title: Saudi Arabia Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/saudi-arabia/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Saudi Arabia SA schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 61 sourced findings · 111 sources in the cumulative register 14 Modules baseline.modules[] 61 Findings modules[].findings[] 35 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) No modules moved this cycle. ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal Saudi Arabia featured as the lead jurisdiction in Q3 2026 MENA fintech funding activity, with roughly 1 billion dollars deployed across 62 deals region-wide, according to a quarterly funding wrap published in mid-October 2026. Within that broader picture, two amount-undisclosed Saudi Arabia transactions were reported on 17 October 2026: a strategic investment by Foodics into Funding Souq, and an investment led by Phoenix Venture Partners with co-investor KSH Investments into COFE Tech. Neither deal disclosed a transaction value, and no regulatory development across the licensing, conduct, stablecoin, resilience or AML modules was evidenced for Saudi Arabia this cycle; the signal this period sits entirely in commercial and investment activity rather than in regulatory change. #### Other Developments **Funding Souq secures a strategic investor.** Foodics, a Saudi Arabia-domiciled commercial-technology company, made a strategic investment into Funding Souq, a Saudi Arabia-domiciled entity operating in the payments space, announced 17 October 2026. The amount was not publicly disclosed. The strategic nature of the investment, as distinct from a purely financial round, suggests an operational or commercial-integration rationale between the two parties, though the specific terms of that integration are not disclosed in the reporting available this cycle. **COFE Tech draws cross-border institutional investment.** COFE Tech, domiciled in Saudi Arabia, received an investment led by Phoenix Venture Partners, domiciled in the United Arab Emirates, with KSH Investments participating as a co-investor, announced the same day, 17 October 2026. As with the Funding Souq transaction, the amount was not publicly disclosed. The cross-border character of the lead investor underscores continuing UAE-Saudi Arabia capital flows into the Saudi fintech and adjacent-technology sector. #### Cross-Monitor Connections Both transactions sit within the commercial-intelligence domain and carry no identified financial-crime or sanctions nexus in the material available this cycle; any AML or beneficial-ownership due-diligence questions arising from either transaction would route to the financial-integrity monitor rather than being analysed here. No stablecoin, CBDC or licensing-regime angle was identified for either entity this cycle. #### Outlook The broader Q3 2026 MENA funding-rebound narrative, with Saudi Arabia cited as the quarter's leading jurisdiction by deal value and count, suggests continued investor appetite into the Saudi fintech and adjacent-technology sector heading into Q4 2026. Whether either the Funding Souq or COFE Tech transaction will see its value disclosed in subsequent reporting, or whether further strategic or institutional rounds will follow in the sector, remains to be seen as scheduled reporting continues. _2 earlier updates not shown here._ ###### Standing brief · as of 29 June 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal This cycle establishes the full Saudi Arabia baseline across the World Payments Monitor's thirteen-module spine, and the picture that emerges is of a mature, unitary, regulator-led payments environment whose direction of travel is unmistakably liberalising. Saudi Arabia operates a single licensing perimeter under SAMA (Saudi Central Bank), which is the sole licensing and supervisory authority for payment systems and PSPs under the Law of Payments and Payment Services (Royal Decree M/26, 22/03/1443H) and its Implementing Regulation effective 13/06/2023G, which repealed and replaced the 30/01/2020 PSP framework. There is no federal/state split to navigate: the entire Kingdom's payments licensing perimeter runs through one statute and one regulator. For any operator contemplating market entry, the gateway is explicit and binary in structure — a bank-PSP route under the Banking Control Law M/5, or a non-bank PI/EMI authorisation route under the Law of Payments and Payment Services. That non-bank route is itself tiered. The SAMA non-bank PSP licence taxonomy comprises four licence types with capital thresholds: Micro PI (SAR 1m, capped at SAR 20,000 per customer per month), Major PI (SAR 3m, cross-border permitted), Micro EMI (SAR 2m) and Major EMI (SAR 10m); the PI/EMI distinction turns on whether the entity may issue electronic money. The Major PI tier is the cross-border route, and the per-customer caps on the Micro tier directly shape how a low-cost entrant can scale. This four-tier ladder, distinct from the bank-PSP route, is the analytical spine of how non-bank capital reaches the Saudi market, and it is the structural fact that frames every other module in this baseline. #### Other Developments The conduct and safeguarding layer is equally codified. Under the Implementing Regulation's consumer-protection provisions, EMIs must issue and redeem electronic money at par value, and activities requiring a pooled customer-funds account fall within the defined scope of payment services under Article 5-1, requiring a SAMA licence and adherence to fund-handling requirements. This pooled-account segregation discipline governs how non-bank EMIs hold and protect customer money, a mechanism distinct from bank-PSP deposit protection. On redress, the SAMACARES complaints channel was replaced by the Complaint Management System per SAMA Circular 1185, effective 1/7/2025G, alongside updated Debt Collection Regulations. Digital money sits in a more provisional state. E-money is licensed under the EMI regime, but private cryptocurrencies and stablecoins remain outside the formal regulatory perimeter; a late-2025 ministerial announcement of nationally regulated stablecoins under joint SAMA and CMA oversight remains at policy-design stage with no licensing, reserve-backing or redemption rules published. This is a proposal, not an enacted framework, and it must be read as such. On central bank money, SAMA continues wholesale-focused CBDC experimentation with local banks and fintechs building on the 2019 Project Aber pilot with the UAE, and in 2024 SAMA joined the BIS-hosted mBridge multi-CBDC project at MVP stage for cross-border interbank settlement; no decision to introduce a CBDC has been made. The operating-environment fundamentals are well-developed. Operational resilience rests on the mandatory maturity-based SAMA Cyber Security Framework (v1.0, May 2017), the Business Continuity Management Framework, and the Cyber Resilience Fundamental Requirements operating as a licensing and sandbox gate, with board-level accountability. On rails, mada, the national debit scheme operated by SAMA subsidiary Saudi Payments, is mandated on every Saudi bank card, with SAMA capping the mada debit MSC at 0.80% (roughly SAR 40 per transaction) and adding effective-2025 caps on international card fees of 2%. The sarie Instant Payment System, owned by SAMA and launched in 2021, provides a 24/7 low-value overlay supporting alias identifiers, while AFAQ provides GCC cross-currency cross-border RTGS settlement, its cross-currency service having launched 10 December 2020 with Saudi and Bahrain participation from December 2021. The commercial-intelligence picture is dominated by the BNPL segment. Saudi BNPL Tamara secured up to $2.4bn in asset-backed Shariah-compliant financing from Goldman Sachs, Citi and Apollo-managed funds, announced at Money20/20 Riyadh on 15 September 2025, with $1.4bn immediately deployable. Tamara also became the first fintech startup to receive a full consumer finance licence from SAMA on 3 March 2025, covering both consumer finance and BNPL activities. Saudi BNPL Tabby raised a $160m Series E at a $3.3bn valuation led by Blue Pool Capital and Hassana Investment Company in March 2025, with a Saudi IPO reportedly underway. #### Cross-Monitor Connections The Kingdom's AML/CFT surface is carried in this monitor as Sentinel-sourced provenance only. The Sentinel feed records that KSA AML/CFT rests on the Anti-Money Laundering Law (Royal Decree M/20) and the Law on Combating the Financing of Terrorism (M/21), with the SAMA AML/CTF Guide setting risk-based expectations, that Saudi Arabia joined FATF in June 2019 as the first Arab and 37th member, and that it is not on the FATF increased-monitoring (grey) list as of 13 February 2026. Any original illicit-finance, sanctions-evasion or mutual-evaluation analysis for Saudi Arabia is a cross-reference to the Financial Intelligence Monitor and not a conclusion of this monitor. #### Outlook The defining structural tension in the Saudi baseline is the asymmetry between an actively liberalising fintech market and a settlement layer that remains bank-restricted. SARIE RTGS participation is limited to certified banks, which means non-bank PSPs require a sponsoring bank — a material market-access constraint that sits beneath every non-bank licensing and product story above. Watch items for forthcoming cycles are the stablecoin framework, which remains proposed-not-enacted under SAMA and CMA design and is registered on the regulatory horizon with a 2026 window, and the maturation of the BNPL segment toward public-market exit signalled by Tabby's IPO preparation. The over-arching direction is liberalising regulator-led market development under the Vision 2030 Financial Sector Development Programme, but the bank-versus-non-bank access boundary remains the constraint to track. _Standing brief, as of 29 June 2026._ #### Regulatory Status Saudi Arabia operates a mature, unitary, SAMA-supervised payments regime with no federal/state split. SAMA (Saudi Central Bank) is the sole licensing and supervisory authority for payment systems and PSPs under the Law of Payments and Payment Services (Royal Decree M/26, 22/03/1443H) and its Implementing Regulation effective 13/06/2023G. Market entry is a binary structural choice — a bank-PSP route under the Banking Control Law M/5, or a non-bank PI/EMI route under a four-tier taxonomy comprising Micro PI (SAR 1m), Major PI (SAR 3m, cross-border permitted), Micro EMI (SAR 2m) and Major EMI (SAR 10m). Conduct and safeguarding are codified: EMIs must redeem electronic money at par value, pooled customer-funds segregation applies under Article 5-1, and the Complaint Management System replaced SAMACARES per SAMA Circular 1185, effective 1/7/2025G. On digital money, private cryptocurrencies and stablecoins remain outside the formal regulatory perimeter; a late-2025 SAMA and CMA stablecoin proposal is at policy-design stage with no rules published, while SAMA continues wholesale CBDC research and joined the BIS mBridge project at MVP stage in 2024. Operational resilience rests on the SAMA Cyber Security Framework, the Business Continuity Management Framework and the Cyber Resilience Fundamental Requirements as a licensing gate. The mada national debit scheme is mandated on every Saudi bank card with a 0.80% MSC cap; the sarie Instant Payment System (2021) and AFAQ/Buna provide domestic instant and regional cross-border settlement. Enforcement is administrative and supervisory, requiring 30-day amicable settlement before judicial referral. Open Banking AIS and PIS are in production, with a major PIS update in September 2024 and Pay-by-Bank operational via sarie. BNPL is regulated as a consumer-finance subcategory, with no mandatory APP-fraud reimbursement scheme in force. AML/CFT, carried via the Sentinel feed, rests on AML Law M/20 and CFT Law M/21, with Saudi Arabia a FATF member since June 2019 and not on the 13 February 2026 grey list. SARIE RTGS settlement is bank-restricted, requiring non-bank PSPs to use a sponsoring bank. Commercially, the BNPL segment leads, with Tamara's $2.4bn facility and first full SAMA consumer-finance licence and Tabby's $160m Series E at a $3.3bn valuation. #### Outlook The overall regulatory direction is liberalising regulator-led market development under the Vision 2030 Financial Sector Development Programme, with jurisdiction risk assessed as monitored. The defining structural tension is the asymmetry between an actively liberalising fintech market and a bank-restricted settlement layer that requires non-bank PSPs to rely on a sponsoring bank. Priority watch items are the proposed-not-enacted stablecoin framework, registered on the regulatory horizon with a 2026 window, and the BNPL segment's maturation toward public-market exit signalled by Tabby's reported IPO preparation. trust tier: ai_unverified ###### Latest update · 11 October 2026 #### Regulatory Status Saudi Arabia's payments regulatory perimeter tightened and widened simultaneously this cycle. The Saudi Central Bank (SAMA) replaced its 2021 Oversight Framework for Payment Systems and Their Operators with a revised framework under Circular No. 472047719 (8 March 2026), and used the revised framework as the basis for opening open-banking licensing to commercial operators, with Lean Technologies receiving SAMA's first Major Payment Institution licence for open banking on 27 March 2026. By September 2026, SAMA's Governor reported that over 307 entities were operating under the open-banking framework, evidencing rapid uptake following the licensing launch. Alongside this market-access expansion, SAMA tightened the settlement-access compliance perimeter for payment-system licensees, requiring beneficial-ownership verification integration with the Wathq service (from March 2026) and sanctions-designation screening integration with the Security Council Resolutions Notification System (in force 1 October 2026). SAMA also extended Saudi Arabia's payment-scheme footprint externally, signing a cross-border card-scheme interoperability agreement linking the domestic mada scheme with Qatar's HIMYAN scheme (16 September 2026). The Kingdom's fintech commercial activity remained strong through the period, exemplified by barq's $329.5 million Series A round at a $1.85 billion valuation (16 September 2026). #### Outlook Saudi Arabia's payments regime is likely to continue widening market access, particularly in open banking, while deepening the compliance-integration requirements attached to that access. Further bilateral card-scheme interoperability agreements with other Gulf states remain plausible following the mada-HIMYAN precedent, and continued fintech funding activity is likely given the regulatory momentum and commercial confidence evident this cycle. ###### Standing brief · as of 14 September 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Saudi Arabia's payments regulatory environment showed material movement across two of the fourteen module spine categories this cycle. Under Licensing, Authorisation & Market Access, SAMA commenced formal licensing of open-banking fintech firms on 26 March 2026, granting first licences to two firms following completion of a regulatory sandbox phase, under the statutory authority of the Law of Payments and Payment Services. Under Product Innovation & Market Development, three separate strands advanced: a new SAMA e-commerce payments interface (7 July 2025), a CMA consultation on Financial Technology Experimental Permit Instructions (closing 27 May 2026), and a REGA/CMA jointly supervised title-deed tokenization pilot (completed November 2025). The regulatory direction across both active modules this cycle reads as liberalising: SAMA is expanding licensed market access for a fintech category previously confined to sandbox testing, and multiple agencies are simultaneously advancing product-innovation initiatives rather than constraining them. No enforcement action, litigation, or consumer-protection incident was identified for Saudi Arabia's payments sector this cycle. #### Outlook The CMA's FinTech ExPermit consultation closing 27 May 2026 is the nearest-term marker. Beyond that, the structural question is whether SAMA extends the open-banking sandbox-to-licence model to other fintech categories, and whether the REGA/CMA tokenization pilot develops into a broader supervisory framework. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-06-27 SAMA licenses payment service providers and payment system operators under the Law of Payments and Payment Services and its Implementing Regulations (PFMI-aligned). An updated supervisory framework (self-assessment + supervisory assessment methodology) now governs payment systems and operators, replacing the prior framework, with scope tied explicitly to the Payment Systems and Services Law (Royal Decree M/26). Standing sub-brief · as of 29 June 2026 297 words · last cycle 2026-10-11 #### Licensing, Authorisation & Market Access Saudi Arabia operates a unitary licensing regime with no federal/state split. SAMA (Saudi Central Bank) is the sole licensing and supervisory authority for payment systems and PSPs under the Law of Payments and Payment Services (Royal Decree M/26, 22/03/1443H) and its Implementing Regulation effective 13/06/2023G, which repealed and replaced the 30/01/2020 PSP framework. This single primary statute governs the entire Kingdom's payments licensing perimeter, and it establishes a binary structural choice for market entrants: a bank-PSP route under the Banking Control Law M/5, or a non-bank PI/EMI authorisation route under the Law of Payments and Payment Services. The non-bank route is itself tiered. The SAMA non-bank PSP licence taxonomy comprises four licence types with capital thresholds: Micro PI (SAR 1m, capped at SAR 20,000 per customer per month), Major PI (SAR 3m, cross-border permitted), Micro EMI (SAR 2m) and Major EMI (SAR 10m); the PI/EMI distinction turns on whether the entity may issue electronic money. The Major PI tier is the designated cross-border route, and the per-customer monthly cap on the Micro PI tier directly shapes how a low-cost entrant can scale before stepping up to the Major tier. Capital thresholds and per-customer caps thus directly shape market-access strategy for non-bank entrants, and they keep the non-bank PI/EMI route analytically distinct from the bank-PSP route under the Banking Control Law M/5. These capital thresholds and activity caps rest in part on specialist law-firm commentary corroborated against the SAMA implementing regulation. #### Outlook The licensing perimeter is stable and codified, and the binary bank-versus-non-bank distinction is the structural fact framing every downstream module in the Saudi baseline. Future cycles should watch for any capital-threshold or activity-cap revisions to the four-tier taxonomy, and for the entry of newly licensed non-bank operators ascending the Micro-to-Major ladder. Periodic update · new data 2026-10-11 #### Licensing, Authorisation & Market Access Saudi Arabia's payments licensing perimeter underwent a structural reset this cycle. SAMA issued Circular No. 472047719 on 8 March 2026, replacing the 2021 Oversight Framework for Payment Systems and Their Operators with a revised framework governing how payment systems and their operators are authorised and supervised under the Payments and Payment Services Law. This is not a minor procedural update: a wholesale replacement of the oversight framework resets the baseline supervisory document against which every licensed payment-system operator in the Kingdom is assessed, and it typically signals that the regulator has accumulated enough operational experience under the prior framework to identify where the authorisation and supervisory requirements needed tightening or clarification. The clearest practical expression of that shift is open banking's move from sandbox to licensed commercial activity. On 27 March 2026, SAMA granted Lean Technologies its first Major Payment Institution licence specifically for open banking, and SAMA formally announced the start of open-banking licensing on 30 March 2026. Until this point, open banking in Saudi Arabia had operated under a more constrained, sandbox-style arrangement; the Lean Technologies licence is the first instance of a firm being authorised to conduct open-banking activity as a standing commercial Major Payment Institution rather than as a sandboxed participant. This is a market-access event in the fullest sense: it establishes the authorisation pathway that subsequent open-banking entrants will follow, and it signals to the broader fintech sector that SAMA considers the open-banking use case mature enough to license at scale rather than continuing to pilot it indefinitely. The scale of uptake that followed is notable. At Money20/20 Middle East in September 2026, SAMA's Governor stated that more than 307 entities now operate under the open-banking framework. That figure, delivered only months after the first licence was granted, indicates that the regulatory architecture built around Circular No. 472047719 and the Lean Technologies precedent was already supporting a substantial population of participants rather than a handful of early movers. It also suggests that a meaningful pool of firms had been positioning themselves for licensed open-banking status before the framework opened, consistent with a sandbox cohort having been readied for graduation into commercial licensing. Taken together, the revised oversight framework and the open-banking licensing launch represent the most significant market-access development in the Saudi payments sector this cycle. The revised framework is the structural instrument; the open-banking licensing is its most visible downstream consequence. Firms assessing market entry into the Kingdom's payments sector should treat the March 2026 circular as the current authoritative statement of SAMA's oversight expectations for payment systems and operators, superseding the 2021 framework in its entirety, and should treat the Lean Technologies licence as the reference precedent for how an open-banking-focused Major Payment Institution application is likely to be assessed going forward. #### Outlook The pace at which open-banking licensing attracted participants, 307 entities within roughly six months of the first licence, suggests SAMA is likely to continue processing open-banking and other Major Payment Institution applications at a brisk tempo rather than treating Lean Technologies as an isolated flagship grant. Market participants should watch for further SAMA statements quantifying licensing uptake, and for any second or third wave of named licensees that would confirm the framework is scaling beyond its first mover. The revised oversight framework issued under Circular No. 472047719 should be read as the durable baseline against which future licensing activity will be assessed until SAMA next revises it; given the pace of change demonstrated this cycle, a further revision inside the next eighteen to twenty-four months is plausible, as scheduled, should the open-banking cohort's growth or risk profile prompt recalibration of the supervisory requirements. **1 earlier distinct update(s)** Periodic update · new data 2026-09-28 #### Licensing, Authorisation & Market Access Saudi Arabia's open banking market access framework crossed a structural threshold this cycle. The Saudi Central Bank (SAMA) commenced formal licensing of fintech companies to provide open banking services, granting first licences to two fintech firms on 26 March 2026. This followed completion of the regulatory sandbox phase, meaning the licensed firms had already operated under supervised, time-bound experimental conditions before qualifying for standing licensed status. The distinction between sandbox participation and formal licensure matters for market-access analysis: sandbox status confers a bounded, revocable permission to test a service, while formal licensing under SAMA confers an ongoing authorised-activity status subject to the full weight of SAMA's supervisory regime. The statutory basis for this licensing action is the Law of Payments and Payment Services, the governing statute that defines Payment Services, Payment Systems, and the licensable activities that sit under SAMA's Board-issued Regulations. This is the same statutory perimeter that governs both bank and non-bank payment institutions operating in the Kingdom, and the open-banking licences granted this cycle sit within the non-bank payment-institution and electronic-money-institution category rather than the bank-supervised category, an important distinction for understanding which prudential and conduct requirements attach to the newly licensed firms. The practical significance of this development extends beyond the two named licensees. Having built and operated a functioning sandbox-to-licence pathway for open banking specifically, SAMA has demonstrated a repeatable regulatory-maturation model that other sandboxed fintech categories, whether in payments-adjacent services, digital-asset infrastructure, or other emerging categories, could plausibly follow. This is a confirmed-confidence, high-impact finding directly sourced to the Saudi Press Agency and SAMA's own media centre, giving it strong evidentiary weight for a market-access development. #### Outlook The next marker to watch is whether SAMA extends formal licensing to additional open-banking applicants beyond the initial two firms, and whether any other sandboxed fintech category shows signs of following the same sandbox-to-licence trajectory. The regulatory perimeter question, specifically how non-bank payment institutions and electronic-money institutions are treated relative to banks under the same licensing regime, remains a useful analytical lens for tracking how the licensed open-banking category matures. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (5)** 1. T1 [https://rulebook.sama.gov.sa/en/law-payments-and-payment-services](https://rulebook.sama.gov.sa/en/law-payments-and-payment-services) retrieved 2026-06-27 2. T1 [https://rulebook.sama.gov.sa/en/implementing-regulations-payments-and-payment-services-law](https://rulebook.sama.gov.sa/en/implementing-regulations-payments-and-payment-services-law) retrieved 2026-06-27 3. T3 [https://www.lexology.com/library/detail.aspx?g=36edd3a6-fb14-4556-abe1-39c321cc7dbe](https://www.lexology.com/library/detail.aspx?g=36edd3a6-fb14-4556-abe1-39c321cc7dbe) retrieved 2026-06-27 4. T1 [https://rulebook.sama.gov.sa/en/guidelines-apply-payment-service-providers-license](https://rulebook.sama.gov.sa/en/guidelines-apply-payment-service-providers-license) retrieved 2026-06-27 5. T3 [https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/saudi-arabia](https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/saudi-arabia) retrieved 2026-06-27 ### W1b Conduct, Safeguarding & Promotions Confirmed confirmed 2026-06-27 Conduct and safeguarding for KSA PSPs sit within the Implementing Regulation of the Law of Payments and Payment Services, which includes dedicated parts on consumer protection, financial inclusion, e-money issuance/redemption, outsourcing and risk. EMIs must redeem e-money at par and safeguard funds (pooled account discipline applies to PSP customer funds per SAMA rules). Conduct obligations cover governance, fit-and-proper senior appointments, framework-contract disclosure and ongoing financial reporting. Promotions/advertising norms are layered onto specific regimes (e.g. BNPL advertising transparency rules). SAMA is the supervising authority. Standing sub-brief · as of 29 June 2026 209 words · last cycle 2026-09-05 #### Conduct, Safeguarding & Financial Promotions The conduct and safeguarding layer in Saudi Arabia is codified through the Implementing Regulation's consumer-protection and e-money redemption provisions. EMIs must issue and redeem electronic money at par value, and activities requiring a pooled customer-funds account fall within the defined scope of payment services under Article 5-1, requiring a SAMA licence and adherence to fund-handling requirements. This pooled customer-funds account discipline is the safeguarding mechanism — a segregation regime governing how non-bank EMIs hold and protect customer money, distinct from bank-PSP deposit protection. Conduct obligations layered on top include fit-and-proper requirements, beneficial-ownership disclosure at the 10% threshold, and quarterly and annual reporting. On consumer redress, the SAMACARES complaints channel was replaced by the Complaint Management System per SAMA Circular 1185, effective 1/7/2025G, alongside updated Debt Collection Regulations. This standardised complaints channel serves as the ombudsman-equivalent route for both bank and non-bank PSP conduct complaints, and it affects the conduct-compliance operating model for all SAMA-supervised payment firms. #### Outlook Safeguarding via pooled-account segregation and par-value redemption is the live conduct discipline for non-bank EMIs, and the Complaint Management System now standardises redress across the supervised population. Future cycles should monitor any extension of conduct or financial-promotion obligations, noting that financial-promotion enforcement is a methodology under-indexed surface. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (4)** 1. T1 [https://www.sama.gov.sa/en-US/LawsRegulations/DocLib/Implementing_Regulations_for_Law_of_Payments_and_Payment_Services-EN.pdf](https://www.sama.gov.sa/en-US/LawsRegulations/DocLib/Implementing_Regulations_for_Law_of_Payments_and_Payment_Services-EN.pdf) retrieved 2026-06-27 2. T1 [https://rulebook.sama.gov.sa/en/rules-dealing-e-commerce-payment-service-and-support-providers-0](https://rulebook.sama.gov.sa/en/rules-dealing-e-commerce-payment-service-and-support-providers-0) retrieved 2026-06-27 3. T1 [https://www.sama.gov.sa/en-US/payment/Documents/PSPs%20Regulations%20111.pdf](https://www.sama.gov.sa/en-US/payment/Documents/PSPs%20Regulations%20111.pdf) 4. T1 [https://rulebook.sama.gov.sa/en/new-banking-products-and-services-regulation](https://rulebook.sama.gov.sa/en/new-banking-products-and-services-regulation) retrieved 2026-06-27 ### W2 Stablecoins & Digital Money Confirmed confirmed 2026-06-27 E-money is regulated and licensed (EMI regime under the Law of Payments and Payment Services), but private cryptocurrencies and stablecoins remain outside the formal regulatory perimeter. Since a 2018 standing-committee declaration, virtual currencies are not approved/licensed, and banks are barred from crypto business absent SAMA approval. No stablecoin classification, reserve, redemption or attestation rules are in force. In late 2025 a minister announced plans to develop nationally regulated stablecoins under joint SAMA + CMA oversight — this is a policy-design-stage proposal, NOT enacted. Wholesale CBDC (digital riyal) research continues (Project Aber, mBridge MVP). Horizon · 2026 (±year) KSA nationally regulated stablecoin framework (SAMA + CMA joint oversight)_proposed · T3_ Horizon · 2026 (±year) KSA nationally regulated stablecoin framework (SAMA + CMA joint oversight)_proposed · T3_ Standing sub-brief · as of 29 June 2026 240 words · last cycle 2026-09-05 #### Stablecoins & Digital Money Digital money in Saudi Arabia divides cleanly between what is licensed and what is not. E-money is licensed under the EMI regime, but private cryptocurrencies and stablecoins remain outside the formal regulatory perimeter. A late-2025 ministerial announcement of nationally regulated stablecoins under joint SAMA and CMA oversight remains at policy-design stage with no licensing, reserve-backing or redemption rules published. This must be read as proposed-not-enacted: the e-money definition explicitly excludes virtual assets, and banks have been barred from crypto absent SAMA approval since a 2018 standing-committee declaration. No enacted stablecoin perimeter means digital-money market access remains confined to the licensed EMI route, and stablecoin issuance is not yet a permitted payment instrument in the Kingdom. On central bank money, SAMA continues wholesale-focused CBDC experimentation with local banks and fintechs, building on the 2019 Project Aber pilot with the UAE; in 2024 SAMA joined the BIS-hosted mBridge multi-CBDC project at MVP stage for cross-border interbank settlement. No decision to introduce a CBDC has been made, and the research remains wholesale rather than retail in orientation. #### Outlook The stablecoin framework is registered on the regulatory horizon with a 2026 window under SAMA and CMA design, but no in-force classification, reserve, redemption or attestation rules yet exist; the late-2025 announcement must not be over-indexed as enacted. Wholesale CBDC and mBridge participation signal a future cross-border settlement architecture relevant to correspondent-banking strategy, and both should be tracked as design-stage developments. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (5)** 1. T1 [https://rulebook.sama.gov.sa/en/implementing-regulations-payments-and-payment-services-law](https://rulebook.sama.gov.sa/en/implementing-regulations-payments-and-payment-services-law) retrieved 2026-06-27 2. T2 [https://blogs.loc.gov/law/2025/01/falqs-regulation-of-cryptocurrencies-in-the-gulf-cooperation-council-countries-part-one/](https://blogs.loc.gov/law/2025/01/falqs-regulation-of-cryptocurrencies-in-the-gulf-cooperation-council-countries-part-one/) retrieved 2026-06-27 3. T3 [https://www.plasma.to/learn/tools/stablecoin-regulation-map/saudi-arabia](https://www.plasma.to/learn/tools/stablecoin-regulation-map/saudi-arabia) retrieved 2026-06-27 4. T1 [https://www.sama.gov.sa/en-us/mediacenter/news/pages/news-812.aspx](https://www.sama.gov.sa/en-us/mediacenter/news/pages/news-812.aspx) retrieved 2026-06-27 5. T3 [https://iclg.com/practice-areas/fintech-laws-and-regulations/saudi-arabia/](https://iclg.com/practice-areas/fintech-laws-and-regulations/saudi-arabia/) retrieved 2026-06-27 ### W3 Operational Resilience & Critical Infra Confirmed confirmed 2026-06-27 Operational resilience for SAMA-regulated entities (banks, PSPs, finance and insurance firms) rests on the SAMA Cyber Security Framework (v1.0, May 2017), the Business Continuity Management Framework, and the Cyber Resilience Fundamental Requirements (CRFR) which applies as a licensing/sandbox gate. The CSF is a mandatory, maturity-based model spanning governance, risk, asset/data protection, access control, incident management, third-party risk and business continuity, with board-level accountability. The BCM framework mandates MAO/RTO/RPO definitions, crisis management and testing. PDPL (2023, enforced Sept 2024) adds data-protection obligations supervised alongside SAMA. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/saudi-arabia/) Standing sub-brief · as of 29 June 2026 180 words · last cycle 2026-09-05 #### Operational Resilience & Critical Infrastructure Operational resilience in Saudi Arabia rests on a layered, mandatory regime. The maturity-based SAMA Cyber Security Framework (v1.0, May 2017), the Business Continuity Management Framework with its MAO/RTO/RPO measures, and the Cyber Resilience Fundamental Requirements together constitute the resilience regime, with the CRFR operating as a licensing and sandbox gate and board-level accountability throughout. The CRFR sets minimum cyber-resilience licensing requirements for sandbox and licence applicants, making resilience compliance a precondition for market entry rather than an ongoing-supervision afterthought. The Personal Data Protection Law, enforced from September 2024, adds a data-protection layer supervised by SDAIA with SAMA and NCA involvement. This CSF/BCM/CRFR stack is a functional KSA analogue to DORA-style resilience obligations, and compliance is a precondition for licensing and sandbox entry across both the bank-PSP and non-bank PI/EMI populations. #### Outlook The resilience regime is established and mandatory, with the CRFR acting as a hard gate at the licensing stage. Future cycles should watch for framework version updates and for the interaction between SAMA resilience supervision and SDAIA-led PDPL enforcement as the data-protection regime matures. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (4)** 1. T1 [https://www.rulebook.sama.gov.sa/en/cyber-security-framework-2](https://www.rulebook.sama.gov.sa/en/cyber-security-framework-2) retrieved 2026-06-27 2. T1 [https://www.sama.gov.sa/en-US/Laws/BankingRules/BCM%20framework.pdf](https://www.sama.gov.sa/en-US/Laws/BankingRules/BCM%20framework.pdf) retrieved 2026-06-27 3. T1 [https://rulebook.sama.gov.sa/en/cyber-resilience-fundamental-requirements-crfr-1](https://rulebook.sama.gov.sa/en/cyber-resilience-fundamental-requirements-crfr-1) retrieved 2026-06-27 4. T3 [https://resourcehub.bakermckenzie.com/en/resources/global-data-and-cyber-handbook/emea/saudi-arabia/topics/regulators-enforcement-priorities-and-penalties](https://resourcehub.bakermckenzie.com/en/resources/global-data-and-cyber-handbook/emea/saudi-arabia/topics/regulators-enforcement-priorities-and-penalties) retrieved 2026-06-27 ### W4 Scheme & Network Compliance Probable confirmed 2026-06-27 Domestic card routing runs through mada, the national debit scheme operated by Saudi Payments (a SAMA subsidiary), mandated on every Saudi bank card; international Visa/Mastercard co-badge for cross-border and credit. Interchange/MSC is capped by SAMA: mada debit MSC limited to 0.80% (capped ~SAR 40 per transaction), with effective-2025 caps on international card fees (2%) and free e-wallet top-ups via credit cards. EMVco-compliant unified QR (ISO 20022) and tokenised/biometric mada acceptance are in force. ZATCA 'Fatoora' e-invoicing imposes parallel compliance on merchant systems. Standing sub-brief · as of 29 June 2026 174 words · last cycle 2026-09-05 #### Scheme & Network Compliance The scheme layer in Saudi Arabia is anchored by a mandatory domestic rail. mada, the national debit scheme operated by Saudi Payments (a SAMA subsidiary), is mandated on every Saudi bank card; SAMA caps the mada debit MSC at 0.80% (roughly SAR 40 per transaction), with effective-2025 caps on international card fees of 2% and free e-wallet top-ups via credit cards. Domestic routing flows through mada, with Visa and Mastercard co-badging for cross-border and credit transactions. The unified QR is built on ISO 20022 and EMVco standards, and mada runs natively in Apple Pay, Samsung Pay and Google Pay. Mandatory mada routing and the capped MSC directly shape acquirer economics and merchant-cost structures across the Kingdom's card market, applying to both bank and non-bank participants in the card ecosystem. #### Outlook The mandatory domestic-routing model with a capped interchange-equivalent is a stable structural feature. Future cycles should track any further adjustment to the MSC cap or international-fee caps, and the continued migration of co-badged and tokenised acceptance onto the mada rail. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (4)** 1. T1 [https://my.gov.sa/en/content/epayment](https://my.gov.sa/en/content/epayment) retrieved 2026-06-27 2. T3 [https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia](https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia) retrieved 2026-06-27 3. T3 [https://issuu.com/meafinance/docs/march-2022/s/15012459](https://issuu.com/meafinance/docs/march-2022/s/15012459) retrieved 2026-06-27 4. T3 [https://whitesight.net/how-saudi-arabia-engineered-a-digital-payments-boom/](https://whitesight.net/how-saudi-arabia-engineered-a-digital-payments-boom/) retrieved 2026-06-27 ### W5 Payment Corridor Dynamics limited signal Confirmed confirmed 2026-06-27 Domestic instant rail is sarie (Instant Payment System, launched 2021), a 24/7 low-value (≤ SAR 20,000) overlay settling through the SARIE RTGS, supporting alias identifiers (mobile, national ID, Iqama, email). For cross-border, Saudi Arabia is a founding participant in AFAQ — the GCC cross-currency RTGS (live December 2021, operated via Gulf Payments Company owned by the six GCC central banks) — and connects to Buna (Arab Monetary Fund multilateral platform). SWIFT remains the primary international correspondent messaging layer. SAR is not freely convertible and is pegged at 3.75/USD; cross-border SAR movements require licensed bank participation. KSA hosts one of the world's largest remittance corridors. Standing sub-brief · as of 29 June 2026 231 words · last cycle 2026-10-11 #### Payment Corridor Dynamics Saudi Arabia's corridor architecture combines a domestic instant rail with regional cross-border settlement layers. The sarie Instant Payment System, owned by SAMA and launched in 2021, is a 24/7 low-value (up to SAR 20,000) overlay settling through the SARIE RTGS, supporting alias identifiers (mobile, national ID, Iqama, email, unified commercial number) for transfers up to SAR 2,500 without adding a beneficiary. This alias-based instant rail is the basis for Pay-by-Bank open-banking initiation that bypasses card networks, underpinning lower-cost account-to-account acquiring alternatives. Regionally, AFAQ is the GCC cross-currency cross-border RTGS service owned and managed by the six GCC central banks via Gulf Payments Company; the cross-currency service launched 10 December 2020, with Saudi and Bahrain participation from December 2021. A caveat applies here: the December 2021 date refers to Saudi/Bahrain participation, not the AFAQ system launch on 10 December 2020. SAMA operates the domestic RTGS interface to the AFAQ central component, and Saudi Arabia also connects to Buna, the Arab Monetary Fund platform. SWIFT remains the primary international correspondent layer, and the SAR is pegged at 3.75/USD and is not freely convertible. #### Outlook AFAQ and Buna reduce reliance on traditional correspondent banking for GCC and regional FX clearing, relevant to corridor cost and access. The launch-versus-participation date distinction for AFAQ would benefit from a primary SAMA confirmation in future cycles; the standing position carries the caveat in the interim. Periodic update · new data 2026-10-11 #### Payment Corridor Dynamics A concrete step in Gulf card-scheme interoperability took shape on 16 September 2026, when the Saudi Central Bank and the Qatar Central Bank signed a cross-border card-scheme interoperability agreement linking the Saudi domestic scheme, mada, with its Qatari counterpart, HIMYAN. The agreement was announced at Money20/20 Middle East, placing it in the category of a formally signed, publicly announced scheme-level arrangement rather than a mere statement of intent. For a corridor that handles substantial bilateral commercial, tourism and labour-remittance-adjacent card traffic between the two Gulf states, a direct scheme-to-scheme linkage is a material development: it allows cardholders enrolled in one domestic scheme to transact using the other's acceptance infrastructure without routing through an international card network as an intermediary, which has implications for transaction cost, settlement speed and the degree of domestic-scheme control each central bank retains over cross-border card flows passing through its jurisdiction. This development should be read against the broader pattern of domestic card-scheme proliferation and bilateral linkage-building across the GCC. mada is Saudi Arabia's long-established domestic debit scheme, operated under SAMA's oversight; HIMYAN is Qatar's domestic equivalent. A bilateral interoperability agreement between the two, rather than reliance on a unified pan-GCC settlement mechanism, indicates that Gulf payment integration is currently proceeding through a network of bilateral scheme agreements rather than through a single centralised GCC-wide rail. This corridor-building approach allows each central bank to negotiate terms specific to its own scheme's risk tolerance and commercial priorities, at the cost of a more fragmented overall interoperability map across the region compared with a single unified scheme. The mada-HIMYAN agreement sits alongside the licensing and oversight-framework developments described elsewhere this cycle, and together they describe a Saudi payments sector that is extending its reach in two directions simultaneously: domestically, through wider licensing of open-banking participants, and externally, through scheme-level agreements that extend mada's acceptance footprint beyond Saudi borders. Firms with card-acquiring or cross-border payment operations touching both Saudi Arabia and Qatar should treat the interoperability agreement as the first formal step toward reduced friction in that specific corridor, while recognising that operational implementation details, such as the settlement mechanics and timeline for full interoperability, were not disclosed at the September 2026 announcement. #### Outlook The mada-HIMYAN agreement is likely to be the first of several bilateral Gulf card-scheme interoperability arrangements SAMA pursues, given the precedent it sets for extending a domestic scheme's acceptance footprint without waiting for a unified GCC-wide settlement infrastructure. Whether SAMA or the Gulf Cooperation Council's broader institutional architecture moves toward a more centralised multilateral card-interoperability framework, rather than continuing with bilateral agreements corridor by corridor, is a question this cycle's evidence does not resolve, and market participants should treat any claim about a broader pan-GCC mechanism as unconfirmed until a primary announcement names one. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (4)** 1. T1 [https://www.sama.gov.sa/en-US/payment/pages/Sarie.aspx](https://www.sama.gov.sa/en-US/payment/pages/Sarie.aspx) retrieved 2026-06-27 2. T1 [https://rulebook.sama.gov.sa/en/operating-rules-cross-currency-payments-using-afaq-service](https://rulebook.sama.gov.sa/en/operating-rules-cross-currency-payments-using-afaq-service) retrieved 2026-06-27 3. T3 [https://clearingpost.com/insights/saudi-arabia-payment-infrastructure-guide-sarie-mada-sadad/](https://clearingpost.com/insights/saudi-arabia-payment-infrastructure-guide-sarie-mada-sadad/) retrieved 2026-06-27 4. T3 [https://www.theasianbanker.com/updates-and-articles/cross-border-payments-in-the-middle-east-become-more-inclusive](https://www.theasianbanker.com/updates-and-articles/cross-border-payments-in-the-middle-east-become-more-inclusive) retrieved 2026-06-27 ### W6 Industry Structure & Commercial Probable confirmed 2026-06-27 The KSA payments market is dominated by SAMA's subsidiary Saudi Payments operating the national rails (mada, SADAD, sarie, Esal) and by a concentrated bank-acquiring layer alongside fast-growing fintechs. Al Rajhi Bank leads merchant acquiring (~41% of POS terminals); Geidea dominates POS/softPOS hardware (~75% share); STC Bank (formerly STC Pay) is a fully licensed digital bank leading wallets, P2P and remittances; SNB is prominent in card payments and instant transfers. The Vision 2030 Financial Sector Development Programme targets growth from 82 fintechs (2020) to 525 by 2030, with 216 fintechs and SAR 2.7bn funding by end-2023. Electronic payments hit 79% of retail transactions in 2024, beating the 70% target early. Standing sub-brief · as of 29 June 2026 205 words · last cycle 2026-09-05 #### Industry Structure & Commercial Dynamics The Saudi payments market is concentrated around state-owned rails and bank-led acquiring. The market is dominated by SAMA subsidiary Saudi Payments, which operates the mada, SADAD, sarie and Esal rails; Al Rajhi Bank leads acquiring at roughly 41% of POS terminals, Geidea dominates POS and softPOS hardware at roughly 75%, STC Bank leads wallets, P2P and remittances, and SNB is prominent in cards and instant transfers. The Vision 2030 Financial Sector Development Programme targets 525 fintechs by 2030, with 216 firms and SAR 2.7bn in funding recorded by end-2023, and electronic payments reached 79% of retail transactions in 2024 — exceeding the FSDP's 70% digital-payment target early. The concentrated acquiring and hardware layer (Al Rajhi, Geidea) sitting alongside state-owned rails defines the competitive dynamics that any new entrant must navigate. These market-concentration figures rest on specialist commentary rather than a primary statistical anchor. #### Outlook Market structure is established and concentrated, with a fast-growing licensed fintech segment developing beneath the dominant incumbents. The concentration figures (Al Rajhi ~41% acquiring, Geidea ~75% POS hardware) rest on Tier-3 specialist commentary without a SAMA primary statistical anchor, so precise current shares are not independently confirmable and should be treated as indicative pending primary corroboration. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (4)** 1. T2 [https://en.wikipedia.org/wiki/Saudi_Central_Bank](https://en.wikipedia.org/wiki/Saudi_Central_Bank) retrieved 2026-06-27 2. T3 [https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia](https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia) retrieved 2026-06-27 3. T3 [https://iclg.com/practice-areas/fintech-laws-and-regulations/saudi-arabia/](https://iclg.com/practice-areas/fintech-laws-and-regulations/saudi-arabia/) retrieved 2026-06-27 4. T3 [https://vision2030.ai/sectors/financial-services/payments/](https://vision2030.ai/sectors/financial-services/payments/) retrieved 2026-06-27 ### W7 Legal & Litigation Probable confirmed 2026-06-27 Payments-related enforcement in KSA is administrative and supervisory rather than common-law litigation-driven. SAMA publicly announces penalties against financial institutions and maintains 'Instructions for Publishing Banking Penalties'. The CMA actively pursues market manipulation and securities fraud (e.g. May 2025 referral of suspects to Public Prosecution; Oct 2023 SAR 4.2m fines on two companies). The Anti-Financial Fraud and Breach of Trust Law (with Executive Regulations) criminalises fraud with penalties up to 7 years and SAR 5m. PDPL breaches carry fines up to SAR 5m supervised by SDAIA/SAMA. Payments disputes under the Law of Payments must first undergo a 30-day amicable settlement before judicial referral. Standing sub-brief · as of 29 June 2026 145 words · last cycle 2026-09-05 #### Legal & Litigation Payments enforcement in Saudi Arabia is administrative and supervisory rather than common-law litigation-driven. SAMA publicly announces penalties and maintains 'Instructions for Publishing Banking Penalties'. The Anti-Financial Fraud and Breach of Trust Law criminalises fraud with penalties up to 7 years' imprisonment or SAR 5m. Payments disputes must undergo a 30-day amicable settlement before judicial referral, a structural feature that shapes dispute-resolution exposure for payment firms. Separately, the CMA pursues securities-fraud enforcement, and PDPL breaches carry penalties up to SAR 5m. The mandatory 30-day amicable settlement and the administrative penalty model together define how enforcement and dispute resolution operate across both bank and non-bank supervised firms. #### Outlook The enforcement model is assessed as stable and administrative in character. Future cycles should track published SAMA penalty actions and any evolution in the amicable-settlement requirement as a leading indicator of supervisory posture toward payment firms. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (4)** 1. T1 [https://rulebook.sama.gov.sa/en/law-payments-and-payment-services](https://rulebook.sama.gov.sa/en/law-payments-and-payment-services) retrieved 2026-06-27 2. T3 [https://www.commenda.io/saudi-arabia/penalties-for-non-compliance](https://www.commenda.io/saudi-arabia/penalties-for-non-compliance) retrieved 2026-06-27 3. T3 [https://www.zigram.tech/article/saudi-arabia-antifinancial-crime/](https://www.zigram.tech/article/saudi-arabia-antifinancial-crime/) retrieved 2026-06-27 4. T3 [https://nawaf-law.com.sa/en/](https://nawaf-law.com.sa/en/) ### W8 Merchant Acquiring & Risk Probable confirmed 2026-06-27 Acquiring is bank-led, dominated by Al Rajhi (~41% POS share) with Geidea providing the bulk of POS/softPOS hardware (~75%). mada integration is effectively mandatory for domestic card acceptance, alongside dual integration with Visa/Mastercard for cross-border. SAMA caps the mada debit MSC at 0.80% (~SAR 40 cap) protecting merchant margins. SAMA has issued new merchant-acquirer licences and opened QR/Tap-to-Phone acceptance, driving POS terminal counts past 1 million. Merchants must also integrate POS/ERP with ZATCA's 'Fatoora' e-invoicing portal (phased rollout, cryptographic stamps, penalties for non-compliance). Open-banking pay-by-bank is emerging as a lower-cost acquiring alternative. Standing sub-brief · as of 29 June 2026 190 words · last cycle 2026-09-05 #### Merchant Acquiring & Risk Merchant acquiring in Saudi Arabia is bank-led and concentrated, with Al Rajhi at roughly 41% of POS terminals and Geidea at roughly 75% of hardware. mada integration is effectively mandatory for domestic card acceptance, sitting alongside dual Visa and Mastercard integration, and SAMA's 0.80% mada MSC cap protects merchant margins. Merchants must integrate POS and ERP systems with ZATCA 'Fatoora' e-invoicing, which uses cryptographic stamps and is being rolled out in phases. Open-banking Pay-by-Bank is emerging as a lower-cost alternative to card acceptance. BNPL providers such as Tabby and Tamara are SAMA-regulated and embedded across checkout; POS counts have passed one million, and POS card transactions grew from 2.9bn in 2020 to 10.4bn in 2024. The dual mada-plus-international integration requirement plus ZATCA Fatoora compliance defines the acquiring-onboarding cost and operating burden for the Saudi market. Merchant-acquiring operational detail is a methodology under-indexed surface, captured here at standing-brief tier. #### Outlook The acquiring layer is bank-led, concentrated and operationally demanding, with the card-bypass Pay-by-Bank alternative the most significant emerging competitive vector. Future cycles should track Pay-by-Bank adoption against card volumes and the continued phasing of ZATCA e-invoicing obligations. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (4)** 1. T3 [https://clearingpost.com/insights/saudi-arabia-payment-infrastructure-guide-sarie-mada-sadad/](https://clearingpost.com/insights/saudi-arabia-payment-infrastructure-guide-sarie-mada-sadad/) retrieved 2026-06-27 2. T3 [https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia](https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia) retrieved 2026-06-27 3. T3 [https://whitesight.net/how-saudi-arabia-engineered-a-digital-payments-boom/](https://whitesight.net/how-saudi-arabia-engineered-a-digital-payments-boom/) retrieved 2026-06-27 4. T3 [https://www.orchestrapay.com/coverage/middle-east/saudi-arabia](https://www.orchestrapay.com/coverage/middle-east/saudi-arabia) retrieved 2026-06-27 ### W9 Product Innovation & Market Development Confirmed confirmed 2026-06-27 KSA innovation is regulator-led under Vision 2030's FSDP. SAMA launched the Open Banking Framework (Open Banking Policy Dec 2020; framework launched Nov 2022), with the Open Banking Lab (2022/2023) for conformance testing; Account Information Services then Payment Initiation Services (PIS, major update Sept 2024) are in production. SAMA runs a Regulatory Sandbox issuing limited test licences (open banking platforms XSquare/NeotTek, P2P lender MoneyMoon approved). The 'View My Bank Accounts' fraud-prevention service launched May 2024. CBDC research (wholesale, mBridge) and Tarabut/Sharia-compliant micro-lending pilots continue. STC Pay's conversion to a full digital bank exemplifies product build-out. Standing sub-brief · as of 29 June 2026 178 words · last cycle 2026-10-11 #### Product Innovation & Market Development Saudi Arabia's open-banking surface is operational and maturing. SAMA launched the Open Banking Policy in December 2020, the Open Banking Lab in May 2022 and the framework in November 2022; Account Information Services and then Payment Initiation Services — with a major PIS update in September 2024 — are now in production. A 'View My Bank Accounts' fraud-prevention service launched in May 2024. The sandbox has approved XSquare and NeotTek for open banking and MoneyMoon for P2P lending, and only SAMA-authorised firms may use the APIs. Pay-by-Bank is operational, pulling funds via sarie and bypassing card networks, and STC Pay has converted to a fully licensed digital bank as STC Bank. Operational PIS and Pay-by-Bank open a card-network-bypass product surface and a SAMA-authorised TPP market-access route across both bank and non-bank participants. #### Outlook The open-banking product surface is established and in production, with Pay-by-Bank the central card-bypass innovation to monitor. Future cycles should track sandbox graduations into the licensed market and the competitive impact of newly converted digital banks such as STC Bank. Periodic update · new data 2026-10-11 #### Product Innovation & Market Development Open banking is the defining product-development story in Saudi Arabia's payments sector this cycle, and its trajectory is best understood as a transition from controlled experimentation to licensed commercial product. SAMA's licensing of Lean Technologies as the first Major Payment Institution authorised for open banking, on 27 March 2026, formally ended the period in which open-banking activity in the Kingdom was confined to sandbox-style testing. SAMA's own public announcement, on 30 March 2026, of the start of open-banking licensing confirms that this was a deliberate, programme-level regulatory decision rather than an isolated grant to a single favoured applicant. The market's response to that regulatory opening has been rapid by the measure SAMA itself has offered: at Money20/20 Middle East in September 2026, the SAMA Governor stated that over 307 entities now operate under the open-banking framework. Whether all 307 are themselves licensed Major Payment Institutions, or whether the figure also captures firms operating as technical service providers, data recipients or other categories connected to the open-banking ecosystem, is not specified in the sourcing available this cycle, but the scale of the figure nonetheless indicates that the product category has moved well beyond a pilot cohort. An ecosystem of that size implies open banking has become a live distribution channel for account-information and payment-initiation products across the Saudi financial sector, rather than a capability held by a small number of early licensees. This product-development shift did not occur in a vacuum. It followed directly from the March 2026 replacement of SAMA's payment-systems oversight framework (Circular No. 472047719), which reset the authorisation baseline against which open-banking and other payment-service applications are now assessed. Reading the oversight-framework revision and the open-banking licensing launch together, the product innovation observed this cycle is regulator-enabled rather than regulator-following: SAMA appears to have built the licensing pathway in anticipation of, or in close coordination with, the market readiness that then produced the 307-entity figure within months. #### Outlook The open-banking ecosystem's growth to over 307 entities within roughly six months of the first licensing grant suggests the product category is likely to continue expanding, with further announcements of licensed entrants plausible over the coming cycles. A useful signal to track will be whether SAMA begins publishing a more granular breakdown of the open-banking participant population, distinguishing licensed Major Payment Institutions from other categories of ecosystem participant, which would allow a clearer read on how much of the reported growth reflects genuine new licensing activity as opposed to technical integrations by firms already otherwise regulated. **1 earlier distinct update(s)** Periodic update · new data 2026-09-28 #### Product Innovation & Market Development Three distinct product-innovation strands developed in Saudi Arabia's payments and digital-asset infrastructure this cycle, each sourced independently and each with its own confidence profile. First, SAMA introduced a new e-commerce payments interface on 7 July 2025, intended to streamline digital transactions and foster innovation across the payments ecosystem; this is a confirmed-confidence finding, though sourced to a T3 professional-services outlet rather than a primary SAMA publication, and it functions as infrastructure-level product development that reduces technical fragmentation for payment service providers and merchants transacting in the Kingdom's e-commerce sector. Second, the Capital Market Authority (CMA) opened a 30-day public consultation on amendments to the Financial Technology Experimental Permit Instructions, closing 27 May 2026. The amendments under consultation cover application-resubmission controls, a procedural refinement to how firms apply and reapply for experimental-permit status within the CMA's capital-markets fintech sandbox. This is a confirmed-confidence, T1-sourced finding, directly evidenced from the Saudi Exchange's own issuer-news channel. Third, the Real Estate General Authority (REGA) and the CMA jointly supervised the Kingdom's first title-deed tokenization pilot, completed in November 2025, linking digital tokens to national property registers under joint REGA/CMA standards. This is a Probable-confidence finding sourced to a single T4 outlet, and it represents a genuinely novel product category for the Saudi market: the pairing of blockchain-based tokenization with an existing, authoritative national property registry, supervised jointly by a real-estate regulator and a capital-markets regulator rather than by a single agency acting alone. Taken together, these three developments, an infrastructure-level payments interface, a procedural sandbox refinement, and a novel tokenization pilot, indicate that Saudi product innovation this cycle is occurring across multiple regulatory agencies simultaneously rather than being concentrated in a single authority's remit. This cross-agency pattern is itself a market-development signal distinct from any one individual product launch. #### Outlook The CMA's FinTech ExPermit consultation closes 27 May 2026, and its outcome will clarify whether the application-resubmission controls are adopted as proposed. Separately, whether the REGA/CMA tokenization pilot is expanded beyond its initial scope, or remains a single supervised pilot without a broader regulatory framework, is the key open question for tracking Saudi Arabia's tokenization-market trajectory into the next cycle. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (4)** 1. T1 [https://openbanking.sa/index-en.html](https://openbanking.sa/index-en.html) retrieved 2026-06-27 2. T3 [https://ozoneapi.com/the-open-finance-tracker/library/ksa-open-banking-standard/](https://ozoneapi.com/the-open-finance-tracker/library/ksa-open-banking-standard/) retrieved 2026-06-27 3. T3 [https://iclg.com/practice-areas/fintech-laws-and-regulations/saudi-arabia/](https://iclg.com/practice-areas/fintech-laws-and-regulations/saudi-arabia/) retrieved 2026-06-27 4. T3 [https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia](https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia) retrieved 2026-06-27 ### W10 Consumer Protection & APP Fraud Confirmed confirmed 2026-06-27 Consumer protection is embedded in the Implementing Regulation (Part 5) and SAMA conduct rules, with a centralised Complaint Management System (replacing SAMACARES, effective 1/7/2025G) as the ombudsman-equivalent route. BNPL — large and consumer-facing (Tabby, Tamara, MIS Pay licensed/permitted by SAMA) — is regulated under the Rules for Regulating BNPL Companies (Decision 450360390000, 05/06/1445H), defining BNPL as no-term-cost consumer financing with SAR 5m minimum capital, credit limits, advertising transparency, conflict-of-interest and AML/CTF obligations. The 'View My Bank Accounts' service (May 2024) addresses account-verification fraud. There is no UK-style mandatory APP-fraud reimbursement scheme in force; sarie incorporates recipient account verification as a practical anti-error safeguard. Standing sub-brief · as of 29 June 2026 192 words · last cycle 2026-09-05 #### Consumer Protection & APP Fraud Buy-now-pay-later is regulated in Saudi Arabia as a consumer-finance subcategory. BNPL falls under the Rules for Regulating BNPL Companies (Decision 450360390000, 05/06/1445H) as no-term-cost consumer financing under the Finance Companies Control Law, requiring a SAMA-licensed joint-stock company with SAR 5m minimum capital, 50% Saudization, credit limits, advertising transparency, conflict-of-interest controls and AML/CTF obligations. Tabby, Tamara and MIS Pay are permitted or licensed without taking deposits. These rules define the consumer-finance licensing and conduct perimeter for the largest KSA fintech segment. On authorised-push-payment fraud, there is no UK-style mandatory APP-fraud reimbursement scheme in force; sarie recipient-account verification serves as a practical anti-error safeguard, and the Complaint Management System is the redress route. The absence of a mandatory reimbursement scheme is recorded as not-applicable-in-regime. #### Outlook The BNPL consumer-finance perimeter is established and codified, and it governs the conduct of the Kingdom's largest fintech segment. No mandatory APP-fraud reimbursement scheme is in force, so the consumer remedy for authorised-push-payment fraud beyond sarie recipient-account verification remains unspecified — a methodology under-indexed surface to watch. The SAR 5m capital and Saudization thresholds rest partly on Tier-3 commentary; primary corroboration would raise confidence. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (4)** 1. T1 [https://argaamplus.s3.amazonaws.com/bef57897-a46c-41c2-be8d-b8d2d0449291.pdf](https://argaamplus.s3.amazonaws.com/bef57897-a46c-41c2-be8d-b8d2d0449291.pdf) retrieved 2026-06-27 2. T3 [https://bsalaw.com/insight/redefining-bnpl-how-samas-regulations-are-shaping-saudi-arabias-fintech-sector/](https://bsalaw.com/insight/redefining-bnpl-how-samas-regulations-are-shaping-saudi-arabias-fintech-sector/) retrieved 2026-06-27 3. T3 [https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/saudi-arabia](https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/saudi-arabia) retrieved 2026-06-27 4. T1 [https://rulebook.sama.gov.sa/en/new-banking-products-and-services-regulation](https://rulebook.sama.gov.sa/en/new-banking-products-and-services-regulation) retrieved 2026-06-27 ### W11 AML/CFT & Financial Crime [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/saudi-arabia/#sec-dom-D7) Confirmed confirmed 2026-06-27 sentinel.position: KSA's AML/CFT regime rests on the Anti-Money Laundering Law (Royal Decree M/20, 5/2/1439H) and the Law on Combating the Financing of Terrorism (M/21, 12/2/1439H), with implementing regulations and the SAMA AML/CTF Guide. SAMA supervises risk-based AML/CTF compliance for banks, PSPs and fintechs, with the Saudi Financial Intelligence Unit (SAFIU) receiving STRs. Saudi Arabia joined FATF in June 2019 (first Arab/37th member) and is a founding MENAFATF member; it is not on the FATF increased-monitoring (grey) list as of February 2026. SAMA also enforces Rules for Implementation of Targeted Financial Sanctions. Standing sub-brief · as of 29 June 2026 184 words · last cycle 2026-09-05 #### AML/CFT & Financial Crime This module is sourced from the Sentinel feed, and the World Payments Monitor carries provenance only; original illicit-finance analysis is routed to the Financial Intelligence Monitor as a cross-monitor flag. Per the Sentinel feed (sentinel.gi://rulebook.sama.gov.sa), KSA AML/CFT rests on the Anti-Money Laundering Law (Royal Decree M/20, 5/2/1439H) and the Law on Combating the Financing of Terrorism (M/21), with the SAMA AML/CTF Guide setting risk-based expectations. SAFIU receives suspicious-transaction reports. Saudi Arabia joined FATF in June 2019 as the first Arab and 37th member, is a founding MENAFATF member, and is not on the FATF increased-monitoring (grey) list as of 13 February 2026. SAMA also enforces Rules for the Implementation of Targeted Financial Sanctions. FATF non-grey-list status and SAMA risk-based AML supervision are baseline compliance facts for any Saudi payments operator. Any original illicit-finance, sanctions-evasion or mutual-evaluation analysis for the Kingdom belongs to the Financial Intelligence Monitor. #### Outlook The AML/CFT baseline is Sentinel-sourced and stable as of the February 2026 FATF list. Future updates to this module follow the Sentinel feed; substantive illicit-finance assessment is referred to the Financial Intelligence Monitor. No new data since the standing brief. 1 periodic run re-emitted it unchanged. **Sources and findings (7)** 1. T1 sentinel.gi://rulebook.sama.gov.sa/en/rules-implementation-targeted-financial-sanctions 2. T? FIM (sentinel.gi) per-JID baseline profile — Saudi Arabia — AML regime built on the 2003 Anti-Money Laundering Statute and Implementing Regulations, supervised by SAMA (banks/insurance/finance cos), CMA (securities) and SAFIU (FIU). Legal AML framework assessed as robust in 2018 MER but CFT/effectiveness lagged; enhanced follow-up ongoing with partial re-ratings (R6, R7 upgraded to largely compliant). Crypto activity remains formally prohibited even as CBDC/tokenization pilots expand. 3. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: sourcing-thinness 4. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: absent-field-provenance 5. T1 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-002) — Enforcement: OFAC — Houthi smuggling and illicit revenue-generation network (shipping companies, exchange houses) 6. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: legal-gap 7. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: regulatory-failure ### W12 Correspondent Banking, Settlement & Access Confirmed confirmed 2026-06-27 All interbank settlement is managed by SAMA via the SARIE RTGS (live May 1997), which provides immediate-finality settlement in central bank money for interbank transfers, customer credit transfers and direct debits; all domestic clearing systems (mada/SPAN, SADAD, sarie, ACH cheque clearing) net-settle over SARIE. SARIE participation is restricted to banks meeting SAMA-acceptable systems, procedures and certified staff (~23 participants plus SAMA). Cross-border correspondent access uses SWIFT messaging, with AFAQ (GCC cross-currency RTGS via Gulf Payments Company) and Buna (Arab Monetary Fund) providing regional alternatives that reduce reliance on traditional correspondent banking. SAR is pegged 3.75/USD; cross-border SAR movement requires licensed bank participation. SAMA participates in BIS, FSB and FATF. Standing sub-brief · as of 29 June 2026 200 words · last cycle 2026-10-11 #### Correspondent Banking, Settlement & Access The analytical spine of this module is the bank-versus-non-bank settlement-access asymmetry. SARIE (live since May 1997) is the SAMA-operated RTGS providing immediate-finality settlement in central bank money; all domestic clearing systems — mada/SPAN, SADAD, sarie and ACH — net-settle over SARIE. Participation is restricted to banks meeting SAMA-certified systems, procedures and staff, at roughly 23 participants plus SAMA. Because participation is bank-restricted, non-bank PSPs do not hold direct SARIE accounts and require a sponsoring bank for settlement — a structural market-access constraint that sits beneath every non-bank licensing and product story in the Saudi baseline. Cross-border settlement uses SWIFT, with AFAQ and Buna as regional alternatives. SAMA joined the BIS mBridge project as a full participant at MVP stage in June 2024, and the SAR is pegged at 3.75/USD. The non-bank PSP settlement-access gap is captured here under the methodology-mandated W12 lens. #### Outlook The bank-restricted settlement layer is the central structural constraint of the Saudi market, set against an otherwise liberalising fintech environment. Evidence does not specify whether any indirect or sponsored access scheme exists for licensed non-bank PIs/EMIs, leaving the precise mechanism for non-bank settlement reach uncertain — a priority gap for future cycles. Periodic update · new data 2026-10-11 #### Correspondent Banking, Settlement & Access Settlement and correspondent access for payment-system licensees in Saudi Arabia tightened materially this cycle through two SAMA circulars operating on the compliance infrastructure that sits behind, rather than replacing, the licensing framework described elsewhere. The first requires payment-system licensees to integrate beneficial-ownership verification with the Wathq service, a requirement that took effect progressively from March 2026. The second, effective 1 October 2026, requires integration with the Security Council Resolutions Notification System, operationalising real-time sanctions-designation screening directly into payment-system rails. For the payment-system operators and licensees this affects, these are not abstract compliance obligations; they are conditions attached to continued settlement and correspondent access. A licensee that integrates beneficial-ownership verification and sanctions-screening capability into its systems is, in effect, demonstrating to SAMA and to any correspondent or sponsor bank relationship it depends on that it can meet the verification standard those counterparties require to continue extending settlement access. In a market where many payment-service providers depend on a bank or sponsor relationship for settlement finality rather than holding direct central-bank settlement access themselves, the tightening of these upstream verification requirements has a direct bearing on how comfortable sponsor banks are likely to be in continuing or expanding those relationships: a licensee operating under a more rigorous, system-integrated verification regime presents a lower de-risking concern to a sponsor bank than one relying on manual or ad hoc processes. The timing of the sanctions-screening integration requirement, coming into force on 1 October 2026, places it squarely within the same calendar window as the broader oversight-framework revision and open-banking licensing expansion described elsewhere this cycle. Read together, SAMA's approach this cycle has been to widen who can access the payments market while simultaneously narrowing the tolerance for how those market participants demonstrate compliance with beneficial-ownership and sanctions-screening standards before they can rely on correspondent or settlement relationships. This is a structural feature of SAMA's current regulatory posture, not an isolated circular: it reflects a settlement-access regime in which market entry and compliance infrastructure are being tightened in parallel rather than sequentially. #### Outlook Payment-system operators and their sponsor-bank or correspondent counterparties should expect SAMA's emphasis on system-level, real-time verification and screening integration to continue, rather than being treated as a one-off compliance exercise satisfied by the Wathq and Security Council Resolutions Notification System integrations completed this cycle. Firms whose settlement arrangements depend on a sponsor-bank relationship are likely to face continued pressure to demonstrate equivalent system-integrated verification capability as the price of maintaining that access, particularly given the broader financial-integrity context in which these circulars sit. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (4)** 1. T1 [https://www.bis.org/cpmi/publ/d105_sa.pdf](https://www.bis.org/cpmi/publ/d105_sa.pdf) retrieved 2026-06-27 2. T3 [https://wiki.treasurers.org/wiki/Saudi_Arabia](https://wiki.treasurers.org/wiki/Saudi_Arabia) retrieved 2026-06-27 3. T1 [https://rulebook.sama.gov.sa/en/operating-rules-cross-currency-payments-using-afaq-service](https://rulebook.sama.gov.sa/en/operating-rules-cross-currency-payments-using-afaq-service) retrieved 2026-06-27 4. T2 [https://en.wikipedia.org/wiki/Saudi_Central_Bank](https://en.wikipedia.org/wiki/Saudi_Central_Bank) retrieved 2026-06-27 ### W13 Commercial Intelligence (M&A, Investment & Product) Probable confirmed 2026-06-27 Trailing-12-month commercial activity is led by the BNPL/fintech segment. Tamara secured up to $2.4bn asset-backed Shariah-compliant financing (Goldman Sachs/Citi/Apollo, Sept 2025) and obtained Saudi Arabia's first full SAMA consumer-finance licence (March 2025). Tabby raised a $160m Series E at a $3.3bn valuation (March 2025) and is preparing a Saudi IPO (HSBC/JPM/Morgan Stanley engaged); Tabby earlier acquired digital-wallet startup Tweeq. PIF-linked Sanabil and SNB Capital remain key local backers. Money20/20 first ran in Riyadh in 2025. Standing sub-brief · as of 29 June 2026 263 words · last cycle 2026-10-18 #### Commercial Intelligence (M&A, Investment & Product) The Saudi commercial-intelligence picture this cycle is dominated by the BNPL segment, carried as three discrete trailing-12-month events. First, an investment event: Saudi BNPL Tamara secured up to $2.4bn in asset-backed Shariah-compliant financing from Goldman Sachs, Citi and Apollo-managed funds, announced at Money20/20 Riyadh on 15 September 2025, with $1.4bn immediately deployable and refinancing a prior $500m facility — the largest disclosed KSA fintech debt event in the trailing twelve months. Second, an investment event: Saudi BNPL Tabby raised a $160m Series E at a $3.3bn valuation led by Blue Pool Capital and Hassana Investment Company in March 2025, with a Saudi IPO reportedly underway (HSBC, JP Morgan and Morgan Stanley engaged); Tabby had earlier acquired digital-wallet startup Tweeq, making it MENA's most valuable fintech at $3.3bn. Third, a licensing milestone rendered as a product event with value not publicly disclosed: Tamara became the first fintech startup to receive a full consumer finance licence from SAMA on 3 March 2025, covering both consumer finance and BNPL activities. Together these events signal deep institutional capital backing the BNPL segment and its maturation toward public-market exit, with Tamara's first-mover full consumer-finance licence positioning it ahead of BNPL peers on the SAMA authorisation ladder. #### Outlook The BNPL/fintech segment is the escalating commercial-intelligence theme for Saudi Arabia, advancing the Major M&A tracker. The most significant forward signal is Tabby's reported IPO preparation, which would mark the segment's transition toward public-market exit; future cycles should track the IPO process and any further institutional debt or equity events across the leading BNPL operators. Periodic update · new data 2026-10-18 #### Commercial Intelligence & Fintech Saudi Arabia was reported as the leading jurisdiction in Q3 2026 MENA fintech and startup funding, with approximately 1 billion dollars deployed across 62 deals region-wide according to a MAGNiTT-sourced quarterly wrap-up published by Arab News in mid-October 2026. Within that regional picture, two Saudi Arabia-specific transactions were disclosed on 17 October 2026, both of undisclosed amount. The first is a strategic investment by Foodics, a Saudi Arabia-domiciled company, into Funding Souq, also domiciled in Saudi Arabia and operating in the payments-adjacent space. The transaction is characterised as strategic rather than purely financial, which typically signals an intended commercial or operational relationship between investor and investee beyond a passive capital stake, though the specific nature of that relationship is not detailed in the reporting available this cycle. The amount of the investment was not publicly disclosed, and no further terms are available. The second is an investment into COFE Tech, a Saudi Arabia-domiciled company, led by Phoenix Venture Partners, domiciled in the United Arab Emirates, with KSH Investments participating as a co-investor. As with the Funding Souq transaction, the amount was not publicly disclosed. The involvement of a UAE-domiciled lead investor in a Saudi Arabia-domiciled target is consistent with continuing cross-border Gulf capital flows into the Saudi technology and fintech-adjacent sector. Both transactions were reported through the same Q3 2026 MENA funding wrap-up, which frames Saudi Arabia's overall investment performance for the quarter as a rebound, with Saudi Arabia leading the region by both deal value and deal count. Neither transaction carries any disclosed connection to payments licensing, conduct, safeguarding, stablecoin or AML/CFT regulatory activity; both are purely commercial-investment events as reported. No further detail on valuation, use of proceeds, or definitive closing status beyond the announcement itself is available for either transaction this cycle. The absence of disclosed amounts for both transactions is itself a notable pattern rather than an isolated gap: undisclosed-value strategic and institutional rounds appear to be a recurring feature of Saudi Arabia's fintech investment reporting this quarter, which limits the precision with which aggregate sector investment figures for Saudi Arabia specifically, as distinct from the regional total, can be assessed. #### Outlook Continued investor interest into the Saudi Arabia fintech and adjacent-technology sector appears likely to persist into Q4 2026, consistent with the broader MENA funding-rebound narrative in which Saudi Arabia was named the leading jurisdiction for Q3 2026. Whether the Foodics-Funding Souq or Phoenix Venture Partners-COFE Tech transaction values will be disclosed in later reporting, and whether the strategic relationship between Foodics and Funding Souq will be elaborated in subsequent commercial announcements, remains to be seen as scheduled reporting continues through the remainder of 2026. **1 earlier distinct update(s)** Periodic update · new data 2026-10-11 #### Commercial Intelligence & Fintech Saudi Arabia's fintech and payments sector recorded a notable commercial event this cycle: barq closed a $329.5 million Series A funding round, equivalent to SAR 1.24 billion, at a post-money valuation of $1.85 billion, on 16 September 2026. The round was reported as making barq the Kingdom's newest fintech unicorn, a label reflecting the scale of the valuation reached in a single funding round rather than a cumulative build-up across multiple rounds. barq operates in the embedded finance and banking-as-a-service space, and a round of this size at Series A stage is a significant commercial-intelligence data point for the sector: it indicates continued investor appetite for Saudi fintech ventures operating in the embedded-finance and infrastructure layer of the payments stack, distinct from consumer-facing payment apps. The barq round should be read as a discrete, dated commercial event rather than as evidence of a broader structural shift in Saudi fintech funding dynamics on its own; a single large round, however notable, does not by itself establish a trend. It is, however, consistent with the broader climate described elsewhere this cycle: a regulatory environment in which SAMA has been actively expanding licensing pathways (the open-banking launch) and formalising oversight (the revised payment-systems framework) in the months immediately preceding and surrounding the round's closing. Whether the round's timing was influenced by, or simply coincided with, that regulatory activity is not established by the sourcing available, but the juxtaposition is notable for market participants tracking the relationship between regulatory clarity and investor confidence in the Saudi fintech sector. #### Outlook The barq round, at $329.5 million, sets a new high-water mark for Series A-stage fintech funding in Saudi Arabia this cycle and will likely serve as a reference point for valuing comparable embedded-finance ventures seeking funding in the Kingdom going forward. Further large funding rounds in the Saudi fintech sector remain plausible given the regulatory momentum described elsewhere this cycle, though whether barq's round proves to be an outlier or the first of a wave of comparably sized rounds cannot be determined from this cycle's evidence alone. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (4)** 1. T3 [https://techstartups.com/2025/09/15/saudi-fintech-tamara-raises-2-4b-in-funding-from-goldman-sachs-citi-and-apollo/](https://techstartups.com/2025/09/15/saudi-fintech-tamara-raises-2-4b-in-funding-from-goldman-sachs-citi-and-apollo/) retrieved 2026-06-27 2. T2 [https://tamara.co/en-sa/blog-post/tamara-secures-saudi-central-bank-finance-license](https://tamara.co/en-sa/blog-post/tamara-secures-saudi-central-bank-finance-license) retrieved 2026-06-27 3. T3 [https://www.fintechfutures.com/venture-capital-funding/saudi-bnpl-fintech-tabby-raises-160m-series-e-ipo-plans-reportedly-underway](https://www.fintechfutures.com/venture-capital-funding/saudi-bnpl-fintech-tabby-raises-160m-series-e-ipo-plans-reportedly-underway) retrieved 2026-06-27 4. T3 [https://tracxn.com/d/companies/tamara/sA9LdsEMuXH0uuJBISmpxdf4ThsexKc3rMUqPtj7-dQ](https://tracxn.com/d/companies/tamara/sA9LdsEMuXH0uuJBISmpxdf4ThsexKc3rMUqPtj7-dQ) retrieved 2026-06-27 ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Saudi Arabia| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 2 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 61 finding(s), 111 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).