use SMPP for lower latency and higher throughput.

The honest boundary: commercial marketing SMS to Turkey requires IYS registration and the three-day consent logging. This is a compliance system you operate, not a routing feature. Turkey's model is genuinely unusual: a central government consent registry with a hard deadline. The discipline is administrative as much as technical. Skip the registry and your comm

GDPR ConsentBlog article
Message BodyBlog article

FAQ

What is IYS in Turkey?
IYS (İleti Yönetim Sistemi) is a central Message Management System run by Turkey's Ministry of Trade, where businesses must register commercial-message permissions. Every sender of commercial SMS must use it, and consents must be registered to IYS within 3 business days of receiving them — unregistered consents are considered invalid. It's a centralized, mandatory consent registry.
Do I need to register consent for SMS in Turkey?
Yes, and uniquely, you must register it in a central government system. Beyond obtaining a recipient's consent, you must log that consent to the IYS platform within 3 business days, or it's invalid. So valid consent in Turkey means both getting permission and registering it to IYS on time — having the customer's agreement alone isn't sufficient.
What happens if I don't register a Turkey SMS consent to IYS in time?
The consent is considered invalid, even if the customer genuinely agreed. Turkey's rule requires consent to be registered to the IYS system within 3 business days of receiving it, so a late registration means the permission doesn't legally count and the commercial message isn't lawful. The registry deadline is strict.
Does Turkey's IYS apply to OTP messages?
IYS governs commercial (marketing) messages. Transactional traffic like OTPs and service alerts rests on the existing service relationship rather than IYS-registered marketing consent, following the common transactional carve-out. So OTP can be sent via an international route, while commercial campaigns require IYS registration and the 3-day consent logging.

Send your first SMS in 5 minutes

No KYC. Pay with BTC, ETH, USDT, XMR, LTC, and SOL. Live routes to 149 countries.

Get an API key →