Saudi Banking & Islamic Finance: Regulatory Guide for Foreign Financial Institutions.

Saudi Arabia's financial sector — supervised by the Saudi Central Bank (SAMA, formerly the Saudi Arabian Monetary Agency) — is the largest in the Middle East by assets and is undergoing fundamental structural change under the Financial Sector Development Programme (FSDP), one of Vision 2030's key realization programmes.

For foreign financial institutions, the Saudi market represents both an enormous opportunity and a complex regulatory environment. SAMA's supervisory framework, combined with Sharia compliance requirements, capital adequacy standards, and market conduct rules, creates a multi-layered regulatory landscape that requires specialist navigation.

**SAMA Licensing Framework**

Foreign financial institutions can enter the Saudi market through several licensing pathways.

Full Banking Licence: Permits the full range of banking services — deposit taking, lending, investment services, and treasury operations. Foreign banks may operate as branches or locally incorporated subsidiaries. Capital requirements for a full banking licence are substantial — SAR 1 billion minimum paid-up capital for locally incorporated banks.

Investment Licence (CMA): The Capital Market Authority (CMA) licenses foreign institutions for securities dealing, asset management, custody, and advisory services. CMA licensing is separate from SAMA licensing and follows a distinct application process.

Insurance Licence: SAMA supervises the insurance sector (which must operate on a cooperative/takaful basis in Saudi Arabia). Foreign insurers can enter through locally incorporated cooperative insurance companies.

Fintech Licence: SAMA operates a regulatory sandbox for fintech companies, with simplified licensing requirements and graduated compliance obligations. The sandbox has attracted over 30 international fintech firms since its launch.

Payment Services: The Payment Service Provider Regulations allow foreign companies to offer payment processing, electronic wallet, and remittance services subject to SAMA licensing.

**Islamic Finance Requirements**

All financial products offered to retail customers in Saudi Arabia must be Sharia-compliant. This is not optional — it is a regulatory requirement enforced by SAMA and supervised by each institution's Sharia Board.

The principal Islamic finance structures used in Saudi Arabia include Murabaha (cost-plus sale), where the bank purchases an asset and resells it to the customer at a disclosed markup, paid in instalments. This is the most common structure for trade finance, working capital, and consumer lending. Ijara (leasing) involves the bank purchasing an asset and leasing it to the customer, with ownership transferring at the end of the lease term. Used for equipment finance, real estate, and vehicle financing. Mudaraba (profit-sharing) is a partnership where one party provides capital and the other provides management expertise, with profits shared according to pre-agreed ratios. Losses are borne by the capital provider. Musharaka (joint venture) involves both parties contributing capital, with profits and losses shared proportionally. Diminishing musharaka is commonly used for real estate finance. Sukuk (Islamic bonds) are investment certificates representing ownership in an underlying asset pool. Saudi Arabia is the world's largest sukuk market — Saudi Aramco's sukuk programme alone exceeds USD 8 billion. Takaful (Islamic insurance) is cooperative insurance based on mutual risk-sharing. All insurance operations in Saudi Arabia must operate on a takaful basis.

For foreign financial institutions, the Sharia compliance requirement means that product structuring, documentation, and marketing must be reviewed by qualified Sharia scholars. Institutions must establish independent Sharia Boards and implement Sharia audit functions.

**Capital Adequacy and Prudential Regulation**

SAMA's prudential framework broadly follows Basel III/IV standards, with Saudi-specific additions. Key requirements include minimum Common Equity Tier 1 (CET1) capital ratio of 7% (plus buffers), Liquidity Coverage Ratio (LCR) minimum of 100%, Net Stable Funding Ratio (NSFR) minimum of 100%, large exposure limits — single counterparty exposure capped at 25% of Tier 1 capital, leverage ratio minimum of 3%, and additional systemically important bank (D-SIB) buffers for the largest Saudi banks.

**Anti-Money Laundering (AML)**

Saudi Arabia's AML framework, enforced by SAMA and the Saudi Anti-Money Laundering Permanent Committee, requires customer due diligence (CDD) and enhanced due diligence (EDD) for high-risk customers, transaction monitoring and suspicious transaction reporting, sanctions screening against SAMA, UN, and national sanctions lists, beneficial ownership identification, and annual AML risk assessments.

Non-compliance penalties are severe — including fines up to SAR 7 million, licence revocation, and criminal prosecution of responsible individuals.

**Open Banking and Fintech**

SAMA launched its Open Banking framework in 2022, requiring Saudi banks to share customer data (with consent) through standardised APIs. The framework is creating opportunities for fintech companies to build innovative products on top of existing banking infrastructure.

The regulatory sandbox has graduated several fintech companies to full SAMA licensing, in areas including digital payments and wallets, peer-to-peer lending, robo-advisory services, blockchain-based trade finance, and buy-now-pay-later (BNPL) platforms.

**Practical Considerations for Foreign Institutions**

Localisation requirements for banking licences include Saudi national staffing quotas (Saudisation), local data processing and storage (complementing PDPL requirements), Arabic-language documentation and customer communications, and physical office presence in Saudi Arabia.

Market entry timelines are substantial — a full banking licence application typically takes 12-24 months from initial engagement with SAMA to final approval. CMA licensing for investment activities is typically faster (6-12 months) but requires careful structuring.

GSDA Legal Consultants advises foreign financial institutions on Saudi market entry — including SAMA and CMA licensing, Islamic finance product structuring, regulatory compliance, and fintech sandbox applications.