Part 02 · Money and banking basics
Saudi and GCC market contextالسوق السعودي والخليجي
Most FinTech material describes America or Europe. Saudi Arabia is set up differently, and the differences matter if you plan to work here.
6 minute read
The Saudi market is not a local edition of the American one. It has its own licensing authorities, national payment systems that most money passes through, and a government identity layer that every new signup goes through.
If you plan to work here, these differences are not footnotes at the end of an imported book. They change product cost, the shape of customer signup, which door you knock on before launch, and which rail a payment takes after the user taps pay.
Most of what you will find in English assumes commercial card networks with no cheap national alternative, identity built from passport photos and documents, and a regulatory split unlike Saudi Arabia's. What you build on those assumptions breaks here quickly: either cost higher than needed, or the wrong door knocked on for weeks, or a payment path that ignores or for no reason.
Why read a chapter about Saudi Arabia? Money is money
A reasonable objection. Interest is interest and a payment is a payment, so why should any of it change by country?
The answer is that the concepts are the same and the plumbing is not. Three differences in particular break any plan built on an American textbook.
First, identity. In the United States a product builds verification from photos of a passport and a driving licence, and buys a service that inspects the image and matches the face. Here and exist, so a citizen or resident is verified in seconds against a government source. A product that copied the American design pays more, delivers a worse experience, and collects data it never needed.
Second, the rails. Most English material assumes cards are the only channel and that account-to-account transfers are slow and take two days. Here mada handles domestic cards and sarie handles instant transfers. A product that prices every transaction as if it were international comes out more expensive than its competitor for no reason.
Third, who licenses you. Not one authority, but three. A company that spends two months addressing the wrong one has not merely lost time. It has lost its position in the market.
Three authorities share the field
(ساما), the Saudi Central Bank, licenses banks, payment firms, wallets, insurance intermediaries and consumer finance and instalment firms within its published scopes. The licenses what relates to investing, shares, equity crowdfunding and platforms that touch securities. The covers insurance and the specialised products that follow it, sometimes embedded inside other apps.
The common mistake is to ask "will SAMA approve?" about every idea. Your idea may be a trading platform or equity crowdfunding, in which case the Capital Market Authority is the first addressee. Or it may be insurance embedded in a shopping app, which falls under the Insurance Authority even if the app looks like "payments FinTech" from outside. Start by naming the activity precisely: are you holding money, moving it, lending it, investing it, or insuring it? Then choose the authority.
Take two examples that look alike on the screen. An app that shows a balance and moves it to shops follows a payments or wallet licensing path at SAMA. An app that shows fund units and buys and sells them follows the Capital Market Authority path. The interface may resemble the interface. The regulatory file does not. Mixing them wastes months corresponding with the wrong authority.
mada: the domestic card network
Most in-country card payments run on mada. It is a national scheme, and usually cheaper for shops than a full pass over the global brands on domestic operations. The same card may carry mada and , or mada and , together, so a payment inside the Kingdom takes one route and a payment outside the Kingdom or in foreign currency takes another.
That matters to anyone pricing acceptance and anyone designing transaction routing. Which rail a payment takes is not a tiny technical detail. It is a cost line, an operating rule and an agreement with the acquirer. If you price your shop assuming every payment runs as a full international operation, your numbers will look higher than a competitor that routes domestic traffic over mada as it should.
After you have seen authorisation, clearing and settlement, place mada in that picture: a domestic network the message and hold travel on, then claims settle under its rules and the acquirer's agreement with the shop. The word "mada" on the point-of-sale device does not mean cash reached the shop in the same second, any more than any other network does.
sarie and Nafath (نفاذ): rails and identity
sarie is the instant account-to-account payment system through the rails linked to the central bank. It changes the customer's expectation of time, and forces the product to protect before money leaves because reversal afterwards is hard. Anyone who builds instant transfer here without understanding sarie builds on assumptions from reversible cards, and is exposed quickly at the first successful fraud.
Nafath is the national digital identity service. Instead of photographing a customer's ID and guessing it is genuine, a firm verifies through a government path that ties the person to their record. Much of the know-your-customer pain that fills Western FinTech books is lighter here for that reason. Photos and guesswork are replaced by a check linked to the official record.
Nafath does not mean duties against fraud and money-laundering vanish. Verifying identity is one step. Monitoring behaviour and transactions is another. A firm that leans on Nafath at signup and then ignores suspicious transfer patterns discovers that a correct identity does not stop misuse of the account. The national alternative shortens one door. It does not close every door.
Vision 2030 as tempo, not slogan
The Vision sets targets for reducing cash and widening digital payments. A lot of licensing pace, regulatory experimentation and the opening of wallet and instalment space makes sense in that frame: the market is pushed toward digitisation, and the regulator sets the tempo so risk does not outrun the plumbing and the rules.
That does not mean every request is accepted. It means arguments built on serving a wider segment with safer local payment means are heard more clearly than imported arguments with no local context. If you say "we reduce cash in corner shops via mada", you are speaking the market's language. If you only say "we repeat a successful American model", you will be asked where mada, Nafath, and SAMA or the Capital Market Authority sit in your story.
How to use this while you learn
When you later read a global topic on networks, identity, licensing or the cost of borrowing, ask three local questions before you copy the solution. Which Saudi authority owns the file: SAMA, the Capital Market Authority, or the Insurance Authority? Is there a national alternative such as mada, sarie or Nafath that changes the cost or the shape? What remains on you even with that national alternative in reconciliation, fraud and compliance?
The answers stop you from copying an American solution onto a market that is not alike. They also stop the opposite exaggeration: Saudi Arabia is not free of complexity because Nafath exists. It is differently ordered, not empty of work. Anyone who reads the order well builds faster. Anyone who ignores it relearns the stages you just finished on money, payments and the price of time, but at the wrong authority's door.
New words here
- SAMAساما
- The Saudi Central Bank. Licenses banks, payment companies, wallets, insurance intermediaries and instalment lenders.
- CMAهيئة السوق المالية
- The Capital Market Authority. Covers investing, shares and equity crowdfunding.
- madaمدى
- The Saudi national card scheme. Most in-country card payments run on it.
- Nafathنفاذ
- The national digital identity service. Lets a company verify a customer against government records instead of photographing documents.
The short version
- SAMA covers banking, payments and lending. The CMA covers investing. The Insurance Authority covers insurance.
- mada is the domestic card scheme and usually cheaper for shops than global card brands.
- Nafath removes most of the identity-checking problem that dominates FinTech elsewhere.
- Vision 2030 sets targets for moving away from cash, and a lot of the regulatory pace follows from that.
Check your understanding
Answer before reading the explanation. Getting one wrong here is worth more to you than a lucky guess.
Official sources
For checking the rules stated above yourself. The article is complete without them.
This is a learning guide built from field experience. It is not legal, regulatory or investment advice, and it does not replace qualified professional counsel. FinTech rules change quickly and vary by country, so check the primary source before you make a decision that matters.