What Are the 2026 Changes to Saudi Arabia’s Anti-Money Laundering Laws for Businesses?

Introduction

As Saudi Arabia continues its rapid economic transformation under Vision 2030, the Kingdom is reinforcing its financial regulatory framework to align with international standards. In 2026, significant changes to Saudi Arabia’s anti-money laundering (AML) laws will take effect, directly impacting businesses operating within the Kingdom. These updates are designed to strengthen oversight, close regulatory gaps, and combat evolving financial crimes. For businesses, understanding what the 2026 changes to Saudi Arabia’s anti-money laundering laws entail is not just about compliance — it’s about maintaining operational integrity and avoiding severe penalties. This article provides a comprehensive overview of the forthcoming amendments, their implications for businesses, and practical steps to ensure readiness.

Overview of Saudi Arabia’s AML Framework Before 2026

Saudi Arabia has long been committed to combating money laundering and terrorist financing. The Kingdom’s AML framework is primarily governed by the Anti-Money Laundering Law issued by Royal Decree No. M/20 in 2018, which was later amended in 2021. The law is enforced by the Saudi Arabian Monetary Authority (SAMA, now the Saudi Central Bank) and other supervisory bodies such as the Capital Market Authority (CMA) and the Ministry of Commerce. Despite these robust measures, international bodies like the Financial Action Task Force (FATF) have recommended further enhancements. The 2026 changes represent a direct response to these recommendations, aiming to bring Saudi Arabia’s AML regime fully in line with FATF’s revised standards.

Key 2026 Changes to Saudi Arabia’s Anti-Money Laundering Laws for Businesses

The 2026 amendments introduce several critical updates that will affect how businesses conduct due diligence, report suspicious activities, and manage compliance programs. Below are the most important changes:

Expanded Scope of Covered Entities

Previously, AML obligations primarily applied to financial institutions, designated non-financial businesses and professions (DNFBPs), and certain commercial entities. The 2026 changes expand the definition of “financial institution” and “business” to include a broader range of entities, such as:

• Virtual asset service providers (VASPs) and cryptocurrency exchanges
• Real estate agents and brokers involved in high-value transactions
• Dealers in precious metals and stones
• Trust and company service providers
• Non-profit organizations meeting certain thresholds

This expansion ensures that previously unregulated sectors are now subject to AML obligations, reducing loopholes for illicit financial flows.

Enhanced Customer Due Diligence (CDD) Requirements

One of the most significant 2026 changes to Saudi Arabia’s anti-money laundering laws for businesses is the tightening of customer due diligence procedures. Businesses must now:

• Conduct enhanced due diligence (EDD) for all politically exposed persons (PEPs), their family members, and close associates.
• Verify beneficial ownership information for legal persons and arrangements, requiring disclosure of individuals who ultimately own or control more than 25% of shares or voting rights.
• Implement ongoing monitoring of business relationships, including periodic reviews of existing customers.
• Maintain records of all CDD measures for at least ten years after the termination of the business relationship.

Stricter Reporting Obligations and Suspicious Activity Reports (SARs)

The 2026 amendments lower the threshold for mandatory reporting of suspicious transactions. Businesses are now required to file a suspicious activity report (SAR) with the Financial Intelligence Unit (FIU) if there is any reason to suspect that a transaction involves proceeds of crime, regardless of the amount. Additionally, the timeline for reporting has been reduced from 30 days to 15 days. Failure to report can result in severe penalties, including fines up to 5 million SAR and potential imprisonment for responsible officers.

Increased Penalties for Non-Compliance

To underscore the seriousness of AML compliance, the 2026 changes introduce significantly harsher penalties. Fines for violations can now reach up to 10 million SAR (approximately $2.7 million), and individuals found guilty of money laundering may face imprisonment of up to 15 years. Moreover, businesses may face temporary or permanent suspension of licenses, disqualification of directors, and asset confiscation. The law also imposes personal liability on compliance officers and senior management for failures in their oversight roles.

New Requirements for Internal Controls and Independent Audits

Businesses subject to AML laws must now implement more robust internal controls, including:

• Appointment of a dedicated AML compliance officer at the board level.
• Development of a risk-based compliance program tailored to the business’s size and risk profile.
• Conducting independent audits of AML policies and procedures at least every two years.
• Providing regular AML training to all employees, with annual refresher courses.

Cross-Border Transaction Monitoring

Given the global nature of money laundering, the 2026 changes require businesses to monitor cross-border transactions more closely. Any transfer of funds exceeding 50,000 SAR (or equivalent in foreign currency) must be reported to the FIU, and businesses must retain detailed records of the transaction’s purpose and counterparties.

Impact on Different Business Sectors

The 2026 changes to Saudi Arabia’s anti-money laundering laws for businesses will affect various sectors differently. Here’s a breakdown:

Financial Institutions

Banks, insurance companies, and investment firms will face the most stringent requirements. They must upgrade their transaction monitoring systems to handle increased reporting thresholds and implement real-time screening for PEPs and sanctions lists. Many will need to invest in advanced analytics and artificial intelligence to manage the higher volume of data.

Real Estate Sector

Real estate agents and brokers must now conduct CDD on all parties involved in high-value transactions (above 1 million SAR). They must also report any cash transactions exceeding 100,000 SAR. This aims to prevent illicit funds from being laundered through property purchases.

Virtual Asset Service Providers (VASPs)

Cryptocurrency exchanges and wallet providers are now fully regulated. They must register with SAMA, implement KYC procedures, and report suspicious transactions. The 2026 changes bring Saudi Arabia in line with FATF’s Recommendation 15 on virtual assets.

Non-Profit Organizations (NPOs)

NPOs with annual revenues exceeding 500,000 SAR must register with the Ministry of Human Resources and Social Development and maintain transparent records of donations and expenditures. They are also subject to enhanced monitoring to prevent terrorist financing.

Compliance Timeline and Preparation Steps

The 2026 changes are expected to come into effect on January 1, 2026. However, businesses should begin preparations immediately to ensure a smooth transition. Key steps include:

• Conducting a gap analysis of current AML policies against the new requirements.
• Updating internal procedures for CDD, SAR filing, and record-keeping.
• Training staff on the new obligations, particularly for enhanced due diligence and reporting.
• Engaging legal and compliance consultants to review and revise compliance programs.
• Investing in technology solutions for transaction monitoring and customer screening.

How Businesses Can Prepare for the 2026 AML Changes

To navigate the 2026 changes to Saudi Arabia’s anti-money laundering laws for businesses effectively, companies should adopt a proactive compliance strategy. This includes:

• Risk Assessment: Perform a comprehensive risk assessment to identify vulnerabilities in your business operations and customer base.
• Policy Revision: Update your AML policy to reflect the expanded scope, enhanced CDD, and new reporting timelines.
• Technology Upgrade: Implement or upgrade AML software that can handle real-time monitoring, sanctions screening, and automated SAR filing.
• Training Programs: Develop ongoing training for all employees, with specialized modules for high-risk roles.
• Audit Readiness: Prepare for independent audits by maintaining meticulous records and documentation of all AML activities.
• Legal Counsel: Work with legal experts specializing in Saudi Arabian financial regulations to ensure full compliance.

Conclusion

The 2026 changes to Saudi Arabia’s anti-money laundering laws for businesses represent a significant step forward in the Kingdom’s efforts to combat financial crime and align with international best practices. For businesses, these amendments bring both challenges and opportunities. While the increased compliance burden may seem daunting, it also fosters a more transparent and trustworthy business environment. By understanding the specific requirements — from expanded CDD to stricter reporting and penalties — companies can not only avoid severe sanctions but also enhance their reputation as responsible corporate citizens. The key is to start preparing now, integrate AML compliance into your business strategy, and view these changes as a foundation for sustainable growth in Saudi Arabia’s dynamic economy.

Photo by Konevi on Pixabay