Mexico’s Ministry of Finance and Public Credit (SHCP) has published amended anti-money laundering rules that will require full identity verification for every Bitcoin and crypto transfer in the country starting March 1, 2027. The updated General Rules to the Federal Anti-Money Laundering Law, released in early August 2026, represent the most significant expansion of crypto compliance requirements in Mexico since the country passed its landmark Fintech Law in 2018.
The regulations classify virtual asset transactions as “vulnerable activities,” a legal designation that triggers a cascade of compliance obligations for anyone facilitating them.
What the new rules actually require
The framework is built around a risk-based approach, which means entities handling digital assets won’t just collect passports and call it a day. They’ll need to classify every customer by risk level, conduct enhanced due diligence on higher-risk accounts, and identify the ultimate beneficial owners (UBOs) of any entity that holds 25% or more ownership in a transacting party.
That UBO threshold matters. It’s designed to prevent the classic shell-company workaround where someone sets up a legal entity to move crypto without attaching their name to it. If you own a quarter or more of the entity making the transfer, your identity goes on file.
