iyzico or PayTR? A guide to payment integration for e-commerce in Turkey

Short answer: for small and mid-sized online stores, licensed payment institutions such as iyzico or PayTR are a fast, practical start; at high volume, a bank's virtual POS can be cheaper. The right choice depends on revenue, installment needs, marketplace model and your technical setup.

Three ways to accept online payments in Turkey

Payment institution (iyzico, PayTR, etc.): intermediaries licensed by the Central Bank of the Republic of Turkey. Applying and setting up is relatively quick, and one integration accepts cards from every bank.
Bank virtual POS: a direct agreement with a bank. Rates can improve with volume, but the application and integration take longer.
Selling on marketplaces: platforms like Trendyol or Hepsiburada collect the payment; you don't need payment infrastructure, but commission and the customer relationship stay with the platform.

What to compare between iyzico and PayTR

Commission rates and payout times change often, so get current offers directly from the providers. Compare installment options and who bears the installment cost, payout time, refund and cancellation flows, marketplace (sub-merchant) support, pay-by-link and recurring payments, and the quality of ready-made plugins (WooCommerce, etc.) and the test environment.

What you need to apply

Providers usually ask for a registered business (sole proprietorship or company), tax certificate, signature documents and bank details. Your site is also checked for a distance sales agreement, preliminary information form, return policy, privacy notice and contact details — preparing these upfront speeds up approval.

Two ways to integrate

Hosted payment page / iFrame: card details are entered on the provider's page and never touch your server — the fastest option with the lowest security burden.
Custom API integration: a fully branded checkout with more flexibility, but more development time and more security responsibility.

Security steps you must not skip

Never confirm a payment based only on the browser redirect; verify the server-to-server notification (callback/webhook) with its signature or hash, and confirm the order only after that. Guard against duplicate notifications and test success, failure, refund and cancellation scenarios in the sandbox before going live. Keep 3D Secure on.

Don't forget accounting and invoicing

Every successful payment should flow automatically into the order, the invoice and stock. Otherwise manual tracking becomes unmanageable as orders grow. See our e-invoice guide for the invoicing side.

We build payment, accounting and shipping integrations into a single flow on e-commerce sites. Let's talk about your project →