Video KYC and Digital Onboarding for Lenders in Saudi Arabia

Video KYC and digital onboarding for lenders in Saudi Arabia verify a customer's identity remotely through Nafath authentication, liveness checks, and document match — replacing branch visits. Done well, it aligns with Saudi Central Bank (SAMA) account-opening and anti-money-laundering rules and the Saudi Personal Data Protection Law (PDPL), while cutting onboarding from days to minutes.

Onboarding is where lending journeys are won or lost. With internet penetration at 99.0% and 48.7 million mobile connections (DataReportal, Digital 2026 Saudi Arabia), Saudi customers expect to open an account or take a loan from their phone. Video KYC (Know Your Customer) and digital onboarding make that possible — verifying identity remotely without a branch queue, while meeting the compliance bar SAMA and the Saudi Data and Artificial Intelligence Authority (SDAIA) set.

What Is Video KYC and How Does Digital Onboarding Work?

Video KYC is a remote identity-verification method where a customer completes a live or automated video session to prove who they are. Digital onboarding is the broader end-to-end journey — capture, verify, screen, and open — done entirely online.

A typical flow:

1. Identity authentication — the customer authenticates via Nafath, the Kingdom's national single sign-on, or submits a National ID / Iqama.
2. Liveness check — the system confirms a real, present human, not a photo or deepfake.
3. Face match — the live face is matched against the identity record.
4. Screening — the applicant is checked against sanctions and watchlists.
5. Decision and open — verified applicants are onboarded in minutes.

Nafath is central to this shift. Launched in 2021 by SDAIA's National Information Center, it provides one biometric-backed digital identity — using face, fingerprint, and one-time passwords — for accessing government and private services, and is integrated across Saudi banks (OECD Observatory of Public Sector Innovation). It lets a lender verify a customer against the national identity infrastructure — via Absher and Yaqeen — instead of manual document uploads.

Why Are Saudi Lenders Moving to Video KYC?

The drivers are speed, reach, and compliance — and SAMA is actively widening remote access. In September 2025, the Saudi Central Bank approved the use of a Ministry of Interior "Visitor ID," verifiable through authorised digital platforms, to open bank accounts — part of a broader financial-inclusion and digital-transformation push (Gulf News, 2025).

Lenders must still meet SAMA's Account Opening Rules and Know Your Customer requirements, which set out identification and due-diligence obligations for every new relationship.

What Data-Protection Rules Apply to Video KYC in Saudi Arabia?

Video KYC processes biometric data — a live face and liveness signals — which the law treats as sensitive. Under the Saudi Personal Data Protection Law (PDPL), issued by Royal Decree No. M/19 and in force since 14 September 2023, biometric data and credit data are classified as sensitive personal data requiring heightened safeguards, and the regulator is SDAIA (DLA Piper, 2026).

Key obligations lenders should map:

• Lawful basis and consent. Consent is the primary basis for processing personal data, with defined exceptions.
• Breach notification. Controllers must notify SDAIA through the National Data Governance Portal within 72 hours of becoming aware of a qualifying breach.
• Cross-border transfers. In a banking context, transfers of personal data outside the Kingdom may require Saudi Central Bank approval, on top of PDPL transfer rules.
• Penalties. Fines can reach SAR 5 million for violations, and misuse of sensitive data can carry imprisonment and fines up to SAR 3 million.

This is an explainer, not legal advice — confirm your obligations with counsel.

How AI Helps

YuAccess runs the full remote-identity journey for Saudi lenders: document capture, AI liveness detection to defeat spoofs and deepfakes, face match against the identity record, and integration with digital-identity pathways such as Nafath. It flags mismatches and risk signals for human review, and records a complete, timestamped audit trail that supports SAMA due-diligence and Saudi PDPL requirements. Because verification is automated, genuine customers onboard in minutes while fraud attempts are caught up front. YuVerse platforms have processed over one million documents across financial-services deployments, giving lenders a proven identity stack rather than an untested pilot.

How Should a Saudi Lender Implement Video KYC?

A practical sequence:

1. Confirm your SAMA obligations (Account Opening Rules, KYC, anti-money-laundering) and PDPL duties before design.
2. Integrate Nafath and document capture as primary identity sources.
3. Add liveness and face match to block spoofing and impersonation.
4. Wire in sanctions and watchlist screening before account opening.
5. Route exceptions to humans and keep a full audit trail for every applicant.

This mirrors how lenders elsewhere approached CKYC and Video KYC automation, AI document verification, video-led customer onboarding, and Gulf-market national-ID verification for KYC.

FAQ

Is Video KYC legally recognised in Saudi Arabia? Remote verification is supported, with Nafath as the national digital identity and SAMA widening remote account opening. Lenders must still meet SAMA account-opening, KYC, and anti-money-laundering rules and the PDPL. This is an explainer, not legal advice.

What is Nafath and how does it help onboarding? Nafath is Saudi Arabia's national single sign-on, backed by biometrics and one-time passwords. It lets institutions verify a customer against the national identity infrastructure without manual document submission, making it one of the fastest onboarding pathways.

How does Video KYC prevent fraud? It combines liveness detection, face match against the identity record, and sanctions screening — catching photos, deepfakes, and impersonation before an account is opened.

Is biometric data protected under Saudi law? Yes. Under the PDPL, biometric and credit data are sensitive personal data requiring heightened safeguards, with SDAIA as regulator and breach notification to SDAIA within 72 hours.

How long does digital onboarding take? For low-to-medium-risk customers using Nafath and automated checks, verification can complete in minutes rather than the days a branch visit requires.

Does Video KYC work for expatriate and visitor applicants? Yes. Iqama-based capture plus liveness and face match support residents, and SAMA has approved Visitor ID to open accounts — extending remote onboarding to more customer groups.

Conclusion

Video KYC and digital onboarding let Saudi lenders convert phone-first customers in minutes instead of days — without loosening controls. By combining Nafath, liveness, face match, and screening, and by mapping to SAMA rules and the PDPL, lenders get both speed and safety. With SAMA steadily widening remote access under Vision 2030, the direction of travel is clear.

Onboard genuine customers in minutes, block fraud up front. Talk to the YuVerse team to see YuAccess for Saudi lending.

References

• Saudi Central Bank (SAMA) — Account Opening Rules — https://rulebook.sama.gov.sa/en/account-opening-rules
• Gulf News — Saudi Central Bank approves use of visitor ID to open bank accounts (2025) — https://gulfnews.com/world/gulf/saudi/saudi-central-bank-approves-use-of-visitor-id-to-open-bank-accounts-1.500286755
• DLA Piper — Data protection laws in Saudi Arabia (PDPL) — https://www.dlapiperdataprotection.com/index.html?t=law&c=SA
• OECD Observatory of Public Sector Innovation — Nafath App — https://oecd-opsi.org/innovations/nafath-app/
• DataReportal — Digital 2026: Saudi Arabia — https://datareportal.com/reports/digital-2026-saudi-arabia