Garanti BBVA's digital account converts scale into fraud work

Summary

• Garanti BBVA's paid unit is the Turkish retail or SME current account attached to cards, mobile banking, merchant payment services and daily money movement. The customer pays directly through fees, card interest, merchant economics or loan pricing, and indirectly by keeping balances and transactions inside the bank. The substitute is not only another bank app; it is a state bank, a rival private bank, a wallet, cash, a separate acquiring provider or a multi-bank treasury setup.
• The strongest public evidence shows scale and pressure at the same time. Garanti BBVA reported 30.6 million customers, 18.1 million active mobile users, 6,537 ATMs, 23,376 employees and TL 4.8 trillion of consolidated assets at 31 March 2026. It also reported TL 3.16 trillion of customer deposits, 66 percent of assets funded by customer deposits, a 41 percent demand-deposit share, TL 33.6 billion of first-quarter net income, TL 42.9 billion of net fees and commissions and TL 54.3 billion of operating expenses.
• The economic mechanism is the conversion of digital scale into low-cost balances and repeat payment activity, then the defense of that spread against five cost loads: fraud prevention and reimbursement work, call-center and complaint handling, compliance and sanctions screening, inflation-driven deposit repricing, and retention friction when customers can move salary, merchant receipts or cash management to substitutes.
• Public records cannot prove account-level margin, fraud loss, internal uptime, false-positive rates, complaint outcomes or the share of customers who keep Garanti BBVA as their main account after wages or SME receipts arrive. They can prove the size of the public franchise, the product surfaces offered, the regulatory and financial context, the disclosed support volume, the visible app-market signal and the public internet resource surface.

The salary account is an operations bargain before it is a brand choice

Imagine a salaried worker in Istanbul whose employer offers Garanti BBVA for payroll, or a small textile workshop that wants one account for incoming card sales, supplier payments, salary files and a reserve balance. The immediate attraction is obvious: a TL current account can be opened and used through mobile banking, internet banking, ATMs, a communication center and other bank ATMs; Garanti BBVA says the account can support money withdrawal, remittance, EFT, card payments, bill payments and recurring payments. The account also brings a Paracard Bonus debit card. The customer can use FAST and Easy Address for 24/7 interbank transfers, and the bank's mobile page frames the phone as a branch that can be used without visiting a physical office.

That is the customer-facing side. The economic side is more severe. The bank gets a deposit and a stream of payment events. The customer gets convenience, cash access, a card credential, a complaint route, transaction memory and a regulated balance sheet standing behind the screen. When the account works, the worker keeps wages in the bank instead of withdrawing cash on payday. The merchant settles card receipts, pays suppliers digitally and uses the same bank for credit, payroll and tax payments. When the account fails, the same customer has a practical exit: move wages to a public bank, use a rival private bank, keep a second account for salary, rely on a wallet for smaller payments, push merchants toward cash or use a specialist acquiring platform.

The burden transferred to Garanti BBVA is not vague trust. It is operational work. The bank must stop phishing, account takeover and card abuse without blocking legitimate customers. It must answer a call or message when a SIM change, blocked card, disputed purchase or failed FAST transfer interrupts ordinary life. It must screen customers and transactions for anti-money-laundering, counter-terrorist-financing and sanctions risk while not turning every small-business payment into a manual investigation. It must fund loans in an economy where inflation and policy rates keep deposits expensive. It must also keep enough branches, ATMs and human service capacity to reassure customers that mobile banking is not a trap when the screen is unavailable.

The public evidence is useful but incomplete. Official reports, KAP data, the bank's product pages, app listings, central-bank data, BRSA sector data and public internet records can show the size of the account machine and the kinds of work attached to it. They cannot show the internal fraud queue, the exact loss rate, the number of false positives, the seconds of app downtime, the realized margin on a salary account or the churn rate after a merchant dispute. That distinction matters because the account is valuable precisely where public reporting is least granular: in millions of small decisions to keep money inside Garanti BBVA after a wage, card settlement or supplier receipt arrives.

Scale gives Garanti BBVA funding power, but not free funding

Garanti BBVA's account franchise is large enough to matter at system level. Its investor profile describes the bank as Turkey's second-largest private bank, with consolidated total assets of TL 4.8 trillion at 31 March 2026 and BBVA holding 85.97 percent of shares. The same profile says the bank had 30.6 million customers, 23,376 employees including subsidiaries, 789 branches in Turkey, four in Cyprus, one in Malta and 6,537 ATMs. It also says one in every two banking customers in Turkey is a Garanti BBVA customer and that the bank had 18.1 million active mobile users at March-end.

Those figures are the platform on which the digital account earns its keep. In the first quarter of 2026, Garanti BBVA said customer deposits remained the main funding source, funding 66 percent of assets. Customer deposits reached TL 3.16 trillion, and demand deposits accounted for 41 percent of total customer deposits. The deposit mix is central. A current account that retains operating balances is worth more than a one-off mobile login because it can lower the average cost of funding, support liquidity, create cross-sell paths and reduce dependence on wholesale borrowing. A customer who leaves a salary balance for rent, bills, card payments and savings is, from the bank's perspective, a recurring funding source. A merchant who settles card transactions into the same bank creates an operating float and a reason to keep the relationship alive.

The problem is that Turkey's inflation environment turns every balance into a negotiation. The Central Bank of the Republic of Turkey's consumer price table showed annual CPI inflation at 32.11 percent in June 2026, after 32.61 percent in May. Its June monetary-policy summary kept the one-week repo auction rate at 37 percent, the overnight lending rate at 40 percent and the overnight borrowing rate at 35.5 percent. Those rates shape what customers expect from lira balances and what banks must pay to keep deposits from migrating. A free current account with a debit card can acquire the customer, but the customer still asks whether idle money should move into a time deposit, a money-market fund, foreign currency, gold, another bank's campaign or cash.

That is why Garanti BBVA's own first-quarter commentary is important. Management described an upward trend in sector funding costs after early-March developments and expected that pressure to become more visible in the second quarter. BBVA Research's March banking outlook made the same broad point for the sector: high interest rates, controlled credit growth and costly funding keep interest margins under pressure, while fees and commissions remain supportive. The account unit therefore has two sides. It is a cheap-funding machine when wages and SME receipts remain in demand deposits. It is a repricing problem when inflation and high policy rates force the bank to pay more for lira funding or lose operating balances to higher-yielding alternatives.

The sector context reinforces the point. BRSA's May 2026 monthly bulletin showed the Turkish banking sector with TL 51.8 trillion of total assets, TL 26.1 trillion of loans and TL 29.7 trillion of deposits or participation funds. Demand deposits were about TL 11.2 trillion and term deposits about TL 18.5 trillion. Sector non-performing loans were TL 728.8 billion, equal to 2.69 percent of gross cash loans, and the sector's capital adequacy standard ratio was 16 percent. Garanti BBVA is not operating in a small niche. It is competing inside a banking system where deposits, capital, credit-risk provisioning and loan growth limits all influence how valuable a digital current account can be.

Payment activity converts attention into revenue only if the rails stay useful

The account becomes more attractive when it is more than a storage bucket. Garanti BBVA's public product pages describe a bank account connected to debit cards, credit cards, QR payments, FAST transfers, bill payments, internet banking, mobile banking, ATMs, call-center access and merchant products. The TL current-account page says customers can withdraw and deposit cash, make card payments, pay bills and regular payments, access the account through mobile, internet, ATMs, the customer communication center and other banks' ATMs, and open the account from the Account and Card menu in mobile banking. The FAST page says retail customers can use Easy Address to link an IBAN to phone, email, identity, tax or passport information, while corporate customers can link an IBAN to mobile phone, email and tax identity information.

For the customer, that reduces friction. For the bank, it creates fee and data economics. Garanti BBVA's first-quarter 2026 release reported TL 42.9 billion of net fees and commissions, up 41.7 percent from the prior-year period, against TL 54.3 billion of operating expenses. The May 2026 BRSA sector ratio table showed fees, commissions and banking-service revenues equal to 13.39 percent of total sector revenues and 104.88 percent of operating expenses. These figures are not account-specific, but they show why payment activity matters. A bank with a large account base can support profitability not only through interest spread, but through card, transfer, merchant, account-service and banking-service revenues.

Garanti BBVA's position in card payments is part of the same mechanism. The investor profile says it has the largest credit-card platform among peers by credit-card customer numbers, issuing volume and acquiring volume. Its 2025 integrated annual report listed 19.15 million credit cards, 23.39 million bank cards and 870,653 POS terminals at year-end 2025. It also said the digital channel share in non-cash transactions was 98.2 percent, cardless transactions through Garanti BBVA ATMs reached 144 million and QR transactions were 41 percent of total withdrawal and deposit transactions. These are not just digital vanity metrics. They show that the bank's account franchise is tied to customer behavior at the moment money moves.

The SME version is more complex. A microenterprise can use CepPOS to turn an Android smartphone into a contactless POS device for card and mobile-wallet payments. A merchant can use Virtual POS to receive debit and credit card payments in online sales and track online sales and purchase reports. GarantiPay, on the bank's developer portal, lets users complete online or in-app purchases without sharing card information. The Single Page product for microenterprise, SME and commercial customers lets users view Garanti BBVA and other-bank accounts and account activities from one page after authorization. These services make Garanti BBVA more than a deposit receiver; they make it part of the merchant's operating surface.

But every extra payment rail adds operational cost. A QR cash withdrawal, a card-not-present purchase, a merchant dispute, a FAST transfer, a mobile-card selection feature or a third-party merchant integration creates a point where an error or fraud attempt can become a service event. The value of digital scale is therefore conditional. Payments generate fees and strengthen retention when customers believe they can be completed, disputed and explained. They generate workload when the same customer cannot tell whether a blocked payment is a fraud control, a fee issue, a merchant problem, a device problem, an account-status problem or a network interruption.

Fraud work is the hidden cost of a mass digital bank account

Garanti BBVA's own disclosures make fraud an economic issue, not a footnote. The 2025 integrated annual report says the bank addresses external fraud risk through customer protection principles and corporate risk management. It says card transactions, account and POS transactions, and potential attempts in credit-product applications across branches and digital channels are continuously monitored and evaluated. It also says new products and processes are reviewed for fraud risk before rollout and supported by preventive controls, proactive recommendations and corrective actions.

That language is dry, but the numbers are not. Garanti BBVA reported 119 million customer notifications delivered through 39 different studies using 11 methods in 2025. It also reported 121 external-fraud training and awareness initiatives, five new artificial-intelligence and machine-learning analytical models for external fraud decision support, and instant customer notifications through the mobile banking front end. These disclosures do not quantify fraud losses. They do show the scale of the work that sits behind a card, POS and mobile-account franchise. If a bank must send 119 million customer notifications about fraud and awareness, fraud is not an occasional exception. It is an industrial operating line.

Fraud is costly because it collides with convenience. A salary customer wants a FAST transfer to clear instantly. A merchant wants a card settlement or virtual POS transaction to proceed without losing a sale. A bank wants to stop mule accounts, phishing, social-engineering transfers, account takeover, counterfeit merchant behavior, unauthorized card use and suspicious loan applications. The tighter the controls, the higher the risk of false positives and customer frustration. The looser the controls, the higher the risk of losses, reimbursement pressure, regulatory scrutiny and reputational damage.

Garanti BBVA's public security pages show the customer-facing side of this work. The bank warns about fake emails, fake SMS messages, social-media accounts, fake websites reached through search engines and requests for card details, internet-banking passwords, call-center passwords and one-time SMS codes. It promotes mobile notification login as an alternative to SMS PIN confirmation and describes security practices around digital banking. These pages are not incident statistics. They are evidence that the bank must train customers to distinguish the bank from impersonators while asking those same customers to trust mobile alerts, contact-center flows and digital credentials.

The card and merchant side has a different shape. GarantiPay is designed to complete purchases without sharing card information. The SMART feature, launched for NFC, QR and GarantiPay payments on Garanti BBVA Mobile and BonusFlas, selects or recommends the card that gives the customer more benefits. Bonus Platinum Dynamic Card introduced a CVV that renews every hour. Each feature can increase payment activity and customer engagement. Each also adds a control problem: the bank has to know when a payment is beneficial personalization and when it is suspicious behavior, when a device is the customer's phone and when it is an attacker-controlled path, and when a merchant transaction deserves friction.

The customer does not price those tradeoffs in the language of fraud models. The customer prices them in inconvenience and loss. A false block at a supermarket, a delayed payroll transfer, a disputed online purchase, a cashless merchant unable to settle, a card credential exposed through phishing, or a call-center queue after an app alert is the lived cost. Garanti BBVA's unit economics improve if fraud controls lower actual losses without increasing support contacts enough to damage retention. They deteriorate if security work becomes a reason to maintain a second bank account.

Support workload is a margin line, not a soft service metric

Support scale is visible in Garanti BBVA's integrated report. The bank reported 10.8 million feedback items received in 2025, an 11 percent change in customer complaints, 121.0 million contacts handled by the Customer Contact Center, an 81.1 percent customer-contact-center service level and a 98.6 percent call response rate. It also reported 73.4 million interactions with UGI Smart Assistant. The investor profile says UGI reached 8.8 million customers via mobile channels as of the first quarter of 2026, while a BBVA digital-banking article said Ugi supported more than seven million customers in more than 70 million conversations.

Those figures are not merely customer-experience claims. They are cost and retention signals. A digital account lowers cost when customers solve routine transfers, card settings, bill payments, loan applications, cash-flow tracking and account opening without a branch. It raises cost when the same digital base produces millions of chats, calls, password resets, payment disputes, app problems, fee questions and fraud alerts. A support operation that handles 121 million contacts is part of the product, not an after-sale courtesy.

This matters for the salary customer and SME because failures are time-sensitive. A worker whose salary card is blocked cannot wait for a branch appointment. A shop whose virtual POS settlement or contactless collection fails may lose a day's liquidity. A sole trader whose customer disputes a card payment needs a route to documentation and response. A family receiving a pension or remittance needs to know whether a delay is the sender, the bank, the payment rail or a fraud check. If support is fast, the customer stays. If support is slow, the customer does not need to close the account to punish the bank; the customer can quietly move the main balance elsewhere.

Garanti BBVA's digital design is meant to reduce that risk. The mobile app advertises more than 1,000 transaction options on the App Store and supports retail, corporate and SME customers. The mobile-banking page says a password can be obtained through card information or NFC identity-card information, and that a video call can be used if the customer lacks NFC capability. The customer communication center provides domestic, international, WhatsApp chatbot and SME center lines. The account page says the current account can be accessed through multiple channels 24 hours a day. The structure is intentionally redundant: phone, app, internet, ATM, branch and chat all substitute for one another.

Yet redundancy is not free. Branches, ATMs, contact centers, digital assistants, fraud alerts and app redesigns all sit in operating expenses. Garanti BBVA's first-quarter operating expenses rose 56.6 percent year-on-year to TL 54.3 billion, with human-resources cost up 48.3 percent and other operating expenses up 61.6 percent. Inflation explains part of that increase, but it does not erase the account-level issue. A large digital customer base is attractive only if automation absorbs enough work to keep support and operations from consuming fee and spread income.

App-market signals should be treated as color, not proof. Google Play showed Garanti BBVA Mobile at 4.6 stars, 2.24 million reviews and 50 million-plus downloads when retrieved for this research. Apple's U.S. App Store showed 4.8 out of 5 from about 14,000 ratings and described more than 1,000 transaction options. Review platforms and complaint sites contain both praise and complaints, including praise for ease of use and support, and complaints around unauthorized activity, campaign rewards, branch behavior, disputed transactions and difficulty reaching a representative. These signals are self-selected and cannot measure reliability. They do show that for a mass-market bank, support experience is part of customer acquisition and churn.

Compliance turns a simple account into repeated checks

A bank account is not a wallet balance with a branch logo. Garanti BBVA is a regulated bank whose public reporting is shaped by the Banking Regulation and Supervision Agency, the Capital Markets Board, KAP disclosures, central-bank policy, data-protection rules, anti-money-laundering expectations and international banking standards. Its annual report says the report was prepared under BRSA and CMB requirements. Its governance materials list policies including general anti-money-laundering and terrorist-financing policy, anti-corruption policy, data privacy and protection policy, business-continuity policy and supplier code of conduct. The 2025 report also says supplier evaluation covers financial, legal, labor, reputational, anti-corruption, anti-money-laundering, concentration, country, sustainability, data-protection and customer-protection factors.

For the account unit, compliance cost appears in ordinary decisions. A customer opening an account through mobile must be identified. An SME receiving e-commerce payments through Virtual POS must be underwritten and monitored. A merchant using CepPOS still sits inside acquiring, tax and transaction-risk rules. A FAST transfer through Easy Address needs identity mapping. Cross-border payments, foreign-currency accounts, correspondent banking, sanctions screening and suspicious-transaction monitoring all add cost even when the customer thinks of the product as a simple bank account.

The sanctions and compliance topic is important because Turkey sits between domestic lira banking, European parent ownership, cross-border trade, tourism, migrant work, regional commodity flows and high scrutiny of financial crime. Public records do not show Garanti BBVA's internal sanctions queues or correspondent-bank decisioning. They do show a bank that must maintain institutional legitimacy while serving retail customers, SMEs, corporates, payment systems and international subsidiaries. BBVA ownership raises the governance bar in one sense: group standards, European investor scrutiny and parent-level risk culture matter. It also makes the Turkish franchise more exposed to global expectations around sanctions, data governance and financial-crime controls.

Compliance creates customer friction when it is visible. A blocked account, delayed transfer, merchant onboarding request, extra document demand, suspicious transaction review or changed card limit can feel arbitrary to a salary worker or small business. But weak compliance is more expensive in the long run. It can lead to regulatory penalties, correspondent constraints, fraud losses, reputational harm and forced remediation. The bank therefore has to turn compliance into a background function: present enough controls to satisfy regulators and counterparties, but not so much friction that account holders keep only the minimum balance and do real work elsewhere.

The same tradeoff applies to public-sector continuity. Customers use banks as a gateway to e-government, tax, utility and daily public obligations. Garanti BBVA's internet-banking page says customers can log in to the e-Government Gate through Garanti BBVA Internet Banking and can pay various bills and public-linked obligations through digital channels. That increases the account's utility and retention. It also increases the burden: if the bank is an access path to public services, failed identity, password or transaction flows carry more weight than a failed shopping feature.

Inflation makes retention fragile even when the app works

High inflation changes how customers judge a bank account. In a low-inflation environment, convenience can dominate. In Turkey's 2026 environment, customers also ask whether cash left in a current account is losing value too quickly. The central-bank CPI table, with annual inflation above 30 percent in the first half of 2026, and the 37 percent policy rate make opportunity cost explicit. A customer may love the mobile app and still sweep balances into time deposits, funds, foreign currency, gold or another bank's promotional rate. A merchant may settle into Garanti BBVA and still move excess cash daily if a rival provides better return or credit terms.

Garanti BBVA's demand-deposit share therefore has economic meaning. A 41 percent demand-deposit share in total customer deposits at March 2026 indicates a valuable pool of low-cost or lower-cost funding, but it also represents money that can move. Salary deposits are especially mobile. They arrive on a predictable date. A bank can attach card usage, automatic bills, credit-card repayments, overdraft lines and savings offers. But the customer can also receive wages, pay immediate obligations and transfer the remainder to another institution within minutes. In a high-rate environment, the daily habit is more important than the formal account relationship.

For SMEs, the sensitivity is sharper. A small merchant holding inventory in an inflationary economy must protect working capital. Cash in a non-interest-bearing account may be necessary for payroll and supplier payments, but it is costly if left idle. The merchant may use Garanti BBVA for POS and Virtual POS, but maintain another bank for higher deposit rates, a state-bank loan or a specialized payment provider. The account must therefore solve several jobs at once: receipt of sales, settlement, bill payments, payroll, tax, supplier transfer, cash withdrawal, financing, card acceptance and dispute handling. The more of those jobs Garanti BBVA solves, the more operating balances it keeps.

This is where support, fraud and compliance return to funding economics. A bank can advertise a zero TL account management fee for domestic TL current accounts and a fast mobile opening journey. But if a fraud block delays a supplier payment, a customer-service queue leaves a merchant uncertain, or a compliance request interrupts settlement, the customer experiences a cost greater than the account fee. In a high-inflation market, customers are already looking for yield and liquidity. Service friction gives them an additional reason to diversify away.

Garanti BBVA's public disclosures show it understands this relationship. Its investor materials repeatedly connect digital channels, customer growth, demand deposits, fee generation and disciplined capital management. The digital-banking article says 99 percent of bank transactions and 86 percent of product sales use digital channels. That scale can reduce marginal cost and increase convenience. It can also concentrate failure. If mobile is where most daily banking happens, a small deterioration in login, payment completion, fraud false positives or support response can affect millions of customers faster than branch-era service problems.

State banks, rival private banks and wallets keep the account honest

Garanti BBVA's account competes in layers. A state bank may offer perceived safety, public-sector salary relationships, branch reach or policy-linked credit. A rival private bank may offer a better mobile experience, a stronger merchant package, a cheaper transfer path or a deposit campaign. A wallet app may win low-value transfers, QR payments or young users who care less about a full bank relationship. Cash remains a substitute for customers who distrust card fees, fraud controls or digital outages. A multi-bank treasury setup lets an SME separate payroll, POS settlement, deposits and credit across institutions.

Garanti BBVA's response is breadth. It claims leading private-bank shares in TL loans, TL customer deposits, consumer loans including credit cards, credit-card customer numbers and volumes, and SME loans. That matters because an account is stickier when it sits next to credit and payments. A salary customer who uses a credit card, debit card, savings product and mobile bill payments is harder to lose than a customer who only receives wages. An SME that uses POS, Virtual POS, cash management, online banking, credit, account aggregation and payroll is harder to move than a merchant that only receives one settlement stream.

But breadth also raises comparison points. A customer can like the credit card and dislike the call center. A merchant can like Virtual POS and dislike settlement documentation. A salary worker can use the debit card but keep savings at a state bank. A company can use Garanti BBVA for acquiring but maintain a second bank for payroll resilience. Digital banking lowers switching friction because the customer's alternatives are visible in the same phone. The Single Page product even acknowledges a multi-bank reality by letting microenterprise, SME and commercial customers view other-bank accounts and activities inside Garanti BBVA Internet after authorization.

This means the strongest competitive moat is not the app by itself. It is repeated successful completion of ordinary money tasks. Salary arrives on time. The app logs in. FAST transfers work. The card spends. QR cash withdrawal works at the ATM. A suspicious alert is understandable. A disputed merchant transaction has a path. A business account shows balances and activities clearly. A support contact resolves the issue. Each success keeps the customer from testing the substitute. Each failure teaches the customer why a second bank may be necessary.

The state-bank substitute is particularly important in Turkey because public institutions can anchor salary and pension flows, and customers may perceive them as safer during stress. Garanti BBVA cannot rely only on private-bank polish. It must prove that scale brings resilience rather than bureaucracy. Its branch and ATM network, BBVA ownership, KAP visibility, BRSA-supervised capital and deposit base all support institutional legitimacy. But the day-to-day retention mechanism is smaller: the account must be boring at precisely the moments when money is urgent.

SME service continuity is where account economics become visible

For a small business, the bank account is a working-capital instrument. The owner does not buy a "digital banking experience" in the abstract. The owner buys the ability to collect card payments, pay suppliers, cover wages, move money after hours, track account activity, handle tax and bill payments, apply for credit, manage cash and recover from a disputed or failed transaction. Garanti BBVA's SME and corporate product pages show that the bank is trying to own that workflow: CepPOS for contactless payments on Android phones, Virtual POS for online card payments, Single Page for multi-bank account visibility, cash management products, SME loans and digital channels for applications and transactions.

The economic upside is strong. SME accounts can bring deposits, merchant acquiring, transfer fees, loan demand, card products and payroll relationships. An SME owner who uses Garanti BBVA for both sales collection and wages may introduce the bank to employees as salary-account customers. A merchant whose card payments settle into Garanti BBVA may later borrow from Garanti BBVA because the bank can observe cash flows. A business that uses digital account aggregation may keep the Garanti BBVA interface open even when other-bank accounts are involved.

The downside is operational concentration. Merchants are sensitive to settlement delays because they owe suppliers and employees in cash terms. They are sensitive to fraud because card disputes, social engineering and account takeover can affect thin margins. They are sensitive to compliance because documentation and account reviews can interrupt activity. They are sensitive to support because a failed POS or virtual POS transaction is a sale lost, not a mild inconvenience. For SMEs, service continuity is a revenue issue.

Garanti BBVA's first-quarter and annual disclosures give hints of how much work sits behind this customer base. The bank says it has a leading private-bank position in SME loans and commercial banking NPS, and it reported a 24.5 percent SME loan market share among private banks. The 2025 report's customer-contact, complaint, feedback and UGI interaction figures show a massive service operation that includes but is not limited to SMEs. The public record does not disclose SME-specific failed-payment rates, merchant dispute volumes, POS outage minutes or settlement times. Those would be the decisive metrics for this unit.

Because those metrics are missing, the analysis has to stay bounded. The bank's product surface proves that it offers the rails an SME would need. Its scale proves it has a large customer and payments base. Its financials prove that deposits, fees, expenses, capital and profitability are material. Its public support figures prove that the service machine is large. What remains unknown is whether the marginal SME account adds more low-cost funding and payment revenue than it adds fraud, support, compliance and credit-risk workload.

Public technical records show reachability, not resilience

Public resource records add one narrow kind of evidence. TRABIS WHOIS showed garantibbva.com.tr as an active domain registered to Turkiye Garanti Bankasi Anonim Sirketi and BBVA, created in 2019 and expiring in 2027, and garanti.com.tr as an active domain registered to Turkiye Garanti Bankasi A.S., created in 1996 and expiring in 2026. Public DNS lookups showed the bank's main domains using name servers under garanti.com.tr and garantiteknoloji.com.tr. DNS records for www.garantibbva.com.tr and sube.garantibbva.com.tr resolved through GSLB hostnames to public IP addresses, and RIPE WHOIS for one public address range identified a Garanti Bank route object originated by AS12903.

That is useful only within strict limits. It shows a public web and login surface, a bank-controlled naming footprint and a registered network-resource presence. It does not prove internal hosting architecture, data location, cyber maturity, uptime, fraud systems, cloud dependency or resilience. The correct inference is modest: Garanti BBVA's account proposition depends on publicly reachable digital channels and bank-controlled internet resources, while the quality and security of the internal system must be assessed through official reporting, regulatory supervision and customer outcomes rather than DNS records.

The bank's annual report provides more relevant continuity evidence than public DNS. It says business continuity and information-systems continuity policies, plans and protocols were updated in 2025 with board approval; critical processes were identified; failover tests to a secondary data center in Ankara were carried out; cyber-crisis and Marmara earthquake simulations were evaluated; and the bank retained ISO 22301 business-continuity certification for a third consecutive year. It also says a Cyber Defence Centre started 24/7 operations and that data and cloud technologies received a more focused structure inside corporate security.

Even there, caution is necessary. Certification, tests and governance disclosures do not prove that every retail or SME customer will experience uninterrupted mobile banking, ATM access or payment settlement. They do show that continuity is treated as a formal operating risk. For a Turkish digital account, that matters because the customer is effectively buying a promise that wages, cards, QR, FAST, POS, mobile login, fraud alerts and support will remain available under ordinary stress and recover under extraordinary stress.

This is the boundary that public evidence can support. Garanti BBVA has the scale, channels, disclosures and network surface of a major digital bank. The public record cannot audit the internal architecture. Investors and customers therefore have to judge the account unit through outcomes: deposit retention, mobile usage, support load, complaints, fraud controls, fee growth, operating expenses, capital and the bank's ability to keep its channels boring while the macro environment is not.

The evidence that would change the judgment is mostly inside the bank

The current public record supports a clear thesis: Garanti BBVA's Turkish digital account is valuable when it turns a large customer base into low-cost deposits, card and transfer activity, merchant settlement, credit demand and repeat mobile engagement. It becomes less attractive when fraud work, support contacts, compliance reviews, branch and ATM cost, high deposit rates and customer switching eat the spread.

The missing proof falls into three groups. The economic gap is account-level profitability: average salary-account balance, share of demand deposits tied to payroll or merchant settlement, cost of deposits by account segment, fee income per active account, interchange and acquiring economics, and marginal operating cost per mobile customer. The reliability gap is operational: app uptime, failed-login rates, FAST failure rates, card authorization failures, POS settlement delays, ATM cash availability, fraud false positives, confirmed fraud losses and time to restore services after incidents. The retention gap is behavioral: how many salary customers keep Garanti BBVA as their main bank after payroll receipt, how many SMEs consolidate accounts after adopting POS or Virtual POS, how often customers move balances to higher-yield alternatives, and whether complaint resolution predicts churn.

Those missing metrics do not make the public thesis weak. They define the test. Garanti BBVA's scale is real. Its digital usage is real. Its customer deposits and fee income are material. Its fraud and support workload is visible enough to show that the account is operationally heavy. Its macro context is harsh enough to make demand deposits valuable and fragile. The bank's advantage is that it has a large franchise, wide payment surface, BBVA ownership, regulatory visibility and a deep Turkish customer base. Its risk is that the very same scale makes every fraud pattern, funding shock, complaint wave and compliance review more expensive.

For the salary customer or SME, the question is practical. Does Garanti BBVA make money easier to receive, hold, spend, transfer, dispute, protect and explain than the substitutes? If yes, the customer leaves balances and payment activity with the bank, and the bank earns spread, fees and retention. If no, the customer may still keep the account, but the valuable behavior moves elsewhere. In Turkish banking, the account is not won at opening. It is won every payday, every merchant settlement, every suspicious notification and every support contact.