Fiba Varlık Menkul Kıymetler – Scam Misusing the Fiba Name

Not every screen that carries the name of an established capital markets brand belongs to that brand. The scheme run through a fake "e-branch" panel set up under the name "Fiba Varlık Menkul Kıymetler" (or "Fiba Varlık Menkul Değerler") feeds on exactly this gap in trust. The real Fiba group is the party being imitated here; it has no connection with this scheme, and its name is being misused.

🚨 No Such Institution Exists

First, a clear finding: the SPK list of authorised intermediary institutions contains no entity called "Fiba Varlık Menkul Kıymetler" or "Fiba Varlık Menkul Değerler". The real entity on the list has a different corporate name, and that institution has nothing to do with this scheme.

The name was not chosen by chance. The brand of a well-known financial group was combined with words common in capital markets ("varlık" for assets, "menkul kıymetler" / "menkul değerler" for securities), producing a name that sounds like the title of an authorised institution but has no entry in any register. More recently the scheme has added a claim of a link with the "Gelecek Varlık Fonu" (Future Wealth Fund); the aim is to create the impression that the platform works with a state-backed fund and so to increase trust.

🖥️ The Fake "E-Branch" Pattern

The scheme sends users to addresses and a mobile app that look like a real banking screen:

• sube.fibaborsamarket.com
• fibavarlikborsamarket.com

This pattern, the name of a well-known institution plus a "branch/e-branch" prefix, is a method repeated with the same template in Türkiye. The user believes the screen they log in to is the investment firm's own system, when in reality they only see the scheme's own database. The balance shown in the panel is a figure that the operators can raise or lower at will: the initial deposit is shown growing several times over in a short period to encourage more money to be paid in.

🗓️ The Domain Names Reveal the Timeline of the Operation

Both domain names were registered in spring 2026, one in March and the other in April. Both were registered through the same overseas registrar, using the same pair of name servers, with the registrant hidden. This shows that the two addresses are two legs of a single operation.

There are only a few weeks between the registration of the domain names and the start of transactions; the story of an established corporate history has no technical basis at all.

🔗 From Telegram to WhatsApp

Targets do not reach the panel directly; they come through Telegram groups where stock tips are shared. The groups identified are:

• "Borsa Konseyi T. C."
• "Premiu Point Phot"

In the new wave the chain has grown by one more step: people first contacted on Telegram are soon taken into WhatsApp groups, where they are invited to join the "Fiba Varlık Menkul Değerler" platform. The change of channel keeps contact alive if the first group is shut down after complaints, and moves the target into a more closed environment that is harder to monitor.

🎭 The "Institution Specialist" and "Finance Officer" Roles

Communication in the groups does not run through a single person; the roles are divided:

• Investment adviser: Shares stock and "global trading" tips and promises high returns.
• Institution specialist: Manages the account opening and guides the transactions one to one.
• Finance officer: Steps in at the withdrawal stage and conveys payment demands justified by tax and blocks.

Payments are requested not into an investment account but as bank transfers to different company accounts on different dates, with the description "investment advisory". None of these accounts carries the corporate name of the imitated institution. At an authorised intermediary institution, client money goes to an investment account opened in the client's name and to the institution's own corporate name; a transfer to a third-party company account falls outside this route.

💸 The Tax and "MASAK/BDDK Block" Pretext

In the new wave the withdrawal barrier has become a two-stage script:

This script is deliberate: the names of MASAK and BDDK are used to give the target the impression that an official procedure is under way. Yet neither MASAK nor BDDK asks a person to pay "tax" to lift a block on an account, and no official body has such a payment made to an unknown person over WhatsApp. Details of a similar script are covered in our article on MASAK notifications and account blocksTR.

🚪 Exit Scenarios

The scheme uses several scenarios to cut off contact when the target stops paying:

• "App update": The account was closed and contact was cut off after the target was told an update would be carried out on a certain date. When the same lines were later reached, the person using the line introduced themselves under a different name and said they had "just got the number".
• Removal from the group: A target who refuses an extra payment is removed from the Telegram and WhatsApp groups, and access to the app is then closed.

Disposing of numbers and replacing them, and clearing out the groups, shows that these schemes burn their contact layer on a regular basis.

🇹🇷 Authorisation Check

This scheme is not authorised in Türkiye by SPK. However familiar an institution's name may sound, what matters is whether its full corporate name appears exactly in the SPK list of authorised intermediary institutions. A similar name is not enough; it must match the name on the list letter for letter.

🔗 Other Schemes Using the Fiba Name

⚖️ The Legal Process

Collecting money through a fake panel using the name of a well-known institution is assessed under the aggravated forms of qualified fraudTR. The company accounts to which the payments were directed are the starting point for an asset investigationTR and for the process of recovering money sent by bank transfer and EFTTR. For detailed information and legal support, you can contact Savun Law & Consultancy.

❓ Frequently Asked Questions