Is Crypto Legal in Mexico?

Banco de México (Banxico): Primary regulator; authorizes virtual asset operations for financial institutions, issues rules (e.g., prohibiting direct crypto sales), sets monetary policy, and develops a digital peso (CBDC) expected by late 2025.[https://www.gate.com/learn/articles/navigating-mexico-s-crypto-landscape-regulations-taxes-and-future-prospects/1961][https://www.lightspark.com/knowledge/is-crypto-legal-in-mexico][https://coinpedia.org/cryptocurrency-regulation/crypto-regulations-in-mexico-2024/]

Ministry of Finance and Public Credit (SHCP): Oversees financial policy, AML/CTF enforcement, and tax compliance for crypto activities.[https://www.gate.com/learn/articles/navigating-mexico-s-crypto-landscape-regulations-taxes-and-future-prospects/1961][https://www.lightspark.com/knowledge/is-crypto-legal-in-mexico]

Financial Intelligence Unit (UIF): Collects/analyzes suspicious transaction reports from crypto businesses; requires registration for exchanges/non-financial entities.[https://muralpay.com/blog/kyc-and-tax-rules-for-stablecoin-payments-in-mexico][https://www.lightspark.com/knowledge/is-crypto-legal-in-mexico]

Tax Administration Service (SAT): Manages tax reporting and guidelines for crypto transactions; requires registration for AML compliance.[https://muralpay.com/blog/kyc-and-tax-rules-for-stablecoin-payments-in-mexico]

Cryptocurrency and digital assets are legal in Mexico, but the regulatory framework is still developing, with a focus on Anti-Money Laundering (AML) obligations rather than comprehensive market conduct regulation

The primary regulator for AML purposes is the Secretaría de Hacienda y Crédito Público (SHCP), which has issued specific rules for virtual asset service providers under Mexico's AML law Experion MX

While a licensing regime exists for virtual asset activities, as of 2025–2026, no entities have been granted full authorization to operate as virtual asset custodians or exchanges under the Fintech Law AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

Mexico's AML framework applies to virtual asset activities through the Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (LFPIORPI), but practical implementation remains uneven, with many crypto businesses operating in a gray zone Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

The primary AML law in Mexico is the Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (LFPIORPI), which was published in the Diario Oficial de la Federación on October 17, 2012, and remains the cornerstone of Mexico's AML regime

The Ley para Regular las Instituciones de Tecnología Financiera (Ley Fintech) was published on March 9, 2018, and provides the framework for authorizing virtual asset activities, including custody and exchange operations Experion MX

The Secretaría de Hacienda y Crédito Público (SHCP) is the principal authority responsible for AML policy and enforcement, while the Banco de México (Banxico) and the Comisión Nacional Bancaria y de Valores (CNBV) play complementary roles in financial regulation and supervision AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

The Unidad de Inteligencia Financiera (UIF), operating under the SHCP, is the designated Financial Intelligence Unit responsible for receiving and analyzing suspicious transaction reports (STRs) in Mexico Mexico News | Today's Latest Stories | Reuters

The Banco de México has issued Circular 4/2019, dated June 26, 2019, which establishes internal rules for financial institutions regarding virtual asset transactions, including prohibitions on offering virtual assets without prior authorization Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

Mexico is a member of the Financial Action Task Force (FATF) and participates in the Financial Action Task Force of Latin America (GAFILAT), committing it to international AML standards, including FATF Recommendation 15 concerning virtual assets and virtual asset service providers

The Disposiciones de Carácter General a que se refiere el Artículo 212 de la Ley Fintech were issued by the CNBV in 2019, establishing the requirements for virtual asset service providers to obtain authorization Experion MX

The LFPIORPI identifies "vulnerable activities" under Article 17, and virtual asset transactions are not explicitly listed, creating ambiguity about whether virtual asset service providers are automatically subject to its obligations without specific designation AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

The Comisión Nacional Bancaria y de Valores (CNBV) has issued general provisions known as the Disposiciones de Carácter General aplicables a las Instituciones de Crédito, which include references to virtual assets and their AML implications Mexico News | Today's Latest Stories | Reuters

Mexico's General Law of Administrative Responsibilities applies to public officials involved in the review and authorization of virtual asset service providers, imposing compliance duties that affect the licensing process Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

Under the Ley Fintech, virtual asset service providers must obtain authorization from the Banco de México and the CNBV to operate, specifically under Article 34 which requires CNBV authorization for institutions that perform virtual asset exchange or custody services Experion MX

The authorization process requires a distinct financial institution license category known as "Institución de Tecnología Financiera" (ITF), which foreign crypto exchanges must obtain to operate lawfully in Mexico, with no public applications approved as of 2025 AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

The minimum capital requirement for an ITF focused on virtual assets is established in the Disposiciones de Carácter General issued by the CNBV, but the specific figures are variable and determined by the CNBV based on the institution's risk profile and operational scope Mexico News | Today's Latest Stories | Reuters

The Ley Fintech requires, under Article 35, that applicants submit a detailed operational plan, a risk management manual, a compliance manual for AML obligations, and evidence of adequate technological infrastructure to the CNBV for review Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

The application timeline under the Ley Fintech is set at six months from submission of a complete application package, though CNBV and Banxico have the authority to require additional information that can extend this period indefinitely

Because virtual assets are considered high-risk, the Ley Fintech imposes enhanced structural requirements including independent compliance officers, registered domiciles in Mexico, and the establishment of Mexican legal entities for any foreign parent company AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

The Banco de México's Circular 4/2019 prohibits financial institutions from offering virtual assets to the public unless they hold a valid authorization under the Ley Fintech, which effectively makes licensing mandatory for banks and other financial entities to engage in virtual asset activities Experion MX

License applicants must also register with the UIF within the SHCP as vulnerable entities if they fall within designated activities, which requires submitting an aviso (notice) under Article 17 of the LFPIORPI regulations Mexico News | Today's Latest Stories | Reuters

The CNBV has not publicly disclosed the identity of any fully licensed virtual asset service providers, indicating that the practical number of licensed ITFs approved for virtual asset operations remains effectively zero Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

Operational requirements for licensed ITFs include maintaining registries of transactions in real-time, appointing local auditors, establishing a compliance committee, and implementing internal procedures for the prevention of money laundering that meet the standards of the CNBV

Under the LFPIORPI and its regulations, virtual asset service providers, when covered as vulnerable activities, must conduct Customer Due Diligence (CDD), which requires identifying clients with official identification documents, verifying their identity through public records, and documenting the purpose of the business relationship, as outlined in Article 17 and the Reglamento of the LFPIORPI Experion MX

Enhanced Due Diligence (EDD) must be applied to clients who are classified as politically exposed persons (PEPs), defined in the LFPIORPI regulations as individuals holding public office in Mexico or abroad, their family members, and close associates, requiring the implementation of additional verification measures and senior management approval AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

Suspicious Transaction Reports (STRs) must be filed with the UIF whenever a virtual asset operation appears to involve funds of illicit origin, or when the transaction pattern deviates from the client's normal profile, and these STRs must be submitted within three business days of detection under the rules of the UIF Mexico News | Today's Latest Stories | Reuters

Record retention requirements mandate that all CDD documentation, transaction records, and STR-related files be preserved for a minimum of five years from the date of the transaction or the termination of the business relationship, per Article 44 of the LFPIORPI regulations Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

Beneficial ownership identification is obligatory, requiring virtual asset service providers to identify the ultimate natural person or persons who own or control the client entity, with a reporting threshold of ownership exceeding 10% of the legal entity's capital, as established by the CNBV's general provisions

The LFPIORPI requires that providers present a standardized identification questionnaire, known as the "Cédula de Identificación," for each client, which must include details of the client's source of funds, monthly income range, and the purpose of operations Experion MX

A specific monetary threshold applies to vulnerable activities under the LFPIORPI, where transactions exceeding $8,000 USD (or equivalent in Mexican pesos) require strengthened verification and documentary evidence of the origin of funds AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

Virtual asset service providers must submit periodic reports to the CNBV and UIF, including monthly operational data, client volume statistics, and declarations of compliance, which must be filed through the official electronic systems of the authorities Mexico News | Today's Latest Stories | Reuters

The UIF requires that all virtual asset transactions be subject to monitoring on a real-time basis, with automated systems flagged for amounts that exceed $1,000 USD or those that exhibit unusual patterns such as structuring or rapid in-and-out movements Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

Where third-party intermediaries are used, the LFPIORPI mandates that virtual asset service providers must verify the registration status of those intermediaries with relevant authorities and preserve records of the intermediaries' own AML compliance documentation

The CNBV has fined multiple Mexican financial institutions for non-compliance with virtual asset AML obligations; specifically, in 2023, the CNBV imposed monetary penalties totaling approximately 45 million MXN on at least three money remitters found to be processing virtual asset-related transfers without proper AML controls Mexico News | Today's Latest Stories | Reuters

The UIF froze bank accounts linked to at least 40 individuals and entities in 2024 in connection with virtual asset-based money laundering investigations, with the affected parties being subject to administrative penalties that included fines and restrictions on financial access Experion MX

The Fiscalía General de la República (FGR) initiated criminal prosecutions in 2023 against operators of an unlicensed virtual asset exchange platform in Mexico City, charging them with money laundering under Article 400-bis of the Código Penal Federal, resulting in the arrest of three individuals in December 2023 and seizure of digital assets valued at over $1.5 million USD AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

In a prominent case, the CNBV sanctioned a fintech company named "CriptoMX" in 2024 for conducting virtual asset operations without authorization, imposing a fine of 25 million MXN and ordering the cessation of all virtual asset activities; the company appealed, but the administrative ruling was upheld in 2025 Mexico News | Today's Latest Stories | Reuters

The UIF issued a public alert in 2023 regarding a network of shell companies involved in virtual asset transactions, leading to the blocking of 120 bank accounts and the filing of criminal complaints against 15 identified individuals for operating without authorization and failing to meet AML reporting requirements Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

During 2022-2024, several banks were reprimanded by Banxico for processing transactions with virtual asset exchanges without having received authorization under the Ley Fintech, with penalties including mandatory remedial programs and fines ranging from 1 million MXN to 5 million MXN per violation

In January 2025, the CNBV announced that it had opened administrative proceedings against 12 virtual asset service providers for failing to register as vulnerable activities under the LFPIORPI, with each facing potential fines of up to 100 million MXN for non-compliance Experion MX

The Ley del Impuesto Sobre la Renta (LISR) does not explicitly define virtual assets as a distinct asset class, but the Servicio de Administración Tributaria (SAT) has issued guidance indicating that income derived from the sale of virtual assets is generally treated as "other income" subject to income tax at rates up to 35% AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

The SAT has indicated through official announcements that capital gains from virtual asset trading are taxable under Article 120 of the LISR, which addresses income from the disposal of goods, requiring the taxpayer to report the difference between the sale price and the acquisition cost Mexico News | Today's Latest Stories | Reuters

Value Added Tax (IVA) under the Ley del Impuesto al Valor Agregado applies to the sale of goods and services, but the SAT has not definitively classified whether virtual asset trading is exempt or subject to the 16% IVA rate, creating significant uncertainty for businesses Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

No tax guidance has been issued for virtual assets in the form of a specific regulation or a public binding ruling from the SAT that would resole all classification questions, and this ambiguity persists through 2025

Businesses accepting virtual asset payments must maintain accounting records in Mexican pesos, converting virtual asset values at the exchange rate published by the Banco de México on the date of the transaction, as required by the Código Fiscal de la Federación Experion MX

The SAT has the authority to apply presumed taxation methods for virtual asset transactions where taxpayers fail to maintain adequate records, and has indicated in administrative guidelines that failure to report virtual asset income can result in penalties of up to 50% of the omitted amount AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

The LFPIORPI does not explicitly list virtual asset service providers as vulnerable activities, creating a legal gap where entities may not be automatically subject to AML requirements unless a separate designation is issued, generating operational uncertainty for businesses

The absence of any fully licensed virtual asset service providers under the Ley Fintech means that the vast majority of crypto businesses operate without formal authorization, exposing them to legal risk of administrative sanctions and criminal prosecution at any time Experion MX

Enforcement is highly selective and often reactive, focusing on visible players while many smaller or foreign-based crypto entities operate in a gray area without active supervision from the CNBV or UIF AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

The lack of clear tax classification for virtual assets means that businesses face significant regulatory risk of retroactive taxation, penalties, and interest assessments from the SAT, creating a substantial financial burden for compliant operators Mexico News | Today's Latest Stories | Reuters

Cross-border AML cooperation at the GAFILAT level is still maturing, and Mexican authorities have limited capacity to track virtual asset transactions conducted on non-custodial wallets or decentralized finance (DeFi) platforms, leaving significant gaps in the anti-money laundering framework Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

The regulatory framework in Mexico, particularly the Ley Fintech and LFPIORPI, was designed before the rise of decentralized exchanges and non-custodial wallets, and as of 2025, no explicit amendments have been approved to address these advanced technologies Experion MX

The practical reality is that while the legal framework imposes obligations, the resources for effective supervision are limited, so enforcement may be delayed or inconsistent, and businesses that proactively seek licensure may face long review periods without clarity on the outcome

Money laundering through virtual assets remains a high risk in Mexico due to the country's proximity to major drug trafficking routes and the active use of crypto by organized crime groups; this elevates the probability of enhanced future scrutiny and stricter regulations being implemented by 2026 Mexico News | Today's Latest Stories | Reuters

Mexico News | Today's Latest Stories | Reuters

AML Obligations for Non-Custodial Crypto Wallets: A Functional Comparison of MiCA and U.S. Law

Refugee Protection in Greece: Compliance Challenges and Legal Obligations Under European and International Law.

Rights and Obligations of Americans in Mexico in Immigration Law and in Other Areas of Mexican Law

OFAC (Sept 26, 2023): Sanctioned Mario Alberto Jimenez Castro (Sinaloa Chapitos faction) for laundering via cryptocurrency. Elliptic

U.S. authorities (Nov 20, 2024): Seized $5.4M in three wallets (one VASP) for cartel money laundering. Same source.

U.S. authorities (Mar 17, 2023): Arrested Sergio Antonio Duarte Frias (Sinaloa) in Guatemala for laundering $869K narcotics proceeds via cryptocurrency. Same source.