What is National Card Scheme?
The country-operated card-payment scheme that processes domestic transactions on sovereign rails — mada in KSA, KNET in Kuwait, OmanNet in Oman, the UAE national scheme in the Emirates.
Also known as
National Card Scheme — explained.
A national card scheme is a country-operated payment-network surface that processes domestic card transactions on sovereign rails rather than routing through international networks for in-country payments. Every GCC country runs one (KSA, UAE, Kuwait, Oman, Bahrain, Qatar each have their own). The scheme issues cards, certifies acquirers, and enforces national-level interchange + settlement rules. International cards (Visa, Mastercard) typically co-badge with the national scheme so a single card works domestically on the local rails and internationally on the international rails. For any operator running payments in the GCC — banking branches, parking, retail kiosks, government fee collection — terminal integration must speak the national scheme's protocol (typically a country-specific EMV profile + back-end host messaging spec) in addition to Visa / Mastercard. Payment terminal vendors (Ingenico, PAX, Verifone) all support the national schemes through certified terminal stacks; the operator's integration must call the terminal in the country-specific mode, handle the scheme's settlement file format, and reconcile against the national scheme's daily report. Zeour describes patterns rather than naming specific scheme brands in editorial copy.
Why operators care about national card scheme.
A QMS, kiosk or parking platform that cannot transact on the national card scheme is unusable in GCC retail / banking / parking deployments. Public-cloud-only payment products often skip the scheme certification because it requires country-specific work; sovereign on-prem platforms that integrate via the operator-owned terminal stack are scheme-native by default.
Buyer's checklist
- Terminal integration certified for the country-specific national scheme
- Co-badged international + national scheme handling (single tap, right rails)
- Scheme-specific settlement file format ingestion + reconciliation
- Daily reconciliation against scheme-issued report + operator acquirer report
- Terminal-agnostic — operator can swap Ingenico / PAX / Verifone without code change
Zeour solutions that operate on this layer.
Verticals where national card scheme is operationally critical.
Blog posts that go deeper on national card scheme.
Adjacent definitions to read next.
Sovereign Deployment
Sovereign DeploymentSoftware that runs entirely inside the operator's perimeter — their hardware, their network, their backups, their keys — with no third-party dependency for continued operation.
PDPL
Compliance & DataPersonal Data Protection Law — the data-protection regime in Saudi Arabia (and equivalents in the UAE and several Gulf states).
NCA ECC
Compliance & DataThe Saudi National Cybersecurity Authority's Essential Cybersecurity Controls — a 114-control mandatory baseline for in-scope organisations in the Kingdom.
Air-Gapped Deployment
Sovereign DeploymentA system deployed on a network with no physical or logical connection to the public internet — the strictest form of sovereign deployment.
BYOK (Bring Your Own Key)
Sovereign DeploymentA deployment model where the operator supplies and controls the encryption keys protecting their data — the vendor cannot decrypt without operator co-operation.
Data Residency
Sovereign DeploymentA requirement that personal or regulated data is stored, processed, and backed up within a defined jurisdiction — usually a country or a treaty bloc.
National Identity Gateway
Sovereign DeploymentThe country-operated identity-federation surface citizens use to prove who they are to public + private services — typically over OIDC against a sovereign-hosted gateway.
RSA-Signed License Gate
Sovereign DeploymentA sovereign anti-fraud + anti-piracy pattern where each edge device boots only if a cryptographically-signed licence file (RSA-SHA256) validates against an embedded public key + MAC-address allowlist — no daily phone-home required.
Talk to a Zeour engineer.
A 30-minute scoping call to walk your operational profile against where national card scheme actually sits in your stack, then a fixed-fee Discovery price by the end of the call.