Choosing an E-Commerce Payment Gateway in Turkey (2026): Bank Virtual POS vs iyzico, PayTR and Stripe

Choosing an e-commerce payment gateway in Turkey comes down to one decision first: a virtual POS contracted directly with a bank, or a licensed payment institution that sits between you and the banks. Both look identical to the shopper. The contract, the cost structure, the settlement terms and the integration work are different. This guide covers the criteria that actually separate providers and the mistakes we see when stores pick on the headline rate alone. Rates and campaigns change often, so confirm current figures in writing with each provider. For the wider store build, start with our e-commerce website guide.

What is the difference between a virtual POS and a payment gateway?

A virtual POS is a card-acceptance account a bank gives your business under your own agreement with that bank; a payment gateway run by a payment institution offers a shared infrastructure to many merchants and handles the bank integrations for you. With a bank POS, the contract, the rate and the technical integration are between you and one bank. With a payment institution such as iyzico or PayTR, you sign one contract and get access to many banks' cards and instalment programmes through one API. The checkout page can look the same either way; what differs is who you negotiate with, how money reaches your account and how much integration work you carry.

Should you choose a bank virtual POS or a payment institution?

For most small and mid-sized stores a payment institution is the more practical start, and a bank POS becomes interesting once volume gives you negotiating power. With a bank, each relationship means a separate application and a separate integration, but at high volume you may be able to negotiate the rate. A payment institution gives you many banks and instalment options through one integration, and onboarding is usually faster. Many stores end up with a mixed setup as they grow: a payment institution for breadth, plus a direct bank POS for the card brands that make up most of their volume. The right answer depends on monthly turnover and on how much integration and reconciliation work your team can carry.

Which costs should you check beyond the commission rate?

The commission rate is one line of the real cost; per-transaction fees, instalment costs, refund handling, settlement time and holds can matter more. Ask whether there is a fixed fee per transaction, how instalment surcharges are calculated, whether the commission is returned when you refund, and whether there is a monthly minimum. Settlement time (valör) and reserve or hold terms (blokaj) shape your cash flow directly: a slightly lower rate stops being an advantage if your money arrives weeks later than you planned. Get every line in writing and run each quote against your own average basket and refund rate. To see these costs next to marketplace commissions, read our marketplace commissions analysis.

How do instalments and 3D Secure affect conversion?

Instalments are expected by Turkish card shoppers and visibly affect basket conversion, and a clumsy 3D Secure step is one of the most common places a paying customer gives up. Compare which banks each provider works with, how many instalments it can offer in your product category and at what cost. Category-based instalment limits for credit cards are set by Turkish banking regulation and have changed several times in recent years, so confirm the current limit for your category with the provider rather than relying on an old table. 3D Secure verification is standard for online card payments and important for fraud protection; what matters is how the provider handles it on mobile. Test the SMS code flow on a phone yourself: a customer who gets lost on the verification page usually abandons the basket.

How do you accept foreign cards and other currencies?

Selling abroad adds separate requirements: foreign card acceptance, approval rates on those cards and pricing in foreign currencies. Some local providers support foreign cards only partially or add conditions and extra fees, and approval rates on foreign cards vary between providers. Ask each one for its foreign card terms, the extra commission and whether it can charge in EUR or USD rather than converting everything to TRY. We cover the rest of the cross-border stack, from per-market pricing to shipping and returns, in our e-export technical guide. Stores that sell mostly abroad often run two providers side by side: one for domestic cards and instalments, one for international cards.

Can Turkish businesses use Stripe?

No, not as a Turkey-registered business: Stripe's global availability page does not list Turkey among the countries where businesses can open an account (checked October 2026). Stripe is strong on developer experience and subscription billing, which is why some Turkish founders use it through a company registered abroad. That route brings its own tax, accounting and banking questions, so decide it with your accountant, not with a payment comparison chart. For domestic cards, instalments and local tax handling, local providers fit better. Businesses that serve both Turkish and international customers often combine a local provider with a global one, an approach we also see in SaaS products; see our SaaS MVP guide for how subscription billing fits into a first release.

How are refunds, cancellations and chargebacks handled?

Test the refund process before you sign, because refunds and chargebacks are where provider differences show up in daily operations. Can you issue full and partial refunds from the panel? How long does a refund take to reach the customer? Is the commission returned on refunded transactions? Chargebacks, which start when a customer disputes a payment with their bank, have provider-specific rules for submitting evidence and deadlines. Keeping order, shipping and customer communication records tidy makes disputes much easier to win. A panel that shows refunds and disputes clearly reduces the operational load on your team.

Why should card data never reach your server?

Card numbers should never pass through your own servers, because a hosted or embedded payment form from the provider keeps you out of most of the card security burden. Under the PCI DSS rules, merchants that fully outsource card handling, either by redirecting to the provider's payment page or by embedding its form in an iframe, can qualify for the shortest self-assessment questionnaire (SAQ A). Since 1 April 2025, merchants that embed the form must also confirm their own page is protected against script attacks, or get that confirmation from their provider, according to the PCI Security Standards Council's FAQ. Confirm orders only from the provider's signed webhook, never from the browser redirect alone, and make the order update idempotent so a repeated notification cannot ship the same order twice. In a test environment, try success, failure and timeout scenarios before launch.

How do you verify a payment institution's licence?

Check the provider against the Central Bank's list: since 1 January 2020, TCMB licenses and supervises payment and electronic money institutions under Law No. 6493 as amended by Law No. 7192, and it publishes authorised institutions on its website. The contract should state settlement time, hold conditions, account closure terms and data processing terms clearly. Because the provider processes your customers' personal data, also check that its data processing terms fit your KVKK obligations; our KVKK website checklist covers the site side. Support quality, outage history and documentation quality are trust signals too. For a small business a payment outage is lost revenue, so test whether you can actually reach support before you need it, and talk to existing merchants rather than relying on marketing material.

Which setup suits which kind of business?

No provider is best in every scenario; the business model decides which criteria matter most. A small shop usually prioritises fast onboarding, instalments and a reasonable rate. A SaaS business with subscriptions needs recurring billing, card tokenisation and invoicing. A marketplace or multi-vendor platform needs payouts to sellers with commission deducted, which requires a provider that supports sub-merchants. A store that sells abroad should focus on foreign card approval and multi-currency support. Write down which of these describes you before you compare quotes, and the comparison gets much shorter.

What should you check before deciding?

Before you sign, you should be able to answer six questions for each provider: what is the total cost with every fee included, when does money reach your account, do instalments and foreign card support match your needs, are the documentation and test environment good enough, how do refunds and chargebacks work, and are the licence and contract terms clear. Fill this in for two or three providers side by side and the decision usually becomes obvious. If you are building the store with us, our teams set up the payment integration with the provider you choose and test the failure paths, not just the happy path.