Saudi Fintech Licensing Landscape: Complete Map of SAMA-Authorized Digital Financial Services

Saudi Arabia’s fintech licensing landscape encompasses 82 SAMA-licensed entities across 6 categories, generating combined revenue exceeding SAR 3.4 billion in 2025. The sector has grown at a 45% compound annual rate since 2020, driven by the Kingdom’s deliberate regulatory infrastructure — including the SAMA sandbox, favorable licensing terms, and the Fintech Saudi ecosystem development program. The licensed fintech population serves as the operational infrastructure for Saudi Arabia’s emerging tokenization ecosystem, providing payment rails, identity verification, open data access, and digital banking services that tokenized securities platforms depend on.

License Categories and Population

Payment Service Providers (34 entities)

The largest license category, covering digital wallets, payment processing, money transfer, and merchant services. Major players include stc pay — now operating as STC Bank since January 2025 with 12 million customers and a $1.3 billion valuation — along with Geidea, Moyasar, HyperPay, and Amazon Payment Services (formerly Payfort). According to SAMA’s licensed payment providers registry, 27 entities hold payment service provider licenses as of early 2026, spanning e-wallets, POS services, and payment gateways.

Payment service providers are the primary distribution channel for SAR stablecoins and the expected first adopters of digital riyal distribution. Several payment providers are also exploring integration with tokenized securities platforms for subscription payment processing.

Fintech Companies (22 entities)

A diverse category covering lending platforms, financial data analytics, credit scoring, wealth management technology, and specialized financial services. Notable entities include Rasan (financial products marketplace), Lean Technologies (open banking infrastructure), and Tamara (buy-now-pay-later).

Several fintech companies are actively exploring tokenization-related services, including automated investor suitability assessment tools, blockchain-based credit scoring, and tokenized lending protocols.

Digital Banking (4 entities)

Four digital banks now hold SAMA digital banking licenses: STC Bank (formerly STC Pay, commenced operations January 2025 with SAR 2.5 billion capitalization), D360 Bank, Vision Bank (commenced September 2025), and EZ Bank (latest approval). Together they serve a growing customer base and are positioned as the banking infrastructure layer for tokenized asset adoption. STC Bank alone brings 12 million customers from its payments heritage, providing an immediate distribution channel for digital financial products.

Geographic Distribution

Licensed fintech entities are concentrated in three Saudi cities:

• Riyadh: 58 entities (71%) — home to most financial institutions and the CMA/SAMA headquarters
• Jeddah: 14 entities (17%) — commercial hub with strong merchant services presence
• Dammam/Khobar: 6 entities (7%) — Eastern Province financial services cluster
• Other cities: 4 entities (5%) — including NEOM-based fintech experiments

The Riyadh concentration reflects both the Kingdom’s financial center status and the practical advantages of proximity to regulators during the sandbox and licensing process.

Investment Landscape

Saudi fintech has attracted significant venture capital and strategic investment:

• Total funding (2018-2025): SAR 4.5 billion ($1.2 billion)
• Average deal size (2025): SAR 45 million (Series A), SAR 120 million (Series B)
• Key investors: Saudi Venture Capital Company (SVC), stc Ventures, Sanabil Investments, MISK Foundation, international VCs (Sequoia, SoftBank Vision Fund)
• IPO pipeline: 2 fintech entities are reported to be preparing Tadawul IPO filings for 2026-2027

Investment has been concentrated in payment services (42% of total funding), lending technology (23%), and digital banking (18%). Tokenization-specific fintech investment is emerging as a distinct category, with approximately SAR 200 million invested in entities focused on digital asset infrastructure since 2024.

SAMA and CMA Regulatory Coordination

Saudi Arabia’s financial technology regulation operates under a dual-authority model:

The Joint Digital Assets Committee — established in 2024 — coordinates regulation where activities span both domains. For example, a platform that processes payment token settlement for tokenized securities trades requires both SAMA payment authorization and CMA securities licensing. The Joint Committee provides a single application pathway for such entities.

Entities seeking CMA digital asset licenses (7 categories, from exchange operators to custodians) often build on SAMA-licensed fintech infrastructure. The 34 SAMA-licensed payment providers, for instance, handle the payment leg of tokenized securities transactions, while CMA-licensed broker-dealers handle the securities leg.

Licensing Process and Timeline

The SAMA fintech licensing process follows a structured pathway:

Stage 1 — Pre-Application (1-2 months): Fintech Saudi provides regulatory classification guidance, helping applicants determine the correct license category and understand requirements. Fintech Saudi’s advisory service is free and has supported over 200 pre-application consultations since 2020.

Stage 2 — Sandbox Application (2-3 months): Formal application to SAMA’s sandbox program, including business plan, technology architecture documentation, AML/CFT program design, and proof of minimum capital. SAMA reviews applications within 60-90 business days.

Stage 3 — Sandbox Testing (6-18 months): Controlled testing environment with customer limits (typically 1,000-5,000 users), transaction caps, and enhanced reporting. Three testing phases: functional testing, compliance testing, and market testing.

Stage 4 — Graduation and Full License (2-3 months): Post-sandbox assessment covering operational stability, compliance effectiveness, financial sustainability, and technology resilience. Successful entities receive full SAMA licenses with no customer or transaction limits.

Stage 5 — Ongoing Supervision: Quarterly reporting, annual audits, and continuous compliance monitoring. SAMA has imposed enforcement actions on 3 licensed fintech entities since 2023, ranging from fines to temporary activity restrictions.

Talent and Workforce

Saudi Arabia’s fintech sector employs approximately 4,200 professionals across licensed entities, with demand exceeding supply in specialized roles:

• Compliance officers with AML/CFT and digital asset expertise — 200+ positions unfilled
• Blockchain developers with smart contract experience — 150+ positions unfilled
• Data engineers with open banking API experience — 100+ positions unfilled
• Sharia scholars with fintech and digital asset knowledge — approximately 30 qualified individuals in Saudi Arabia

Saudi university programs are developing curricula to address these gaps. KFUPM, King Saud University, and Prince Sultan University offer fintech-focused degree programs. The Fintech Saudi talent development program has placed 340 Saudi nationals in fintech roles since 2021.

SAMA’s Saudization requirements mandate minimum Saudi national employment percentages for licensed entities — 75% for established firms, with graduated requirements for startups (50% in year one, increasing to 75% by year three).

International Fintech Entry

International fintech firms seeking Saudi market access have multiple pathways:

• Direct licensing: Apply for SAMA license directly — requires Saudi commercial registration and local infrastructure
• Partnership: Partner with an existing SAMA-licensed entity — the most common approach for initial market entry
• NEOM registration: NEOM’s special economic zone offers streamlined regulatory access for firms operating within the zone
• CMA ELDAP: For entities already licensed in recognized jurisdictions, the Existing Licensee Digital Asset Pathway provides an accelerated route for securities-related activities

Bilateral cooperation agreements with regulators in 11 jurisdictions (including ADGM, FCA, MAS, and BaFin) facilitate cross-border regulatory coordination. FATF membership (Saudi Arabia since 2019) ensures that AML/CFT standards are mutually recognized.

Regulatory Outlook

SAMA’s fintech licensing roadmap for 2026-2028 includes:

1. New license categories: SAMA is developing license frameworks for AI-powered financial advisory (“robo-advisory”), decentralized finance service providers, and digital asset prime brokerage
2. Tiered licensing: Introduction of a tiered licensing structure with reduced requirements for early-stage fintech firms (sub-SAR 500,000 capital) to lower barriers to entry
3. International sandbox: A dedicated pathway for international fintech firms seeking Saudi market entry, coordinated with the CMA’s cross-border ELDAP program
4. Regulatory technology (RegTech): SAMA is developing a unified regulatory reporting platform that licensed entities will use for compliance reporting, reducing the reporting burden on fintech firms

The expansion of SAMA’s licensing framework is closely coordinated with the CMA’s digital asset framework development, ensuring that the full spectrum of digital financial services — from payments to securities to insurance — operates under coherent, complementary regulatory structures.

Vision 2030 Alignment

Saudi Arabia’s fintech licensing landscape directly supports Vision 2030 Financial Sector Development Program targets:

• 70% digital payment adoption by 2030 — the 34 payment service providers are the primary delivery mechanism
• 525 fintech firms by 2030 — currently at 82 licensed entities with sandbox pipeline of 30+ additional applicants
• SAR 13 billion fintech revenue by 2030 — from SAR 3.4 billion in 2025 (requiring 25% compound growth)
• Financial inclusion — digital banks and payment providers reaching underbanked segments, including youth and rural populations

The fintech licensing infrastructure also supports Saudi Arabia’s broader capital markets objectives. As Tadawul’s digital securities platform scales from pilot to production, the licensed fintech ecosystem provides the payment rails, customer acquisition channels, compliance tools, and data infrastructure that tokenized securities markets require.

Compliance Requirements Across License Categories

All SAMA-licensed fintech entities share common compliance obligations, with category-specific additions:

Universal Requirements:

• AML/CFT program including real-time transaction monitoring
• PDPL data protection compliance including data residency
• Consumer protection standards including complaint resolution
• Annual independent audit by SAMA-approved auditors
• Quarterly financial reporting to SAMA
• Business continuity and disaster recovery plans
• Cybersecurity standards including annual penetration testing

Category-Specific Additions:

Compliance costs represent a significant operational expense for licensed entities — estimated at SAR 1-5 million annually depending on entity size and license category. This cost structure favors consolidation among smaller providers and creates natural barriers to entry that help maintain service quality.

Insurtech and Debt Crowdfunding

Two smaller but growing license categories complete the fintech landscape:

Insurtech (7 entities): Licensed insurtech firms provide digital insurance distribution, parametric insurance products, and claims automation. The intersection with tokenization is emerging through parametric insurance products that use smart contracts for automated claims settlement — for example, weather-indexed agricultural insurance where claims pay out automatically based on verified data feeds. Two insurtech firms are exploring blockchain-based insurance products within the SAMA sandbox.

Debt Crowdfunding (8 entities): Licensed crowdfunding platforms enable peer-to-peer and marketplace lending, collectively facilitating over SAR 800 million in loans since licensing. The relationship with tokenization is direct — crowdfunding loan portfolios can be tokenized as asset-backed securities under the CMA framework, creating secondary market liquidity for what are currently illiquid lending positions. One crowdfunding platform is in the CMA sandbox testing loan portfolio tokenization.

Resources

• SAMA Fintech Sandbox — Testing and graduation
• Digital Banking License Framework — Neobank licensing
• Open Banking Framework — API infrastructure
• Payment Token Framework — Payment regulation
• CMA Digital Assets Framework — Securities licensing
• Saudi Fintech Venture Capital — Investment landscape
• Fintech Saudi — Ecosystem development

Related network sites: Saudi Tokenized Real Estate | Dubai Tokenisation | UAE Tokenization Regulations | Capital Tokenization

The Saudi FinTech Strategy 2025 targets 150 licensed fintech entities by 2030, requiring the licensing pipeline to sustain 10-15 new licenses annually. The SAMA sandbox (65% graduation rate) and direct licensing pathways provide the regulatory channels, while Fintech Saudi’s accelerator program ensures a steady pipeline of qualified applicants. The Elm Company’s digital identity infrastructure — used by all 82 licensed entities for customer onboarding — provides the consistent KYC standard that SAMA requires across the fintech population, while the Saudi Digital Academy’s fintech certification programs address the talent pipeline that the growing sector demands.

For fintech licensing inquiries: info@sauditokenisation.com