Mexico mandates full KYC for Bitcoin and crypto transfers by March 2027

Mexico’s Ministry of Finance and Public Credit (SHCP) has published amended anti-money laundering rules that will require full identity verification for every Bitcoin and crypto transfer in the country starting March 1, 2027. The updated General Rules to the Federal Anti-Money Laundering Law, released in early August 2026, represent the most significant expansion of crypto compliance requirements in Mexico since the country passed its landmark Fintech Law in 2018. The regulations classify virtual asset transactions as “vulnerable activities,” a legal designation that triggers a cascade of compliance obligations for anyone facilitating them. What the new rules actually require The framework is built around a risk-based approach, which means entities handling digital assets won’t just collect passports and call it a day. They’ll need to classify every customer by risk level, conduct enhanced due diligence on higher-risk accounts, and identify the ultimate beneficial owners (UBOs) of any entity that holds 25% or more ownership in a transacting party. That UBO threshold matters. It’s designed to prevent the classic shell-company workaround where someone sets up a legal entity to move c...