TC Kimlik Numarasi Safe Sharing Guide: Protect Your Turkish National ID
Learn who actually needs your TC Kimlik Numarasi, how to share it safely, what happens when it leaks, and how to protect yourself from identity theft in Turkey.
TC Kimlik Numarasi Safe Sharing Guide: Protect Your Turkish National ID
Your TC Kimlik Numarasi (TCKN) is an 11-digit number that follows you from birth to death. It is the key to nearly every interaction with government services, banking, healthcare, insurance, and employment in Turkey. Yet many people casually share it through WhatsApp messages, unencrypted emails, or even verbally in public.
This carelessness has consequences. Understanding when your TCKN is truly needed, who should have it, and how to share it safely can prevent serious identity-related crimes.
What Is the TC Kimlik Numarasi?
The TC Kimlik Numarasi is Turkey's national identification number, assigned to every Turkish citizen. Unlike some countries where ID numbers are used only for government purposes, the TCKN is required for:
- Opening bank accounts
- Signing employment contracts
- Accessing healthcare (SGK)
- Registering for utilities (electric, water, gas, internet)
- Filing taxes
- Renting property
- Registering a phone SIM card
- Making purchases over certain amounts
This ubiquity means your TCKN is stored in dozens of databases, each of which is a potential breach point.
Who Actually Needs Your TCKN?
Not everyone who asks for your TCKN actually needs it. Here is a breakdown:
| Requester | Legitimately Needs TCKN | Notes |
|---|---|---|
| Government agencies | Yes | e-Devlet, courts, SGK, GIB |
| Banks | Yes | Required by BDDK regulations |
| Employers | Yes | For SGK registration and tax withholding |
| Hospitals/Clinics | Yes | For SGK billing and medical records |
| Landlords | Sometimes | For the rental contract, not for initial viewing |
| Telecom providers | Yes | SIM card registration (BTK requirement) |
| Insurance companies | Yes | For policy issuance |
| Online shopping sites | Rarely | Only for invoice purposes (fatura), not for browsing |
| Random websites | No | Almost never legitimate |
| People on social media | No | Never share your TCKN on social media |
| Phone callers | No | Never give your TCKN to someone who calls you |
Red Flags: When You Should NOT Share Your TCKN
- Someone calls claiming to be from a bank and asks for your TCKN "for verification"
- An email or SMS asks you to "confirm" your TCKN by clicking a link
- A landlord asks for your TCKN before you have even visited the property
- An online form asks for your TCKN for a service that does not require it (like a newsletter signup)
- Someone asks for your TCKN and your mother's maiden name together (this combination unlocks many systems)
What Happens When Your TCKN Is Leaked
A leaked TCKN alone is dangerous, but when combined with other personal data (name, date of birth, mother's maiden name), it becomes catastrophic:
Immediate Risks
- Unauthorized bank account opening: Scammers can open accounts in your name for money laundering
- Phone line registration: Fraudulent SIM cards registered to your TCKN for scam operations
- Loan fraud: Personal loans or credit cards applied for in your name
- SGK fraud: Fake employment registrations
- Property fraud: Attempted transfers using forged documents linked to your TCKN
Long-Term Consequences
- Credit score damage: Unpaid fraudulent debts appear on your credit history
- Legal complications: Being connected to criminal activities conducted under your identity
- Tax liabilities: Income reported under your TCKN from phantom employment
- Insurance issues: False claims affecting your insurance history
How to Check If Your TCKN Has Been Misused
Take these steps to audit your identity:
| Service | What to Check | How to Access |
|---|---|---|
| e-Devlet | Login history, registered services | turkiye.gov.tr |
| KKB (Credit Bureau) | Credit inquiries, open accounts | findeks.com |
| SGK | Employment registrations | e-Devlet > SGK Hizmet Dokumu |
| BTK | Phone lines registered to your TCKN | e-Devlet > Hat Sorgulama |
| GIB | Tax filings under your name | e-Devlet > Vergi Levhasi |
| Banks | Open accounts you did not create | Contact each bank individually |
How to Share Your TCKN Safely
There are legitimate situations where you need to share your TCKN — a new job, a rental application, a bank procedure. The key is how you share it.
Methods Ranked by Security
| Method | Security | Risk Level |
|---|---|---|
| In person with ID card | Highest | Low — you control the interaction |
| LOCK.PUB encrypted memo | High | Low — password-protected, expires automatically |
| Encrypted email (PGP/S-MIME) | High | Medium — requires technical setup |
| Phone call (you initiated) | Medium | Medium — could be overheard |
| WhatsApp message | Low | High — persists in chat history, cloud backups |
| SMS | Very Low | Very High — unencrypted, stored by carrier |
| Email (unencrypted) | Very Low | Very High — passes through multiple servers |
The LOCK.PUB Method
When you need to send your TCKN digitally — for example, to a new employer's HR department or to a landlord for a rental contract:
- Go to LOCK.PUB and create an encrypted memo
- Enter your TCKN and any additional required information
- Set a password and share it with the recipient through a different channel (e.g., phone call)
- Set an expiration time (e.g., 24 hours)
- Share the link with the recipient
The TCKN is never stored in anyone's chat history, email inbox, or cloud backup. Once it expires, it is gone.
Protecting Your TCKN in Daily Life
Physical Security
- Do not carry your Nufus Cuzdani (old paper ID) unless specifically needed — use T.C. Kimlik Karti instead
- Never post photos of your ID card on social media (even "accidentally" in the background)
- Shred documents containing your TCKN before discarding them
- Cover your TCKN when showing your ID for age verification (they only need to see your date of birth)
Digital Security
- Do not store your TCKN in unencrypted notes, screenshots, or cloud documents
- Do not autofill your TCKN on websites
- Use strong, unique passwords for services that store your TCKN (especially e-Devlet and banking)
- Enable two-factor authentication on all critical accounts
- Monitor your e-Devlet login history monthly
Social Security
- Do not share your TCKN verbally in public places (cafes, banks with waiting areas)
- Question every request for your TCKN — ask why it is needed and what it will be used for
- Educate family members, especially elderly relatives who may not understand the risks
What to Do If Your TCKN Is Compromised
- File a police report (Siber Suclar Burosu or local police station)
- Check your Findeks credit report for unauthorized inquiries
- Check BTK for phone lines registered to your TCKN
- Alert your bank(s) and request additional security measures
- Monitor e-Devlet for unauthorized service registrations
- Consider an e-Devlet password change and switch to Mobil Imza authentication
The Cultural Challenge
In Turkey, there is a cultural tendency to share personal information freely — especially with people in positions of authority. Scammers exploit this by impersonating officials, bank managers, or government workers. Remember: a legitimate official will never rush you, will not ask for your TCKN over the phone, and will provide alternative ways to verify their identity.
Your TCKN is not just a number. It is the key to your identity. Treat it accordingly.
Your TC Kimlik Numarasi deserves the same protection as your bank password. Share it only when necessary, and always through secure channels.
Keywords
You might also like
KVKK Privacy Guide: Your Data Protection Rights in Turkey
Understand your rights under KVKK (Turkish Personal Data Protection Law). Learn how to request data deletion, file complaints, and exercise your privacy rights in Turkey.
Thailand PDPA Privacy Guide: Your Rights Under the Personal Data Protection Act
A practical guide to Thailand's PDPA (Personal Data Protection Act) for individuals. Learn your data rights, how to request deletion, and what companies must comply with.
Browser Fingerprinting: How Websites Track You Without Cookies (And How to Fight Back)
Google now allows browser fingerprinting for advertisers. Learn what browser fingerprinting is, how it identifies you with 99% accuracy, and practical steps to reduce your digital fingerprint.
Create your password-protected link now
Create password-protected links, secret memos, and encrypted chats for free.
Get Started Free