KYB Compliance in Saudi Arabia (2026): Business Verification for Regulated Entities

Saudi Arabia's KYB environment changed materially in 2025. The mandatory UBO disclosure regulation took effect on April 3, 2025, requiring companies to identify and register beneficial owners with the Ministry of Commerce — with a 15-day window to report any ownership changes. Combined with SAMA's tightening of corporate onboarding standards and the Kingdom's ongoing FATF alignment, business verification in Saudi Arabia is now a significantly more demanding exercise than it was even two years ago.

This guide covers the Saudi-specific KYB layer: legal framework, registry infrastructure, UBO requirements, sector obligations, and where business verification breaks in practice. For the underlying KYB framework and process logic, see our KYB Requirements guide.

The Legal Framework

KYB in Saudi Arabia is anchored in the Anti-Money Laundering Law (Royal Decree No. M/20 of 2017), which mandates customer due diligence, record-keeping, and suspicious activity reporting for financial institutions and DNFBPs. The law was updated in 2019 to strengthen UBO transparency requirements and align with FATF standards.

The critical 2025 development is the UBO Disclosure Regulation, effective April 3, 2025. Under this regulation:

• All companies must identify and register their ultimate beneficial owners with the Ministry of Commerce
• Any changes to ownership structure must be reported within 15 days
• A UBO register must be maintained and kept current

This is the most significant KYB-related regulatory development in Saudi Arabia in recent years. Onboarding workflows built before April 2025 need to be reviewed against the new standard.

Non-compliance carries fines of up to SAR 7 million and potential criminal liability in severe cases.

Regulatory Authorities

SAMA (Saudi Central Bank) supervises banks, fintechs, payment service providers, and insurance companies. It issues detailed AML/CTF guidelines and sets KYB expectations for the financial sector. SAMA's 2025 framework includes explicit requirements for UBO disclosure and ongoing monitoring of corporate relationships.

CMA (Capital Market Authority) oversees securities, investment funds, and capital market participants. KYB for corporate clients in capital markets falls under CMA licensing conditions and audit requirements.

Ministry of Commerce operates the commercial registry and the new UBO register. It is the authoritative source for company registration status and beneficial ownership data for non-financial sector entities.

SAFIU (Saudi Arabian Financial Investigation Unit) operates under the Ministry of Interior, receives and analyses suspicious transaction reports, and coordinates with law enforcement on financial crime investigations.

Saudi Registry Infrastructure

Commercial Registry (Sijil Al-Tijari) — the primary source for legal entity verification in Saudi Arabia. It holds company registration numbers, legal form, registered address, and current status. Commercial licenses issued by the Ministry of Commerce are the baseline document for business identity verification.

UBO Register (Ministry of Commerce) — operational since April 2025. This is now a mandatory data source for KYB on Saudi-incorporated entities. Unlike some jurisdictions where beneficial ownership registers are publicly accessible, Saudi Arabia's UBO register is held with the Ministry of Commerce and accessible to regulated entities conducting due diligence.

Absher and Nafath — the national digital identity platforms. Absher is the primary government portal for Saudi nationals; Nafath provides digital authentication. For KYB purposes, these are relevant when verifying the identities of individuals behind corporate structures — UBOs and directors — using Saudi national ID.

A complete Saudi KYB file starts with: commercial license and registry confirmation, UBO data from the Ministry of Commerce register or customer-provided declaration, and identity verification of all relevant individuals through Saudi national ID or passport for non-residents.

UBO Requirements

A beneficial owner in Saudi Arabia is defined as any natural person who directly or indirectly owns or controls 25% or more of a company, consistent with FATF standards.

The April 2025 regulation makes UBO disclosure mandatory and operationally specific:

• UBO data must be registered with the Ministry of Commerce
• Changes must be reported within 15 days — this is a live obligation, not just an onboarding check
• Regulated entities must verify UBO information against the register and maintain current records

Practical complexity in Saudi Arabia:

• Family-owned structures are common in Saudi corporate culture. Family groups often control businesses through multiple holding entities, requiring deeper tracing to identify the actual controlling individual
• Foreign shareholders — increasingly common as Vision 2030 opens the economy to international investment — require verification beyond Saudi registries
• Joint ventures in real estate and construction often involve complex multi-party ownership that does not map cleanly to the 25% threshold

The full UBO mapping methodology is covered in our KYB Requirements guide.

Sector-Specific KYB Obligations

Financial Services

Banks and fintechs under SAMA supervision face the highest KYB scrutiny. SAMA's 2025 framework requires:

• Full CDD on all corporate clients before activation
• UBO identification and verification against the Ministry of Commerce register
• Risk-based classification with documented rationale
• Ongoing monitoring of the corporate relationship

For fintechs specifically, SAMA's regulatory sandbox has been active in testing digital KYB solutions — automated document verification and biometric identity checks for UBO verification are increasingly expected as standard.

Real Estate and Construction

Real estate is a high-risk sector under Saudi AML law. Projects frequently involve joint ventures, foreign investment, and offshore funding structures. KYB for real estate counterparties must include source of funds verification and deeper ownership tracing than standard CDD. The Ministry of Commerce's expanded oversight of real estate agents under AML/CFT rules makes this sector a priority area.

Trade Finance

Saudi Arabia's role as a major trading hub — with Jeddah handling significant goods volumes — creates elevated trade-based money laundering (TBML) risk. For businesses involved in trade finance, KYB must account for the business model of corporate clients: invoice patterns, counterparty jurisdictions, and transaction volumes must be consistent with the declared business activity.

DNFBPs

Lawyers, accountants, real estate agents, and precious metals dealers are all subject to KYB obligations under the AML Law. These sectors are supervised by the Ministry of Commerce and relevant professional bodies. Onboarding them as clients requires treating them as regulated counterparties — verifying their own compliance status is part of the KYB process.

Ongoing Monitoring

KYB does not end at onboarding under Saudi law. SAMA and Ministry of Commerce requirements explicitly extend obligations throughout the business relationship:

• Corporate client profiles must be updated every 5 years at minimum, and immediately when ownership changes
• Sanctions and PEP screening on UBOs and directors must be ongoing
• Transaction activity must be consistent with the declared business model
• Suspicious activity must be reported to SAFIU

Records must be retained for a minimum of 10 years under the AML Law — notably longer than the 5-year standard in most EU jurisdictions.

Where KYB Breaks in Practice

Family ownership structures. Saudi corporate culture has a high prevalence of family-controlled businesses where ownership is distributed across multiple relatives, often through holding entities. The 25% threshold can be met by multiple family members individually without any single person crossing it — but effective control may still rest with one individual. KYB must assess control, not just ownership percentage.

Foreign investors and joint ventures. Vision 2030 has significantly increased foreign direct investment into Saudi Arabia. KYB for joint ventures with international partners requires verification across multiple jurisdictions. VOVE ID supports document verification across 190+ countries, which matters when tracing ownership chains through non-Saudi entities.

Arabic-language documentation. Commercial licenses, registry extracts, and corporate documents are issued in Arabic. Any KYB workflow must accommodate Arabic-language document processing — OCR and verification systems that don't support Arabic will create systematic gaps.

April 2025 UBO regulation transition. Many corporate clients onboarded before April 2025 will not have UBO data captured to the new standard. Regulated entities need a remediation plan for their existing corporate client base, not just a new onboarding process.

Getting KYB Right in Saudi Arabia

Saudi Arabia's KYB environment in 2026 combines a newly mandatory UBO register, active SAMA supervision, and a corporate landscape with genuinely complex ownership structures. The April 2025 UBO regulation is not a future requirement — it is already in effect, and both new onboarding and existing client remediation need to meet the standard.

VOVE ID supports regulated businesses in Saudi Arabia with KYB workflows built for this environment — Arabic-language document verification, biometric identity checks for UBO verification, and audit-ready documentation aligned with SAMA standards.

This article is intended for general informational purposes only and does not constitute legal, financial, or regulatory advice. KYB requirements may vary depending on jurisdiction, industry, and specific business circumstances. For up-to-date and binding compliance obligations, readers should refer to the relevant regulatory authorities or consult qualified professionals.