Rule · SAMA · 13 Feb 2021
Banks and payment service companies operating in the Kingdom must exercise caution and adhere to international payment network directives when allowing prior authorization and notification transactions, restricting them to targeted sectors. They must monitor these transactions, investigate suspicious or high-risk activity relative to customer segments and amounts, and develop Fraud Monitoring & Detection Systems. These obligations are effective from the document's date.
Saudi Central Bank (SAMA)
Circular
To:
Respected Parties,
Peace, mercy, and blessings of God be upon you.
Subject: Financial Frauds Through Prior Authorization and Notification Features.
Reference is made to the Saudi Central Bank's (SAMA) supervisory role in striving to combat financial fraud crimes and overseeing financial transactions executed through various payment instruments, such as credit cards or debit cards and similar instruments, via point-of-sale (POS) devices available in stores and commercial sectors across the Kingdom.
We wish to inform you that it has recently been observed that certain parties are executing suspicious transactions through POS devices via fraudulent practices by exploiting the prior authorization feature (Preauthorization transaction) and the notification/capture feature (Capture / Purchase Advise) using bank cards belonging to global payment networks.
In order to protect the host banks, financial technology companies, and their clients from any suspicious transactions that may result in these entities facing consequences of financial fraud crimes, the Saudi Central Bank emphasizes the importance of all acquiring service providers for POS transactions exercising caution and adhering to relevant directives from international payment networks when allowing this type of transaction, and ensuring that it is exclusively available to targeted sectors according to relevant standards. Furthermore, all service providers should monitor transactions executed via the prior authorization and notification features, investigate suspicious and high-risk transactions relative to the customer segment and transaction amount, and develop financial fraud monitoring and detection systems (Fraud Monitoring & Detection System) in compliance with these standards. Full compliance is also emphasized with the Financial Fraud Prevention Guide issued under SAMA Circular No. 41.71315 dated 27/12/1441 AH.
For your information and action, effective from its date.
Yours sincerely,
Fahd bin Ibrahim Al-Shathri
Deputy Governor for Supervision
Distribution Scope:
P.O. Box 2992 Riyadh 11169, Kingdom of Saudi Arabia Tel: +966 11 463 3000 P.O. Box: 2992, Riyadh, 11169, Kingdom of Saudi Arabia Tel: +966 11 463 3000
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
More like this from SAMA
We email you every new SAMA publication the day it's published.
Source: Saudi Central Bank — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated