Didit
Sign upGet a Demo
Mexico flag

Identity verification in Mexico

Identity verification and KYC/AML in Mexico

Mexico is a Tier-1 Latin American market of ~130 million people and the region's most biometric-heavy onboarding culture. The stack that matters: the INE credencial para votar with a fingerprint template behind it, the CURP population registry at RENAPO, the CNBV's four-level account regime under Disposiciones de Carácter General Art. 115 LIC, the Ley Fintech 2018, LFPIORPI (reformed July 2025) su

14K+

Documents supported

(Government IDs from 220+ countries)

<30 sec

Average verification time

220+

Countries covered

(Government-issued IDs validated)

Market overview

KYC in Mexico, at a glance

Mexico is Latin America's second-largest economy and the region's most dynamic fintech laboratory. Population ~130 million, with roughly 50% of adults holding a formal bank account per CNBV/INEGI's Encuesta Nacional de Inclusión Financiera. Smartphone penetration is above 80%, and the US-Mexico remittance corridor — more than USD $63 billion received in 2024 per Banxico — is one of the world's largest, pulling US fintechs (Wise, Remitly, Felix Pago, Western Union digital) into Mexican KYC obligations. The non-bank fintech sector is the most developed in Latin America. As of late 2025, Mexico hosted ~795 active fintechs per Finnovista. Nu México surpassed 10 million active customers in 2025 and obtained the first banking licence ever granted to a fintech in the country; Klar passed 4.7 mill

Supported documents

Every major ID in Mexico

Didit templates cover national IDs, passports, residence permits and regional documents — plus 14,000+ documents globally for cross-border flows.

INE / IFE — *Credencial para Votar

Instituto Nacional Electoral (INE)

Polycarbonate card with photograph, MRZ, OCR-B zone, hologram, CIC/OCR, barcodes and an embedded fingerprint template in INE databases

Currently valid generations are E (from July 2014), F (issued abroad, from February 2016), G and H (from December 2019). A new generation begins production in H2 2026. Older generations (A

Pasaporte mexicano

Secretaría de Relaciones Exteriores (SRE)

ICAO-9303 biometric booklet with contactless chip

Chip-read with BAC/PACE. Primary fallback for citizens without an INE.

Cédula Profesional

Secretaría de Educación Pública (SEP)

Card and publicly queryable electronic cédula

Validated via the public SEP portal; useful as a secondary document but not a primary KYC ID on its own.

Licencia de conducir

State governments (32 emisores)

Plastic or polycarbonate, formats vary by state

Fragmented security features; generally accepted as secondary ID only.

Matrícula Consular de Alta Seguridad

SRE consulates abroad

Polycarbonate card

Relevant for US-Mexico remittance corridors where US-regulated obliged entities must identify Mexican customers.

Forma Migratoria / Tarjeta de Residente

INM (Instituto Nacional de Migración)

Polycarbonate card

Required for non-citizens; paired with a CURP assigned at registration.

CURP (Clave Única de Registro de Población)

RENAPO (SEGOB)

Alphanumeric identifier, not a physical document

Backbone identifier used in almost every regulated onboarding.

RFC (Registro Federal de Contribuyentes)

SAT

Alphanumeric tax ID

Validated through SAT's Constancia de Situación Fiscal or direct lookup.

Regulators

Who supervises KYC/AML in Mexico

CNBV

Comisión Nacional Bancaria y de Valores

UIF

Unidad de Inteligencia Financiera

LFPDPPP

2010

Ley Fintech

d figures: Instituciones de Fondos de Pago Electrónico (IFPE) — electronic money institutions, used by Bitso, Mercado Pago, NVIO, Broxel and others — and Instituciones de Financiamiento Colectivo (IFC

CURP (Clave Única de Registro de Población)

RENAPO (Registro Nacional de Población)

regulated

Unique population registry key assigned to all residents. Primary national identity number.

INE (Credencial para Votar)

INE (Instituto Nacional Electoral)

regulated

National voter credential issued by the National Electoral Institute. Widely used as de facto national ID for identity verification.

RFC (Registro Federal de Contribuyentes)

SAT (Servicio de Administración Tributaria)

regulated

Federal taxpayer registry managed by the Tax Administration Service.

Cédula Profesional

SEP (Secretaría de Educación Pública)

open

Professional license credential issued by the Ministry of Education. Publicly queryable via online portal.

Government & regulated databases

Authoritative sources Didit can cross-check against

Compliance framework

The law behind KYC in Mexico

AML framework

Primary AML law.

Supervised by CNBV

Primary AML law. Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (LFPIORPI, "Ley Antilavado"), published in the DOF on 17 October 2012, is the umbrella AML statute. It defines 17 categories of actividades vulnerables in Art. 17 — including real-estate, games and raffles, prepaid cards, precious metals, professional services and, since 2018, virtual assets — and imposes customer identification, record-keeping, threshold-based reporting and suspic

10-year retention required

Data protection

LFPDPPP (Ley Federal de Protección de Datos Personales en Posesión de los Particulares)

Supervised by National DPA

The new LFPDPPP (March 2025) keeps the LFPDPPP 2010 principles — lawfulness, consent, purpose limitation, quality, proportionality, information, responsibility — but expands data-subject rights, introduces explicit AI-decision obligations, and transfers all enforcement from the dissolved INAI to the

Penalties for non-compliance

Mexico is one of the most heavily enforced AML markets in Latin America. The historical benchmark is HSBC Mexico / HSBC USA's 2012 USD $1.9 billion settlement over drug-cartel-linked deficiencies in its Mexican subsidiary. Recent pressure points:

Use cases

Built for the industries that regulate Mexico

Fintech

Neobanks, EMIs, payment institutions, lenders, brokerages.

The Mexican retail banking KYC model is structured around four account levels defined in Disposiciones 115 Art. 115 Bis 4 and replicated in the Disposiciones Fintech. Each level escalates KYC proportionally to the transactional ceiling:

Crypto / VASPs

Exchanges, custodians, wallets, on/off-ramps.

Mexico has no dedicated VASP licence regime. Exchanges and custodians operate through one of three structures:

iGaming

Sports betting, online casinos, age-gated platforms.

Online gambling in Mexico runs on the 1947 Ley Federal de Juegos y Sorteos and its 2004 Reglamento, administered by SEGOB's Dirección General de Juegos y Sorteos. The minimum age is 18, and licensed operators (Caliente, Codere, Playcity, Big Bola and a handful of international brands via local partn

Marketplaces

Gig platforms, delivery, creator economy, e-commerce.

Mexican marketplaces — from the Mercado Libre ecosystem (including Mercado Pago as an IFPE) to Amazon México, Linio, Rappi and Didi Food — fall under LFPIORPI vulnerable-activity rules when they perform qualifying activities (prepaid cards, stored value, pawn-type services, high-value goods). PROFEC

Biometric liveness

ISO 30107-3 PAD Level 2 liveness, ready for Mexico

Mexico is arguably the world's most biometric-heavy onboarding jurisdiction. Disposiciones 115 explicitly authorises biometric validation (fingerprint, facial, iris, hand geometry, voice) for remote customer identification, and the 2019 reform encouraged it by removing the CNBV prior-authorisation requirement when validation targets INE or SRE records. In practice: - Fingerprint is the dominant modality for Nivel 4 and high-risk onboarding, because the entire adult electorate has a fingerprint t

CERTIFICATIONS

Certified for enterprise trust

Our platform meets the highest international standards for information security, data privacy, and biometric accuracy.

translation_v21.securityCompliance.certifications.items.gdpr.title

GDPR Compliant

Full EU data protection compliance

ISO 27001

ISO 27001

Information security management

translation_v21.securityCompliance.certifications.items.ibeta.title

iBeta Level 1

PAD (liveness + face match)

TRUSTED WORLDWIDE

What our customers say

Join thousands of companies that trust Didit for their verification needs

Logo

Didit’s NFC + active biometrics technology blocks the most advanced fraud scenarios, offering a level of security equivalent to or superior to in-person verification.

Spanish Financial Sandbox

CNMV, SEPBLAC & Spanish Treasury — Conclusions Report

Logo

Didit is an exceptionally valuable partner, delivering a stable and highly adaptable solution”.

Vuk Adžić

Head of the E-Business Department at Crnogorski Telekom

Logo

Didit offered us a robust technology with a simple implementation and adaptability to different markets”.

Fernando Pinto

CEO & CoFounder at TucanPay

Logo

Thanks to Didit we have been able to reduce manual processes and improve data extraction accuracy”.

Diana Garcia

Trust & Safety Executive at Shiply

Logo

Didit’s integration slashed verification times and costs, freeing resources for other projects”.

Guillem Medina

COO at GBTC Finance

Logo

Didit removed KYC costs, enabling faster scaling with high verification standards and less fraud.”

Paul Martin

VP Marketing & Growth at Bondex

Logo

Didit’s secure, user-friendly verification boosts customer trust and optimizes our process.”

Cristofer Montenegro

Executive assistant to the CEO at Adelantos

Logo

Didit ensures a precise, secure digital onboarding without slowing negotiations or client time.”

Ernesto Betancourth

Gerente de riesgos at CrediDemo

FAQ

Questions about KYC in Mexico

Is remote identity verification legal in Mexico?

Yes. Mexico permits remote KYC onboarding under its national AML framework, including document verification, biometric liveness and video identification where required by regulation.

What identity documents does Didit verify in Mexico?

Didit verifies all major national IDs, passports and residence permits issued in Mexico, plus 14,000+ document types globally for cross-border flows.

How much does identity verification cost in Mexico?

Didit charges $0.30 per verification with 500 free checks per month. No contracts, no minimums. Competitors typically charge $1.00–$2.50+ per verification.

Does Didit support AML screening for Mexico?

Yes. Didit screens against 1,000+ global watchlists including PEP databases, sanctions lists (EU, UN, OFAC, OFSI), and adverse media — covering all AML obligations in Mexico.

Is biometric liveness required?

Most regulated sectors in Mexico require or strongly recommend biometric liveness detection for remote onboarding. Didit provides ISO 30107-3 PAD Level 2 certified liveness.

Can Didit help with crypto/VASP compliance in Mexico?

Yes. Didit supports document verification, liveness, AML screening and ongoing monitoring aligned with Mexico’s crypto regulatory framework, including EU Travel Rule compliance where applicable.

Does Didit support age verification for iGaming in Mexico?

Yes. Didit provides document-based age verification and identity confirmation suitable for Mexico’s iGaming regulatory requirements.

Launch compliant KYC in Mexico today

500 free verifications per month. No contracts, no minimums. $0.30 per verification after the free tier.