New regulations regarding age verification on social media platforms in Turkey have come into effect, sparking security warnings about attackers exploiting this regulatory change to carry out digital fraud operations. Ergün Kılıç, president of the Consumer Rights Association, warned of phishing attempts targeting users via fake messages and emails claiming the necessity of immediate verification to avoid account closures.
Digital Verification Mechanism and Privacy Protection
Kılıç explained that the age verification process will not take place via external links or unofficial platforms, but will be conducted exclusively through the official e-Government portal (turkiye.gov.tr) via a tool known as the "Age Verification Indicator" (Yaş Doğrulama Belirteci). Technically, this system is designed to enhance privacy; full personal identity data will not be transferred to social media platforms, but will instead be limited to sending technical information confirming whether the user meets the minimum legal age or not.
Implementation Timeline
According to the new regulations, the first phase of implementation will include newly created accounts on social media platforms. As for existing and pre-existing accounts, users have been granted a grace period extending until March 31, 2027, to complete the verification process, meaning that any messages claiming the necessity of immediate verification under the threat of account closure are necessarily fraudulent messages.
What should one be careful of?
To protect against these attacks, experts emphasized the necessity of following these guidelines:
- Avoid suspicious links: Do not click on any links received via SMS, email, or social media advertisements that request personal data.
- Do not share financial data: Be cautious of any entity requesting credit card information or passwords under the guise of verification fees.
- Documentation and reporting: In the event of encountering a fraud attempt, suspicious messages and accounts must be documented, and the relevant platforms, security authorities, and banks must be notified immediately in the event of material losses.