Saudi Arabia’s 2026 AML OverhaulWhat Compliance Officers Need to Know Now
Saudi Arabia’s anti-money laundering landscape is entering one of its most consequential phases yet. Driven by the explosive growth of the Kingdom’s fintech sector under Vision 2030, regulators are tightening enforcement at a pace that is forcing banks, exchange houses, and digital-first financial platforms to rethink their compliance infrastructure. Saudi Arabia’s fintech sector grew from just 10 companies to 224 under Vision 2030, and that expansion has been matched by a corresponding rise in regulatory scrutiny. Between 2024 and 2026, the Saudi Central Bank (SAMA) imposed record fines ranging from SAR 3 million to SAR 12 million for compliance failures. For any institution operating in the Kingdom, understanding what changed — and what’s coming next — is no longer optional.
What’s Changing in 2026
1. New fintech licenses face bank-level AML standards
SAMA’s 2026 roadmap mandates that all fintech licenses obtained after July 1, 2026 must embed AML controls meeting traditional bank standards. This closes a long-standing gap where newer digital entrants operated under lighter compliance expectations than established banks. Source: [Source]
2. Mandatory SAFIU registration and electronic SAR filing
All reporting entities must register with SAFIU and use SAFIU-Connect for electronic SAR submissions. This shifts suspicious activity reporting from fragmented, manual processes toward a centralized, real-time reporting infrastructure.
3. PEP screening is now a baseline requirement
Politically Exposed Persons screening is mandatory, alongside a growing emphasis on Arabic-language capability — specifically the system’s ability to handle Arabic name matching and transliteration, which remains a common failure point for screening tools built primarily around Latin-script data.
Source: [Source]
4. Legal amendments targeting convicted offenders
On 17 April 2026, Saudi Arabia’s Council of Ministers approved amendments to the Anti-Money Laundering Law issued by Royal Decree No. (M/20), clarifying the position of non-Saudi individuals convicted of money laundering offences — a deported individual may now re-enter the Kingdom solely for Hajj or Umrah, and only under applicable regulations.
Source: [Source]
Why the Regulatory Foundation Runs Deep
These 2026 updates aren’t happening in isolation — they build on a compliance architecture Saudi Arabia has been reinforcing for over two decades. Saudi Arabia joined the Financial Action Task Force (FATF) in June 2019, becoming the first Arab country and the 37th country in the world to obtain membership. The Kingdom is also a founding member of the Middle East and North Africa Financial Action Task Force (MENAFATF), created in November 2004.
This layered oversight — domestic law, FATF alignment, and regional cooperation — means enforcement is unlikely to loosen; if anything, expectations will keep rising in step with the Kingdom’s financial sector growth.
References: [Source] | [Source]
The Compliance Gap Institutions Face
For banks, exchange houses, and especially newly licensed fintechs, the practical challenge is clear: legacy screening systems built around simple name-matching and English-language databases are not equipped for a regulatory environment that now demands Arabic transliteration accuracy, real-time SAFIU-Connect integration, and continuous PEP monitoring.
Institutions that wait until an audit or a SAMA fine to address these gaps will be reacting to problems that dynamic, AI-driven systems are designed to catch early.
As Saudi Arabia’s AML framework matures alongside its fintech boom, institutions need compliance infrastructure built specifically for this market — not adapted from generic global tools. FACEKI, an approved AML service provider based in Riyadh, Saudi Arabia, is built for exactly this landscape. Fully aligned with SAMA, the Capital Market Authority (CMA), and the Insurance Authority (IA), FACEKI combines Arabic-native name matching, real-time PEP and adverse media screening, and seamless regulatory integration — helping banks and fintechs meet the Kingdom’s 2026 requirements without operational friction.
