SAMA Enforcement Actions: AML/CFT Trends in Saudi Arabia

AML Guide · August 2026 · GCC Regulatory Compliance

The Saudi Arabian Monetary Authority has significantly increased its focus on anti-money laundering and combating the financing of terrorism over the past several years.

SAMA’s Supervisory Approach

SAMA operates under a risk-based supervisory framework. The SAMA AML/CFT Rules establish the baseline obligations for all financial institutions operating in Saudi Arabia, including banks, insurance companies, finance companies, investment firms, and money service businesses.

SAMA’s supervisory process combines off-site monitoring with on-site examinations. Off-site monitoring involves analysis of regulatory returns, suspicious transaction report data, and other reporting. On-site examinations involve direct inspection of an institution’s compliance programme, including its policies, procedures, systems, and controls.

The supervisory cycle prioritises institutions and activities based on risk assessment. Institutions with higher inherent risk profiles, including those with significant cross-border activities, exposure to high-risk customer segments, or a history of compliance deficiencies, can expect more frequent and more intensive supervision.

SAMA has the power to issue financial penalties, impose administrative sanctions on individuals, and in severe cases restrict or revoke an institution’s licence.

AML Law and Penalty Framework

The Saudi AML Law (Royal Decree M/20 of 2017, as amended) establishes the legal framework for anti-money laundering and combating the financing of terrorism in Saudi Arabia. The law criminalises money laundering and terrorist financing, establishes obligations for financial institutions and DNFBPs, and empowers SAMA and other authorities to supervise compliance and impose sanctions.

The penalty framework under the AML Law includes fines for legal entities and imprisonment and fines for individuals. The range of penalties is substantial, and SAMA has demonstrated willingness to impose significant fines on both institutions and individuals for AML failures.

The connection between AML failures and broader financial crime is explicitly recognised in Saudi enforcement practice. Cases involving money laundering often involve related offences including fraud, corruption, and sanctions evasion, and SAMA coordinates with other Saudi authorities including the Financial Investigation Unit and law enforcement agencies.

Trends in SAMA Enforcement

SAMA enforcement activity has increased significantly in the period from 2019 to 2025. Several patterns emerge from the enforcement landscape.

AML programme deficiencies have been a consistent basis for enforcement. Cases have cited inadequate AML policies and procedures, insufficient training, and failure to implement a risk-based approach. These cases signal that SAMA expects institutions to move beyond basic compliance documentation to demonstrate genuine operational effectiveness.

Transaction monitoring has been an area of particular focus. SAMA has identified cases where transaction monitoring systems were inadequate, where alerts were not investigated to an appropriate standard, and where the calibration of monitoring rules did not reflect the institution’s actual risk profile.

Suspicious transaction reporting quality and timeliness has featured in enforcement cases. SAMA has taken action against institutions that failed to file SARs where required, that filed SARs with inadequate supporting information, or that filed SARs significantly after the date on which suspicion should have arisen.

Customer due diligence deficiencies, particularly in relation to beneficial ownership and enhanced due diligence for high-risk customers, have been cited in enforcement actions. SAMA has emphasised that CDD is not a one-time onboarding activity but an ongoing obligation.

Sanctions compliance failures have attracted significant enforcement. Given Saudi Arabia’s role in regional geopolitics and its exposure to proliferation financing concerns, SAMA expects institutions to maintain robust sanctions compliance programmes.

DNFBP supervision has received increased attention, consistent with FATF MER findings on the need for greater DNFBP coverage in Saudi Arabia.

Typologies in Saudi AML Enforcement

Several money laundering typologies have been identified as relevant in the Saudi context.

Trade-based money laundering is a significant concern given Saudi Arabia’s position as a major trading hub. The use of trade transactions to move value across borders while misrepresenting prices, quantities, or descriptions of goods is a known vulnerability.

Cash-based layering remains relevant despite reductions in cash usage. Criminal proceeds may be introduced into the financial system through cash deposits, structured to avoid reporting thresholds, and then moved through a series of transactions.

Real estate money laundering has been identified as a risk area in Saudi Arabia. Property transactions can be used to launder criminal proceeds, particularly where the beneficial ownership of the purchaser is not clearly established.

Corporate structuring for the purpose of concealing beneficial ownership is a key typology that SAMA has highlighted, particularly in the context of the FATF MER findings on beneficial ownership in Saudi Arabia.

Cryptocurrency and digital assets represent an emerging risk area. As the Saudi financial sector develops and digital asset services become more available, SAMA has indicated that it expects institutions to develop controls for this area.

Vision 2030 and Financial Crime Risk

Saudi Arabia’s Vision 2030 programme is transforming the Kingdom’s economy and financial sector. The expansion of the financial services sector, the development of new industries, and the increase in cross-border commercial activity all create new financial crime risks and new compliance challenges.

The financial sector transformation under Vision 2030 includes the development of new capital markets, the expansion of the insurance sector, the growth of fintech, and the development of new financial infrastructure. Each of these developments introduces new products, new customer segments, and new transaction patterns that must be assessed for AML/CFT risk.

The tourism and entertainment sectors, which are significant beneficiaries of Vision 2030, present distinct money laundering risks. Hotels, entertainment venues, and related businesses may be used to launder criminal proceeds and may also fall within the DNFBP scope for AML obligations.

SAMA has indicated that its supervisory priorities reflect the changing risk landscape created by Vision 2030, and financial institutions should expect their supervisors to assess how effectively their compliance programmes address emerging risks associated with the economic transformation.

FATF Action Plan Progress

Saudi Arabia’s FATF grey listing and associated action plan have directly influenced the enforcement landscape. SAMA’s supervisory priorities reflect the action plan items that FATF has identified as requiring urgent attention, and institutions are expected to demonstrate progress on these items in their supervisory engagements.

Key action plan items have included beneficial ownership requirements, DNFBP supervision, targeted financial sanctions implementation, and the quality of suspicious transaction reporting. Institutions should ensure their compliance programmes address each of these areas and can demonstrate progress to their supervisor.

FATF’s periodic reviews of Saudi Arabia’s progress against the action plan have been broadly positive, and the country has made significant advances. However, the enforcement focus on these areas is expected to continue as FATF monitoring remains in place.

What Financial Institutions Should Expect

For SAMA-regulated institutions, the practical implications of the enforcement landscape are concrete.

Risk assessment currency is essential. SAMA expects institutions to maintain a current, documented money laundering and terrorist financing risk assessment that reflects the institution’s actual products, customers, channels, and geographies.

AML programme governance must be robust. The board and senior management must demonstrate active engagement with AML/CFT compliance, not merely formal approval of policies.

SAR quality is a priority. Institutions should review their SAR filing processes to ensure that reports are filed promptly, contain adequate supporting information, and are not subject to undue delays between the emergence of suspicion and the filing date.

Training effectiveness will be tested. SAMA examiners will assess whether training is current, relevant to the roles being performed, and producing genuine compliance awareness rather than merely satisfying a documentation requirement.

Technology adequacy is increasingly scrutinised. SAMA expects institutions to deploy appropriate technology for transaction monitoring, sanctions screening, and customer due diligence, and to demonstrate that this technology is operating effectively.

Conclusion

SAMA’s enforcement activity signals a clear direction of travel for AML/CFT supervision in Saudi Arabia. The era of basic compliance documentation is giving way to a period in which supervisors expect financial institutions to demonstrate genuine operational effectiveness across the full spectrum of their AML/CFT obligations.

The enforcement cases and supervisory priorities reflect the FATF action plan and the Vision 2030 risk landscape. Institutions that invest now in building mature, risk-based compliance programmes will be better positioned to satisfy their supervisors and to manage the financial crime risks that accompany Saudi Arabia’s economic transformation.