FinTech and banksالفنتك والبنوك

The relationship between FinTech companies and banks is one of dependence before it is one of competition. The bank holds the licence, the account and the access to national payment systems. The FinTech company holds the product, the interface and the speed of change.

You will read a lot about startups "disrupting" banks. That is usually a headline, not a description of what happens on the ground.

Why not just become a bank and be done with it?

Everyone entering the field asks this. If the bank slows the app down and takes a cut of every transaction, why not get your own licence and be rid of it?

The answer is that a licence is not a form you request. Getting a banking licence usually means years of work before you serve a single customer: a large amount of capital frozen where you cannot use it, a compliance and risk and internal audit team with approved named officers, systems that must be examined, and a case that convinces the regulator the market needs you at all.

Compare that with a two-year-old startup whose capital came from a funding round. The road to a licence is longer than the company has existed and costs more than everything it has raised.

Hence the practical answer: do not buy the licence, rent it. The bank has held one for decades. The startup has a product, an experience and customers. So they split it: the bank holds the money under its licence, and the app owns the interface and the brand.

Think of a food delivery app. It takes your order and owns the experience and the brand, but a licensed kitchen does the cooking. Many FinTech apps use exactly that split.

What a licence (الترخيص) forbids without permission

A licence is not one sheet for everything. Holding a balance is one activity, moving money is another, lending is another, managing investments is another. Each needs permission from the right regulator. Doing any of them without that permission is a serious offence, not a paperwork slip.

In Saudi Arabia, SAMA issues most of these permissions for banking, payments and wallets. Other bodies may share the map depending on the product, but the idea does not change: a beautiful app is not enough to hold people's money.

So many founders take a faster road: they build the product and sign with a partner bank (البنك الشريك) that holds the funds under its own licence. You see a bright name in the app store, while the legal line in the terms names another bank as the custodian of your money.

Open the terms of any transfer or instalment app you use. Search for the sentence that names the sponsoring bank or the licensed entity. If you find it, you have seen the split on paper, not in news headlines.

Why the partnership feels heavy

The bank stays responsible to the regulator for what its partner does. If the app botches identity checks or fails to report a suspicious payment, the bank is asked before the app is asked alone. That is why partnership contracts fill up with schedules, reviews and kill-switches. The bank is not selling a logo. It is lending regulatory capital it does not want to lose.

This also explains why so many FinTech companies suddenly change direction. The bank may refuse a new product, demand controls that delay launch by months, or end the partnership so the app must find another partner or switch a feature off. What looks from outside like market competition is often a reaction to the partner bank.

The bank does not stop at identity questions at signup. It sets daily transfer limits, demands a freeze when something looks wrong, and screens name lists before a large payout. The app that promised a frictionless experience hits those limits in its first week of real traffic.

Nafath and the partner bank

When a new app asks you to sign in through Nafath, you are not confirming your identity for the app alone. The check is often a condition forced by the partner bank or by SAMA rules before a wallet or account can open. The app is the interface. Accept or reject travels a longer chain than the screen shows.

If you are rejected after a successful Nafath step, the refusal is not necessarily a Nafath outage. It may be the bank's credit policy, a risk list, or a missing address field. Mixing identity failure with product failure wastes weeks for support teams.

Three shapes you meet in the market

Companies differ in how much of the licence they actually own, and three shapes cover most of what you see in the Saudi market.

Shape one: an app with no custody licence. It depends entirely on a partner bank that holds the money in its own name. This is the most common shape and the least visible by name, because the licence is not its licence, so it never appears in the register of licensed entities at all. You identify it backwards: search the company name in the list of licensed entities published on SAMA's site. If it is not there and the app shows you a balance, read the terms of use and you will find the bank or licensed entity standing behind it.

Shape two: a company holding a licence for one activity. That may be payments, or a wallet, or account information. It owns part of the chain and still needs banks for the rest.

Take account information services as an example. In March 2026 the Saudi Central Bank licensed Lean Technologies Saudi Arabia for Information Systems Technology, the first company to hold an open banking licence in the Kingdom, after graduating from the regulatory sandbox. In July 2026 it licensed Malaa Information Technology for the same activity.

Notice exactly what that licence permits. It lets the company read your account data with your consent. It does not let it hold a single riyal of your money. A licence to read is not a licence to hold, and readers who stop at the headline mix the two constantly.

Shape three: a fully licensed digital bank. The rarest and the slowest to build. In Saudi Arabia this licence does not come from an administrative decision. It comes from the Council of Ministers.

The dates explain the slowness better than any description. In June 2021 the conversion of Saudi Digital Payments (stc pay) into stc bank was approved, with capital of SAR 2.5 billion. D360 Bank's licence was approved in February 2022, and it did not open to the public until December 2024. Those years between approval and launch are not a stumble. They are the size of the work this shape means.

The third shape does not make the first two "unreal". Most of what people use daily for transfers, instalments and wallets sits in shapes one and two. The difference matters to you as a learner because risk, compliance and product engineering change completely depending on who owns the licence.

Try classifying two apps on your phone right now. Your traditional bank app is usually the third shape or close to it. An instalment app that opens in a minute, asks for Nafath, then shows a credit limit is often the first: a polished interface on top of a bank or licensed entity that never appears in the store icon.

What this means for product decisions

If you design a signup flow, ask early: who legally holds the money? The answer decides who forces the identity questions, who freezes the account, and whose name appears on a dispute letter. If you plan an instalment feature, ask: under which licence is it offered? The answer may be that the partner bank is the lender and your app is only the experience layer.

If you design a balance screen, ask: whose balance is this? A line in the partner bank's ledger, or a wallet balance licensed in your company's name? The answer changes the terms text, the error message, and who the customer should call when a riyal goes missing.

The same applies to disputes. If a customer denies a card charge, the path runs through the issuer and the network as you saw in the previous topic, not through the app design team alone. An app that promises an instant fix without those boxes promises what it does not own.

What the partnership costs

A bank does not lend its licence for free, and that explains the economics of the whole sector. A startup usually pays a setup fee, then a monthly minimum whether it trades or not, then a fee on every transaction. The bank may also hold a reserve as protection against fraud and chargebacks.

Which means the app's margin is thinner than readers assume. When a merchant sells on instalments, it pays the app a fee that can run from two to six percent of the basket. Out of that fee come the cost of the money being lent, the partner bank's charges, losses from customers who do not repay, and the cost of identity checks. What survives all of that is the profit.

This is why companies pursue their own licence as they grow. The motive is not pride in holding one. It is that a fixed fee on every transaction becomes an enormous number once transactions run into the millions. An own licence deletes an intermediary from the cost chain.

A third risk appears that new founders rarely expect: the bank may exit an entire category of client at once. When supervisory cost rises on some activity, a bank may end its partnerships across that whole activity rather than with one company. A startup that built everything on a single partner can find itself without a rail on short notice.

What is not a bank replacement

Not every company that wears the FinTech label replaces a bank. A loan comparison site that hands you to the bank's own page sells introductions. An investing education platform sells content. Accounting software that issues invoices without moving money sells business software. Those are legitimate businesses, but they do not rent a custody licence because they never hold your money.

The mix-up is costly for a learner. Partnership rules with a bank, SAMA duties, and Nafath controls do not apply at the same intensity to anyone who never touches the money. Always start from custody: is someone holding your balance under a licensed name?