A firm serving Mexican clients has two problems that look like one. The first is whether its product needs a Mexican authorisation. The second is how a Mexican client actually funds an account, given that pesos move through domestic rails run by the central bank and card issuers decline a high share of cross-border investment transactions. Solving the second without the first produces a business that works for a year and then stops.
The supervisory map
The Comisión Nacional Bancaria y de Valores supervises banks, casas de bolsa, which are the brokerage houses that intermediate securities, and the institutions created under the Fintech Law of 2018. That law created authorised categories including electronic payment fund institutions and crowdfunding institutions, granted by the CNBV with input from the central bank, Banco de México. Banxico itself regulates foreign exchange operations, monetary policy and the domestic payment system. CONDUSEF handles financial consumer protection and maintains registers of firms and contracts.
Retail margin trading in the form marketed internationally is not a neatly matching Mexican product category. Domestic exchange traded derivatives exist through the futures market, and banks and brokerage houses offer foreign exchange and derivative products under their own permissions. Firms offering cross-border contracts for difference to Mexicans generally do so from another jurisdiction, and should get Mexican advice on whether their marketing constitutes intermediation in Mexico.
Payments are the real gate
SPEI, the central bank's interbank transfer system, moves pesos between Mexican accounts quickly and cheaply. To be a beneficiary on SPEI you need a Mexican account, which means a Mexican entity or a licensed local partner. Cash voucher networks and domestic card rails serve a population where card penetration is uneven, and the underlying pattern is the one described in local payment methods: clients pay with what they already use, and a checkout that only offers international cards converts badly.
Cross-border card acceptance for investment merchant categories is where approval rates collapse. Issuers decline on the combination of merchant category code, cross-border indicator and the country pair, and no amount of retrying fixes a policy decline. That is the mechanism behind the numbers in payment approval rates, and it is why firms serious about Latin America build a local acquiring path rather than treating Mexico as an add-on market.
Descriptive only. Whether a specific product or marketing programme requires Mexican authorisation is a question for Mexican counsel, and the answer depends on how the offer is made.
Who accepts a Mexican authorisation
- Domestic banks require a Mexican entity, tax registration and a compliance officer, and they apply their own risk appetite to investment and crypto related businesses on top of the rules.
- Local acquirers can underwrite a Mexican merchant properly, which is the main commercial reason to incorporate rather than to route everything offshore.
- An electronic payment fund institution authorisation is a payments credential, not a securities one. It is respected for what it covers, and presenting it as permission to offer trading products invites a very short conversation.
- International counterparties rate Mexico by its standard setting body assessments and its sanctions and financial crime profile rather than by the individual licence, so enhanced due diligence on ownership and source of funds is normal.
How to plan a Mexican book
If Mexico is a target market rather than incidental traffic, the sequence that works is: legal opinion on how you may offer the product, then a local entity if the opinion requires one, then a domestic payments partner, then marketing. Doing marketing first is common and it is why so many firms end up with a Mexican client base they cannot pay out efficiently.
If Mexico is incidental, decide deliberately. Either accept the cross-border card economics and the withdrawal friction that comes with them, or exclude the market at onboarding. Clients in Latin America are unforgiving about slow withdrawals and they talk to each other, so a payments plan that half works is a reputational problem rather than a technical one. Teams working on the region can see where our people sit on the Mexico City page.
Compliance obligations that come with a Mexican entity
Any Mexican financial institution carries anti money laundering obligations under the domestic regime: client identification, beneficial ownership, politically exposed person screening, transaction monitoring and reporting to the authorities through the required channels. A fintech institution authorised under the 2018 law is a supervised entity with a compliance officer, an internal audit function and periodic reporting.
Consumer protection is a separate axis. CONDUSEF handles financial consumer complaints and maintains registers covering firms and their standard contracts, so firms marketing to Mexican consumers need terms and disclosure that stand up to that review. Foreign firms often discover this late, because their terms of service were written for a jurisdiction with a different consumer regime.
Structuring decisions founders actually face
The realistic choices are a Mexican entity with the authorisation your legal opinion requires, a partnership with an already licensed Mexican institution that fronts the regulated part, or staying cross-border and accepting the payment economics. Each is defensible. What is not defensible is a Mexican facing brand with Mexican sales staff and an offshore entity that claims not to operate in Mexico, because that structure fails when a regulator, a bank or a client's lawyer looks at it closely.
One more practical point. Mexican clients expect Spanish support in Mexican business hours and they expect withdrawals to arrive the same day, because that is what domestic rails do. A firm running support from another continent with a two day settlement cycle is competing against a standard it cannot meet, and no amount of spread improvement compensates for it.
"In Mexico the interesting licence for most of our clients is not a securities licence at all. It is the payments authorisation, because that is what opens the peso."
— Alex Onta, Executive Director, SINGUARD
Key Takeaways
- The CNBV supervises banks, brokerage houses and the fintech institution categories created by the 2018 Fintech Law.
- Banxico regulates foreign exchange operations and runs SPEI, so peso settlement requires a Mexican account.
- Cross-border card approval for investment merchant categories fails on issuer policy, not on technical errors.
- A payments authorisation is not a securities permission, and counterparties treat the two very differently.
Frequently Asked Questions
Does Mexico license retail contracts for difference?
Mexico does not have a retail contract for difference category matching the international offshore model. Banks and brokerage houses offer derivatives under their own permissions, and cross-border offers should be assessed by Mexican counsel for whether they amount to intermediation in Mexico.
What is an IFPE under the Fintech Law?
An electronic payment fund institution is an authorised category created by the 2018 Fintech Law, granted by the CNBV, covering the issue and management of electronic payment funds. It is a payments authorisation and does not authorise securities or derivatives business.
Why do Mexican clients have trouble depositing with foreign brokers?
Card issuers decline a high share of cross-border transactions in investment merchant categories as a matter of policy, and domestic peso rails require a Mexican beneficiary account. Both problems are structural rather than technical.
Compliance obligations that come with a Mexican entity
Any Mexican financial institution carries anti money laundering obligations under the domestic regime: client identification, beneficial ownership, politically exposed person screening, transaction monitoring and reporting to the authorities through the required channels. A fintech institution authorised under the 2018 law is a supervised entity with a compliance officer, an internal audit function and periodic reporting.
Consumer protection is a separate axis. CONDUSEF registers standard form contracts and handles complaints, and firms that market to Mexican consumers need contract terms and disclosure that stand up to that review. Foreign firms often discover this late, because their terms of service were written for a jurisdiction with a different consumer regime.
Structuring decisions founders actually face
The realistic choices are a Mexican entity with the authorisation your legal opinion requires, a partnership with an already licensed Mexican institution that fronts the regulated part, or staying cross-border and accepting the payment economics. Each is defensible. What is not defensible is a Mexican-facing brand with Mexican sales staff and an offshore entity that claims not to operate in Mexico, because that structure fails when a regulator, a bank or a client's lawyer looks at it closely.
About the Author
Alex Onta is an Executive Director at SINGUARD. He built eTrader, the terminal, the mobile apps, eTrader Broker, Copytrading, Business and Community, along with the worldwide clustered-server infrastructure it all runs on, with his brother Roman Onta helping on the design, and he leads that division today. Together with Roman he builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals, and the two of them carry worldwide compliance, payment processing and international business structuring side by side. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.