Saudi Arabia Money Transfer License

Money Transfer and Money Exchange Licensing

Saudi Arabia has no single money transfer license. Money movement is regulated by the Saudi Central Bank (SAMA) under two separate legal frameworks, and the choice between them decides everything downstream: entity type, capital, timeline, and whether the application is even viable.

The first framework is the Rules Regulating Money Changing Business, issued in 2020 under Minister of Finance Decision No. 4686. This governs the traditional exchange house: buying and selling foreign currency, travelers cheques, and remittances for a closed class of legacy licensees.

The second is the Law of Payments and Payment Services and its Implementing Regulation. This is SAMA's modern regime for payment service providers. Money remittance is a listed payment service under it, and new entrants who want to move money domestically or across borders are routed here, licensed as Payment Institutions or Electronic Money Institutions.

Here is the fact that decides the whole strategy: full international remittance permission under the money changing rules is grandfathered. Category A exchange centers that held transfer permission when the 2011 rules were issued may send and receive internationally over SWIFT, SARIE and IMTS partners. A new applicant cannot buy its way into that class. Anyone selling you a "Saudi money changer license with remittances" for a new entity either does not understand the regime or is not being straight with you. The realistic path for a new remittance operator is a Major Payment Institution license under the Payments Law, or a partnership with an existing Category A exchange or licensed PSP while you build toward one.

Who Regulates What

SAMA licenses, supervises, examines and enforces. The money changing rules define permissible activities, capital, reserves, governance and inspection for exchange houses. The Payments Law and its Implementing Regulation do the same for PSPs, in four license classes: Micro and Major Payment Institutions, and Micro and Major Electronic Money Institutions.

AML obligations come from the Anti-Money Laundering Law (Royal Decree M/20), the terrorism financing law, their implementing regulations, and SAMA's own AML rules for banks and money exchangers, including UN Security Council sanctions implementation. Entity formation runs under the Companies Law. A foreign investor needs a MISA license from the Ministry of Investment before incorporating, and Saudization quotas apply to staffing.

The commercial backdrop explains the strictness. Saudi Arabia is one of the largest outbound remittance markets in the world, tens of billions of US dollars a year, sent by an expatriate workforce remitting to South Asia, Egypt, the Philippines and East Africa. The corridor economics are excellent, which is exactly why SAMA guards the entry points.

Licensing Entry Doors Compared

Every door involves SAMA fit and proper clearance of founders and senior management, an AML program, a bank guarantee or reserve arrangement, a Saudi-incorporated entity, and books and records kept in the Kingdom. The capital figures for the money changing tiers are the commonly applied ones; SAMA can amend them, so confirm the live Article 7 numbers during pre-application.

The Money Changing License

A licensed money changer may buy, sell and exchange foreign currency in banknotes and coins, and handle travelers cheques and bank cheques. Category A licensees may also issue and accept remittances through licensed correspondents and registered money transfer companies, subject to the grandfathering position above. Currency import and export requires separate SAMA approval and the higher capital tier. Under SAMA's more recent transfer receipt rules, a money changer may receive customer funds electronically into a dedicated account strictly to execute an exchange or remittance, but may not receive transfers from banks or remitters outside the Kingdom for exchange purposes.

The prohibitions are absolute. No deposit taking; the Banking Control Law reserves that for banks. No lending and no customer current accounts. Remittances for membership customers are value capped, broadly at the customer's monthly salary up to around SAR 50,000 a month, with full KYC membership files behind each one.

The financial requirements go beyond headline capital. A cash reserve of 5 percent of capital, raised to 10 percent for transfer activity, sits with a licensed Saudi bank at SAMA's disposal and cannot be touched without written permission. Ten percent of annual net profits goes to a statutory reserve until it reaches 30 percent of paid-up capital. Total assets may not exceed ten times capital. At application, the founder undertakes to provide a bank guarantee in SAMA's favour equal to 100 percent of capital, issued by a Saudi licensed bank. Insurance from a Saudi-licensed insurer over all property, including cash and transferable instruments, is mandatory.

On structure: the licensee must be a company incorporated in the Kingdom, with sole proprietorships allowed only in cities under roughly 100,000 people. Founders pass fit and proper screening covering solvency, criminal record, bankruptcy within three years, and prior breaches of Saudi financial law. Foreign money changers can apply to open branches, and the rules define invested capital for this purpose, but the parent's home supervisor must give a no-objection and the parent needs a clean AML history. That door exists on paper and is narrow and slow in practice. Initial SAMA approval must come before leasing or fitting out premises, which must meet SAMA's physical security and cash transport standards. The head office, books and records stay in the Kingdom, and the core licensed activity cannot be outsourced.

The Payments Law Route

Under the Payments Law, money remittance means accepting funds from a payer, without creating a payment account, for transfer to a payee inside or outside the Kingdom. A licensed Payment Institution can run a remittance business without touching the grandfathered money changer class at all, which is why this is the route we point new entrants toward.

A Micro PI is an LLC with SAR 1M capital, working capital held at that floor, and average monthly payment value capped around SAR 10M for the first year. It suits pilots and domestic-first models. A Major PI is a Saudi joint stock company with SAR 3M capital, no volume cap, and cross-border services permitted; ongoing working capital is tested at the higher of the fixed floor or a formula. This is the standard vehicle for a scaled remittance operator. The EMI classes cover e-money: a Micro EMI (SAR 2M) carries caps on float, per-customer balance and first-year volumes, while a Major EMI (SAR 10M) issues e-money without those caps and fits wallet-led remittance and payroll models.

An irrevocable bank guarantee equal to the minimum capital, in SAMA's favour and from a Saudi-licensed bank, accompanies the application; the Implementing Regulation releases it once capital is fully paid. Customer funds must be segregated as safeguarded funds in defined settlement accounts. Cybersecurity, outsourcing, consumer protection and counter-fraud frameworks are assessed as part of the application rather than after it.

SAMA targets a licensing decision within about 90 calendar days of a complete application. The operative word is complete. Counting pre-engagement, document build and query rounds, a realistic elapsed time is 9 to 18 months. Foreign ownership works through a MISA license and a Saudi JSC, though SAMA will examine UBOs, group structure and the standing of your home supervisor, and it expects local presence, Saudi-resident senior management and Saudization compliance.

One observation from dealing with this regime: SAMA's sandbox and the PSP framework are where the Kingdom wants new remittance capacity to land. An application that reads like a digital-first PSP with a serious compliance architecture moves faster than one that reads like a copy of a traditional exchange house.

How the Application Actually Runs

For a Major PI, the work falls into five phases.

Pre-engagement comes first: meet SAMA licensing, settle the classification question (PI or EMI, Micro or Major), and consider the sandbox if the model is novel. Do not draft anything before classification is settled; filing under the wrong framework burns months. Expect one to two months.

Foundation runs in parallel: the MISA license for foreign investors, JSC name reservation, articles and bylaws, lining up the bank guarantee, and recruiting resident senior management candidates. Two to four months, and the banking workstream should start immediately because Saudi banks often want full cash collateral before issuing a guarantee for a new name.

The application pack is the heavy lift: the SAMA form, shareholder resolutions, articles, the organization chart, fit and proper files for every founder and board member, a three to five year business plan and financial model, and the full policy suite covering AML, cybersecurity, data protection, business continuity, consumer protection, fraud, safeguarding and settlement of customer funds, and outsourcing, plus drafts of all material third-party agreements. Three to five months if the client supplies information promptly.

SAMA assessment follows: a completeness check, then substantive review with at least two rounds of questions. Three to six months elapsed. On conditional approval comes perfection: capital injection, guarantee delivery, systems demonstrations, staff onboarding, connection to SAMA reporting portals and goAML, and a pre-launch inspection, typically two to four months, before final license and a controlled go-live.

The whole sequence, month by month:

The critical path is pre-engagement, pack build, assessment, perfection, launch. Banking and recruitment sit off that path but stall it at the perfection stage if they slip, which is why both start in month one. The interim partnership row is deliberate: a white-label or agency arrangement with an existing Category A exchange or licensed PSP earns corridor revenue during the licensing period and gives SAMA an applicant with a track record instead of a deck. Twelve months is achievable for a Saudi-majority applicant with financial-sector history; a foreign-owned group should plan on 12 to 18.

What goes in the file

Corporate: the MISA license, articles and bylaws, commercial registration, the full ownership tree to UBO level with a group structure chart, and board and shareholder resolutions authorizing the application.

Financial: evidence of the source of capital, audited financials of the shareholders or parent for three years, the five-year business plan and projections with stress cases, and the bank guarantee or undertaking from a Saudi-licensed bank.

People: fit and proper forms, CVs and criminal record clearances for every founder, board member and senior manager, the organization chart, the Saudization plan, and a named compliance officer or MLRO with relevant experience.

Compliance: a risk-based AML program covering customer due diligence, enhanced due diligence, sanctions screening against UNSC and SAMA lists, transaction monitoring, and goAML reporting procedures, plus the compliance charter, the internal audit arrangement and a training program.

Technology and operations: the IT architecture, a cybersecurity framework mapped to SAMA's requirements, data protection policy, business continuity and disaster recovery plans, the fraud framework, the outsourcing register with draft agreements, and complaints handling procedures.

Product: flow of funds diagrams for every corridor and product, the safeguarding and settlement methodology, correspondent and IMTS term sheets for launch corridors, pricing and FX methodology, and customer terms.

Most delay in SAMA processes is self-inflicted. The review clock starts at completeness, and the fastest applications are the ones where the business plan, the financial model, the policies and the funds-flow diagrams all tell the same story with the same numbers. Assign one person to reconcile everything before submission.

Costs to Obtain a Money Transfer License in Saudi Arabia

A budget presented as one number hides the real exposure, which is why we break it into these five layers. The ranges assume a foreign-owned sponsor in good standing and exclude corridor partner costs. Budget separately for the gap between license grant and first revenue, usually three to six months at full run-rate. And treat the guarantee line with respect: Saudi banks routinely ask new names for full cash collateral, which doubles the effective locked cash until a relationship matures.

Strengths and Drawbacks

The case for Saudi Arabia is straightforward. It is one of the largest send markets on earth with a salaried expatriate base, SAMA is demanding but professional and predictable, the PSP capital requirement is moderate for the region, SARIE and mada give licensees real domestic rails, and a SAMA license carries genuine weight in correspondent banking conversations worldwide.

The difficulties are equally real. The money changer route is closed to new remittance entrants. Foreign entry adds the MISA layer, JSC formation and Saudization obligations. The guarantee and reserve requirements lock cash well beyond the headline capital. Resident senior management raises fixed cost from day one. Incumbents own distribution and price corridors thin. And because the clock runs on completeness, an under-resourced application does not get rejected quickly; it just stalls.

If a Direct License is the Wrong Move

There are five alternatives worth weighing.

1. Partnering with a Category A exchange puts you on an incumbent's transfer permission: white-label corridors, supply the technology, share the margin. Months to revenue instead of years, at the price of no control over the license, pricing or banking, and concentration risk on one partner.

2. Operating as an agent of a licensed PI or EMI under SAMA's agent framework is the cheapest entry, with brand and product bounded by the principal's license conditions and appetite.

3. The SAMA sandbox suits genuinely novel models: real regulator engagement and a de-risked conversion path to a full license, but cohort timing and scope limits apply, and it is not a shortcut for a plain remittance product.

4. Acquiring or taking a stake in an existing licensee buys the grandfathered permission and the operating history. SAMA must approve any change of control, the seller will charge for the scarcity, and legacy liabilities come with the stock.

5. Serving the corridor from the receive side needs no Saudi license at all: build payout and FX capability in destination markets and partner into KSA send-side licensees. The margin mostly sits with the send side, but so does the regulatory burden.

The Path We Recommend

For a new, adequately capitalized entrant targeting outbound remittances from Saudi Arabia:

Months 0 to 3: settle the structural questions. Confirm classification with SAMA, obtain the MISA license, begin JSC formation, shortlist a resident CEO and compliance officer, and open banking conversations with at least two Saudi banks.

Months 2 to 8: build the Major PI application in full, and in parallel negotiate one partnership with an existing Category A exchange or licensed PSP so corridor revenue starts while the license is pending.

Months 8 to 16: manage the SAMA assessment and query rounds, inject capital and perfect the guarantee on conditional approval, and get systems and staff ready for the pre-launch inspection.

Month 16 onward: controlled go-live on two or three anchor corridors, KSA to Pakistan, India and Egypt being the obvious candidates, then scale and consider an EMI upgrade if a wallet product is on the roadmap.

If the capital envelope cannot comfortably absorb USD 2M to 3M across locked capital, build-out and eighteen months of run-rate, do not file. Enter as a partner or agent first and license later. The partnership phase is where corridor economics get proven, and it changes what SAMA sees when the application eventually lands.

What Can Kill the Application

• Misclassification: filing under the money changer rules for a model that belongs in the PSP regime. Settle it in pre-engagement.

• Fit and proper failures: a founder or UBO with regulatory breaches, a bankruptcy within three years, or unresolved criminal matters sinks the file. Screen everyone before engagement and restructure the cap table early if needed.

• The guarantee stall: banks demanding full cash collateral from new names. Run two banking tracks and keep shareholder standby funding available.

• Residency gaps: senior roles must be filled by Saudi nationals or residents physically in the Kingdom, at market-rate packages. Recruit compliance leadership before filing, not after.

• Correspondent de-risking: a license without foreign payout partners and settlement banking is a shelf ornament. Negotiate corridor partners in parallel with the application.

• Regulatory drift: SAMA amends capital, cyber and reporting requirements periodically. Re-verify every figure in this guide against the live rulebook at filing time and hold 15 to 20 percent contingency in the capital plan.

Working with Us

Faisal Khan LLC acts as strategy lead and regulatory architect on these engagements. Local Saudi counsel executes the filings; we design the structure, build the substance and run the process.

The work divides into five streams. First, pathway determination: the classification memo, the go or no-go analysis, the capital plan, and a decision workshop with the principals. Second, application architecture: the business plan, financial model, funds-flow diagrams and the complete policy suite drafted to SAMA's expectations. Third, regulator and bank engagement: pre-engagement preparation, query response management, banking access for the guarantee and operating accounts, and correspondent and IMTS partner sourcing from our network. Fourth, the parallel revenue track: structuring an interim partnership or agency arrangement so the client earns while the license is in process. Fifth, post-license operationalization: the compliance operating model, the reporting calendar, goAML and SAMA portal readiness, and launch corridor playbooks.

Fees are milestone-based professional fees per workstream, fixed in a formal engagement letter. We do not take revenue share.

This is an advisory document, not legal advice. Regulatory requirements change; every figure here must be re-verified against the current official text of SAMA's rules and the Payments Law Implementing Regulation before any filing.