Legal guide for foreign investors doing business in Mexico

Mexico is a serious business destination. It has a 130-million-person domestic consumer market, a manufacturing base integrated into North American supply chains through USMCA, a tourism economy that attracts roughly 35 million international visitors per year, and a growing services sector that is drawing nearshoring investment from US companies looking to reduce exposure to Asian supply chains. The opportunity is real.

The legal environment is also genuinely complex. Mexico has federal regulatory agencies, state-level requirements, and sector-specific authorities that all want their piece of your compliance calendar. Companies that arrive with strong business logic but weak legal preparation routinely spend their first two years cleaning up problems they could have avoided with a few months of proper setup.

The Mexico market opportunity

The USMCA (formerly NAFTA) is the structural foundation of Mexico's appeal to US and Canadian investors. It provides preferential tariff treatment, rules-of-origin frameworks that favor North American production, and cross-border service provisions that matter for technology and professional services companies. Since 2022, the reshoring and nearshoring trend has accelerated: geopolitical risk in Asia and supply chain disruptions have pushed companies to move production closer to the US market, and Mexico—with competitive labor costs, USMCA coverage, and geographic proximity—has been the primary beneficiary.

Beyond manufacturing, Mexico's domestic consumer market is underpenetrated in most categories. Retail, financial services, healthcare, education, and technology all have significant room for foreign-origin businesses to compete. And the tourism economy—particularly in Quintana Roo—continues to attract foreign capital into hospitality, real estate, and consumer services.

The legal checklist for entering Mexico

The sequence below is not arbitrary. Each step has a legal deadline or a triggering event. Missing them creates fines, compliance gaps, or operational blocks.

Step 1: Entity formation

Foreign investors in Mexico typically choose between two entity types under the General Law of Commercial Companies (Ley General de Sociedades Mercantiles, LGSM):

S.A. de C.V. (Sociedad Anónima de Capital Variable)—the Mexican equivalent of a corporation. Shares are represented by stock certificates, transfer is relatively straightforward, and the structure is familiar to institutional investors. Minimum two shareholders required. This is the standard choice for companies that anticipate outside investors, a future sale, or the need to issue equity instruments.

S. de R.L. de C.V. (Sociedad de Responsabilidad Limitada de Capital Variable)—the Mexican equivalent of an LLC. Partners hold ownership interests rather than shares. Transfer of interests requires unanimous partner consent unless the partnership agreement says otherwise. Simpler governance, lower administrative burden, and popular with US investors because the structure can potentially qualify for pass-through tax treatment under US rules. Maximum 50 partners.

Mexico's Foreign Investment Law (Ley de Inversión Extranjera, LIE) sets the framework for foreign ownership. Most sectors are open to 100% foreign ownership. Some are restricted (up to 49% foreign participation), and a few require prior authorization from the National Foreign Investment Commission (Comisión Nacional de Inversiones Extranjeras, CNIE). Understanding which category your sector falls into is the first question to answer before choosing an entity structure.

Step 2: RFC tax registration

Every entity that begins activities in Mexico must register with Mexico's Tax Administration Service (Servicio de Administración Tributaria, SAT) and obtain a federal taxpayer ID (Registro Federal de Contribuyentes, RFC). The RFC is the tax identification number used on every invoice (CFDI), payroll record, and tax filing. Operating without an RFC is not merely an administrative oversight—it is a tax evasion risk that creates personal liability for the directors.

The RFC registration should happen within 30 days of beginning operations. "Beginning operations" is interpreted broadly: opening a bank account, signing a lease, and hiring an employee all qualify as beginning operations.

Step 3: RNIE registration

Within 40 days of the entity's incorporation date, foreign-owned companies must register with the RNIE (National Registry of Foreign Investments; Registro Nacional de Inversiones Extranjeras). The RNIE is maintained by the Ministry of Economy (Secretaría de Economía) and tracks foreign capital in the Mexican economy. Registration is administrative, but the deadline is strict. Failure to register triggers a fine and can complicate future regulatory interactions.

After the initial registration, RNIE reports must be filed quarterly (for companies with paid-in capital above a threshold) or annually. Keeping this current is a low-effort obligation that gets neglected surprisingly often.

Step 4: IMSS employer registration

Before hiring your first employee, the company must register as an employer with the IMSS (Instituto Mexicano del Seguro Social). IMSS provides workers with healthcare, disability, and retirement benefits. The employer's contribution rate varies by payroll category and sector but typically runs between 25 and 35% of payroll cost.

The IMSS registration must be completed before the employee's first day of work. Employing workers without IMSS registration creates significant back liability—the agency can assess contributions retroactively plus surcharges.

Step 5: STPS and INFONAVIT registration

The Ministry of Labor and Social Welfare (Secretaría del Trabajo y Previsión Social, STPS) requires employers to maintain a workplace safety program (Occupational Health and Safety Management System (Sistema de Gestión de Seguridad y Salud en el Trabajo, SGSST)) and make it available for inspection. Registration with STPS is linked to the RFC.

INFONAVIT (Instituto del Fondo Nacional de la Vivienda para los Trabajadores) is the housing fund, funded by a 5% employer contribution on payroll. Enrollment is automatic through the IMSS registration process, but the contribution must be calculated and remitted separately.

Step 6: Bank account opening

Opening a corporate bank account in Mexico as a foreign-owned entity takes longer than most foreign investors expect. Mexican banks apply LFPIORPI and AML screening requirements seriously. Expect to provide the following: corporate documentation certified and apostilled, constitutional documents, shareholder structure information back to ultimate beneficial owners, director identification, RFC certificate, and proof of domicile. The process typically takes four to eight weeks at major banks. Start it as early as possible—you will need the account before you can pay IMSS contributions or receive client payments.

Sector-specific permits and licenses

The checklist above applies to every company entering Mexico. Depending on your industry, there is an additional layer:

  • Food and beverage, pharmaceutical, health products: COFEPRIS authorization before any commercial activity
  • Tourism and hospitality: SECTUR classification and permits
  • Financial services: CNBV authorization for banks, SOFOM registration for lending companies, CONDUSEF registration for consumer-facing financial services
  • Environmental impact: SEMARNAT environmental impact authorization (MIA) for development projects, PROFEPA compliance for ongoing operations
  • Manufacturing with exports: IMMEX certification through SE and SAT for the export-manufacturing program

The most common mistakes foreign companies make in their first year

Misclassifying employees as contractors. This is the most expensive mistake foreign companies make in Mexico. The LFT (Ley Federal del Trabajo) defines an employment relationship by the facts—if a person works under your direction, on your schedule, using your equipment, for your benefit, they are an employee regardless of what the contract says. The 2021 subcontracting reform eliminated most of the structures companies used to avoid this classification. An employee misclassified as a contractor creates liability for all IMSS contributions, INFONAVIT, profit sharing (PTU), and severance—retroactively to the first day of work.

Operating without RFC. Some companies begin soft operations—signing contracts, meeting clients, doing preparatory work—before formalizing. Once they are in Mexico, every one of those activities triggers tax reporting obligations. The fix is never just "get the RFC now"; it involves reconstructing and reporting what happened before the RFC existed.

Not registering with RNIE. The 40-day deadline passes quickly during entity setup. The fine for late registration is modest, but the administrative record of non-compliance can create problems in later regulatory interactions—permit applications, sector certifications, and due diligence processes for future transactions.

Ignoring AML obligations. Companies operating in what LFPIORPI calls "vulnerable activities"—which includes real estate development, construction, legal and accounting services in certain transactions, vehicle sales, art sales, and others—must report operations above threshold amounts to the UIF (Financial Intelligence Unit; Unidad de Inteligencia Financiera). Many foreign companies do not realize they are covered until an inspection or a transaction counterparty asks for their compliance record.

Not having local legal counsel from day one. The standard pattern is: company enters Mexico with a US lawyer who handles the cross-border structure, realizes six months in that Mexican operational law is a separate discipline, and then retains local counsel to fix what accumulated. The cost of local counsel from the beginning is a fraction of the cost of remediation.

Why the first year matters most

Compliance failures in Mexico compound. A company that misses its IMSS registration date does not just pay a fine—it creates a gap in workers' social security records that affects their healthcare and retirement benefits, which creates labor relations problems on top of the regulatory exposure. A company that fails to register with RNIE on time is technically in violation every day until it registers. An employee classified as a contractor accumulates IMSS, INFONAVIT, and PTU liability every payroll period.

Getting the setup right is not expensive. Getting it wrong is.

For guidance on your specific entry situation, speak with our team.

We also cover the specifics of nearshoring operations and the full regulatory compliance stack in more detail on this site.

  • Business and legal consulting for companies in Mexico

Frequently asked questions

Entity formation under the LGSM typically takes three to five weeks from document collection to incorporation. The steps include: name reservation with the Ministry of Economy (Secretaría de Economía) (two to three business days), drafting and notarization of the constitutional documents by a Mexican notary public (one to two weeks), registration in the Public Registry of Commerce (one to two weeks), and RFC registration with SAT (three to five business days). State-level timelines vary. The RNIE registration must then be filed within 40 days of the incorporation date.

In most sectors, yes. Mexico's Foreign Investment Law (Ley de Inversión Extranjera, LIE) permits 100% foreign ownership in the majority of commercial and industrial activities. Restricted sectors—those subject to a 49% foreign ownership cap or requiring CNIE authorization—include certain media, transportation, energy, and financial services activities. The restriction analysis depends on the specific SCIAN code (Mexico's industry classification system) that describes your activity. This should be confirmed before incorporation.

The federal taxpayer ID (Registro Federal de Contribuyentes, RFC) is the tax identification number issued by SAT. Every legal entity and individual taxpayer in Mexico has one. The RFC appears on every electronic invoice (CFDI), payroll receipt, import/export document, and tax filing. Without an RFC, a company cannot legally issue or receive invoices, pay employees through the formal payroll system, or operate a bank account. It is the foundational identifier for all tax and regulatory compliance in Mexico.

The RNIE (National Registry of Foreign Investments; Registro Nacional de Inversiones Extranjeras) is the federal registry of foreign investment maintained by the Ministry of Economy (Secretaría de Economía). Foreign-owned entities must register within 40 days of incorporation. Missing the deadline triggers an administrative fine (currently in the range of several thousand pesos, indexed annually). The more significant consequence is that the violation remains on the entity's compliance record and must be disclosed in due diligence processes for transactions, permits, and certifications. Late registration is accepted—you register, disclose the delay, and pay the applicable fine.

In open sectors, you do not need a Mexican partner. A single foreign parent company can own 100% of a Mexican S.A. de C.V. or S. de R.L. de C.V. However, both entity types require at least two shareholders or partners. In practice, many wholly foreign-owned companies use the parent company and a related holding entity as the two shareholders. The requirement for a Mexican representative resident in Mexico is separate from ownership—you can own 100% while appointing any individual with a Mexican address as legal representative.

More guidance for your business

For multigenerational companies, our guide to institutionalizing family businesses in Mexico explains how governance, succession, and ownership planning work together.