2025-12-31
Added · Updated
The Saudi Central Bank issued this circular to establish a comprehensive guidance framework requiring all supervised financial institutions to implement minimum factors and standardized methodologies for assessing business risks related to money laundering, terrorist financing, and proliferation financing. The guidance outlines key governance responsibilities, risk assessment stages tailored to institutional activities and operational scale, and flexible controls that complement existing regulatory obligations without restricting additional compliance measures. Financial institutions must adopt these risk assessment methods and publish their adopted approaches on the Bank’s official website to ensure ongoing regulatory alignment and effective risk mitigation.
Get SAMA alerts — same-day email on every new publication.
Saudi Central Bank Unit
Item No. 472039915
Date: 1447/07/11 AH
Attachments: 16 pages
To the Esteemed Financial Institutions,
Circular Greetings, Peace, mercy of God and His blessings.
Subject: Guidance on Assessing Business Risks Related to Money Laundering, Terrorist Financing, and Proliferation Financing.
In reference to the Saudi Central Bank's authority to issue relevant instructions regarding financial institutions and their operations under its supervision, based on the Saudi Central Bank System issued by Royal Decree No. (M63) dated 11/4/2441 AH, the Anti-Money Laundering System issued by Royal Decree No. (M20) dated 5/2/1439 AH, the Anti-Terrorism and Financing of Terrorism Crimes System issued by Royal Decree No. (M12) dated 12/2/1439 AH, and related systems and regulations.
Attached is the Guidance on Assessing Business Risks Related to Money Laundering, Terrorist Financing, and Proliferation Financing, which aims to establish the minimum factors that financial institutions must consider when conducting their business risk assessment. The Guidance includes the key standards and controls to be observed during this process, as well as risk assessment methods according to the nature of the financial institution's activities, the size of its operations, and its level of risk exposure. It is emphasized that this Guidance does not impose a single standardized methodology for risk assessment, nor are the factors, standards, and controls specified herein exclusive or restrictive of the obligations imposed on financial institutions under related systems, regulations, and instructions concerning money laundering, terrorist financing, and proliferation financing. Furthermore, this Guidance does not prevent financial institutions from adopting any additional measures necessary to fulfill their obligations regarding money laundering, terrorist financing, and proliferation financing.
For information and action from the date of publication of the Guidance on the Bank's website.
Yours sincerely,
Distribution Scope: All financial institutions under the supervision and oversight of the Saudi Central Bank.
Riyadh 11691, Kingdom of Saudi Arabia
Abdullah bin Saleh Al-Humaid
Deputy Governor for Financial Behavior
Guidance on Assessing Business Risks Related to Money Laundering, Terrorist Financing, and Proliferation Financing First Edition - Rajab 1447 AH / December 2025 CE
Important Note:
To keep pace with updates and amendments to instructions issued by the Saudi Central Bank, the Bank emphasizes continuous reliance on the version published on its official website: www.sama.gov.sa.
Saudi Central Bank - SAMA
Saudi Central Bank
Chapter 1: Definitions and General Provisions
Table of Contents
Chapter 2: Governance and Financial Institution Responsibilities
Chapter 3: Stages of Financial Institutions' Business Risk Assessment
Chapter 4: Final Provisions
Page References: 3, 7, 16/2
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
Source: Saudi Central Bank — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
More like this from SAMA
We email you every new SAMA publication the day it's published.