Cross-Border Payments and AML Risks:
What Saudi Financial Institutions Must Know in 2026
Saudi Arabia’s growing digital financial ecosystem has increased the importance of secure and transparent cross-border payments. Banks, fintech companies, payment service providers, and money transfer businesses increasingly process international transactions involving customers, beneficiaries, and financial institutions in different jurisdictions. While these payments support international trade and economic activity, they can also create additional Anti-Money Laundering (AML) and terrorist financing risks. Saudi financial institutions are therefore expected to apply risk-based controls when assessing customers, transactions, geographic exposure, and financial relationships. Source: [Source]
Why Cross-Border Payments Require Stronger AML Controls
International transactions can be more difficult to assess because the originator, beneficiary, intermediary institutions, and purpose of the payment may be located in different countries. This can make it harder for compliance teams to understand the complete transaction trail and determine whether activity is consistent with a customer’s expected profile. SAMA’s AML framework requires financial institutions to apply due diligence according to the level of risk and to apply enhanced due diligence where higher money laundering risks are identified. Source: SAMA – Implementing Regulation to the Anti-Money Laundering Law.
Accurate Originator and Beneficiary Information
A fundamental requirement for cross-border payments is maintaining accurate information about the sender and recipient. Under Article 10 of Saudi Arabia’s Anti-Money Laundering Law, financial institutions conducting wire transfers must obtain information about the originator and beneficiary and ensure that the information remains with the transfer throughout the payment chain. If required information cannot be obtained, the institution must not execute the transfer.
SAMA’s implementing regulation further specifies that originator information should include the full name, account number or unique transaction reference, and address or customer identification information. Beneficiary information should include the full name and account number or another traceable transaction reference. These requirements help institutions identify incomplete or potentially suspicious payments. [Source]
High-Risk Countries and Geographic Exposure
Geographic exposure is another important AML consideration. Transactions involving high-risk countries can require enhanced due diligence and additional controls. Saudi AML law requires financial institutions to apply enhanced due diligence proportionate to risks associated with relationships and transactions involving persons from high-risk countries. Source: [Source]
Financial institutions should therefore treat geographic risk as an ongoing factor rather than a one-time onboarding assessment. International AML risk classifications can change, making continuous screening and risk reassessment increasingly important. Source: [Source]
Correspondent Banking Risks
Correspondent banking relationships can create additional risks because a Saudi financial institution may depend on a foreign institution to process international payments. SAMA requires institutions to assess the respondent institution’s business, reputation, supervision, and AML controls and to obtain senior management approval before establishing new correspondent relationships.
Saudi AML law also prohibits financial institutions from establishing or continuing correspondent relationships with shell banks or respondent institutions that permit their accounts to be used by shell banks. This helps reduce the risk of illicit funds moving through inadequately supervised financial institutions. Source: [Source]
Transaction Monitoring and Risk-Based Controls
Cross-border AML compliance should continue beyond customer onboarding. Financial institutions should monitor transactions for unusual patterns, missing payment information, unexpected geographic activity, and behavior that does not match the customer’s known profile. SAMA’s implementing regulation allows institutions to determine, on a risk basis, whether transfers with missing information should be executed, rejected, or suspended.
FATF also emphasizes payment transparency and the importance of maintaining appropriate originator and beneficiary information so that transactions can be traced when necessary. Saudi Arabia’s AML framework is broadly aligned with these international principles. Source: [Source]
Cross-border payments are essential to Saudi Arabia’s increasingly connected financial ecosystem, but they can expose financial institutions to additional AML risks. Strong controls over payment information, geographic risk, correspondent banking, enhanced due diligence, and transaction monitoring can help institutions strengthen their financial crime prevention frameworks while maintaining efficient international payment services.
FACEKI AML Service, based in Riyadh, Saudi Arabia, is an approved AML provider supporting organizations with identity verification, AML screening, sanctions screening, and risk-management solutions. FACEKI helps businesses strengthen their compliance programs and support alignment with SAMA, CMA, and IA regulations in KSA.
