What Geidea's New Certifications Actually Buy It in a 65%-a-Year Market

In payments infrastructure, the biggest wins rarely look like news. They look like a compliance status changing from pending to certified.

On September 20, Geidea announced two of those status changes at once. The company obtained eMSP certification under Saudi Arabia's National Payment Gateway, covering the mada, Visa, and Mastercard networks. Separately, GeideaSoftPOS obtained MPoC certification, the security standard that governs whether a smartphone can legally be used to accept live contactless card payments. Founder and chairman Abdullah Al-Othman posted that the milestone reflects the strength of Geidea's technical infrastructure and thanked the Saudi Central Bank, SAMA, for its role in building the payments ecosystem, calling it an important step with more to come.

Neither certification is glamorous on its own. Together, and set against what is happening to transaction volume in Saudi Arabia right now, they are worth more than they look.

What eMSP Certification Actually Buys

Fact: eMSP accreditation under the National Payment Gateway lets a company connect directly into Saudi Arabia's domestic card rails, across mada, Visa, and Mastercard, to process e-commerce transactions natively, rather than routing through a separate certified gateway. Geidea is not the only company that holds this. HyperPay and Mastercard Gateway have secured the same National Payment Gateway accreditation, and SAMA has issued payment gateway and PTSP licenses to several other providers as part of a broader e-commerce payments interface program under Vision 2030 to standardize how online payments connect to the national rails.

SOOGK Analysis: This certification is becoming the entry ticket for competing in Saudi e-commerce processing at all, not a feature that separates Geidea from its rivals. That is not a weakness in the announcement. It means the real competitive question moves one level up, from "who is certified" to "who built the most useful thing on top of the access once they had it." Geidea now gets to compete on that question. It could not compete on it at all before this.

What MPoC Certification Actually Buys

Fact: MPoC, the PCI Security Standards Council's Mobile Payments on COTS standard, certifies that a tap-to-phone payment solution meets the card industry's security requirements for accepting contactless payments on an ordinary commercial smartphone. Independent PCI-recognized labs test a solution against the standard before it can be listed as compliant for commercial deployment. Without it, a SoftPOS product can be piloted or demonstrated, but it cannot be sold to merchants as a fully compliant way to accept live card payments at scale.

SOOGK Analysis: This is the certification that turns a phone into a legally deployable card terminal, not a pilot running under a partner's compliance umbrella. Geidea first introduced tap-to-phone acceptance in Saudi Arabia in 2021, through a bank partnership. MPoC certification lets GeideaSoftPOS now stand on its own compliance footing across the market, five years into building toward exactly this. It is the difference between a product that works and a product a merchant can be sold, supported, and audited on at national scale.

The Market Context That Makes the Timing Work

Fact: E-commerce transactions processed through mada cards reached SAR 325.2 billion in 2025, up from SAR 197.4 billion in 2024, a 65 percent increase. The number of mada e-commerce transactions rose from 1.13 billion to 1.77 billion over the same period, a 56 percent increase in volume. Electronic payments reached 85 percent of total retail transactions in Saudi Arabia in 2025, up from 79 percent in 2024, according to SAMA.

SOOGK Analysis: A certification secured in a flat market is a compliance checkbox. The same certification secured while the underlying transaction base is compounding at 55 to 65 percent a year is operating leverage. Every merchant Geidea processes natively through these rails is worth more this year than it would have been last year, and the direction of the two lines, e-commerce volume and cashless share, both point the same way through 2030. Timing access to coincide with that curve is not something a press release can manufacture after the fact. The technical and compliance work has to be finished before the volume shows up, not after.

The SOOGK Take

The headline fact in this story is not that Geidea got certified.

It is that Geidea got certified for e-commerce rails and commercial SoftPOS acceptance in the same window that both categories are compounding at more than 50 percent a year in Saudi Arabia's own transaction data.

That combination is worth more than either certification on its own, and it is not a coincidence a company can claim credit for after the fact. It only works if the compliance and engineering work was already sitting finished, waiting for the market to catch up to it.

The transferable lesson for anyone building infrastructure in a regulated, fast-growing market isn't that certifications make headlines. It's that they are only worth building ahead of demand, not in response to it. The door has to be open before the market walks through it, because a door built after the rush has already passed is just an announcement.

Figures on National Payment Gateway certification, MPoC standards, and e-commerce transaction growth are drawn from Geidea's own public statements, PCI Security Standards Council documentation, and reporting cited below.