Rule · SAMA · 1 Mar 2021
Payment Service Companies must verify the effectiveness of Know Your Customer (KYC) procedures before initiating point-of-sale device sales or operations. They must ensure the marketing entity is licensed by the Saudi Central Bank and verify the comprehensiveness of internal policies for all customer categories, including identifying potential risks. These obligations are effective from the document's date.
Saudi Central Bank (SAMA)
Circular
To the Esteemed,
Peace, mercy, and blessings of God be upon you,
Subject: Emphasizing the mandatory verification of customers and the effectiveness of procedures followed to adhere to the "Know Your Customer (KYC)" principle before initiating the sale or operation of point-of-sale devices.
Based on the Banking Control System issued by Royal Decree No. M/5 dated 22/07/1386 AH, and referring to the powers granted to the Saudi Central Bank by Cabinet Decision No. (26) dated 05/1440 AH, confirming it as the competent authority under the system for operating, monitoring, and supervising payment systems, clearing, and related services in the Kingdom, with the authority to issue regulations, instructions, and licenses according to applicable standards; and based on Article 3 of the Regulatory Rules for Payment Services, which stipulates that "inviting or encouraging any person in the Kingdom to conclude or enter into an agreement related to one or more payment services, or marketing or promoting them after providing payment services in the Kingdom requires obtaining a license from the Central Bank; and referring to Article 8 of the Rules, which mandates establishing policies and procedures for detecting fraud cases and mechanisms for handling them, in addition to notifying the competent authorities in the country and informing the Central Bank according to the specified format.
The Saudi Central Bank wishes to emphasize the importance of verifying the effectiveness of procedures followed to adhere to the "Know Your Customer (KYC)" principle before initiating the sale or operation of point-of-sale devices, and that the party entrusted with marketing and promoting the devices is an entity licensed by the Saudi Central Bank, in addition to the importance of verifying the comprehensiveness and appropriateness of internal policies and procedures established by the company for all customer categories benefiting from these services, which include identifying potential risk types, monitoring and managing them, and reporting on them; we also wish to emphasize the importance of verifying that the point-of-sale device is connected only to the customer's bank account and not accepted for transfer to another person's account.
For information and action, effective from its date.
Yours sincerely,
Fahad bin Ibrahim Al-Shathri
Deputy Governor for Supervision
Distribution Scope: Payment Service Companies.
No.: 42050337
Date: 18/07/1442
Attachments: None
P.O. Box 2992 Riyadh 11169, Kingdom of Saudi Arabia Tel: +966 11 463 3000 P.O. Box 2992, Riyadh 11169, Kingdom of Saudi Arabia Tel: +966 11 463 3000
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
More like this from SAMA
We email you every new SAMA publication the day it's published.
Source: Saudi Central Bank — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated