← Regulations / Mexico / Operating Models / On-shore VASP

On-shore VASP in Mexico

Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.

Conditional AI-Generated · Unreviewed

On-shore VASP is conditionally permitted in Mexico with a local entity, subject to AML obligations and medium licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Medium
Last updated
2026-07-13

AML Obligations

  • AML/CTF Law (Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita) classifies virtual asset operations by non-financial entities as vulnerable activities
  • Mandatory KYC, internal AML policies, transaction monitoring, and reporting to the Financial Intelligence Unit (FIU)
  • Reporting obligation for transactions above thresholds set by FIU/SHCP
  • All providers serving Mexican residents must comply with AML/KYC requirements
  • Obligations under Federal AML Law (as amended 2018) covering virtual asset transactions

Key Restrictions

  • Non-financial entities (not banks/fintechs) do not need a specific VASP license — no license or registration is required for exchanges, custody, or payment processing by non-financial entities
  • Financial institutions and Fintechs (FTIs) require Banxico authorization (~60 banking days) for internal virtual asset operations, but are prohibited from offering client-facing custody, exchange, or transfer services to the public
  • Banxico has granted no approvals post-2019 secondary rules; fines up to $47,000 for violations
  • No specific minimum capital mandates found for virtual asset providers
  • Utility tokens staying on native platforms are typically outside regulation; security tokens fall under Securities Market Law; certain stablecoins may fall under Fintech Law if issuers manage public funds
  • Virtual assets are not legal tender or currencies in Mexico

Key Risks

  • Regulatory ambiguity: Banxico has frozen approvals since 2019, creating uncertainty even for compliant operators
  • Enforcement risk: U.S. and Mexican authorities have targeted crypto-related money laundering linked to cartels, increasing scrutiny
  • No formal classification for many cryptoassets, creating legal uncertainty for operators and users
  • Tax compliance complexity: progressive individual rates up to 35%, corporate rate of 30%, monthly advance payments, and recordkeeping requirements
  • Travel Rule not yet implemented — regulatory gap may create compliance uncertainty for VASPs handling cross-border transfers

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 20% confidence

Banxico: Regulates virtual assets for financial institutions; authorizes internal operations but bans client-facing custody.

licensing 20% confidence

CNBV: Supervises financial institutions' compliance.

licensing 20% confidence

AML/CTF Law (Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita): Classifies virtual asset operations by non-financial entities as vulnerable activities, requiring KYC, internal policies, transaction monitoring, and reporting to the Financial Intelligence Unit (FIU) for transactions over ~$58,000 MXN (645 UMAs) per client in six months.

licensing 20% confidence

Fintech Law (Ley para Regular las Instituciones de Tecnología Financiera): Defines virtual assets and grants Banxico regulatory powers but excludes non-financial custody from licensing.

licensing 20% confidence

Exchanges, Custody Providers, Payment Processors (Non-Financial Entities): No license or registration needed; services can be offered to the public if not reserved for regulated entities.

licensing 20% confidence

Financial Institutions/Fintechs: Authorization from Banxico required for any virtual asset operations; prohibited from public services.

licensing 20% confidence

No approvals granted by Banxico post-2019 secondary rules, with fines up to $47,000 for violations.

licensing 20% confidence

Capital: No specific minimum capital mandates in search results for virtual asset providers.

licensing 20% confidence

AML/KYC: Mandatory for all providers serving Mexican residents, including:

licensing 20% confidence

Local Presence: No explicit requirement, but company setup (if incorporating) needs Mexican notary, share certificates, corporate books, tax registry (RFC), e-signature, foreign investment registry (if applicable), and bank account. Office rental may aid compliance.

licensing 20% confidence

Submit to Banxico; review takes ~60 banking days.

licensing 20% confidence

No public process details for non-financial VASPs, as none required.

licensing 20% confidence

General company setup: Notary incorporation, RFC registration, bank account opening.

licensing 60% confidence

Security tokens: Those representing or underlying securities (e.g., tokenized stocks or bonds) fall under Securities Market Law scope.

licensing 60% confidence

Certain stablecoins: If issuers receive, manage, safeguard public funds, and enable redemption/transfer, they may fall under the Fintech Law (Ley para Regular las Instituciones de Tecnología Financiera, March 2018).

licensing 60% confidence

Other cryptoassets: Not formally classified; utility tokens staying on native platforms are typically outside regulation, while payment tokens can fulfill obligations if contractually agreed. Virtual assets are not legal tender or currencies.

licensing 60% confidence

Fintech Law (2018): Regulates FTIs handling virtual assets. https://www.diputados.gob.mx/LeyesBiblio/pdf/LIFT_200318.pdf

licensing 60% confidence

Federal AML Law (as amended 2018): Covers virtual asset transactions. https://www.diputados.gob.mx/LeyesBiblio/pdf/LFPIORPI_180818.pdf

licensing 20% confidence

Banco de México (Banxico): Central bank with primary authority to authorize and regulate virtual asset operations by financial institutions, prohibiting direct public sales or services like exchange, custody, or transfer; authorizations (taking ~60 banking days) are limited to internal operations only, with no risk transfer to clients.

licensing 20% confidence

National Banking and Securities Commission (CNBV): Supervises banks and fintechs for compliance and licensing.

licensing 20% confidence

Financial Intelligence Unit (FIU) and Ministry of Finance and Public Credit (SHCP): Enforce AML/CTF reporting for transactions above thresholds; SHCP oversees broader AML/CTF implementation.

licensing 20% confidence

Law to Regulate Financial Technology Companies (Fintech Law), enacted March 9, 2018: Defines virtual assets as electronically registered value representations used for payments (not legal tender); empowers Banxico to regulate and authorizes AML/CTF extensions; requires risk disclosures.

licensing 20% confidence

Circular 4/2019 (Banxico): Limits financial entities to internal virtual asset operations with prior approval; bans public-facing services.

travel-rule 20% confidence

Mexico is listed among jurisdictions (including Colombia, Ghana, Kenya, Morocco, Nicaragua, Nigeria, Peru, Saudi Arabia, Tanzania, Thailand, and Ukraine) that have taken strides toward Travel Rule frameworks but have not yet brought them fully live.

tax 20% confidence

Individuals: Progressive rates from 1.92% to 35% on net gains (disposal proceeds minus inflation-adjusted acquisition cost, using FIFO, identified cost, or average cost methods); no loss deductions allowed; annual exemption on movable property gains up to MXN 1,829,811.95 (~USD 90,000–100,000, varying by source and year).

tax 20% confidence

Corporations: Flat 30% rate on all income, including crypto; monthly advance payments based on profit quotient; accrual basis recognition.

enforcement 60% confidence

OFAC (Sept 26, 2023): Sanctioned Mario Alberto Jimenez Castro (Sinaloa Chapitos faction) for laundering via cryptocurrency. Elliptic

enforcement 60% confidence

U.S. authorities (Nov 20, 2024): Seized $5.4M in three wallets (one VASP) for cartel money laundering. Same source.

enforcement 60% confidence

U.S. authorities (Mar 17, 2023): Arrested Sergio Antonio Duarte Frias (Sinaloa) in Guatemala for laundering $869K narcotics proceeds via cryptocurrency. Same source.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — locally-incorporated non-financial VASPs may operate without a specific license but must comply with AML/CTF vulnerable-activity obligations, while financial institutions/fintechs require Banxico authorization but are barred from public-facing crypto services; no Banxico approvals have been granted since 2019.

Questions this verdict aims to answer

  • What license(s) are required to operate locally?
  • What capital, governance, and reporting obligations apply?
  • What is the application process and timeline?