{
 "jurisdiction_id": "SA",
 "jurisdiction": "Saudi Arabia",
 "url": "https://payments.gi/jurisdictions/saudi-arabia/",
 "generator": "render_jid v13.3.0",
 "date_modified": "2026-08-11",
 "schema_version": "world-payments-v1",
 "counts": {
  "modules": 14,
  "sourced_findings": 61,
  "source_register": 89
 },
 "modules": [
  {
   "code": "W1a",
   "name": "Licensing, Authorisation & Market Access",
   "confidence": "Confirmed",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w1a-licensing-authorisation-market-access",
   "standing_position": "Saudi Arabia operates a unitary SAMA-supervised payments licensing regime under the Law of Payments and Payment Services (Royal Decree M/26, 22/03/1443H) and its Implementing Regulation (effective 13/06/2023G), which repealed and replaced the January 2020 PSPR. Non-bank PSPs apply for one of four licences — Micro PI, Major PI, Micro EMI, Major EMI — with PI/EMI distinguished by whether the entity may issue electronic money. The framework draws on EU PSD2 concepts. SAMA is the sole authorising body; licensing proceeds via in-principle approval then final licensing. Banks operate under the separate Banking Control Law (M/5). No federal/state split applies (unitary state).",
   "findings": [
    {
     "finding": null,
     "instrument_type": "primary_statute",
     "source": "https://rulebook.sama.gov.sa/en/law-payments-and-payment-services",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "implementing_regulation",
     "source": "https://rulebook.sama.gov.sa/en/implementing-regulations-payments-and-payment-services-law",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "licence_taxonomy",
     "source": "https://www.lexology.com/library/detail.aspx?g=36edd3a6-fb14-4556-abe1-39c321cc7dbe",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "licensing_guidelines",
     "source": "https://rulebook.sama.gov.sa/en/guidelines-apply-payment-service-providers-license",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "supervisory_scope",
     "source": "https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/saudi-arabia",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W1b",
   "name": "Conduct, Safeguarding & Financial Promotions",
   "confidence": "Confirmed",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w1b-conduct-safeguarding-financial-promotions",
   "standing_position": "Conduct and safeguarding for KSA PSPs sit within the Implementing Regulation of the Law of Payments and Payment Services, which includes dedicated parts on consumer protection, financial inclusion, e-money issuance/redemption, outsourcing and risk. EMIs must redeem e-money at par and safeguard funds (pooled account discipline applies to PSP customer funds per SAMA rules). Conduct obligations cover governance, fit-and-proper senior appointments, framework-contract disclosure and ongoing financial reporting. Promotions/advertising norms are layered onto specific regimes (e.g. BNPL advertising transparency rules). SAMA is the supervising authority.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "implementing_regulation",
     "source": "https://www.sama.gov.sa/en-US/LawsRegulations/DocLib/Implementing_Regulations_for_Law_of_Payments_and_Payment_Services-EN.pdf",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "safeguarding_rule",
     "source": "https://rulebook.sama.gov.sa/en/rules-dealing-e-commerce-payment-service-and-support-providers-0",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "conduct_obligation",
     "source": "https://www.sama.gov.sa/en-US/payment/Documents/PSPs%20Regulations%20111.pdf",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "conduct_complaints",
     "source": "https://rulebook.sama.gov.sa/en/new-banking-products-and-services-regulation",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W2",
   "name": "Stablecoins & Digital Money",
   "confidence": "Confirmed",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w2-stablecoins-digital-money",
   "standing_position": "E-money is regulated and licensed (EMI regime under the Law of Payments and Payment Services), but private cryptocurrencies and stablecoins remain outside the formal regulatory perimeter. Since a 2018 standing-committee declaration, virtual currencies are not approved/licensed, and banks are barred from crypto business absent SAMA approval. No stablecoin classification, reserve, redemption or attestation rules are in force. In late 2025 a minister announced plans to develop nationally regulated stablecoins under joint SAMA + CMA oversight — this is a policy-design-stage proposal, NOT enacted. Wholesale CBDC (digital riyal) research continues (Project Aber, mBridge MVP).",
   "findings": [
    {
     "finding": null,
     "instrument_type": "emoney_framework",
     "source": "https://rulebook.sama.gov.sa/en/implementing-regulations-payments-and-payment-services-law",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "regulatory_posture",
     "source": "https://blogs.loc.gov/law/2025/01/falqs-regulation-of-cryptocurrencies-in-the-gulf-cooperation-council-countries-part-one/",
     "source_url": null,
     "source_tier": "2",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "pending_horizon",
     "source": "https://www.plasma.to/learn/tools/stablecoin-regulation-map/saudi-arabia",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "cbdc_pilot",
     "source": "https://www.sama.gov.sa/en-us/mediacenter/news/pages/news-812.aspx",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "cbdc_multilateral",
     "source": "https://iclg.com/practice-areas/fintech-laws-and-regulations/saudi-arabia/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W3",
   "name": "Operational Resilience & Critical Infrastructure",
   "confidence": "Confirmed",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w3-operational-resilience-critical-infrastructure",
   "standing_position": "Operational resilience for SAMA-regulated entities (banks, PSPs, finance and insurance firms) rests on the SAMA Cyber Security Framework (v1.0, May 2017), the Business Continuity Management Framework, and the Cyber Resilience Fundamental Requirements (CRFR) which applies as a licensing/sandbox gate. The CSF is a mandatory, maturity-based model spanning governance, risk, asset/data protection, access control, incident management, third-party risk and business continuity, with board-level accountability. The BCM framework mandates MAO/RTO/RPO definitions, crisis management and testing. PDPL (2023, enforced Sept 2024) adds data-protection obligations supervised alongside SAMA.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "resilience_framework",
     "source": "https://www.rulebook.sama.gov.sa/en/cyber-security-framework-2",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "business_continuity",
     "source": "https://www.sama.gov.sa/en-US/Laws/BankingRules/BCM%20framework.pdf",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "licensing_gate",
     "source": "https://rulebook.sama.gov.sa/en/cyber-resilience-fundamental-requirements-crfr-1",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "data_protection",
     "source": "https://resourcehub.bakermckenzie.com/en/resources/global-data-and-cyber-handbook/emea/saudi-arabia/topics/regulators-enforcement-priorities-and-penalties",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W4",
   "name": "Scheme & Network Compliance",
   "confidence": "High",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w4-scheme-network-compliance",
   "standing_position": "Domestic card routing runs through mada, the national debit scheme operated by Saudi Payments (a SAMA subsidiary), mandated on every Saudi bank card; international Visa/Mastercard co-badge for cross-border and credit. Interchange/MSC is capped by SAMA: mada debit MSC limited to 0.80% (capped ~SAR 40 per transaction), with effective-2025 caps on international card fees (2%) and free e-wallet top-ups via credit cards. EMVco-compliant unified QR (ISO 20022) and tokenised/biometric mada acceptance are in force. ZATCA 'Fatoora' e-invoicing imposes parallel compliance on merchant systems.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "national_scheme",
     "source": "https://my.gov.sa/en/content/epayment",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "interchange_cap",
     "source": "https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "technical_standard",
     "source": "https://issuu.com/meafinance/docs/march-2022/s/15012459",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "scheme_security",
     "source": "https://whitesight.net/how-saudi-arabia-engineered-a-digital-payments-boom/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W5",
   "name": "Payment Corridor Dynamics",
   "confidence": "Confirmed",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w5-payment-corridor-dynamics",
   "standing_position": "Domestic instant rail is sarie (Instant Payment System, launched 2021), a 24/7 low-value (≤ SAR 20,000) overlay settling through the SARIE RTGS, supporting alias identifiers (mobile, national ID, Iqama, email). For cross-border, Saudi Arabia is a founding participant in AFAQ — the GCC cross-currency RTGS (live December 2021, operated via Gulf Payments Company owned by the six GCC central banks) — and connects to Buna (Arab Monetary Fund multilateral platform). SWIFT remains the primary international correspondent messaging layer. SAR is not freely convertible and is pegged at 3.75/USD; cross-border SAR movements require licensed bank participation. KSA hosts one of the world's largest remittance corridors.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "instant_rail",
     "source": "https://www.sama.gov.sa/en-US/payment/pages/Sarie.aspx",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "cross_border_rail",
     "source": "https://rulebook.sama.gov.sa/en/operating-rules-cross-currency-payments-using-afaq-service",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "corridor_architecture",
     "source": "https://clearingpost.com/insights/saudi-arabia-payment-infrastructure-guide-sarie-mada-sadad/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "regional_integration",
     "source": "https://www.theasianbanker.com/updates-and-articles/cross-border-payments-in-the-middle-east-become-more-inclusive",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W6",
   "name": "Industry Structure & Commercial Dynamics",
   "confidence": "High",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w6-industry-structure-commercial-dynamics",
   "standing_position": "The KSA payments market is dominated by SAMA's subsidiary Saudi Payments operating the national rails (mada, SADAD, sarie, Esal) and by a concentrated bank-acquiring layer alongside fast-growing fintechs. Al Rajhi Bank leads merchant acquiring (~41% of POS terminals); Geidea dominates POS/softPOS hardware (~75% share); STC Bank (formerly STC Pay) is a fully licensed digital bank leading wallets, P2P and remittances; SNB is prominent in card payments and instant transfers. The Vision 2030 Financial Sector Development Programme targets growth from 82 fintechs (2020) to 525 by 2030, with 216 fintechs and SAR 2.7bn funding by end-2023. Electronic payments hit 79% of retail transactions in 2024, beating the 70% target early.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "market_infrastructure",
     "source": "https://en.wikipedia.org/wiki/Saudi_Central_Bank",
     "source_url": null,
     "source_tier": "2",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "market_concentration",
     "source": "https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "sector_growth",
     "source": "https://iclg.com/practice-areas/fintech-laws-and-regulations/saudi-arabia/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "market_metric",
     "source": "https://vision2030.ai/sectors/financial-services/payments/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W7",
   "name": "Legal & Litigation",
   "confidence": "Assessed",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w7-legal-litigation",
   "standing_position": "Payments-related enforcement in KSA is administrative and supervisory rather than common-law litigation-driven. SAMA publicly announces penalties against financial institutions and maintains 'Instructions for Publishing Banking Penalties'. The CMA actively pursues market manipulation and securities fraud (e.g. May 2025 referral of suspects to Public Prosecution; Oct 2023 SAR 4.2m fines on two companies). The Anti-Financial Fraud and Breach of Trust Law (with Executive Regulations) criminalises fraud with penalties up to 7 years and SAR 5m. PDPL breaches carry fines up to SAR 5m supervised by SDAIA/SAMA. Payments disputes under the Law of Payments must first undergo a 30-day amicable settlement before judicial referral.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "dispute_mechanism",
     "source": "https://rulebook.sama.gov.sa/en/law-payments-and-payment-services",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "enforcement_practice",
     "source": "https://www.commenda.io/saudi-arabia/penalties-for-non-compliance",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "enforcement_action",
     "source": "https://www.zigram.tech/article/saudi-arabia-antifinancial-crime/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "criminal_statute",
     "source": "https://nawaf-law.com.sa/en/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W8",
   "name": "Merchant Acquiring & Risk",
   "confidence": "High",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w8-merchant-acquiring-risk",
   "standing_position": "Acquiring is bank-led, dominated by Al Rajhi (~41% POS share) with Geidea providing the bulk of POS/softPOS hardware (~75%). mada integration is effectively mandatory for domestic card acceptance, alongside dual integration with Visa/Mastercard for cross-border. SAMA caps the mada debit MSC at 0.80% (~SAR 40 cap) protecting merchant margins. SAMA has issued new merchant-acquirer licences and opened QR/Tap-to-Phone acceptance, driving POS terminal counts past 1 million. Merchants must also integrate POS/ERP with ZATCA's 'Fatoora' e-invoicing portal (phased rollout, cryptographic stamps, penalties for non-compliance). Open-banking pay-by-bank is emerging as a lower-cost acquiring alternative.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "acquiring_requirement",
     "source": "https://clearingpost.com/insights/saudi-arabia-payment-infrastructure-guide-sarie-mada-sadad/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "acquiring_economics",
     "source": "https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "acquiring_expansion",
     "source": "https://whitesight.net/how-saudi-arabia-engineered-a-digital-payments-boom/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "acquiring_localisation",
     "source": "https://www.orchestrapay.com/coverage/middle-east/saudi-arabia",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W9",
   "name": "Product Innovation & Market Development",
   "confidence": "Confirmed",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w9-product-innovation-market-development",
   "standing_position": "KSA innovation is regulator-led under Vision 2030's FSDP. SAMA launched the Open Banking Framework (Open Banking Policy Dec 2020; framework launched Nov 2022), with the Open Banking Lab (2022/2023) for conformance testing; Account Information Services then Payment Initiation Services (PIS, major update Sept 2024) are in production. SAMA runs a Regulatory Sandbox issuing limited test licences (open banking platforms XSquare/NeotTek, P2P lender MoneyMoon approved). The 'View My Bank Accounts' fraud-prevention service launched May 2024. CBDC research (wholesale, mBridge) and Tarabut/Sharia-compliant micro-lending pilots continue. STC Pay's conversion to a full digital bank exemplifies product build-out.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "open_banking_framework",
     "source": "https://openbanking.sa/index-en.html",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "open_banking_rollout",
     "source": "https://ozoneapi.com/the-open-finance-tracker/library/ksa-open-banking-standard/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "sandbox_approvals",
     "source": "https://iclg.com/practice-areas/fintech-laws-and-regulations/saudi-arabia/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "product_launch",
     "source": "https://juspay.io/en-ae/blog/a-strategic-guide-to-the-payments-landscape-in-saudi-arabia",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W10",
   "name": "Consumer Protection & APP Fraud",
   "confidence": "Confirmed",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w10-consumer-protection-app-fraud",
   "standing_position": "Consumer protection is embedded in the Implementing Regulation (Part 5) and SAMA conduct rules, with a centralised Complaint Management System (replacing SAMACARES, effective 1/7/2025G) as the ombudsman-equivalent route. BNPL — large and consumer-facing (Tabby, Tamara, MIS Pay licensed/permitted by SAMA) — is regulated under the Rules for Regulating BNPL Companies (Decision 450360390000, 05/06/1445H), defining BNPL as no-term-cost consumer financing with SAR 5m minimum capital, credit limits, advertising transparency, conflict-of-interest and AML/CTF obligations. The 'View My Bank Accounts' service (May 2024) addresses account-verification fraud. There is no UK-style mandatory APP-fraud reimbursement scheme in force; sarie incorporates recipient account verification as a practical anti-error safeguard.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "bnpl_rules",
     "source": "https://argaamplus.s3.amazonaws.com/bef57897-a46c-41c2-be8d-b8d2d0449291.pdf",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "bnpl_consumer_terms",
     "source": "https://bsalaw.com/insight/redefining-bnpl-how-samas-regulations-are-shaping-saudi-arabias-fintech-sector/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "bnpl_supervision",
     "source": "https://practiceguides.chambers.com/practice-guides/financial-services-regulation-2025/saudi-arabia",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "complaints_route",
     "source": "https://rulebook.sama.gov.sa/en/new-banking-products-and-services-regulation",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W11",
   "name": "AML/CFT & Financial Crime",
   "confidence": "Confirmed",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w11-aml-cft-financial-crime",
   "standing_position": "sentinel.position: KSA's AML/CFT regime rests on the Anti-Money Laundering Law (Royal Decree M/20, 5/2/1439H) and the Law on Combating the Financing of Terrorism (M/21, 12/2/1439H), with implementing regulations and the SAMA AML/CTF Guide. SAMA supervises risk-based AML/CTF compliance for banks, PSPs and fintechs, with the Saudi Financial Intelligence Unit (SAFIU) receiving STRs. Saudi Arabia joined FATF in June 2019 (first Arab/37th member) and is a founding MENAFATF member; it is not on the FATF increased-monitoring (grey) list as of February 2026. SAMA also enforces Rules for Implementation of Targeted Financial Sanctions.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "sanctions_rules",
     "source": "sentinel.gi://rulebook.sama.gov.sa/en/rules-implementation-targeted-financial-sanctions",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": "AML regime built on the 2003 Anti-Money Laundering Statute and Implementing Regulations, supervised by SAMA (banks/insurance/finance cos), CMA (securities) and SAFIU (FIU). Legal AML framework assessed as robust in 2018 MER but CFT/effectiveness lagged; enhanced follow-up ongoing with partial re-ratings (R6, R7 upgraded to largely compliant). Crypto activity remains formally prohibited even as CBDC/tokenization pilots expand.",
     "instrument_type": "assessment",
     "source": "FIM (sentinel.gi) per-JID baseline profile — Saudi Arabia",
     "source_url": null,
     "source_tier": null,
     "retrieved_at": null
    },
    {
     "finding": "Gap: sourcing-thinness",
     "instrument_type": "gap",
     "source": "FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003)",
     "source_url": null,
     "source_tier": null,
     "retrieved_at": null
    },
    {
     "finding": "Gap: absent-field-provenance",
     "instrument_type": "gap",
     "source": "FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004)",
     "source_url": null,
     "source_tier": null,
     "retrieved_at": null
    },
    {
     "finding": "Enforcement: OFAC — Houthi smuggling and illicit revenue-generation network (shipping companies, exchange houses)",
     "instrument_type": "enforcement_action",
     "source": "FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-002)",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": "Gap: legal-gap",
     "instrument_type": "gap",
     "source": "FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002)",
     "source_url": null,
     "source_tier": null,
     "retrieved_at": null
    },
    {
     "finding": "Gap: regulatory-failure",
     "instrument_type": "gap",
     "source": "FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001)",
     "source_url": null,
     "source_tier": null,
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W12",
   "name": "Correspondent Banking, Settlement & Access",
   "confidence": "Confirmed",
   "moved_this_cycle": false,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w12-correspondent-banking-settlement-access",
   "standing_position": "All interbank settlement is managed by SAMA via the SARIE RTGS (live May 1997), which provides immediate-finality settlement in central bank money for interbank transfers, customer credit transfers and direct debits; all domestic clearing systems (mada/SPAN, SADAD, sarie, ACH cheque clearing) net-settle over SARIE. SARIE participation is restricted to banks meeting SAMA-acceptable systems, procedures and certified staff (~23 participants plus SAMA). Cross-border correspondent access uses SWIFT messaging, with AFAQ (GCC cross-currency RTGS via Gulf Payments Company) and Buna (Arab Monetary Fund) providing regional alternatives that reduce reliance on traditional correspondent banking. SAR is pegged 3.75/USD; cross-border SAR movement requires licensed bank participation. SAMA participates in BIS, FSB and FATF.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "rtgs_settlement",
     "source": "https://www.bis.org/cpmi/publ/d105_sa.pdf",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "settlement_access",
     "source": "https://wiki.treasurers.org/wiki/Saudi_Arabia",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "cross_border_settlement",
     "source": "https://rulebook.sama.gov.sa/en/operating-rules-cross-currency-payments-using-afaq-service",
     "source_url": null,
     "source_tier": "1",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "international_access",
     "source": "https://en.wikipedia.org/wiki/Saudi_Central_Bank",
     "source_url": null,
     "source_tier": "2",
     "retrieved_at": null
    }
   ]
  },
  {
   "code": "W13",
   "name": "Commercial Intelligence & Fintech",
   "confidence": "High",
   "moved_this_cycle": true,
   "url": "https://payments.gi/jurisdictions/saudi-arabia/#w13-commercial-intelligence-fintech",
   "standing_position": "Trailing-12-month commercial activity is led by the BNPL/fintech segment. Tamara secured up to $2.4bn asset-backed Shariah-compliant financing (Goldman Sachs/Citi/Apollo, Sept 2025) and obtained Saudi Arabia's first full SAMA consumer-finance licence (March 2025). Tabby raised a $160m Series E at a $3.3bn valuation (March 2025) and is preparing a Saudi IPO (HSBC/JPM/Morgan Stanley engaged); Tabby earlier acquired digital-wallet startup Tweeq. PIF-linked Sanabil and SNB Capital remain key local backers. Money20/20 first ran in Riyadh in 2025.",
   "findings": [
    {
     "finding": null,
     "instrument_type": "debt_financing",
     "source": "https://techstartups.com/2025/09/15/saudi-fintech-tamara-raises-2-4b-in-funding-from-goldman-sachs-citi-and-apollo/",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "license_milestone",
     "source": "https://tamara.co/en-sa/blog-post/tamara-secures-saudi-central-bank-finance-license",
     "source_url": null,
     "source_tier": "2",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "equity_round",
     "source": "https://www.fintechfutures.com/venture-capital-funding/saudi-bnpl-fintech-tabby-raises-160m-series-e-ipo-plans-reportedly-underway",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    },
    {
     "finding": null,
     "instrument_type": "company_profile",
     "source": "https://tracxn.com/d/companies/tamara/__sA9LdsEMuXH0uuJBISmpxdf4ThsexKc3rMUqPtj7-dQ",
     "source_url": null,
     "source_tier": "3",
     "retrieved_at": null
    }
   ]
  }
 ]
}