Article
The Saudi Financial System, Visually Mapped
Who actually regulates what in Saudi finance — SAMA, CMA, ZATCA, GOSI, and SIMAH — explained with a simple visual map instead of a wall of acronyms.
SaudiMoney · 2026-09-15
Every guide on this site eventually mentions one of five acronyms — SAMA, CMA, ZATCA, GOSI, SIMAH — usually without explaining how they fit together. This post is that missing map: one page, five boxes, showing who actually regulates what.
This is a structural overview, not a legal reference. Each body's exact mandate and current leadership are worth confirming on its own official site if you need something precise for a formal purpose.
The five bodies that touch your money
SAMA — Saudi Central Bank
Regulates banks, insurance companies, and licensed finance companies. If an institution can hold your deposit, issue you a card, sell you insurance, or lend you money, SAMA licenses and supervises it. It also manages the SAR/USD currency peg.
CMA — Capital Market Authority
Regulates the stock market (Tadawul), investment funds, brokerages, and fintech investment apps. If a platform lets you buy shares, Sukuk, or fund units, it needs CMA authorization.
ZATCA — Zakat, Tax and Customs Authority
Runs VAT registration and collection, Zakat administration for eligible entities, and customs. If a receipt shows 15% VAT, that's ZATCA's rule being applied.
GOSI — General Organization for Social Insurance
Runs the social insurance system — pensions for Saudi nationals, occupational hazard coverage for everyone, and unemployment insurance (SANED).
SIMAH — Saudi Credit Bureau
The single national credit bureau. Banks and lenders report your repayment history here, and it's the source of the credit score that affects loan and credit card approvals.
Why this matters practically
Knowing which body governs which product tells you where to actually go when something's wrong, instead of guessing:
- A bank refused to open your account or a card fee looks wrong → this is SAMA's regulatory territory; the bank's own complaints process is the first stop, SAMA is the escalation path.
- An investment app or broker is behaving oddly → check it's CMA-authorized before you do anything else.
- A VAT charge looks incorrect on a receipt → that's a ZATCA question, not a bank question.
- Your GOSI contributions look wrong on a payslip → that's between you, your employer, and GOSI directly — see our full GOSI guide.
- A credit application was rejected and you want to know why → pull your report from SIMAH — see our SIMAH guide for exactly how.
How the five interact on one purchase
A single everyday transaction can touch three of these five at once. Say you buy a car on installment finance:
Who's involved in a single car-finance purchase
See our car finance guide and car finance calculator for the actual numbers side of that purchase.
Frequently Asked Questions
Is SAMA the same as a bank? No — SAMA is the regulator that licenses and supervises banks, it isn't a retail bank you can open an account with.
Do I deal with GOSI directly, or through my employer? Your employer registers you and remits contributions; you interact with GOSI directly only to check your own record, which you can do via their online platform.
Which one of these actually affects my day-to-day banking the most? SAMA, by far — it sets the rules for the bank accounts, cards, and consumer finance products you use every day.
Summary
Five bodies, five different jobs: SAMA for banks and lending, CMA for investing, ZATCA for tax, GOSI for social insurance, SIMAH for your credit file. Most personal-finance questions map cleanly to exactly one of them — knowing which one saves you from emailing the wrong place.