Tabby

1.1 Identity, Headquarters, and Business Model

Tabby is a buy now, pay later (BNPL) and consumer financial services platform founded in 2019 in Dubai, United Arab Emirates, by Hosam Arab (CEO) and Daniil Barkalov (CTO/COO). The company originally operated from Dubai but relocated its headquarters to Riyadh, Saudi Arabia, ahead of a planned listing on the Saudi Tadawul stock exchange. As of early 2025, Tabby describes itself as MENA's leading shopping and financial services app, offering four core products: Pay in 4 (interest-free BNPL in four installments), the Tabby Card (a Visa debit card with embedded BNPL capability), Tabby Plus (a subscription rewards programme priced at approximately SAR 19 per month), and Tabby Shop (a product discovery and merchant marketplace surface). The company also offers Tabby Care, a buyer-protection and purchase warranty product. Through its September 2024 acquisition of Tweeq, a Saudi-licensed electronic money institution, Tabby added digital wallet infrastructure that enables spending, sending, and money management. A UAE Stored Value Facility licence was granted by the Central Bank of the UAE on 15 April 2026, extending Tabby's regulated payments footprint into that market. Tabby's core business model earns merchant discount revenue when retailers pay a percentage of each transaction to offer BNPL at checkout. The platform serves consumers in Saudi Arabia, the UAE, and Kuwait, with Saudi Arabia accounting for more than 80 percent of its user base. With 20M+ registered users, 40,000+ merchant partners, and an annualized GMV exceeding $10B as of early 2025, Tabby has achieved significant scale as the dominant BNPL operator in the Kingdom and a major force across the wider MENA region.[CO001, CO002, CO003, CO004, CO005, CO006]

1.2 Founders, Leadership, and Governance

Hosam Arab co-founded Tabby in 2019 after previously co-founding and serving as CEO of Namshi, the Middle East fashion e-commerce platform that was sold to Global Fashion Group. This operational background in regional e-commerce gave Arab first-hand insight into the friction consumers face at checkout, forming the founding thesis for Tabby's BNPL model. Daniil Barkalov, Tabby's CTO and COO, brings the technical infrastructure leadership alongside Arab's commercial and market-development expertise. The founding pair represents a strong founder-market fit for MENA consumer fintech: Arab's Namshi track record created early credibility with regional retailers and investors. Tabby's investor base functions as an informal governance layer given the company's private status. Wellington Management led the Series D, marking institutional quality validation. Mubadala Capital (Abu Dhabi sovereign wealth) and Hassana Investment Company (Saudi pension-fund manager) are material shareholders, bringing Gulf sovereign capital with implicit soft-governance expectations. STV, the Saudi-based VC, and Blue Pool Capital (Hong Kong) also hold meaningful equity stakes. PayPal Ventures invested in Series D, the first Gulf fintech to receive their backing. The board composition and voting-rights structure are not publicly disclosed, representing a key governance gap for investors conducting pre-IPO diligence. Key-person dependency on Hosam Arab is rated high: his public profile, media presence, and operating role are the primary face of the company. Succession depth below the founding duo is not publicly disclosed.[CO011, CO012, CO013, CO014, CO015, CO016]

1.3 Funding History, Valuation, and Capital Structure

Tabby's capital formation journey from a $2M seed in 2019 to a $3.3B Series E in 2025 constitutes one of the most accelerated venture funding histories in Middle East and North Africa fintech. The company raised $2M in seed funding in 2019 from Global Founders Capital, Arbor Ventures, and Wamda Capital. A $7M round in 2020 enabled expansion into Saudi Arabia. The $23M Series A in December 2020 was led by Arbor Ventures and Mubadala Capital, with STV, Raed Ventures, and JIMCO participating. In 2021, Tabby secured $50M in debt from Partners for Growth to fund its receivables book. The $50M Series B in 2022 at a $300M valuation was led by Global Founders Capital and STV, with Delivery Hero as a strategic investor. Series D in November 2023 at $1.5B valuation ($200M raise led by Wellington Management) made Tabby MENA's first fintech unicorn. The Series D was extended in December 2023 with $50M more equity and a landmark $700M receivables securitization arranged by JPMorgan — the largest debt financing ever arranged for a MENA fintech. Series E in February 2025 raised $160M at a $3.3B valuation, led by Blue Pool Capital and Hassana Investment, making Tabby MENA's most valuable VC-backed company. A subsequent secondary share sale in April 2025 reportedly implied a valuation of approximately $4.5B. Total equity raised is estimated at over $410M through Series E. With $700M+ in receivables financing, total capital deployed in support of Tabby's business exceeds $1.1B. An IPO on the Saudi Tadawul is in planning, with JPMorgan, HSBC, and Morgan Stanley mandated as advisers.[CO019, CO020, CO021, CO022, CO023, CO024]

1.4 Scale, Milestones, and Regulatory Progress

Tabby's operational milestones track a consistent growth trajectory across users, merchants, and transaction volume. The company launched in the UAE in 2019 before expanding to Saudi Arabia in 2020, Kuwait shortly after, and also operated in Bahrain and Qatar in its early years. A critical regulatory milestone came in July 2022 when Tabby graduated from the Saudi Central Bank (SAMA) regulatory sandbox, receiving a formal BNPL permit and enabling mainstream operations in the Kingdom's high-growth market. The company reported reaching profitability in consecutive fiscal years. Saudi Arabia subsidiary revenues were approximately $267M in 2024 and grew to approximately $378M in 2025, a 42 percent year-over-year increase, with net profit of approximately $55M in 2025. H1 2025 Saudi subsidiary net profit was SAR 90.4M (approximately $24M), representing 360 percent year-over-year growth. The company passed 10 million users, then 12 million users (as of September 2024 per AGBI), and now claims 20 million registered users as of early 2025. The 40,000 merchant partners figure and $10B+ annualized GMV underpin a network that spans fashion, electronics, groceries, and travel verticals. The Tweeq acquisition in September 2024 was the company's first inorganic move, adding SAMA-licensed e-money capabilities. The UAE Stored Value Facility licence received in April 2026 marks another regulatory first for the company. An adverse event to note is the Series C round amount remaining undisclosed, creating a minor gap in the public funding chronology. Competition from Tamara, another Saudi BNPL player, represents the most material ongoing competitive risk.[CO031, CO032, CO033, CO034, CO035, CO036]

1.5 Exhibits

2.1 Market Definition and Boundary

Tabby competes in the buy now, pay later (BNPL) segment of consumer financial services in the Middle East and North Africa region, with Saudi Arabia and the UAE as its primary addressable markets. The core market includes merchant-funded, interest-free installment payment products at point of sale (POS) or digital checkout, where a retailer pays a merchant discount rate (MDR) to absorb the interest cost and offer a split-payment option to consumers. Excluded from the primary market definition are traditional credit cards (interest-bearing, bank- issued revolving credit), personal loans, deferred debit, and buy-now-pay-later offerings that charge consumer interest. Adjacent markets that are relevant to Tabby's expansion trajectory include: digital wallets and stored- value accounts (addressed through the Tweeq acquisition), subscription financial services (Tabby Plus), consumer rewards and loyalty, and product discovery commerce (Tabby Shop). The status-quo substitute for BNPL in MENA is the combination of cash on delivery (still prevalent in KSA and UAE), debit card purchases, and informal social credit (family lending). Formal credit cards have low penetration relative to developed markets, especially in Saudi Arabia where many consumers are unbanked or underbanked for credit products. This structural gap is the fundamental demand driver for Tabby's model. Adjacent substitutes from a merchant perspective include Afterpay (global, not MENA-focused), Klarna (largely European and US), and regional players Tamara, Postpay, and Cashew. The inclusion perimeter for sizing purposes in this chapter is: (1) BNPL transaction value processed on licensed BNPL platforms in Saudi Arabia and UAE and, separately, (2) the broader MENA addressable market inclusive of Kuwait, Bahrain, and Qatar where Tabby and peers have had or plan presence.[CM001, CM002, CM003, CM004, CM005, CM006]

2.2 Market Sizing — TAM, SAM, and SOM Across Lenses

Multiple sizing lenses produce a coherent picture of Tabby's market opportunity, though estimates vary significantly depending on whether the frame is global BNPL value, MENA BNPL value, or the KSA-specific installed-base number. The most widely cited figure for MENA BNPL is from Research and Markets: $1.4 billion in Saudi Arabia BNPL payments in 2023, growing to $2.7 billion by 2028 at approximately 13 percent CAGR. The AGBI reporting (September 2024) cited this figure directly, making it the primary benchmark for MENA BNPL sizing in coverage reviewed. The global BNPL market context is provided by the same source: a projected market size of $1 trillion by 2028 at 45 percent CAGR, representing a broader framing that includes Klarna's EU and US addressable market. For Tabby's purposes, the KSA figure is the most decision-relevant TAM proxy. Extending that frame: if MENA BNPL (Saudi Arabia + UAE + Kuwait + Qatar + Bahrain) is approximately $2.5–3B total in 2024 (extrapolating the $1.4B KSA figure given KSA represents roughly 50-60% of MENA BNPL volume by share of e-commerce), the MENA-wide TAM for the BNPL layer is approximately $2.5B rising to $5B+ by 2028. Tabby's claimed $10B annualized GMV as of early 2025 appears to represent a substantial fraction of this market already, suggesting Tabby's SOM already captures a significant share of the installed BNPL base. This would imply very high current market penetration of the BNPL-specific installed base, consistent with Tabby being the category leader. However, the broader SAM framing matters: if one includes all consumer e-commerce checkout spend as potential GMV (i.e., all purchases that could theoretically be BNPL-eligible), the Saudi Arabia e-commerce market alone was approximately $12B in 2023 (various estimates), implying significant ongoing headroom for BNPL penetration from a minority of checkout transactions to a majority. Conflicting estimates exist and should be preserved: Research and Markets' $1.4B Saudi BNPL in 2023 appears conservative relative to Tabby's own GMV claim of $10B+ (which spans KSA, UAE, and Kuwait), suggesting either the Research and Markets figure uses a narrower BNPL definition, or Tabby's $10B is an overstatement, or the market has grown faster than projected.[CM007, CM008, CM009, CM010, CM011, CM012]

2.3 Buyer and Segment Map

The BNPL market in MENA has two distinct buyer segments that Tabby must win simultaneously: consumers and merchants. Consumer adoption is driven primarily by young adults (18–35) who lack credit cards but have smartphones and online shopping habits. Saudi Arabia's population skews young — approximately 70 percent under 40 — and has one of the world's highest smartphone penetration rates, creating a structurally receptive consumer audience. The consumer BNPL use case is strongest in fashion (primarily female consumers buying apparel) and electronics (male-skewing high-ticket items), consistent with Tabby's reported top categories. UAE consumers are more likely to already hold credit cards due to the higher proportion of expatriate workers with formal banking relationships, slightly moderating the BNPL structural advantage compared to KSA. Merchant adoption is driven by conversion rate uplift and average order value increase at checkout. Retailers offering BNPL typically see 10–30% higher conversion versus credit-only checkout according to global BNPL operator disclosures, with average order value increases of 20–50%. For MENA merchants — particularly in fashion and electronics where return rates can be high — buyer protection and Tabby Care features reduce merchant financial risk. Budget ownership on the merchant side lies with e-commerce and digital marketing teams who control payment gateway selection, or with CFOs/treasury for large retailers negotiating MDR terms. Grocery and travel verticals are emerging adjacencies. The payer in the BNPL model is the merchant (MDR revenue), while the consumer uses the product for free (no interest, no fees if payments are on time). This consumer-free model is structurally different from traditional credit and is the key adoption enabler in regions with consumer resistance to interest-bearing products (Islamic finance considerations). Tabby Plus represents a first move toward direct consumer monetization via subscription, suggesting the company is evolving beyond pure MDR revenue.[CM014, CM015, CM016, CM017, CM018, CM019]

2.4 Growth Drivers, Adoption Constraints, and Risks

The primary structural drivers for BNPL adoption in MENA are: (1) low formal credit penetration — credit card penetration in Saudi Arabia is substantially lower than in developed markets, creating a gap that BNPL fills for digitally-active but credit-light consumers; (2) young demographics — a large share of the population is aged 18–35, the prime BNPL demographic globally; (3) Saudi Vision 2030 — the national transformation plan explicitly targets a cashless economy and financial inclusion, providing regulatory tailwind for fintech operators and endorsement from sovereign actors; (4) e-commerce growth — Saudi Arabia's e-commerce penetration is growing rapidly from a lower base than US or Europe, expanding the addressable checkout touchpoint pool; (5) Islamic finance compatibility — interest-free BNPL is structurally compatible with Islamic finance principles, removing a barrier that exists for credit cards in culturally observant consumer segments. Adoption constraints and risks include: (1) regulatory uncertainty — BNPL regulation in Saudi Arabia (SAMA framework effective 2022) and UAE are evolving; additional requirements for capital, consumer protection, or credit bureau reporting could raise operational costs or cap growth; (2) competition — Tamara is a credibly funded Saudi BNPL player, and global operators including Klarna could expand into MENA; (3) credit risk — BNPL operators absorb credit risk on their books; in a credit-light consumer population, default data is thin and underwriting models are newer, creating tail risk; (4) merchant MDR compression — as BNPL becomes commoditised, merchants gain negotiating leverage to compress MDR rates, directly impacting Tabby's revenue per unit GMV; (5) consumer multi-homing — consumers can easily use multiple BNPL apps for different merchants, limiting network lock-in. The Vision 2030 and cashless economy driver is the most durable structural tailwind; MDR compression and regulatory tightening are the most material medium-term risks.[CM021, CM022, CM023, CM024, CM025, CM026]

2.5 Exhibits

3.1 Competitive Landscape and Competitor Classification

Tabby competes across four competitor classes in the MENA BNPL and consumer fintech market. Direct peers are licensed BNPL operators serving the same consumer-merchant installment market in Saudi Arabia and UAE: Tamara (Riyadh), Postpay (UAE), Cashew (UAE/Saudi), and Spotii (UAE, now absorbed by Zip Australia after acquisition). Incumbent alternatives are bank-issued products including credit cards, interest-bearing deferred debit, and bank-sponsored installment plans (Saudi banks such as Al Rajhi, SNB, and Riyad Bank offering 0% installment plans on major credit cards via Visa/Mastercard networks). Adjacent entrants are global BNPL operators that could expand into MENA — Klarna (Swedish, operating in EU and US, no MENA presence as of 2026), Afterpay/Block, and Paidy. Status-quo substitutes are cash on delivery (still material in KSA) and informal social credit. Internal build refers to large Saudi retailers or e-commerce platforms that could develop in-house BNPL capability rather than relying on third-party operators. The most material competitive threat today is Tamara, which operates the same Saudi BNPL market, is funded by Coatue and Checkout.com, and holds its own SAMA BNPL licence. Second-tier direct competitors (Postpay, Cashew) are smaller and primarily UAE-focused. Global entry by Klarna is possible but has not materialised, and the regulatory complexity of MENA (SAMA, CBUAE licensing requirements) creates barriers that slow global entry. Incumbent bank installment products are a meaningful substitute for consumers who already hold credit cards, but given low credit card penetration in Saudi Arabia, the overlap is limited. Tabby's competitive strategy has shifted from "be the best BNPL" to "be the primary financial super-app for MENA consumers" (Tabby Card, Tabby Plus, Tabby Shop, Tweeq wallet), which expands both the competitive surface and the moat.[CP001, CP002, CP003, CP004, CP005, CP006]

3.2 Competitor Profiles — Scale, Funding, and Strategy

Tamara is Tabby's most direct and credibly-funded competitor. Headquartered in Riyadh, Tamara raised a Series B (reported at $210M by multiple sources) from Coatue Management and Checkout.com in 2022–2023, making it one of the best-funded BNPL startups in MENA outside of Tabby. Tamara holds a SAMA BNPL licence and focuses on the Saudi consumer market. Tamara's product scope covers Pay in 3 and Pay in 4, Tamara shopping app, and merchant integrations with Shopify and WooCommerce. Tamara does not appear to have a debit card or subscription product analogous to Tabby Card or Tabby Plus, which represents a differentiation gap if Tabby's super-app strategy succeeds. No audited revenue or GMV figures for Tamara are publicly available as of the research cutoff. Postpay is a UAE-based BNPL operator founded in 2019. It secured backing from investors including VCs and is licensed by the UAE Central Bank. Postpay's product scope is narrower than Tabby's, focusing on Pay-in-4 for UAE merchants. No material public data on revenue or user count is available. Postpay appears to have a predominantly UAE footprint with no disclosed KSA licence, which limits its competitive threat to the UAE market segment. Cashew is a Dubai-headquartered BNPL operator with UAE and Saudi presence, targeting similar consumer and merchant segments to Tabby, particularly in fashion and lifestyle verticals. Cashew has raised funding but at a scale well below Tabby or Tamara. Spotii was a UAE BNPL startup that was acquired by Zip Australia (ASX: ZIP) in 2021, making it the first significant MENA BNPL M&A transaction and demonstrating global operator interest in the region. Following the Zip acquisition, Spotii appears to have been absorbed into Zip's global operations with limited continued investment in MENA-specific growth. Klarna, the world's largest private BNPL company with $7B+ in GMV and operations across 20+ countries, has not entered the MENA market as of early 2026. Klarna's entry would represent the most material competitive threat to Tabby's premium market position if it obtained SAMA and CBUAE licences and leveraged global brand recognition.[CP007, CP008, CP009, CP010, CP011, CP012]

3.3 Capability, Pricing, and Distribution Comparison

Tabby leads on breadth of product offering, network scale (20M+ users, 40K+ merchants), and regulatory footprint (SAMA BNPL permit, SAMA EMI licence via Tweeq, CBUAE SVF licence). On pricing, merchant discount rates are not publicly disclosed by any MENA BNPL operator, making a direct MDR comparison impossible from public sources. Based on global BNPL benchmarks, MENA operators likely charge 1–5% MDR with variations by category and merchant size. Consumer pricing across all major MENA BNPL operators (Tabby, Tamara, Postpay, Cashew) is zero fees if payments are on time — a market-wide feature, not a differentiator. Late fees vary by operator and regulatory jurisdiction. Tabby's differentiation on distribution rests on: (1) largest merchant network in MENA (40K+), creating a network effect where consumers install Tabby because it is available at the most merchants; (2) Tabby Card as a physical card enabling offline and in-store payments, extending reach beyond e-commerce; (3) Tabby Plus as a retention and monetization tool that builds habit and loyalty among the most active users; (4) Tabby Shop as a discovery layer reducing consumer CAC by driving product search intent natively. No competitor has replicated this full-stack product suite. Tamara's closest product equivalents lack the card and subscription components based on available public information. On trust and regulatory posture, Tabby's SAMA licences and CBUAE licence, combined with JPMorgan as a debt partner, position it as the most institutionally-endorsed MENA BNPL operator — a trust signal relevant for both merchant adoption and future IPO investors. Switching cost for consumers is low: all BNPL apps are installed on the same smartphone and can be selected at checkout. The key switching driver is merchant coverage — consumers use whichever app is available at their preferred merchant. This dynamic means merchant acquisition is the primary competitive battleground, not consumer-facing features.[CP015, CP016, CP017, CP018, CP019, CP020]

3.4 Moat Durability and Competitive Risk Register

Tabby's competitive moat is built on four layered components: scale network effects (largest merchant and consumer network creates a flywheel where more merchants attract more consumers, who attract more merchants); data advantage (proprietary underwriting model trained on MENA-specific transaction data from 20M+ users); regulatory approvals (SAMA BNPL permit, SAMA EMI via Tweeq, CBUAE SVF — each takes 12–24 months to obtain, creating a headstart over new entrants); and the emerging super-app positioning (Tabby Card, Tabby Plus, Tabby Shop, Tweeq wallet layered on top of BNPL creating cross-product stickiness). The durability of this moat is tested by three material risks. First, Tamara is credibly funded and licensed in Saudi Arabia — the two companies compete directly for the same merchant integrations and consumer wallet share in Tabby's largest market. If Tamara achieves a similar merchant coverage, consumer switching between the two apps becomes the norm, eroding Tabby's network advantage. Second, MDR compression: as BNPL becomes a commodity capability expected at every major Saudi checkout, merchants gain pricing power to compress MDR, directly reducing Tabby's revenue per unit of GMV. Third, bank disintermediation: Saudi banks (Al Rajhi Bank, Saudi National Bank) have the distribution, capital, and regulatory relationships to offer competitive installment products at scale, and may invest in BNPL-like products as the market matures. The counter to these risks is Tabby's super-app strategy: if Tabby Plus and Tabby Card build genuine consumer habits beyond BNPL checkout, Tabby gains switching costs that its pure-play BNPL competitors cannot match. The critical diligence question is whether consumer engagement data supports this multi-product stickiness hypothesis.[CP021, CP022, CP023, CP024, CP025, CP026]

3.5 Exhibits

4.1 Revenue Model and Revenue Streams

Tabby's primary revenue source is the merchant discount rate (MDR), charged to retailers who integrate BNPL at checkout. The MDR represents a percentage of each transaction value paid by the merchant to Tabby in exchange for offering interest-free installment payments to consumers and for Tabby absorbing the credit risk on the installment book. MDR rates are not publicly disclosed, but global BNPL peers charge 1–6% depending on category and merchant size. For Saudi Arabia — Tabby's primary market — the $378M revenue figure reported for 2025 (up from $267M in 2024, a 42% increase) represents Saudi Arabia only and is not consolidated across all markets. The precise revenue split between KSA, UAE, and Kuwait is not disclosed. Secondary revenue streams include: Tabby Plus (SAR 19/month subscription from consumers for access to rewards and benefits), Tabby Card fee revenue (not disclosed), Tabby Shop affiliate/referral revenue from product discovery, and Tabby Care merchant fees for buyer protection coverage. These non-MDR streams are estimated to be a small fraction of total revenue currently, though they represent the strategic direction toward direct consumer monetisation. The revenue recognition methodology for BNPL platforms is relevant: Tabby likely recognizes MDR revenue at the point of merchant transaction (gross basis for the full transaction facilitating amount), or net of the installment payouts. The accounting treatment affects the comparability of Tabby's revenue to BNPL peers. No audited financial statements are publicly available. All revenue figures cited in this chapter originate from Tabby company claims (press releases and investor communications) as reported in news coverage; they have not been independently verified against audited accounts.[CI001, CI002, CI003, CI004, CI005, CI006]

4.2 Unit Economics, Margins, and Profitability

Tabby reported its first net profit for KSA operations: SAR 90.4 million (approximately $24M) in H1 2025, representing a 360% year-over-year improvement in the H1 2025 period. For the full year 2025, net profit was reported at approximately $55M (or $378M revenue at a 14.5% net margin). These figures, if accurate, demonstrate that Tabby's BNPL model can be profitable at scale in Saudi Arabia — a positive signal ahead of the planned Tadawul IPO. However, several unit economics components are not publicly disclosed: gross margin (MDR revenue minus credit losses and payment processing costs), customer acquisition cost (CAC), lifetime value (LTV), 90-day repeat usage rate, loss rate per vintage, and operating expense structure. The BNPL gross margin structure depends critically on credit loss rates: for a 0%-interest consumer product, Tabby's margin on each transaction equals the MDR charged minus credit losses on defaulted installments and payment processing costs. In MENA's thin-file consumer market, underwriting quality is critical. A 1% increase in default rate can erase 20–50% of gross margin depending on MDR level. Tabby's revenue growth trajectory — 42% from 2024 to 2025 in Saudi Arabia — is consistent with a maturing BNPL business that has achieved scale efficiencies. The H1 2025 profit margin of approximately 12–15% (SAR 90.4M on estimated H1 revenue of SAR 600-700M) suggests operational leverage is working, but without audited accounts, these figures cannot be underwritten with high confidence by external investors. Cross-market profitability (UAE and Kuwait) is unknown. The aggregate group financials — including the costs of the Tweeq acquisition, the JPMorgan securitization facility interest cost, and UAE and Kuwait market losses — may look materially different from the KSA-only figures.[CI008, CI009, CI010, CI011, CI012, CI013]

4.3 Capital Structure, Funding, and Capital Intensity

Tabby has raised approximately $480M in equity across Seed through Series E (excluding the Tweeq acquisition) and secured $700M in securitization debt from JPMorgan in December 2023. The JPMorgan facility is backed by Tabby's BNPL receivables and represents a form of asset-backed lending: Tabby originates BNPL loans to consumers, pools them into a receivables vehicle, and JPMorgan provides a warehouse line to fund those receivables, allowing Tabby to recycle capital and grow GMV beyond what equity alone would support. This structure is standard for BNPL operators globally (Klarna, Affirm, and Afterpay all use similar receivables financing), but it introduces several financial risks: (1) interest rate risk — the cost of the JPMorgan facility is not disclosed but is likely a floating-rate spread, creating earnings sensitivity to rate changes; (2) counterparty concentration — a single $700M facility from one bank creates concentration risk if JPMorgan were to reduce or not renew the facility; (3) covenant risk — securitization facilities typically impose performance covenants (loss triggers, dilution triggers) that could restrict Tabby's operations if credit performance deteriorates; (4) leverage — the $700M facility combined with Tabby's equity base means the business is levered, amplifying both upside and downside. Tabby's total funding (equity + debt) of approximately $1.18B as of late 2023 (before the $160M Series E in February 2025) represents significant capital deployment in service of a $10B GMV run rate. The capital efficiency ratio (GMV / total funding) of approximately 8–10x suggests a relatively efficient use of capital, consistent with BNPL models that turn their receivables portfolio multiple times per year. The Series E at $3.3B valuation implies the market values Tabby at approximately 8.7x 2025 Saudi Arabia revenue ($3.3B / $378M), which is a high multiple for a regional BNPL operator, justifiable only if Tabby's super-app expansion and IPO premium materialise.[CI015, CI016, CI017, CI018, CI019, CI020]

4.4 Financial Diligence Gaps and IPO Readiness

Tabby's financial profile has three significant gaps that prevent full external underwriting ahead of the planned Tadawul IPO. First, the absence of audited consolidated financial statements covering all geographies (KSA + UAE + Kuwait + Tweeq entity) means investors are relying on company-released revenue and profit figures that have not been subjected to third-party audit scrutiny. BNPL-specific accounting judgments — on revenue recognition, credit loss provisioning, and interest income treatment — are material and require audit firm sign-off. Second, credit performance data (loss rates, delinquency buckets, vintage analysis) is not publicly available. This is the most important underwriting input for a BNPL lender: if Tabby's loss rates have risen as it extends credit to lower-quality borrowers to maintain GMV growth, the P&L profitability reported could be illusory — masked by insufficient provisioning. Third, the group-level capital adequacy position (total equity, total debt, liquidity, covenant headroom) is not disclosed. SAMA's BNPL regulations likely impose minimum capital requirements on Tabby's Saudi entity, and the SAMA EMI licence for Tweeq imposes separate capital requirements. The IPO process — filing the prospectus with the Saudi Capital Markets Authority (CMA) — will require full audited accounts, complete segment disclosure, and credit performance data. The IPO process therefore represents the natural resolution event for most of these financial diligence gaps. For pre-IPO investors transacting at the secondary market implied valuation of $4.5B (April 2025), the absence of audited accounts creates a material information asymmetry risk that demands either deep primary discovery with Tabby management or a discount to the disclosed secondary valuation.[CI022, CI023, CI024, CI025, CI026, CI027]

4.5 Exhibits

5.1 Product Portfolio Overview

Tabby has expanded from a single-product Pay-in-4 BNPL service into a multi-product financial platform serving consumers and merchants across KSA, UAE, and Kuwait. The core Pay-in-4 product splits any purchase into four equal interest-free instalments over six weeks, with no late fees charged since 2023, making it fully Shariah-compliant. [CE001] The Tabby Card (Visa network) extends BNPL credit and cashback rewards to any Visa-accepting merchant globally, removing the constraint of the partner merchant network. [CE002] Tabby Plus is a SAR 19/month subscription tier delivering premium cashback and merchant offers, creating a recurring revenue layer and deepening consumer engagement. [CE003] Tabby Shop is an in-app merchant discovery and shopping surface that allows consumers to browse 40,000+ partner merchants and access exclusive deals, transforming the Tabby app from a payment tool into a commerce destination. [CE004] Tabby Care adds consumer purchase protection and warranty coverage for high-value electronics and goods transactions. [CE005] Most significantly, the September 2024 acquisition of Tweeq — a SAMA EMI-licenced digital wallet startup — brought stored-value wallet capabilities and person-to-person transfer functionality to the platform, enabling Tabby to position itself as a full neobanking challenger for MENA consumers. [CE006] In April 2026, Tabby obtained a UAE Stored Value Facility (SVF) licence from the CBUAE, unlocking equivalent wallet capabilities in the UAE market. [CE037] The breadth of this product portfolio, all accessible through a single 4.8-rated app, creates a consumer financial super-app that no other regional BNPL player has replicated at comparable scale.

5.2 Module and Capability Map

Each Tabby product module addresses a distinct user job and deployment context. Pay-in-4 is the mature anchor product used by 15 million+ consumers at checkout, both online and in-store via QR code or NFC. [CE008] Evidence of deployment is extensive: Pay-in-4 is available at 40,000+ merchants including IKEA, H&M, Noon, and Namshi, and is accessible via Shopify, Magento, and WooCommerce plugins as well as custom API integrations. [CE009] The Tabby Card (Visa) is a growth-stage product targeted at consumers who want BNPL credit at merchants outside the Tabby network; deployment evidence includes the Visa network partnership and in-app card management. [CE002] Tabby Plus targets frequent purchasers who want premium cashback; it is deployed as an in-app subscription with month-to-month billing at SAR 19. [CE003] Tabby Shop is live across the primary consumer app and serves as the merchant discovery engine, combining curated storefronts, deal alerts, and category browsing to drive purchase intent. [CE004] Tabby Care addresses the consumer protection job, providing purchase insurance for electronics and high-value items; deployment evidence comes from Tabby's official product listings. [CE005] The Tweeq Wallet, the newest module, adds stored-value balance and P2P transfers for KSA users under the SAMA EMI licence, with UAE wallet functionality enabled by the April 2026 SVF licence. [CE007] The most significant diligence gap across modules is the Tweeq integration depth — no official launch confirmation for the fully integrated wallet experience has been published as of May 2026, making the timeline for neobank positioning uncertain.

5.3 Technical Architecture

Tabby's technical architecture is inferred from public job postings, the Tabby for Business merchant portal, GitHub activity, and third-party analyst reporting. [CE022] The consumer application is delivered via native iOS and Android apps with Arabic and English localisation, integrating checkout deeplinks, instalment management, Tabby Shop browsing, and card controls in a single interface. App store ratings of 4.8 reflect strong UX execution. [CE013] Payment processing relies on Visa for the Tabby Card and local acquiring bank partnerships for BNPL transactions across KSA, UAE, and Kuwait; card network connectivity and acquiring relationships are critical single-dependency risks. [CE024] Credit decisioning is performed in real time at checkout using a proprietary scoring engine that combines national ID data, credit bureau signals (where available), and Tabby's internal transaction history. Repeat customers benefit from Tabby's proprietary repayment track record data, which is a meaningful data moat for thin-file consumers who lack bureau history. [CE023] The merchant API layer supports plug-and-play integration with Shopify, Magento, WooCommerce, and custom REST API implementations, with sandbox environments and SDKs published via the Tabby for Business portal. [CE025] Cloud infrastructure is not publicly disclosed but is inferred to use a major hyperscaler (AWS or GCP equivalent) based on the scale of transaction processing and global engineering hiring signals visible in job postings. [CE022] Tabby's GitHub organisation (github.com/tabbyai) shows limited public repositories — primarily merchant SDKs — consistent with a closed-source fintech architecture rather than an open-source platform. [CE040] The absence of a public engineering blog represents a transparency gap compared to Stripe or Monzo but is not atypical for a growth-stage MENA fintech.

5.4 Deployment, Integration, and Roadmap

Tabby's deployment model spans online and in-store channels. Online integration is achieved via Shopify, Magento, and WooCommerce plugins or via direct REST API, with an average integration time under 48 hours for plugin-based merchants. [CE027] In-store BNPL is available via QR scan-and-pay and NFC tap-to-pay at physical retail locations in KSA malls, enabling Tabby to capture offline GMV from major fashion and electronics retailers. [CE026] The merchant onboarding process involves KYB documentation submission, technical integration, and Tabby BNPL appearing at checkout — the Tabby for Business portal manages this end-to-end. [CE027] On the product roadmap, the most significant initiative is the full integration of the Tweeq digital wallet into the primary consumer app, which would allow consumers to hold balances, receive salaries, and pay merchants directly from a stored value account. [CE028] Expansion of the Tabby Card to additional markets and deepening of the Tabby Shop personalisation engine using purchase history data from 15M+ users are also signalled priorities. [CE028] The strategic capstone of the roadmap is the Tadawul IPO: Tabby has engaged JPMorgan, HSBC, and Morgan Stanley as banks for the offering, targeting 2025-2026 subject to CMA approval. [CE033] The April 2025 secondary share sale at a $4.5 billion implied valuation represents a pre-IPO price discovery event and confirms institutional demand for Tabby equity ahead of the public listing. [CE034] Key roadmap risks include regulatory approval timeline, KSA capital market conditions, and the execution complexity of integrating Tweeq while simultaneously preparing for an IPO.

5.5 Competitive Differentiation and Moat

Tabby's competitive moat rests on five reinforcing elements. First, scale network effect: 15 million+ users and 40,000+ merchants create a two-sided marketplace where each side joins for the other's presence. New BNPL entrants cannot replicate this without years of customer acquisition spend. [CE008] Second, Shariah- compliant product design: removing late fees in 2023 and structuring instalment products without compound interest aligns Tabby with Islamic finance principles, which are structurally preferred by Saudi and Emirati consumers and Islamic banking regulators. Competitors using late fees face a disadvantage in GCC markets. [CE031] Third, regulatory depth: Tabby holds both a SAMA BNPL permit (July 2022) and, via the Tweeq acquisition, a SAMA EMI licence — the most comprehensive regulatory stack of any MENA BNPL player. The UAE SVF licence (April 2026) extends this regulatory moat to the second-largest market. [CE035, CE036, CE037] Fourth, commerce destination: the Tabby Shop merchant discovery surface creates consumer engagement well beyond the payment moment, building a habitual browsing and shopping behaviour that payment-only BNPL players (Postpay, Cashew) have not matched. [CE032] Fifth, proprietary credit data: Tabby's internal repayment history on 15M+ users, many of whom are thin-file consumers without bureau records, creates a credit scoring advantage that improves approval rates and reduces defaults for repeat customers without relying on external bureaus. [CE023] Versus Tamara (the closest competitor), Tabby leads on user scale, profitability, regulatory breadth, and product diversification. [CE029] Versus UAE-focused Postpay and Cashew, Tabby's KSA scale and SAMA regulatory depth create a moat that is difficult to overcome without years of investment. [CE030]

5.6 Trust, Security, and Regulatory Compliance

Tabby's regulatory compliance architecture is the strongest of any MENA BNPL operator. SAMA granted Tabby its BNPL permit in July 2022, one of the first such licences in the GCC, authorising consumer instalment credit operations in Saudi Arabia subject to consumer protection, AML/KYC, and credit disclosure requirements. [CE035] The September 2024 acquisition of Tweeq added the SAMA EMI licence to Tabby's regulatory portfolio, enabling stored-value wallet operations, e-money issuance, and payment processing beyond BNPL instalment credit. [CE036] In April 2026, Tabby obtained the UAE Central Bank SVF licence, enabling stored-value wallet services for UAE consumers and completing the dual-market regulatory authorisation that positions Tabby as a GCC neobank contender. [CE037] Tabby's decision to remove late fees in 2023 — explicitly citing Shariah compliance — is both a regulatory and reputational differentiator. No late-fee-based revenue means Tabby's income model aligns with consumer interests, reducing regulatory scrutiny risk and building brand trust among observant Muslim consumers. [CE038] Data security is governed by KSA's Personal Data Protection Law (PDPL) and UAE data protection regulations, with Tabby's privacy policy disclosing data processing and retention practices. No material data breaches have been publicly reported as of May 2026. [CE039] The primary trust gap is the absence of disclosed credit-loss rates, default performance metrics, and any public record of SAMA compliance examinations or enforcement history. Investors cannot independently verify Tabby's credit risk management quality without private data room access. [CE023] No adverse regulatory actions or sanctions against Tabby have been publicly identified, though the absence of evidence is not conclusive given SAMA's non-public enforcement practice.

5.7 Exhibits

6.1 Customer Base Segmentation

Tabby addresses two structurally distinct customer segments: business-to-consumer (B2C) retail shoppers and business-to-business (B2B) merchant partners. [CU001] The consumer segment encompasses over 15 million registered users distributed predominantly across Saudi Arabia (80%+), UAE, and Kuwait. [CU003] The core user demographic skews strongly toward millennials and Generation Z — digital-native, credit-averse consumers who prefer interest-free instalment purchasing over traditional bank credit cards or revolving debt. [CU010] This demographic preference aligns with GCC population dynamics, where over 60% of Saudi Arabia's population is under 35 years old, creating a structurally receptive base for BNPL adoption. Consumer use cases span fashion purchases, consumer electronics, home furnishings, travel bookings, and grocery spending — verticals with elevated average order values and high repeat purchase frequency. [CU033] The merchant segment comprises 40,000+ business partners whose primary job-to-be-done is converting browser visits into paying customers; Tabby's BNPL reduces checkout friction by eliminating the upfront full-payment barrier. [CU002] Merchant scale spans from independent SME retailers through to global enterprise brands and large retail conglomerates. Enterprise merchant relationships include prominent names across fashion, electronics, luxury, and home categories. [CU040] The two-sided platform structure creates a reinforcing network dynamic: consumer network scale directly amplifies merchant acquisition value, and the 40,000+ merchant catalogue is itself a consumer recruitment and retention asset. [CU001, CU002]

6.2 Adoption Trajectory and Growth Metrics

Tabby's adoption trajectory is underpinned by multiple independently corroborated data points signalling rapid scale across users, merchants, and financial performance. [CU004] The platform processed over $10 billion in annualized transaction volume as of 2025 — a step-change from sub-$1 billion at the time of Series A fundraising, representing a 10x+ increase over the growth phase. For the KSA segment — Tabby's dominant market — reported revenue was approximately $267 million for full-year 2024. [CU005] By 2025, KSA revenue grew to approximately $378 million on the same basis, implying approximately 41% year-on-year growth in the core market. [CU006] The most striking metric is H1 2025 KSA net profit: SAR 90.4 million, representing a 360% year-on-year increase over H1 2024 — a growth rate that signals operational leverage and improving unit economics at scale. [CU007] Two consecutive profitable years — achieved during a period of aggressive BNPL expansion — signal a business model generating cash from operations rather than merely growing at the expense of margin. [CU009] Fundraising trajectory further corroborates adoption: Series D ($200M at $1.5B valuation, November 2023) was followed by Series E ($160M at $3.3B valuation, February 2025), with a secondary transaction at an implied $4.5B valuation in April 2025. [CU031, CU032, CU037] Merchant network growth — from launch to 40,000+ partners — reflects the supply-side adoption that enables and sustains consumer transaction volume at the claimed scale. [CU002]

6.3 Named Merchant Customer Proof

Tabby's merchant proof extends beyond logo collections to include named production deployments across multiple verticals and market segments. [CU020] Amazon, the global e-commerce leader, deploys Tabby BNPL at checkout for Saudi and UAE customers — one of Tabby's most credible production proof points given Amazon's rigorous vendor evaluation standards and global brand visibility. SHEIN, the dominant Gen Z fast-fashion platform, represents high-frequency low-basket-size transactions at scale — precisely the repeat-purchase behaviour that builds consumer retention. [CU021] Adidas and H&M provide international brand-name fashion proof across sport and mass-market segments. [CU022, CU024] IKEA serves as the anchor proof in the home furnishings category, where high average order values make instalment credit particularly conversion-relevant. [CU023] Samsung validates the consumer electronics vertical with global brand credibility. [CU025] Noon, the UAE-headquartered MENA e-commerce platform, provides regional digital commerce proof. [CU026] Enterprise group relationships include Al Futtaim Group, a diversified UAE retail conglomerate; Landmark Group, one of the largest retail conglomerates in the Middle East and Africa; Apparel Group, a lifestyle and fashion retail operator with 80+ brands across 14 countries; and Chalhoub Group, a luxury goods distributor operating LVMH and premium brands across the GCC. [CU027, CU028, CU029, CU030] Named merchant proof spans fashion, electronics, home, luxury, and mass e-commerce — the five highest-GMV BNPL categories in the regional market. The primary evidence gap is that only 11 merchants have been independently verified against the claimed 40,000+ merchant base.

6.4 Retention, Repeat Usage, and Satisfaction

Retention and repeat usage evidence for Tabby is mixed: strong proxy signals from profitability and app engagement coexist with a near-complete absence of publicly disclosed cohort or retention metrics. [CU035] The most reliable retention proxy is Tabby's achievement of profitability in two consecutive years — an outcome structurally inconsistent with mass consumer churn, since BNPL unit economics require repeat purchase volume to amortize user acquisition and onboarding costs. [CU009] The Tabby app carries a 4.8 star rating across iOS and Android platforms, a consumer satisfaction figure cited by the company in official communications. [CU008] High app store ratings in the MENA mobile finance market are a meaningful satisfaction indicator given the competitive alternatives available to consumers — Tamara, Postpay, and Cashew all compete for the same instalment credit demand. Tabby Plus, the SAR 19/month subscription tier offering premium cashback and exclusive merchant deals, acts as an explicit retention mechanism: subscribers are economically incentivized to route purchases through Tabby to earn back the subscription fee via cashback accumulation. [CU011] Tabby Shop — claiming 20 million+ shoppers on its merchant discovery surface — drives habitual engagement beyond the point-of-sale, creating discovery-loop return visits independent of immediate purchase intent. [CU012] What remains undisclosed publicly includes consumer cohort retention rates, net revenue retention (NRR) for merchant accounts, gross merchant retention rates, net promoter score (NPS), and credit default or fraud metrics. [CU036] Independent adverse evidence from Trustpilot captures consumer complaints related to merchant dispute resolution delays and inconsistent credit approval experiences, representing a qualitative counterpoint to the official 4.8 rating claim. [CU019]

6.5 Expansion and Geographic Concentration

Tabby's geographic expansion strategy is anchored in deepening its dominant KSA position while systematically extending the platform model to UAE and Kuwait. [CU003] Over 80% of Tabby's registered user base is concentrated in Saudi Arabia — a structurally concentrated position that is simultaneously a strength (deep market penetration with regulatory first-mover advantage) and a risk (KSA-specific regulatory, economic, or competitive disruptions would affect the large majority of users). [CU034] UAE is Tabby's second active market, where the April 2026 award of a Stored Value Facility (SVF) licence from the UAE Central Bank (CBUAE) opens the pathway for full wallet product deployment alongside the existing BNPL service. [CU016] The SVF licence elevates Tabby's UAE regulatory standing from payment processor to licensed stored-value issuer — enabling salary deposits, P2P transfers, and prepaid card products that expand the consumer relationship beyond BNPL checkout. [CU016] Kuwait represents Tabby's third operational geography, currently serving a smaller user share. [CU015] The September 2024 acquisition of Tweeq — a SAMA EMI-licenced digital wallet company — added stored-value wallet capabilities in KSA under an existing regulatory licence, deepening the wallet functionality for the dominant KSA segment and building toward a neobank positioning. [CU013] A planned IPO on the Saudi Tadawul exchange, with JPMorgan, HSBC, and Morgan Stanley as advisors, has been publicly signalled — a public listing would further anchor Tabby's KSA presence and provide capital for the next geographic and product expansion phase. [CU038] The MENA BNPL market is projected to grow from approximately $1.4 billion to $2.7 billion, providing a structural tailwind for geographic and vertical expansion. [CU017]

6.6 Customer Concentration and Adverse Evidence

Tabby's concentration risks and adverse evidence are material diligence items requiring direct data room investigation to resolve. On the merchant concentration side, Tabby does not publicly disclose the GMV contribution of its top-10 or top-25 merchant partners. [CU018] It is structurally plausible that a handful of high-volume merchants — Amazon, Noon, and the major retail conglomerates (Al Futtaim, Landmark, Apparel Group) — account for a disproportionate share of total GMV, creating fragility if any one relationship were to terminate or if a merchant developed an in-house BNPL solution. The MENA BNPL sector is increasingly competitive, with Tamara — the primary regional competitor — having raised comparably large rounds and reached meaningful scale in overlapping GCC verticals. [CU017] On the consumer side, Trustpilot reviews for Tabby include complaints about merchant dispute resolution delays, inconsistent credit approval outcomes, and confusion over late fee removal policies post-2023. [CU019] These complaints are qualitatively consistent with BNPL scale challenges experienced globally, but frequency and severity relative to the 15 million user base cannot be independently quantified without direct data access. [CU019] Consumer fraud rate, credit default rate, and disputed transaction frequency are not publicly disclosed metrics for Tabby. [CU039] The absence of this data is a diligence gap warranting direct management engagement. The 80%+ geographic concentration in KSA also creates a single-market regulatory dependency: any change in SAMA's BNPL framework, credit limits, or consumer protection rules would directly affect the vast majority of Tabby's user base and revenue. [CU003, CU034]

6.7 Exhibits

7.1 Risk Overview and Severity Ranking

Tabby's risk profile spans six distinct domains: regulatory/legal, operational/security, partner/dependency, financial/model, people/execution, and competitive. Of these, regulatory tightening presents the highest severity given that Tabby's SAMA BNPL permit underpins over 80 percent of its user base in Saudi Arabia. Non-renewal or material condition changes to the permit would be existential for the KSA business and likely delay or derail the planned Tadawul IPO. IPO execution risk ranks as the second-highest priority: market window uncertainty, Saudi CMA prospectus requirements, and mandatory audited consolidated accounts represent substantive execution hurdles that could slip the timeline significantly. Third in severity is the $700M JPMorgan receivables securitization facility — a single counterparty providing the working capital engine for the entire BNPL receivables book. A covenant breach, credit deterioration event, or non-renewal of this facility would constrain GMV capacity and force expensive refinancing or equity dilution. Competitive risk from Tamara, the nearest Saudi BNPL rival, and global entrants such as Klarna compresses merchant fee economics and creates MDR deflation risk over a multi-year horizon. Operational risk — platform uptime, fraud, and data security — is rated medium-high given the 15M+ user PII exposure; however, the absence of any publicly documented major incident to date provides cautious comfort. People risk is concentrated in Hosam Arab, whose public profile, investor relationships, and operational leadership create meaningful key-person dependency, though the CTO/COO Daniil Barkalov provides partial mitigation through technical and operational depth. The two consecutive profitable years (KSA 2024 and 2025) materially reduce financial model risk, creating a cash buffer against regulatory or competitive shocks that would have been debilitating at an earlier funding stage.[CR001, CR002, CR003, CR004, CR005, CR006]

7.2 Regulatory and Legal Risk

Tabby's regulatory risk architecture is anchored by its SAMA BNPL permit issued in July 2022, which authorises buy now, pay later operations in the Kingdom of Saudi Arabia. This permit is subject to SAMA's ongoing supervision, and its renewal conditions — including capital adequacy thresholds, consumer protection requirements, and credit limit caps — are not publicly disclosed, creating a material diligence gap. Saudi Arabia's broader financial regulation landscape has been tightening: SAMA issued revised BNPL Service Providers Regulations that impose merchant and consumer-facing disclosure requirements and mandate transparent fee structures. Tabby's Shariah-compliant no-late-fees model provides a structural advantage under these rules but does not eliminate renewal risk if SAMA raises capital or operational requirements above Tabby's current position. In the UAE, the Central Bank of the UAE (CBUAE) granted Tabby a Stored Value Facility (SVF) licence in April 2026, enabling regulated payments operations. However, CBUAE's BNPL-specific supervisory framework for credit providers remains in evolution through 2025-2026, and new circulars could impose stricter credit exposure limits or disclosure obligations. Kuwait's Central Bank (CBK) is at an early stage of BNPL oversight, representing lower but still non-zero risk given Tabby's presence in that market. The Saudi Personal Data Protection Law (PDPL), which came into force in 2022 and entered enforcement phase in 2024, creates direct obligations for Tabby given its 15M+ consumer PII dataset spanning biometric identity verification, payment history, and device data. A PDPL enforcement action triggered by a data breach or inadequate data governance programme could result in material fines and reputational damage. Tweeq's EMI licence under SAMA adds a second regulatory track that must be maintained in parallel with the BNPL permit, doubling the compliance surface area. Consumer credit disclosure rules in KSA and UAE are tightening through 2025, and legal counsel review of Tabby's current consumer-facing documentation is a recommended diligence step. No public record of SAMA enforcement actions against Tabby has been identified in retained sources.[CR007, CR008, CR009, CR010, CR011, CR012]

7.3 Operational and Security Risk

Tabby's operational risk profile is dominated by three vectors: platform availability, fraud and credit default management, and data security. As a high-throughput consumer fintech processing millions of BNPL transactions across three markets, any significant platform downtime during peak shopping periods — such as Ramadan or Saudi National Day — could result in material GMV loss and merchant relationship damage. Tabby does not publicly disclose its uptime SLA or incident history, creating an evidence gap for operational resilience assessment. Payment fraud is an endemic risk for BNPL operators globally. Unlike traditional card networks that share fraud liability with merchants and issuers, Tabby absorbs first-loss credit risk on unpaid instalments. The absence of public fraud rate disclosure prevents assessment of whether Tabby's machine-learning credit scoring effectively suppresses fraud at the rates achieved by more mature global peers such as Klarna or Affirm. Any spike in first-payment default fraud — a known BNPL attack vector in which fraudsters exploit the first instalment grace period — could significantly impair credit loss performance. The PII dataset of 15M+ registered consumers represents a high-value target for cybersecurity threats. Identity verification data, payment history, device fingerprints, and potentially biometric data collected during onboarding are all stored by Tabby. A material data breach would trigger PDPL notification obligations in Saudi Arabia and potential CBUAE requirements in UAE, with associated fine exposure and severe reputational damage. Tabby's payment processing infrastructure is dependent on Visa and Mastercard networks for the Tabby Card product and card-based merchant disbursements; network outages or fee schedule changes imposed by these networks would directly affect operational costs and the Tabby Card product economics. Merchant churn risk from competitors offering lower MDR pricing is a secondary operational risk that erodes the merchant network defensibility over time. Trustpilot reviews of Tabby surface consumer complaints primarily around payment dispute resolution timelines and merchant delivery issues incorrectly attributed to Tabby's payment system, indicating customer service operational gaps worth monitoring.[CR014, CR015, CR016, CR017, CR018, CR019]

7.4 Partner and Dependency Risk

Tabby's most concentrated partner dependency is the $700M receivables securitization facility arranged by JPMorgan, first announced in December 2023 as part of the Series D extension. This facility is the primary working capital mechanism enabling Tabby to recycle its BNPL receivables book and fund GMV growth beyond what equity capital alone could support. The specific terms of the facility — interest rate, maturity date, advance rate, dilution covenants, performance triggers, and renewal conditions — have not been publicly disclosed. If JPMorgan were to reduce facility availability due to credit deterioration in Tabby's receivables portfolio, trigger covenants based on loss rates, or decline to renew at maturity, Tabby's GMV capacity would be severely constrained. The company would face a choice between raising expensive replacement financing or cutting GMV growth, either of which would impair the IPO thesis significantly. Visa and Mastercard network dependency is concentrated around the Tabby Card product, which is issued as a Visa debit card with embedded BNPL capability. Network downtime, fee schedule changes, or sanctions-related network restrictions affecting KSA or UAE could disrupt Tabby Card operations. The payment processing infrastructure for merchant disbursements also relies on card network rails, creating dual exposure. Cloud infrastructure dependency — most likely AWS or GCP — creates a business continuity risk if a regional cloud availability zone experiences an extended outage during peak transaction periods. SAMA approval dependency for new product launches and business model extensions represents a structural drag on innovation velocity. Tabby's ability to expand Tweeq wallet functionality, launch new credit products, or enter new verticals is gated by SAMA regulatory approval timelines that can extend for months. This dependency is compounded by the Tweeq EMI licence, which requires ongoing SAMA compliance and restricts certain wallet activities. KSA banking partners providing settlement services represent another dependency layer whose contractual terms and concentration are not publicly known.[CR020, CR021, CR022, CR023, CR024, CR025]

7.5 Financial and Model Risk

Tabby's financial model risk centres on three structural vulnerabilities: credit loss provisioning opacity, merchant fee compression from competitive dynamics, and the revenue model impact of its Shariah-compliant no-late-fees structure. Credit loss provisioning practices for Tabby's BNPL receivables portfolio are not publicly disclosed. The company claims profitability for two consecutive years in KSA, but without audited consolidated accounts, it is impossible to verify whether loss provisions are conservatively or aggressively set. A 1% increase in net credit loss rate across a $10B+ annualised GMV portfolio could translate to $100M+ in additional provisioning — potentially eliminating the reported $55M KSA net profit entirely. The absence of vintage loss curves, 90-day delinquency data, and charge-off rates is the most critical financial diligence gap. Merchant fee compression is a structural long-term risk. Tabby's revenue is primarily driven by merchant discount rates (MDR) charged to retailers at checkout. As Tamara, Postpay, Cashew, and potential global entrants compete for the same merchant relationships, price competition could compress blended MDR rates over a 24-36 month horizon. Klarna's experience in European markets — where MDR rates have declined from 3-4% to under 2% as competition intensified — provides a concerning precedent for the MENA market. The no-late-fees model, while regulatory compliant and Shariah-friendly, removes a significant revenue lever that global BNPL competitors such as Afterpay and Zip have historically relied upon. Tabby's revenue ceiling is therefore purely a function of MDR and adjacent monetisation (Tabby Plus subscriptions, Tabby Card interchange, Tabby Shop affiliate fees). Pre-IPO burn rate and cash runway are not publicly disclosed; however, with $160M raised at Series E in February 2025, the company is expected to have adequate runway for an IPO filing within 12-18 months absent a significant credit loss event or regulatory disruption. Group-level revenue (KSA + UAE + Kuwait + Tweeq) has not been publicly disclosed; the $378M KSA 2025 revenue figure may overstate group profitability if UAE or Kuwait operations are loss-making.[CR026, CR027, CR028, CR029, CR030, CR031]

7.6 People and Execution Risk

Hosam Arab, co-founder and CEO, represents the highest key-person dependency in Tabby's leadership structure. Arab's track record from founding and selling Namshi, a leading MENA e-commerce platform, established Tabby's investor credibility and merchant trust network from launch. His public profile, media presence, and investor communication role make him the primary face of the company. No CEO succession plan or deputy CEO has been publicly disclosed, meaning that an unexpected departure — whether voluntary, health-related, or governance-driven — would create significant leadership uncertainty precisely at the most sensitive pre-IPO period. The Namshi analogy cuts both ways: Arab's successful exit from Namshi demonstrates execution discipline and founder liquidity appetite that could accelerate an IPO timeline for personal portfolio reasons. Daniil Barkalov, co-founder and CTO/COO, represents a secondary key-person concentration. As the architect of Tabby's core credit-scoring, payment processing, and platform infrastructure, Barkalov's departure would create technical leadership disruption that could slow product development and raise operational risk during the integration of Tweeq's infrastructure. The broader executive bench depth below the founding duo is not publicly disclosed, limiting assessment of succession quality. IPO execution risk is substantial and multidimensional. Saudi CMA requirements mandate full audited consolidated financial statements covering all operating entities, a process that may require 12-18 months of preparation if not already underway. Market timing risk is real: a deterioration in Saudi Tadawul market conditions, a regional geopolitical event, or a global BNPL sector de-rating (following Afterpay, Zip, or Paidy valuation corrections) could close the IPO window before Tabby files. The appointment of JPMorgan, HSBC, and Morgan Stanley as IPO advisers signals seriousness, but advisory mandates do not guarantee successful execution.[CR032, CR033, CR034, CR035, CR036]

7.7 Mitigations and Kill Criteria

Tabby's strongest risk mitigation is its two-year profitability track record in Saudi Arabia, which provides a financial buffer against regulatory shocks, credit loss spikes, and competitive fee compression that would be debilitating for a pre-profitability operator. The $55M KSA net profit in 2025 gives the company real economic flexibility in the event of a regulatory capital requirement increase or a requirement to increase loss provisions. This profitability also strengthens the SAMA renewal argument: a profitable, compliant BNPL operator is a stronger candidate for permit renewal than a cash-burning one. The JPMorgan relationship itself is a mitigation signal: JPMorgan conducted significant credit diligence before committing $700M in receivables financing, effectively underwriting Tabby's credit loss model. The continued availability of this facility — now 18 months after initial close — suggests that loss rates are within acceptable covenant limits, though this cannot be confirmed without facility documentation. Tabby's diversified investor base — including Mubadala Capital (Abu Dhabi sovereign), Hassana Investment Company (Saudi pension), Wellington Management (institutional), and Blue Pool Capital — provides implicit governance stability and potential bridge capital sources if the IPO timeline slips. The Tweeq acquisition diversifies revenue beyond pure MDR into wallet services and payment infrastructure, partially mitigating the merchant fee compression risk over time. Kill criteria for investment thesis: (1) SAMA permit non-renewal or material adverse condition change; (2) JPMorgan facility covenant breach or non-renewal reducing advance rate below $400M; (3) credit loss rate exceeding 4% of receivables for two consecutive quarters; (4) IPO not filed within 24 months of Series E (by February 2027); (5) CEO departure without credible succession announcement; (6) material data breach triggering PDPL enforcement action. Any single kill criterion should trigger immediate position reassessment.[CR037, CR038, CR039, CR040, CR041]

7.8 Exhibits

8.1 Investment Thesis and Anti-Thesis

Tabby's investment thesis rests on four structural pillars. First, MENA-first BNPL leadership: Tabby holds an estimated 60% KSA BNPL market share by company claims, with 15 million registered users, over 40,000 merchant partners, and $10B+ annualised GMV. This network scale creates durable switching costs for both consumers and merchants that new entrants struggle to replicate. Second, dual-year profitability de-risks the pre-IPO profile significantly versus global BNPL peers such as Klarna and Affirm, which remained loss-making through their growth phases. Tabby reported a KSA net profit of approximately $55M in 2025, with H1 2025 KSA net profit growing 360% year-over-year to SAR 90.4 million. Third, Tweeq wallet acquisition in September 2024 unlocks the full neobank revenue stack — interchange income on Tabby Card transactions, savings products, and eventually embedded lending — providing a material upside driver beyond merchant discount rate income. Fourth, the Saudi Tadawul IPO pathway with JPMorgan, HSBC, and Morgan Stanley engaged as banks provides a credible liquidity event for existing investors within a 12-24 month horizon. The anti-thesis centres on four structural concerns. Valuation at $4.5B secondary implies approximately 12-17x 2025 estimated KSA revenue of $378M — materially elevated versus global BNPL peers including Klarna at approximately 5.4x revenue at IPO preparation stage. SAMA regulatory tightening represents existential risk: new credit limit caps or capital adequacy requirements could constrain GMV growth or mandate expensive equity raises at lower valuations. Credit loss rates, net revenue retention, and cohort data are not publicly disclosed, creating material information asymmetry that prevents independent verification of profitability claims. Finally, revenue multiple compression risk is real — Klarna's European MDR compression from 3-4% to under 2% as competition intensified provides a cautionary precedent for the MENA market over a 24-36 month horizon as Tamara and global entrants scale.[CV001, CV002, CV014, CV015, CV016, CV017]

8.2 Recommendation and Confidence

The recommendation for Tabby at its current $4.5B secondary implied valuation is Track / Research More, with medium confidence and a high risk rating. The valuation stance is Stretched. This recommendation reflects a well-constructed company with demonstrable profitability and a credible IPO path, but priced for near-perfect execution at a multiple that leaves limited margin of safety. At 12-17x 2025 estimated KSA revenue, Tabby is priced substantially above comparable global BNPL peers at IPO readiness stages — Klarna prepared its IPO at approximately 5.4x revenue — and any material adverse development in credit losses, regulatory conditions, or IPO market timing could produce a significant markdown. The medium confidence reflects the strong public evidence base for Tabby's profitability and growth trajectory but acknowledges three material information gaps that prevent a high-conviction buy: (1) no publicly available audited consolidated financial statements covering all group entities including UAE, Kuwait, and Tweeq; (2) no disclosed cohort retention, net revenue retention, or customer lifetime value data; (3) no IPO prospectus, preference stack details, or Saudi CMA filing that would clarify post-IPO dilution and investor returns. A conviction buy requires at minimum: audited consolidated P&L confirming group-level profitability, cohort data supporting NRR above 110%, confirmation that SAMA licence renewal is on track, and IPO prospectus disclosure that enables preference stack analysis.[CV022, CV026, CV027, CV028, CV029, CV030]

8.3 Financing Context and Valuation History

Tabby's financing history traces a disciplined escalation from seed capital through five institutional rounds to a secondary market valuation of $4.5B. The Series A (2021, approximately $50M raised) established the initial BNPL product in KSA. Series B (2022) brought the company to unicorn proximity. Series C followed, establishing merchant network scale. The landmark Series D closed in November 2023 at $1.5B valuation with $200M raised from Wellington, STV, Mubadala, PayPal Ventures, and Hassana — a consortium that anchors Tabby's institutional credibility. Concurrent with the Series D, JPMorgan arranged a $700M receivables securitisation facility in December 2023, dramatically expanding Tabby's GMV capacity without additional equity dilution. This facility is the working capital engine for the entire BNPL receivables book and represents the highest single counterparty dependency in the capital structure. The Series E in February 2025 raised $160M at $3.3B valuation — a 2.2x step-up from Series D — led by returning investors and signalling sustained institutional demand. The secondary market transaction in April 2025 implied a $4.5B valuation, representing a further 36% step-up in just eight months and suggesting strong demand from secondary buyers anticipating an IPO re-rating. JPMorgan, HSBC, and Morgan Stanley have been engaged as IPO banks, with Tabby targeting the Saudi Tadawul as the primary listing venue. The IPO window is most commonly cited as 2026-2027 by analyst and news sources, though no formal filing has occurred. The total equity raised across all rounds exceeds $650M, and the JPMorgan debt facility brings total financing accessed to approximately $1.35B — providing substantial runway and GMV capacity through the IPO process.[CV001, CV002, CV003, CV005, CV010, CV011]

8.4 Bull / Base / Bear Scenarios

Three valuation scenarios bracket the return range from the $4.5B secondary mark. The bull case assumes a 2026-2027 IPO at approximately 20x forward revenue on a 2026 estimated revenue base of $600M, implying a $6B-$8B IPO valuation. This scenario requires Tweeq wallet monthly active users exceeding 2 million within 12 months, UAE expansion contributing materially to group revenue, and a benign SAMA regulatory environment. The return logic is 33-78% upside from the $4.5B secondary mark on a 3-4 year hold, contingent on public market re-rating from private BNPL multiple to a diversified fintech multiple as wallet revenue contribution grows. Probability signal is low-to-medium: achievable but requires simultaneous execution of multiple strategic initiatives. The base case targets a 2027 IPO at approximately 15x forward revenue on 2027 estimated revenue of $520M, implying $4.5B-$6B valuation. This scenario assumes KSA-dominant growth continues at current trajectory with moderate UAE contribution, no material SAMA tightening, and Tweeq wallet contributing modestly. The return logic is 0-33% upside from $4.5B on a 2-3 year horizon — flat to modest gain unless the public market awards a premium multiple at IPO. Probability signal is medium, consistent with current trajectory if execution holds. The bear case assumes SAMA tightening caps credit limits, IPO is delayed beyond 2027, and competitor fee pressure from Tamara squeezes merchant margins, holding 2026 revenue at $350M. At 8-10x depressed multiples, valuation falls to $2.5B-$3.5B — representing 22-44% loss from current secondary mark, potentially triggering a down-round if IPO is deferred beyond 2028. Probability signal is low-to-medium: non-trivial tail risk given SAMA regulatory uncertainty.[CV023, CV024, CV025, CV006, CV007, CV022]

8.5 Comparable Set Analysis

Tabby's comparable set spans global BNPL peers, MENA regional operators, and relevant M&A transactions. Klarna is the closest structural comparable — a profitable BNPL operator preparing for a 2025 IPO with estimated $15B valuation on 2024 revenue of $2.8B, implying approximately 5.4x revenue. Klarna's profitable scale and European market dominance provide the most direct parallel, though the maturity difference is material: Klarna operates at nearly 7x Tabby's scale. Tabby's 12-17x revenue multiple represents a significant premium to Klarna's 5.4x — justified in part by MENA's higher growth trajectory and Tabby's smaller base, but requiring significant execution to sustain through IPO. Afterpay, acquired by Block (formerly Square) in 2022 for approximately $29B, provides a useful M&A ceiling benchmark but was executed at the peak of the BNPL cycle when growth was paramount and interest rates were near zero — conditions that do not replicate today. Tamara, the nearest direct MENA competitor operating under SAMA licence in KSA, is privately valued at approximately $1B based on Series C estimates — representing less than one-quarter of Tabby's implied valuation. This relative premium reflects Tabby's first-mover advantage, user scale, and profitability. Zip, the ASX-listed BNPL company that acquired Spotii for MENA market entry, provides a cautionary precedent: its market capitalisation of approximately $500M AUD illustrates how BNPL operators struggle to sustain premium multiples in public markets without clear profitability. The comparables analysis supports Tabby's premium over regional peers but shows material compression risk versus global BNPL multiples at IPO.[CV012, CV013, CV021, CV022, CV033, CV037]

8.6 Exit Readiness and Final Diligence Asks

Tabby's IPO readiness is materially advanced relative to most pre-IPO growth companies. Two consecutive profitable years in KSA (2024 and 2025), SAMA licence compliance maintained since July 2022, UAE CBUAE SVF licence obtained in April 2026, and engagement of JPMorgan, HSBC, and Morgan Stanley as IPO banks collectively signal a company in active pre-IPO preparation. The Saudi Tadawul listing target aligns with Saudi Vision 2030 objectives and provides a domestic investor base that understands Tabby's regulatory context — a structural advantage over cross-border listings. However, six material diligence items remain outstanding that are necessary before a conviction investment decision. Audited consolidated financial statements covering KSA, UAE, Kuwait, and Tweeq entities would confirm group-level profitability versus the KSA-only disclosed metrics. Cohort retention and NRR data would validate the sustainability of customer economics and repeat purchase rates. IPO prospectus terms would clarify post-IPO dilution, preference share conversion, and the distribution of IPO proceeds to existing holders. Cap table and preference stack details are necessary to model investor returns under different IPO price scenarios. Credit loss provisioning rate disclosed in audited accounts would enable independent verification of whether the reported $55M net profit reflects conservative or aggressive provisioning. Finally, SAMA licence renewal conditions and terms must be confirmed directly to assess the single highest-severity regulatory risk to the IPO timeline. Absent these items, Track / Research More remains the appropriate posture — the company is monitoring-worthy but requires materially more evidence before investment commitment at current valuation levels.[CV004, CV010, CV011, CV027, CV028, CV029]

8.7 Exhibits