Three suspects, including a former deputy head of Türkiye’s Financial Crimes Investigation Board (MASAK), have been jailed as part of an investigation into alleged political or military espionage involving the agency’s financial intelligence systems.
Former MASAK Deputy Chair Inönü Akgün Alp and agency employees Eda Aydoğan and Güner Eke were arrested as authorities investigate alleged unauthorized access to MASAK’s Integrated Financial Intelligence System, known as EMIS.
The Istanbul Chief Public Prosecutor’s Office is investigating claims that individuals and companies linked to the Gülenist Terror Group (FETÖ) gained influence over the development and maintenance of MASAK’s critical digital infrastructure between 2012 and 2018.
According to findings cited in the investigation, Aydoğan, a former MASAK statistician, allegedly had administrator-level access to an Oracle Exadata database between 2016 and 2019 despite holding no managerial position.
The investigation also found that a security mechanism designed to alert senior officials when financial information belonging to politically exposed persons was accessed was disabled on Sept. 2, 2016.
Investigators allege that thousands of unauthorized searches involving President Recep Tayyip Erdoğan, members of his family and some Cabinet officials were subsequently conducted through EMIS between September 2016 and December 2018.
Financial investigations by police and cybercrime units also uncovered alleged links between FETÖ and subcontracted technology companies responsible for MASAK’s software infrastructure and database management.
Türkiye’s Savings Deposit Insurance Fund (TMSF) was appointed as trustee to several technology companies, whose partners included Hakan Çiçek, group's civilian imam accused of playing a key role in the 2016 coup attempt detained at Akıncı Air Base, as well as other FETÖ operatives.
According to official reports cited in the investigation, the companies channeled TL 210 million ($4.3 million) to the group through public contracts.
Investigators also found that audit logs designed to record who accessed the systems had been disabled and identifying data deleted. The network is accused of erasing digital traces of unauthorized access involving senior government officials, including the president.
Investigators further allege that audit logs identifying users accessing the systems were disabled or deleted, making it more difficult to trace unauthorized searches.
Separately, witness testimony included in the case file alleges Aydoğan was involved in distributing questions ahead of a 2013 public personnel examination to individuals linked to FETÖ.