Bitcoin & Cryptocurrency Regulation in Saudi Arabia

The legal status is best described as restricted rather than cleanly legal or outright banned for individuals. Cryptocurrencies are not recognised as legal tender, no cryptoasset is recognised as a regulated financial product, and there is no licensed domestic crypto exchange. A government standing committee that included SAMA has stated that virtual currencies are not recognised as official in the Kingdom and that no party is licensed to deal in them. The Ministry of Finance and SAMA have publicly warned the public against dealing or investing in virtual currencies, noting they sit outside the regulated financial system and carry high risk and links to fraud.

Crucially, banks and licensed financial institutions are prohibited from handling cryptocurrency transactions without SAMA's approval. There is, however, no specific law that makes it a criminal offence for an individual simply to own or trade crypto through external platforms. The practical result is a tightly cautious environment: residents who use crypto do so outside any sanctioned, supervised framework and without local consumer protection. Because the position is evolving, verify the current rules with official sources before acting.

Saudi Arabia does not have a single dedicated crypto regulator. Oversight is shared by the financial authorities that govern banking and capital markets:

• Saudi Central Bank (SAMA) supervises banks, payments and the monetary system. SAMA prohibits licensed banks and financial institutions from dealing in virtual currencies without its approval, and it has been developing CBDC initiatives.
• Capital Market Authority (CMA) regulates securities and capital markets. The CMA warns investors against unlicensed schemes and suspicious websites, and has taken enforcement action against unlicensed investment promotion, including via social media.
• Zakat, Tax and Customs Authority (ZATCA) administers zakat, corporate income tax, VAT and customs.
• The Anti-Money Laundering Permanent Committee and the Saudi Financial Intelligence Unit coordinate AML and counter-terrorist-financing measures.

For any digital-asset framework, SAMA and the CMA are the authorities to watch. Their planned joint work on regulated stablecoins (announced in late 2025) signals that future supervision of digital assets is likely to fall under these two bodies.

There is no single comprehensive cryptocurrency act in Saudi Arabia. Instead, the position is shaped by existing financial laws and official guidance:

• SAMA's powers over banks and payment services, used to restrict institutions from facilitating crypto without approval.
• The CMA's capital-markets mandate and its investor-warning and enforcement activity.
• The Anti-Money Laundering Law and its implementing regulations, aligned with Financial Action Task Force (FATF) standards, which impose KYC and reporting duties on regulated entities.
• The zakat, income tax and VAT rules administered by ZATCA.

Notably, Saudi Arabia is not part of any regional bloc with a unified crypto statute equivalent to the EU's Markets in Crypto-Assets (MiCA) regulation; it sets its own rules domestically. Through 2025 and into 2026, officials signalled work on a framework for nationally regulated stablecoins under SAMA and CMA oversight, but detailed rules on licensing, reserves and consumer protection had not been published at the time of writing. Treat any specific activity as carrying regulatory uncertainty until rules are formally issued.

As of 2026 there is no dedicated licensing regime for cryptocurrency exchanges or virtual asset service providers (VASPs) operating under Saudi law, and no crypto exchange is licensed to operate domestically. SAMA's authorised-institution lists and the CMA's licensed-entity lists do not include crypto exchanges as a recognised category. Operating an unlicensed financial or investment service can attract enforcement action: the CMA has penalised unlicensed investment activity, including promotion via messaging apps and social platforms.

In practice, residents who hold crypto typically use international or regional platforms regulated elsewhere, rather than a Saudi-licensed venue. If a future digital-asset or stablecoin framework is introduced, licensing and registration requirements are likely to sit with SAMA and the CMA. Until then, do not assume any platform is officially sanctioned in the Kingdom; check the regulators' official websites for who is and is not licensed. See our regulation hub for how other countries license exchanges.

Saudi Arabia's tax system is structurally different from most Western countries, which shapes how crypto is treated. The Kingdom does not levy a personal income tax on individuals, so there is currently no specific personal capital-gains tax targeting ordinary individuals who sell crypto at a profit. That does not mean crypto is automatically tax-free in every situation. Other considerations administered by the Zakat, Tax and Customs Authority (ZATCA) can apply:

• Zakat is an Islamic wealth levy (commonly 2.5 percent of the zakat base) on Saudi and GCC-owned individuals and entities; qualifying crypto holdings may form part of the assessed wealth base depending on circumstances and scholarly interpretation.
• Corporate income tax of 20 percent generally applies to the profits attributable to foreign-owned companies; a crypto-related business may fall within this.
• VAT at the standard rate can apply to services such as exchange fees, even where the treatment of the underlying asset transfer is different.

Because digital-asset tax treatment is not codified in a dedicated statute and can change, do not rely on generic figures or assume gains are tax-free. Confirm your position with ZATCA or a qualified Saudi tax adviser. Read our general guide to crypto taxes for background, and treat this section as information, not tax advice.

Saudi Arabia maintains a robust anti-money-laundering (AML) and counter-terrorist-financing (CTF) regime aligned with FATF standards. The Anti-Money Laundering Law and its implementing regulations require regulated financial institutions to apply a risk-based approach: customer identification and verification (Know Your Customer, or KYC), enhanced due diligence for higher-risk clients, appointment of a compliance/reporting officer, transaction monitoring, and reporting of suspicious transactions.

The Anti-Money Laundering Permanent Committee (chaired by the Governor of SAMA and including the Ministry of Interior, Ministry of Justice and the CMA, among others) coordinates national policy, while the Saudi Financial Intelligence Unit collects and analyses suspicious-transaction reports. For anyone using crypto, the practical implication is that reputable platforms accepting Saudi customers will require full identity verification, and that flows in and out of the banking system are subject to monitoring. Anonymous, large-scale crypto activity is neither realistic nor advisable.

Because there is no licensed domestic exchange and banks need SAMA approval to handle crypto, buying and using cryptocurrency in Saudi Arabia involves real friction:

• Banking restrictions. Funding an account directly from a Saudi bank or card can be unreliable, and transfers may be delayed, blocked or reversed.
• KYC is standard. Reputable platforms require official ID and verification before you can trade meaningful amounts.
• No domestic backstop. If a platform fails or a transaction goes wrong, local recourse is limited, since these services are not licensed under a Saudi crypto framework.
• Use cases. Cross-border remittances are a frequently discussed use case given the Kingdom's large expatriate workforce, but on- and off-ramp friction and volatility reduce the practical benefits, and the activity carries the same regulatory uncertainty as other crypto use.

If you choose to proceed, prioritise well-established platforms with strong security and transparent fees, enable two-factor authentication, move larger holdings to a personal (ideally hardware) wallet, back up your recovery phrase offline, and never share it. Be cautious of any scheme promising guaranteed returns, which the CMA has repeatedly warned against. Bitcoin ATMs are effectively not part of the everyday landscape in the Kingdom.

No dedicated law specifically authorises or licenses commercial Bitcoin mining as a regulated activity in Saudi Arabia, and the same regulatory caution that applies to trading applies here. The Kingdom does have attributes that make large-scale mining technically attractive, including abundant energy and major renewable-generation projects under Vision 2030, which in theory could support lower-carbon mining than fossil-heavy grids elsewhere.

In practice, several hurdles remain. Electricity tariffs, grid access and approvals for energy-intensive industrial loads are tightly managed, so cheap power being available does not mean mining is freely permitted. A mining enterprise would also engage business-licensing, customs, and AML rules, and any profits attributable to a foreign-owned business would fall within the corporate tax regime. Anyone exploring mining at meaningful scale should obtain legal advice and engage the relevant authorities rather than relying on energy availability; do not assume commercial mining is permitted without explicit confirmation.

The most significant recent shift is around stablecoins and digital payments. In late 2025, a Saudi government minister publicly indicated the Kingdom is looking to launch nationally regulated stablecoins in partnership with the Capital Market Authority and the Saudi Central Bank, framed as part of Vision 2030's push to modernise the financial system and support faster, cheaper transactions. Global crypto exchanges publicly backed the Kingdom's stablecoin and digital-asset ambitions around the same period.

Important caveats apply: as of 2026 the stablecoin initiative remained at the policy-design stage, with detailed rules on licensing, reserve backing and consumer protection not yet published. SAMA has separately continued CBDC work, including cross-border experimentation such as the joint project with the UAE. The CMA has also continued enforcement against unlicensed investment activity and consulted on capital-market structures that could, over time, accommodate token funds. The direction of travel is increasingly constructive, but until formal rules are issued, cryptoassets in general remain tightly regulated. Confirm the latest status directly with the official regulators.

The defining risk in Saudi Arabia is regulatory uncertainty combined with the absence of a local consumer-protection backstop. Because no crypto exchange is licensed domestically, residents who use external platforms have limited local recourse if a service fails, funds are frozen, or a transaction goes wrong. Banking restrictions add friction and the risk of blocked transfers, while crypto's inherent price volatility means you can lose a substantial portion or all of your capital.

Scams are a real and recurring danger. The CMA has repeatedly warned against suspicious websites and unlicensed schemes promising investment returns, and has penalised unlicensed promotion. Protect yourself by checking whether a person or firm is licensed via the regulators' official lists, ignoring offers that promise guaranteed or unrealistic returns, securing your accounts and wallets, and never sharing private keys or recovery phrases. For observant investors, the Shariah-compliance of specific assets and activities is a separate matter that may require scholarly guidance. Never invest more than you can afford to lose.

Because the rules are evolving and partly uncodified, always confirm the current position with primary official sources rather than third-party summaries. The key authorities and their official websites are:

• Saudi Central Bank (SAMA) for banking, payments and CBDC matters: sama.gov.sa
• Capital Market Authority (CMA) for securities, investor warnings and licensed-entity lists: cma.org.sa
• Zakat, Tax and Customs Authority (ZATCA) for zakat, tax and VAT: zatca.gov.sa
• Anti-Money Laundering Permanent Committee for AML/CTF policy: aml.gov.sa

To verify whether a platform or adviser is authorised, check SAMA's and the CMA's official licensed-entity lists. This article is general information as of 2026 and is not legal, tax, or financial advice; readers should verify current requirements with the named official regulators and seek qualified local advice before acting. For broader context, see our crypto regulation guide.

Is Bitcoin legal in Saudi Arabia?

Who regulates cryptocurrency in Saudi Arabia?

Do I have to pay tax on crypto profits in Saudi Arabia?

Can I use my Saudi bank account to buy crypto?

Is Saudi Arabia going to regulate crypto and stablecoins soon?

How can I check whether a crypto platform or adviser is licensed in Saudi Arabia?