KYC and AML

KYC Requirements for Online Gambling in Mexico

How Mexican online gambling operators identify customers under the federal anti-money laundering law, the thresholds that trigger identification and notices, and record keeping.

4 min readPart of kyc and aml

On this page
  1. Which thresholds apply?
  2. What identification is collected?
  3. What does identification look like in Mexico?
  4. What is changing in Mexico?
  5. How does Mexico compare with Brazil?
  6. Worked example: crossing 325 UMA
  7. What mistakes do operators commonly make?
  8. Checklist
  9. Frequently asked questions
  10. Sources
  11. More guides

Mexican online gambling operators work under SEGOB permits and are vulnerable-activity businesses under the LFPIORPI. They must identify customers from 325 UMA, file notices with the SAT from 645 UMA by the 17th of the following month, treat operations adding up within 24 hours as linked, and keep records for ten years. Suspected illicit origin or a match to UIF lists requires a notice within 24 hours.

Key takeaways

  • Online gambling must be linked to a SEGOB permit holder [1].
  • Identification from 325 UMA; notices from 645 UMA [2].
  • Linked operations within 24 hours and aggregation over up to six months [2].
  • Records for ten years after the 2025 reform [2].
  • A reform of the 1947 gaming law focused on AML and tax was reported in October 2026 [1].
325 UMAidentification
645 UMASAT notice
24 hourssuspicion notice
10 yearsrecords

Which thresholds apply?

[2]” tabindex=”0″>

LFPIORPI thresholds [2]
Threshold 2026 value Duty
325 UMA MXN 38,125.75 Identify the customer
645 UMA MXN 75,664.95 Notice to the SAT by the 17th of the following month
3,210 UMA MXN 376,565.10 No cash prize payments

Values from a 2026 compliance summary; check the DOF.

What identification is collected?

Operators collect identity data and official identification for customers reaching the threshold, keep a file per customer, and screen against UIF lists. Many operators verify all customers at registration for simplicity and to protect players, which also supports age checks (18+).

What does identification look like in Mexico?

  1. Collect basic dataName, date of birth, nationality and contact details.
  2. Collect IDOfficial photo ID such as the INE voter card or a passport.
  3. Record tax dataRFC or CURP where required.
  4. Apply thresholdsIdentification and reporting duties apply at amounts set in UMA [2].
  5. Keep recordsKeep identification and transaction records for the legal period.

What is changing in Mexico?

Mexico’s reform to the Federal Law on Games and Raffles was reported in October 2026 [1]. Operators should watch for new rules on online permits, identification and payments and update KYC processes as secondary rules are published.

How does Mexico compare with Brazil?

Mexico compared
Topic Mexico Brazil Source
Regulator SEGOB (permits); SAT and UIF (AML) SPA (licences); Coaf (AML) [1] [3]
Threshold-based reports Yes (645 UMA) Risk-based [2] [3]
Record retention 10 years Per SPA and Coaf rules [2]

Worked example: crossing 325 UMA

  1. Customer deposits MXN 20,000.
  2. Second deposit of MXN 20,000 within 24 hours: linked total crosses 325 UMA.
  3. Identification file completed before further activity.
  4. Deposits over months reach 645 UMA; notice filed by the 17th.

What mistakes do operators commonly make?

Not linking operations

24-hour and six-month aggregation apply [2].

Short retention

Ten years since the 2025 reform [2].

Ignoring UIF lists

Matches require 24-hour notices [2].

Checklist

  • Identification at 325 UMA.
  • Notices from 645 UMA by the 17th.
  • Linked-operation aggregation.
  • UIF list screening.
  • Ten-year records.
  • Zero report when no notices.
  • UMA values updated yearly.
  • Reform tracked for new rules.

Frequently asked questions

What is the gambling age in Mexico?

18.

When must a Mexican operator identify me?

From 325 UMA, though many verify everyone at registration.

What is a SAT notice?

A report filed with the tax authority for vulnerable-activity operations from 645 UMA.

How long are records kept?

Ten years.

Who issues gambling permits?

SEGOB.

What are UIF lists?

Lists of blocked persons from Mexico’s financial intelligence unit.

Is the law changing?

A reform focused on AML and tax was in draft in October 2026.

Are notices due if nothing happened?

A zero report is due by the 17th when there are no notices.

What is CURP?

Mexico’s unique population registry code, a personal identifier.

What ID is commonly accepted in Mexico?

The INE voter card or a passport.

Sources

  1. El Imparcial: reform to the Federal Law on Games and Raffles (13 October 2026)
  2. KYC Systems: LFPIORPI obligations for games and raffles
  3. Mattos Filho: Brazil AML ordinance

KYC rules by market

When identity and age must be verified in eight regulated markets, and which registers apply.

Casino withdrawals in Mexico

SEGOB permits, LFPIORPI thresholds, ISR withholding and SPEI or cash payouts.

Mexico

Payments, KYC, responsible gambling and marketing rules in Mexico.

Transaction monitoring basics

Rules, scenarios, alerts and case handling for gambling transaction monitoring.

AML red flags for operators

The payment, gameplay and customer warning signs that should trigger review.

Further reading elsewhere