CryptocurrencyRegulationsThe Global Digital Asset Law Monitor
HomeJurisdictions › Mexico
REGISTER · AMERICAS

🇲🇽Mexico MX

Partial  ·  Lead regulator: CNBV; Banco de México; SHCP/UIF (AML)  ·  Reviewed August 12, 2026

A fintech law that fenced crypto out of the regulated system.


Mexico's 2018 Fintech Law looked like early leadership and functioned as containment. It defined virtual assets and allowed regulated financial technology institutions and banks to operate with them, but only with Banco de México authorization, and the central bank's implementing circular confined permitted use to internal operations, effectively barring regulated institutions from offering crypto services to customers. The result: Mexican exchanges and global platforms serve one of Latin America's largest remittance-driven crypto markets from outside the prudential perimeter, touching regulation mainly through the anti-money-laundering law's registry of vulnerable activities, which covers virtual asset operations and imposes reporting duties.

Official posture has stayed cool, with the central bank emphasizing that crypto is not legal tender and successive administrations declining to modernize the framework, even as tokenized products and stablecoin remittance rails grow. Watch for CNBV and Banxico movement if regional stablecoin regimes pull activity toward regulated channels elsewhere.

The instruments

Fintech Law and Banxico Circular 4/2019

In forceLey Fintech (2018); Banco de México Circular 4/2019

Defines virtual assets and conditions their use by banks and fintech institutions on central bank authorization; the circular restricts authorized use to internal operations, keeping customer-facing crypto services outside the regulated financial system.

Primary source: Banco de México
Penalty exposure. Regulated institutions operating with virtual assets without authorization face CNBV and Banxico sanctions.

AML vulnerable-activities coverage

In forceFederal AML Law (LFPIORPI), virtual asset provisions

Exchange and custody of virtual assets are vulnerable activities: registration with the tax administration, KYC, and threshold reporting to the financial intelligence unit apply to platforms serving Mexican users.

Primary source: UIF Mexico
Penalty exposure. Administrative fines and criminal liability for AML failures.