Strategy

6 min read

Designing fintech in the Gulf: what regulated products demand

Most design advice assumes you can remove steps, defer decisions and let people explore. Financial products in this region allow much less of that. Identity has to be verified, disclosures have to appear, and some friction is not a failure of design — it is the requirement.

That does not mean regulated products have to feel bureaucratic. It means the craft moves somewhere else.

Onboarding is the product

For most consumer apps, onboarding is a hurdle before the value. In regulated finance it is frequently the single largest determinant of whether anyone becomes a customer at all, and it is where the most drop-off happens.

The instinct is to shorten it. Often you cannot. What you can do:

  • Sequence for confidence, not speed. Ask the easy, low-commitment things first. A form that opens by demanding a passport scan loses people who would happily have finished.
  • Explain why, at the moment you ask. "We need this because the regulator requires it" converts better than silence, and far better than a help article.
  • Let people stop and resume. Documents are rarely to hand. An onboarding that cannot be paused is an onboarding that gets abandoned at the filing cabinet.
  • Design the rejection. Somebody will fail verification. What they see next determines whether they try again or tell their friends it does not work.

Errors are not edge cases

In a consumer app, an error state is an afterthought. In a financial product, the error states are most of the experience: declined payments, expired documents, mismatched names, limits exceeded, sessions timed out on a slow connection.

Each of those is a moment where someone is deciding whether to trust you with money. They deserve the same attention as the happy path, and they rarely get it, because the happy path is what gets presented in the review.

Trust is built with specifics

Financial interfaces reach for the same vocabulary — shields, padlocks, the words "bank-grade". None of it means anything to a sceptical user, because every competitor says it too.

What does work is specificity. Showing the actual regulator and licence. Naming what happens to the money and when. Showing a real transaction reference. Concrete detail signals competence in a way reassurance never does.

Numbers, Arabic, and the details people miss

Bilingual products in this region have a particular set of traps, and financial products hit all of them:

  • Numerals. Arabic-Indic and Western digits both appear in the region. Which you use, and whether it is consistent across statements, inputs and receipts, is a decision — not a default.
  • Right-to-left does not mean mirrored. Numbers, currency and account identifiers do not simply flip, and a layout that mirrors everything produces statements nobody can read.
  • Names. Legal names in the Gulf are frequently longer than Western form fields expect, and truncating somebody's name on a financial document is not a cosmetic bug.

Where the work actually pays off

The design effort in a regulated product is concentrated in places that never appear in a portfolio: the fourth screen of onboarding, the declined state, the document re-upload, the statement layout.

That is unglamorous and it is where the conversion is. We have worked on financial and government-facing products including Qatar Development Bank and the Federal Tax Authority, and in both the interesting design problems were in the parts most teams treat as plumbing.

If you are building something in this space, the questions we get asked most covers how we scope, and our product audit is a contained way to find out where a regulated flow is losing people before committing to a rebuild.

From here

Still deciding what to build?

Most of our projects begin with a question about scope rather than a finished brief. A product audit is the cheapest way to answer it before committing a budget.

Recommended for you

Privacy settings

We use cookies to help our site work and to understand how visitors use it. Some are essential for core functionality and security; others — analytics and advertising — are only used with your consent.

E