The Saudi Central Bank's Counter-Fraud Fundamental Requirements Framework took effect April 13, 2026, replacing the 2017 Anti-Fraud Rules with a maturity-based, governance-led approach across the finance sector.
What the new framework replaces
Effective April 13, 2026, the Saudi Central Bank's Counter-Fraud Fundamental Requirements Framework replaces the Anti-Fraud Rules for Finance Companies issued under SAMA Circular No. 381000103246 in 1438H. The new framework applies across the finance sector — banks, finance companies, payment systems, and payment service providers.
Maturity-based controls, not box-checking
The Framework is structured around maturity levels: controls evolve over time based on institutional maturity and the threat landscape, rather than being a static checklist. Institutions must align their fraud strategy with broader enterprise objectives, with the expectation that anti-fraud investment scales as the institution scales.
Governance is mandatory
Every regulated institution must establish a Counter Fraud Governance Committee led by senior executives such as the CRO or COO. This committee must meet at least quarterly to monitor, review, and adjust anti-fraud strategy and spending. Fraud is explicitly elevated from an operational risk to a board-level governance concern.
Why this matters for fintech and payments
Saudi Arabia's fintech ecosystem has grown rapidly under SAMA's licensing regime, and the Framework reflects regulator confidence in technology-enabled approaches. Real-time fraud detection, AI-based anomaly detection, automated risk scoring, and integrated case management are increasingly the baseline that supervisory inspections will expect. Institutions still relying on rule-only systems will struggle to demonstrate maturity.
Practical next steps
Stand up or formalize the Counter Fraud Governance Committee with senior executive leadership. Conduct a maturity self-assessment against the Framework. Identify gaps in real-time monitoring, model governance, and case management. Build the 12-month roadmap of investments — and the quarterly committee cadence that will steer it. Coordinate with Saudi Anti-Financial Crime efforts to ensure fraud and AML controls reinforce each other.
How UMCA helps
UMCA's AI fraud platform — with rule engine, AI model management, real-time monitoring, and integrated case management — delivers the maturity SAMA's new Framework expects.
