Mexico’s anti-money laundering statute, the Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (LFPIORPI), does not limit compliance obligations to banks or financial institutions. Article 17 of the law lists 16 categories of “vulnerable activities” whose participants must register with the Unidad de Inteligencia Financiera (UIF), conduct customer due diligence, and file periodic notices with the regulator.
For a foreign investor, developer, attorney, or accountant operating in Mexico, understanding which subsection applies to your business and what it requires is not optional. Failure to comply triggers fines under Articles 53 to 63 of the LFPIORPI and, in serious cases, suspension of the right to conduct the activity at all.
The 16 subsections of Article 17 LFPIORPI
Article 17 organizes vulnerable activities into 16 subsections. Not every subsection is equally relevant to foreign investors, but several capture business activities that are common entry points for cross-border investment in Mexico.
Gaming, lotteries, and draws (Fraction I)
Any person or entity operating games of chance, lotteries, raffles, or draws where prizes exceed 645 UDIS per event is subject to the LFPIORPI. Casinos and gaming establishments face the most intensive obligations within this fraction, including enhanced KYC at the point of chip purchase or redemption.
Credit, mortgage, factoring, and leasing (Fraction IV)
Non-bank entities providing credit, mortgage financing, factoring, or equipment leasing above 3,210 UDIS per operation are covered. This captures private lenders, factoring companies, and finance arms of businesses operating outside the regulated financial sector. A single lease or loan above the threshold triggers the obligation for that transaction.
Mutual fund and investment services (Fraction V)
Entities providing investment services related to securities or investment instruments outside of regulated stock exchange activities fall under Fraction V. This is relevant for private equity fund managers and investment advisors serving Mexican clients.
Real estate transactions (Subsection VI)
This is the fraction most directly relevant to foreign real estate investors. Any person or entity that buys, sells, or acts as an intermediary in real estate transactions above 8,025 UDIS (approximately MXN $68,000 at current UDIS values) must comply. The obligation attaches to:
- Real estate developers selling units directly to buyers
- Brokers and agents acting on behalf of either party
- Notaries public who formalize the deed transfer
Each of these actors carries independent obligations. The notary’s obligation to file a notice does not relieve the broker of the same duty. Both must complete KYC on their respective clients and file separately if their role in the transaction triggered the obligation.
Vehicle sales (Subsection VII)
Sales of automobiles, aircraft, vessels, and motorcycles above 3,210 UDIS are covered. The threshold applies per vehicle per transaction, not to the aggregate value of a dealership’s annual sales.
Jewelry, watches, precious metals, and precious stones (Subsection VIII)
Single transactions above 805 UDIS (approximately MXN $6,800) in jewelry, timepieces, precious metals, or gemstones trigger compliance obligations. This is a low threshold. A single watch sale at retail can easily clear it.
Armored transport and security services (Fraction IX)
Companies providing armored vehicle services or private security with the authority to carry weapons are included. This fraction is less common among foreign commercial investors but captures security contractors.
Pawnshops (Fraction X)
Monte de piedad and similar pawnshop operations conducting transactions above 3,210 UDIS are covered.
Professional services (Fraction XI)
This subsection has the widest reach for law firms, accounting firms, and consulting practices advising foreign investors. It covers lawyers, notaries, and accountants who assist clients in any of the following:
- Buying or selling real estate
- Buying or selling business entities or shares
- Managing client funds, securities, or assets
- Forming, operating, or managing legal entities or trusts
- Creating or managing financial structures
Critically, Fraction XI carries no monetary threshold. The obligation is triggered by the nature of the service, not the transaction size. A law firm that advises on a single peso share transfer that falls under any of these categories is obligated to conduct KYC and may be required to file a notice.
Card and prepaid instrument issuers (Fraction XII)
Non-bank entities issuing credit cards, debit cards, or stored-value instruments above defined limits are covered under this fraction.
Political party donations (Fraction XV)
Organizations or individuals receiving or channeling donations to political parties above thresholds set by electoral law must report those transactions to the UIF.
Company and trust formation (Fraction XVI)
Any professional who incorporates commercial or civil entities, or who creates trusts, on behalf of clients is subject to this fraction. This applies even when the professional is not providing ongoing legal advice, making it particularly relevant to corporate service providers and registered agents operating in Mexico.
Understanding UDIS thresholds
Many of the thresholds in Article 17 are denominated in UDIS (Unidades de Inversión), an inflation-indexed unit published daily by Banco de México. As of 2024, one UDIS equals approximately MXN $8.50, meaning the following:
| Threshold | UDIS | Approximate MXN |
|---|---|---|
| Lowest (jewelry) | 805 UDIS | MXN $6,800 |
| Mid (vehicles, leasing) | 3,210 UDIS | MXN $27,000 |
| Real estate | 8,025 UDIS | MXN $68,000 |
Because UDIS values change daily, compliance programs should check the current UDIS value when evaluating whether a specific transaction crosses a threshold. The Banco de México website publishes the daily UDIS value.
UIF registration: process and requirements
Registration with the UIF is mandatory before conducting any vulnerable activity. It is completed through the UIF registration portal and is free of charge. The registration requires:
- The RFC and CURP of the designated compliance officer (oficial de cumplimiento), who must be an individual with authority to implement controls within the entity
- A description of the specific vulnerable activity or activities conducted
- Proof of legal operation, which may include corporate formation documents, operating licenses, or professional registrations depending on the fraction
Registration must be renewed or updated whenever there is a change in the compliance officer, the business activity, or the entity’s legal status. Operating without a current registration exposes the entity to sanctions from the date the vulnerable activity began.
Filing notices: format, content, and deadlines
What must a notice contain?
Each notice filed with the UIF must include:
- Full identification of the client: name, RFC or tax identification, and address
- Nature of the transaction: what was bought, sold, or transferred
- Transaction amount and currency
- Date of the transaction
- Counterparty identification where applicable
- The specific Article 17 fraction under which the transaction is being reported
Notices are filed electronically through the UIF portal. The system generates a confirmation folio number that should be retained as proof of filing.
Filing deadlines
The standard deadline is 17 calendar days after the end of the calendar month in which the reportable transaction occurred. A transaction completed on 5 March, for example, must be reported no later than 17 April.
For entities subject to a fraction but who conducted no reportable transactions during a calendar year, an annual nil report (informe de no presentación) may be required. The specific obligation depends on the fraction.
Suspicious activity reports
When any transaction or client behavior raises a suspicion of money laundering, regardless of whether a monetary threshold has been crossed, the entity must file a notice de Operación Inusual within 30 calendar days of detecting the suspicious circumstance. Indicators of suspicion include clients who refuse to provide identity documents; transactions structured in amounts just below reporting thresholds; payments involving multiple third parties with no evident commercial rationale; and clients who are vague about the source of funds.
Sanctions for non-filing and late filing
Article 55 of the LFPIORPI establishes fines of 200 to 2,000 days of minimum wage per violation for failure to file required notices. At 2024 minimum wage levels, this translates to approximately MXN $21,000 to MXN $210,000 per missing or late report. More serious violations, including systematic non-compliance or filing false information, escalate to fines of up to 100,000 days of minimum wage under Articles 56 to 63. The UIF can also suspend the entity’s right to conduct the vulnerable activity pending remediation.
Politically exposed persons: enhanced due diligence
Any client who qualifies as a Politically Exposed Person (PEP) requires enhanced due diligence before the transaction proceeds. Mexican law defines PEPs broadly to include current and former public officials at federal, state, and municipal levels, as well as their immediate family members and close business associates. The SHCP maintains a reference list. For PEP clients, the compliance officer must approve the relationship in writing, the source of funds must be documented, and the transaction must be monitored on an ongoing basis.
Frequently asked questions
If you are operating within Mexican territory and facilitating a real estate transaction above 8,025 UDIS, Subsection VI applies to your activity regardless of where your brokerage is incorporated. The obligation attaches to the activity conducted in Mexico. You would need to register with the UIF and comply with all applicable KYC and reporting requirements.
The UIF portal allows batch reporting for multiple transactions in the same reporting period with the same client, but each transaction must be itemized with its own amount, date, and description. A single notice cannot aggregate transactions in a way that obscures individual transaction details.
No. Each participant in a transaction who independently qualifies as a vulnerable activity entity under Article 17 carries its own obligations. The notary’s filing satisfies the notary’s duty. The broker must file a separate notice from the broker’s perspective and based on the broker’s own client relationship.
Banco de México publishes the daily UDIS value on the Banco de México website. Compliance programs should log the prevailing UDIS value on the date of each transaction and document how the threshold calculation was performed. This documentation supports the entity’s position if a filing decision is later questioned.
The LFPIORPI requires retaining all KYC documents, transaction records, and copies of filed notices for a minimum of five years from the transaction date. Records must be kept in a format that allows the UIF to inspect them upon request. Storing records only in formats that are difficult to retrieve or that depend on proprietary software is a compliance risk.