Lead Signal
This cycle establishes the full Saudi Arabia baseline across the World Payments Monitor's thirteen-module spine, and the picture that emerges is of a mature, unitary, regulator-led payments environment whose direction of travel is unmistakably liberalising. Saudi Arabia operates a single licensing perimeter under SAMA (Saudi Central Bank), which is the sole licensing and supervisory authority for payment systems and PSPs under the Law of Payments and Payment Services (Royal Decree M/26, 22/03/1443H) and its Implementing Regulation effective 13/06/2023G, which repealed and replaced the 30/01/2020 PSP framework. There is no federal/state split to navigate: the entire Kingdom's payments licensing perimeter runs through one statute and one regulator. For any operator contemplating market entry, the gateway is explicit and binary in structure — a bank-PSP route under the Banking Control Law M/5, or a non-bank PI/EMI authorisation route under the Law of Payments and Payment Services.
That non-bank route is itself tiered. The SAMA non-bank PSP licence taxonomy comprises four licence types with capital thresholds: Micro PI (SAR 1m, capped at SAR 20,000 per customer per month), Major PI (SAR 3m, cross-border permitted), Micro EMI (SAR 2m) and Major EMI (SAR 10m); the PI/EMI distinction turns on whether the entity may issue electronic money. The Major PI tier is the cross-border route, and the per-customer caps on the Micro tier directly shape how a low-cost entrant can scale. This four-tier ladder, distinct from the bank-PSP route, is the analytical spine of how non-bank capital reaches the Saudi market, and it is the structural fact that frames every other module in this baseline.
Other Developments
The conduct and safeguarding layer is equally codified. Under the Implementing Regulation's consumer-protection provisions, EMIs must issue and redeem electronic money at par value, and activities requiring a pooled customer-funds account fall within the defined scope of payment services under Article 5-1, requiring a SAMA licence and adherence to fund-handling requirements. This pooled-account segregation discipline governs how non-bank EMIs hold and protect customer money, a mechanism distinct from bank-PSP deposit protection. On redress, the SAMACARES complaints channel was replaced by the Complaint Management System per SAMA Circular 1185, effective 1/7/2025G, alongside updated Debt Collection Regulations.
Digital money sits in a more provisional state. E-money is licensed under the EMI regime, but private cryptocurrencies and stablecoins remain outside the formal regulatory perimeter; a late-2025 ministerial announcement of nationally regulated stablecoins under joint SAMA and CMA oversight remains at policy-design stage with no licensing, reserve-backing or redemption rules published. This is a proposal, not an enacted framework, and it must be read as such. On central bank money, SAMA continues wholesale-focused CBDC experimentation with local banks and fintechs building on the 2019 Project Aber pilot with the UAE, and in 2024 SAMA joined the BIS-hosted mBridge multi-CBDC project at MVP stage for cross-border interbank settlement; no decision to introduce a CBDC has been made.
The operating-environment fundamentals are well-developed. Operational resilience rests on the mandatory maturity-based SAMA Cyber Security Framework (v1.0, May 2017), the Business Continuity Management Framework, and the Cyber Resilience Fundamental Requirements operating as a licensing and sandbox gate, with board-level accountability. On rails, mada, the national debit scheme operated by SAMA subsidiary Saudi Payments, is mandated on every Saudi bank card, with SAMA capping the mada debit MSC at 0.80% (roughly SAR 40 per transaction) and adding effective-2025 caps on international card fees of 2%. The sarie Instant Payment System, owned by SAMA and launched in 2021, provides a 24/7 low-value overlay supporting alias identifiers, while AFAQ provides GCC cross-currency cross-border RTGS settlement, its cross-currency service having launched 10 December 2020 with Saudi and Bahrain participation from December 2021.
The commercial-intelligence picture is dominated by the BNPL segment. Saudi BNPL Tamara secured up to $2.4bn in asset-backed Shariah-compliant financing from Goldman Sachs, Citi and Apollo-managed funds, announced at Money20/20 Riyadh on 15 September 2025, with $1.4bn immediately deployable. Tamara also became the first fintech startup to receive a full consumer finance licence from SAMA on 3 March 2025, covering both consumer finance and BNPL activities. Saudi BNPL Tabby raised a $160m Series E at a $3.3bn valuation led by Blue Pool Capital and Hassana Investment Company in March 2025, with a Saudi IPO reportedly underway.
Cross-Monitor Connections
The Kingdom's AML/CFT surface is carried in this monitor as Sentinel-sourced provenance only. The Sentinel feed records that KSA AML/CFT rests on the Anti-Money Laundering Law (Royal Decree M/20) and the Law on Combating the Financing of Terrorism (M/21), with the SAMA AML/CTF Guide setting risk-based expectations, that Saudi Arabia joined FATF in June 2019 as the first Arab and 37th member, and that it is not on the FATF increased-monitoring (grey) list as of 13 February 2026. Any original illicit-finance, sanctions-evasion or mutual-evaluation analysis for Saudi Arabia is a cross-reference to the Financial Intelligence Monitor and not a conclusion of this monitor.
Outlook
The defining structural tension in the Saudi baseline is the asymmetry between an actively liberalising fintech market and a settlement layer that remains bank-restricted. SARIE RTGS participation is limited to certified banks, which means non-bank PSPs require a sponsoring bank — a material market-access constraint that sits beneath every non-bank licensing and product story above. Watch items for forthcoming cycles are the stablecoin framework, which remains proposed-not-enacted under SAMA and CMA design and is registered on the regulatory horizon with a 2026 window, and the maturation of the BNPL segment toward public-market exit signalled by Tabby's IPO preparation. The over-arching direction is liberalising regulator-led market development under the Vision 2030 Financial Sector Development Programme, but the bank-versus-non-bank access boundary remains the constraint to track.