Mexico’s Ministry of Finance and Public Credit, Secretaría de Hacienda y Crédito Público (SHCP), has published new anti-money laundering rules requiring full identity verification on every Bitcoin and crypto transfer, effective March 1, 2027. It’s the biggest expansion of Mexican crypto compliance since the 2018 Fintech Law. Anyone sending or receiving crypto in Mexico will need to verify their identity, regardless of the amount.
What the New AML Rules Require
The updated Federal Anti-Money Laundering Law, released in early August 2026, places crypto transactions in a legal category called “vulnerable activities.” That label matters because it triggers a specific set of duties for exchanges, wallets, and other providers operating in Mexico.
Providers will need to sort every customer into a risk tier and apply extra scrutiny to anyone flagged as higher risk. They will also have to identify anyone who owns 25% or more of a company involved in a transfer. That threshold is aimed at a familiar workaround: routing crypto through a business entity to avoid attaching a name to the transaction. Under the new rules, that gap closes.
Crypto companies operating in Mexico must also file updated internal compliance manuals with regulators before the March 2027 deadline. These aren’t internal guidelines. They’re formal documents that examiners can request and review during an audit.
What This Means for Mexican Crypto Users
Anyone buying, selling, or moving Bitcoin through a Mexican crypto exchange should expect to submit identifying documents going forward, even for small transfers. This kind of identity check is already standard at most regulated platforms, though KYC-free exchanges still exist elsewhere for now.
Businesses that move crypto through holding companies will also need to disclose who actually owns them, and readers who custody their own coins can check our crypto wallet hub as exchanges tighten reporting. For readers tracking how governments are tightening crypto regulation worldwide, Mexico’s approach adds identity checks at the transaction level rather than just at account signup.
What to Watch Next
Automated systems built to detect suspicious transactions must be operational by June 1, 2027, three months after the identity rules begin. Mexican regulators are expected to start full compliance audits in 2028, giving providers roughly a year to operate under the new system before enforcement checks begin in earnest.
What this means for you: If you use a Mexican crypto exchange or wallet service, expect to verify your identity for every transfer once the rules take effect in March 2027, no matter how small the transaction.
