Saudi Arabia Crypto Warning: What Financial Institutions Must Know in 2026

If you are a financial institution operating in or targeting the Kingdom of Saudi Arabia (KSA), the message from regulators is loud and clear: stay away from retail cryptocurrencies. Despite the global surge in digital asset adoption, Saudi authorities have maintained a strict, risk-averse stance since 2017. For banks, investment firms, and fintech companies, this creates a complex landscape where innovation thrives behind closed doors while public-facing crypto trading remains effectively prohibited.

The confusion often stems from seeing headlines about Saudi blockchain projects alongside warnings against Bitcoin. To navigate this, you need to understand the specific directives issued by the Saudi Arabian Monetary Authority (SAMA), formerly known as the Saudi Arabian Monetary Agency. SAMA is the central bank and primary regulator for financial services in the Kingdom. Their guidance has not evolved into a comprehensive licensing framework for crypto exchanges; instead, it has solidified into a series of explicit prohibitions targeting institutional engagement with unlicensed virtual assets.

The Core Regulatory Stance: Prohibition Over Legislation

Unlike countries that have passed detailed laws defining how crypto businesses must operate, Saudi Arabia relies on direct warnings. This approach leaves little room for interpretation. In December 2018, the Standing Committee for Awareness on Dealing in Securities Activities in the Unauthorized Foreign Exchange Market (Forex)-a body that includes SAMA-issued a definitive statement declaring virtual currencies "illegal and unlicensed" within the Kingdom.

This was reinforced in 2019 when the Ministry of Finance published an official advisory cautioning citizens and entities against dealing in or investing in virtual currencies. The reasoning was straightforward: these assets were neither legally recognized nor regulated by any official entity in Saudi Arabia. As of mid-2026, no specific legislation has overturned this position. According to the Library of Congress's Global Legal Monitor, cryptocurrencies continue to lack formal legal recognition, operating under a regulatory framework defined more by what is forbidden than by what is permitted.

Implications for Financial Institutions

For banks and traditional financial service providers, the directive is simple: do not facilitate crypto transactions. SAMA has explicitly stated that any entity using the Kingdom’s name or national symbols to market digital currencies faces legal action. This means local branches of international banks cannot offer custody services for Bitcoin or Ethereum unless those assets are part of a specifically approved pilot program, which currently does not exist for retail clients.

The absence of a formal Anti-Money Laundering (AML) or Know Your Customer (KYC) framework for cryptocurrency businesses is not a loophole-it is a barrier. Because cryptocurrencies are considered outside the regulatory perimeter, there are no compliance procedures to follow. You cannot obtain a license to run a crypto exchange in Riyadh today. The only mandatory directive from bodies like SAMA is to avoid dealing in cryptocurrencies such as Bitcoin, which are not monitored by any legitimate financial authority.

This creates a distinct operational challenge for multinational institutions. If your global headquarters allows crypto trading, your Saudi subsidiary likely cannot. Segregation of duties and robust internal controls are essential to ensure that Saudi-based operations do not inadvertently violate local prohibitions while adhering to global group policies.

The Dual Approach: Retail Ban vs. Institutional Innovation

It is easy to misinterpret the ban on retail crypto as a rejection of blockchain technology. This is incorrect. Saudi Arabia employs a "dual approach": restrictive for public cryptocurrency use but highly innovative for institutional financial technology. While your customers may be told to avoid Bitcoin, the government is actively building its own digital currency infrastructure.

The centerpiece of this institutional strategy is Project Aber, a joint central bank digital currency (CBDC) initiative launched in 2019 with the United Arab Emirates. Project Aber explores the use of distributed ledger technology for interbank and cross-border payments. Unlike decentralized cryptocurrencies, a CBDC is issued and backed by a sovereign central bank, addressing many of the stability and Sharia-compliance concerns that plague assets like Bitcoin.

Beyond Project Aber, SAMA has attracted major international financial institutions, including Rothschild and Goldman Sachs, to explore tokenization projects. Tokenization involves converting traditional financial assets-such as bonds, real estate, or trade finance instruments-into digital tokens on a blockchain. This process makes assets more accessible, traceable, and easier to trade globally. Crucially, these initiatives operate within the regulatory boundaries established by SAMA, meaning they are sanctioned, supervised, and aligned with national financial goals.

Navigating the Gray Area: AML and CFT Laws

While there is no specific "Crypto Law," existing financial crimes legislation casts a wide net. The Anti-Money Laundering Law (Royal Decree No. M/20) and the Law on Combating Terrorist Crimes and its Financing (Royal Decree No. M/21), both enacted in 2017, define "funds" broadly. This definition encompasses tangible and intangible assets, economic resources, or properties of any value, regardless of how they are acquired, including those obtained through electronic or digital systems.

This broad definition means that if a financial institution facilitates a transaction involving crypto assets, it could theoretically fall under AML scrutiny. However, because the assets themselves are deemed "unlicensed" and "illegal" for institutional dealing, the safer path is avoidance. The regulatory gray area exists primarily for individual citizens who trade on offshore platforms, not for licensed financial institutions.

Market Reality vs. Regulatory Theory

Despite the strict warnings, market dynamics tell a different story at the grassroots level. Saudi Arabia is described by analysts as the region’s second-largest and fastest-growing market for cryptocurrency adoption. This growth is propelled by a young population-63 percent of whom are under the age of 35-who show high interest in digital assets and altcoins.

For financial institutions, this presents a customer education opportunity rather than a product launchpad. Since you cannot sell crypto, you can educate your clients on the risks highlighted by SAMA. Many Saudi investors engage in crypto trading via overseas exchanges, bypassing local restrictions. Banks must monitor these flows carefully, not to facilitate them, but to ensure they do not trigger broader compliance alerts related to capital controls or illicit financing.

Sharia Compliance and Religious Considerations

A significant factor in Saudi Arabia’s cautious stance is Sharia law. Traditional Islamic finance principles generally prohibit Gharar (excessive uncertainty) and Maysir (gambling/speculation). Highly volatile assets like Bitcoin often face criticism from religious scholars on these grounds. While some high-ranking leaders have issued fatwas suggesting certain crypto operations could align with Sharia if structured correctly, the dominant regulatory view remains conservative.

Financial institutions must consider this cultural and religious context. Promoting speculative crypto trading could damage brand reputation among conservative stakeholders. Conversely, participating in tokenization projects that represent real-world assets (like gold or property) is more likely to gain religious and regulatory approval, as it ties digital value to tangible underlying assets.

Future Outlook: Will the Rules Change?

As we move through 2026, the question remains: will Saudi Arabia lift the ban? The trajectory suggests a gradual evolution rather than a sudden reversal. The success of Project Aber and the growing global acceptance of tokenized assets may lead to a more nuanced framework. We might see the introduction of regulated digital asset wallets or limited licenses for qualified investors, similar to models emerging in Switzerland or Singapore.

However, until SAMA issues new guidelines, the current rule stands. Financial institutions should prepare for a future where regulated digital assets play a larger role, but maintain strict separation from unlicensed cryptocurrencies today. Monitoring statements from the Capital Market Authority (CMA) and SAMA will be critical. Any shift toward legalization will likely begin with institutional pilots before opening up to the general public.