How does a mada payment work?
The shopper enters their mada card number, expiry date and security code at checkout, or pays with a wallet that holds the card. The acquirer sends the transaction to the mada switch, which routes it to the issuing bank. For online payments the issuer authenticates the shopper through 3-D Secure, usually with a one-time code sent to the phone registered with the bank. The issuer approves or declines and the result comes back within seconds. Captured payments are settled to the merchant in SAR by the acquiring bank under its agreement. SAMA describes the network as linking POS terminals, ATMs and e-commerce sites to a central system that routes each transaction to the card issuer, with payments completed in seconds. The network dates back to 1990 and also offers mada Pay, an Android app for contactless payments.
Why does mada matter for merchants?
mada is how Saudi residents pay with their bank accounts, and online use is growing fast. SAMA data reported by Arab News showed e-commerce spending on mada cards of SAR 23.27 billion in April 2025, up 57% on a year earlier, across more than 132 million online transactions. By July 2026 the monthly figure had reached SAR 37.6 billion, according to SAMA’s monthly bulletin as reported by Saudi Gazette, and the second quarter of 2026 totalled SAR 101.4 billion, up 32.3% on a year earlier. Those figures cover mada cards and wallets linked to them and exclude credit cards on international networks, which shows how much of Saudi online spending runs on debit. The network is also open beyond banks: since 2021 non-bank firms such as STC Pay have issued mada cards. A merchant that only accepts Visa and Mastercard credit cards, or that sends mada cards through the wrong path, leaves a large share of Saudi shoppers with a declined payment or no option at all. For e-commerce and digital goods selling into the Kingdom, mada support is a basic requirement, not an extra.
What can go wrong?
Many mada cards also carry a Visa or Mastercard brand, and which network processes a payment depends on how the acquirer is set up. Routing a co-badged card the wrong way can change cost and approval results, and some cross-border acquirers cannot process mada at all, so domestic shoppers see unexplained declines. 3-D Secure is another failure point: codes that do not arrive, timeouts on the bank’s challenge page, and shoppers who abandon at authentication. Debit cards also decline on insufficient balance and on daily online limits set by the bank. Checkout.com notes that mada does not support partial captures, so every mada payment must be captured in full, and that 3-D Secure and the card security code are required for customer-initiated mada payments in Saudi Arabia. Refunds return to the card but depend on the acquirer’s processing time, which shoppers sometimes read as a lost refund. Under the mada operating rules a partial refund must be sent as one refund transaction, in the original currency, and for no more than the original amount.
How would Omno handle mada?
Omno detects mada cards by their card number range and applies provider eligibility rules so that they are routed only to providers that process mada domestically. The merchant’s routing rules choose among those providers, for example by customer group or amount, and if a provider is unavailable or rejects the request, the payment moves to the next provider in the rule until one accepts. Cards are tokenized so returning customers can pay again without re-entering the number, where the provider supports it. The hosted checkout runs the 3-D Secure step, and the final status reaches the merchant by webhook, which is the source of truth. The routing-decision log shows which provider handled each payment and why.