kb-banking-regulation-sama
Rating is derived from the repo's GitHub stars and shown for reference.
name: kb-banking-regulation-sama
description: Use when advising on Saudi banking and financial regulation under the Saudi Central Bank (SAMA), including banking license types, capital requirements (Basel III), Sharia compliance oversight, AML/CFT obligations (SAFIU reporting), payment services licensing, fintech regulation, and Vision 2030 financial sector reforms. Covers all SAMA-regulated entities: banks, insurance companies, finance companies, and payment service providers in KSA.
license: MIT
metadata:
id: kb.banking-regulation-SAMA
category: kb
practice_area: Banking & Financial Regulation
jurisdictions: [KSA]
priority: P0
intent: [banking regulation, KSA, SAMA, licensing, capital requirements, Islamic banking, AML, fintech, Vision 2030]
related: [kb-aml-fatf-mena, kb-banking-regulation-cbuae, kb-banking-regulation-bdl, kb-corporate-law-ksa, kb-fintech-licensing-cma-ksa]
source: Louis — HAQQ Legal AI (github.com/sboghossian/mini-claude-for-legal)
version: "1.0"
Knowledge Pack — SAMA Banking Regulation (KSA)
Scope
This pack covers the Saudi Central Bank (SAMA) regulatory framework for banking and financial institutions in the Kingdom of Saudi Arabia. It covers:
- SAMA's institutional mandate and legal basis
- Regulated entity categories and license types
- Capital requirements and prudential framework
- Sharia compliance oversight
- AML/CFT obligations
- Consumer and conduct-of-business standards
- Payment services and fintech licensing
- Vision 2030 financial sector reform initiatives
- Enforcement powers and penalties
SAMA — mandate and legal basis
Saudi Central Bank operates under the Central Bank System (Council of Ministers Resolution 3/4/2020). It retains the "SAMA" brand name. SAMA's mandate:
- Banking supervision and licensing
- Monetary policy (managing SAR peg to USD at 3.75)
- Currency issuance
- Insurance supervision
- Finance company supervision
- Payment service provider supervision
- AML/CFT supervision for regulated entities
Note on the CMA: The Capital Market Authority (CMA) is a separate regulator for capital markets (securities, investment funds, sukuk issuance). SAMA and CMA have overlapping relevance for banks engaging in capital market activities.
Regulated entities
| Entity category | SAMA supervision |
|---|---|
| Commercial banks (~30 licensed) | Full |
| Wholesale banks | Full |
| Investment banks | Full |
| Islamic banks | Full |
| Specialized banks (real estate, agricultural) | Full |
| Branches of foreign banks | Full |
| Insurance companies (life + general + reinsurance) | Full |
| Finance companies (consumer, SME, real estate) | Full |
| Payment service providers | Full |
| E-money issuers | Full |
| Money changers and remittance companies | Full |
Banking license types
| License | Activities permitted |
|---|---|
| Full commercial bank | Deposit-taking, lending, payments, FX, capital market products (subject to CMA for certain activities) |
| Wholesale bank | Institutional clients only; no retail deposits; minimum capital lower |
| Islamic bank | Sharia-compliant products only; full activities within Islamic framework |
| Specialized bank | Narrow mandate — e.g., real estate finance bank, agricultural bank |
| Foreign bank branch | Limited activities; requires home regulator no-objection letter |
Capital requirements
| Entity type | Minimum capital |
|---|---|
| Commercial bank | SAR 500M (recently revised upward from SAR 250M) |
| Investment bank | SAR 50M+ (varies by activity) |
| Insurance company | SAR 100M (life); SAR 100M (general); higher for reinsurance |
| Finance company | SAR 20M+ (varies by product) |
| Payment institution | SAR 5M–50M (tiered by activity type) |
Prudential ratios (Basel III)
| Ratio | SAMA requirement |
|---|---|
| Capital Adequacy Ratio (CAR) | ≥ 8% (plus applicable buffers; typically ≥ 10.5–12%) |
| Common Equity Tier 1 (CET1) | ≥ 4.5% + buffers |
| Liquidity Coverage Ratio (LCR) | ≥ 100% |
| Net Stable Funding Ratio (NSFR) | ≥ 100% |
| Leverage ratio | ≥ 3% |
| Large exposure limit | ≤ 25% of eligible capital per single counterparty |
Sharia compliance framework
Mandatory for Islamic activities
All banks conducting Islamic banking activities must:
- Sharia Supervisory Board (SSB): minimum 3 qualified Sharia scholars; independent from management
- Annual Sharia compliance report — issued by SSB to shareholders
- Product approval: every new product approved by SSB before launch
- AAOIFI standards: SAMA has incorporated AAOIFI accounting and governance standards for Islamic institutions
Conventional banks with Islamic windows
Conventional banks may offer Islamic products through designated Islamic windows, subject to SSB oversight of the window's activities. The Islamic window must be operationally separated from conventional activities.
SAMA's role
SAMA does not itself adjudicate Sharia compliance for individual products — that is the SSB's role. SAMA supervises the governance process (is an SSB in place? Is it functioning? Are reports being issued?).
AML/CFT
Framework
- SAMA AML/CFT Rules (most recent version: 2023 updates)
- Anti-Money Laundering Law (Royal Decree M/20 1442H / 2021)
- FATF 40 Recommendations aligned
SAFIU
Saudi Financial Intelligence Unit (SAFIU) is the Saudi FIU. SAR filing is mandatory for all SAMA-regulated entities via the goSAFIU electronic platform.
CDD requirements
- Standard CDD on account opening and above-threshold transactions
- EDD for PEPs (domestic and foreign), high-risk jurisdictions, complex structures
- Source of funds / source of wealth for high-risk customers
- Beneficial ownership: identify and verify UBO (25%+ threshold)
Sanctions
- UN Security Council lists: mandatory
- Saudi Ministry of Foreign Affairs / Council of Ministers sanctions
- OFAC screening for USD-connected transactions
Annual training
AML training mandatory annually for all staff who handle transactions or customer relationships.
Consumer protection and conduct
SAMA's consumer protection rules:
- Transparency: fees, terms, and conditions must be clearly disclosed
- Fair lending: prohibition on unfair, deceptive, or abusive practices
- Complaint handling: designated complaint resolution unit; 30-day resolution requirement; escalation to SAMA
- Anti-usurious practices: conventional lending practices must be designed to be competitive but not exploitative; Sharia-aligned products preferred for Saudi nationals
- Mortgage rules: real estate mortgage regulations; LTV caps; affordability assessment
Payment services and fintech
Payment service provider (PSP) licensing
PSPs require SAMA licensing for:
- Payment processing (merchant acquiring, payment gateways)
- E-wallet and stored value
- Money transfer services
- Bill payment aggregation
Open banking (2025)
SAMA's Open Banking Framework (launched 2022; implementation 2023–2025) requires licensed financial institutions to offer secure APIs for authorized third-party providers (TPPs) to access account information (with customer consent) and initiate payments.
Digital bank licensing
SAMA issued digital banking regulations in 2021. Digital-only banks (no physical branches) are licensed under a distinct framework. As of knowledge cutoff, several digital bank licenses had been issued (e.g., STC Bank, D360 Bank, Riyad Bank digital subsidiary).
Fintech regulatory sandbox
SAMA operates a regulatory sandbox allowing fintech companies to test products in a controlled environment before full licensing. Sandbox participants operate under a temporary exemption.
Vision 2030 financial sector reforms
Vision 2030's Financial Sector Development Program (FSDP) targets:
- Increase non-oil government revenues (including financial sector revenue)
- 70% cashless transactions by 2025 (largely achieved)
- Development of Riyadh as a regional financial hub
- Expand insurance penetration
- Develop sukuk and capital markets
- Enable financial inclusion for underserved segments
Regulatory changes driven by Vision 2030:
- Digital bank licensing
- Open banking framework
- Enhanced fintech ecosystem support
- Continuous AML enhancement to support financial hub ambitions
Enforcement powers and penalties
SAMA has broad enforcement powers:
| Enforcement action | Basis |
|---|---|
| Administrative fines | Up to SAR 100M+ for serious violations |
| License suspension | For material compliance failures |
| License revocation | For persistent or serious violations |
| Director disqualification | Individual accountability for governance failures |
| Criminal referral | To Public Prosecution for AML, fraud, or systemic violations |
Practical guidance — licensing
Commercial bank license application
Typical requirements:
- Business plan with 5-year financial projections
- Minimum capital deposited in escrow
- Fit and proper assessment of all senior management + directors
- AML program documentation (including MLRO designation)
- IT and cybersecurity framework (SAMA Cyber Security Framework compliance)
- Saudization (Nitaqat) compliance plan
- Sharia Supervisory Board composition (if Islamic activities)
- Physical office in Saudi Arabia
Timeline: 12–24 months from application submission; multi-stage SAMA review.
MLRO designation
Every SAMA-regulated institution must designate a Money Laundering Reporting Officer (MLRO):
- Senior management level
- Independent direct reporting line to Board Audit Committee
- SAMA fit and proper approval required
How to use this pack
Load this pack when the user:
- Needs to understand SAMA's regulatory framework for a banking or financial services activity in KSA
- Is advising on a banking or fintech license application in Saudi Arabia
- Has AML/CFT compliance questions for a SAMA-regulated institution
- Needs to understand capital requirements, Islamic banking supervision, or consumer protection rules
- Is assessing the payment services or digital bank regulatory landscape in KSA
Caveats & currency
SAMA regulations change frequently, particularly for fintech, open banking, and AML. Capital requirement thresholds have been updated recently. Verify current SAMA regulations and circulars at sama.gov.sa. Vision 2030 financial sector programs introduce new rules regularly.
Related skills
- [[kb-aml-fatf-mena]] — MENA-wide AML/CFT context and SAFIU integration
- [[kb-banking-regulation-cbuae]] — CBUAE for UAE comparison
- [[kb-banking-regulation-bdl]] — BDL (Lebanon) for comparison
- [[kb-corporate-law-ksa]] — KSA corporate law for entity structure context
- [[kb-fintech-licensing-cma-ksa]] — CMA for capital markets and fintech licensing