Paymix Operation Targets Financial And Technical Backbone Of Illegal Betting Network

A new phase of the Paymix investigation has put the spotlight on the infrastructure behind illegal online betting operations. The probe, led by the Istanbul Chief Public Prosecutor’s Office, resulted in a third-wave operation targeting both the financial channels allegedly used to move betting proceeds and the technical systems that kept dozens of illegal betting platforms online.

As part of the investigation, detention warrants were issued for 38 suspects, 15 of whom were reported to be abroad. The case focuses on allegations that illegal betting proceeds were transferred through payment channels, crypto assets, bank accounts and foreign-linked corporate structures. Authorities also moved against assets believed to be connected to the network, including 26 vehicles, 18 residences, 18 plots of land or gardens, 3 workplaces and 535 bank and crypto accounts.

The latest operation is significant because it did not focus only on individual users or website operators. Instead, it targeted the wider ecosystem that allows illegal betting platforms to operate: hosting services, databases, user records, payment routes, crypto wallets and companies allegedly used to disguise the source of funds.

49 Illegal Betting Sites Were Linked To Hosting Infrastructure

One of the key findings in the investigation involved Pentech Bilişim Teknolojileri Sanayi ve Ticaret Ltd. Şti., a technology company whose servers were allegedly used to provide hosting, technical infrastructure and data storage services to 49 illegal betting sites.

Investigators examined server systems, databases and technical connections linked to these platforms. According to the findings reported in the case, around 13.8 million illegal betting user records were identified during the digital analysis. Of these records, approximately 3.17 million were associated with Turkish ID numbers, while around 8.8 million were linked to phone numbers.

Authorities also identified around 14,600 bank accounts allegedly used for deposits into illegal betting platforms and approximately 52,800 bank accounts used in withdrawal processes. These figures show that the investigation is not limited to website access or domain blocking. It also covers user data, transaction records, payment routes and the financial network behind the platforms.

The 13.8 million figure should be understood as user records rather than necessarily 13.8 million unique individuals. A single person may have opened accounts on multiple betting sites, used different phone numbers or registered with repeated or inaccurate information. Still, the scale of the data suggests a large and organized digital betting network.

How The Paymix-Linked Money Flow Allegedly Worked

According to the investigation, the system operated through several connected layers. At the first stage, money deposited by users into illegal betting platforms was collected through different bank accounts and payment channels. These funds were then allegedly moved through digital wallets, crypto assets, blockchain networks and foreign-linked company accounts.

The Paymix name appears in the file as part of the financial infrastructure allegedly used to organize and move these funds. Prosecutors are examining claims that illegal betting proceeds were routed through payment and crypto-related channels to make the source of the money harder to trace.

In simple terms, the alleged structure can be understood as a chain: users transferred funds to betting platforms; those funds passed through bank accounts and payment channels; part of the money was converted into crypto assets; then it was moved through wallets, foreign companies and commercial-looking transactions. The goal, according to the investigation, was to distance the money from illegal betting activity and present it as legitimate business revenue.

Shell Companies And Fake Commercial Activity Were Used

The case file also points to the use of shell companies and artificial commercial transactions. Investigators found that companies were allegedly set up abroad and supported with websites designed to create the appearance of real e-commerce activity. However, authorities believe that some of these transactions were not based on genuine delivery of goods or services.

Invoices for software, consulting, server rental and other business services were allegedly used to give the money flow a legal appearance. International transfers, crypto transactions and company accounts were combined to create a layered financial structure. This method is commonly associated with attempts to make illicit proceeds appear as income from ordinary commercial activity.

The investigation also suggests that the money did not remain only in digital channels. Some funds were allegedly converted into cash through currency exchange offices and jewelry businesses in Turkey, while physical delivery methods were reportedly used in certain foreign locations. This points to a hybrid structure involving bank accounts, crypto wallets, companies, invoices and cash conversion points.

Technical And Financial Layers Worked Together

The Paymix investigation shows how illegal betting operations may depend on more than visible websites. Behind the user-facing platforms, investigators identified technical hosting systems, databases, user records, payment connections, crypto transfer routes and corporate structures.

The technical side allegedly enabled the betting sites to remain online, store data, manage user activity and process platform operations. The financial side allegedly helped collect, transfer, convert and disguise betting proceeds. In this structure, servers and databases formed the operational backbone, while payment channels and crypto transfers formed the financial pipeline.

This distinction is important for understanding the scale of the case. Illegal betting networks do not operate only through domain names or website interfaces. They require hosting services, transaction records, customer databases, payment processors, banking links, digital wallets and people who manage these systems across different jurisdictions.

A Broader Step Against Illegal Betting Networks

The Paymix operation marks a broader stage in the fight against illegal betting. Rather than focusing only on blocking access to betting websites, the investigation targets the systems that keep them running and the channels that move the money behind them.

By examining server infrastructure, user records, deposit and withdrawal accounts, crypto movements and shell companies in the same file, authorities are attempting to map the full structure of the alleged network. This makes the case important not only as an illegal betting operation, but also as a money laundering investigation.

The findings indicate that illegal betting platforms can function through a multi-layered model: technical service providers keep sites online, payment channels collect user funds, crypto tools move value across borders, and corporate structures create the appearance of legitimate business activity.

For that reason, the Paymix investigation is being viewed as a major step against the operational and financial backbone of illegal online betting. It shows that enforcement efforts are increasingly moving beyond website shutdowns and toward the deeper infrastructure that allows such networks to grow, process money and remain active despite repeated interventions.