Market analysis

Cross-border payouts into the Gulf: which licence

Under the CBUAE regulation, cross-border fund transfer is a named service and is absent from the lower licence category. Remittances are defined separately.

Paying a supplier in the Gulf from outside it, or paying one inside a Gulf market from another, gets described as a compliance “path”, as if there were a single corridor licence. The Central Bank of the UAE’s retail payment regulation does not work like that. It names cross-border fund transfer as one retail payment service among nine, and then it uses that name to decide which licence category you are in.

Saudi Arabia’s payment-services regime licences payment institutions and electronic-money institutions rather than a category called “cross-border”. The two answers are not interchangeable. The category tables themselves are in what a payments licence requires in Saudi and the UAE. This page is about the one distinction that changes a payout product.

The UAE: cross-border is a category boundary

Annex I of the Retail Payment Services and Card Schemes Regulation lists cross-border fund transfer as its own service, separate from domestic fund transfer.

Category III covers payment account issuance, payment instrument issuance, merchant acquiring, payment aggregation and domestic fund transfer. It stops there. Cross-border fund transfer appears in Category II and Category I. Category I is the list that also includes payment tokens.

So a firm that can legally do everything in Category III still cannot, on that licence, provide cross-border fund transfers. Adding payouts out of the State is a change of category, not a feature flag, and the initial capital steps up with it. Below an average monthly transaction value of AED 10 million, Category III’s floor is AED 500,000 and Category II’s is AED 1 million. At or above that average, the floors are AED 1 million and AED 2 million. The threshold test and the ongoing-capital rule are the same ones in the licensing piece.

Banks are not in this queue in the same way. A bank licensed under the Central Bank Law is deemed licensed for retail payment services. The regulation still requires a notification and a no-objection before a bank provides some of the Annex I services. It does not require that no-objection for points (1), (2), (5) and (6). Point (6) is cross-border fund transfer. A non-bank does not inherit that deeming. The shortcut is the bank’s, and only the bank’s.

Remittance is not the same defined term

The regulation defines a remittance as the receipt of funds from a payer without any payment account being created in the name of the payer or the payee. It then defines money transfer services as the domestic and cross-border fund transfer services, excluding remittances.

That exclusion is the sort of sentence product copy skips. A payout product that opens a payment account, and a cash-in service that never does, are not the same row in this regulation. Which one you are building decides whether “cross-border fund transfer” is even the service you should be reading. It does not decide it for you from the word “payout”.

Payment account issuance itself is defined as something other than the fund transfer services, and the account is for funds in transit. The regulation says it is not for storing and maintaining funds. A product that holds a balance is a different conversation from a product that pays out, even before cross-border is added.

Saudi Arabia does not mirror the category cut

SAMA’s licensing guidelines and Articles 44 and 45 classify applicants as micro or major payment institutions, or as electronic-money institutions, with a further split for payment initiation and account information. There is no Category III in that table whose boundary is the border.

A Saudi licence can of course be conditioned, and the services you describe in the application are the services you asked to provide. The guidelines ask for a description of each service to be licensed. What they do not do is publish a rule of the form “domestic is licence A, cross-border is licence B” the way the CBUAE category list does. Importing the UAE boundary into a Saudi plan is an assumption, and it is not supported by those articles.

Average monthly value still matters in Saudi Arabia. Crossing SAR 10 million is what classifies a payment institution as major, with ongoing capital of the higher of the initial floor or 1% of that average. That is a size test. It is not a cross-border test.

What an engineer is usually being asked

Most teams hitting this page are not the applicant. They are integrating a provider who claims to “support UAE payouts”. The questions that match the regulation are:

  • Is the provider a bank, or a licensed payment service provider, and for which category?
  • Does the flow create a payment account, or is it a remittance as defined?
  • Is the transfer domestic only? If someone later asks for a payout to a third country, Category III does not cover it.

“They have an API” answers none of the three. Neither does a card-gateway contract. Acquiring a merchant and paying a beneficiary in another country are different Annex I lines.

The rail underneath a domestic instant payout may be Aani or, in Saudi Arabia, sarie. Those are described, from the launch documents only, in sarie and Aani. Being live on the rail is a statement about the member bank. It is not a statement that your company holds the licence.

What this page will not invent

No AML threshold, no permitted-corridor list, and no “typical” timeline. They are not in the articles cited. Sanctions screening and correspondent banking practice are real constraints on a payout product, and they live in other instruments and in the correspondent’s own rules. Folding them into this summary as if the retail payment regulation had fixed the numbers would make the page more confident and less true.

Sources

The licensing comparison those sources support is what a payments licence requires in Saudi and the UAE. Use the regulation itself for anything you are about to put in an application.