Mexico Beneficial Ownership in 2026: The Beneficiario Controlador

Mexico put beneficial ownership inside the tax system and then multiplied it. The core obligation — the beneficiario controlador — lives in the Federal Tax Code, enforced by the SAT with per-beneficiary fines that Mexico's Supreme Court has upheld. Around it run two more regimes: the anti-money-laundering law, whose threshold was cut from 50% to 25% in July 2025, and a new corporate filing layer that opened in the Economy Ministry's publication system in late 2025. Three thresholds, three authorities, and no public register anywhere. For the compliance teams pouring into Mexico on the nearshoring wave, the country is the clearest case in this series of a jurisdiction where the ownership data exists in triplicate — and none of it is yours to search.

01Ownership as a tax matter

Like Brazil, Mexico made its tax authority the custodian of beneficial ownership — but went further. The 12 November 2021 reform added Articles 32-B Ter, 32-B Quáter and 32-B Quinquies to the Código Fiscal de la Federación (CFF), in force from 1 January 2022: every legal entity, trust (fideicomiso) and other legal vehicle must identify, verify and keep updated the information of its beneficiarios controladores as part of its accounting records, and hand it to the SAT on demand. Notaries and commercial brokers who intervene in creating entities carry the same duty. The data never reaches a register anyone can search; it sits in company files, notarial protocols and the tax authority.

The design has a sharp consequence for verifiers. In register jurisdictions, the question is what you can pull. In Mexico, the question is what the entity can prove it holds — because the obligation is a documentation duty enforced by audit, and the record you need exists as a compliance file (the expediente) inside the company itself.

02One owner, three thresholds

The single most common error on Mexican files is assuming one threshold. Mexico genuinely runs three regimes with different numbers, different authorities and different purposes — and after July 2025, all three are live.

Mexico's three beneficial-ownership regimes

Different laws, different authorities, different thresholds

Regime	Authority	Test
CFF (tax) — Arts. 32-B Ter–Quinquies	SAT	Benefit from participation, or control — including voting rights over more than 15% of capital
LFPIORPI (AML) — Art. 17	UIF / SAT	25% since the 16 July 2025 reform (previously 50%)
Corporate filing — PSM	Secretaría de Economía	Publication of the identified beneficiario controlador with the entity's e.firma

Strictly, there is a fourth track. Banks and other financial institutions are not "vulnerable activities" under the LFPIORPI — they run under the financial laws' own AML provisions, supervised through the CNBV in coordination with the UIF, where the beneficial-owner concept appears as the propietario real. The practical point for a verifier is attribution: a Mexican bank's KYC file and a notary's LFPIORPI file are built under different rulebooks, and the July 2025 threshold cut speaks to the LFPIORPI side — so date and source each file before assuming what standard produced it.

03The FATF picture

Mexico has never been grey-listed. Its joint FATF/GAFILAT evaluation of 2018 placed it in enhanced follow-up, and its ratings have improved through successive follow-up reports as the beneficial-ownership framework was built out; the regime described in this guide — the 2021 tax reform, the 2025 AML reform — is the country's answer to the transparency gaps that evaluation identified. The CFF articles themselves instruct that interpretation should draw on FATF and Global Forum recommendations, an unusually explicit statutory anchor to the international standard. With the next assessment round approaching, the direction of travel is more enforcement, not less.

04Who is a beneficiario controlador

The CFF definition runs on a successive test — the RMF rules direct entities to work through it in order, and to document the analysis at each step.

The beneficiario controlador test

Applied successively under Arts. 32-B Ter and Quáter and the RMF rules

1

BenefitThe natural person or group who, directly, through others or through any legal act, obtains the benefit of participation in the entity, trust or vehicle — even contingently.

2

ControlThe person or group who can impose decisions in shareholders' meetings, appoint or remove the majority of directors, hold voting rights over more than 15% of the capital, or direct the administration, strategy or principal policies.

3

Fallback — the administratorWhere no natural person is identified under the benefit and control limbs, the sole administrator or each member of the board is recorded as beneficiario controlador.

The file the entity must hold is prescribed in detail by the Resolución Miscelánea Fiscal rules: identity data (name, CURP, RFC or foreign equivalent, nationality, address), the nature and extent of participation, the chain of ownership or control where the position is indirect, and the documentation supporting each determination — updated within 15 calendar days of any change. Note what the benefit limb is aimed at: the prestanombre — the name-lender who fronts for the real party — is the classic Mexican concealment device, and the "on whose behalf" test exists precisely to reach past the name on the paper.

05The July 2025 reform: 50% becomes 25%

The second regime moved dramatically in 2025. The LFPIORPI — Mexico's AML statute governing "vulnerable activities," from notaries and real-estate brokers to dealers in high-value goods — had long defined the beneficial owner at a strikingly lax 50%. The reform published on 16 July 2025 cut that to 25%, aligning Mexico with the international norm, with a new implementing regulation and updated identification duties for every obliged actor.

The practical effect is a mass re-papering. Every vulnerable-activity business that identified clients' owners at 50% now owes files at 25% — roughly doubling the population of reportable individuals in layered structures — and structures deliberately parked between 25% and 50% lost their shelter overnight. For a verifier, any Mexican KYC file dated before mid-2025 should be treated as built to the old threshold and re-benchmarked.

06The PSM layer: the 2025 corporate filing

The newest layer arrived in late 2025 through corporate law rather than tax law. The Economy Ministry's electronic publication system for commercial companies — the PSM (Sistema Electrónico de Publicaciones de Sociedades Mercantiles) — opened a Beneficiario Controlador module: companies file the identification of their beneficial owners (name, CURP, RFC or equivalent, nationality, address and the means of control) using the entity's e.firma, alongside the existing duty to publish notices of the shareholding structure when equity changes hands.

Treat this precisely for what it is: a third filing obligation, not a public register. The PSM is a filing and publication system whose consultation follows its own access rules — it does not convert Mexico into an open-BO jurisdiction. What it does change is leverage: the beneficial-ownership determination now exists as a signed, system-filed record with a corporate authority as well as a tax file, and a counterparty can be asked for it as such.

07Penalties: per beneficiary, upheld at the top

The CFF enforces through Articles 84-M and 84-N, and the design detail that matters is that fines apply per beneficiario controlador, per violation.

The bands run from the high hundreds of thousands of pesos for incomplete or inaccurate information, through roughly MXN 800,000–1,000,000 for failing to keep the file updated, to roughly MXN 1,500,000–2,000,000 per beneficiary for not obtaining or keeping it at all — figures updated each year in Annex 5 of the Miscelánea, and worth confirming there before quoting in a filing. Because they stack per person, a mid-sized company with five partners faces theoretical exposure exceeding its own capital — a point critics pressed and lost: in September 2023 the Second Chamber of the Supreme Court held the regime constitutional. Beyond the fines, non-compliance feeds the machinery a Mexican business cannot live without: a negative tax-compliance opinion (opinión de cumplimiento), which blocks government contracting and, in escalation, exposure around the digital seal certificates every company needs to issue CFDI e-invoices. As in Brazil, the deepest sanction is operational, not financial.

08Access: three files, none of them yours

Who holds Mexican beneficial-ownership data

Where the record lives, and who can reach it

Holder	Access	Basis
The entity itself	The expediente	Must hold the file as part of its accounting — the practical route for a counterparty
Notaries & commercial brokers	Own clients	Obtain and keep BC information for entities they help constitute
SAT	On demand	May require the file at any time; exchanges with foreign tax authorities under treaties
UIF and AML supervisors	Own regime	LFPIORPI identification files from vulnerable-activity actors
The public & counterparties	No access	No public beneficial-ownership register exists at any of the three layers

09The registry landscape: RPC, notaries, CFDI

Mexico's public corporate layer is thinner than Brazil's and differently shaped. The Registro Público de Comercio (RPC), operated with the states on the SIGER platform, records commercial companies and their registered acts — but Mexican incorporation runs through notaries and corredores públicos, whose protocols hold the authoritative detail; the RPC records the act, not the full picture, and shareholder registers are corporate books, not public records. Foreign investment adds the RNIE (National Registry of Foreign Investment) at the Economy Ministry — another state record, not a public one. And running underneath everything is CFDI, Mexico's mandatory e-invoicing: the SAT holds a near-real-time picture of every entity's commercial activity, a data layer with no equivalent in most economies — and, like everything else here, not searchable by you.

The listed tier is the exception that proves the rule. Companies traded on Mexico's two exchanges — the BMV and BIVA — sit under the Securities Market Law and CNBV issuer rules, which require public disclosure of significant share acquisitions (from 10%) and impose mandatory tender-offer rules at control-level stakes (30%), alongside continuous relevant-event disclosure. For a listed Mexican counterparty, pull the exchange and issuer disclosures first and treat the corporate registries as corroboration — the reverse of the private-company workflow.

10The entity landscape

Mexican vehicles and where ownership sits

The structures a verifier will meet

Vehicle	Form	Where ownership sits
Corporation	S.A. / S.A. de C.V.	Shareholders in the company's registry book; variable-capital variants dominate
Investment-promotion corporation	S.A.P.I.	The venture/PE workhorse — flexible share classes and shareholder agreements
Limited liability company	S. de R.L.	Partners (socios) with equity quotas — the US-investor favourite for check-the-box reasons
Simplified company	S.A.S.	Single- or multi-shareholder online form for small businesses
Trust	Fideicomiso	Bank-administered; settlor, trustee and beneficiaries all inside the BC regime

11Multi-layer structures: Mexico in the chain

Where a Mexican ownership chain resolves

A typical nearshoring-era structure, operating company to individual

1

The operating companyAn S.A. de C.V. or S. de R.L. — constituted before a notary, recorded in the RPC, invoicing through CFDI.

2

The foreign parentVery often a US layer — a Delaware LLC or corporation — registered in the RNIE as the foreign investor.

3

The fund or family vehicleA fund, holding company or fideicomiso above — where the >15% control analysis actually bites.

4

Natural-person UBODocumented in the entity's expediente, the notary's protocol and — since 2025 — the PSM filing.

12A worked example

Take the nearshoring classic. A Querétaro manufacturing S. de R.L. is held 99/1 by a Delaware LLC and its manager. Behind the LLC sits a family office; behind that, two siblings at 60/40.

Run the three regimes. Under the CFF, the Mexican entity must hold an expediente resolving the chain to the siblings — both exceed the >15% control test through the chain, so both are beneficiarios controladores, documented with the ownership chain and updated within 15 days of any change. Under the LFPIORPI, the notary who papered the incorporation built an identification file — at 50% if before July 2025, at 25% since, meaning the 40% sibling may be missing from older notarial files. The bank that onboarded the company built a separate file under the financial-sector AML provisions — a distinct regime from the LFPIORPI, supervised through the CNBV — identifying the individuals behind the customer under its own rules. And since late 2025, the PSM filing puts the same identification on record with the Economy Ministry. None of the three is searchable by the counterparty — but all three are documents the structure must possess, and the verification play is to demand them, reconcile them against the chain you build from the US side, and treat any gap or version conflict as the finding.

13Common failure modes

14How to verify a Mexican UBO: workflow

1. Establish the entity. Confirm the company in the RPC/SIGER record and its constitutive instrument — the notarial escritura — identifying form, capital and officers.
2. Demand the expediente. The CFF file — identities, chain of control, supporting documents — must exist as part of the entity's accounting. Its absence is itself a red flag with per-beneficiary fines attached.
3. Apply the right test per question. Benchmark the entity's own file at the CFF's benefit-and->15%-control standard; benchmark bank and notary KYC at the LFPIORPI's 25% — and date every AML file against July 2025.
4. Collect the PSM filing. Since late 2025, ask for the beneficiario controlador publication made with the entity's e.firma and reconcile it against the expediente.
5. Resolve the foreign layer. Trace the US or other parent in its own jurisdiction, using the RNIE registration as confirmation of the declared foreign investor.
6. Handle trusts through the trustee. For any fideicomiso, the bank trustee is a regulated holder of settlor and beneficiary identities — route the request there.
7. Screen and evidence. Sanctions, PEP and adverse-media checks on the resolved individuals, with an auditable trail of every request and response.

15Practical takeaways

Mexico rewards the verifier who stops looking for a register and starts demanding the file. The regime's logic is documentary: three parallel obligations force the answer onto paper — in the company's accounting, in the notary's protocol, in the AML files, and now in the PSM — under penalties that stack per person and survived the Supreme Court. The data is never yours to search, but it is always theirs to produce. Build the workflow around the expediente, the right threshold for each question, the July 2025 dividing line, and the chain above — and treat a Mexican counterparty that cannot produce its beneficiario controlador file as having answered the question a different way.

16Frequently asked questions