Roadmap FinTech

Part 07 · Regulation and licensing

Consumer protectionحماية العملاء

Regulators now ask more than "was it legal?" They ask whether the customer got a fair outcome from your pricing, your adverts and your complaints handling.

7 minute read

Share this:

Consumer protection is a set of rules obliging a financial institution to make sure its customer understands what they bought, what it costs, and how to complain. The regulator imposes them; they are not a courtesy.

A customer can approve every screen and still leave with an unsuitable product.

The customer agreed to the terms, so what is the problem?

This is the defence every product team offers: the terms were displayed, the customer pressed accept, so the responsibility is theirs.

Two decades ago that defence held. It no longer does.

Because regulators noticed something simple: agreement is not understanding. You sign a forty-page contract you have not read, and press accept because the only other button is cancel. The choice exists formally and does not exist practically.

So the question shifted from "was it legal?" to "did the customer get a fair outcome?". That is a deep shift, and it changes what you are answerable for.

Picture a case: an app offers a loan on perfectly clear, honestly advertised terms, and it is accepted by someone whose income cannot carry the instalment. Nothing on the screen is false and no clause is hidden. The outcome is still bad, and a supervisor today asks about it.

Which is why things that look like marketing are now part of the regulatory file: how the advert was worded, which option was switched on by default, and how long cancelling takes compared with signing up. All of them shape the outcome, and the outcome is what you answer for.

Conduct (السلوك) is not financial soundness

Conduct describes how a company treats its customers. It differs from financial soundness. A bank may hold adequate capital and liquidity while selling finance with obscure fees. An insurer may pay every valid claim while making cancellation almost impossible.

Prudential supervision focuses on whether an institution can meet obligations and absorb losses. Conduct supervision examines product design, sale, service, and customer effects. Failure in either can harm customers, but the cause and prevention differ.

Success on one side does not excuse failure on the other. A financially sound company can treat customers unfairly. A friendly provider can collapse because it lacks capital. Boards need information about resilience and separate evidence about customer outcomes.

Conduct appears in small commercial decisions: who sets the fee, who sees the advert, which button is larger, and how long a complainant waits. A hidden SAR 5 fee can turn a cheap product into an expensive one. A ten-step cancellation journey can turn old consent into continuing revenue.

Disclosure does not create the outcome

Putting every fact in terms and conditions does not prove understanding. A forty-page contract may formally identify a fee while the purchase screen presents a lower number and hides the fee behind a grey link. The information did not reach the customer at the decision point.

A fair outcome asks what the customer actually received. Was the product designed for a group with a reasonable need? Is its price proportionate to benefit and cost? Did the customer understand features and risks? Could they obtain support, cancel, and complain without manufactured obstacles?

Fairness does not require every customer to receive the same price. Motor insurance can vary with risk, and shop finance can vary with cash flow and repayment capacity. The company needs a reason connected to risk or cost rather than an ability to exploit confusion or weak comparison.

Understanding should be tested rather than inferred from clicks. A 95 percent approval rate may only show that customers wanted to finish onboarding. It does not prove they understood a variable price or conditional refund. Teams can test concise wording and screens, then examine later errors, questions, and cancellations.

Vulnerability (الهشاشة) is a changing situation

Vulnerability is a situation that increases a customer's exposure to harm. It is not a permanent class of person. An employee may lose work for three months. A son may begin helping a father after sudden illness. A shop owner may struggle to process complex messages after bereavement.

Vulnerability may arise from health, a life event, financial difficulty, or limited capability to understand and act. Several causes can exist together. Customers do not have to use a regulatory term. They may simply say that they cannot concentrate after a death or cannot read the screen well.

Service staff need room to respond. They may slow a call, offer another channel, allow extra time, or record a permitted communication preference. Financial difficulty can be referred to a suitable support team before fees accumulate. Staff should not diagnose illness or collect details they do not need.

The information requires protection because a sensitive note can create new harm. An employee should see what is necessary to serve the customer, while a marketing team should not receive the complete story. Policy defines retention and updates. When the situation ends, an old note should not keep the customer away from ordinary service.

Appropriate treatment does not cancel every contract term. Payment may remain due and identity checks may still apply. The company removes unnecessary barriers and offers support suited to current capability. It provides fair access rather than a guaranteed financial result.

Complaints are product sensors

A complaint begins when a customer expresses dissatisfaction and expects a response, even without using the word. They may tell support that a fee was not visible. They may post that cancellation failed and then call for a refund. If staff classify both as ordinary questions, management loses the signal.

Closure speed cannot be the only target. An employee can close a case in two hours with standard text while the customer returns three times. Measures should cover time, result, repetition, fairness, and root cause.

Good classification turns stories into product data. Complaints connect to a feature, fee, channel, and app version. The data may show that 30 percent of the month's complaints began after a new pricing screen. It may show older customers struggling with one document upload. Product managers then have a repairable problem.

Individual refunds do not remove a continuing cause. If an incorrect fee affected one thousand accounts and ten people complained, the team must find the other 990. If cancellation is fixed today, it should examine customers who tried yesterday. Remedy for the affected population is redress.

Complaint patterns need to reach management, risk, compliance, and engineering. A rise can precede financial loss, regulatory action, or customer departure. Complaints are not noise created by difficult people. They are production evidence showing where a product violated a reasonable expectation.

Financial promotion (الإعلان المالي) is part of the product

A financial promotion advertises a financial product or service. It carries requirements beyond those of ordinary advertising because claims about return, cost, or approval can drive a long-lasting financial decision. Under the applicable rules, communication must be clear, fair, and not misleading.

Promotion includes more than billboards. It can be an influencer video, in-app notification, comparison page, or customer referral message. A company may publish correct disclosure on its website while an influencer promises guaranteed profit. The whole promotional journey needs approval, monitoring, and records.

A small warning cannot cure a misleading headline. If an advert says "free" while the product imposes an unavoidable fee, an asterisk does not correct the main impression. If it presents a high return while hiding loss risk elsewhere, the customer sees only half of the decision.

Audience and channel also matter. A complex investment should not be pushed to every user through a rapid challenge. Short-term finance should not be presented as a permanent answer to repeated daily expense gaps. Review should connect the audience, message, and destination page.

SAMA and the Consumer Duty

sets principles and rules for customers of institutions within its mandate, including banking, finance, and payment sectors under their applicable frameworks. Its expectations address areas such as fair treatment, clear information, data protection, and complaints. A complaint channel does not make the outcome fair when the product itself misleads.

The UK's Financial Conduct Authority offers a useful comparison through its Consumer Duty, which came into force for open products and services in 2023. It requires firms to act to deliver good outcomes for retail customers. Its four outcome areas cover products and services, price and value, consumer understanding, and consumer support.

The British framework does not become Saudi law through comparison. Each firm follows the rules and authority governing its activity. It does, however, make the shift clear: from asking whether disclosure was sent to asking whether the outcome can be defended. Similar attention to fairness, transparency, and complaints appears across regulators.

An outcome dashboard, not a click dashboard

Teams can build indicators for each stage. They can measure customers buying outside the target market, paying fees out of proportion to benefit, failing an understanding check, or being unable to cancel. Results can be compared across channels and groups without turning age or income into an automatic label of weakness.

Numbers should be combined with real cases. Product leaders can review calls, complaints, and decline decisions and experience the journey as customers do. A good average may conceal repeated harm to a small group. Distributions and cases expose what one total hides.

Every issue needs an owner, deadline, and remedy for earlier customers. Changing text for new buyers is not enough if existing customers paid an incorrect fee. Support training is not enough if the system prevents staff from applying the solution. Governance connects detection, stopping harm, redress, and prevention.

Consumer protection becomes part of product engineering when these outcomes enter daily decisions. Teams review price, advertising, and support journeys as seriously as conversion and performance. Consent is then the beginning of a relationship whose fairness the company can demonstrate with evidence.

New words here

Conductالسلوك
How a company behaves towards its customers, as opposed to whether it is financially sound.
Vulnerabilityالهشاشة
A situation that makes a customer more at risk of harm: illness, bereavement, sudden money trouble. It is temporary, and anyone can be in it.
Financial promotionالإعلان المالي
Advertising a financial product. It carries legal requirements ordinary advertising does not.

The short version

  • Fair outcomes, not just disclosure. Hiding something in the terms is increasingly the failure, not the defence.
  • Vulnerability is a situation, not a type of person. Any customer can be in it temporarily.
  • Complaint volumes are a regulatory early-warning signal, so treat them as product data rather than noise.
  • Marketing is in scope. Financial adverts have legal rules that ordinary adverts do not.

Check your understanding

Answer before reading the explanation. Getting one wrong here is worth more to you than a lucky guess.

  1. 1.The terms were displayed and the customer pressed agree. Why is that no longer a defence?
  2. 2.An app offers a loan on completely clear terms with no hidden clause, and approves someone whose income cannot carry the instalment. Is there a problem?
  3. 3.A bank has ample capital and liquidity and sells financing with opaque fees. Which supervision does that fail?
  4. 4.Ninety five percent of customers pressed agree on the risk screen. What does that prove?
  5. 5.A wrong fee was charged to a thousand accounts and ten customers complained. What is the obligation?

Official sources

For checking the rules stated above yourself. The article is complete without them.

This is a learning guide built from field experience. It is not legal, regulatory or investment advice, and it does not replace qualified professional counsel. FinTech rules change quickly and vary by country, so check the primary source before you make a decision that matters.

Back to the roadmap

Consumer protection | Roadmap FinTech