Referring to SAMA Circular No. 341000110148 dated 10/9/1434H regarding the issuance of the Service Level Agreement for Automated Teller Machines (ATM SLA), the contents of which were implemented as of the beginning of 2014. SAMA commends the role played by banks during the previous period, which included strategic and operational changes that contributed to raising the level of service and overcoming challenges to achieve the operational ratios targeted in the agreement.

We would also like to inform you that SAMA has studied the current market situation - and the changes and data that have occurred on it - and redetermined the target operating ratios, as it was decided that the operating ratio for the period from the fourth quarter of 2014 until the end of the first half of 2016 will be as follows:

Accordingly, SAMA will update the document according to the ratios set above and recalculate the operating ratios for banks and the banking sector and implement them, starting from the fourth quarter of 2014.

       In reference to SAMA's circular No. BCB/813 dated 01/12/1420H regarding declined bank card transactions at ATMs and the continuous follow-up by SAMA of the performance of bank customers on the ATMs of other banks.

        I inform you that after studying and analyzing the rejected transactions on banks' ATMs for the past years and with the aim of providing distinguished services to citizens that reflect the reality of the banking system in the Kingdom and its development, SAMA will reduce the acceptable rate of rejection as of 01/06/2012. SAMA hopes that banks will work to improve performance and reduce the rate of declined transactions of the bank's cards on their devices as well as on other banks' devices, in accordance with the instructions of SAMA in this regard.

Recently, SAMA has noticed instances of ATM fraud in some neighboring countries. This involves downloading certain programs and files to instruct the cash dispensing unit of the machine to dispense cash from the feeding boxes, without affecting customer accounts.

SAMA urges all banks operating in the Kingdom to exercise caution regarding these operations and to implement necessary precautionary measures to monitor any unauthorized access or use of ATM machines. It is essential to activate all appropriate procedures for protecting the machines, ensure the functionality of security systems and surveillance cameras, mitigate the damages and risks associated with electronic hacking, and take necessary actions to communicate with equipment suppliers while training staff responsible for monitoring ATMs.

We hope that you will adhere to these guidelines and inform SAMA immediately if any similar incidents occur, God forbid, as well as to report on the measures to be applies to limit hacking operations on ATMs urgently within a week from its date.

Referring to SAMA’s Circular No. 27780/MAT/13135 dated 27/5/1431H, which refers to SAMA’s Circular No. 51224/MAT/995 dated 30/10/1430H regarding the phenomenon of individuals and offices placing promotional stickers on ATMs offering early settlement of borrowers’ debts with banks, assisting them in obtaining new loans, and advertising installment sales. Such practices constitute a violation of Article 2 of the Banking Control Law issued under Royal Decree No. M/5 dated 22/6/1386H. Banks are required to implement procedures to prevent the placement of promotional stickers on ATMs, raise awareness among customers regarding the violations and risks of this phenomenon, and instruct branch managers, staff, and relevant department employees not to cooperate with any individual or office in any way or assist anyone engaging in these practices. They must report any individual or entity involved in such activities to SAMA. It is emphasized that any violation or concealment by any official or employee will result in penalties in accordance with the provisions of the Banking Control Law and the Anti-Money Laundering Law.

In light of the continued occurrence of this phenomenon, we stress the necessity for banks to implement measures to prevent the placement of promotional stickers on ATMs, raise awareness among employees about the violations and risks associated with this phenomenon, intensify awareness campaigns for customers about the dangers of dealing with individuals engaging in these activities, and emphasize that these practices violate the Banking Control Law and the Anti-Money Laundering Law. Violators will be penalized in accordance with the provisions of these laws.

Please act accordingly and provide feedback on the actions taken within two weeks from the date of this notice.

Referring to the letter from His Royal Highness the Crown Prince, Deputy Prime Minister, and Minister of Interior No. 22380 dated 30/3/1433 H, which refers to His Royal Highness's letter No. 2290/2/5/1 dated 12/1/1432 H, regarding the approval to form a committee comprising Public Security, the Ministry of Municipal and Rural Affairs, and the Central Bank to study the appropriate mechanism to limit the recurrence of ATM uprooting and theft and the preventive security measures that ensure the detection of any attempt before the theft occurs. The committee has reached a number of security measures to limit the recurrence of this phenomenon, and His Royal Highness has expressed a desire to implement the following recommendations:

Take into account the geographical characteristics of the ATM location to ensure easy access to the device without hindering rapid intervention in emergencies. Avoid areas prone to heavy fog or sandstorms. If the ATM is located in a fuel station, the station’s total area must be no less than 3,000 m² for stations within cities and 4,000 m² for stations outside cities, including all associated facilities.

Ensure the provision of a digital CCTV system for monitoring and recording at all ATMs with a minimum recording resolution of 4 frames per second. The recordings must be retained for a period of one year. The system should include (external camera to monitor activity in front of the ATM, covering the area around the user and their vehicle, internal camera to clearly capture the features of the ATM user, camera for the ATM feeding room to monitor activities within the area used for feeding the ATM). Each ATM must be equipped with an independent recording unit. Additionally, a cooling and ventilation system should be provided to ensure the efficiency and continuity of the recording process. There should be also a mechanism for remote monitoring of all external ATM recording systems, operating 24/7, with the capability to download recordings remotely.

Installing a satellite tracking chip inside the device's safe that enables it to locate the device if it is uprooted.

Provide a theft and fire detection and alarm system to detect tampering attempts, which includes a vibration and frequency detector and an infrared sensor connected to the theft detection and alarm system for back-fed devices.

Provide the following structural requirements:

a) Make a reinforced concrete base buried in the ground with a depth of at least (50) cm and dimensions that exceed the dimensions of the ATM by at least (25) cm on all sides to install the ATM.

b) The device is fixed to the concrete base by four nails with a thickness of (25) mm and a depth of at least (30) cm inside the concrete base, taking into account that the nail has a hooked end that is fixed to the rebar of the concrete base to make it difficult to remove it.

c) Construct two reinforced concrete columns adjacent to the ATM from the right and left with a thickness of at least five inches. These columns are laminated with steel on the outside and buried in the concrete base at a depth of not less than (30 cm) cm and fixed with base reinforcement, and a third steel belt is placed transversely above the outer surface of the ATM. This belt is made of steel skewers with a thickness of at least three inches, welded and anchored to the rebar of the concrete base at a depth of at least (30) centimeters.

d) For ATMs that are located in their own independent rooms (Lobby ATM), only the upper part that the customer needs (screen - card insertion slot - keyboard - cash output slot) should be visible, and it is sufficient to install the device with four nails with a thickness of (16) mm and a depth of not less than (10) cm, and that room is independent and sealed with a tight door that opens with secret numbers, and the door should not be from the back or side of the building, but rather next to the ATM, and the ATM is fed from the back inside the independent room, which must be sealed with a secure door that opens with secret numbers. The door is not from the back or side of the building, but rather next to the ATM, and the ATM is fed from the back from inside the independent room, all sides of which must be made of cement bricks and no gypsum board or wood is used, and all security precautions are available, including surveillance cameras, a burglar alarm, a backup generator, and concealment of all electrical wiring. These rooms become an alternative to the rooms in which the ATM is fully visible, with the exception of ATMs in the central area of the Two Holy Mosques and airport lounges.

e) For ATMs located in closed shopping malls, it is sufficient to place them in a safe place under the eyes of the security guards of the complex and fix them with four nails with a thickness of (16) mm and a depth of at least (10) centimeters.

f) Hide all connections and cables inside metal conduits.

g) Providing all ATMs with sufficient lighting around the clock.

h) Linking ATMs to banks' operations rooms to receive any alarms that may arise.

i) When feeding and maintaining ATMs, the following should be followed:

• Feeding and maintenance shall be during official working hours and on holidays from 9:00 a.m. to 5:00 p.m. Feeding and maintenance shall not be at fixed and known times.
• The bank's security guards must be present at the time of feeding or maintenance.
• Notify the Ministry of Interior's security operations room.

For your information and take the necessary measures to comply with the above and inform us.

Referring to SAMA Circular No. 20823/BCI/337 dated 5/6/1426 H regarding determining the retention period for CCTV systems and ATMs, which includes that the retention period of CCTV footage surveillance of ATMs shall be at least six months, and referring to SAMA Circular No. 9367/MT/141 dated 12/3/1427 H, which stipulates providing SAMA branches and the security authorities directly with television filming of ATMs at their request.

We would like to note that SAMA received the letter of His Excellency the Undersecretary of the Emirate of Riyadh No. 9503 S dated 25/8/1430 H regarding the reception of police stations reports from citizens and residents stating that they were exposed to fraud and theft of their ATM cards and their use in ATM withdrawals, and that the investigation authorities face the following difficulties:

1. Delay in sending the required TV recording tapes, which may lead to the escape of the accused and delay in circulating their descriptions and searching for them
2. Failure to specify the required operations times.
3. Failure to attach the programs running for the TV recording.
4. Lack of clarity of TV filmimg due to the use of regular cameras or flimimg from one side.
5. Malfunction of the recording tapes.

We would like to emphasize the commitment to the content of the circulars referred to above, address the above-mentioned observations, cooperate fully with the branches of SAMA and the security authorities, and provide them with the required television recording and the programs operating it within a maximum period of ten days from the date of their request.

Recently, there has been an observed increase in the practice of attaching promotional brochures to ATMs by individuals and offices. These brochures advertise services such as early repayment of borrowers' debts, assistance in obtaining new loans, and installment plans for goods and prepaid communication cards with varying interest rates. 

These practices are in violation of Article 2 of the Banking Control Law issued by Royal Decree No. M/5 dated 22/6/1386H, which states: "No person, natural or juristic, unlicensed in accordance with the provisions of this Law, shall carry on basically any of the banking business." The Implementation Rules for Banking Control Law further clarify these activities and specify penalties for violations under paragraph 1 of Article 23 of the same law, which states: "Imprisonment for a term not exceeding two years and to a fine not exceeding SAR 5,000 for every day the offense continues or to either of these penalties for any person who contravenes the provisions of paragraph 1 of Article 2 ."

Since the Banking Control Law provides the regulatory framework under which banks operate and are subject to supervision and oversight, the activities conducted by individuals and office owners are in violation of this law. These activities have negative implications for national security and the economy, directly affecting public interest, conflicting with the operations of banks, and impacting their interests. Additionally, their practices may involve money laundering activities, especially since they are unlicensed and not subject to any supervision, oversight, or regulation. Their actions may also lead to breaches of banking confidentiality.

Therefore, we request the implementation of the following measures:

1. Implement measures to ensure that promotional stickers are not placed on ATMs.
2. Educate customers about the illegality and risks associated with this practice.
3. Direct branch managers, staff, and employees in relevant departments to refrain from cooperating with individuals or office owners in any way or assisting anyone in carrying out these activities. They must report any individuals or entities engaging in such practices to the Central Bank. Additionally, emphasize that any violation, assistance, or concealment by any official or employee will result in penalties in accordance with the Banking Control Law and the Anti-Money Laundering Law.

We request a report on the actions taken within two weeks from the date of this circular.

Due to the increasing number of complaints received by SAMA from customers with banks represented in the refusal to provide banking services available at ATMs through the tellers' windows, including the non-acceptance of the implementation of withdrawals and cash deposits in small amounts or the payment of utility bills. 

SAMA would like to reiterate to all banks the need to fully comply with the instructions of SAMA issued regarding the acceptance of the implementation of cash withdrawals and deposits, regardless of their amounts, and the acceptance of payment of public utility bills through the teller windows in all branches of the bank, while continuing the bank's policy towards encouraging and educating customers on the use of banking technologies, including ATMs, to carry out the banking operations referred to above, noting the importance of banks following up on the performance of the work of ATMs and their maintenance. Continuously.

SAMA will ensure the compliance of the branches with these instructions and apply the fines stipulated in the Banking Control Law against the violating branches.

In the Central Bank's effort to enhance the efficiency of cash usage, meet the local market’s needs for different denominations of banknotes, and ensure a balanced distribution of these denominations to facilitate commercial transactions based on ATM locations, withdrawal rates, and feeding periods, and based on the significant role played by local banks in providing cash through ATMs. And since the Central Bank has observed a rising demand for the 50 Riyal denomination based on direct withdrawals from its branches, indicating public need. Consequently, it is crucial for banks to ensure the availability of various denominations according to the preferences of citizens and residents.

Therefore, the Central Bank urges banks to study ATM withdrawal patterns and adjust denominations to align with those patterns, especially by adding the 50 Riyal denomination in ATMs with lower withdrawal rates. Banks are also requested to provide these denominations to customers at their branches and to cooperate in this regard within their available resources. Distribution models (1, 2) attached may serve as guidance. Additionally, banks are requested to inform the Treasury and Issuance Department at the Central Bank of any changes made, as deemed necessary to meet beneficiaries' needs. This will allow us to collectively monitor how effectively we respond to the preferences of ATM service users.

In line with the role played by local banks in providing cash through ATMs, and in SAMA's commitment to enhancing the efficiency of cash utilization and meeting the local market's demand for various denominations of banknotes, as well as ensuring a balanced distribution of these denominations to facilitate commercial transactions based on the locations of ATMs, their actual withdrawal rates, and their replenishment schedules, SAMA has conducted a study to redistribute banknote denominations for ATM withdrawals in a manner that meets the needs of both beneficiaries and banks.

The study concluded that the distribution of banknote denominations should be as follows:

First: Banknote denominations for withdrawal transactions should be distributed according to the attached distribution table (Type A) for no less than 10% of the bank's total ATMs. This is intended to cover ATMs with withdrawal rates of less than SAR 2,500 per transaction on a monthly basis.

Second: According to the (Type A) distribution, withdrawals should be in multiples of SAR 50, with a maximum withdrawal limit of SAR 2,500 per transaction, as indicated by the ATM's operational metrics.

Third: Cash denominations should be distributed according to distribution table (Type B) in the rest of the ATMs according to the bank's assessment, provided that withdrawals should be in multiples of 100 riyals and that the maximum limit for each withdrawal should not exceed 5,000 riyals according to the ATM's operational metrics.
Fourth: Banks issuing Saudi Network cards should consider amending the ATM rules to comply with the distribution of (Type A) categories while granting authorization to the host bank for the disbursement process.
Fifth: Banks shall take into account, in the manner they deem appropriate, the selection of what distinguishes (Type A) devices from (Type B) devices.

Therefore, SAMA hopes that all banks, before adopting the above proposal, will provide us with their views by having a representative of the bank attend the meeting of SAMA's Treasury and Issuance Department, which will be held on Sunday 27/06/1424H corresponding to 24/08/2003G at SAMA's head office building.

Type A

Type B

Current

Referring to previous Central Bank directives, the latest of which is Circular No. (19109/BCT/166 dated 21/10/1422H), regarding The Need to Limit Fraud and Manipulation with ATM Cards, Phone Banking, and Online Banking Services, and to ensure banks fulfill their responsibilities in providing these services. Banks are required to educate their customers about the associated risks and have robust monitoring systems and policies to prevent such incidents.

Given the Central Bank's observation of an increasing use of these services by bank customers, the following instructions are issued to banks providing such services and similar ones:

First: A specific annual budget should be allocated for a comprehensive and continuous program aimed at raising awareness among the bank’s customers (especially senior citizens). This program should include information related to the following:

1. Emphasize the importance of protecting the card and PIN, avoiding writing it on the card or keeping it in the wallet, and stressing the customer's responsibility in this regard.
2. Enable the customer to choose their own PIN and raise their awareness to avoid selecting easy numbers or numbers related to birth dates, phone numbers, or national ID cards.
3. Provide clear steps for the customer to follow in case of card loss, theft, or damage.

These details can be communicated to the customer through various methods chosen by the bank, including:

• General instructions on how to use the card and the importance of safeguarding it and the PIN, sent with the card to new customers.
• Displaying brief messages and tips to customers when using ATMs.
• Distributing brochures and leaflets to customers or through various media channels.
• Through monthly account statements or direct communication, whether by phone or through branch employees.

Second: Regularly review and update monitoring systems and procedures as needed. These procedures must include advising bank customers to choose a different PIN for telephone banking services than the one used for ATMs, point-of-sale devices, and internet banking. Customers should also be reminded not to disclose their PIN.

Third: Implement the necessary technical measures to ensure that the full account number (or ATM card number) does not appear on ATM receipts provided to customers when conducting transactions.

Fourth: In general, the bank’s management is responsible for reviewing fraud cases, whether they result in financial losses or other non-financial damages, and reporting them to the Central Bank. These cases may indicate larger-scale fraudulent activities.

It is worth noting that the Central Bank issues such directives to protect the bank and its customers. The bank must make every effort to resolve all disputes with its customers without delay. Failure to comply with any of the Central Bank’s instructions or similar directives will result in the bank being held accountable.

We request the implementation of all these measures and adherence to them. Please confirm receipt of this circular.

As you well know, since the operation of SPAN on 20-5-1990, SPAN has been witnessing steady development, in terms of daily operations, ATM expansion and card holders, which clearly indicates the success and importance of these services.

In our desire to see all the banks respond adequately to this expansion, we hope you provide us continuously at the end of each month with the necessary statistics in accordance with our circular No. BC/223 dated 16-5-1409 (26-12-1988), showing a general picture of the financial operations executed by ATMs.

We also hope that you make sure the bank ATM network is compatible with SPAN specifications for the purpose of expanding the client services and realize the benefit of all parties concerned.

As you well know, the banks have established ATM to serve the clients and avail them with the opportunity of withdrawing from their accounts at any time and place. This was supported by the creation of SPAN jointly by SAMA and the banks, which enabled all clients to use any ATM belonging to a bank member of SPAN anywhere in the Kingdom. This is certainly a good step in serving the clients which fulfills their need for cash at any time and place, specially when the banks are closed. It also plays an effective role in reducing the rush on banks.

In view of the importance of keeping the clients assured that cash is always available at ATMs, and since it was noticed by SAMA that this is not always the case, and to avoid unpleasant consequences, we call on all banks to double their efforts to keep the machines adequately supplied with cash at all times, including Thursdays and Fridays, and always operative. The present situation may require the banks to continuously check on these machines and feed them with cash.

Please be informed and act accordingly.

Reference the authorization by SAMA of some banks to use in branch and off-site ATMs, we hope you observe the following:

1. ATMs should be operative for 24 hours daily.
2. Daily withdrawal should not exceed SR 5,000 in cash and 10,000 in traveler checks or the equivalent of SR 10,000 in foreign currencies at ATMs in sea and airports.
3. Daily withdrawal in cash and traveler checks should not exceed SR 10,000 per person in 24 hours
4. Only checks, not cash, can be deposited at ATMs by the card holder.
5. Total cash withdrawal, in the event of multiple credit cards, should not exceed SR 5,000 from one single account.
6. ATMs should not be used to transfer funds from one account to the other unless both are for one person.
7. The installation of off-site ATMs requires the prior approval of Saudi Central Bank.
8. Banks must provide Banking Control with monthly statistics as per attached form.

Bank Name : _______________________________________________________________________________________________

Department Concerned ___________________________________________________________________________________

ATM Yearly Statistics

Report date : _______________________________________________________________________________________________

I. A C C O U N T S

I.1 ANNUAL FORECAST :

(To be submitted annually for the next five (5) years)

Bank Name :  ____________________________________________________________________________________________________________________________

Department Concerned     ______________________________________________________________________________________________________________

ATM Monthly Statistics

for the (Gregorian) month of     _________________________________________________________________________________________________________

Report date :      _________________________________________________________________________________________________________________________

I.2 CUSTOMERS STATISTICS

II. A T M ' s

II. 1 CURRENT DIRECTORY BY LOCATION (INSTALLED OR PLANNED)

III. TRANSACTIONS

III.1. ATM TRANSACTIONS PROCESSED

III. 2 PERFORMANCE DATA

1. Last month's average transactions:
   1. per ATM _______________________________________________________________________________________________________________________
   2. per CARD ______________________________________________________________________________________________________________________
2. Maximum transactions at an ATM last month _____________________________________________________________________________________
3. Average Cost per ATM last month _________________________________________________________________________________________________
4. Average Cost per transaction last month __________________________________________________________________________________________
5. Average total transaction time (from card insertion till completion) last month __________________________________________________
6. Average system response time last month ________________________________________________________________________________________
7. Average amount in withdrawal transactions last month __________________________________________________________________________
8. Absolute average uptime last month _____________________________________________________________________________________________
9. Total number of problems acted upon at network control last month ___________________________________________________________
10. Peak time : from _______________ HRS to ___________________________ HRS.

Based on the keenness and interest of SAMA to encourage everything that would develop the banking sector and the services it provides, and given the possibility of providing the service of feeding ATMs by licensed local security companies, and the desire of local banks to enter and participate in this service by filling cash containers and assigning security companies to transport these containers from the bank and enter them into ATMs at the bank's responsibility regarding the cash they contain, as well as the contents of ATMs From inks, customer receipt papers, ATM tape paper and cards held inside the machine, SAMA does not mind that, provided that the bank follows up and provides its service providers with them and verifies the application of the instructions of SAMA, and considers the bank the first and last responsible towards SAMA in the application and implementation of those instructions to reach the greatest degree of security, and in a way that preserves the rights of the bank with the providers of this service and provides the best services to customers benefiting from banking services, in accordance with the standards and controls The following procedural, regulatory and technical procedures:

First: - Approval of SAMA

 Banks are obliged to submit to SAMA draft agreements for the implementation of this service with the concerned companies and attach them the detailed procedures for feeding ATMs, before starting to contract with service providers for study and approval by SAMA. 

Second: Regulatory Procedural Standards and Controls: 

1. Implementing the provisions of SAMA Circular No. 8187/MT/336 dated 7/6/1419 H, which includes circulars on the controls of money transfer, and No. 17989/MT/778 dated 17/11/1420 H, to which the executive regulations governing the practice of the activity of transferring funds and precious metals are attached. 
2. The transport of cash containers shall be carried out by armored vehicles in accordance with the technical specifications set forth in the Security Safety Manual issued pursuant to SAMA Circular No. 485/MA/36 dated 7/1/1416H (the part on the procedures for transporting cash for commercial banks and transport companies).
3.  Implementing the instructions of SAMA notified pursuant to Circular No. 6898/MT/287 dated 4/5/1420 H on the procedures and controls to be followed when carrying out the maintenance of ATMs.
4.  Comply with the provisions of SAMA Circular No. 12327/MT/550 dated 26/8/1419 H, which stipulates the need to coordinate and inform the security authorities when transferring funds.
5.  Banks must ensure that the cash containers are sealed before handing them over to the company, exclusively for legal liability, so that a metal or plastic strip is placed with a special number that is closed by those responsible for packing cash containers and is opened only by those responsible for cash containers in banks, after making sure that the metal or plastic strip number matches and then opened by them. 

Third: Technical Standards and Controls: 

1. Banks must ensure that the concerned companies pay attention to the level of service provided through ATMs, and provide the necessary training to those in charge of feeding and maintaining ATMs, whether through banks or ATM suppliers.
2.  Banks should oblige these companies to quickly deliver packed and also used cash containers, strips of inventoried machines and retained cards to banks, in order to speed up the matching process, pay the existing increases, and speed up the return of the issued retained cards according to the procedures regulating this in the Saudi Payment Network Guides. 
3. The banks shall be responsible for the application by the concerned companies of the controls and procedures for feeding the ATMs notified to all banks under the following SAMA circulars No. 19886/MT/214 dated 01/08/1414 H, No. 2193/MT/102 dated 13/02/1419 H, and No. 11843/MT/588 dated 24/9/1415 H, provided that banks are responsible for informing companies of any developments received from SAMA on these controls and procedures.
4.  The bank shall monitor the performance of its ATMs and the principal to fill them with cash containers for these companies and ensure the availability of cash and all the contents of ATMs such as inks, customer receipt papers and ATM tape paper.
5.  Banks should be responsible for managing cash in ATMs and determining the amounts required for each ATM by analyzing the number and amounts of transactions in each ATM. 
6. Obliging banks to place the new denominations of banknotes in implementation of SAMA's circular No. 18765 / QA / 817 dated 02/12/1420 H to provide the denomination of two hundred riyals in all ATMs of all local banks. 
7. The money transfer company has the right, in the narrowest limits, to keep a number of cash containers in the event that they cannot be replaced within the specified time, provided that the conditions for retention and the number of containers are included in the draft agreements submitted to SAMA.

SAMA has recently received some fraud cases related to ATM cards issued by banks operating in the Kingdom, and after considering these cases, it was noted that most banks do not focus on some security aspects related to the information of these cards and ATMs, which facilitated the occurrence of these fraudulent operations. Therefore, SAMA stresses the need to adhere to the security aspects of operations and cards, as well as the ATMs recorded in the Saudi Payment Network guides, and out of SAMA's keenness not to spread the phenomenon of fraud in bank cards in order to preserve the rights of customers and banks alike, it is necessary to adhere to the following:

First: Not allowing ATM cardholders to exceed the maximum daily withdrawal limit (5000 riyals), whether through ATMs or other banks' devices, correcting the status of any card that allows withdrawals to exceed this limit, and not submitting requests to SAMA to exceed this limit for any category of customers, whatever the reasons.

Second: Follow the security safety means related to concealing the electrical current wires of the ATMs in a tight manner to prevent users from accessing and seeing them, and making the necessary technical procedures in the bank's ATM system to prevent the reversal of the operations carried out by the ATMs after the power outage of the ATM used. 

Third: In the event that two or more devices are installed in close proximity, users cannot see others while entering passwords when performing operations on these devices, and security and control tools such as cameras are provided at ATM sites. 

Fourth: Ensure that the inventory of the contents of the ATMs is carried out in the presence of at least two people, and the bank must follow up the team in charge of this through inventory forms and ATM reports and make the necessary adjustments resulting from the inventory, whether on the accounts of the bank's customers or customers of other banks directly. 

Fifth: Making the necessary technical measures to prevent the full number of the exchange card from appearing in the receipt given to the cardholder after conducting automated teller operations to avoid the use of customer card numbers by other people.

 Sixth: Working to raise awareness among the bank's customers of the importance of maintaining the ATM card password and not writing it. 

For your information, adopt and abide by it.

Based on the powers granted to SAMA under its Law issued by Royal Decree No. (M/36) dated 11/04/1442H, and the Banking Control Law issued by Royal Decree No. (M/5) dated 22/02/1386H, and in line with SAMA's efforts to establish a regulatory and supervisory framework for ATM licensing.

Attached are the ATM Instructions, which aim to encourage the geographical distribution of the ATM network to ensure coverage in all areas, in addition to establishing a supervisory framework for the licensing and license cancellation of ATMs.

For your information and action accordingly as of this date. Please note that these instructions replace SAMA's previous instructions regarding the licensing and license cancellation of ATMs as outlined in earlier circulars.