Stablecoin regulation in Mexico is built on three instruments rather than one stablecoin law. The Fintech Law of March 9, 2018 defines a virtual asset and restricts what licensed fintechs and banks may do with one. Banxico's Circular 4/2019 sets the conditions under which those institutions may operate with virtual assets at all. The federal anti-money-laundering statute, since the same 2018 decree, treats the habitual exchange or custody of virtual assets by anyone else as a vulnerable activity with reporting duties. The CNBV (Mexico's banking and securities regulator) authorizes and supervises the licensed fintechs, and Banxico decides which virtual assets they may touch.
The result is a framework in which a dollar stablecoin has no licence of its own, the licensed institutions face a restrictive rule on using it with the public, and the companies that exchange or custody it outside that perimeter are reached by anti-money-laundering law rather than by a financial licence. This post goes through each instrument with the article, states from when it applies, and compares the design with Brazil's, where the provider is the licensed party. It describes the norms as written, not what a company must do.
Who regulates what
Article 3 of the Fintech Law, published in the Diario Oficial de la Federación on March 9, 2018, assigns supervision of the law to the CNBV and to Banxico, each within its own competence. Article 4 defines the financial authorities as the supervisory commissions, Banxico and the Finance Ministry.
Article 11 states that organising and operating as an ITF (institución de tecnología financiera, the fintech institution licensed under the law) requires an authorization granted by the CNBV, with the prior agreement of the Interinstitutional Committee. Article 35 sets the same requirement for anyone wishing to carry out the activities of crowdfunding institutions or electronic payment fund institutions in Mexico. Those are the two ITF types the law creates; there is no "virtual asset institution" type.
Banxico's role is set in Article 30 and Article 32: it determines, through general provisions, which virtual assets the ITFs and banks may operate with, and the conditions and restrictions of those operations. That is the split a payments operator should hold in mind. The CNBV licenses the company. Banxico decides what the company may do with a virtual asset.
What the Fintech Law calls a virtual asset
Article 30 defines a virtual asset as a representation of value recorded electronically and used among the public as a means of payment for all kinds of legal acts, whose transfer can only be carried out through electronic means. The same article excludes legal tender, foreign currency and any other asset denominated in legal tender or in foreign currency.
That last exclusion is the sentence a stablecoin lawyer reads twice. A token that represents a dollar is arguably an asset denominated in foreign currency, and whether it therefore falls outside the Article 30 definition, or inside it as a representation of value used as a means of payment, is a classification question Mexican counsel answers for a given token. We describe the text and leave the conclusion where it belongs.
Article 30 also states that ITFs may only operate with the virtual assets Banxico determines, and only with Banxico's prior authorization. Article 31 requires an ITF operating with virtual assets to be able to deliver to the client, on request, the virtual assets the client holds or the corresponding amount in national currency. Article 33 prohibits an ITF from selling, lending, pledging or otherwise disposing of the virtual assets it custodies for clients, except on the client's instruction. Article 34 requires the ITF to disclose that the virtual asset is not legal tender and is not backed by the federal government or Banxico, that operations may be irreversible, that its value is volatile, and that technological and fraud risks exist.
Article 88 extends the same logic to banks: a credit institution may carry out operations with virtual assets determined by Banxico, with Banxico's prior authorization and under its general provisions.
The law entered into force the day after publication, on March 10, 2018, under its first transitory article.
Banxico Circular 4/2019 and the restriction that shaped the market
Banxico issued the general provisions that Articles 30, 32 and 88 call for as Circular 4/2019, published in the Diario Oficial on March 8, 2019, and amended by Circular 37/2020, published September 30, 2020. Its subject, as Banxico's index describes it, is operations with virtual assets by credit institutions and ITFs.
We read the circular's index page on banxico.org.mx on September 24, 2026 and confirmed its title, dates and amendment. We did not obtain the text of the provisions themselves from a served page that day, so we do not quote its articles or describe their scope. What the law itself says is enough for the structure: an ITF or a bank may operate with a virtual asset only if Banxico has determined that asset and authorized the operation, under Articles 30 and 88. A reader relying on the exact scope of the circular should read it on the Banxico site.
The anti-money-laundering statute reaches everyone else
The same 2018 decree that created the Fintech Law amended the Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita, the federal anti-money-laundering statute, and added a new section XVI to its Article 17. That section lists as a vulnerable activity the habitual and professional offering of exchange of virtual assets by persons other than financial entities, through electronic or digital platforms they manage or operate, facilitating or carrying out purchases or sales of such assets belonging to their clients, or providing means to custody, store or transfer virtual assets other than those recognised by Banxico under the Fintech Law.
In practice this is the rule that reaches a stablecoin exchange or custody business serving Mexican clients. It does not license the business. It obliges it to identify clients, keep records and file the notices the statute requires with the Finance Ministry, which is why a Mexican counterparty may ask a provider whether it is registered for that activity rather than whether it holds a CNBV licence.
That is also the sense in which Mexico has a VASP (virtual asset service provider, the FATF term) regime: the five FATF activities are reached through Article 17 section XVI rather than through a licence. The VASP explainer compares that with the licensing designs in Brazil, the European Union and the United States.
Mexico and Brazil side by side
How the two largest Latin American markets place the stablecoin provider, as of September 2026.
Question | Mexico | Brazil |
Statute | Fintech Law of March 9, 2018 | Law 14.478/2022 |
Who is licensed | ITFs and banks, by the CNBV and Banxico; no virtual asset licence | The provider itself, as a PSAV (Prestadora de Serviços de Ativos Virtuais, Brazil's virtual asset service provider authorization), by the Central Bank of Brazil |
Who decides which assets | Banxico, under Articles 30 and 32 | No list; the law defines the asset generically in Article 3 |
Non-licensed exchange or custody | Vulnerable activity under Article 17 section XVI of the anti-money-laundering statute | Unlawful without authorization under Article 2 of Law 14.478/2022 |
Key secondary rule | Banxico Circular 4/2019 | BCB Resolutions 519, 520 and 521 of 2025 |
Brazil chose to license the provider. Mexico chose to license the fintech and restrict the asset, and to reach the rest through anti-money-laundering law. The Brazil regulation guide covers the other column in full, and a company running both corridors is running two different compliance conversations.
When the Mexican framework is not the one that decides
When the flow is fiat on both ends. A peso payout through SPEI (Mexico's interbank transfer system, run by Banxico) from a company that only ever holds fiat is a payment service, and the virtual asset articles do not enter.
When the client is an end user. A Mexican importer that pays a supplier in USDC through a provider is that provider's client. It is not offering exchange or custody to the public, so Article 17 section XVI of the anti-money-laundering statute does not describe it, and it is not an ITF, so Articles 30 to 34 do not apply to it. Its counsel should confirm that its own product does not offer virtual assets to its users.
When the provider is outside Mexico and the stablecoin leg happens elsewhere. The Mexican instruments regulate activity carried out in Mexico or offered to the Mexican public. Where the stablecoin leg sits in another jurisdiction and the Mexican leg is a peso transfer, the Mexican question is about the peso transfer.
When the question is tax. The tax treatment of virtual assets is a separate matter under the income tax law, and this post does not cover it.
What this looks like for a client running MXN flows with Lumx
Lumx is stablecoin payments infrastructure for businesses that move money between Latin America and the rest of the world: one API to collect, hold, convert, and pay out in BRL, MXN, COP, USD, EUR, and GBP or in USDC and USDT, over local rails such as PIX, SPEI, PSE, ACH, FEDWIRE, SEPA, and Faster Payments, with SWIFT and on-behalf-of payments and collections (POBO and COBO) in USD, EUR, and GBP, plus named virtual accounts, custodial wallets, and KYB/KYC built in.
A client paying a Mexican supplier from a USDC balance sees a conversion and a SPEI payout to the supplier's CLABE (the 18-digit Mexican bank account number); the USDC to MXN corridor page shows that flow, and the MXN to USDC page shows a peso collection settling in USDC. The peso leg runs on SPEI through partners, and the entity that provides the virtual asset service for the corridor is the one a compliance lead should identify per leg on the operator map.
We do not state a Mexican regulatory status for Lumx in this post because our supported countries page is the place where that statement lives, and a compliance lead should read what it says about Mexico there rather than infer it from a blog. What we can say here is the position: for a Mexican corridor the two questions are which entity performs the peso transfer and under what authorization, and which entity performs the stablecoin service and whether it is reached by Article 17 section XVI or by a licence elsewhere.
I used to answer the Mexico question with the Brazil answer, which is the provider-licence answer, and it does not fit. Mexico does not license the stablecoin provider; it licenses ITFs and banks, restricts what they may do with virtual assets, and reaches everyone else through the anti-money-laundering statute. Once I stopped translating one framework into the other, the Mexican conversation got shorter, because the compliance lead on the other side was asking about registration and reporting, not about a licence that does not exist.
KYB (know your business, the verification of a company and its owners) and KYC (know your customer, the verification of an individual) run before a Mexican payout is enabled, because identification and record obligations attach to whoever performs each leg, on the peso side under the financial statutes and on the virtual asset side under Article 17 section XVI.
Methodology and sources
The Fintech Law and the amendment to Article 17 of the anti-money-laundering statute were read in the decree published in the Diario Oficial de la Federación on March 9, 2018, on dof.gob.mx, on September 24, 2026, and the article numbers above come from that text. Banxico Circular 4/2019 was confirmed by its title, publication date and amendment on the Banxico index page on the same day; its provisions were not read from a served text and are not quoted. The CNBV's own pages did not serve a text body to our checker that day, so the CNBV's role is stated from the Fintech Law rather than from CNBV publications. Lumx's coverage is stated as it appears on lumx.io on September 24, 2026. This is a description of the norms; whether a given company or token falls under a given article is a question for Mexican counsel.
Verified on September 25, 2026. Operational context, not legal, tax, or investment advice. Fintech Law (Ley para Regular las Instituciones de Tecnología Financiera) and the Article 17 section XVI amendment checked against dof.gob.mx on September 24, 2026. Banxico Circular 4/2019 checked against banxico.org.mx on September 24, 2026 (index page; provisions not quoted).
Are stablecoins legal in Mexico?
There is no prohibition on holding or using a stablecoin in Mexico. The Fintech Law of 2018 restricts what licensed ITFs and banks may do with virtual assets, subject to Banxico's Circular 4/2019, and the anti-money-laundering statute treats habitual exchange or custody of virtual assets by other companies as a vulnerable activity with identification and reporting duties.
Does the CNBV license stablecoin companies?
No. The CNBV authorizes ITFs under Articles 11 and 35 of the Fintech Law, and those are crowdfunding and electronic payment fund institutions. There is no CNBV licence for a virtual asset service provider; that activity is reached by Article 17 section XVI of the anti-money-laundering statute.
What does Banxico Circular 4/2019 do?
It contains the general provisions that Articles 30, 32 and 88 of the Fintech Law require, governing operations with virtual assets by credit institutions and ITFs. It was published in the Diario Oficial on March 8, 2019 and amended by Circular 37/2020.
Is USDC a virtual asset under Mexican law?
Article 30 of the Fintech Law defines a virtual asset as an electronically recorded representation of value used as a means of payment, and excludes assets denominated in foreign currency. Whether a dollar stablecoin sits inside or outside that definition is a classification question for Mexican counsel, and this post does not answer it.
Does my company need a Mexican licence to pay suppliers in USDC?
A company paying its own suppliers through a provider is that provider's client and is not offering exchange or custody to the public. A company that offers virtual asset services to its own users in Mexico may be performing a vulnerable activity under the anti-money-laundering statute, which is a question for its counsel.
