Contributed By Ritch, Mueller y Nicolau, S.C.
The main laws and regulations applicable to Mexican banks are as follows.
Laws
Regulations
Authorities
Regarding the supervisory authorities of banks, the Ministry of Finance bears the primary supervisory responsibility and is supported by an autonomous agency functionally attached to it, the CNBV, that regulates, among others, banks, broker-dealers and investment funds. Banco de México, in addition to managing its normal central bank operations, also regulates deposit, lending and funding transactions of banks, as well as the foreign exchange and derivatives markets in Mexico.
Two other decentralised public agencies involved with operations of Mexican banks are the Instituto para la Protección al Ahorro Bancario, or IPAB, which is in charge of the banking deposit system and managing a formal deposit insurance system, and the Comisión Nacional para la Protección y Defensa de los Usuarios de Servicios Financiero (the National Commission for the Defense of Financial Service Users, or CONDUSEF).
Bank Authorisation Regime in Mexico
Obtaining a banking licence in Mexico is a very lengthy regulatory process, governed primarily by the Banking Law and applicable provisions of the CUB. Below is a summary of the key aspects of the authorisation regime.
Authorisation requirement and activities covered
To establish and operate a bank in Mexico, an entity must obtain authorisation from the CNBV, with a favourable opinion from Banco de México. Mexican banks may engage in all activities permitted under the Banking Law or opt to perform only specific transactions under a catalogue. Adjustments to these activities (adding or eliminating allowed activities) require prior CNBV approval.
Foreign banks cannot establish branches in Mexico for general banking activities, and representative offices are restricted from conducting active banking transactions.
Application process and requirements
The application process involves filing an application in triplicate (ie, three copies), along with its exhibits, to the CNBV. The documentation must be submitted in Spanish, translated by a certified translator. From 2021 to the present time, the filing has been and can be conducted through an official email account of the CNBV.
The timeline for obtaining approval ranges from six to nine months following submission of a complete application. Key steps include the following.
1. Filing and deposit guarantee
A deposit equivalent to 10% of the minimum required capital must be made with Banco del Bienestar in favour of the Tesorería de la Federación (the “Mexican Treasury”). This deposit ensures the seriousness of the application and is refundable upon the successful incorporation and operation of the bank. However, it may be forfeited if the terms of authorisation are breached, such as failure to incorporate within three months or commence operations within six months of authorisation.
2. Minimum capital requirements
The required capital depends on the bank’s activities. Banks conducting all permitted activities must hold a minimum of 90 million Unidades de Inversión (UDIs or indexed units) – approximately USD42 million. For banks engaging in limited activities, the minimum capital may range between 36 and 54 million UDIs (approximately USD16.7–25 million).
3. Incorporation requirements
The bank must be incorporated in Mexico as a sociedad anónima (corporation with limited liability) for an indefinite duration, as a Mexican domicile, and with at least two shareholders.
4. Operational readiness
The application must include manuals and systems for approval, covering critical areas such as internal operations, anti-money laundering, risk management, credit approvals, ethics, compliance, accounting, and systems.
5. Officers and directors
The names, résumés as well as financial and suitability information of directors, officers and members of the board of directors, must be submitted to the CNBV for approval, ensuring they meet the required qualifications.
Approval process
The process involves two key stages.
1. Favourable opinion (preliminary authorisation)
Once the application is filed and reviewed, the CNBV may issue a favourable opinion. Normally this step would imply several follow-ups (alcances) from the CNBV requesting additional information. This preliminary authorisation allows the entity to incorporate as a bank and complete required procedures with authorities and third parties but does not permit banking activities.
2. Final authorisation and operational approval
The final authorisation is issued only after all operational aspects are approved, including the testing and inspection of systems and procedures. The bank must have established links to local and international payment systems. Without operational readiness, the CNBV will not grant final approval.
Restrictions and ancillary activities
Licensed banks in Mexico are limited to the scope of activities specified in their authorisation. Any changes require CNBV approval. Ancillary activities, such as providing payment services or offering financial advice, are subject to separate approvals under applicable regulations.
Costs and engagement with regulators
The cost of obtaining a banking licence includes the deposit with Banco del Bienestar and operational expenses associated with meeting the CNBV’s rigorous requirements. Entities seeking authorisation must maintain active engagement with the CNBV throughout the process to address any regulatory queries or adjustments.
In Mexico, banks are subject to strict regulatory oversight regarding ownership and changes in control, with specific obligations for shareholders to inform or seek authorisation from the CNBV. The requirements vary based on the level of direct or indirect participation in a bank’s capital.
Regulations Governing Changes in Control
General obligations during authorisation
During the authorisation process to establish a bank, potential shareholders must provide the CNBV with detailed information about their identity and financial resources.
Shareholding disclosure obligations
Once the bank is operational, shareholders – not the bank itself – are responsible for notifying or obtaining approval from the CNBV regarding any acquisitions or transfers of shares, in accordance with the applicable thresholds.
Regulatory Filings and Obligations
Pursuant to Articles 336 and 337 of the CUB, shareholders subject to the thresholds above must submit specific documentation, including identification, origin of the funds, suitability, and financial statements, as part of their notification or authorisation request to the CNBV.
Banks are required to ensure compliance with these obligations by refraining from registering non-compliant share transfers in their shareholder registry. Additionally, banks must notify the CNBV of such unauthorised transfers within five business days of becoming aware of them.
Consequences of Non-Compliance
If shareholders fail to notify or obtain the required authorisations, the equity and corporate rights associated with their shares will be suspended until the CNBV’s authorisation is granted, and all requirements under the Banking Law are fulfilled.
Ongoing Requirements
Shareholders must maintain transparency in their ownership structure and ensure timely compliance with all reporting and approval requirements. Banks are obligated to monitor share transfers and report irregularities to the CNBV, fostering continued regulatory oversight and compliance.
Mexican banks are subject to various corporate governance and regulatory requirements under the Banking Law and the CUB. These requirements aim to ensure sound management, operational efficiency, and compliance with legal and ethical standards.
Statutory and Regulatory Requirements
Board of directors
Organisational structure
While Mexican law does not mandate specific positions or bodies other than the CEO, Compliance Officer, and other technical positions, the CNBV expects certain roles to appear in a bank’s organisational chart. These positions, which support operational and compliance obligations, typically include the following.
Qualifications for Key Positions
Persons appointed to key roles must have strict qualifications, including:
Diversity and Voluntary Codes
While there are no formal diversity quotas in Mexican banking regulation, the inclusion of independent directors fosters a balance of perspectives on the board. Many banks voluntarily implement diversity and inclusion initiatives to align with global corporate governance trends.
Binding Rules of Conduct
Bank employees are not subject to a formal Bankers’ Oath; however, internal codes of ethics and conduct, often required as part of corporate governance practices, ensure that employees adhere to the highest professional and ethical standards.
Refer to 4.1 Corporate Governance Requirements.
In Mexico, banks are required to implement, maintain, and continuously review a “Remuneration System” that encompasses all forms of compensation, whether monetary or otherwise. These requirements, established under the CUB, aim to align remuneration practices with prudent risk management and long-term stability.
Individuals Subject to the Remuneration Requirements
The Remuneration System applies to all individuals whose roles significantly impact the bank’s risk profile, including members of the board of directors, senior management, and employees in administrative, control, and business units. The system must account for the risks inherent to the activities performed by each role.
Relevant Remuneration Principles
Banks must design their Remuneration Systems based on the following principles.
Supervisory Approach
The CNBV oversees compliance with remuneration requirements by monitoring disclosures and conducting periodic reviews. Banks must maintain sufficient documentation to demonstrate compliance, ensuring that the Remuneration System aligns with the regulatory framework and supports long-term financial stability.
Mexico’s banking sector is subject to robust anti-money laundering (AML) and counter-terrorist financing (CTF) regulations under the Banking Law and the Reglas a las Que se Refiere el Artículo 115 de la Ley de Instituciones de Crédito (the “Anti-Money Laundering Rules” or the “AML Rules”).
As a member of the Financial Action Task Force (FATF) and the Financial Action Task Force of Latin America (GAFILAT), Mexico adheres to international standards and best practices. Mexican authorities actively co-operate with international counterparts to combat cross-border money laundering and terrorist financing activities.
Key Obligations for Banks
Mexico’s depositor protection regime is governed by the Ley de Protección al Ahorro (the “Savings Protection Law” or the “IPAB Law”) which established the Instituto para la Protección al Ahorro Bancario (the IPAB). The IPAB operates as a decentralised federal agency with its own legal personality, assets, and liabilities. Its mission is to safeguard bank savings and manage financial reorganisation programmes for distressed banks.
Administration of the Scheme
The IPAB is overseen by a board of governors composed of seven members: three appointed by the federal government and four independent governors approved by the senate upon the President’s proposal. An executive secretary leads the agency’s operations.
Coverage and Limits
The IPAB guarantees the payment of certain deposits and loans made to Mexican banks, up to a maximum of 400,000 UDIs (approximately USD135,000) per individual or corporate depositor across all accounts and loans with the bank. Payments are made within 90 days of the bank being declared in liquidation, “suspension of payments”, or bankruptcy.
Depositors must submit documentation, such as agreements or account statements, to claim payments. However, certain obligations are excluded from IPAB’s coverage, including the following:
Subrogation and Additional Remedies
When the IPAB makes a payment, it is subrogated into the rights of the depositor or creditor in the relevant insolvency proceedings. Depositors and creditors may seek recovery of amounts exceeding the guaranteed limit through other legal means.
Financial Support for Banks
In exceptional circumstances, the IPAB may provide financial support to distressed banks on its own initiative or at the request of the CNBV. Support measures include the following:
Such assistance is contingent on a cost–benefit analysis confirming that supporting the bank is less expensive than paying the guaranteed obligations. The bank must agree to a financial reorganisation programme, with its voting shares pledged as collateral. If obligations are not met, the IPAB becomes the owner of the pledged shares and assumes control of the bank’s management.
Funding of the Scheme
Mexican banks finance the deposit guarantee scheme through ordinary and extraordinary contributions:
Conclusion
The IPAB plays a vital role in safeguarding depositor funds and maintaining stability in Mexico’s banking system. By guaranteeing deposits and managing distressed banks, it ensures confidence and continuity within the financial sector.
Mexico’s banking regulatory framework is aligned with international standards, including Basel III, as implemented by the CNBV through the CUB, and the Banking Law. Below is a summary of key requirements and the regulatory framework.
Basel III Standards and Implementation
Mexico fully adopted Basel III standards through amendments to the Banking Law and the CUB, implemented by the CNBV in co-ordination with Banco de México. These reforms:
The CNBV may impose additional capital requirements or buffers, such as counter-cyclical buffers, to mitigate risks during economic downturns. While Mexico’s adoption aligns closely with Basel III, the rules allow flexibility, granting the CNBV discretionary power to adapt requirements to local market conditions.
Risk Management Rules
Mexican banks must implement comprehensive risk management frameworks encompassing credit, liquidity, market, operational, and technological risks. Key requirements include the following:
Failure to comply with these standards can lead to CNBV intervention, including imposing corrective measures or limitations on specific activities.
Risk exposures are monitored regularly, and banks must submit risk reports to the CNBV, including data on large exposures, related-party lending, and sectoral concentrations.
Capital Requirements and Buffers
Mexican banks’ capitalisation requirements follow Basel III principles but are tailored for local conditions.
This framework ensures banks maintain robust loss-absorbing capacity while aligning with international standards.
Liquidity Requirements
The amendments to the Banking Law also reinforced liquidity measures. Banks must comply with the Liquidity Coverage Ratio (LCR) and maintain adequate liquidity buffers to meet short-term obligations. If a bank’s liquidity falls below mandated thresholds, the CNBV may:
Additionally, Banco de México supervises compliance with liquidity ratios to ensure resilience during market shocks.
Systemically Important Banks
Systemically important banks (SIBs) are subject to heightened regulations due to their potential impact on the financial system. Requirements include the following.
Conclusion
Mexico’s banking regulation aligns with international standards, ensuring robust capital adequacy, liquidity, and risk management frameworks. These measures enhance financial stability while allowing regulatory flexibility to address local market conditions. For systemically important institutions, stricter requirements ensure their resilience, safeguarding the broader economy.
The Mexican banking system is governed by a robust legal and regulatory framework aimed at maintaining financial stability and protecting depositors. The key elements of this framework include licensing requirements, intervention mechanisms, resolution strategies, and specific insolvency rules.
Mexico’s framework for the insolvency, recovery, and resolution of banks is primarily governed by the Banking Law and the Bank Savings Protection Law (Ley de Protección al Ahorro Bancario, the LPAB), under the supervision of the CNBV and the Instituto para la Protección al Ahorro Bancario (IPAB). These laws provide mechanisms to ensure financial stability and protect depositors during bank failures.
Principal Means of Resolving a Failing Bank
The resolution of a failing bank involves various stages under the Banking Law.
When a bank faces insolvency or financial instability, the following mechanisms are employed.
Implementation of the Financial Stability Board’s Key Attributes of Effective Resolution Regimes
Mexico has implemented key elements of the Financial Stability Board (FSB) Key Attributes of Effective Resolution Regimes, including the following.
Insolvency Preference Rules Applicable to Deposits
Under Mexican law, depositors enjoy priority in insolvency proceedings.
Unsecured obligations cease to accrue interest upon liquidation, and derivatives or repurchase transactions are terminated and netted.
Conclusion
Mexico’s legal and regulatory framework aligns closely with international standards, including the FSB Key Attributes. The framework emphasises depositor protection, systemic stability, and orderly resolution, with clear priorities in insolvency proceedings and tools to manage failing banks effectively.
Banking Regulatory Requirements Related to ESG in Mexico
Mexico’s financial sector is undergoing significant regulatory changes to align with global environmental, social and governance (ESG) standards. These adjustments aim to integrate sustainability into financial practices and reflect Mexico’s commitments to reducing greenhouse gas emissions and combating climate change. Below are the key ESG-related banking regulatory requirements currently shaping the sector.
Mexican sustainable taxonomy
Launched in March 2023 by the Ministry of Finance and Public Credit, the sustainable taxonomy is a cornerstone of Mexico’s ESG framework. It serves as a science-based classification tool to identify sustainable economic activities across six sectors:
This taxonomy mandates financial institutions to consider sustainability metrics when funding projects, ensuring they align with climate change adaptation, gender equality, and basic service access objectives.
Sustainable financing mobilisation strategy
Published in September 2023, this strategy is designed to align Mexico’s financial system with sustainability goals. Its three pillars include the following:
The strategy fosters a conducive environment for ESG-compliant financial practices, including low-cost financing for sustainable activities and transparent information disclosure.
Amendments to financial laws
Recent changes to the Securities Market Law and Mutual Funds Law (November 2023) reinforce climate action. These amendments empower the Ministry of Finance to issue provisions for monitoring sustainable development and gender equality within securities markets. This legal framework promotes accountability and transparency among financial institutions.
Sustainability Information Standards (NIS)
In May 2024, the Mexican Council for Financial Information and Sustainability Standards introduced NIS A-1 and B-1:
These standards are harmonised with international frameworks like the IFRS Sustainability Disclosure Standards, ensuring Mexico’s alignment with global practices.
Self-assessment tool for ESG risks
Developed by the CNBV, this tool helps financial institutions evaluate their integration of ESG factors and climate-related risks. Based on global guidelines, it covers:
The tool generates confidential reports for internal use while providing aggregated benchmarks for Mexico’s financial sector.
ESG obligations for pension fund managers
Effective January 2022, Mexican pension fund managers (AFOREs) are required to consider ESG criteria when making investment decisions. This regulation ensures that pension funds contribute to sustainable economic and environmental projects, maximising benefits for the economy and society.
Conclusion
Mexico’s regulatory developments reflect a broader commitment to embedding ESG principles into its financial framework. From the introduction of the sustainable taxonomy to enhanced disclosure standards and tools, the nation is creating a robust environment for sustainable financing. These efforts not only support Mexico’s climate goals but also position its financial sector as a key player in the global transition to a sustainable economy. Financial institutions operating in Mexico must now navigate these regulations to ensure compliance while leveraging opportunities to support environmentally and socially impactful initiatives.
While the Digital Operational Resilience Act (DORA) is an EU regulation and does not directly apply in Mexico, certain regulatory frameworks in Mexico address operational resilience, cybersecurity, and third-party risk management in the banking sector, which align with DORA’s objectives.
ICT Risk Management
The CNBV requires financial institutions to implement robust frameworks for managing risks related to information and communication technology (ICT). Banks must establish internal controls, regularly assess vulnerabilities, and adopt measures to mitigate cybersecurity threats as per the CUB.
Incident Reporting
Mexican banks must report significant operational or cybersecurity incidents to the CNBV promptly. This is outlined in Article 168 Bis 16 of the CUB, which aims to address and protect operational continuity and cybersecurity, ensuring transparency and timely intervention in the event of disruptions.
Third-Party Risk Management
Financial institutions are obligated to oversee and manage risks associated with third-party service providers, especially those offering ICT services. Regulations require due diligence, regular monitoring, and contractual safeguards to ensure resilience across outsourced operations.
Operational Continuity and Disaster Recovery
Banks in Mexico are required to maintain robust business continuity and disaster recovery plans, aligning with best practices for operational resilience. Testing and periodic updates of these plans are mandatory to ensure preparedness for operational disruptions.
International Standards Influence
While DORA is not directly applicable, Mexican regulators are influenced by global standards and practices, including those of the EU, to maintain international competitiveness and ensure the stability of cross-border banking operations. Mexican banks with EU operations or partnerships are particularly mindful of DORA’s requirements to maintain compliance in those jurisdictions.
These requirements reflect Mexico’s commitment to operational resilience in the financial sector, even though DORA itself does not impose direct obligations. Mexican banks should stay vigilant regarding international developments to ensure alignment where cross-border operations.
Local Repo Master Agreement
A significant regulatory milestone in the Mexican financial markets was the issuance of the new local master agreement for repo transactions (the Contrato Marco de Compraventa de Valores y Reporto), jointly developed by the Mexican Banking Association (Asociación de Bancos de México, the ABM) and the Mexican Association of Broker Dealers (Asociación Mexicana de Instituciones Bursátiles, the AMIB). This new framework was prepared in co-ordination with market participants to align the documentation with the recent amendments to the Reporto Regulations issued by Banco de México, which modernised the operational and prudential rules applicable to repo transactions.
The new master agreement introduces several structural innovations long awaited by the market, including the ability to substitute the underlying securities during the term of the transaction, subject to some rules, the incorporation of tri-party repo mechanisms operated through custodians, and the possibility to enter into evergreen and open repo structures.
These features are designed to enhance collateral mobility, reduce settlement risk, and harmonise local practices with international standards such as those under the Global Master Repurchase Agreement (GMRA). The implementation of the new local master agreement represents a major step toward greater efficiency and legal certainty in the Mexican repo market, supporting broader efforts to deepen secondary market liquidity and improve collateral management practices in the financial system.
Global Ethics Code for FX Transactions
Banco de México’s Circular 5/2025 updates Circular 22/2017 by replacing Annex 1 with the December 2024 revision of the FX Global Code, aligning Mexico’s wholesale FX conduct standards with the latest guidance from the Global Foreign Exchange Committee. The revised annex reiterates the Code’s six pillars, which are:
and embeds detailed expectations on topics like fair handling of client orders, price firmness versus indications, disclosures around execution policies and fees, treatment of stop-loss and fixing orders, use of algorithms and aggregation, controls and transparency for “last look”, parameters for pre‑hedging when acting as principal, and the protection and use of confidential information. It also strengthens post-trade controls by emphasising settlement-risk reduction and includes illustrative examples and a glossary to drive consistent market practice. The amendments were exempted from public consultation because they solely align local rules with the updated global Code and take effect the day after publication in the diario oficial (official gazette).
From a compliance standpoint, the key operative change is procedural: entities that previously notified Banxico of their adherence must submit a new communication confirming adherence under the updated Code by 30 April 2026; those that fail to do so will be listed as if they had determined not to adhere, without prejudice to applicable sanctions. The Circular applies to banks, broker‑dealers, exchange houses, and other group‑affiliated intermediaries active in Mexico’s FX market. Substantively, while the Code itself is not law, the incorporation of its updated text into Banxico’s reporting framework raises the supervisory salience of its good‑practice principles, particularly around transparency in execution and disclosures, management of conflicts when acting as principal versus agent, data‑sharing practices on electronic platforms, and robust operational controls to mitigate settlement and conduct risks.
Av. Pedregal 24
10th floor
Molino del Rey
11040
Mexico City
Mexico
+52 55 9178 7000
contacto@ritch.com.mx www.ritch.com.mx