Identity theft and financial fraud sit at the intersection of two Saudi laws: the Anti-Cyber Crime Law, when the conduct is carried out by technical means, and the Anti-Financial Fraud and Breach of Trust Law, which covers fraudulent appropriation of another person's money more broadly. This page explains what these laws criminalize in this area, the published penalty range, and how to report fraud through Absher — keeping in mind that characterizing any specific incident and determining which law applies is a matter for the competent authority.
What the law criminalizes
Article 4 of the Anti-Cyber Crime Law covers a number of acts relevant to identity theft and financial fraud, including:
- Taking property or a deed through fraud: appropriating movable property, a deed, or a signature on a deed for oneself or another through fraud.
- Using a false name or false impersonation: using an identity or capacity that does not belong to the person to carry out the acts above.
- Unlawful access to banking or credit data: unlawfully accessing banking or credit data, or financial papers, to obtain data, money, or services.
These acts fall under Article 4 of the Anti-Cyber Crime Law specifically when they involve a technical means. Financial fraud more broadly — regardless of the means used — falls under the Anti-Financial Fraud and Breach of Trust Law, which sets a dedicated framework for punishing the wrongful appropriation of another person's money through fraudulent methods.
Published penalty range
| Law | Acts covered | Published penalty range | | --- | --- | --- | | Anti-Cyber Crime Law (Article 4) | Impersonation or false name used to take property or a deed; unlawful access to banking or credit data | Up to 3 years' imprisonment and a fine up to SAR 2,000,000, or either penalty | | Anti-Financial Fraud and Breach of Trust Law | Wrongfully taking another person's money through fraudulent means | Up to 7 years' imprisonment and a fine up to SAR 5,000,000, or either penalty |
These are published upper ranges in the statutory text, not a fixed or confirmed penalty for any incident. The law sets a range for the penalty, and the final characterization depends on the facts and the competent authority — including how the act is classified, how many incidents are involved, and whether a single incident falls under more than one law.
How to report financial fraud through Absher
Absher offers a dedicated service for financial fraud reports under Public Security services. The published steps to submit a report:
| # | Step | | --- | --- | | 1 | Log in to your Absher account. | | 2 | Select "My Services." | | 3 | Select "Public Security." | | 4 | Select "Financial Fraud Reports." | | 5 | Fill in the required fields and attach any available supporting documents or relevant screenshots. | | 6 | Submit the report. |
Safe practice when fraud or impersonation is suspected
When identity theft or financial fraud is suspected, the published safe practice is to use official reporting channels — such as the Absher financial fraud reporting service — and not to rely on messages, links, or calls from unverified sources to confirm an identity, transfer money, or provide banking details.
When do you need a licensed lawyer?
This page explains the published statutory text and the general penalty range only. It does not assess any specific incident and does not offer a defense strategy or predict a case outcome. Engaging a licensed lawyer becomes a practical necessity in situations such as: an active report, investigation, or summons involving you as a reporting party or a suspect; receiving a formal charge under either of these laws; needing to understand how a specific incident affects your rights or obligations; or representation before the competent authority. If you have an active report, summons, arrest, or charge, consult a licensed lawyer to understand your rights and the appropriate legal procedure for your situation.