A fintech review that does not name the regulated entity is incomplete

Consumer fintech is reviewed the way consumer software is reviewed. How good is the onboarding, how fast is the app, what does it cost, how does it compare with alternatives. All of that is worth knowing and none of it answers the question that matters most when something goes wrong. Which regulated entity is behind this, and what does its licence permit? In Saudi Arabia financial activity is licensed by permission rather than by company type, and the categories are distinct. Consumer finance, SME finance, buy now pay later, payment services and account information services are separate permissions with separate obligations. SAMA moved open banking from sandbox to licensed activity in March 2026, so offering account information services now requires a licence rather than a sandbox place or a bilateral bank agreement, and licensing has continued since. Companies in this market have been acquiring those permissions deliberately. Tamara secured Saudi Arabia's first consumer finance licence from SAMA in March 2025. Tabby obtained consumer finance and SME finance licences, extending it beyond buy now pay later into longer-term consumer financing and business working capital, with reported terms allowing purchases above SAR 2,000 to be financed up to SAR 50,000 over as much as 12 months. Those are cases where the brand and the licence sit in the same place, which is the simplest arrangement and increasingly the norm at the larger end. It is not the only arrangement. A consumer-facing application can also be operated by a company that does not itself hold the relevant permission, with the actual credit, payment or account service provided by a licensed partner whose name the customer may never see. That is a legitimate and common structure, used in every fintech market, and it is not a warning sign. It is a materially different position for the customer, and the difference only becomes visible under stress. What the licence determines is concrete. Which conduct rules apply to how the product is sold and priced. What disclosure the provider owes before a customer commits. Which complaints process exists and who supervises it. What happens to a customer's balance, data or credit agreement if the company operating the app stops trading. In a structure where the app operator is a distributor, the answers to most of those questions belong to a different company. None of that is inferable from the interface, and reviews that do not establish it are reviewing the front end. The problem is sharpest in lending, and the reason is that lending is where the consequences last longest. A buy now pay later arrangement is a credit agreement. Whether the obligation is reported to a credit bureau, how late payment is handled, what fees apply, and what recovery process exists are all determined by the licensed entity and the permission it holds. Two apps with identical interfaces can sit on quite different arrangements. It is sharpest again in anything touching account data. A licensed account information services provider operates under obligations about consent, retention and use that an unlicensed data aggregation arrangement does not, and a customer connecting a bank account has no way to tell which they are dealing with from the consent screen. So the standard TechScoop applies, and which any reader can apply, is short. Establish which legal entity provides the regulated service, not which brand appears on the app. Establish which permission that entity holds. Establish whether the company operating the app is the licensed entity or a distributor. And establish where the complaint goes if something goes wrong. All four are answerable. Licensed entities are published, permissions are defined, and a company operating properly will state its regulatory position plainly, usually in the terms and conditions and often in the app itself. A company that makes it hard to find has told you something. There is a fair counterpoint. Regulatory structure is not what most readers come to a product review for, and a review that leads with licensing detail over usability is answering a question nobody asked. That is true, which is why the right place for it is a stated line in every fintech review rather than the substance of one: who is regulated, for what, and where complaints go. One paragraph, always present. The Saudi market makes this more rather than less necessary as it matures. As payment companies become lenders, as software platforms attach credit, and as licensed open banking providers begin appearing inside other companies' products, the distance between the brand a customer trusts and the entity that owes them obligations is going to grow. Naming it is not scepticism about the sector. It is the minimum a reader needs.