Kb Fintech Licensing Cma Ksa

Knowledge Pack — KSA Fintech Licensing (CMA + SAMA)

Regulatory Architecture

Saudi Arabia's fintech sector is regulated by multiple authorities with distinct mandates:

Most fintech companies require SAMA and/or CMA licenses depending on their specific activities, plus MISA establishment approval for foreign investors.

SAMA-Regulated Activities and License Types

Payment Services

E-Money Institutions

• License to issue e-money (stored value in electronic accounts).
• Capital: SAR 5,000,000 – 10,000,000 depending on scale.
• User fund safeguarding: funds held in segregated trust accounts at SAMA-approved bank.
• Consumer limits on balances and transactions.

Money Exchange and Remittance

• Exchange house license (maktab sarafa).
• Capital: SAR 10,000,000+ (depends on scope).
• Requires SAMA approval; brick-and-mortar or digital.

Buy-Now-Pay-Later (BNPL)

• SAMA-supervised; treated as a form of consumer credit.
• Providers need SAMA approval; consumer-protection rules apply.
• Sharia compliance expected: murabaha-structured BNPL widely used.
• Disclosure obligations to consumers.

Digital Banking

• Full digital bank license (no branches): SAR 500,000,000 minimum capital.
• Two digital banks licensed as of 2024 (STC Bank, Saudi Digital Bank).

CMA-Regulated Activities and License Types

Equity Crowdfunding

• Platform license for investment-based crowdfunding.
• CMA Equity Crowdfunding Regulations (2021+).
• Capital: SAR 5,000,000 minimum.
• Maximum raise per issuer: SAR 15,000,000 (per campaign per platform).
• Investor limits: professional investors have higher thresholds; retail investors capped per investment.
• Issuer eligibility: Saudi-incorporated companies (mostly SMEs).

Robo-Advisory (Automated Investment Advice)

• Registered Investment Adviser (RIA) license from CMA with digital/automated activity endorsement.
• Capital: SAR 5,000,000+.
• Algorithm disclosure and governance requirements.
• Sharia-compliant portfolios common; halal screening required for many retail products.

Investment Management

• Full Investment Manager license.
• Capital: SAR 10,000,000+.
• Portfolio management for retail and institutional clients.

Securities Broker / Dealer

• CMA broker-dealer license.
• Capital: SAR 25,000,000+.
• Custody, execution, prime brokerage.

Crypto-Securities (Limited)

• CMA has not issued a comprehensive crypto-asset framework as of 2025.
• Securities tokens (STOs) may fall under CMA jurisdiction if meeting securities definition.
• Utility tokens and payment tokens: SAMA jurisdiction; limited licensing available.
• Crypto is generally restricted for retail consumers; institutional participation via specific licenses only.

Open Banking

KSA's Open Banking Framework is jointly governed by SAMA + CMA + ZATCA:

• Phase 1 (read-only): account information services — financial aggregators can access consumer bank data with consent.
• Phase 2 (read-write): payment initiation services; third-party providers can initiate payments from customer accounts.
• API standards: Saudi Open Banking Framework (SOBF) — SAMA-published technical standards.
• Provider licensing: Open Banking Service Providers (OBSPs) require SAMA registration.
• Consumer consent: explicit user consent required per PDPL (see [[kb-data-privacy-ksa-pdpl]]).

SAMA Fintech Sandbox

SAMA's Fintech Saudi Sandbox allows companies to test products before full licensing:

SAMA has funded and supported numerous cohorts; sandbox is actively used by startups and established fintech players.

Vision 2030 Alignment

Fintech is a priority sector under Vision 2030's Financial Sector Development Program (FSDP):

• Target: reduce cash transactions to 70% non-cash by 2030 (from ~18% in 2016 — nearly achieved by 2024).
• Fintech Saudi initiative: national fintech hub; events, ecosystem support, SAMA-CMA coordination.
• Regulatory fast-track for qualifying fintech companies.
• Saudi Central Bank innovation offices (dedicated fintech engagement teams).

Sharia Compliance Expectations

Most consumer-facing fintech products in KSA must be Sharia-compliant:

• Products require a Sharia Supervisory Board (SSB) fatwa (opinion) for certification.
• AAOIFI standards widely referenced (see [[kb-shariah-finance-aaoifi]]).
• Non-Sharia products may be permitted for non-Muslim expatriates in some cases; market practice favors Sharia-compliant default.

Foreign Ownership

• 100% foreign ownership permitted in most fintech activities through MISA license.
• MISA establishes the Saudi legal entity (Limited Liability Company or Branch).
• Regional Headquarters (RHQ) Program: companies with MENA-wide operations may establish KSA as their RHQ — preferential treatment for government contracts.
• Minimum investment thresholds apply for certain license categories.

Saudization (Nitaqat) for Fintech

• Fintech companies must meet Saudi national hire quotas per Nitaqat system.
• Financial services sector has specific Saudization targets.
• Higher Saudization = "Green" or "Platinum" tier = preferred treatment on government services, visa quotas.
• Technology and engineering roles: a grace period or exemption may apply in early stages for genuinely specialized international talent; consult current HRSD guidance.

Practical Licensing Timeline

Practical Considerations

• SAMA approval timelines for full licensing: 12–18 months typical.
• Specialized fintech lawyer essential — regulatory complexity is high and evolving.
• Both SAMA and CMA require ongoing compliance reporting post-license.
• Data localization: financial data must remain in Saudi Arabia per SAMA cybersecurity and cloud-computing rules.
• KSA entity required (foreign branch or subsidiary); MISA license pre-condition.

Caveats & Currency

KSA's fintech regulatory landscape is actively evolving. SAMA and CMA publish updated regulations, circulars, and guidance frequently. Saudization targets, capital requirements, and sandbox cohort details change. The crypto framework is incomplete as of 2025; any crypto-related KSA matter requires up-to-date regulatory check. Verify current SAMA Open Banking phase status and technical specifications.

Related Skills

• [[kb-fintech-licensing-difc]]
• [[kb-fintech-licensing-adgm]]
• [[kb-shariah-finance-aaoifi]]
• [[kb-employment-law-ksa]]
• [[kb-data-privacy-ksa-pdpl]]