Saudi Arabia venue and territorial scope
Saudi scope turns on function and Saudi nexus, not on a free-zone venue split.
Functional scope map
Venue architecture
Saudi Arabia does not use a UAE-style multi-free-zone map for the functions covered here. The route is a national functional split: SAMA for payment and money-system functions, CMA for securities and capital-market functions, and named cross-cutting authorities for AML/CFT, privacy, and tax.
The SAMA perimeter can attach to payment services provided from the Kingdom, held out as provided in the Kingdom, offered or marketed to persons in the Kingdom, or provided through a local appointee under the payment-services implementing layer.
The CMA perimeter can attach to securities business from a permanent place in the Kingdom or with or for a person in the Kingdom. Securities advertisements available to persons in the Kingdom can also trigger CMA controls.
The consequence is functional route analysis rather than venue arbitrage. A foreign token, platform, custodian, or issuer still needs Saudi analysis when the product is marketed into the Kingdom, has a Saudi client nexus, or uses Saudi payment or securities infrastructure.
Boundary and territorial consequences
| Perimeter | Reach | Consequence |
|---|---|---|
| Payment service to Saudi users | SAMA territorial scope can attach. | Test offering, marketing, appointee, and local-user nexus. |
| Securities business with Saudi clients | CMA authorization can attach. | Test permanent-place, client, advertisement, and business-conduct nexus. |
| Securities advertisement available in Saudi Arabia | CMA advertisement controls can attach. | Internet availability and targeting are fact-sensitive. |
| Tokenized note with Saudi cash leg | Both SAMA and CMA analysis may be needed. | Cash movement does not displace securities classification, and security form does not displace payment controls. |
| Foreign crypto or stablecoin service | No public local VASP or stablecoin route identified. | Offshore status does not create a Saudi permission. |
| Sandbox access by foreign fintech | Testing may be possible under SAMA or CMA routes. | Production still needs the correct authorization. |