RegAlert

Saudi Arabia: fintech & payments regulation — 2026-08

Regulated

SAMA regulates fintech under Payments Law; licensing required for core services

Frozen snapshot — the guide as it stood at the end of 2026-08. See the live guide for the current state.

The Saudi Central Bank (SAMA) is the primary regulator for fintech and payment services under the Payments and Payment Services Law and its Implementing Regulations. The regime is principles-based, requiring licensing for core financial activities like e-money and payments. The sector is actively expanding, with SAMA issuing specific rules for e-wallets, BNPL, and digital mediation.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Payment processing / gatewayLicencePayment Service Provider (PSP)[1][2]

Licensing required for payment processing; ancillary tech support exempt.

——SAMA
E-money & wallet issuanceLicenceElectronic Money Institution (EMI)[3]

Strict rules on wallet issuance, limits, and fraud prevention.

SAR 5m—SAMA
Domestic money transferLicencePayment Service Provider (PSP)[1][4]

Domestic transfers require PSP license; subject to KYC and account verification.

——SAMA
Cross-border remittanceLicencePayment Service Provider (PSP)[1]

Cross-border remittance requires PSP license; specific rules for exchange houses.

——SAMA
Agent networkLicencePayment Service Provider (PSP)[1]

Agent networks for PSPs must be licensed; strict operational standards.

——SAMA
Open banking / account informationLicencePayment Service Provider (PSP)[1]

Account information services require PSP license; technical connectivity mandatory.

——SAMA
Foreign-exchange servicesLicenceMoney Changer / PSP[1]

Currency exchange requires Money Changer license; PSPs may offer FX.

SAR 2m-10m—SAMA

New — what changed recently

  • 2026-03-08Update of the Oversight Framework for Payment Systems — SAMA updated its oversight framework for payment systems, aligning with the Payments System Law and introducing a principles-based supervisory methodology.[5]
  • 2025-12-28Cancellation of SAMA's Licensing Requirement for Finance Debt Collection — SAMA cancelled the mandatory licensing requirement for finance debt collection entities, streamlining regulatory compliance.
  • 2024-07-24Rules for Dealing with E-Commerce Payment Service and Support Providers — SAMA clarified that technical connectivity and support services for e-commerce payments are ancillary and exempt from direct licensing.[2]
  • 2024-07-03Urging Acceptance of Electronic Payments for Insurance Contributions — SAMA urged commercial banks to accept electronic payments of insurance contributions from GCC employees.[6]
  • 2023-07-04Implementing Regulations of the Payments and Payment Services Law — SAMA issued the Implementing Regulations of the Payments and Payment Services Law, revoking prior regulations and mandating strict adherence.[1]

Market-entry checklist

  1. 1Secure SAMA LicenseApply for a Payment Service Provider or EMI license under the Payments and Payment Services Law.
  2. 2Meet Capital RequirementsEnsure minimum capital of SAR 5m for EMI or SAR 2m-10m for Money Changer as applicable.
  3. 3Establish Technical ConnectivityConnect to SAMA's payment systems (SARIE, RTGS) and obtain necessary technical approvals.
  4. 4Implement KYC and AMLAdhere to strict Know Your Customer and Anti-Money Laundering procedures as mandated by SAMA.
  5. 5Segregate Customer FundsMaintain segregated bank accounts for customer funds in compliance with SAMA rules.

Sources

  1. Implementing Regulations of the Payments and Payment Services Law · 2023-07-04
  2. Rules for Dealing with E-Commerce Payment Service and Support Providers · 2024-07-24
  3. Rules for Electronic Wallets · 2024-10-29
  4. Implementation of the account verification service through the IPS (SARIE) and RTGS system · 2023-04-16
  5. Circular on the Update of the Oversight Framework for Payment Systems and Their Operators · 2026-03-08
  6. Urging the Acceptance of Payment of Gulf Employees' Insurance Contributions through Electronic Means, and Providing the Required Information and Data · 2024-07-03