Social media restriction for under-15s on November 1; scammers creating panic

Under the regulation published in the Official Gazette, access to social media services for users under 15 will be restricted from November 1, 2026 onwards. Age verification will become mandatory on social networks.

When the regulation takes effect, currently active accounts will not be automatically closed. Unverified existing accounts are given until March 31, 2027 to complete the age verification process.

Scammers exploiting this transition period are sending fake messages saying "all accounts will be closed" to panic users. It has been reported that scammers are distributing malicious software to young people under the guise of "app to bypass the ban" and to parents as a "mandatory control program." Experts emphasize that the presence of an official institution logo in a message, correct Turkish usage, or the message coming from a familiar name should not be considered proof of authenticity.

In the new system, age verification will be carried out using a technical "age verification token" created through the e-Government Gateway. This method informs only whether the user has crossed the 15 and 18 age thresholds without transferring personal data to platforms. Social media platforms or official institutions do not request e-Government passwords, login codes, credit card information, or identity photos via SMS, WhatsApp, or email.

If permissions such as notification reading or screen sharing are granted to malicious applications installed on a device, scammers can gain control over the device and access banking accounts and private data.

When encountering a suspicious transaction, the following steps are recommended: Stop communication and do not confirm authorization codes; if a file has been downloaded to your device, immediately disconnect mobile data and Wi-Fi; if card information has been shared, call your bank to freeze your accounts; change your passwords from a secure device; save messages and screenshots as evidence.

Cyber reports can be submitted through the Cyber Security Directorate's website at siberguvenlik.gov.tr. In cases of account takeover or financial loss, you can also contact the Office of the Chief Public Prosecutor or local police units.