What is Nafith and Makken screening in Saudi Arabia?

Nafith carries court orders to Saudi capital market firms through the CMA. What Nafith and Makken screening is, how it differs from sanctions screening, and how a firm acts on each order.
A Nafith order as a firm sees it: an order number, the subject's ID number, the request type "Disclosure and seizure" and an amount, beside the four actions an order can ask for.

Key takeaways

  • Nafith (نافذ) is an electronic link that the Capital Market Authority (CMA) built with the Ministry of Justice. Since 2016, execution judges use it to send orders to capital market institutions [1][2].
  • An order tells the firm to disclose a client's securities and funds, seize them, lift a seizure, or execute on them for the court [1].
  • Each order names its subject by an ID number, so the firm matches on the ID, not only on the name [3].
  • Makken (مكّن) is a second Saudi order list. CMA-licensed firms screen it the same way as Nafith [3].
  • This is a different job from sanctions screening, which matches names and their spellings against UN and Saudi sanctions lists [5].
  • A new Enforcement Law takes effect on 28 October 2026. Orders issued before that date stay valid [4].

The short answer

Nafith and Makken screening is how a CMA-licensed firm in Saudi Arabia checks its clients against two Saudi order lists, and then carries out each order that names a client. Nafith is the CMA's electronic link with the Ministry of Justice. Execution judges use it to send orders to capital market institutions and to the market: disclose a client's securities and funds, seize them, lift a seizure, or execute on them [1][2]. Makken is a second order list that firms receive and screen the same way [3]. A match the firm misses is an order it does not carry out.

What is Nafith?

Nafith is a system the CMA developed to link it electronically with the Ministry of Justice [1]. Execution judges issue judicial orders through it. The orders reach the CMA, the capital market institutions that hold investors' accounts (the CMA's "Authorized Persons"), and the Saudi Exchange (Tadawul) [1]. The ITU's record of the project also names the Securities Depository Center among the parties [2].

The orders cover four actions [1][2]:

  • Disclosure. Tell the court what securities and funds the person holds.
  • Seizure. Freeze those securities and funds.
  • Lifting a seizure. Release what was frozen.
  • Execution. Take securities and funds to pay the debt. The money goes by wire transfer to the IBAN of the court's Execution Circle [1].

The link started in early 2016 and was launched officially during Ramadan that year. Paper orders from the Execution Circles stopped in July 2016 [1][2]. By the end of July 2016 the CMA had received 36,657 electronic orders. It said the average time to execute an order fell by up to 85%, from 20 to 25 business days to 3 to 5 working days [1].

Two other things in Saudi Arabia have a similar name. The Ministry of Justice runs a platform also called Nafith, for creating and managing enforcement instruments electronically [6]. Nafath (نفاذ) is the national digital identity app from the National Information Center, used to sign in to online services [7]. Neither of them is the CMA's order link.

Where the orders come from

Nafith orders come from execution courts. These courts enforce judgments and other enforceable instruments under Saudi Arabia's Enforcement Law. When a debtor does not pay, the court goes after the debtor's assets: it orders them disclosed, traces them and attaches them [4]. When those assets are securities or funds held with a capital market institution, the order travels to the firm through Nafith [1].

The law is changing. A new Enforcement Law, issued by Royal Decree M/237, was published in the Official Gazette on 1 May 2026. It takes effect on 28 October 2026 and replaces the law issued in 2012 by Royal Decree M/53. Judgments, orders and decisions issued before 28 October 2026 remain valid [4]. Under the new law, enforcement goes first at the debtor's assets, through disclosure, asset tracing and attachment. Travel bans become a last resort [4].

What is Makken?

Makken (مكّن) is the second Saudi order list that CMA-licensed firms screen next to Nafith [3]. In practice it works the same way. The firm receives a list of orders. Each order names a person or a company by ID number and says what to do. The firm checks every client against the list and carries out each order that matches.

Do not confuse it with Makken FinTech, a programme that SAMA and the CMA launched in December 2023 to support 150 fintech start-ups over three years [8]. Most web searches for "Makken" return that programme, not the order list.

How a Nafith order reaches a capital market firm: the execution court issues it, the CMA's Nafith link carries it, the firm that holds the client's account matches it to the client, and the firm discloses, seizes, lifts or executes.
How a Nafith order travels, from the execution court to the firm that holds the account.

How is it different from sanctions screening?

Both are screening, and a CMA-licensed firm must do both. But they answer different questions.

  • Who issues the list. Sanctions lists come from the UN Security Council and the Saudi national sanctions lists [5]. Nafith orders come from execution courts, through the CMA [1].
  • Who is on it. A sanctions list names people and groups designated for terrorism or for the spread of weapons of mass destruction and its financing [5]. A Nafith order names a person or company in an enforcement case, often a debtor who has not paid [1][4].
  • How a firm matches. The CMA's sanctions rules require automated, real-time matching that catches names, aliases, spelling variations, names that sound alike and transliterations [5]. A Nafith order carries the subject's ID number, so the firm matches on the ID [3].
  • What a match means. A confirmed sanctions match means a freeze without delay, which the rules define as within hours [5]. A Nafith match means doing what the order says: disclose, seize, lift or execute [1].
  • What sets the duty. Sanctions screening rests on the CMA's Targeted Financial Sanctions Implementation Rules of December 2025 [5]. Nafith orders rest on the Enforcement Law and the court's order [4].

For the sanctions side in full, read our guide to sanctions screening for CMA-licensed firms.

What a firm does with each order

The CMA's public pages describe what Nafith carries, not a step-by-step procedure for firms. In practice, the work runs in five steps:

  1. Take in each new list as it arrives. A list that waits in an inbox is an order that waits.
  2. Match every order against every client. Include prospects and the people linked to company clients, such as shareholders, board members and signatories. Match on the ID number, then use the name to confirm.
  3. Act on each match. Carry out what the order asks: disclose holdings, seize securities and funds, lift a seizure, or execute and wire the money to the Execution Circle's IBAN [1].
  4. Keep orders in their chains. A lift order ends an earlier seizure. Link the two, so the client's status shows what is still in force.
  5. Keep the record. Record each list, each match, what the firm did and who did it, so an inspector can follow every order from start to finish.

Why matching on the ID number matters

An order names its subject by ID type and ID number [3]: a national ID, an iqama or a commercial registration number, for example. Matching on that number avoids the guesswork of Arabic names written in Latin letters, where one name can have many spellings.

It only works if the firm's own records are right. Every client and every linked party needs a current, verified ID on file. The CMA's Investment Accounts Instructions already require this: firms obtain and verify a Saudi client's national ID information when opening an account, ask clients to update their data when an ID expires, and review the need for updates at least once every five years [9]. A wrong or expired ID number on file means a missed order. Our guide to choosing a CMA-compliant KYC platform covers how to keep that data current.

Sanctions screening and Nafith and Makken screening side by side: who issues the list, who is on it, how a firm matches, and what a match means.
Sanctions screening and Nafith and Makken screening, side by side.

How Ayn handles Nafith and Makken

Ayn is Dal's compliance platform. As described on getdal.sa, it covers the points above like this:

  • Both lists, automated. Ayn automates Nafith and Makken alongside 2,700+ international watchlists, global sanctions, PEP lists and adverse media [10].
  • Saudi lists in one pass. It also screens against the Ministry of Interior, the Ministry of Finance, SAMA's shared lists and circulars, and other Saudi lists [3][10].
  • Linked parties. Associations are synced, screened and linked in real time [10].
  • Continuous screening. Monitored clients are re-screened as lists change, not only at onboarding [3].
  • Arabic names. An Arabic-first matching algorithm cuts false positives on Arabic names and transliterations [3].
  • Reports and records. Ayn generates no-match reports for CMA entities automatically and logs every screening decision for inspection [3][10].

Some work stays with your people in any system: reading each order, deciding what it asks for, and carrying out a seizure or a transfer on time.

To see Ayn screen your client base against Nafith and Makken, Book a Demo at getdal.sa.

Frequently asked questions

What is Nafith in Saudi Arabia?

Nafith (نافذ) is the electronic link between the Capital Market Authority and the Ministry of Justice. Execution judges use it to send orders to disclose, seize, lift a seizure on, or execute on investors' securities and funds. It has carried these orders since 2016 [1][2].

Is Nafith the same as Nafath?

No. Nafith (نافذ) is the CMA's link for court orders. Nafath (نفاذ) is the national digital identity app from the National Information Center, used to sign in to government and private services [7]. The Ministry of Justice also runs a separate Nafith platform for enforcement instruments [6].

What is Makken?

Makken (مكّن) is the second Saudi order list that CMA-licensed firms screen next to Nafith. It works the same way: each order names a person or company by ID number and says what the firm must do [3]. It is not the Makken FinTech programme for start-ups [8].

Who has to screen against Nafith and Makken?

Capital market institutions licensed by the CMA. Nafith orders reach them through the CMA [1]. A firm that holds client accounts must check its clients against each list and carry out each order that matches.

How is Nafith screening different from sanctions screening?

Sanctions screening matches names and their spellings against UN and Saudi sanctions lists, and a match means a freeze within hours [5]. Nafith screening matches ID numbers against court orders, and a match means doing what the order says [1].

Should a firm match Nafith orders by name or by ID number?

By ID number first. Orders carry the subject's ID number [3]. The name confirms the match, but Arabic names can be written in Latin letters in many ways, so a name alone can miss a match or create a false one.

What changes with the new Enforcement Law on 28 October 2026?

The new law, issued by Royal Decree M/237, replaces the Enforcement Law of 2012. Orders issued before 28 October 2026 stay valid. Enforcement goes first at the debtor's assets, through disclosure, tracing and attachment, and travel bans become a last resort [4].

Does Ayn automate Nafith and Makken?

Yes. Ayn automates Nafith and Makken alongside 2,700+ international watchlists, and generates no-match reports for CMA entities automatically [3][10].

Sources
  1. Capital Market Authority, "CMA: Project "Nafith" with Ministry of Justice Increases Level of Confidentiality of Data and Reduces Time of Executing Judicial Orders by 85%", press release, 17 August 2016. https://cma.gov.sa/en/MediaCenter/PR/Pages/Nafith.aspx (accessed 2026-10-20).
  2. ITU, WSIS Stocktaking, "Nafith System" (Capital Market Authority): electronic connectivity between the CMA, the Ministry of Justice, the Securities Depository Center and the Authorized Persons. https://www.itu.int/net4/wsis/archive/stocktaking/Project/Details?projectId=1515488560 (accessed 2026-10-20).
  3. Dal, "Client Screening & Monitoring" (Ayn), including its Nafith list import and its frequently asked questions. https://getdal.sa/client-screening-and-monitoring (accessed 2026-10-20).
  4. Latham & Watkins, "Saudi Arabia: Adoption of the New Enforcement Law", 25 June 2026. https://www.lw.com/en/insights/saudi-arabia-adoption-of-the-new-enforcement-law (accessed 2026-10-20).
  5. Capital Market Authority, Targeted Financial Sanctions Implementation Rules, issued by Board Resolution 4-163-2025 dated 22 December 2025: Article 1 and paragraphs 3.4 to 3.8 and 5.5. The English text reads "ideally, within a matter of hours"; the Arabic text reads "within hours". https://cma.gov.sa/en/RulesRegulations/Circulars/Documents/Implementing_Rules_on_Targeted_Financial_Sanctions_en.pdf (accessed 2026-10-06).
  6. Saudi Press Agency, "وزير العدل يدشن «منصة نافذ» لإنشاء وحفظ وإدارة سندات التنفيذ إلكترونياً" (The Minister of Justice launches the Nafith platform to create, keep and manage enforcement instruments electronically). https://www.spa.gov.sa/w1309933 (accessed 2026-10-20).
  7. National Information Center, "نفاذ | NAFATH" app listing: "A national digital identity system". https://apps.apple.com/sa/app/nafath-%D9%86%D9%81%D8%A7%D8%B0/id1598909871 (accessed 2026-10-20).
  8. Asharq Al-Awsat, "SAMA, CMA Launch Program to Support 150 Fintech Startups", 19 December 2023. https://english.aawsat.com/business/4737741-sama-cma-launch-program-support-150-fintech-startups (accessed 2026-10-20).
  9. Capital Market Authority, Investment Accounts Instructions, issued by Board Resolution 4-39-2016 and amended by Resolution 1-2-2026 dated 5 January 2026: Articles 4, 6 and 14. https://cma.gov.sa/en/RulesRegulations/Regulations/Documents/Investment_Accounts_Instructions_en.pdf (accessed 2026-10-20).
  10. Dal, "Ayn" technology page. https://getdal.sa/technology (accessed 2026-10-20).
Dal
Dal
Compliance technology and regulatory advisory

See how Ayn handles this

Book a short demo and we will show you how Ayn handles it, on your own data.

More from the blog

All posts
A buyer's checklist for a KYC platform in Saudi Arabia: verification, beneficial owners, risk score, PEPs and sanctions, suitability, refresh and expiry, records, hosting.
Buyer's guides

Choosing a CMA-compliant KYC platform in Saudi Arabia

The CMA does not approve KYC software. What the rules ask of a licensed firm's KYC, and fourteen checks to run before you choose a platform, each marked as a rule or good practice.
Dal
Dal
October 20, 2026
A Nafith order as a firm sees it: an order number, the subject's ID number, the request type "Disclosure and seizure" and an amount, beside the four actions an order can ask for.
Screening

What is Nafith and Makken screening in Saudi Arabia?

Nafith carries court orders to Saudi capital market firms through the CMA. What Nafith and Makken screening is, how it differs from sanctions screening, and how a firm acts on each order.
Dal
Dal
October 20, 2026