Saudi Arabia: fintech & payments regulation

Regulated

SAMA regulates fintech under Payments Law; licensing required for core services

Lead regulator
Saudi Central Bank (SAMA)
Also involved
CMA (securities/funds) · MCI (e-commerce) · NDPC (data)
Core law
Payments and Payment Services Law (2020)
Entry capital
SAR 5m (Electronic Money Institution)
Approval timeline
3-6 months
Customer assets
Segregated in licensed bank accounts
Data protection
NDPA 2023 · NDPC
Sandbox
Yes - SAMA Regulatory Sandbox

The Saudi Central Bank (SAMA) is the primary regulator for fintech and payment services under the Payments and Payment Services Law and its Implementing Regulations. The regime is principles-based, requiring licensing for core financial activities like e-money and payments. The sector is actively expanding, with SAMA issuing specific rules for e-wallets, BNPL, and digital mediation.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Payment processing / gatewayLicencePayment Service Provider (PSP)[1][2]

Licensing required for payment processing; ancillary tech support exempt.

SAMA
E-money & wallet issuanceLicenceElectronic Money Institution (EMI)[3]

Strict rules on wallet issuance, limits, and fraud prevention.

SAR 5mSAMA
Domestic money transferLicencePayment Service Provider (PSP)[1][4]

Domestic transfers require PSP license; subject to KYC and account verification.

SAMA
Cross-border remittanceLicencePayment Service Provider (PSP)[1]

Cross-border remittance requires PSP license; specific rules for exchange houses.

SAMA
Agent networkLicencePayment Service Provider (PSP)[1]

Agent networks for PSPs must be licensed; strict operational standards.

SAMA
Open banking / account informationLicencePayment Service Provider (PSP)[1]

Account information services require PSP license; technical connectivity mandatory.

SAMA
Foreign-exchange servicesLicenceMoney Changer / PSP[1]

Currency exchange requires Money Changer license; PSPs may offer FX.

SAR 2m-10mSAMA

New — what changed recently

  • 2026-03-08Update of the Oversight Framework for Payment SystemsSAMA updated its oversight framework for payment systems, aligning with the Payments System Law and introducing a principles-based supervisory methodology.[5]
  • 2025-12-28Cancellation of SAMA's Licensing Requirement for Finance Debt CollectionSAMA cancelled the mandatory licensing requirement for finance debt collection entities, streamlining regulatory compliance.
  • 2024-07-24Rules for Dealing with E-Commerce Payment Service and Support ProvidersSAMA clarified that technical connectivity and support services for e-commerce payments are ancillary and exempt from direct licensing.[2]
  • 2024-07-03Urging Acceptance of Electronic Payments for Insurance ContributionsSAMA urged commercial banks to accept electronic payments of insurance contributions from GCC employees.[6]
  • 2023-07-04Implementing Regulations of the Payments and Payment Services LawSAMA issued the Implementing Regulations of the Payments and Payment Services Law, revoking prior regulations and mandating strict adherence.[1]

Market-entry checklist

  1. 1Secure SAMA LicenseApply for a Payment Service Provider or EMI license under the Payments and Payment Services Law.
  2. 2Meet Capital RequirementsEnsure minimum capital of SAR 5m for EMI or SAR 2m-10m for Money Changer as applicable.
  3. 3Establish Technical ConnectivityConnect to SAMA's payment systems (SARIE, RTGS) and obtain necessary technical approvals.
  4. 4Implement KYC and AMLAdhere to strict Know Your Customer and Anti-Money Laundering procedures as mandated by SAMA.
  5. 5Segregate Customer FundsMaintain segregated bank accounts for customer funds in compliance with SAMA rules.
This guide is compiled automatically from 6 primary-source documents published by Saudi Arabia's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.