Setting up a
Fintech business.
Saudi fintech is the most regulated sector with the highest growth ceiling. SAMA (Saudi Central Bank) operates a regulatory sandbox for new entrants. Established players (STC Pay, Tabby, Tamara, Lean Technologies) achieved unicorn status. Setup is complex — most foreign fintechs start in the sandbox before getting full licenses.
What's specific to Fintech.
License codes, capital, regulators, and quirks that competitors gloss over.
- SAMA Sandbox: 12-month controlled environment to test fintech innovations before full licensing
- Capital: SAR 5M+ for payments licenses, SAR 30M+ for digital banks
- Activity codes: depend on subsegment — payments, lending, BNPL, insurance, wealth tech each have separate frameworks
- Saudization: very strict — financial services typically require 50%+ Saudis
- Compliance: AML/CTF, customer data residency in KSA mandated
- SAMA approval required separately from MISA — dual-track licensing
- Capital adequacy ratios apply once licensed
What we see go wrong.
- ✗ Trying to operate without SAMA license under 'consulting' workaround — reputational + legal risk
- ✗ Skipping the Sandbox and applying directly for full license — typically denied
- ✗ Underestimating capital adequacy + ongoing compliance costs (~SAR 500K/yr for licensed entities)
- ✗ Storing customer data outside KSA — direct breach of SAMA data localization rules
- ✗ Hiring foreign-only compliance team — Saudization mandate hits hardest in regulated functions
Common questions.
Sandbox first, almost always. It de-risks the regulatory path and signals seriousness to SAMA. Full-license applications without sandbox track record have <30% approval rate. Sandbox graduates have ~80%+.
Sandbox entry: 3-6 months from application. Sandbox period: 12 months. Post-sandbox full license: 6-12 months. Total runway from application to licensed operation: 24+ months. Plan capital accordingly.
Yes — banking-as-a-service partnerships with licensed Saudi banks are common (e.g., embedded payments, BNPL). You're an operating partner without holding the license yourself. Lower regulatory burden, lower margin.