← Regulations / Saudi Arabia / Operating Models / Crypto debit card

Crypto-funded debit card in Saudi Arabia

A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.

Conditional AI-Generated · Unreviewed

Crypto debit card is conditionally permitted in Saudi Arabia with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • AML/CFT obligations under Royal Decree M/20 apply to all financial activities including general transaction reporting.
  • SAMA Regulatory Sandbox applicants must submit full documentation on AML systems as part of the application.
  • Ongoing reporting, security, and client protection standards required during and after sandbox testing.
  • KYC/CDD obligations apply to all payment service provider activities under SAMA's 2023 Payment Service Provider Regulations.

Key Restrictions

  • Virtual assets/cryptocurrencies declared illegal and unlicensed by the 2018 Standing Committee declaration (SAMA/CMA/MOF).
  • Public crypto activities (trading, wallet services, brokerage) fall outside approved perimeters without explicit regulatory approval.
  • Any crypto-to-fiat conversion for a debit card program would likely require entry via SAMA's Regulatory Sandbox as the only recognized route.
  • Foreign entities must form a local entity (e.g., LLC) in Saudi Arabia upon license issuance.
  • Business registration via MISA alone is insufficient; it must precede a sandbox application to SAMA.
  • No VASP or crypto-specific license exists for retail exchanges, custody, or payment processing — activities are constrained to sandbox approval pathways.

Key Risks

  • 2018 Standing Committee declaration and ongoing SAMA warnings create enforcement risk — authorities have stated virtual currencies are outside the legal framework and unlicensed.
  • No recognized crypto custody framework exists, making segregation of client assets unclear for any crypto-top-up model.
  • Crypto-funded debit cards face fundamental legal tension: the crypto-to-fiat conversion step involves dealing in virtual assets declared illegal.
  • No precedents of SAMA sandbox approval for crypto-funded debit card programs have been publicly confirmed.
  • Regulatory ambiguity: the permitted activities under SAMA's PSP Regulations reference 'crypto/blockchain applications' but are limited; it is unclear whether a crypto-funded card fits.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 20% confidence

Custodial License Requirements: None exist, as no licenses are issued for cryptocurrency practices; entities claiming otherwise face legal action.

licensing 60% confidence

No standardized licenses: There is no broadly public VASP (Virtual Asset Service Provider) or crypto-specific license for retail exchanges, custody, or payment processing; activities like crypto trading, wallet services, or brokerage fall outside approved perimeters without explicit regulatory approval.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Limited permitted activities: Under SAMA's 2023 Payment Service Provider Regulations (enabled by the 2022 Law of Payments and Payment Providers), related services such as digital banking, electronic payment processing, P2P lending/investment, asset/wealth investment, crypto/blockchain applications, and BNPL may qualify indirectly, but not pure crypto trading or custody.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Exchanges and custody: Require entry via SAMA's Regulatory Sandbox as the primary (and currently only recognized) route for testing and potential approval; full operations demand ongoing compliance verification.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Payment processors: Must align with payment regulations; foreign entities can apply pre-incorporation but must form a local entity upon issuance.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Primarily a licensing regime with sandbox entry: Business registration alone (e.g., via Ministry of Investment - MISA portal) is insufficient; it precedes a preliminary sandbox application to SAMA for crypto-related activities. No "one-click" registration substitutes for licensing, and unlicensed operations face administrative penalties, unannounced inspections, and potential legal action.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Entity setup first: Legally register a company (e.g., LLC), disclose UBOs/shareholding, define business objects, then seek sandbox admission; foreign firms may operate if activities align with SAMA approvals.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Register entity and obtain investment license via MISA portal (upload documents, select authorized activity).

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Submit preliminary application to SAMA Regulatory Sandbox electronically (full documentation on solvency, audits, AML systems, business model).

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Undergo review/testing (up to 1 year); meet ongoing reporting, security, and client protection standards.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Post-sandbox: Secure full operational approval; continuous audits required.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

SAMA Payment Service Provider Regulations (2023): https://www.sama.gov.sa (search regulations).

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

SAMA Regulatory Sandbox: https://www.sama.gov.sa/en-US/FinTech/Pages/RegulatorySandbox.aspx

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

2018 Standing Committee Declaration (via SAMA/CMA): Virtual assets illegal/unlicensed.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 20% confidence

2018 Standing Committee declaration (SAMA/CMA/MOF): Virtual currencies illegal. (https://www.lightspark.com/knowledge/is-crypto-legal-in-saudi-arabia)

licensing 20% confidence

SAMA warnings against Bitcoin (ongoing): No oversight or support. (https://zipmex.com/blog/is-crypto-mining-legal-in-saudi-arabia/) ; (https://freemanlaw.com/cryptocurrency/saudi-arabia/)

licensing 20% confidence

MOF 2019 warning: Outside legal framework. (https://timesofindia.indiatimes.com/world/middle-east/saudis-bitcoin-trading-laws-2025-what-traders-and-businesses-need-to-know/articleshow/124017628.cms)

licensing 20% confidence

Royal Decree M/20 (AML/CFT): General transaction reporting. (https://zipmex.com/blog/is-crypto-mining-legal-in-saudi-arabia/)

licensing 60% confidence

MISA Portal: https://misa.gov.sa

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional and highly uncertain — a crypto-funded debit card could theoretically be attempted via SAMA's Regulatory Sandbox under the Payment Service Provider Regulations, but this would require navigating the fundamental conflict that the 2018 Standing Committee declared virtual currencies illegal/unlicensed, and no public precedent exists for such approval.

Questions this verdict aims to answer

  • What e-money / payment-institution license is required?
  • How is the crypto-to-fiat conversion regulated?
  • What KYC and AML obligations apply to cardholders?
  • What partner-bank or BIN-sponsor arrangements are required?