Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Mexico MX

Domains (D1–D6)
2
Sources
12
Role actions
8
Jurisdiction profile
CleanTier ARisk: IncreasingMixed

Mexico has a mature, FATF-assessed AML/CFT framework (2018 MER) with a functioning FIU (UIF) and CNBV supervision, rated compliant/largely-compliant on 34 of 40 Recommendations, but effectiveness remains untested by the FATF's new 5th-round methodology and cartel-linked financial-institution capture (CIBanco, Intercam, Vector) has exposed systemic gatekeeper failures.

Key deficiencies
  • Beneficial ownership identification and preventive-measure effectiveness remain weaker than criminalisation/FIU pillars per the 2018 MER
  • Financial intelligence from the UIF does not consistently translate into ML prosecutions
  • Major commercial banks and brokerages (CIBanco, Intercam, Vector) sustained multi-year cartel money-laundering relationships undetected until US action
  • Persistent large-scale fuel theft (huachicol/huachicol fiscal) despite repeated enforcement cycles
Recent developments (18m)
  • FinCEN issued unprecedented Section 9714 special measures against three Mexico-based financial institutions (CIBanco, Intercam, Vector) in June 2025, later amended in April 2026 to permit CIBanco liquidation
  • US designated six Mexican cartels plus Tren de Aragua and MS-13 as Foreign Terrorist Organizations/SDGTs in February 2025 pursuant to EO 14157
  • Mexico hosted and held the two-year FATF Presidency (Elisa de Anda Madrazo, concluding June 2026), including the February 2026 Plenary in Mexico City
  • FinCEN issued a Section 311 finding against 10 Mexico-based gambling establishments tied to the Sinaloa Cartel (November 2025)
  • OFAC escalated fuel-theft/huachicol sanctions across 2025 (CJNG network May 2025; Santa Rosa de Lima Cartel December 2025) and a Sinaloa Cartel cash-to-crypto laundering cell (May 2026)
Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

On 29-30 September 2026 OFAC designated a network of 21 individuals and 25 entities tied to Ismael Zambada Sicairos (Mayito Flaco) and Tijuana-based cells of the Sinaloa Cartel, including the re-designation of La Rana and Aquiles pursuant to Executive Order 13224 as amended. President Sheinbaum confirmed that Mexico's Unidad de Inteligencia Financiera (UIF) temporarily froze domestic accounts matching the designated network. The pairing of a US Treasury listing with a same-window Mexican account freeze is probable evidence of sustained bilateral enforcement coordination against cartel financial networks rather than any shift in the underlying architecture of either country's sanctions regime.

The designation extends an established network-based approach: rather than targeting a single entity, OFAC continues to map and list the financial facilitators and corporate fronts surrounding a cartel leadership structure, with Mexican authorities moving in parallel on the asset-freezing side.

Other Developments

SHCP implementing formats for Acuerdo 115/2026. On 28 September 2026 Mexico's Secretaria de Hacienda y Credito Publico published the operational notice and report formats that obliged vulnerable-activity entities -- including casinos, jewellers and certain real-estate activities -- must use to comply with Acuerdo 115/2026 (Diario Oficial de la Federacion, 7 August 2026). This moves the risk-based reform of Mexico's LFPIORPI rules from instrument to operational paperwork ahead of the general effective date of 30 November 2026. The staged schedule that follows requires a risk methodology and internal-policy manual from 1 March 2027, automated monitoring mechanisms by 1 June 2027, and a first compliance-audit period opening 1 January 2028.

Gaming-sector reform context. Separate reporting places Mexico in the final stage, as of September 2026, of reforming its 1947 Federal Gaming and Raffles Law, with stated aims including money laundering, tax fraud and administrative corruption; the draft text is not yet public and awaits Security Cabinet review before any transmission to Congress. This status is carried at an uncertain confidence given reliance on a single secondary source.

Cross-Monitor Connections

The OFAC-UIF sequence sits at the boundary of sanctions enforcement and payments infrastructure: accounts frozen inside Mexico's domestic banking system intersect with correspondent and retail banking rails that other monitors track for operational and conduct exposure. Separately, the Acuerdo 115/2026 implementing formats reach obliged non-financial entities -- casinos, jewellers, real estate -- whose exposure to layering and placement typologies is a standing AML/CTF concern independent of the banking channel. Neither development this cycle surfaced a corresponding crypto, beneficial-ownership, or enabler-jurisdiction signal for Mexico.

Outlook

The Acuerdo 115/2026 staged timetable gives obliged vulnerable-activity entities in Mexico a fixed sequence of dates to track: general effectiveness from 30 November 2026, methodology and manual obligations from 1 March 2027, automated monitoring from 1 June 2027, and the first compliance-audit window opening 1 January 2028. Whether the OFAC-UIF coordination pattern continues at the same cadence, and whether the 1947 gaming-law reform text becomes public once Security Cabinet review concludes, remain open and are not asserted here as predictions.

weekly_brief_draft · JID MX
Domain intelligence (D1–D6)

D1 Sanctions Architecture and Evasion

Sanctions Architecture and Evasion

Continue reading

On 29-30 September 2026 the US Office of Foreign Assets Control designated 21 individuals and 25 entities identified as leaders or facilitators of the Sinaloa Cartel, with the action tied to Ismael Zambada Sicairos (known as Mayito Flaco) and to Tijuana-based cells of the cartel. The action included the re-designation of two named entities, La Rana and Aquiles, pursuant to Executive Order 13224 as amended. This is consistent with OFAC's established practice of designating networks of individuals and corporate fronts around a cartel leadership figure rather than listing a single entity in isolation, and the architecture of the designation itself shows no departure from that established pattern.

What is structurally notable this cycle is the parallel domestic action: President Sheinbaum publicly confirmed that Mexico's Unidad de Inteligencia Financiera temporarily froze domestic accounts matching the OFAC-designated network. A same-window pairing of a US Treasury listing with a Mexican financial-intelligence-unit freeze is the kind of coordination signal that, read on its own, could be mistaken for a new bilateral mechanism; assessed against the interpreter's key judgment, it instead evidences continuity of an already-close US-MX enforcement relationship on cartel finance rather than a change in either country's underlying sanctions architecture. No comparable EU or UK listing action tied to this network was identified this cycle, so no divergence across sanctions regimes is observed here, though the absence of a parallel EU/UK listing is itself consistent with the pattern of this corridor's enforcement being primarily a US-MX bilateral matter rather than a multilateral one. Confidence on both the designation and the freeze sits at Probable: the designation rests on two independent tier-3 press accounts rather than a directly retrieved OFAC.gov notice, and the freeze rests on reported presidential statements rather than a UIF primary release.

The standing tracker on sanctions regime divergence between the US and Mexico continues to show coordination rather than divergence, a trajectory marked as watch rather than stable precisely because enforcement cycles of this kind recur periodically against the same cartel network and its evolving financial fronts.

Outlook

Whether this designation precipitates a further round of UIF freezes against adjacent entities, or whether Mexican authorities independently list additional domestic facilitators, is not addressed by the available sourcing this cycle. The absence of a directly retrieved OFAC primary notice and the reliance on secondary press reporting means the next cycle's priority is independent verification of the designation's scope and of any follow-on UIF action, rather than an assumption that the coordination pattern will repeat on the same schedule.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Not covered

Crypto / Digital Assets / Financial Innovation is not yet covered for this jurisdiction in this report.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Continue reading

On 28 September 2026 Mexico's Secretaria de Hacienda y Credito Publico published the operational notice and report formats that obliged vulnerable-activity entities must use to comply with Acuerdo 115/2026, the set of general rules amending Mexico's LFPIORPI anti-money-laundering framework published in the Diario Oficial de la Federacion on 7 August 2026. The entities named as subject to these formats include casinos, jewellers and certain real-estate activities -- the vulnerable-activity sectors under LFPIORPI article 17 rather than banks or other formally regulated financial institutions. The publication of implementing paperwork is a structurally significant step distinct from the publication of the underlying rule itself: it is the point at which a risk-based reform moves from legal instrument to the forms, notices and reports that obliged entities must actually complete, and it typically precedes a measurable uptick in registration and reporting activity among the sectors concerned.

Acuerdo 115/2026 carries a staged implementation timetable rather than a single effective date. General effectiveness begins 30 November 2026. From 1 March 2027, obliged entities must have in place a risk methodology and an internal-policy manual. Automated monitoring mechanisms must be operational by 1 June 2027. The first compliance-audit period opens 1 January 2028. This sequencing gives vulnerable-activity sectors, including gaming operators, a multi-year runway to build out risk-based controls rather than a single compliance cliff-edge, which is itself a structural choice about how Mexico is calibrating supervisory pressure on sectors that have historically sat outside bank-grade AML supervision.

A related but separately sourced development is Mexico's reported progress, as of September 2026, toward the final stage of reforming its 1947 Federal Gaming and Raffles Law, with money laundering, tax fraud and administrative corruption named as targets of the reform. The draft text is not yet public and the reform awaits review by the Security Cabinet before any transmission to Congress; this status is carried at an uncertain level of confidence given reliance on a single secondary source, and it should be read as a parallel track to, rather than a component of, the Acuerdo 115/2026 implementing-formats development.

Outlook

The near-term date to track is 30 November 2026, when Acuerdo 115/2026 becomes generally effective for vulnerable-activity entities. The subsequent dates of 1 March 2027, 1 June 2027 and 1 January 2028 mark successive points at which supervisory expectations step up for casinos, jewellers and real-estate-sector obliged entities. Whether the 1947 Gaming and Raffles Law reform reaches a public draft text, and what its relationship to the LFPIORPI vulnerable-activity framework will be once published, cannot be assessed from the sourcing available this cycle.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
No dated horizon items this cycle. 4 items tracked without a confirmed date.
4 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLRO

OFAC designated 21 individuals and 25 entities tied to Sinaloa Cartel financial networks, with a parallel UIF account freeze in Mexico.

The designation and freeze operate against correspondent-banking exposure; any domestic account matching the designated network is now a sanctions-screening and SAR-relevant data point, and the parallel freeze indicates Mexican authorities acted on the same network in the same window.

2 evidence refs
Compliance

SHCP published implementing formats for Acuerdo 115/2026, moving the LFPIORPI reform for casinos, jewellers and real estate from rule to operational paperwork.

Obliged vulnerable-activity entities now have the notice and report formats needed to prepare for the 30 November 2026 general effective date and the subsequent staged obligations through 2028.

2 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

Close US-MX enforcement coordination against cartel financial networks continues without a change in sanctions architecture.

The coordinated OFAC-UIF action reflects sustained bilateral enforcement intensity rather than a new strategic exposure; reputational relevance is tied to correspondent banking relationships touching the designated network.

2 evidence refs
CTO

No material change this cycle.

No material change for this persona this cycle

Risk

Mexico's AML/CTF regime for vulnerable activities enters an operational implementation phase ahead of a staged 2026-2028 timetable.

Risk functions overseeing exposure to casinos, jewellers and real-estate-sector counterparties in Mexico now have a concrete timetable (30 Nov 2026 general effectiveness; 1 Mar 2027 methodology/manual; 1 Jun 2027 automated monitoring; 1 Jan 2028 first audit period) against which to calibrate monitoring expectations.

2 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

Acuerdo 115/2026's staged compliance-audit timetable sets 1 January 2028 as the first formal audit period for vulnerable-activity obliged entities.

Internal audit scoping for Mexican vulnerable-activity exposure should anchor to the published staged dates, with risk methodology and manual requirements due from 1 March 2027 preceding the first audit window.

1 evidence refs
Decision lens
MLRO

OFAC designated 21 individuals and 25 entities tied to Sinaloa Cartel financial networks, with a parallel UIF account freeze in Mexico.

Compliance

SHCP published implementing formats for Acuerdo 115/2026, moving the LFPIORPI reform for casinos, jewellers and real estate from rule to operational paperwork.

Legal

No material change this cycle.

Board

Close US-MX enforcement coordination against cartel financial networks continues without a change in sanctions architecture.

CTO

No material change this cycle.

Risk

Mexico's AML/CTF regime for vulnerable activities enters an operational implementation phase ahead of a staged 2026-2028 timetable.

Operations

No material change this cycle.

Audit

Acuerdo 115/2026's staged compliance-audit timetable sets 1 January 2028 as the first formal audit period for vulnerable-activity obliged entities.

Shared evidence: 4 refs
Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo MX-specific nexus to Russian sanctions-evasion architecture surfaced this cycle.
T2 · EU AML Package / AMLAno_changeNot applicable: MX is autonomous with no EEA/UK chain_parent.
T3 · FATF Grey Listno_changeNo FATF plenary outcome fell within this window; MX grey-list status not reverified this cycle.
T4 · Beneficial-Ownership Register Statusno_changeNo new MX beneficial-ownership register development surfaced this cycle.
T5 · Crypto / VASP Regulatory Frameworkno_changeNo MX-specific crypto/DeFi enforcement or stablecoin-framework movement confirmed this window; pending AVE Senate bill tracked in detail by the crypto consumer.
T6 · Sanctions Regime DivergencewatchOFAC's 30 September 2026 Sinaloa-network designation and the simultaneous Mexican UIF account freeze continue to show close US-MX enforcement coordination rather than divergence; no comparable EU/UK listing action identified this cycle.
Registers

Enforcement actions

  • FinCEN issued Section 9714 special measures orders under the Fentanyl Sanctions Act/FEND Off Fentanyl Act identifying three Mexico-based financial institutions as primary money-laundering concerns, prohibiting US transmittals of funds involving them or their digital-asset addresses. 25 Jun 2025
  • Pursuant to EO 14157, State designated eight organizations including six Mexico-based cartels as Foreign Terrorist Organizations and Specially Designated Global Terrorists; OFAC implemented the designations on its SDN list. 20 Feb 2025
  • OFAC designated more than a dozen individuals/entities linked to Los Chapitos' cash-to-crypto laundering network converting US fentanyl cash into stablecoins for transfer to Mexico. 20 May 2026
  • OFAC sanctioned Mexican individuals and companies linked to CJNG's cross-border fuel theft/oil smuggling operations on the US southwest border, building on a September 2024 action against 35 huachicoleros. 1 May 2025
  • Treasury added Mexico's Santa Rosa de Lima Cartel to its sanctions list over fuel theft that undercuts global energy markets. 17 Dec 2025
  • FinCEN issued a Section 311 finding and proposed rulemaking identifying transactions involving 10 Mexico-based casinos as a class of primary money-laundering concern tied to Sinaloa Cartel financing. 3 Nov 2025

Sanctions changes

  • US State Department/OFAC designated six Mexico-based cartels (plus Tren de Aragua and MS-13) as FTOs/SDGTs pursuant to EO 14157, a unilateral US listing action with no equivalent EU or UK terrorist-organization designation for these groups. 20 Feb 2025
  • FinCEN's June 2025 Section 9714 special measures against CIBanco, Intercam and Vector saw two effective-date extensions (July 21 to Sept 4, then to Oct 20, 2025) before an April 2026 amendment permitting orderly liquidation of CIBanco specifically. 15 Apr 2026
  • The EU Commission's December 2025 high-risk third-country delegated regulation update (Regulations (EU) 2026/46 and 2026/83) added Bolivia and the British Virgin Islands and delisted six countries; Mexico was not added to, or already present on, the EU AML high-risk list despite intensifying US sanctions activity against Mexico-based cartels and financial institutions in the same window. 4 Dec 2025
  • OFAC added the Santa Rosa de Lima Cartel to its sanctions list for fuel-theft activity undercutting energy markets, continuing the huachicol-focused designation sequence begun in September 2024. 17 Dec 2025

Regulatory horizon (register)

  • Mexico's 5th-round FATF mutual evaluation (effectiveness assessment)
  • FinCEN Southwest Border GTO renewal cycle
  • CIBanco liquidation completion under amended FinCEN order
  • FATF report on underground banking/hawala exploitation (informs Mexico exposure)

Active schemes

  • [CRITICAL] Cartel cash-to-crypto fentanyl proceeds pipeline
  • [CRITICAL] Fiscal fuel theft (huachicol fiscal) TBML network
  • [CRITICAL] Cartel-facilitating commercial bank/brokerage conduits
  • [HIGH] PEP real-estate offshoring via opaque US structures
  • [HIGH] Sinaloa-linked casino structuring network
Sources
  1. FATF / GAFILAT (multilateral first-party mutual evaluation of Mexico)
  2. FATF
  3. FinCEN (US Treasury)
  4. OFAC (US Treasury)
  5. FinCEN (US Treasury)
  6. European Commission (Directorate-General for Financial Stability, Financial Services and Capital Markets Union)
  7. HM Treasury / UK Government
  8. ICIJ
  9. Chainalysis
  10. TRM Labs
  11. Elliptic
  12. OCCRP
Coverage gaps
Mexico lacks a centralized, publicly accessible beneficial-o…
Mexico lacks a centralized, publicly accessible beneficial-ownership registry equivalent to emerging EU/UK models; the 2018 FATF MER found the legal/institutional framework strong on criminalisation and financial intelligence but weaker on 'key preventive measures including identification of beneficial owners.'
The FATF's own follow-up assessment noted the UIF 'functions…
The FATF's own follow-up assessment noted the UIF 'functions well' and 'is producing good financial intelligence' but that 'this financial intelligence does not often lead to investigations of money laundering, underlying crimes, and terrorist financing' — a structural disconnect between intelligence generation and prosecutorial follow-through.
Despite a 2019 government claim of a 94% reduction in fuel t…
Despite a 2019 government claim of a 94% reduction in fuel theft, huachicol and its 'fiscal fuel theft' evolution have re-emerged at a scale FinCEN now assesses generates tens of billions of dollars annually for cartels, indicating prior enforcement gains were not durable.
The seed-designated authoritative NRA for this jurisdiction …
The seed-designated authoritative NRA for this jurisdiction (GAFILAT ML Regional Threat Report, Second Update, 2017-2018) could not be directly retrieved and quoted verbatim within this research session; the FATF's own 2018 Mutual Evaluation Report (which incorporates and supersedes much of that regional threat material with Mexico-specific findings) was used as the primary substitute national-equivalent source.

Evidence

Confidence-tiered claims

OFAC designated 21 individuals and 25 entities tied to Ismael Zambada Sicairos ('Mayito Flaco') and Tijuana-based cells of the Sinaloa Cartel. SRC-fim-MX-001
Probable · 1 source
Mexico's UIF temporarily froze domestic accounts matching the OFAC-designated Sinaloa Cartel 'Los Mayos' network. SRC-fim-MX-001
Probable · 1 source
SHCP published the operational notice/report formats obliged vulnerable-activity entities (including casinos, jewellers, certain real-estate activities) must use under Acuerdo 115/2026. SRC-fim-MX-003
Probable · 1 source
Mexico entered the final stage in September 2026 of reforming its 1947 Federal Gaming and Raffles Law, targeting money laundering, tax fraud and administrative corruption; draft text not yet public, awaiting Security Cabinet review before Congress. SRC-fim-MX-004
Uncertain · 1 source
General effectiveness 30 November 2026; risk methodology and internal-policy manual from 1 March 2027; automated monitoring mechanisms by 1 June 2027; first compliance-audit period from 1 January 2028. SRC-fim-MX-004
Probable · 1 source