Buying a Turkish e-commerce business looks quick from the outside. The storefront is live, orders are moving, and the seller can show a clean dashboard. The risk sits underneath: marketplace dependency, payment friction, ETBİS status, customer-data handling, and whether the legal company behind the store is as tidy as the revenue chart. If you want the adjacent M&A groundwork first, keep Corpenza's pieces on share purchase versus asset purchase, legal due diligence, and escrow structures next to this playbook.
E-commerce deals also create a false sense of portability. A brand may move easily. A payment setup, domain stack, ad account history, marketplace rating, or customer database often does not.
What makes an e-commerce acquisition in Turkey different from a standard SME deal?
The main difference is that the asset base is operational and digital at the same time. You are not only buying a company. You are testing whether traffic sources, seller accounts, payment flows, customer permissions, warehouse routines, and legal records will still hold together once control changes. In weak files, the handover breaks long before the SPA starts to matter.
Turkey's foreign-investor rule itself is straightforward. Invest in Türkiye states that international investors are subject to the same rights and liabilities as local investors. That helps on the ownership side. It does not reduce the need to inspect how the online business actually trades day to day.
Should you buy the shares or carve out the digital assets?
A share deal is usually cleaner when the value sits inside one operating company with contracts, staff, payment relationships, and a working fulfillment rhythm. An asset-heavy approach deserves a serious look when the attractive pieces are the brand, domain, stock, and customer acquisition channels, while the seller's company also carries old tax noise, weak bookkeeping, or side businesses you do not want.
The answer turns on transfer friction. Marketplace seller accounts may have change-of-control rules. PSP and bank merchant agreements may need notice or re-underwriting. Software licences, warehousing contracts, and agency mandates may not follow the assets automatically. That is why the structure choice has to be made with the live operating stack in view, not from a template.
What should be checked before a term sheet or SPA is signed?
Start with concentration risk and proof of earnings quality. Then go straight into the operating rails that actually keep orders flowing: domain ownership, analytics access, ad-account control, marketplace rankings, chargeback history, refund patterns, supplier terms, stock-age profile, and warehouse error rates. If those records are thin, the seller is asking you to trust a story rather than a business.
The company file has to match the commercial story. The Ministry of Trade's trade-registry page describes the trade registry as the public state register for information that third parties need to know. If the shareholder history, signatory authority, registered amendments, or manager records do not line up, pause before drafting becomes expensive.
Why do ETBİS and e-commerce compliance matter in diligence?
They matter because a healthy storefront is still a regulated storefront. The official ETBİS page says e-commerce service providers and intermediary service providers must register through e-Devlet before starting activity. The Ministry's e-commerce legislation page also points buyers to the 6563 framework, the 2022 e-commerce regulation, and the ETBİS notification regime. A buyer should confirm whether the target's registration, disclosure, and messaging practices were kept in order while the business grew.
This is where many small acquisitions wobble. Founders often know sales better than compliance. So check whether the active domains and mobile apps match the ETBİS record, whether communication-consent handling is documented, and whether platform or marketplace terms created obligations the seller never formalised.
How should customer data and marketing consent be reviewed?
Treat customer data as a real deal item. Turkey's Personal Data Protection Law No. 6698 applies to natural or legal persons processing personal data and requires data to be processed lawfully, for specified purposes, and in a relevant and proportionate way. For an e-commerce target, that means the buyer should understand what data were collected, why they were collected, how long they were retained, who received them, and whether any breach history exists.
The registry layer matters too. The By-Law on the Data Controllers' Registry says controllers under a registration obligation must register before processing starts, and controllers not established in Türkiye register through a representative. That does not mean every buyer automatically has the same filing posture on day one. It does mean a cross-border acquisition should map data-controller roles, VERBİS status, processors, and handover mechanics before closing.
How do MERSİS, registry steps, and merger-control timing affect closing?
The registration leg can move quickly once the file is ready, but e-commerce deals still need sequencing. Invest in Türkiye states that trade-registration transactions must be fulfilled through MERSİS, and the official MERSİS platform describes the system as the electronic environment for company registration, amendment, and deletion processes. That gives buyers a clean procedural path after signatures and conditions precedent are ready.
Competition screening belongs near the start. Article 7 of Act No. 4054 covers acquisitions of assets, shares, or control rights that may significantly lessen competition, and the Competition Authority's 11 February 2026 update raised the single, Türkiye, and global turnover thresholds to TL 1 billion, TL 3 billion, and TL 9 billion, while keeping a TL 250 million single-threshold test for technology undertakings based in Türkiye. Even where filing is not triggered, the threshold check should be done early, not after everyone is committed to a closing date.
What belongs on the acquisition checklist for a Turkish e-commerce target?
A good checklist is short enough to run in a live deal room. It should force hard questions quickly.
- Confirm where revenue really comes from: brand search, paid traffic, marketplaces, affiliates, or one dominant channel.
- Match legal ownership with the trading stack: company, domain, marketplace accounts, merchant accounts, software tools, and stock.
- Check ETBİS status, customer-facing disclosures, consent handling, and data-processing hygiene before assuming the database is transferable value.
- Review refund rates, chargebacks, stock ageing, supplier concentration, and warehouse accuracy. Those figures expose operational quality faster than a polished sales deck.
- Screen merger control, contract consents, and post-closing registry steps before signing momentum makes the team careless.
- Turn major findings into real SPA mechanics, price adjustment, escrow, indemnity, or a clear walk-away point. Then line up the handover with Corpenza's corporate services team.
And keep one practical rule in mind. If the seller cannot hand over access cleanly, the transaction is not simple, no matter how attractive the headline multiple looks.
FAQ about acquiring a Turkish e-commerce business
Can a foreign buyer own 100% of a Turkish e-commerce company?
In ordinary cases, yes. Invest in Türkiye states that international investors and local investors are subject to the same rights and liabilities. Sector-specific restrictions still need a separate check.
Is ETBİS only an administrative detail?
No. The official ETBİS page says registration is required before activity starts for relevant e-commerce service providers and intermediary providers. A missing or mismatched record is a real diligence signal.
Can the customer database be treated as a freely transferable asset?
No. The buyer should review the Law No. 6698 posture, consent flows, processor chain, retention logic, and any breach history before valuing the database aggressively.
Do digital businesses avoid classic M&A timing issues?
No. E-commerce deals still run through structure choice, contract consents, registry steps, and sometimes merger-control screening. The speed of the storefront does not remove those layers.
What does Corpenza usually coordinate in these deals?
Corpenza can connect the diligence file, registry path, tax and compliance checks, and the operational handover plan. If you are evaluating a target now, start with a direct conversation before the LOI becomes too specific.
This is general information, not legal or tax advice; rules change and depend on your situation.
