Unauthorized $603 Credit Card Charge via Iyzico–Kiwi.com

On December 31, 2025, at 3:25 PM, an unauthorized charge of $603 was made on my Yapı Kredi Bank credit card without my knowledge or consent. The transaction appears on my statement as “Iyzico – Kiwi.com” and is currently in pending (authorization) status. As soon as I noticed this transaction, I contacted my bank, blocked my card, and submitted a formal dispute request. The bank informed me that if the transaction is cancelled by the merchant, the refund can be processed immediately, but otherwise the dispute process may take several weeks.

For this reason, I attempted to contact Kiwi.com, the company listed for the transaction. However, there is no valid phone number, physical address, support email, or any reachable customer service channel in Turkey. In short, there is no identifiable or reachable merchant. Despite this, the company is still able to process credit card transactions in Turkey using Iyzico’s payment infrastructure.

In my conversations with Iyzico, I was told that they are only an intermediary, and that the cancellation must be handled directly by Kiwi.com. However, for a company to operate in Turkey using a local payment provider, it would reasonably be expected to have at least a valid address, reachable phone number, and tax identification details. Despite this, Iyzico stated that they do not have this information in their system and repeatedly directed me to Kiwi.com’s website to find contact details. Even though I clearly stated multiple times that no phone number or contact information exists on the website, Iyzico continued to redirect me to a non-existent communication channel, while also admitting during the calls that they themselves do not have any contact details for the merchant.

In summary, Iyzico is avoiding responsibility for a company using its infrastructure and leaving the consumer alone with an unreachable and effectively non-existent seller. The fact that a major payment service provider allows such a lack of oversight and accountability for merchants using its system represents a serious risk to consumer security.

Within this context, my demands are as follows:

Immediate refund of the unauthorized $603 charge,

Public disclosure and clarification by Iyzico regarding merchants that use its infrastructure without a verifiable presence in Turkey,

Assumption of responsibility by Iyzico, and

Notification of the relevant regulatory and legal authorities regarding this issue.

Otherwise, I will proceed with formal complaints to the Banking Regulation and Supervision Agency (BDDK), the Consumer Arbitration Committee, and the judicial authorities.