Is alrajhibank.com.sa legit? TrustSniffer's high-trust assessment: 100/100

Overview

The website is the Arabic public-facing retail and commercial banking site of Al Rajhi Bank, presenting deposit accounts, cards, personal, automotive and mortgage financing, insurance, loyalty services, investor information, customer support and digital banking access. Its apparent business model is the provision of regulated banking and related financial services through online customer journeys and branch-supported channels.

Scam/Impersonation Risk

No contradictions were observed: the supplied evidence identifies no phishing, impersonation, malicious-content, blacklist, or conflicting-identity indicators. The site's Arabic branding, banking product structure, customer-support content and investor-related material are internally consistent with an established financial institution. One abuse report is associated with the hosting IP, but it is attributed to shared Oracle Public Cloud infrastructure, carries zero confidence, and is therefore not evidence that the website itself is abusive. The real-world operator identity remains independently unverified, so the legitimacy conclusion is evidence-consistent rather than proven. Evidence:

• The homepage is classified as a corporate banking site and presents accounts, cards, financing, insurance, loyalty services and digital banking.
• The page-level review records no red flags and no detected brand-impersonation or phishing indicators.
• The domain has a registration age of 25.973990417522245 years; archival records show 1,201 snapshots from 2000-08-19 through 2026-08-03, spanning 27 tracked years.

Regulatory Verification Notes

The site's legal and institutional content includes regulatory/licensing information, corporate-registration material, investor information and formal support channels. However, the supplied evidence does not independently verify a specific licence number or connect the online service conclusively to a real-world operator; this is a verification limitation rather than a scam indicator. The available external reputation context is clean overall, with no matched broker warning and no confirmed malicious or blacklist finding. Evidence:

• The homepage and associated institutional content identify regulatory/licensing details, investor information and corporate contact material.
• The site's transport encryption uses an OV certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, valid through 2027-01-23.
• The page capture completed successfully with no sensitive form, hidden form or untrusted form destination detected.

What to Verify Next

Before credential or payment interactions, an institution should independently confirm that the domain is the official digital channel listed by the relevant bank or financial regulator, and confirm the applicable licence and legal-entity details through the regulator's registry. Account holders should also use independently sourced customer-service or branch contact details and confirm the applicable transaction, privacy, complaints and payment-protection terms before conducting material transactions. Evidence:

• The site provides customer-support, branch and contact information suitable for comparison with independently sourced institutional records.
• The homepage presents account opening and login entry points but no sensitive form was captured during review.
• The reviewed content includes privacy and cookie policy topics, customer support, branch/ATM information and investor relations.

Summary Verdict

Available evidence is consistent with an established, apparently legitimate banking website and supports a high-trust, low-risk posture for normal browsing and ordinary banking interaction. The classification is strong, while independent verification of the real-world operator remains incomplete.

Infrastructure Integrity

The site resolves through Oracle Corporation's US infrastructure, with no CDN or WAF detected in the supplied network assessment and one resolved address assessed as a likely origin rather than an edge address. This provides a conventional, identifiable hosting posture, while the absence of an intermediary protection layer means infrastructure controls should be treated as a mitigating factor only, not as proof of legitimacy. Evidence:

• Hosted on AS31898, ORACLE-BMC-31898 - Oracle Corporation, US.
• The infrastructure assessment recorded 1 unique IP, 0 edge IPs and 1 likely origin IP.
• The TLS certificate is OV-validated, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, and expires 2027-01-23.

Closing Assessment

Ordinary use is proportionate to the high-trust assessment, provided credential and payment activity is preceded by the normal independent institutional, legal-entity, return-policy and payment-protection checks expected for financial services.

Signals weighed against the site

• AbuseIPDB: 1 report on hosting IP 158.101.252.178 (Oracle Public Cloud, Data Center/Web Hosting/Transit), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.