Merchant Category Codes (MCCs) are 4-digit codes assigned by Mastercard to classify businesses by the type of goods or services they provide.
SiFi uses MCCs to help you manage and restrict how cards are used, giving your company tighter control over spend.Category Controls let you group MCCs into meaningful categories such as Fuel, Restaurants, Airlines, Software, Government, etc. and then apply rules to card usage.
For example:
Issue a fuel-only card for company drivers by allowing only Fuel category MCCs.
Block Entertainment & Hospitality categories for certain employees to prevent out-of-policy spend.
Issue card for marketing team to do spend on marketing only
Issue a card for employee to transport in Riyadh metro
This ensures company funds are used exactly where intended.
Category restrictions can be applied to both new and existing cards (physical or virtual). You have two options:
Allow Categories Only
The card will work only in the categories you select.
Example: If you allow “Fuel + Repairs”, the card can’t be used at restaurants or hotels.
Block Categories Only
The card will work everywhere except in the blocked categories.
Example: If you block “Entertainment”, the cardholder won’t be able to use it for cinemas, gaming, or ticket purchases.
Here’s how SiFi groups MCCs into categories:
Category Control | Description | Example in KSA |
Airline | Domestic & International Airlines | Saudia, Flynas, Emirates |
Hotels | Hotels, motels, resorts, short-term rentals | Ritz-Carlton Riyadh, Hilton, Citadel |
Food & Beverages | Restaurants, cafes, fast food, delivery | HungerStation, Jahez, Herfy, Keeta |
Professional Services | Specialized services provided by individuals, firms, consulting companies, law firms, agencies etc | PWC, KPMG, Seera Group |
Marketing | Online & Offline Advertisers | Meta Ads, LinkedIn, Google Ads, Snapchat |
Health | Hospitals, clinics, pharmacies | Sulaiman Al Habib, Dallah Hospital, Al Nahdi Pharmacy |
Government | Portals & government fees | Absher, Muqeem, MOH |
Software | SaaS, software, hosting, IT services | Adobe, Google Cloud, Apple, ChatGPT, Salla, Zid |
Utility | Telephone, airport services, cable, electricity, Gas | GASCO, SEC, STC, Mobily |
Financial Services | Payment service providers, remittance, insurance, banking and financial institutions | Enjaz, Bupa, Med Gulf, Tawuniya, HSBC, SNB |
Entertainment | Cinemas, events, ticketing, recreation | VOX Cinemas, Ticketmaster, Qiddiya |
Office Supplies | Printing, stationery, office furniture | Jarir Bookstore, Office Depot |
Logistics | Courier services, rail, freight | DHL, Aramex, Saudi Rail |
Fuel | Fuel stations and petrol products | Saudi Aramco, Petromin, ADNOC |
Transportation | Ride hailing, Car Rental, Bus, Metro | Riyadh Metro, Careem, Uber, Theem |
Retail | Clothing stores, electronics, retail outlets | Extra, Centerpoint, Max, LV |
You can enforce category controls at two levels:
Apply once at the Budget and it will automatically apply to all cards linked to that budget.
Best for standardizing rules across a squad, department, or project (e.g., Growth budget allows Ads + Software only).
Ideal when you want consistent policy without managing each card individually.
Example:
Marketing Budget → Allow Advertising & Marketing, Software & Technology.
All cards under this budget inherit those rules.
Apply to a specific card only.
Useful for exceptions or tighter controls for a single cardholder (e.g., fuel-only driver card).
Example:
Driver’s card → Allow Fuel only, even if the parent budget allows more categories.
Company-wide baseline: Set controls at Budget (e.g., block “Entertainment” for all Ops cards).
Tighter for individuals: Add Card-level rules for stricter cases (e.g., a vendor runner card limited to Supermarkets + Pharmacies).
Temporary campaigns: Create a project Budget with just Airlines + Hotels for a travel-intensive month, then archive it later.

Unexpected MCCs
Sometimes, the MCC assigned by Mastercard may not match what you expect.
Example: AWS appears under Business Services, not Software & Technology.
One Merchant, Multiple Services
Some companies use the same MCC across multiple services.
Example: Careem may use the same code for both ride-hailing and food delivery, so blocking “Taxi” might not block Careem Food orders.
Immediate Declines
If a cardholder tries to pay in a blocked category, the transaction will be instantly declined.