Fintech institutions
CNBV authorisation for IFPE and IFC after agreement of the inter-institutional committee
Mexico · CNBV · Banco de Mexico · CNSF · CONSAR
Mexico financial licences and regulator dossier
Mexico has no universal fintech licence. CNBV authorises and supervises banks, securities firms, popular-finance entities and financial-technology institutions. Banco de Mexico controls monetary, payment-system and specified virtual-asset questions. CNSF covers insurance and surety business, while CONSAR regulates retirement administrators. The legal category, not the marketing label, determines permitted activity, capital and the application route.
Route facts
Jurisdiction facts
Payments authority
Banco de Mexico rules payment infrastructure and specified operations alongside CNBV supervision
Securities perimeter
CNBV authorises securities intermediaries and supervises funds, advisers and market infrastructure
Insurance and pensions
CNSF supervises insurance and surety institutions; CONSAR regulates AFORE and retirement funds
Virtual assets
No general VASP licence; regulated institutions need the legal basis and any Banco de Mexico approval
Capital basis
Category, operations and prudential rule determine capital; there is no single Mexico fintech amount
Territorial reach
Mexican status creates no automatic operating right in another jurisdiction
Review date
Regulatory position reviewed as of 11 July 2026
Regulatory perimeter
Start with the reserved activity
The Law to Regulate Financial Technology Institutions reserves two core technology-driven categories. An Institucion de Fondos de Pago Electronico, or IFPE, may issue, administer, redeem and transmit electronic payment funds within its authorised operations. An Institucion de Financiamiento Colectivo, or IFC, operates qualifying debt, equity, co-ownership or royalty crowdfunding. CNBV issues the authorisation after the statutory committee process involving CNBV, the Ministry of Finance and Banco de Mexico. Filing an application, operating under a historic transition or appearing in a list of applicants is not final authorisation.
The conventional perimeter remains separate. Banks, securities firms, investment funds, popular-finance entities, savings cooperatives, foreign-exchange businesses, insurance and pension administrators use their own statutes. Some SOFOM, exchange-centre and money-transmitter categories receive only limited or AML-focused supervision rather than a prudential banking licence. Incorporation, a tax registration, a trade name or a payment-technology contract does not confer a reserved financial permission.
Permission map
Mexico licence and registration families
| Permission family | Regulator and instrument | Activities and exclusions | Eligibility, capital and control |
|---|---|---|---|
| Permission family Commercial banking and deposit taking | Regulator and instrument Federal authorisation for an institution of multiple banking, with CNBV supervision and Banco de Mexico rules under banking legislation | Activities and exclusions Deposit taking, lending and approved banking services within the charter; securities, insurance and pension activities remain separately regulated | Eligibility, capital and control Mexican banking vehicle, transparent ownership and source of funds, fit-and-proper directors and officers, governance, systems and category-specific minimum and risk-based capital |
| Permission family Popular finance and savings cooperatives | Regulator and instrument CNBV authorisation for SOFIPO and relevant popular-finance entities; SOCAP status and auxiliary supervision follow the savings and credit framework | Activities and exclusions Deposits, payments and credit only to the level and operations permitted for the entity; the category is not a full commercial bank charter | Eligibility, capital and control Mexican entity, approved governance and management, protection-fund arrangements where applicable, operational level and prudential capital under the current CNBV rules |
| Permission family Electronic payment funds | Regulator and instrument CNBV authorisation as an IFPE under the Fintech Law, following agreement of the inter-institutional committee | Activities and exclusions Issue, administer, redeem and transmit electronic payment funds and provide only approved ancillary operations; customer funds are not ordinary bank deposits | Eligibility, capital and control Mexican corporation, controllers and managers reviewed, business plan, information security, safeguarding, AML controls and capital calculated under the current ITF provisions |
| Permission family Crowdfunding | Regulator and instrument CNBV authorisation as an IFC under the Fintech Law for the authorised collective-financing model | Activities and exclusions Facilitate qualifying debt, equity, co-ownership or royalty transactions through the platform; no deposit taking or discretionary investment management by implication | Eligibility, capital and control Mexican corporation, suitable controllers and officers, platform governance, conflicts, risk disclosure, client-money controls and capital under the applicable CNBV provisions |
| Permission family Innovative model sandbox | Regulator and instrument Temporary authorisation for a modelo novedoso under the Fintech Law, granted by the authority competent for the underlying activity | Activities and exclusions Test the expressly approved innovative activity for the authorised period and conditions; it is not a permanent operating permission | Eligibility, capital and control Defined test, customer safeguards, exit plan, risk limits, responsible management and financial capacity; conversion to a permanent status requires the separate statutory route |
| Permission family Payment networks, acquiring and settlement | Regulator and instrument Banco de Mexico and CNBV approval, registration or supervision according to the payment network, participant and means-of-disposition rules | Activities and exclusions Operate the approved network, acquiring, clearing or settlement function; technical processing without control of funds may fall outside a financial licence | Eligibility, capital and control Mexican establishment where required, resilient technology, governance, settlement and safeguarding arrangements, competition compliance and financial resources set by the applicable rule |
| Permission family Money transmission and exchange centres | Regulator and instrument CNBV registration and AML supervision for covered money transmitters and exchange centres under auxiliary-credit legislation; casas de cambio use their specific authorisation route | Activities and exclusions Only the registered or authorised transmission or FX activity; AML registration does not allow deposit taking, electronic-money issuance or securities dealing | Eligibility, capital and control Eligible Mexican person or entity, beneficial-owner and management information, AML systems and any bond, capital or operational requirement in the current category rules |
| Permission family Securities brokerage, dealing and markets | Regulator and instrument CNBV authorisation for broker-dealers, exchanges and other market infrastructure under securities legislation | Activities and exclusions Deal, intermediate, underwrite, execute or operate infrastructure only within the authorised category and approved activities | Eligibility, capital and control Prescribed Mexican legal form, approved shareholders and officers, internal controls, client-asset segregation, technology and category-specific capital and liquidity |
| Permission family Investment advice, portfolio management and funds | Regulator and instrument CNBV registration or authorisation for investment advisers, fund operators, distributors and regulated service providers | Activities and exclusions Advice, management, distribution or fund operation according to the recorded role; adviser registration does not confer custody or brokerage authority | Eligibility, capital and control Professional competence, conflicts and conduct controls, responsible officers, disclosure, valuation and custody arrangements; resources follow the relevant securities rule |
| Permission family Insurance, reinsurance and surety | Regulator and instrument CNSF authorisation for insurance and surety institutions and the required authorisation or registration for intermediaries and supervised professionals | Activities and exclusions Underwrite or intermediate only approved operations and lines; a broker or agent cannot assume insurance risk | Eligibility, capital and control Mexican vehicle or permitted branch, suitable controllers and management, actuarial and risk functions, technical reserves, solvency capital and current CNSF fees |
| Permission family Retirement administrators and funds | Regulator and instrument CONSAR authorisation and supervision for AFORE and the retirement investment-fund structure under retirement-system legislation | Activities and exclusions Administer individual retirement accounts and manage retirement assets within the approved structure and investment regime | Eligibility, capital and control Eligible Mexican entity, ownership and management review, governance, operational capability, capital, reserves and investment-risk controls required by CONSAR |
| Permission family Consumer and commercial credit | Regulator and instrument Bank, SOFIPO or other prudential authorisation where deposits fund lending; SOFOM ER or ENR status and consumer rules apply according to structure | Activities and exclusions Lend, lease or factor within the entity's lawful capacity; a SOFOM ENR label does not permit deposit taking and may involve AML-only CNBV supervision | Eligibility, capital and control Correct corporate object, transparent owners, contracts and consumer controls, AML registration where applicable, and prudential capital only where the legal category imposes it |
| Permission family Virtual-asset activity | Regulator and instrument No general Mexican VASP licence; regulated financial institutions require authority under their parent statute and any Banco de Mexico authorisation for specified virtual assets | Activities and exclusions Only operations expressly permitted to the regulated institution; the regime does not create a free-standing exchange, custody or token-issuance licence | Eligibility, capital and control Existing authorised institution where required, approved asset and operation, AML, technology, custody and risk controls; capital follows the parent institution rather than a generic VASP floor |
| Permission family Trust, corporate services and gambling | Regulator and instrument Fiduciary business reserved to eligible financial institutions under its substantive law; ordinary corporate services are not a financial licence; gaming permission belongs to the federal gaming authority | Activities and exclusions Trustee or gaming activity only within the specific approval; incorporation services do not grant custody, payments, investment or gambling rights | Eligibility, capital and control Use the eligible institution and approval for fiduciary activity, or the separate gaming permit; ownership, AML, systems and financial requirements follow the controlling instrument |
Entry file
Eligibility, governance, capital and safeguarding
A serious Mexican application identifies the reserved activity, applicant form and every cumulative permission before documents are drafted. CNBV and the other authorities assess the ownership chain, ultimate beneficial owners, source of funds, controllers, directors, senior managers, technical competence and the economic viability of the plan. The file normally adds governance, internal control, AML/CFT, sanctions, cybersecurity, outsourcing, complaints, business continuity and accounting evidence. IFPE and IFC applicants must explain platform architecture, customer journeys, data control and how customer money or assets remain separated.
There is no responsible single capital figure for Mexico. Banks, popular-finance institutions, securities firms, IFPE, IFC, insurers and retirement administrators use different minimum, solvency, liquidity or reserve methods. A business combining payments, FX, credit, advice and custody can trigger several calculations. Current official provisions and fee schedules control; an amount shown in an old guide or commercial proposal should not be applied to a different category. Customer funds, securities, insurance provisions and pension assets also use different safeguarding and insolvency-separation mechanisms.
Application process
From perimeter to activation
-
1. Classify every reserved activity
Map funds, credit, securities, insurance, retirement and virtual-asset flows, then identify the competent authority and whether the status is authorisation, registration or temporary approval.
-
2. Confirm applicant eligibility
Select the prescribed Mexican vehicle and document controllers, beneficial ownership, source of funds, directors, officers and group relationships.
-
3. Build the regulatory operating file
Prepare business plan, governance, capital method, AML/CFT, cyber, safeguarding, outsourcing, complaints, audit and wind-down evidence tailored to each permission.
-
4. Submit through the official route
Use the current authority forms and systems, pay the published charge and answer requests. Technical receipt or committee review is not operating authorisation.
-
5. Complete readiness before launch
Fund required resources, appoint accepted officers, test reporting and controls, and start only after the final instrument and conditions are effective.
Continuing supervision
Reporting, control changes and mixed business models
Ongoing duties follow the category and may include prudential returns, capital and liquidity, audited financial statements, transaction and suspicious-activity reporting, consumer disclosures, complaints, cybersecurity, incident notification, operational-resilience testing, safeguarding reconciliation and outsourcing oversight. A firm must obtain any variation or new permission before adding a reserved activity. In particular, IFPE status does not silently add lending, securities brokerage or unrestricted virtual-asset services.
Direct and indirect acquisitions, changes of control, significant shareholders and key managers follow the prior approval or notification mechanics of the relevant statute. The permission stays with the authorised entity, but the incoming owner must still pass suitability, source-of-funds and group-structure review. Diligence should reconcile the official register, every licence condition, customer liabilities, safeguarded assets, regulatory correspondence and outstanding remediation. Fintech and payment rules remain a moving area, so the live CNBV and Banco de Mexico provisions must be checked again at filing and completion.
Verify it yourself
Primary sources
-
CNBV supervised sectors and Fintech Law material
CNBV identifies supervised sectors, reserved IFPE and IFC activities, application guides and official registers.
-
Banco de Mexico
Banco de Mexico legislation and circulars control payment systems, means of disposition and specified virtual-asset operations.
-
CNSF
CNSF authorisation pages, registers and current rules govern insurance, surety, reinsurance and intermediaries.
-
CONSAR and federal legislation
CONSAR material governs AFORE and retirement funds; Diario Oficial and consolidated federal laws control where summaries differ.
FAQ
Mexico licensing questions
01 Is an IFPE a bank?
No. It manages electronic payment funds within its authorised scope. It cannot take ordinary bank deposits or provide unrestricted credit merely because it holds customer payment funds.
02 Does Mexico issue a general crypto licence?
No general VASP licence was identified. A regulated institution must rely on its parent statute and obtain any required Banco de Mexico authorisation for the specified asset and operation.
03 Is CNBV registration always a prudential licence?
No. Certain money transmitters, exchange centres and SOFOM categories can be registered or supervised principally for AML purposes. The exact legal status must be stated.
04 What capital is required?
It varies by institution, operation and risk method. Use the current CNBV, Banco de Mexico, CNSF or CONSAR provisions for the chosen category.
05 What happens when an authorised company is acquired?
The permission remains with the entity, while the incoming controller and management must complete the applicable approval or notification and inherited obligations must be diligenced.
Reviewed by the SKY7 advisory team. Last reviewed: 11 July 2026. Regulatory statements are made as of July 2026. Mexican fintech, payments and virtual-asset rules remain a moving area. This page is general information only, not legal, regulatory, tax, investment or financial advice. Verify the current law, official register, permission conditions, capital method, fee schedule and control process with the competent authority. No authorisation or regulator timetable is promised.
Tell us what you need
Scope the Mexico permission family
Bring the product, customer, asset and money flows, ownership and local operating plan. SKY7 will map the required CNBV, Banco de Mexico, CNSF and CONSAR workstreams.