Fintech and BFSI Branding for Saudi Arabia: Regulators, Design Decisions and How to Brief an Agency (2026)

By Yamm Labs · Updated September 2026 · 10 min read

A payments startup in Riyadh sends its new brand deck to the compliance officer on a Thursday afternoon. The deck is in English. The logo is a Latin wordmark with a small Arabic descriptor tucked underneath. The hero screen promises no fees and shows no fee schedule. The compliance officer replies with one line: where is the supervision statement, and where is the Arabic version? In Saudi Arabia, BFSI branding starts with decisions the regulators make for a bank, insurer, fund manager or fintech before the first visual is drawn, and the agency you brief should be able to show you each one.

Which regulators shape a financial brand in Saudi Arabia, and what does each one govern?

SAMA is the Saudi Central Bank. Its published functions include regulating and supervising financial institutions, regulating payment, settlement and clearing systems, and issuing rules and licences for fintech. For a brand, that makes it the regulator of banks, finance companies, payment companies and most fintechs. Two documents in its rulebook matter most to a marketing team: the rules for advertising products and services provided by financial institutions, and the financial consumer protection principles and rules.

The Capital Market Authority regulates the securities market. If your product invites someone to buy, sell or hold a security, subscribe to a fund or take investment advice, the CMA’s rules on securities advertisements apply to your brand communication, including your website and your app store listing.

Insurers have a third regulator to name. The Insurance Authority began operating in November 2023 and took over insurance responsibilities that SAMA previously held. An insurer’s brief should name it. SAMA’s advertising rules are not the only ones in play.

What do SAMA’s advertising rules change about a bank or fintech identity?

SAMA issued its advertising rules for financial institutions in March 2023. They apply to every product or service a financial institution advertises. Read as a designer would read them, they contain four instructions that reshape an identity system.

SIGNALNewsletter by Yamm Labs

The next piece, straight to your inbox.

New writing on BFSI brands, B2B and influencer marketing, and AI search.

Email *

Subscribe

Subscription form is not available at the moment

One click to unsubscribe. Privacy policy

First, language. The rules make Arabic the language of advertising financial products and services, with an exception for advertisements aimed at non-Arabic speakers that still follow the rules. That sentence decides your lockup rule. A brand whose Latin wordmark is the hero and whose Arabic is a caption is built backwards for this market. The Arabic mark has to be drawn as a primary mark, with its own weight, spacing and minimum size.

Second, mandatory content. The rules list what an advertisement must carry at a minimum: the institution’s name, logo and contact details, the product name, its conditions and main provisions, the target customer, all fees and commissions including VAT, any minimum transaction requirement, an explanation of any icons, and for finance products the annual percentage rate and the finance term. Every advertisement must also state that the institution is subject to SAMA’s supervision and control. For a designer that is a fixed disclosure block, and its size sets the grid.

Third, creative limits. The rules prohibit misleading or inaccurate claims, bar the use of SAMA’s name or logo, restrict images of banknotes and coins, bar advertising credit or insurance products to people under eighteen, and bar using customers’ personal data in advertising without written consent. That last rule ends the testimonial-led campaign unless the consent paperwork exists.

Fourth, sequence. The institution’s compliance department must review advertising materials and approve them in writing before publication, and the institution’s advertising policy must be reviewed at least once every three years. So the brand timeline has a compliance round that is not optional, and the guidelines have to be written so a compliance officer can check a layout against them in minutes.

What does the Capital Market Authority require of a fund, broker or wealth app?

The CMA defines a securities advertisement broadly: any verbal, electronic, written or other communication about securities, made in the course of business to invite or induce someone to engage in securities activity. It may not be made to a person in the Kingdom unless the person making it is a capital market institution or its contents have been approved by one. An advertisement available on the internet to people in the Kingdom counts as made in the Kingdom unless it is directed only at people outside it, and whether it is so directed is a question of fact.

The CMA’s rules for capital market institutions add content requirements. An advertisement must state the institution’s name and address and that it is authorised by the Authority. It must not forecast the future price of securities. Past performance must be fairly presented, sourced, and carry a warning that it is not necessarily a guide to future performance. A designated officer approves a prepared advertisement before it goes out, and the institution keeps a record of each one.

Three design decisions follow. The approving institution becomes a stakeholder in the brand from week one, because every campaign screen and landing page that invites investment passes through it. A brand that serves several markets has to decide, in the information architecture, which pages are for Saudi investors and design the entry points so the answer is obvious. And a wealth app’s content system needs an editorial rule for the thin line between an educational article and an inducement.

Three design decisions the Saudi rules force, and the trade-off in each

• Arabic-primary lockup. Draw the Arabic mark first and give it the master proportions; derive the Latin mark from it. The trade-off is that a group brand built in London or Mumbai accepts a second master mark rather than a translated caption, with two type systems sharing one colour and spacing logic.
• Disclosure block as a grid element. Design the SAMA disclosure block, with the supervision statement, fees including VAT and any APR and term, as a fixed component with a minimum height on every format. The trade-off is a smaller hero area on the smallest formats; the gain is that compliance can approve a template once and clear individual executions faster.
• Approval sequence in the timeline. Book the compliance department’s written approval, and for investment products the capital market institution’s approval, as named milestones with owners and dates before media is booked. The plan looks longer on paper; the launch does not slip because a warning line was argued about the week the film was due.

A fourth decision lives in documents, not advertising. SAMA’s consumer protection rules require terms and conditions to be drafted in Arabic in simple, clear language, with an English copy on request, and set a minimum font size of 14 for contracts and annexes. The account opening form, the key facts summary and the app’s terms screen need a type scale that respects that floor. Most brand guidelines never mention documents. In Saudi Arabia they have to.

In Saudi Arabia the Arabic mark is the brand; the Latin mark is the translation.

How do you build one brand that works in Saudi Arabia and in India?

An Indian financial group opening a Gulf line, or a remittance fintech serving both markets, needs one identity that satisfies the Saudi regulators on one side and its Indian regulators on the other. The rules differ in detail but rhyme in structure. Both markets impose a fixed disclosure element: in India, the risk warning on a mutual fund advertisement, an insurer’s registered name shown prominently, or the key facts statement in a lending journey; in Saudi Arabia, SAMA’s supervision statement and fee disclosure, or the CMA’s regulatory-status line. Design the disclosure block as one component with a market-specific content slot and you have one grid for both.

Both markets also have a script question. An Indian brand often carries Devanagari or another Indian script beside Latin. Adding Arabic means a third script, written right to left, and a lockup rule that decides which mark leads where: Arabic in Riyadh and Jeddah, Latin or the regional script in Mumbai and Bengaluru. Our fintech branding work in India plans mandatory disclaimers into the layout from the start, and the insurance briefing guide shows how disclaimer and identification blocks are handled as fixed elements. The Saudi version adds a third master mark and a second approval path, run as a parallel track from one creative source.

How does Yamm Labs work with clients in Riyadh and Jeddah?

Remotely, from Gurugram. Yamm Labs does not maintain offices outside Gurugram and does not claim a presence in Saudi Arabia. The work runs on shared files, video calls and a written decision log, the same way it runs for Indian clients outside the National Capital Region. Meetings in India can be in person; meetings with teams in the Kingdom are on video, and reviews are scheduled inside the hours the Saudi and Indian working days share.

Two things change in the process for Saudi work. The client’s compliance department joins at the brief stage, because SAMA’s rules make its written approval the gate to publication, and a gate met on day one costs less than a gate met at the end. And the plan names a native Arabic reader, usually on the client side, who checks copy and lettering before they reach compliance, so the compliance officer is checking the rules, not the grammar.

The clients we name are Indian: TATA AIA Life Insurance, HDFC Life, Axis Bank, Paytm Money and Aditya Birla Sun Life Mutual Fund. What we bring to a Saudi brief is the discipline those regulated brands required, applied to a different rulebook.

How should you brief a fintech or BFSI branding agency for Saudi Arabia?

Name your regulator in the first paragraph: SAMA for a bank, finance company or payment fintech; the Capital Market Authority for anything that invites investment; the Insurance Authority for an insurer; two of them if your product crosses a line. Name the compliance officer who will sign the work.

State the language decision: Arabic-primary with an English version for a defined non-Arabic-speaking audience, or a bilingual master from the start. The agency’s first deliverable should be a lockup rule, not a mood board.

List the fixed elements: the supervision statement, the fee and VAT disclosure, the APR and term for finance products, the regulatory-status line and risk language for investments. Ask the agency to show where each one sits on the three smallest formats you will run before it shows you anything else. Then ask for the approval sequence as a dated plan, and for the last three regulator-driven decisions it made for another client. An agency that calls itself compliance-aware and cannot describe one decision has not done the work.

Budget follows the sequence. The bands we publish for fintech branding cost in India are a starting point for a Saudi scope, with an Arabic master mark and a second approval path added as named lines rather than absorbed into one fee.

People also ask

Does a fintech in Saudi Arabia need Arabic-first branding?

SAMA’s advertising rules make Arabic the language of advertising financial products and services, with an exception for advertisements aimed at non-Arabic speakers that still follow the rules. For a brand, that means the Arabic mark is a primary mark with its own construction, not a translation of the Latin one.

Who has to approve a financial advertisement in Saudi Arabia?

Under SAMA’s rules, the institution’s compliance department must review and approve advertising materials in writing before publication. For anything that invites people to engage in securities activity, the CMA requires the advertisement to be made or approved by a capital market institution.

Can a Gurugram agency work for a bank in Riyadh?

Yes, remotely, provided it has read the SAMA and CMA rules and builds the compliance round into the plan. Yamm Labs works this way from Gurugram and has no office in Saudi Arabia.

What should a Saudi brand brief include that an Indian one does not?

The language decision, the SAMA supervision statement and fee disclosure as fixed elements, and the name of the capital market institution that will approve any investment communication. An Indian brief carries the disclosure lines its Indian regulator requires instead; the structure of the brief is the same.