The National Intelligence Organisation (MIT) of Turkey has carried out one of the largest cybercrime operations in recent years, dismantling an organised fraud network that authorities say posed a significant threat to both financial security and national stability. The operation was conducted in coordination with the Ankara Chief Public Prosecutor’s Office and supported by the Ankara Provincial Gendarmerie Command’s Cyber Crimes Division.
At the center of the case is a man identified as Ö.Ş., alleged to be the ringleader of a group that relied on sophisticated tools to deceive thousands of citizens. Following his arrest, Ö.Ş. was ordered into custody and transferred to prison by court decision.
Final Call: Be DPDP Act Ready with FCRF’s Certified Data Protection Officer Program
A Web of Deception
According to investigators, the group’s scheme revolved around automated fake listings placed on e-commerce platforms. These listings, promising goods that never existed, were designed to lure unsuspecting consumers into transferring money. To bolster credibility, the suspects allegedly created fake receipts, invoices, and transaction confirmations, offering victims the illusion of legitimacy before vanishing with their funds.
Authorities said the group had gone further than typical online fraud operations by actively tracking the IP addresses, geographic locations, and browsing habits of those visiting the fraudulent sites. This level of surveillance, combined with tailor-made software, allowed the network to refine its scams and maximize profits.
National Security Dimensions
The scope of the operation prompted the involvement of Türkiye’s National Cyber Incident Response Centre (USOM) and the Financial Crimes Investigation Board (MASAK). USOM provided the technical tracing that led to the identification of the group’s digital infrastructure, while MASAK conducted a parallel financial probe that uncovered extensive money laundering channels. Based on their findings, authorities blocked access to more than 1,250 websites linked to fraudulent activity.
Officials underscored that the network’s operations extended well beyond private financial harm, threatening to destabilize trust in online commerce and weaken broader economic stability. For this reason, the case has been framed as a matter of national security, placing cybercrime at the forefront of Türkiye’s domestic intelligence priorities.
The MIT’s intervention, analysts say, underscores the agency’s expanding role in defending not only the state’s physical security but also its digital and economic resilience. In a rapidly evolving cyber landscape, this operation may mark a turning point in how Türkiye approaches organized online threats.