SAMA Open Banking Licences: Saudi Fintech Regulation Goes Live

What happened

Saudi Arabia's Central Bank (SAMA) has begun issuing licences to fintech companies seeking to operate open banking services within the Kingdom, marking a significant regulatory milestone in the country's financial modernisation drive. The move formally opens the door for authorised third-party providers to access customer financial data — with customer consent — and build products and services on top of that data infrastructure.

The licensing programme follows SAMA's earlier publication of its Open Banking Framework, which set out the technical and regulatory standards that participants must meet. By activating the licensing stage, SAMA is transitioning open banking in Saudi Arabia from a policy ambition into live, regulated commercial activity.

Why it matters

Open banking is, at its core, a customer-experience and behavioural-economics intervention. When consumers can grant third parties access to their transaction histories, spending patterns and account data, entirely new categories of personalised financial service become possible — from real-time affordability tools to proactive savings nudges rooted in actual behaviour rather than demographic proxies. For service designers, this is the infrastructure layer that makes hyper-relevant, consent-based financial journeys achievable at scale.

For the broader MENA market, Saudi Arabia's licensing step carries weight beyond its borders. As the region's largest economy moves from framework to execution, it creates competitive pressure on neighbouring markets and signals to global fintechs that the Gulf is a serious destination for open-finance investment. Operators across retail banking, insurance and embedded finance should be mapping their data-sharing strategies now, not when the first licensed competitors launch customer-facing products.

By the numbers

• 1 framework, now active: SAMA's Open Banking Framework, previously published as regulatory guidance, has now entered its live licensing phase.
• 2025 is the year SAMA formally began issuing these licences, marking the shift from policy to practice.

The Renascence take

Most commentary on open banking focuses on the technology stack or the competitive threat to incumbents. Both miss the more consequential point: this is a consent architecture story, and consent architecture is a behavioural-design challenge before it is anything else.

The institutions that will win in an open-banking environment are not necessarily those with the best API infrastructure — they are those that design consent flows customers actually understand and trust. In behavioural terms, the moment of permission-granting is a high-stakes choice architecture problem: friction, framing and defaults will determine whether customers share data at all. Saudi fintechs entering this market should invest as heavily in the experience of the consent journey as in the products built on top of it. A licence from SAMA is the starting line, not the advantage.