Saudi Arabia: fintech & payments regulation

Regulated

Fintech & payments regulated under SAMA/CMA oversight; Payments System Law 2020

Lead regulator:
Saudi Central Bank (SAMA)
Key law:
Payments and Payment Services Law (2020)
Last updated:
2026-07-12

The Saudi fintech and payments sector is strictly regulated, with the Saudi Central Bank (SAMA) serving as the primary supervisor for payment systems, electronic money, and digital mediation. The Capital Market Authority (CMA) oversees investment funds and capital market activities. The regulatory framework is anchored by the Payments and Payment Services Law and its Implementing Regulations, which mandate licensing for payment service providers and establish a principles-based supervisory methodology.

Key activities such as electronic money issuance, payment services, and digital mediation require specific SAMA licenses, while debt collection activities have recently been deregulated from direct licensing requirements. The regime emphasizes strict compliance with Know Your Customer (KYC) standards, cybersecurity, and data retention, alongside the integration of national infrastructure like the SARIE instant payment system and the Musanid wage protection platform.

Recent regulatory direction focuses on modernizing payment infrastructure, including the mandatory transition to electronic cheque clearing and the standardization of ATM and POS pricing. The sector is also seeing expanded interoperability, such as allowing electronic money institutions to distribute investment fund units, reflecting a push for a more integrated and efficient financial ecosystem.

Who regulates

  • Saudi Central Bank (SAMA)

    Primary supervisor for payment systems, electronic money, and fintech licensing.

    [1][2][3]
  • Capital Market Authority (CMA)

    Supervisor for investment funds, securities exchanges, and capital market instruments.

    [4][5]

Core laws & rules

  • Payments and Payment Services Law (2020)

    The core legislation governing payment systems and service providers, replaced by Implementing Regulations in 2023.

    [1][2]
  • Implementing Regulations of the Payments and Payment Services Law (2023)

    Detailed rules revoking prior regulations, mandating strict adherence to licensing and operational standards.

    [2]

Licensing & registration

  • Payment Service Providers / Electronic Money

    Licensing required for entities providing payment services or issuing electronic money, subject to strict technical and operational standards.

    [3][2]
  • Digital Mediation

    Licensing required for digital mediation institutions, with minimum technical and operational standards mandated.

    [6]
  • Finance Debt Collection

    SAMA has cancelled the mandatory licensing requirement for finance debt collection entities.

    [7]

Restrictions & warnings

  • Entities must secure SAMA technical approvals and avoid merchant contracting/settlement if acting as ancillary e-commerce support providers.

    [8]
  • Strict KYC verification is mandatory before selling or operating POS devices, and funds from specific government entities are exempt from seizure.

    [9]

Direction of travel

  • Regulators are driving infrastructure modernization, including the mandatory launch of the Electronic Cheque Clearing System and integration with national platforms like Musanid.

    [10][11]
  • The sector is expanding into new areas such as the distribution of investment funds via e-wallets and the regulation of BNPL under the Financing Companies Control System.

    [12][13]

Email alerts for Saudi Arabia updates

New circulars, rules and guidance — a digest in your inbox, same day.

This guide is compiled automatically from 13 primary-source documents published by Saudi Arabia's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.