A foreign-owned operating company in Mexico – one with existing bank accounts and a credit facility in place – could find its financial relationships suspended within weeks. That is the direct consequence of failing to meet tightened anti-money laundering obligations now in effect under Mexico's AML and counter-financing-of-terrorism legislative regime. International companies cannot afford to treat these changes as a domestic compliance matter. The exposure is concrete, the deadlines are firm, and the costs of inaction extend well beyond administrative fines.
Mexico's AML legislation, updated and progressively enforced through 2025 and into 2026, strengthens beneficial owner disclosure requirements. Expands the scope of entities subject to mandatory KYC and reporting obligations. Additionally, introduces stricter conditions for bank account opening and the maintenance of existing financial arrangements. Companies operating in Mexico – including foreign subsidiaries, branches, and joint ventures – must complete or update their compliance filings within the timeframes set by the financial intelligence unit, Unidad de Inteligencia Financiera (UIF). Non-compliance risks account restriction, denial of credit facilities, and regulatory sanctions.
This alert describes the core changes, identifies the business categories most directly affected, and sets out the immediate actions required to maintain good standing under Mexico's AML regime.
What changed – the regulatory development and effective dates
Mexico's AML legislative regime has been reinforced through amendments and regulatory circulars issued by the UIF and the financial sector supervisor, Comisión Nacional Bancaria y de Valores (CNBV). Several changes are now in effect or approaching full enforcement.
The first significant shift concerns beneficial owner identification. All legal entities operating in Mexico. or maintaining financial accounts with Mexican institutions. must now register and maintain an up-to-date beneficial owner record in the national registry administered by the tax authority. Servicio de Administración Tributaria (SAT). This registry requirement, which applies to companies controlled directly or indirectly by natural persons, is no longer aspirational. Financial institutions are required to verify registry entries as a condition of maintaining correspondent banking relationships and processing transactions above threshold amounts.
The second development concerns enhanced due diligence at the institutional level. Mexican banks and financial intermediaries have been directed to apply stricter KYC procedures to clients categorised as higher risk. This includes foreign-controlled entities, companies operating in cash-intensive sectors, and businesses with complex ownership structures. KYC documentation must now be refreshed on a defined cycle – not merely collected at onboarding. Entities that opened bank accounts several years ago and have not since updated their files are particularly exposed.
The third change affects reporting thresholds. The monetary thresholds triggering mandatory suspicious activity reports and cash transaction disclosures have been revised downward in certain sectors. Companies in real estate, professional services, luxury goods, and import-export activities face lower trigger points. This aligns Mexico's approach more closely with the Financial Action Task Force (FATF) recommendations, following Mexico's mutual evaluation cycle.
For companies with existing credit facilities in Mexico, the practical risk is acute. Lenders are now required to conduct periodic AML reviews of corporate borrowers. A company that cannot demonstrate beneficial owner registration and current KYC compliance may find its credit facility subject to early review or suspension – regardless of payment history.
For a comparative view of AML developments in the United States – a jurisdiction closely interlinked with Mexico through cross-border financial flows – see our alert on Anti-Money Laundering Updates in the United States.
Who is affected – threshold criteria and business categories
The updated AML obligations apply broadly, but several categories of company face heightened scrutiny and shorter effective compliance windows.
Foreign-owned subsidiaries and branches. Any Mexican entity with a foreign ultimate beneficial owner is subject to the full beneficial owner registry requirement. The registry must reflect the natural person or persons who ultimately control or benefit from the entity. Nominee structures, holding chains through intermediate jurisdictions, and dual-class share arrangements are all subject to look-through analysis.
Companies in designated non-financial sectors. Mexico's AML legislation defines a range of actividades vulnerables (vulnerable activities) – business activities subject to AML reporting obligations regardless of whether the company holds a financial licence. These include real estate transactions, professional services provided to companies (legal, accounting, trust administration), vehicle sales, precious metals and stones, gambling operations, and certain import-export activities. Companies in these sectors must file periodic activity reports with the UIF directly.
Entities maintaining bank accounts or seeking new ones. Bank account opening in Mexico now requires full beneficial owner documentation at the outset. Existing account holders whose documentation predates the current regulatory standards will be contacted by their institution for a KYC refresh. Failure to respond within the institution's set period – typically 30 to 60 days from first notice – creates grounds for account restriction.
Companies with correspondent banking relationships. Mexican financial institutions that maintain correspondent banking relationships with foreign banks apply AML standards that flow directly through to their corporate clients. A foreign company using a Mexican bank to settle cross-border payments must meet the same beneficial owner and KYC standards as a domestic entity. Correspondent banking restrictions imposed on non-compliant clients can disrupt international payment flows with little warning.
To receive an expert assessment of your company's AML compliance position in Mexico, contact us at info@ferrazwhitmore.com.
What to do now – immediate actions and compliance timeline
International companies should treat the following as a structured compliance checklist rather than a general recommendation. Each item carries a distinct timeline risk.
- Register or update your beneficial owner record with the SAT. If your Mexican entity has not yet completed its beneficial owner registration – or if the registered information no longer reflects current ownership – this is the highest-priority action. The SAT registry requires identification of the ultimate controlling natural person, their ownership percentage, and their tax identification details. Incomplete or outdated records trigger automatic non-compliance flags that financial institutions can access.
- Audit your KYC file at each Mexican financial institution. Contact every bank or financial intermediary with which your entity maintains a relationship. Request confirmation of whether your file is current under the institution's revised KYC standards. Do not wait for the institution to initiate this. Proactive engagement shortens the refresh timeline and reduces suspension risk.
- Review your sector classification under the vulnerable activities regime. If your company's operations touch any of the designated sectors, confirm whether periodic UIF reporting is required and whether reports are current. Late or missing reports carry administrative penalties. They also create a compliance record that affects future bank account opening and credit facility applications.
- Assess your correspondent banking exposure. If your company uses a Mexican financial institution to process cross-border payments, identify whether that institution has issued any compliance notices or updated its due diligence requirements for foreign-controlled clients. Engage proactively before any transaction is delayed or blocked.
- Document your internal AML controls. Mexican AML legislation requires entities in regulated sectors to maintain written AML policies, appoint a compliance officer, and conduct periodic internal reviews. If these elements are absent or out of date, they should be formalised as a matter of urgency – before any regulatory inspection or institutional review is triggered.
Companies considering capital markets activity in Mexico should also be aware that AML compliance directly conditions access to regulated platforms. Our team's analysis of capital markets law in Mexico covers the intersection of AML obligations with securities issuance and investor onboarding requirements.
For a full review of your banking and finance obligations in Mexico, including AML, KYC, and beneficial owner compliance, visit our dedicated page on banking and finance law in Mexico.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our Americas practice supports international companies with AML compliance, KYC documentation, beneficial owner registration, and banking regulatory matters in Mexico and across Latin American markets. We work with foreign subsidiaries, institutional investors, and in-house legal teams who need reliable, results-oriented counsel in civil law systems. As a law firm in Mexico and Iberian markets with deep experience in cross-border financial regulation, we help companies build compliance programmes that withstand institutional scrutiny. Engaging a lawyer in Mexico with cross-border AML expertise early in the process reduces the risk of account restriction and preserves financial relationships that are difficult to reinstate once disrupted. To discuss your compliance position and assess your obligations under Mexico's current AML regime, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.
Published: March 21, 2026
Author: Marco Reyes – International Counsel, Americas & Iberian Markets
Marco Reyes is an International Counsel at Ferraz & Whitmore advising clients on legal matters across Latin American jurisdictions and Iberian markets. He specialises in commercial litigation, investment disputes, and cross-border contract enforcement in civil law systems.