Centralized exchange in Mexico
Order-book exchange that takes custody of user assets and matches trades between users.
CEX is conditionally permitted in Mexico without local incorporation, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- AML/KYC mandatory for all providers serving Mexican residents — must implement KYC, internal policies, transaction monitoring, and suspicious activity reporting.
- Reporting to the Financial Intelligence Unit (FIU) under the Federal AML/CTF Law (Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita) for transactions above thresholds.
- Virtual asset operations by non-financial entities are classified as 'vulnerable activities' under the AML/CTF Law, triggering registration and compliance obligations.
- Oversight by SHCP (Ministry of Finance) for broader AML/CTF implementation and by the FIU for transaction reporting enforcement.
Key Restrictions
- Centralized exchanges that are NOT financial institutions (i.e., non-bank/non-fintech) may offer public-facing services, but must avoid operating as a regulated financial institution without Banxico authorization.
- If structured as a regulated financial institution or fintech (ITF), Banxico authorization is required but bans client-facing custody — meaning a regulated entity cannot run a public exchange with custody.
- Security tokens (tokenized stocks/bonds) fall under the Securities Market Law, not the Fintech Law — requires separate compliance.
- Stablecoins whose issuers receive and manage public funds and enable redemption/transfer may fall under the Fintech Law, creating licensing risk.
- No formal classification or regulatory framework for most cryptoassets — utility tokens on native platforms typically outside regulation, payment tokens are not legal tender.
Key Risks
- Regulatory ambiguity: No formal licensing or registration process exists for non-financial VASPs, creating uncertainty about future regulatory changes or enforcement actions.
- Banxico has granted no approvals post-2019 secondary rules, signaling a restrictive stance for regulated entities — but non-financial entities operate in a grey area.
- Travel Rule obligations are not yet enacted in Mexico — operators may need to implement technical readiness for future compliance.
- Enforcement risk from both Mexican authorities and U.S. authorities (OFAC, DOJ) re: cartel-linked crypto laundering — compliance gaps could attract scrutiny.
- Fines up to $47,000 for Banxico violations; unclear penalties for non-financial VASP non-compliance with AML obligations.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Banxico: Regulates virtual assets for financial institutions; authorizes internal operations but bans client-facing custody.
AML/CTF Law (Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita): Classifies virtual asset operations by non-financial entities as vulnerable activities, requiring KYC, internal policies, transaction monitoring, and reporting to the Financial Intelligence Unit (FIU) for transactions over ~$58,000 MXN (645 UMAs) per client in six months.
Fintech Law (Ley para Regular las Instituciones de Tecnología Financiera): Defines virtual assets and grants Banxico regulatory powers but excludes non-financial custody from licensing.
Exchanges, Custody Providers, Payment Processors (Non-Financial Entities): No license or registration needed; services can be offered to the public if not reserved for regulated entities.
Financial Institutions/Fintechs: Authorization from Banxico required for any virtual asset operations; prohibited from public services.
No approvals granted by Banxico post-2019 secondary rules, with fines up to $47,000 for violations.
AML/KYC: Mandatory for all providers serving Mexican residents, including:
Local Presence: No explicit requirement, but company setup (if incorporating) needs Mexican notary, share certificates, corporate books, tax registry (RFC), e-signature, foreign investment registry (if applicable), and bank account. Office rental may aid compliance.
Security tokens: Those representing or underlying securities (e.g., tokenized stocks or bonds) fall under Securities Market Law scope.
Certain stablecoins: If issuers receive, manage, safeguard public funds, and enable redemption/transfer, they may fall under the Fintech Law (Ley para Regular las Instituciones de Tecnología Financiera, March 2018).
Other cryptoassets: Not formally classified; utility tokens staying on native platforms are typically outside regulation, while payment tokens can fulfill obligations if contractually agreed. Virtual assets are not legal tender or currencies.
Federal AML Law (as amended 2018): Covers virtual asset transactions. https://www.diputados.gob.mx/LeyesBiblio/pdf/LFPIORPI_180818.pdf
Financial Intelligence Unit (FIU) and Ministry of Finance and Public Credit (SHCP): Enforce AML/CTF reporting for transactions above thresholds; SHCP oversees broader AML/CTF implementation.
Circular 4/2019 (Banxico): Limits financial entities to internal virtual asset operations with prior approval; bans public-facing services.
Mexico is listed among jurisdictions (including Colombia, Ghana, Kenya, Morocco, Nicaragua, Nigeria, Peru, Saudi Arabia, Tanzania, Thailand, and Ukraine) that have taken strides toward Travel Rule frameworks but have not yet brought them fully live.
Mexico lacks enacted legislation or guidance specifying these elements, placing it in a pre-implementation phase alongside others awaiting legislative approval or technical rollout.
OFAC (Sept 26, 2023): Sanctioned Mario Alberto Jimenez Castro (Sinaloa Chapitos faction) for laundering via cryptocurrency. Elliptic
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — non-financial centralized exchanges may operate in Mexico without a specific license, subject to AML/CTF obligations under the Federal AML Law (vulnerable activities regime), but must avoid operating as a regulated financial institution (which would require Banxico authorization and be barred from public-facing custody services).
Questions this verdict aims to answer
- What exchange / VASP license applies?
- What custody segregation rules apply to user assets?
- What market-conduct and listing rules apply?
- What travel-rule obligations apply on withdrawals?