Turkey sits in an awkward middle ground. Using a VPN there is not a crime, yet the state blocks a long and changing list of websites, including the sites of many well-known VPN providers and, since 2025, most large travel-eSIM stores. This guide is for visitors, foreign residents and Turks abroad. Every figure carries its source and date, because this list goes out of date quickly.
Is using a VPN legal in Turkey?
No Turkish law makes it an offence for an individual to use a VPN. The state restricts VPN services instead. Freedom House records orders from the Information and Communication Technologies Authority (BTK) to block more than 10 VPN services and Tor in 2016, and 17 VPN services in late 2023, the latter without a court order. Nomad Istanbul's September 2026 guide, written from inside the country, puts it plainly: using a VPN is legal, and reading a blocked site is not an offence.
Blocking rests on Law No. 5651, the Internet Law. A 2020 amendment, Law No. 7253, added bandwidth throttling of up to 90% as a sanction against large social networks that do not appoint a local representative.
The rules for providers may tighten. In April 2026, İFÖD published a draft amendment to the Electronic Communications Law (No. 5809) that would require VPN providers to hold BTK authorisation and operate through a local company, with fines of 1 to 30 million lira and, for a provider that does not comply or pay within six months, throttling of up to 95% or blocking. Turkish media also reported plans for identity and age checks on licensed VPN services through the e-Devlet government portal. The draft targets providers, not users, and as of September 2026 we have not found confirmation that it has been enacted.
What a VPN does not change
- Illegal activity stays illegal. A tunnel changes the route your traffic takes, not the law that applies to what you do.
- Speech offences follow the post, not the route. Amendments passed in 2022 made publicly spreading "false information" a crime punishable by up to three years in prison (Human Rights Watch, October 2022).
What is blocked, and how it changes
Blocking in Turkey is large-scale and routine. The Freedom of Expression Association (İFÖD) tracks it in its EngelliWeb project. Its annual report, summarised by the Stockholm Center for Freedom in June 2026, counts about 232,000 websites and domain names blocked in 2025 alone, and about 1.5 million since 2018. Orders come both from courts and from administrative bodies.
| Target | What happened | Reported by |
|---|---|---|
| Wikipedia | Blocked from April 2017 until after the Constitutional Court ruled against the ban in December 2019 | Nomad Istanbul |
| Blocked for nine days in August 2024 | Freedom House, 2025 | |
| Roblox | Blocked in August 2024, reported accessible again in June 2026 | Türkiye Today |
| Discord | Blocked in October 2024, still blocked in September 2026 | Nomad Istanbul |
| VPN provider websites | About 10 providers blocked in December 2016, 16 in December 2023 and about 27 in August 2024. In a September 2026 test, 8 of 10 major sites were unreachable | Nomad Istanbul |
| VPN servers | 454 server addresses linked to 26 VPN services blocked in 2025 | İFÖD |
| Travel-eSIM stores | Blocks from 10 July 2025. In a 10 September 2026 test, 15 of the 19 largest stores were unreachable | İFÖD, Nomad Istanbul |
Blocking a provider's website hurts at the worst moment: when someone arrives and tries to sign up, pay or read setup instructions. Counts differ slightly between sources, but the pattern is clear: waves in 2016, 2023 and 2024 cover most well-known brands, and İFÖD's 2025 figure shows that the servers apps connect to are blocked too, not just the marketing pages.
The eSIM blocks began with a BTK decision in July 2025, reported by İFÖD, covering sellers including Airalo, Holafly, Saily and Nomad. More waves followed. What is affected is buying a plan: an eSIM installed and activated before arrival is consistently reported to keep working. The Roblox entry shows that the list also moves the other way. Treat any list, this one included, as a dated snapshot.
Throttling during major events
Separately from blocking, the authorities have repeatedly slowed specific platforms during political events. The affected apps barely load while the rest of the internet keeps working.
- March 2025: after the detention of Istanbul mayor Ekrem İmamoğlu, social media was throttled for about 42 hours (Freedom House).
- September 2025: from the evening of 7 September, NetBlocks reported that X, YouTube, Instagram, Facebook, TikTok and WhatsApp were restricted on multiple networks during a police blockade of the main opposition party's Istanbul office (Reuters). İFÖD put the throttling at about 21 hours.
- July 2024: internet access in Kayseri Province was throttled for about a week during anti-refugee unrest (Freedom House).
When one platform is slowed, traffic inside a tunnel does not show which platform it is for. But VPN servers get blocked too, and when a whole region's connection is cut back, as in Kayseri, no VPN restores the lost bandwidth. Expect these periods to be unreliable whatever you use, and agree on a fallback with family, such as SMS or a phone call.
Before you fly: the install-first checklist
- Install the app at home. App store listings differ by country, and provider websites may not load once you arrive.
- Import your subscription and test it on the device you will carry, on Wi-Fi and on mobile data, with two or three locations. The Android setup guide has the steps.
- Buy and install your eSIM before departure, or check that your home plan includes roaming in Turkey.
- Check that your plan outlasts the trip. Renewing from inside the country depends on a payment page that may not load.
- Save support contacts and an offline copy of the instructions, such as screenshots of the setup steps.
- Set the date and time to automatic. If the clock is far off, HTTPS certificate checks fail, including the app's subscription refresh.
- Run one leak test while connected, using the leak test guide.
Which location to use from inside Turkey
Pick a location outside Turkey. A server in Turkey reaches the internet through Turkish networks and follows the same blocking rules, so do not expect it to reach a site that is blocked in Turkey. For latency, European locations are the usual choice. With Kovra, that means Germany, Poland, Finland or Sweden.
While you are in Turkey, you do not need a VPN to look Turkish, because your local connection already does. If a Turkish bank or government site objects to your foreign VPN address, disconnect for that session.
Turks abroad who need a Turkish IP address
The reverse case is just as common. Someone living in Berlin or London finds that a Turkish bank, TV subscription or operator account behaves differently from abroad. Streaming rights may be licensed for Turkey only, fraud checks may treat a foreign login as suspicious, and some sites restrict foreign traffic outright.
Kovra has a Turkey location for this use. It comes with caveats:
- Datacentre addresses are recognisable. A VPN server's address can be flagged as datacentre or VPN traffic whatever country it is in. We make no promise about any bank, streaming service or government portal.
- A Turkish exit follows Turkish rules. Expect sites that are blocked in Turkey to be blocked for you too.
- Terms of service still apply. Some streaming services forbid VPN use in their terms.
Protocols: what is documented and what is only reported
Many VPN comparison sites say that Turkish networks detect and drop OpenVPN, WireGuard and IPsec connections with deep packet inspection (DPI). We have not found a published, independent measurement that confirms protocol-level blocking in Turkey, so treat those claims as reports. The capability is documented: Citizen Lab's 2018 report "Bad Traffic" found DPI equipment on Türk Telekom's network being used to redirect software downloads to spyware.
Kovra runs VLESS with REALITY over TCP on every location. REALITY is designed to make the handshake look like an ordinary TLS connection to a real website, leaving no distinctive VPN handshake to match. The details are in the VLESS + REALITY explainer, and the China guide covers fingerprinting in general. This is a property of the protocol, not a guarantee. It does nothing for a server whose address is on a blocklist, and we have not tested Kovra's reachability from Turkish networks.
Hotel Wi-Fi and mobile data in Turkey
Hotel, airport and café networks connect through Turkish providers, so the national blocks apply there too. Many also put a login page in front of the internet, and a VPN can keep that page from appearing. The fix is to pause the VPN, log in and then reconnect. It is covered step by step in VPN not working on hotel or airport Wi-Fi.
Keep a mobile fallback. A phone hotspot from a pre-installed travel eSIM or from roaming gives you a second route. Whether that route sees Turkish blocks depends on how your carrier routes the data, so do not count on it either way. If you plan to use a Turkish SIM for months, note that a phone brought from abroad works with one for only 120 days, according to Türkiye Today. After that it must be registered, and the same outlet reported the 2026 fee as 54,258 lira.
Sources and dates
- Nomad Istanbul, "What Is Blocked in Turkey", tested 10–11 September 2026.
- Freedom House, Freedom on the Net: Turkey 2025 and Turkey 2024.
- Stockholm Center for Freedom on İFÖD's 2025 EngelliWeb report, June 2026, and İFÖD's own reports.
- İFÖD on the draft VPN licensing rules (in Turkish), 20 April 2026.
- Reuters, via Al-Monitor, 8 September 2025, and Human Rights Watch, 14 October 2022.
- Citizen Lab, "Bad Traffic", March 2018.
- Türkiye Today on the Roblox unblock and the 2026 IMEI fee.