A Fintech Sector Built for AI
Saudi fintech has gone from a near-standing start in 2018 to a top-tier regional ecosystem in fewer than seven years, and AI is woven through the trajectory in a way that distinguishes it from comparable fintech expansions elsewhere. The Saudi Central Bank — SAMA, established under its current name in 2021 from the predecessor Saudi Arabian Monetary Authority — sets the regulatory perimeter, operates the principal payment rails, and runs the regulatory sandbox that has been the principal incubator for new entrants. The Capital Market Authority handles securities-side regulation. The Communications, Space and Technology Commission (CITC) and SDAIA hold cross-cutting authorities over data and AI. Together they have produced a regulatory environment that is rigorous but actively supportive of AI-driven fintech.
The sector’s growth math is unusually favorable. Saudi Arabia has one of the youngest demographic profiles in the G20, the highest mobile and internet penetration in the region, an oil-funded household balance sheet with substantial discretionary spending capacity, and a Vision 2030 target to push non-cash payments to 70 percent of total transactions, which has been substantially achieved ahead of schedule. The combined effect is a market in which AI-driven fintech products encounter a customer base that is mobile-first, digitally fluent, and structurally well-positioned to absorb new categories of financial product.
SAMA’s Fintech Sandbox
SAMA’s regulatory sandbox is the gateway through which most new AI-driven fintech enters the market. The sandbox provides a structured environment for new products to operate under controlled licensing while regulatory pathways are clarified, and it has been used by every major Saudi fintech success story to date. The sandbox is administered with a mix of rigor and pragmatism that has earned it international respect — it does not rubber-stamp entrants, but it works actively with them to find compliant paths to scale.
The principal AI-relevant areas the sandbox has cultivated are digital banking, BNPL, payments orchestration, robo-advisory, fraud and AML analytics, and Sharia-compliant credit. Each category has a slightly different regulatory perimeter, and SAMA has progressively published implementing rules — the Banking Consumer Protection Principles, the Open Banking Framework, the Digital Banking Licensing Guide, the BNPL Rules — that codify the sandbox graduates’ lessons into stable production regulation.
Mada and the Payment Rails
Mada is the national debit-and-payment-card scheme that anchors the Saudi payment system. Operated by the Saudi Payments company under SAMA’s authority, Mada combines card-rail capabilities, contactless payment infrastructure, and the underlying authorization-and-clearing engine that integrates with Visa, Mastercard, and the local bank network. AI deployments at the Mada operational layer cover fraud detection, real-time transaction risk scoring, and capacity planning across the rail.
The fraud-detection workload is one of the largest production AI workloads in the Kingdom by transaction volume. Mada-routed transactions are scored in real time against models trained on the historical authorization stream, with action thresholds tuned in coordination with the issuing banks. The deployment combines classical gradient-boosted models for high-throughput scoring with deeper neural models for harder fraud patterns, and increasingly, with foundation-model-style anomaly detection that uses unsupervised pretraining to surface novel fraud patterns. Saudi Payments has been a consistent buyer of fraud-AI capability from the major specialist vendors (Feedzai, Featurespace, NICE Actimize) as well as from the broader cloud-native AI ecosystem.
The Major Banks’ AI Deployments
The dominant tier of Saudi banks — Al Rajhi Bank, Saudi National Bank, Riyad Bank, Banque Saudi Fransi, Saudi Awwal Bank, Arab National Bank, Bank Albilad, Alinma Bank, Bank AlJazira — have all stood up enterprise AI programs over the past five years, with sharply differentiated postures. Al Rajhi, the largest Islamic bank globally by several measures, has invested heavily in Sharia-compliant credit AI, customer-experience AI for its substantial retail base, and operational AI across its branch and call-center network. Saudi National Bank, formed from the 2021 merger of NCB and Samba, has built its AI program around corporate banking, treasury, and the integration challenges of post-merger systems consolidation. Riyad Bank has emphasized SME credit AI and trade-finance automation.
The capability stack across the major banks is converging. Customer-facing AI runs through Arabic-fluent conversational agents integrated with the banks’ mobile apps and call centers. Credit and risk AI runs across origination, monitoring, collections, and capital allocation. Operational AI covers branch optimization, ATM network management, and back-office automation. Compliance AI covers AML, sanctions, KYC, and the increasingly sophisticated counter-terrorism-financing requirements that SAMA enforces.
The cloud and infrastructure posture is shaped heavily by SAMA’s data-residency requirements. Banks have generally adopted hybrid postures, with sensitive workloads on Kingdom-resident sovereign cloud regions (Google Cloud’s Dammam region, AWS’s Saudi region, Microsoft Azure’s planned Saudi region, Oracle’s Saudi region) and with on-premise deployments for the most sensitive workloads. The Allam family of Arabic foundation models is increasingly the substrate for customer-facing conversational AI, displacing earlier-generation deployments built on Western foundation models.
BNPL — Tabby, Tamara, and the Sharia-Compliant Frontier
Buy-now-pay-later in Saudi Arabia is dominated by Tabby and Tamara, both of which originated in the GCC and have scaled rapidly into Saudi-anchored fintech franchises. Both operate under SAMA’s BNPL Rules and rely heavily on AI for underwriting, fraud detection, and collections. The underwriting models are trained on a mix of merchant-transaction data, mobile-app behavioral signals, and the limited credit-bureau coverage available through SIMAH (the Saudi credit bureau).
The Sharia-compliance dimension is consequential. BNPL products in Saudi Arabia must be structured to avoid riba (interest) and gharar (excessive uncertainty), which constrains the product design and which interacts with the AI models in non-trivial ways. The underwriting decision must reflect a structurally permissible product, and the pricing must align with Sharia-compliant fee structures rather than time-based interest. Sharia advisory boards review the AI-driven decisions at the policy level, and the most sophisticated operators have been working to make their AI models explicitly Sharia-aware in their decision structure.
STC Pay, Geidea, and the Payments Layer
STC Pay, owned by stc Group, is the leading mobile wallet in the Kingdom and operates as a digital bank under SAMA licensing. Its AI deployments span fraud detection, customer-experience optimization, and the cross-sell engine that pushes customers from basic wallet usage into broader financial products. Geidea is the dominant point-of-sale acquirer for SME and mid-market merchants, with an AI program focused on merchant analytics, fraud detection, and the increasingly important value-added services that ride on top of the acquiring relationship.
Hala, foodics, Lean Technologies, Tarabut, and a growing population of more specialized fintechs round out the ecosystem. The vendor relationships across them are concentrated — most are running on AWS Saudi or Google Cloud Dammam for cloud, on a mix of Snowflake, Databricks, and Saudi-resident equivalents for data, and on a combination of Allam and the leading Western foundation models for AI capability.
Fraud Detection at Scale
Fraud detection is a top-tier AI workload across the Saudi fintech sector and increasingly operates as a shared utility across the major institutions. SAMA has been encouraging information-sharing arrangements that allow fraud signals to propagate across institutions while respecting data-protection constraints, and the Saudi Banks Media and Awareness Committee has been the principal coordinating venue. The technical state of the art combines real-time scoring on every transaction, graph-analytic detection of fraud rings, and increasingly, foundation-model-style anomaly detection that surfaces novel fraud patterns ahead of explicit rule coverage.
Counter-terrorism financing and sanctions compliance are tightly enforced and are a major driver of AI investment. The institutional posture is risk-averse on these workloads — false-negative tolerance is essentially zero — which biases the AI architectures toward high-recall designs with substantial human-in-the-loop investigation capacity. The investigation tooling is increasingly AI-augmented, with LLM-based summarization of case files and AI-assisted next-best-action recommendation now standard in the major banks’ financial-crime operations.
Vendor Selection Criteria and Common Pitfalls
Vendor selection in Saudi fintech AI is filtered through several considerations. SAMA-grade sovereignty alignment is non-negotiable for production deployments, which routes vendors through the sovereign cloud regions and through Kingdom-resident infrastructure. Arabic-language capability is essential for any customer-facing surface. Sharia awareness is a meaningful differentiator for credit and lending applications. Demonstrated regulatory engagement — the willingness and capability to work through the SAMA sandbox and the implementing rules — separates vendors that can scale from vendors that produce one-off pilots.
The principal pitfalls are familiar to anyone who has tried to bring Western fintech AI into the Gulf. The first is assuming that US or European credit-modeling assumptions transfer cleanly; they do not, given the different credit-bureau coverage, the Sharia-compliance constraints, and the demographic profile. The second is underestimating SAMA’s regulatory rigor and assuming that a sandbox graduation is a stamp of regulatory completeness. The third is failing to invest in Arabic-language capability and in the cultural fluency that customer-facing fintech requires. Vendors that have built sustained relationships with SAMA, with the major banks, and with the leading fintechs are the ones that capture the structural growth of the sector.
Open Banking, the Account-Aggregation Layer, and Embedded Finance
SAMA’s Open Banking Framework, published in initial form in 2022 and progressively elaborated since, has reshaped the structural opportunity for AI-driven fintech. The framework establishes the API-mediated account-aggregation layer that allows authorized third parties to access bank-held data with customer consent, and it provides the regulatory substrate for the embedded-finance and account-aggregation use cases that have driven substantial fintech innovation in the UK, in the EU, and increasingly in emerging markets globally. The Saudi rollout has been steadily progressing, with the major banks now exposing core API surfaces, with a tier of authorized third parties operating commercial offerings, and with SAMA working through the implementation details for the more advanced account-information and payment-initiation use cases.
The AI agenda enabled by Open Banking spans personal-financial-management AI, AI-driven cash-flow underwriting that improves credit decisioning for thin-credit-file customers, embedded-finance AI that surfaces credit and insurance products at the point of need within non-financial apps and platforms, and the increasingly important corporate-banking applications that integrate with the ZATCA e-invoicing platform (FATOORA) to automate accounts-payable, accounts-receivable, and treasury workflows. Lean Technologies and Tarabut are the principal Saudi-domestic open-banking infrastructure providers, with substantial international competition from the global open-banking specialists.
Insurance AI and the Council of Health Insurance
The insurance sector — operating under the Council of Health Insurance for the health-insurance segment and under the Insurance Authority (formed in 2023 from the prior SAMA insurance-supervision function) for the broader insurance market — has been a slower adopter of AI than the banking sector but is now scaling rapidly. The principal AI deployments span underwriting (with AI-augmented risk assessment for motor, health, and property), claims AI (with computer-vision damage assessment for motor claims, AI-assisted medical-claim adjudication, and fraud detection), customer-experience AI integrated with the broader Sehhaty and insurance-customer-app surfaces, and the increasingly important regulatory-reporting AI that addresses the substantial reporting burden the new Insurance Authority frameworks impose.
The principal Saudi insurers — Tawuniya, Bupa Arabia, MedGulf, Al Rajhi Takaful, and the broader takaful and conventional-insurance base — operate AI programs of varying maturity. The Sharia-compliant takaful structure shapes the underwriting and claims AI in ways that distinguish the Saudi insurance AI agenda from comparable conventional-insurance markets, and the leading takaful operators have been investing in Sharia-aware AI capability as a competitive differentiator.
Capital Markets, Tadawul, and the Wealth-Management AI Frontier
The Saudi capital-markets infrastructure has matured rapidly under the Capital Market Authority’s reforms, with the Tadawul exchange now one of the largest in the broader Middle East and North Africa region by market capitalization. The 2019 Aramco IPO, the 2022 Tadawul Group listing of itself, the substantial PIF-backed IPO pipeline, and the broader Saudi inclusion in the major emerging-market indices have transformed the capital-markets context. The AI agenda spans market-surveillance AI operated by the Capital Market Authority and Tadawul, broker and asset-manager AI for trading and portfolio management, the increasingly important wealth-management AI surfaces operated by the major Saudi banks and the standalone wealth-management houses, and the robo-advisory layer that has been progressively scaling under the regulatory frameworks the Capital Market Authority has issued.
The wealth-management AI frontier is being shaped by the substantial Saudi household-wealth growth, by the demographic trajectory toward greater investment-product adoption among younger Saudi citizens, and by the regulatory pathways that the Capital Market Authority has opened for digital-first investment products. The leading wealth-management operators — Jadwa Investment, NCB Capital, SNB Capital, Albilad Capital, and the broader tier — operate AI programs that span portfolio construction, client-experience personalization, and the increasingly important Sharia-screening AI that supports the substantial Sharia-compliant investment product portfolio.
For deeper reading: see SAMA and the fintech sandbox, Mada payments network, Sharia-compliant AI lending, and Saudi banking AI deployments.