Mexico AML amendments introduce new obligations, shorter deadlines

April 2, 2026

Amendments to the Regulations of the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin (AML Law): Key legal implications

Juan Carlos Quinzaños Hogan Lovells + Follow Contact LinkedIn Facebook X Send Embed

[co-author: Jose Carlos Altamirano, Dulce S. Vega]

On 27 March 2026, amendments to the Regulations of the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin (hereafter referred as the “Amendment”) were published in the Federal Official Gazette. The amendment introduces new obligations, shorter response deadlines, and enhanced compliance program requirements to strengthen Mexico’s anti-money laundering framework. These changes align with the 2025 reform of the AML Law, which incorporated obligations to comply with international standards.

Below is a summary of the changes, we consider the most relevant from a compliance and regulatory risk perspective:

1. Accumulated transaction notices: The transactions accumulation procedure is expressly established, taking into account only those transactions that exceed the identification threshold within a period of up to six months. Notices must be submitted at the time in which the last transaction is carried out that reaches or exceeds the reporting threshold, even if a period of six months has not yet elapsed.
2. Strengthened verification and sanctioning powers: The Financial Intelligence Unit (hereafter “FIU”) and the Tax Administration Service (hereafter “TAS”) may request information and documentation, directly or through electronic means, to verify compliance with the AML Law. Such requests must be responded within 10 business days, with the possible extension of up to 5 business days. Any comments from TAS must be addressed within 5 business days. Non-compliance with the requirements, such as incomplete information, may result in the prompt imposition of administrative penalties.
3. Enhanced identification of Politically Exposed Persons (“PEPs”): Financial institutions and those who carry out vulnerable activities in accordance with article 17 of the AML Law that cannot determine if a potential client is considered a PEP will be able to check with the FIU using the electronic systems set up for this purpose.
4. Regularization mechanism: the amendment sets out the procedure for express recognition provided for in the AML Law, whereby the TAS may, in certain circumstances and subject to compliance with the applicable requirements, refrain from imposing penalties To qualify for this benefit, those who carry out vulnerable activities must: a) submit a written statement to the TAS; b) outline all the breaches committed in the statement; c) declare on oath that the breaches have been rectified; and d) submit documentation to prove the compliance with the obligations that were subject of the breach. Additionally, they must comply with the general rules.

5. Establishment of specific criteria for those carrying out vulnerable activities, such as: a) games and prize draws; b) the issuance or trade of monetary instruments; c) the granting of loans and credit; e) the transfer of securities; f) service provision; and g) virtual assets.
   The amendment to the regulations must be read in the context with the 2025 reform of the AML Law, which already provided key obligations, such as:

6. Mandatory registration;

7. Strengthening of the beneficiary owner framework;

8. Mandatory implementation of the risk-based approach;

9. Use of automated systems for transaction and client monitoring;

10. A minimum record-keeping period for 10 years;

11. Mandatory audits and employee training; and

12. Submission of 24-hour notices.
    The amendments are in force since March 28, 2026.

Note that the publication of the general rules under the AML Law is still pending; these are crucial to fully harmonize the regulatory framework in this area. In this context, we recommend that those who carry out vulnerable activities review and, if necessary, update their compliance programs, including their policies and procedures manual, to ensure that incorporate customer identification records, controls on the accumulation of transactions, PEP identification processes, policies on data retention, and overall capacity to comply with regulatory requirements, in order to mitigate regulatory risks and potential penalties.

[View source.]

Send Print Report

Latest Posts

• Time-barred? Not so fast: the UK Supreme Court recasts limitation periods on shareholder and insolvency claims
• AI in defence: When supplier guardrails meet operational reality
• Child Protection by Design: Indonesia’s new compliance standards for digital platforms
• Internet shutdowns – The human rights stakes of connectivity
• Amendments to the Regulations of the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin (AML Law): Key legal implications See more »

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.
Attorney Advertising.

©
Hogan Lovells

Written by:

Hogan Lovells Contact + Follow Juan Carlos Quinzaños + Follow more less

PUBLISH YOUR CONTENT ON JD SUPRA

• ✔ Increased readership
• ✔ Actionable analytics
• ✔ Ongoing writing guidance Join more than 70,000 authors publishing their insights on JD Supra

Start Publishing »

Published In:

AML/CFT + Follow Anti-Money Laundering + Follow Beneficial Owner + Follow Compliance + Follow Customer Identification Program (CIP) + Follow Financial Intelligence Unit (FIU) + Follow Financial Services Industry + Follow Government Agencies + Follow Mexico + Follow New Regulations + Follow Regulatory Reform + Follow Regulatory Requirements + Follow Reporting Requirements + Follow Risk Management + Follow Administrative Agency + Follow Finance & Banking + Follow Tax + Follow more less

Hogan Lovells on:

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra: Sign Up Log in ** By using the service, you signify your acceptance of JD Supra's Privacy Policy.* - hide - hide