Financial Integrity Monitor

Saudi Arabia SA

Domains (D1–D6)
2
Sources
12
Role actions
8
Horizon <90d
1
Jurisdiction profile
Compliant (Fatf Member Since June 2019; Not Grey-Listed; Remains In Enhanced Follow-Up Post-2018 Mutual Evaluation)Tier BRisk: StableMixed

AML regime built on the 2003 Anti-Money Laundering Statute and Implementing Regulations, supervised by SAMA (banks/insurance/finance cos), CMA (securities) and SAFIU (FIU).

MoreLegal AML framework assessed as robust in 2018 MER but CFT/effectiveness lagged; enhanced follow-up ongoing with partial re-ratings (R6, R7 upgraded to largely compliant). Crypto activity remains formally prohibited even as CBDC/tokenization pilots expand.

Key deficiencies
  • No updated effectiveness assessment since 2018 MER; follow-up reports assess only technical compliance, leaving confiscation/asset-recovery and cross-border TF-disruption effectiveness gaps unverified
  • Historic SAFIU STR backlog (~30% at time of MER) and limited use of targeted financial sanctions to disrupt TF support beyond the Kingdom
  • No comprehensive VASP/crypto licensing framework despite rapid informal crypto-market growth, creating an unregulated grey zone
  • DPMS (precious metals/stones dealers) and money-remitter sectors flagged by SAMA/MER as highest ML risk with limited independent verification of current supervisory intensity
  • Limited public transparency of SAMA/CMA supervisory penalties compared to FinCEN/OFAC disclosure practice
Recent developments (18m)
  • FATF enhanced follow-up process continues; Saudi Arabia remains compliant on 17/40 and largely compliant on 21/40 FATF Recommendations, partially compliant on 2
  • FSB 2025 thematic review classifies Saudi Arabia (with China) among six jurisdictions maintaining outright prohibition on cryptoasset activities
  • SAMA/CMA advanced tokenization, CBDC pilots and scoped DeFi-adjacent innovation through 2025 while maintaining the formal crypto prohibition
  • CMA fully liberalized foreign portfolio investor access to the Saudi capital market (January 2026), removing the $500m AUM qualification threshold
  • OFAC sustained a high tempo of Houthi-network sanctions actions (crypto wallets, petroleum smuggling, shipping fronts) directly implicating Saudi Arabia's Red Sea security and financial-crime exposure as principal target
  • Nazaha (Oversight and Anti-Corruption Authority) continued periodic mass arrest rounds of public officials for bribery/embezzlement/money laundering
Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Saudi Arabia replaced its beneficial-ownership identification framework twice within a single regulatory cycle. The original UBO Rules, effective 3 April 2025, were superseded by Ministerial Decision No. 267 of 26 November 2025, effective 4 January 2026, which simplifies UBO identification to a three-tier test built around 25 percent-plus ownership, effective control, or a manager, board or chairman fallback. That replacement was followed by April 2026 Companies Law implementing regulations that mandate every Saudi-registered company to identify and disclose ultimate beneficial owners to the national Commercial Register, including the nature and extent of the qualifying interest and supporting documentation. Two independent Tier-3 law-firm sources agree on the sequence and dates, though no primary Ministerial Decision text or implementing-regulation text has yet been retrieved to corroborate the detail directly.

Read together, the sequence points toward a decreasing corporate-opacity risk trajectory rather than a single isolated reform. A jurisdiction that first issues UBO rules, then replaces them with a simplified identification test, then layers a disclosure-to-register obligation across the whole corporate base within roughly twelve months, is moving its corporate-transparency architecture from episodic to structural. This is the kind of multi-step tightening that FATF Recommendation 24 assessments weigh heavily, and it sits alongside Saudi Arabia's confirmed status as a full FATF member since June 2019, not currently on the FATF grey list.

Other Developments

A single, unverified report of crypto-specific AML extension. One Tier-3 source describes a Capital Market Authority "Digital Asset Market Guidance" reportedly published in December 2025 that would extend AML obligations, including wallet-risk-register and source-of-wealth requirements, to crypto-asset exchanges, alongside a reported SAR 2.5 million fine issued in March 2026 against a local exchange for wallet-verification failures. This finding rests on one non-primary source with no corroboration this cycle and no primary CMA text retrieved; it is carried at Uncertain confidence and flagged for next-cycle primary-source verification rather than treated as an established regime feature.

Institutional AML architecture confirmed as stable baseline. Saudi Arabia's AML/CTF regime continues to operate through the Saudi Central Bank (SAMA) for banks, the Capital Market Authority (CMA) for securities, and the Saudi Arabian Financial Intelligence Unit (SAFIU), which sits under the Presidency of State Security and functions as Saudi Arabia's Egmont Group node. This institutional map was corroborated across sources this cycle and represents the confirmed operating baseline against which the beneficial-ownership and crypto-sector developments above should be read.

Cross-Monitor Connections

The beneficial-ownership tightening sequence has direct bearing on corporate-vehicle risk assessments used elsewhere in the fleet: a jurisdiction moving toward Commercial Register-based UBO disclosure changes the calculus for enabler-jurisdiction and shell-structure typologies that route through Gulf corporate vehicles, even though no enabler-jurisdiction-specific signal for Saudi Arabia itself surfaced this cycle. The reported, unverified CMA digital-asset AML guidance is the kind of finding that, if corroborated, would warrant direct coordination with the crypto monitor's own module tracking; at Uncertain confidence and single-sourced, it does not yet support that connection being drawn with any weight.

Outlook

The near-term test is whether a primary Ministerial Decision No. 267 text or the April 2026 Companies Law implementing regulations become retrievable in primary form, which would allow the current Probable-confidence assessment of the UBO tightening to be upgraded. Equally material is whether the reported CMA Digital Asset Market Guidance is corroborated against a primary CMA publication; until it is, it remains a single-source, Uncertain-confidence watch item rather than a confirmed extension of AML obligations to the crypto sector. Saudi Arabia's underlying FATF-member, non-grey-listed status is not expected to change and provides the stable frame against which both of these developments should continue to be assessed.

weekly_brief_draft · JID SA
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

Continue reading

Saudi Arabia's beneficial-ownership regime underwent sequential structural tightening within this cycle window. The original UBO Rules, effective 3 April 2025, were replaced by Ministerial Decision No. 267, issued 26 November 2025 and effective 4 January 2026, which simplifies UBO identification to a three-tier test: 25 percent-plus direct or indirect ownership, exercise of effective control, or, failing either, a fallback to the entity's manager, board member or chairman. This was followed by April 2026 Companies Law implementing regulations mandating every Saudi-registered company to identify and disclose ultimate beneficial owners to the national Commercial Register, including the nature and extent of the qualifying interest together with supporting documentation. Both developments are sourced from two independent Tier-3 law-firm commentaries that agree on the sequence and effective dates; no primary Ministerial Decision text or implementing-regulation text has been retrieved this cycle, so the detail is carried at Probable rather than Confirmed confidence.

As standing structural context: the EU AML Package establishes a three-instrument architecture within the European Union comprising the directly-applicable AML Regulation (AMLR, Regulation (EU) 2024/1624), the sixth AML Directive (6AMLD) transposed at Member State level, and the AMLA Regulation (Regulation (EU) 2024/1620) establishing the Anti-Money Laundering Authority, which is shifting supervision of cross-border obliged entities from a purely national model toward a hybrid EU-level regime. Saudi Arabia sits outside the EEA and this direct supervisory perimeter, and the interpreter carried no AMLA-specific horizon anchors for Saudi Arabia this cycle. The relevant comparison for Saudi Arabia is not the AMLA architecture itself but the same underlying FATF Recommendation 24 standard on beneficial-ownership transparency that both the EU package and Saudi Arabia's own Commercial Register reforms are independently responding to, each within its own institutional frame.

Within Saudi Arabia's own perimeter, the sequence from initial UBO rules to a simplified identification test to a register-wide disclosure mandate over roughly twelve months is the kind of structural, multi-instrument movement that this monitor treats as more analytically significant than a single enforcement action, because it changes the corporate-opacity baseline for every registered entity rather than addressing one case. The three-tier identification test itself is notable for simplifying rather than complicating compliance, which may improve practical uptake even as it broadens the population of companies subject to disclosure duties via the Commercial Register requirement.

Outlook

The principal open question is whether primary-source text for Ministerial Decision No. 267 and the April 2026 Companies Law implementing regulations becomes available, which would allow the current Probable-confidence characterisation of both the simplified UBO test and the register-disclosure mandate to be upgraded to Confirmed. Absent that, both instruments continue to rest on secondary law-firm commentary. The trajectory, as currently evidenced, is toward tighter and more structurally embedded corporate-transparency obligations rather than away from them, consistent with Saudi Arabia's FATF Recommendation 24 exposure as a full FATF member.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto, Digital Assets, and Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Continue reading

The only crypto-relevant development in Saudi Arabia's financial-integrity picture this cycle is a single, unverified report that the Capital Market Authority published a "Digital Asset Market Guidance" in December 2025 extending AML obligations to crypto-asset exchanges, including wallet-risk-register and source-of-wealth requirements, together with a reported SAR 2.5 million fine issued in March 2026 against a local exchange for wallet-verification failures. This rests entirely on one Tier-3 source with no corroboration elsewhere this cycle and no primary CMA text retrieved, and is carried at Uncertain confidence. The gap register explicitly flags this item for next-cycle primary-source verification rather than treating it as an established feature of Saudi Arabia's AML regime.

The honest framing here is that Saudi Arabia's digital-asset AML posture cannot yet be assessed with confidence one way or the other from this cycle's evidence. If the reported guidance is real and corroborated in a future cycle, it would represent a meaningful extension of AML obligations, specifically wallet-risk registers and source-of-wealth checks, into the crypto-exchange sector, which would be consistent with FATF Recommendation 15's expectations around virtual-asset service providers. If it cannot be corroborated, the absence of a verified crypto-specific AML instrument would itself be a notable enablement signal worth surfacing on its own terms in a later cycle, since the absence of formal extension of AML obligations into a growing sector is itself analytically significant rather than merely a null result.

This single-source finding should not be read alongside, or conflated with, Saudi Arabia's confirmed and stable AML institutional architecture operated through SAMA, CMA and SAFIU, which is a separate, well-corroborated baseline fact. The crypto-specific guidance, by contrast, remains an open item.

Outlook

The next cycle's priority for this domain is straightforward: locate and retrieve a primary CMA text, if one exists, addressing digital-asset AML obligations, and independently verify or disconfirm the reported March 2026 enforcement fine. Until that verification occurs, this domain's assessment should remain at Uncertain confidence and should not be treated as evidence of either a mature or an absent crypto-AML regime in Saudi Arabia.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
In Force2026-Q2 · ±quarter

Companies Law implementing regulations (BO disclosure to Commercial Register)

Every Saudi-registered company must identify and disclose ultimate beneficial owners to the national Commercial Register, including nature/extent of interest and supporting documentation.
source not collected
1 dated · 3 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

Saudi Arabia replaced its UBO identification rules twice within the cycle window, moving toward a simplified three-tier ownership test alongside a new Commercial Register disclosure mandate.

Corporate customers and counterparties with Saudi-registered structures will face a changed UBO identification standard from 4 January 2026 and a register-disclosure obligation from April 2026, which may affect the documentation basis used to support existing CDD files.

2 evidence refs
Compliance

Saudi Arabia's beneficial-ownership regime moved materially this cycle; its crypto-specific AML posture remains unverified.

Compliance functions should note the UBO/Companies Law changes as a structural update pending primary-source confirmation, and should not yet treat the reported CMA Digital Asset Market Guidance as an established control requirement given its single-source, Uncertain-confidence status.

3 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

Saudi Arabia is tightening corporate-transparency requirements while its FATF-member, non-grey-listed standing remains unchanged.

The direction of travel on beneficial-ownership disclosure in Saudi Arabia is toward greater transparency, which is a favourable structural signal for institutions with Gulf corporate exposure, though it should be weighed against the still-unverified crypto-AML report.

2 evidence refs
CTO

A reported, single-sourced CMA Digital Asset Market Guidance would extend AML obligations to crypto exchanges but has not been corroborated against a primary text.

Any technical build toward wallet-risk-register or source-of-wealth functionality for Saudi-exposed crypto operations should be treated as speculative pending primary-source verification of this reported guidance.

1 evidence refs
Risk

Saudi Arabia's corporate-opacity risk is trending downward via sequential UBO-regime tightening, while crypto-sector AML exposure remains an open, unverified item.

Risk models weighting Saudi Arabia corporate-vehicle exposure should reflect the decreasing-opacity trajectory from the UBO/Companies Law sequence, while treating the crypto-AML report as a flagged, not confirmed, exposure factor.

3 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

Both major Saudi UBO-regime developments this cycle rest on secondary law-firm sourcing, with no primary instrument text retrieved.

Audit trails referencing Saudi Arabia's beneficial-ownership regime should note that Ministerial Decision No. 267 and the April 2026 Companies Law implementing regulations are evidenced only by Tier-3 secondary commentary this cycle, pending primary-source corroboration.

2 evidence refs
Decision lens
MLRO

Saudi Arabia replaced its UBO identification rules twice within the cycle window, moving toward a simplified three-tier ownership test alongside a new Commercial Register disclosure mandate.

Compliance

Saudi Arabia's beneficial-ownership regime moved materially this cycle; its crypto-specific AML posture remains unverified.

Legal

No material change this cycle.

Board

Saudi Arabia is tightening corporate-transparency requirements while its FATF-member, non-grey-listed standing remains unchanged.

CTO

A reported, single-sourced CMA Digital Asset Market Guidance would extend AML obligations to crypto exchanges but has not been corroborated against a primary text.

Risk

Saudi Arabia's corporate-opacity risk is trending downward via sequential UBO-regime tightening, while crypto-sector AML exposure remains an open, unverified item.

Operations

No material change this cycle.

Audit

Both major Saudi UBO-regime developments this cycle rest on secondary law-firm sourcing, with no primary instrument text retrieved.

Shared evidence: 3 refs
Scenario sketches

AMLA Direct-Supervision Transition and Cross-Border Obliged-Entity Evasion Pressure

As the AMLA Regulation (Reg (EU) 2024/1620) phases in direct and indirect supervision of cross-border obliged entities, alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-state 6AMLD transposition, the supervisory perimeter for large cross-border groups could shift from a patchwork of national regulators toward a more unified EU-level view. Illustratively, this could compress opportunities for regulatory arbitrage between EU Member States that previously supervised the same group inconsistently, while potentially redirecting evasion pressure toward jurisdictions, including non-EEA ones, whose own beneficial-ownership and corporate-transparency architecture is still consolidating. This is an illustrative structural mechanism only, not a prediction of where displacement would occur.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion ArchitecturestableNo material Russia dark-fleet, tech-procurement, or commodity-rerouting signal touching SA surfaced this cycle.
T2 · EU AML Package / AMLAstableSA is outside the EEA/UK legal bloc; AMLR/6AMLD/AMLA transposition tracking is not applicable to SA.
T3 · FATF Grey ListstableSA is a full FATF member (since June 2019) and is not on the current FATF grey list.
T4 · Beneficial-Ownership Register Statusmaterial_changeSA's UBO regime moved this cycle: original UBO Rules replaced by Ministerial Decision No. 267, alongside April 2026 Companies Law implementing regulations mandating BO disclosure.
T5 · Crypto & Digital-Asset IntegritywatchSA remains formally cautious/restrictive on public crypto while institutional tokenization pilots develop in parallel with an unverified reported CMA Digital Asset Market Guidance.
T6 · Sanctions Regime DivergencestableNo SA-specific EU/US/UK autonomous-listing divergence signal surfaced this cycle.
Registers

Enforcement actions

  • OFAC designated a network of individuals, exchange houses, and shipping/trading entities facilitating Houthi petroleum smuggling and sanctions evasion, directly implicating the Red Sea/Gulf security environment in which Saudi Arabia is the principal regional target. 22 Jul 2025
  • OFAC increased pressure on Houthi smuggling and illicit revenue-generation networks, designating shipping companies (e.g., Albarraq Shipping Co) and Yemen-based exchange/transfer companies under Executive Order 13224. 16 Jan 2026
  • OFAC sanctioned a Houthi financial-facilitator network including Russia-based operatives (Hushang and Sohrab Ghairat) and designated eight cryptocurrency wallets that moved close to $1 billion, used to procure Russian commodities/weapons and launder proceeds from stolen Ukrainian grain destined for Houthi-controlled territory near Saudi Arabia's southern border. 2 Apr 2025
  • OFAC updated the SDGT designation of a Saudi-born individual (POB Medina, holder of a Saudi passport/national ID) as part of a broader action targeting a Hizballah finance-team sanctions-evasion network, adding secondary-sanctions risk information under the amended Executive Order 13224 framework. 28 Mar 2025

Sanctions changes

  • OFAC designated eight cryptocurrency wallets and associated facilitators tied to Houthi financial networks operating adjacent to Saudi Arabia's Red Sea security perimeter, part of sustained US pressure on Iran-backed Ansarallah financial infrastructure. 2 Apr 2025
  • OFAC designated a Houthi-linked petroleum smuggling and sanctions-evasion network, including UAE-registered trading entities, as part of continuing efforts to cut off Houthi revenue streams that fund attacks affecting Saudi Arabia and Red Sea shipping. 22 Jul 2025
  • The European Commission's December 2025 update to the EU high-risk third-country AML/CFT list (Delegated Regulations (EU) 2026/46 and 2026/83) added Bolivia and the British Virgin Islands while delisting Burkina Faso, Mali, Mozambique, Nigeria, South Africa and Tanzania; Saudi Arabia was not added to, nor was it previously on, this list, consistent with its absence from the FATF grey list. 4 Dec 2025

Regulatory horizon (register)

  • Next MENAFATF/FATF enhanced follow-up report for Saudi Arabia
  • Potential evolution of Saudi Arabia's crypto prohibition toward licensed VASP framework
  • Continued Saudi capital-market foreign-ownership liberalization under Vision 2030

Active schemes

  • [HIGH] Houthi Red Sea sanctions-evasion and crypto-financial network
  • Captagon/narcotics trafficking route financing Houthi war economy
  • DPMS and money-remitter trade-based laundering exposure
  • Sovereign wealth fund (PIF) opacity and immunity structuring
Sources
  1. Financial Action Task Force (FATF)
  2. FATF / MENAFATF
  3. US Department of the Treasury (OFAC)
  4. US Department of the Treasury (OFAC)
  5. US Department of the Treasury (OFAC)
  6. Chainalysis
  7. TRM Labs
  8. Elliptic (reporting on FSB)
  9. OCCRP
  10. European Commission
  11. Chainalysis
  12. OCCRP
Coverage gaps
FATF's enhanced follow-up process for Saudi Arabia re-rates …
FATF's enhanced follow-up process for Saudi Arabia re-rates only technical compliance, not effectiveness; the 2018 MER's effectiveness findings (weak proceeds-of-crime confiscation, limited use of targeted financial sanctions to disrupt terrorist financing beyond the Kingdom) have not been re-tested in a subsequent full evaluation.
Saudi Arabia maintains an outright prohibition on cryptoasse…
Saudi Arabia maintains an outright prohibition on cryptoasset activities (grouped with China by the FSB's 2025 thematic review) rather than a licensed, supervised VASP regime, even as retail and institutional crypto adoption has grown rapidly, leaving transactions to occur through unregulated OTC brokers and offshore VASPs outside SAMA/CMA AML/CFT visibility.
Unlike FinCEN/OFAC or OFSI, SAMA and the CMA do not appear t…
Unlike FinCEN/OFAC or OFSI, SAMA and the CMA do not appear to publish a comparably granular, English-language public register of individual AML/CFT supervisory penalties or enforcement actions against regulated entities, limiting external verification of domestic bank/DPMS-sector enforcement intensity.
No centralized, FATF-Recommendation-24-compliant public bene…
No centralized, FATF-Recommendation-24-compliant public beneficial-ownership register for legal persons comparable to the UK PSC register or EU BORIS interconnection was identified for Saudi Arabia; commercial registration data is held via the Ministry of Commerce registry referenced in UNODC's open-source registry directory, but its beneficial-ownership depth and public accessibility could not be confirmed from available sources at baseline.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.