Saudi Arabia

This baseline finding is not without interpretive nuance. Independent commentary distinguishes an institutional/licensing-level prohibition -- no entity may be licensed to run a virtual-currency exchange or trading business -- from the separate question of whether individual possession or peer-to-peer holding of crypto assets is subject to criminal enforcement. The record does not resolve this distinction with confidence, and the underlying claim's confidence has accordingly been treated as Uncertain rather than Probable, reflecting a genuine open question about the practical enforcement perimeter rather than ambiguity about the 2018 statement's existence or its face-value scope.

Set against this standing prohibition, a narrow institutional exception has emerged: a CMA-Saudi Central Bank partnership (branded droppRWA) piloting regulated stablecoin-based settlement infrastructure for tokenized real estate. A first tokenized property-deed transaction has been executed, and wider rollout across the Kingdom's real-estate pipeline is expected by late 2026. This pilot is controlled, regulator-sponsored, and scoped to institutional real-estate settlement; it does not constitute, and should not be read as signalling, a general licensing pathway for retail virtual-currency trading, exchange operation, or custody. The precise legal instrument authorising the pilot -- whether a sandbox exemption, a bespoke license, or an informal regulator-to-platform arrangement -- has not been identified in available sourcing and remains an open research gap.

The practical picture is therefore bifurcated: a standing, unrepealed prohibition on licensed virtual-currency trading coexists with an actively developing, regulator-controlled institutional tokenization exception. Nothing in the available record suggests the exception is a precursor to general licensing liberalisation, but nothing rules that out either -- the sourcing simply does not extend that far. Primary-source text of the original 2018 Standing Committee statement has not been directly located; the record relies on contemporaneous secondary reporting, and direct sourcing from SAMA/CMA official channels remains an outstanding research priority.

Outlook

The determinative near-term question is whether SAMA or the CMA issue any public statement reaffirming, amending, or repealing the 2018 prohibition -- particularly as the droppRWA pilot scales toward its late-2026 rollout target and could plausibly prompt regulatory clarification of the boundary between institutional pilots and general licensing. A secondary signal to watch is whether Saudi Arabia develops a free-zone or special-economic-zone-specific crypto framework (for example, tied to NEOM) analogous to the UAE's VARA/ADGM/DIFC structure; no such framework has been identified to date, but its emergence would be a strong candidate for splitting this jurisdiction record. Absent either development, the standing prohibition should be treated as the operative baseline for any assessment of licensed crypto activity in the Kingdom.

The practical consequence is visible in two areas. First, NFT marketplace activity -- exemplified by Nuqtah, described as the Kingdom's first NFT marketplace platform and backed by Animoca Brands -- operates without any dedicated NFT regulatory category from either the Capital Market Authority (CMA) or the Saudi Central Bank (SAMA). Its legal characterisation, and therefore the compliance obligations (if any) attaching to NFT issuance, trading, or marketplace operation, remains unresolved by any published rule. Second, the CMA-Saudi Central Bank stablecoin-settlement pilot for tokenized real estate is developing toward a late-2026 target without any formal stablecoin licensing category existing in Saudi law today -- meaning the pilot's tokens are, in a formal classification sense, unclassified even as the underlying settlement infrastructure advances.

This module's evidentiary base is thin: the available sourcing establishes the absence of a taxonomy and cites specific examples of unclassified activity, but does not extend to any regulator commentary on planned taxonomy work, timelines, or intended categorisation approach. Readers should treat this module's content as an accurate description of a persistent gap rather than as a forward indicator of imminent classification rules.

Outlook

No specific taxonomy publication has been signalled by CMA or SAMA in available sourcing. The clearest forward indicator to watch is whether the droppRWA stablecoin pilot's late-2026 target rollout prompts CMA/SAMA to publish an accompanying classification framework for the underlying settlement tokens, since institutional pilots of this kind have historically been a trigger point for retrospective classification guidance in other jurisdictions. Absent such a trigger, the taxonomy gap should be expected to persist.

Separately from these real-estate-tokenization pilots, SAMA's Innovation Hub has completed two distinct central-bank-led experiments: a Tokenized Deposits Project testing both account-based and token-based models of tokenized commercial bank money on a live multi-party blockchain network, and a Collateral Asset Management Project automating collateral pledging via blockchain. These are institutional, central-bank-sponsored initiatives, sourced to a SAMA Innovation Summit address, and are analytically distinct from retail-facing on-chain activity.

On the retail side, the picture is one of absence rather than restriction: SAMA's Regulatory Sandbox use cases are documented as limited to digital financing, savings, open banking, and peer-to-peer lending, with no identified rules -- permissive or restrictive -- covering public staking, DeFi lending, decentralised exchange operation, or crypto mining. This is a gap in published rulemaking rather than a stated prohibition specific to these activities, though the 2018 Standing Committee statement's general prohibition on virtual-currency trading would presumably extend to at least some of this activity by implication.

Outlook

The clearest open item is whether droppRWA or REGA issue any further public statement engaging with the competing "first" claims -- a resolution either way would be a useful signal of how seriously Saudi authorities treat the accuracy of company-originated tokenization narratives. Separately, whether SAMA's Regulatory Sandbox admits any cohort specifically targeting staking, DeFi, DEX, or mining use cases would be the clearest indicator of movement beyond the current digital-financing-and-payments-focused sandbox scope. Both the Tokenized Deposits Project and the Collateral Asset Management Project warrant continued tracking as leading indicators of SAMA's institutional blockchain direction, distinct from any retail liberalisation signal.

The precise legal or regulatory instrument underpinning the pilot -- a sandbox exemption, a bespoke authorisation, or an informal regulator-platform arrangement -- has not been identified in available sourcing, and this remains an open research gap rather than a resolved finding. The evidentiary base for this module rests substantially on a single primary reporting source describing the pilot's commercial and technical progress rather than on any regulator-issued rule text, and the module's findings should be read with that limitation in mind.

Outlook

The clearest forward indicator is the pilot's own targeted late-2026 wider-rollout milestone; whether that timeline holds, and whether it is accompanied by any published stablecoin-specific rule text from CMA or SAMA, would materially change this module's traffic-light assessment. Absent such a publication, the module should be expected to remain characterised by an active pilot operating ahead of, rather than under, generally applicable stablecoin rules.

The second element is narrower and was corrected this cycle. The Standing Committee is documented as administering a remit to reduce marketing of virtual-currency investment and trading activity via reporting to SAMA or the CMA. An earlier framing of this remit had implied that marketing or solicitation of crypto trading services falls under binding, in-force unauthorized-activity enforcement. On review, the underlying sourcing supports only a narrower, procedural administrative remit -- a reporting mechanism, not a directly stated binding enforcement rule -- and the claim's is_binding and regulatory_stage attributes have been corrected accordingly, with confidence revised down to Uncertain to reflect the more limited evidentiary basis.

Beyond these two elements, no operative custody, disclosure, complaint-handling, or suitability regime specific to crypto assets has been identified. Consumer protection in this space therefore rests on a general risk warning and a procedural marketing-reporting mechanism, not on a substantive regulatory regime addressing platform conduct, custody standards, or investor redress.

Outlook

Given the absence of any dedicated consumer-protection rulemaking for crypto assets, the key signal to watch is whether the droppRWA institutional pilot's wider rollout prompts any accompanying investor-protection guidance specific to tokenized real-estate products -- a natural point at which retail-facing consumer protection rules might first emerge, even within an otherwise prohibited retail trading environment. No such guidance has been signalled in available sourcing to date.

This is a structurally thin module: the finding is an absence rather than a described rule, and the evidentiary base consists of secondary industry commentary noting the gap rather than any ZATCA source confirming or denying planned guidance. Readers should treat this module's content as a description of an open gap rather than as an indication that any particular tax treatment currently applies to crypto transactions in the Kingdom.

Outlook

The clearest forward indicator would be any ZATCA circular or public statement addressing digital-asset treatment under the Kingdom's Zakat, corporate income tax, or VAT regimes. None has been identified to date, and this module is expected to remain a gap pending direct ZATCA-sourced research.

Separately, Saudi Arabia maintains a general targeted-financial-sanctions implementing regime addressing proliferation and terrorism financing. The 2018 FATF-MENAFATF Mutual Evaluation assessed a mix of compliant and largely-compliant ratings across relevant recommendations; FATF's subsequent enhanced follow-up process has since re-rated Recommendations 6 and 7 (targeted financial sanctions implementation) upward to largely compliant, superseding the ratings reflected in the 2018 Mutual Evaluation Report itself. This general sanctions-screening and implementation regime would, by implication, extend to any virtual-asset cross-border flow, since no dedicated crypto carve-out from the general regime has been identified. Note that the AML/CFT substance underlying this finding is a subscribed surface owned by the financial-integrity monitor; it is carried here only as necessary context for the cross-border-transfer sanctions nexus, not as original financial-integrity analysis.

Outlook

The absence of a licensed cross-border VASP channel is a direct and stable function of the domestic prohibition; it should be expected to persist unless and until that prohibition is repealed or a licensing carve-out is introduced. Separately, financial-integrity's continued tracking of FATF's enhanced follow-up process for Saudi Arabia's Recommendations 6 and 7 ratings is the more likely near-term source of any incremental change to the sanctions-implementation baseline referenced here.