Is there a black/underground solution for this?

I can imagine supplying some needy soul with a phone kitted out with a different country's international roaming plan, so that that IMEI was never registered locally, nor associated with a Saudi citizen.