Forensic Accounting Audit in Turkey: Who Can Do It and Will It Hold Up in Court?

Key facts at a glance

What is a forensic accounting audit in Turkey?

A forensic accounting audit in Turkey is an evidence-led examination of a company’s ledgers, e-invoices, bank movements, payroll and contracts. It establishes what happened, who benefited and how much was lost, in a form that can support a dismissal, a criminal complaint, a civil claim, a tax correction or an insurance claim. It answers a defined question; it does not issue an audit opinion.

Turkish practice has no single fixed name for this work, and foreign groups often hear four or five terms used loosely. They overlap in technique but differ in who commissions the work, who reads the result and what legal weight it carries.

Forensic accounting audit vs statutory audit: why a clean audit opinion did not catch it

A statutory audit gives reasonable assurance that the financial statements as a whole are free of material misstatement. A forensic accounting audit tests specific transactions, people and money flows down to the document. Under Turkish auditing standard BDS 240, the primary responsibility for preventing and detecting fraud rests with management and those charged with governance, not with the auditor.

That distinction answers the question foreign parents ask most often: “Our Turkish subsidiary had a clean audit report every year, so how did this happen?” A statutory auditor samples, works to materiality and relies partly on management representations. Collusion between an employee and a supplier, or one manager who controls both the purchase order and the payment, can stay below materiality for years. BDS 240, the Turkish adoption of ISA 240 issued by the Public Oversight, Accounting and Auditing Standards Authority (KGK), says this openly.

Internationally, the IAASB’s revised ISA 240 applies to audits of periods beginning on or after 15 December 2026 and sharpens the auditor’s focus on fraud risk. It will not turn a statutory audit into a forensic accounting audit: the purpose, the depth and the output stay different. Ask your auditor which version KGK requires for your reporting period.

Is a forensic accounting audit the same as a tax examination?

No. Tax inspectors examine whether tax was correctly paid under the Tax Procedure Law, and their findings can lead to assessments, penalties and a criminal referral for the offenses in VUK Art. 359. A forensic accounting audit is commissioned by the company or its owners to establish facts for their own decisions. The two meet when the forensic work finds fake or misleading invoices: from that moment the findings are also a tax decision, covered under “What happens if” below.

Who can legally do a forensic accounting audit in Turkey?

No Turkish statute creates a “forensic accountant” title. In practice the work belongs to licensed CPAs: Law No. 3568, Art. 2 places examination, analysis, audit, written opinions, reports, arbitration and expert-witness work within a certified public accountant’s statutory scope. A court expert must additionally be registered on the regional expert lists kept under Law No. 6754.

That gives five roles, and most serious cases use at least two of them.

Can a foreign forensic team work on a Turkish case?

Yes. Data analytics, interviews and reporting to a foreign board can be done by any qualified team, including Certified Fraud Examiners (CFE, a credential of the US-based Association of Certified Fraud Examiners). Three Turkish facts still shape the work. The court will appoint its own registered expert, so a foreign report enters the file only as a party document. The CPA title and regulated accounting work are governed by Law No. 3568. And the books, e-ledgers and court file are in Turkish: a report the court expert cannot read will not move the case.

The model that works is a joint team. The group’s investigators set the questions and the global context, while a Turkish CPA owns the Turkish books, signs any Turkish-language opinion and can be heard at a hearing. That last point matters, because under HMK Art. 293(3) the court does not evaluate a party expert’s report if the expert fails to attend the hearing without a valid excuse.

Court expert (bilirkişi) vs party expert opinion (uzman görüşü): which report will the judge read?

The judge reads both, but for different purposes. The court expert’s report is evidence the court ordered; a party expert opinion supports one side’s case and helps the court test that report. Neither binds the judge: Civil Procedure Code Art. 282 requires the court to evaluate expert reports freely, together with all the other evidence in the file.

What does Law No. 6754 forbid a court expert to do?

Law No. 6754, Art. 3(2) bars a court expert from commenting on anything beyond the matters that require expertise or special or technical knowledge, and from making legal characterizations or evaluations. Art. 3(3) forbids appointing an expert for questions that general knowledge, experience or the judge’s legal knowledge can resolve. In a forensic file, the expert can say that payments to a supplier exceeded documented deliveries by a stated amount; the expert cannot say that the manager committed breach of trust. Regional expert boards discipline experts who cross that line.

How long does a court-appointed expert have?

Under HMK Art. 274(1), the period the court gives its expert cannot exceed three months; at the expert’s reasoned request it can be extended once by up to three months. In cases under simple procedure, both periods are two months. In practice this is the window in which a well-prepared party file, with a clear chronology, reconciled figures and an index of documents, has the most influence, because it shapes the questions before the expert writes.

How do you challenge a court expert’s report you disagree with?

Within two weeks of notification, a party may ask the court to have missing points completed, unclear points explained or a new expert appointed (HMK Art. 281(1)). Where preparing the objection is very difficult or requires special or technical work, the court can grant one further period of up to two weeks, if it is requested within the first two weeks. Attach a party expert opinion that shows, figure by figure, where the report departs from the records. Turkish appellate practice expects trial courts to resolve material contradictions between the two, usually through a supplementary report or a new panel.

When should a foreign parent order a forensic accounting audit of its Turkish subsidiary?

Order a forensic accounting audit when a specific allegation, anomaly or event needs facts that will survive challenge: a whistleblower report, unexplained margin erosion, payments to unfamiliar suppliers, a tax office letter about fake invoices, a shareholder dispute, a pre-acquisition red flag or a senior manager’s sudden exit. The trigger defines the scope; a vague “look at everything” mandate costs more and proves less.

• A whistleblower or anonymous letter naming a person, a supplier or a practice.
• Purchase prices drifting above market, or a new supplier winning volume quickly.
• Cash and bank reconciliations that never quite close, or growing balances in shareholder and staff accounts (Uniform Chart of Accounts 131, 195 and 196).
• A tax office letter, such as a counter-examination record (karşıt inceleme), an invitation to explain (izaha davet, VUK Art. 370) or a VAT refund hold linked to a supplier flagged for fake invoices.
• Joint venture or shareholder deadlock where one side controls the books.
• Acquisition due diligence that reveals revenue quality, cut-off or related-party issues.
• An insurance claim under a fidelity or crime policy that needs a documented loss computation.

If what you need is a broader compliance review rather than an investigation of a specific suspicion, start with a Turkey Entity Health Check. For a target company, see our 2026 due diligence guide to buying a company in Turkey.

The Turkish forensic clock: deadlines that shape a forensic accounting audit

Turkish deadlines start from different events, such as the decision-maker learning the facts, notification of a report or a general assembly vote, and several of them are preclusive: miss them and the right is lost. A forensic accounting audit in Turkey therefore has to be planned backwards from the deadline that matters most for the decision you need to take.

How a forensic accounting audit works in Turkey: a 7-step process

A Turkish forensic accounting audit moves from evidence preservation to scoping, data acquisition, analysis, interviews, quantification and a report written for its forum. The first two steps decide whether the rest is usable: lost data and a report aimed at the wrong audience are the two failures that cannot be repaired later.

1. Preserve evidence before anyone is alerted. Secure ERP and e-mail access, export mailboxes, keep bank portal logs and paper files, and suspend automatic deletion. Altering or destroying data in an information system is a separate offense (TCK Art. 244), and destroying statutory books is a tax smuggling offense (VUK Art. 359(b)), but neither brings the data back. E-invoices and e-ledger berat certificates also exist outside the company’s own systems, which often allows reconstruction.
2. Define the question and the forum. Write down the decision the work must support: a dismissal, a criminal complaint, a claim against a director, a tax correction, an insurance claim or a board decision only. Then plan backwards from that forum’s evidence rules and deadlines. Bring in Turkish counsel at this point; legal characterization is counsel’s job, not the accountant’s.
3. Acquire the data lawfully. Typical sources are the general ledger and e-ledger, e-invoice and e-archive records, the company’s own bank statements, payroll and social security (SGK) filings, customs declarations, contracts and approval workflows. For periods up to August 2024, monthly Form Ba/Bs filings also show counterparties above TRY 5,000; the forms were abolished from the September 2024 period by VUK General Communiqué No. 565. Third-party bank records are protected by banking secrecy (Banking Law No. 5411, Art. 73).
4. Analyze full populations, not samples. Match the supplier master file against employee data such as addresses, IBANs, phone numbers and family names. Test duplicate and split payments, price variances against market, round-sum and weekend postings, credit notes after period end, and movements through shareholder and staff accounts. In a joint stock company, check every transaction between a director and the company: TTK Art. 395 requires general assembly approval.
5. Interview and reconcile. Interview process owners first and the person under suspicion last, in a sequence agreed with Turkish employment counsel. Reconcile every finding to a document, a bank movement or an e-invoice before it goes into the report.
6. Quantify the loss and its side effects. Compute the direct loss, then the tax effect (VAT deducted on fake invoices, disallowed expenses, penalties), interest and what is realistically recoverable. A loss figure that ignores the tax consequences will be wrong in the court file and in the accounts.
7. Report for the forum. An internal report for the board, a dismissal file, an annex to a criminal complaint, a party expert opinion under HMK Art. 293 or CMK Art. 67(6), or a voluntary disclosure file under VUK Art. 371: each needs a different structure, language and level of legal caution.

Two internal disciplines make step four faster next time: a localized ERP with a clean audit trail (see our ERP localization guide for Turkey) and a documented month-end close and financial control routine.

What a forensic accounting audit typically finds in Turkish subsidiaries

Most frauds in Turkish subsidiaries are not sophisticated. They exploit one person controlling two steps of a process: approving a supplier and its payment, booking a credit note and collecting the cash, or preparing payroll and the bank upload. Turkey’s e-document regime makes many of these schemes visible to anyone who examines the full population of transactions.

What happens if…? Eight situations from Turkish forensic files

What happens if you dismiss the employee before the forensic accounting audit is finished?

You may lose the just-cause defense, or win it narrowly on a thin file. Labor Law No. 4857, Art. 26 gives the employer six working days from the moment the person or body authorized to dismiss learns the facts. Where an investigation is genuinely needed, the Court of Cassation (Yargıtay) starts that period when the result reaches the decision-maker, but an investigation that drags on without reason does not stop the clock. The safe sequence: preserve, investigate quickly, deliver a dated report to the authorized decision-maker, and dismiss within six working days.

What happens if the suspect deletes e-mails or ledger entries?

Deletion is a criminal act in its own right: altering or destroying data in an information system falls under TCK Art. 244, and destroying statutory books or records is a smuggling offense under VUK Art. 359(b). The priority, however, is recovery. E-invoices pass through the Revenue Administration’s systems or licensed integrators, e-ledger berat certificates are uploaded to the Revenue Administration, and banks keep their own records. A forensic image taken on day one remains the best answer to “the data was changed after I left”.

What happens if the forensic accounting audit finds fake invoices in your own books?

The company becomes both victim and taxpayer at risk. Using fake documents is an offense under VUK Art. 359(b), punishable by three to eight years’ imprisonment for acts after 15 April 2022, and VAT deducted on those invoices will be disallowed, with tax-loss penalties tripled under VUK Art. 344(2). Voluntary disclosure (pişmanlık) under VUK Art. 371 avoids the tax-loss penalty only if it is filed before a denunciation or a tax examination begins and, for smuggling acts, before the act is detected; the tax and a surcharge must be paid within 15 days. Decide with counsel within days, not months.

What happens if the court expert’s report contradicts your forensic findings?

Object within two weeks of notification under HMK Art. 281, asking for missing points to be completed, unclear points to be explained or a new expert to be appointed. Attach a party expert opinion under HMK Art. 293 that shows, figure by figure, where the report departs from the records. Turkish appellate practice expects the trial court to resolve a material contradiction between a court expert’s report and a reasoned party expert opinion. Silence after the two weeks is expensive.

What happens if the money went through bank accounts you cannot see?

The company’s own accounts are yours to analyze; third parties’ accounts are not. Banking Law No. 5411, Art. 73 protects customer secrets, which banks may share only with authorities expressly empowered by law, such as a public prosecutor or a court. That is often the practical reason to file a criminal complaint once the internal facts are solid: the prosecutor can obtain the bank records, and the forensic accounting audit can then be updated with them.

What happens if you are a minority shareholder and management refuses access?

Use the statutory information route first. In a limited company, every partner can ask the managers for information on all business and accounts and inspect specific matters (TTK Art. 614), with the court as the fallback. In a joint stock company, shareholders have information and inspection rights (TTK Art. 437) and may then request a special audit of specific events. If the general assembly refuses, holders of 10% of capital (5% if listed) or of shares with a nominal value of TRY 1 million can apply to the commercial court within three months (TTK Art. 439).

What happens if headquarters wants the Turkish e-mails reviewed abroad?

That is a cross-border transfer of personal data under the Personal Data Protection Law No. 6698 (KVKK), Art. 9. Since the amendments in force from 1 June 2024, a transfer needs an adequacy decision, an appropriate safeguard such as a standard contract issued by the Personal Data Protection Board, or one of the limited incidental-transfer exceptions. A signed standard contract must be notified to the Authority within five business days. Many groups therefore review the data in Turkey and export only the findings.

What happens if the CPA finds signs of money laundering?

Independent CPAs are obliged parties under the measures regulation issued under Law No. 5549 on the Prevention of Laundering Proceeds of Crime, so a forensic engagement can trigger a suspicious transaction report to MASAK, Turkey’s financial intelligence unit. Law No. 5549, Art. 4(2) prohibits disclosing that a report was filed, even to the parties to the transaction. A professional engagement letter addresses this at the start, not in the middle of the work.

Case analyses: three forensic patterns from Turkish practice

These are illustrative composites of fact patterns that recur in Turkish forensic and court-expert work. Names, figures and details are changed; they do not describe any single client.

What does a forensic accounting audit cost in Turkey? The drivers that set the fee

The cost of a forensic accounting audit in Turkey is set by scope, not by a price list: the question asked, the period and number of entities, transaction volume, the condition of the data, whether the work must withstand court scrutiny, the language of delivery and the urgency created by Turkish deadlines. A narrow, well-defined question is the most effective cost control.

Court-appointed expert fees are a separate item: the parties advance them as court costs, and the judgment allocates them (HMK Art. 323). A party expert opinion is paid by the party that commissions it. We confirm our fees in writing after a paid scoping consultation and do not publish price lists.

Turkey vs England & Wales, Germany and the United States: how forensic evidence reaches the judge

Turkey and Germany are court-expert systems: the judge selects the expert, and party reports support or challenge that expert. England and Wales and the United States are party-expert systems: each side instructs its own expert, under court control. A foreign group used to party experts has to adapt its forensic accounting audit to the Turkish model rather than export its home-country playbook.

Arbitration, including arbitration seated in Turkey, usually gives party-appointed experts a larger role. For damages quantification in arbitration, see who prepares a quantum expert report for arbitration in Turkey.

How to choose a forensic accountant in Turkey: eight questions to ask

1. Can I verify the license? Ask for the TÜRMOB registration number and check it with the chamber.
2. Has the person worked on the court side? Experience as a registered court expert shows how Turkish judges read reports.
3. Will the signatory attend a hearing? Under HMK Art. 293(3), the court does not evaluate a party expert’s report if the expert fails to attend without a valid excuse.
4. Is the firm independent of the books? Your bookkeeper or statutory auditor has a conflict when their own work is under review.
5. Can the team work with Turkish data? Local ERP systems such as Logo, Mikro and Netsis, SAP installations, and e-invoice and e-ledger formats are the raw material.
6. Who handles the legal side? A good forensic accountant stays out of legal characterization and works alongside Turkish counsel.
7. How is personal data handled? Ask for a KVKK-compliant data protocol, including any cross-border transfer under Art. 9.
8. Is the MASAK position explained? An independent CPA is an obliged party under the Law No. 5549 framework; the engagement letter should say how that is handled.

When the findings raise a tax position, such as VAT on fake invoices or the deductibility of a loss, a written Turkish tax opinion closes the loop; see when a foreign company needs one.

Conclusion: what a forensic accounting audit can and cannot do in Turkey

A forensic accounting audit in Turkey cannot replace the court’s own expert, and it should never try to decide guilt. What it can do is establish the facts while the evidence is fresh, keep the employer inside the six-working-day window, quantify the loss together with its tax consequences, and give counsel, prosecutors and court experts a clear and checkable record. Designed for its forum, it is the difference between a case that moves and a case that waits for a stranger to rebuild your books.

Forensic accounting audit in Turkey: frequently asked questions

Primary sources

• Law No. 6754 on Experts (Bilirkişilik Kanunu), in particular Art. 3: mevzuat.gov.tr; publication in the Official Gazette of 24 November 2016, No. 29898
• Civil Procedure Code No. 6100 (HMK), Arts. 266–287, 293 and 323: mevzuat.gov.tr
• Criminal Procedure Code No. 5271 (CMK), Arts. 62–73: mevzuat.gov.tr
• Turkish Commercial Code No. 6102 (TTK), Arts. 82, 395, 397, 437–444, 553, 560 and 614: mevzuat.gov.tr
• Turkish Criminal Code No. 5237 (TCK), Arts. 73, 155, 244 and 247: mevzuat.gov.tr
• Tax Procedure Law No. 213 (VUK), Arts. 134, 253, 344, 359, 367, 370 and 371: mevzuat.gov.tr
• VUK General Communiqué No. 565 ending Form Ba/Bs from the September 2024 period: Turkish Revenue Administration (gib.gov.tr); Official Gazette of 25 September 2024, No. 32673
• Labor Law No. 4857, Arts. 25 and 26: mevzuat.gov.tr
• Law No. 3568 on Certified Public Accountants and Sworn-in CPAs, Arts. 2 and 12: mevzuat.gov.tr
• Personal Data Protection Law No. 6698 (KVKK), Art. 9: mevzuat.gov.tr; KVKK notice on standard contract notifications
• Law No. 5549 on the Prevention of Laundering Proceeds of Crime, Art. 4: mevzuat.gov.tr
• Banking Law No. 5411, Art. 73: mevzuat.gov.tr
• Corporate Tax Law No. 5520, Art. 13: mevzuat.gov.tr
• KGK, BDS 240 on the auditor’s responsibilities relating to fraud: kgk.gov.tr
• IAASB, ISA 240 (Revised): iaasb.org
• Comparative rules: Civil Procedure Rules Part 35 (England & Wales); Federal Rule of Evidence 702 (United States); ZPO §404 (Germany)

Disclaimer. This article is provided for general information and does not constitute legal, tax, accounting or investment advice. The treatment of a Turkish case depends on the company’s structure, the forum, the evidence and the specific facts, and deadlines run from different trigger dates, some of them preclusive. Advice from Turkish counsel and a licensed CPA should be obtained before acting.