Turkcell Superonline: Difference between revisions

| Type = Subsidiary

| Founded = 2004

| Industry = Telecommunications

| Official Website = https://superonline.net

| Logo = Superonline.png

}}

 

As of Q1 2019, Turkcell has 41.6% of all mobile phone users in Turkey.<ref>[https://en.wikipedia.org/wiki/Turkcell Turkcell - Wikipedia]</ref> In October 2020, TVF Bilgi Teknolojileri Iletisim Hizmetleri Yatirim Sanayi ve Ticaret A.S. a subsidiary of Turkey Wealth Fund, the wealth fund of the Republic of Turkey, acquired control of 26.2% of Turkcell.<ref>[https://www.tvf.com.tr/en/contact/disclosures/2020/turkiye-wealth-fund-agrees-to-acquire-control-of-turkcell Türkiye Wealth Fund Agrees to Acquire Control of Turkcell]</ref>

 

User freedom faces substantial restrictions as Turkey implements comprehensive internet censorship policies that affect all ISPs including Superonline, with the government's [https://www.btk.gov.tr Information and Communication Technologies Authority (BTK)] collecting user data hourly including location data, browsing history, and messaging communications.<ref>{{cite web |url=https://freedomhouse.org/country/turkey/freedom-net/2023 |title=Turkey: Freedom on the Net 2023 |website=Freedom House |publisher=Freedom House |date=10 October 2023 |access-date=3 June 2025}}</ref> According to Freedom House's comprehensive assessment, Turkey's internet status remains classified as "Not Free" with extensive government control over digital communications and widespread social media blocking affecting service providers like Superonline.<ref>{{cite web |url=https://freedomhouse.org/country/turkey |title=Turkey Overview |website=Freedom House |publisher=Freedom House |date=31 March 2025 |access-date=3 June 2025}}</ref>

User privacy concerns are exacerbated by Superonline's extensive data collection practices, processing personally identifiable information, contact data, subscription details, network traffic, location data, payment information, and usage patterns, operating within Turkey's restrictive legal framework that has been documented by Freedom House as increasingly authoritarian.<ref>{{cite web |url=https://freedomhouse.org/country/turkey/freedom-world/2023 |title=Turkey: Freedom in the World 2023 |website=Freedom House |publisher=Freedom House |date=4 November 2023 |access-date=3 June 2025}}</ref> Regarding market control, Superonline operates as the largest alternative ISP with approximately 15% of the broadband market share in 2021, positioning itself as the leading challenger to dominant player Türk Telekom which holds 65.3% market share.<ref>[https://www.btk.gov.tr/uploads/pages/pazar-verileri/ceyrek-raporu-2021-4-ceyrek-22-03-21-kurum-disi.pdf BTK Market Share Statistics 2021 Q4]</ref>

There are allegations and discussions that Superonline uses Blue Coat products for censorship. Products manufactured by Blue Coat Systems are known as "dual-use" technologies that can be used to defend corporate networks, as well as by governments to censor the internet and monitor public internet traffic. These devices can see some encrypted traffic, block websites or record website traffic.<ref>[https://citizenlab.ca/2013/01/planet-blue-coat-mapping-global-censorship-and-surveillance-tools/ Planet Blue Coat: Mapping Global Censorship and Surveillance Tools]</ref>

In 2011, a hacktivist group called Telecomix claimed that Syria was using Blue Coat Systems products to censor the internet and these allegations were investigated by the US government. Citizen Lab's research has also provided evidence of Blue Coat devices being used for censorship and surveillance in countries like Turkey and Syria.<ref>[https://www.eff.org/deeplinks/2011/10/blue-coat-acknowledges-syrian-government-use-its-products Blue Coat: Concern for Criminal Penalties, Not Human Rights]</ref>

Blue Coat is acquired by Symantec. In 2017, Symantec acquired LifeLock, and renamed itself to NortonLifeLock in 2019. On July 20, 2021, Norton LifeLock released Norton Crypto, which would've mined Ethereum in the background in exchange for periodic payments. This drew criticism from users, as this was installed automatically, and many users reported having diffuculty uninstalling the program. In August 2021, NortonLifelock agreed to merge with the company Avast. After completing its merger with Avast in September 2022, the company adopted the name Gen Digital. In 2025 its portfolio includes Norton, Avast, LifeLock, Avira, AVG and CCleaner.

 

Turkcell Superonline started to implement the so-called "Fair Usage Terms" in February 2012. Accordingly, in the data plans called "UNLIMITED", users were assigned a data download quota of 50GB in a one-month period. Users who exceed this quota will have their connection speed reduced to 1 Mbps. There was also a 10GB quota for uploading data. Even if a user does not exceed the 50GB data download quota, if they exceed the 10GB data sending quota, their connection speed was reduced to 10% of the data plans bandwidth. This practice of Superonline has received a huge reaction from users. However, Consumer Problems Arbitration Committees found Superonline's practice to be illegal and ruled in favor of the complaining consumers. This practice was terminated by the Information and Communication Technologies Authority on December 31, 2019.<ref>{{Cite web |title=Wikipedia - Turkcell Superonline |url=https://tr.wikipedia.org/wiki/Turkcell_Superonline#Adil_Kullan%C4%B1m_Ko%C5%9Fullar%C4%B1}}</ref> Superonline also has an ongoing practice of reducing the connection speed to 1 Mbps and charging a re-activation fee for users who are late in paying their invoices.<ref>[https://seekingthesweetnessofiman.wordpress.com/2021/04/02/cancelling-your-turkcell-superonline-subscription/ Cancelling Your Turkcell Superonline Subscription]</ref>

Superonline has been criticized for injecting various advertisements into its customers' web connections while they browse the internet, thereby forcing them to watch the advertisements. Requests for clarification to the company went unanswered. This incident was described as the first evidence of traffic monitoring and manipulation through deep packet inspection in Turkey.<ref>{{cite web|last1=Gözütok|first1=Ahmet|title=Turkcell Superonline kullanıcılarını reklam izlemeye mi zorluyor?|url=https://www.donanimhaber.com/operatorler--kurumsal-haberler/haberleri/Turkcell-Superonline-kullanicilarini-reklam-izlemeye-mi-zorluyor.htm|website=donanimhaber.com|access-date=19 June 2017|archive-url=https://web.archive.org/web/20170619141204/https://www.donanimhaber.com/operatorler--kurumsal-haberler/haberleri/Turkcell-Superonline-kullanicilarini-reklam-izlemeye-mi-zorluyor.htm|archive-date=19 June 2017}}</ref><ref>{{cite web|last1=Yagiz|title=İddia: Superonline kullanıcılarına izinsiz reklam gösteriyor.|url=https://medium.com/@anonrig/i%CC%87ddia-superonline-kullan%C4%B1c%C4%B1lar%C4%B1na-izinsiz-reklam-g%C3%B6steriyor-ba555360424|website=medium.com|date=25 September 2016|access-date=19 June 2017|archive-url=https://web.archive.org/web/20170619141143/https://medium.com/@anonrig/i%CC%87ddia-superonline-kullan%C4%B1c%C4%B1lar%C4%B1na-izinsiz-reklam-g%C3%B6steriyor-ba555360424|archive-date=19 June 2017}}</ref> This problem has since been fixed and the development of HTTPS technology has made it very difficult for this to happen again.<ref>[https://docs.google.com/spreadsheets/d/1xZPAw1uCdLqDz8F_Vz57DRvCNJTcCnPgtG7P-yeloUc/edit?usp=sharing Web Hacking Incident Database]</ref>

 

On February 6, 2023, the company was criticized for internet outages at critical moments during the massive earthquakes centered in Kahramanmaraş, Turkey. Immediately after the earthquake disaster, the collapse of the internet infrastructure, which was critical for search and rescue operations and coordination, left both citizens and government agencies in a difficult situation. In the aftermath, Superonline was severely criticized for its lack of infrastructure resilience and emergency preparedness.  

 

The incident occurred within the context of Turkey's three-month state of emergency enacted in 11 provinces following the February 2023 earthquakes, which allowed the government to limit or suspend basic freedoms including telecommunications access.<ref>{{cite web |url=https://freedomhouse.org/country/turkey/freedom-net/2023 |title=Turkey: Freedom on the Net 2023 |website=Freedom House |publisher=Freedom House |date=10 October 2023 |access-date=3 June 2025}}</ref> There has also been controversy over the company's compliance with social media bans in Turkey during the earthquake, implemented under emergency powers that allowed authorities to take measures to prevent the circulation of information deemed false.<ref>{{cite web |url=https://freedomhouse.org/country/turkey/freedom-net/2023 |title=Turkey: Freedom on the Net 2023 |website=Freedom House |publisher=Freedom House |date=10 October 2023 |access-date=3 June 2025}}</ref> The biggest criticism has been the restriction of communication opportunities for people trapped under the remains of the earthquake and putting lives at risk. Internet freedom advocates have criticized Superonline's quick implementation of these bans, especially when access restrictions are imposed on social media platforms which helped find the trapped people.<ref>{{cite web |url=https://freedomhouse.org/country/turkey/freedom-net/2024 |title=Turkey: Freedom on the Net 2024 |website=Freedom House |publisher=Freedom House |date=2024 |access-date=3 June 2025}}</ref>

===PPPoE/WAN Password Restrictions===

Turkcell Superonline does not disclose the PPPoE/WAN username and password of its users. This restricts the freedom of users to use their own modems instead of the modems rented to them by Superonline. Although some users try to obtain this password through various methods, it is reported to be very difficult or impossible to obtain, especially for some modem models (e.g. HG255s). It is stated by users that even if the PPPoE username and password are known, the internet service provider (ISP) must register the MAC address of the new modem in its system, otherwise the modem cannot be used. This can be bypassed by cloning rented modems MAC addresses.<ref>[https://openwrt.org/docs/guide-user/network/wan/isp-configurations OpenWrt Wiki - ISP Configurations]</ref>

Turkcell Superonline's decision to restrict or completely disable access to the root account on the modems it rents to its users has sparked controversy among users. Superonline does not allow the use of third party modems. The firmware of the modems provided by Superonline is often customized and restricted, preventing users from gaining root access via web interface, telnet or ssh. One of the main reasons for this is that modem firmware updates and management are centralized by Superonline. It is argued that this centralized management may become more difficult if users have root access. While some users have stated that they need root access to configure their modem's settings in more detail, to install alternative firmware (like OpenWRT or Asus Merlin Firmware), or to enable/disable certain features, they have encountered this restriction by Superonline. In particular, some modem models are reported to disable features such as backups and manual updates via files in order to make it more difficult to obtain the root password. Some modem models have also been reported to disable the ability to change the main DNS server.<ref>[https://wf.lavatech.top/ave/router-misadventures Router Misadventures: Dumping Superonline's ISP Fiber Router]</ref>

===Censorship Using Deep Packet Inspection===

Unlike traditional packet inspection, DPI technology also scans the content of data packets and provides the ability to detect and block VPN protocols. According to user reports, Superonline has one of the most strictly censored internet service in Turkey, and in the past has taken measures strict enough to completely block VPN protocols such as WireGuard. It also blocks or throttles popular VPN services and their websites such as Cloudflare Warp (connection itself), ProtonVPN (throttles the website), Surfshark (throttles the website, up-to-date info required for connection), Psiphon (connection itself), NordVPN (throttles the website, up-to-date info required for connection) and constantly tightens its DPI-based scanning systems.