Financial Integrity Monitor

Mexico MX

Domains (D1–D6)
5
Sources
12
Role actions
8
Horizon <90d
4
Jurisdiction profile
CleanTier ARisk: IncreasingMixed

Mexico has a mature, FATF-assessed AML/CFT framework (2018 MER) with a functioning FIU (UIF) and CNBV supervision, rated compliant/largely-compliant on 34 of 40 Recommendations, but effectiveness remains untested by the FATF's new 5th-round methodology and cartel-linked financial-institution capture (CIBanco, Intercam, Vector) has exposed systemic gatekeeper failures.

Key deficiencies
  • Beneficial ownership identification and preventive-measure effectiveness remain weaker than criminalisation/FIU pillars per the 2018 MER
  • Financial intelligence from the UIF does not consistently translate into ML prosecutions
  • Major commercial banks and brokerages (CIBanco, Intercam, Vector) sustained multi-year cartel money-laundering relationships undetected until US action
  • Persistent large-scale fuel theft (huachicol/huachicol fiscal) despite repeated enforcement cycles
Recent developments (18m)
  • FinCEN issued unprecedented Section 9714 special measures against three Mexico-based financial institutions (CIBanco, Intercam, Vector) in June 2025, later amended in April 2026 to permit CIBanco liquidation
  • US designated six Mexican cartels plus Tren de Aragua and MS-13 as Foreign Terrorist Organizations/SDGTs in February 2025 pursuant to EO 14157
  • Mexico hosted and held the two-year FATF Presidency (Elisa de Anda Madrazo, concluding June 2026), including the February 2026 Plenary in Mexico City
  • FinCEN issued a Section 311 finding against 10 Mexico-based gambling establishments tied to the Sinaloa Cartel (November 2025)
  • OFAC escalated fuel-theft/huachicol sanctions across 2025 (CJNG network May 2025; Santa Rosa de Lima Cartel December 2025) and a Sinaloa Cartel cash-to-crypto laundering cell (May 2026)
Weekly brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Mexico now presents the sharpest structural test case in the monitors coverage of United States extraterritorial enforcement outrunning list-based multilateral consensus. Six Mexican cartel organisations, including the Sinaloa Cartel and CJNG, were designated as Foreign Terrorist Organizations and Specially Designated Global Terrorists under Executive Order 14157, effective February 2025, the first such action against Mexican cartels and a step with no European Union or United Kingdom equivalent. In parallel, FinCEN imposed Section 9714 special measures against three licensed Mexican financial institutions, CIBanco, Intercam Banco and Vector Casa de Bolsa, in June 2025 for sustained laundering on behalf of CJNG, the Gulf Cartel, the Beltran-Leyva Organization and the Sinaloa Cartel, with the order amended in April 2026 to permit an orderly liquidation of CIBanco.

The architecture-over-incident reading is that these are not isolated actions but converging evidence of a jurisdiction where a mature technical-compliance framework, licensed gatekeepers, and an intelligence-generating financial-intelligence unit coexist with sustained laundering conduits that only foreign intervention disrupted. Mexico is not on the FATF grey list, the EU high-risk third-country list, or the UK high-risk third-country list, even as United States Treasury enforcement intensity against Mexico-linked persons and entities reached its highest level of any single jurisdiction tracked this monitor cycle, a divergence the tracker record now treats as structural rather than episodic.

Other Developments

Cartel money brokers have shifted a portion of the fentanyl-proceeds laundering pipeline onto stablecoin rails. OFAC designated more than a dozen individuals and entities in the Los Chapitos faction in May 2026 for converting bulk United States street-level cash into stablecoins, a scheme in which cash is layered through decentralized-exchange swaps before cashing out at centralized exchanges, with the same broker networks reportedly used to pay Chinese precursor-chemical suppliers. This activity occurs inside a Mexican regulatory vacuum: Banco de Mexico reaffirmed a healthy distance posture toward crypto-asset integration in December 2025, and no dedicated virtual-asset-service-provider law exists beyond the narrow 2018 Fintech Law framework.

Fiscal fuel theft, known as huachicol fiscal, continues to generate tens of billions of dollars annually for cartels despite a 2019 government claim of a 94 percent reduction. OFAC sanctioned the CJNG fuel-theft and oil-smuggling network in May 2025, building on a September 2024 action against thirty-five huachicoleros, and financial institutions have since reported over seven billion United States dollars in related suspicious activity. A further designation, against the Santa Rosa de Lima Cartel in December 2025, continues the sequence but rests on a single tier-two source without independent tier-one corroboration this cycle. The persistence of the underlying scheme despite repeated designations indicates that point-in-time sanctions have not addressed the underlying energy-permitting and tax-arbitrage architecture that sustains it.

FinCEN separately found ten Mexico-based casinos, centrally overseen from Mazatlan, to be of primary money-laundering concern under Section 311. The November 2025 finding and proposed rulemaking describes structuring of cartel deposits below the 90,000 Mexican peso reporting threshold, a pattern the finding explicitly likens to the breaking up of transactions to evade recordkeeping, and proposes prohibiting correspondent accounts from processing transactions with the named establishments. Taken with the bank and brokerage special measures, this exposes a Mexican gambling-sector control gap exploited at scale before United States intervention.

A structural corporate-transparency gap compounds these findings on the beneficial-ownership side. Mexico has no centralized, publicly accessible beneficial-ownership registry, a gap identified in its 2018 FATF Mutual Evaluation Report that persists as of 2026. Mexican politically exposed persons implicated in cartel corruption, including former security minister Genaro Garcia Luna, have used opaque United States trusts and limited liability companies to acquire United States real estate, exploiting the historic absence of beneficial-ownership disclosure for non-financed property purchases, an enabling-jurisdiction dynamic that sits on the United States side of the architecture even though the predicate corruption is Mexico-based.

Mexico financial-intelligence capacity appears strong on paper but weak in conversion to prosecution. A FATF follow-up finding concluded that the Unidad de Inteligencia Financiera generates high-quality financial intelligence that does not consistently lead to money-laundering investigations, a structural explanation for why CIBanco, Intercam and Vector operated for years before foreign, rather than domestic, intervention. Whether this reflects a capacity deficit or a political choice is not resolved by available evidence and remains an open question for the gaps register.

On the European side, the December 2025 update to the EU high-risk third-country list added Bolivia and the British Virgin Islands and delisted six countries, but did not add Mexico, which has never been listed. European Union-domiciled obliged entities therefore continue to apply standard, rather than enhanced, due diligence to Mexican counterparties even as United States enforcement intensity against Mexico-linked institutions peaked in the same window, a structural European Union and United States risk-calibration divergence.

Mexico held the two-year FATF Presidency through June 2026, with Elisa de Anda Madrazo presiding over the February 2026 plenary hosted in Mexico City and the June 2026 plenary, before handover to the United Kingdom incoming Presidency from July 2026. This institutional visibility occurred during a period of major domestic enforcement escalation and an as-yet-unscheduled fifth-round FATF effectiveness assessment, relevant context rather than a risk signal in itself.

Cross-Monitor Connections

The huachicol fiscal fuel-theft network, sustaining cartel revenue in the tens of billions of dollars, is directly relevant to SCEM conflict-finance tracking under the conflict-finance filter, given the scale of financing available to armed cartel factions. The same cross-border fuel and crude-oil smuggling through Veracruz, Altamira and Monterrey hubs is a commodity-flow integrity matter relevant to ERM extractive-industry and energy-market revenue tracking. No FCW or WDM cross-monitor flags were generated by the Interpreter this cycle for the Mexico baseline, an absence that is itself recorded rather than assumed.

Outlook

The near-term regulatory horizon for Mexico is dominated by United States extraterritorial enforcement wind-down processes rather than domestic Mexican legislative change: the CIBanco orderly liquidation is expected to complete within 2026, testing the Mexican administrative-intervener model for depositor protection, and the FinCEN Southwest Border Geographic Targeting Order, which lowers money-service-business cash-reporting thresholds to 200 United States dollars in thirty border ZIP codes, faces a renewal or modification decision in the third quarter of 2026. The multi-year FATF fifth-round effectiveness assessment, not yet scheduled, remains the dominant structural horizon risk, since Mexico fourth-round technical-compliance rating of thirty-four of forty Recommendations does not itself establish demonstrated effectiveness. A pattern-consistent, though not independently confirmed, judgment is that cartel money-laundering architecture is migrating from licensed correspondent-banking conduits toward crypto and stablecoin rails as United States enforcement disrupts traditional bank and brokerage channels, a trajectory this monitor will continue to test against subsequent cycles.

weekly_brief_draft · JID MX
Domain intelligence (D1–D6)

D1 Sanctions Architecture and Evasion

Sanctions Architecture and Evasion

Continue reading

Mexico is now the sharpest current example within this monitor of divergence between United States sanctions architecture and the multilateral list-based regime. In February 2025, the United States designated six Mexico-based cartels, the Sinaloa Cartel, CJNG, Carteles Unidos, Cartel del Noreste, Cartel del Golfo and La Nueva Familia Michoacana, as Foreign Terrorist Organizations and Specially Designated Global Terrorists pursuant to Executive Order 14157, implemented on the OFAC SDN list. This was the first United States terrorist-financing designation of Mexican cartels, and it created secondary-sanctions exposure with no European Union or United Kingdom equivalent designation.

That sanctions architecture escalated further with the May 2026 OFAC designation of more than a dozen individuals and entities in the Los Chapitos cash-to-crypto laundering cell, confirming a stablecoin-based fentanyl-proceeds laundering typology, and with continuing designations in the huachicol fuel-theft sequence, including the CJNG fuel-theft and oil-smuggling network in May 2025 and the Santa Rosa de Lima Cartel in December 2025, the latter carried at Assessed confidence pending independent tier-one corroboration. Each of these actions represents an expansion of the sanctions net around cartel-adjacent financial infrastructure rather than a single discrete enforcement episode.

What makes this a structural finding rather than an incident is the persistent absence of Mexico from every major list-based mechanism: the FATF grey list, the FATF black list, the EU high-risk third-country list, and the UK Money Laundering Regulations high-risk third-country list. The December 2025 EU high-risk list update added Bolivia and the British Virgin Islands and delisted six countries without ever having listed Mexico. This means that, even as United States Treasury enforcement intensity against Mexico-linked institutions and cartels reached its highest level of any single jurisdiction tracked this monitor cycle, European Union and United Kingdom obliged entities continue to apply standard due diligence to Mexican counterparties rather than enhanced due diligence. The sanctions-architecture reading of this gap is that unilateral United States terrorism and special-measures designations are functioning as a substitute for multilateral list consensus, producing an arbitrage surface between jurisdictions applying materially different compliance obligations to the same underlying counterparty risk.

Mexico institutional visibility compounds the picture: it held the two-year FATF Presidency through June 2026, with Elisa de Anda Madrazo presiding over both the February 2026 Mexico City plenary and the June 2026 plenary, immediately before a United Kingdom Presidency handover in July 2026. This occurred during the same period as the sharpest escalation in United States enforcement against Mexico-linked actors, alongside a still-unscheduled fifth-round FATF effectiveness assessment that leaves the underlying question of demonstrated AML/CFT effectiveness formally open notwithstanding a strong fourth-round technical-compliance score of thirty-four of forty Recommendations.

Outlook

The forward trajectory on sanctions architecture is dominated by administrative wind-down processes rather than new multilateral list decisions: the CIBanco orderly liquidation, permitted under the April 2026 amendment to the Section 9714 order, is expected to complete within 2026, and the Southwest Border Geographic Targeting Order faces a renewal or modification decision in the third quarter of 2026 as its lowered cash-reporting threshold matures. The multi-year gap before a scheduled fifth-round FATF mutual evaluation remains the dominant structural uncertainty; until that assessment occurs, the divergence between intensifying unilateral United States enforcement and static multilateral list status is likely to persist as the defining sanctions-architecture signal for Mexico.

Cumulative analysis

Sanctions Architecture and Evasion — Cumulative Analysis

Across the cycles establishing the Mexico baseline, the defining sanctions-architecture pattern is a widening gap between unilateral United States enforcement intensity and static multilateral list consensus. The February 2025 Foreign Terrorist Organization and Specially Designated Global Terrorist designation of six Mexican cartels, the first such action against Mexican cartels under Executive Order 14157, established a secondary-sanctions exposure with no European Union or United Kingdom equivalent. This was followed by escalating and increasingly technical designations: the May 2026 action against the Los Chapitos cash-to-crypto laundering cell confirmed a stablecoin-based fentanyl-proceeds typology, while the ongoing huachicol fuel-theft designation sequence, covering the CJNG network in May 2025 and the Santa Rosa de Lima Cartel in December 2025, extended sanctions pressure into the extractive-finance domain.

Throughout this period, Mexico has remained absent from the FATF grey list, the FATF black list, the EU high-risk third-country list, and the UK high-risk third-country list. The December 2025 EU list update, which added Bolivia and the British Virgin Islands, left Mexico status unchanged, having never been listed. This durable list-absence, set against the most intensive United States Treasury enforcement campaign of any single jurisdiction in the eighteen-month baseline window, is assessed at High confidence as a material and structural, rather than episodic, compliance-scope divergence for globally operating institutions, since it is corroborated by tier-one primary sources on both the United States and European sides.

The institutional backdrop sharpens the analytical significance of this divergence: Mexico held the FATF Presidency through the February and June 2026 plenaries before handover to the United Kingdom in July 2026, precisely the window in which the described enforcement escalation and list-status stasis both occurred. Meanwhile, Mexico strong fourth-round technical-compliance rating, thirty-four of forty Recommendations, does not establish demonstrated effectiveness, which remains formally untested pending a fifth-round mutual evaluation that has not yet been scheduled. This leaves a multi-year evidentiary gap sitting directly beneath the sanctions-divergence finding: technical compliance is documented, operational effectiveness is not, and enforcement intensity from Washington has, so far, filled the gap that a multilateral effectiveness assessment would otherwise address.

Outlook

Going forward, the sanctions-architecture trajectory for Mexico will likely continue to be shaped by administrative and enforcement wind-down milestones, the CIBanco liquidation completion and the Southwest Border Geographic Targeting Order renewal decision expected in the third quarter of 2026, rather than by any near-term shift in multilateral list status. Absent a scheduled fifth-round FATF evaluation, the structural divergence between unilateral United States pressure and static multilateral consensus is the pattern this monitor expects to persist and will continue testing against subsequent cycles.

domain_sub_briefs · D1 · Cumulative analysis

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

Continue reading

Mexico is not a European Economic Area member state, so the standing EU AML Package architecture, comprising the directly applicable AML Regulation (Regulation (EU) 2024/1624), the sixth AML Directive transposed per member state, and the AMLA Regulation (Regulation (EU) 2024/1620) establishing the Anti-Money Laundering Authority, does not apply to Mexico as a matter of jurisdictional scope. Globally, that three-instrument package, and the shift it represents from purely national supervision toward a hybrid EU-level regime through AMLA direct and indirect supervision of high-risk cross-border obliged entities, sets the durable structural direction against which beneficial-ownership and transparency developments elsewhere are read; for Mexico specifically, however, the directly relevant developments are domestic and cross-border United States-side, not EU-driven.

The directly relevant finding for Mexico is the persistent absence of a centralized, publicly accessible beneficial-ownership registry, a gap first identified in Mexico 2018 FATF Mutual Evaluation Report as weaker than the criminalisation and financial-intelligence pillars of its AML framework, and one that remains unresolved as of 2026. This is not an isolated incident but a structural gap: it directly enables the exploitation pattern documented this cycle, in which Mexican politically exposed persons implicated in cartel corruption, including former security minister Genaro Garcia Luna, used opaque United States trusts, limited liability companies and minority commercial real-estate stakes to acquire United States property, exploiting the historic absence of beneficial-ownership disclosure requirements for non-financed United States real-estate purchases.

The analytical significance of this scheme lies in its cross-jurisdictional structure: the predicate corruption is Mexico-based, tied to cartel bribery and financial facilitation, while the enabling architecture, the opaque legal vehicles absorbing the resulting proceeds, sits on the United States side. This illustrates that beneficial-ownership opacity as an enabler is not confined to any single jurisdiction category; a Mexican registry gap and a United States non-financed-purchase disclosure gap function together as a single evasion architecture, consistent with this monitor jurisdiction-agnostic framing principle.

Outlook

No legislative proposal for a centralized Mexican beneficial-ownership registry has been identified in available evidence this cycle, leaving the domestic registry-status tracker static. On the enabling side, the direction of travel is toward closing, rather than widening, the gap, as United States authorities pursue asset-recovery and forfeiture actions connected to the real-estate schemes described above, though no dated horizon item on non-financed-purchase disclosure reform was identified this cycle. The structural European backdrop, AMLA continued build-out of its direct-supervision perimeter under the AMLR and AMLA Regulation, remains a distant but relevant reference point for how a hybrid supervisory model might eventually inform non-EEA registry design, without itself creating any near-term obligation for Mexico.

Cumulative analysis

Beneficial Ownership and Corporate Transparency — Cumulative Analysis

Mexico beneficial-ownership and corporate-transparency baseline centres on a single, durable structural gap: the absence of a centralized, publicly accessible beneficial-ownership registry, first flagged in the 2018 FATF Mutual Evaluation Report as a weaker pillar relative to Mexico criminalisation and financial-intelligence frameworks, and unresolved through the current cycle. As a non-EEA jurisdiction, Mexico sits outside the EU AML Package direct perimeter altogether; that package, the directly applicable AML Regulation (Regulation (EU) 2024/1624), the sixth AML Directive transposed at member-state level, and the AMLA Regulation (Regulation (EU) 2024/1620) establishing the Anti-Money Laundering Authority with its emerging direct and indirect supervision of high-risk cross-border obliged entities, functions only as global structural backdrop for Mexico, illustrating the general direction multilateral BO reform is taking rather than a framework with jurisdictional application.

The registry gap has moved from a documented technical weakness to an operationally exploited vulnerability. This cycle evidence connects the absence of Mexican beneficial-ownership disclosure to a concrete scheme: Mexican politically exposed persons implicated in cartel corruption, most visibly former security minister Genaro Garcia Luna, used opaque United States trusts, limited liability companies and minority commercial real-estate positions to acquire United States property, exploiting the historic United States gap in beneficial-ownership disclosure for non-financed real-estate purchases. The scheme architecture is genuinely bilateral: Mexican registry opacity obscures the predicate-offence nexus, while United States-side vehicle opacity absorbs and launders the resulting proceeds, each jurisdiction gap reinforcing the other.

This integrated reading positions Mexico as a case study in cross-jurisdictional beneficial-ownership arbitrage that does not require either jurisdiction to be the sole point of failure. No Mexican legislative reform proposal addressing the registry gap has been identified across the cycles reviewed, leaving the domestic side of the picture static, while the enabling United States side is subject to ongoing asset-recovery and forfeiture activity connected to PEP-linked property.

Outlook

Absent a scheduled domestic reform proposal, Mexico beneficial-ownership registry gap is expected to persist as a stable, rather than deteriorating or improving, structural tracker position. The more dynamic side of this picture remains the United States enforcement response to PEP-linked real-estate holdings, and the slow-moving European AMLA build-out, which, while not directly applicable to Mexico, offers a longer-term reference model for how registry interconnection and direct supervision might eventually extend transparency norms beyond the EEA perimeter.

domain_sub_briefs · D2 · Cumulative analysis

D3 Enabler Jurisdictions and Professional Facilitators

Enabler Jurisdictions and Professional Facilitators

Continue reading

The defining D3 finding this cycle is that licensed, regulated Mexican financial and gaming institutions sustained multi-year cartel-facilitation channels that were disrupted by foreign, not domestic, intervention. FinCEN imposed Section 9714 special measures against CIBanco, Intercam Banco and Vector Casa de Bolsa in June 2025, prohibiting United States financial institutions from processing transmittals involving these three entities after finding they had played a key role in laundering funds on behalf of CJNG, the Gulf Cartel, the Beltran-Leyva Organization and the Sinaloa Cartel. The order effective date was extended twice before an April 2026 amendment permitted an orderly liquidation of CIBanco specifically, clarifying a wind-down process rather than lifting any prior restriction.

A parallel enabler-jurisdiction finding concerns Mexico gaming sector: FinCEN Section 311 finding against ten Mexico-based gambling establishments in November 2025 documented structuring of cartel deposits below the ninety-thousand-peso reporting threshold, characterised in the finding itself as similar to structuring, the breaking up of transactions into multiple smaller ones to evade recordkeeping, with proceeds channeled to senior Sinaloa Cartel members. Both findings point to the same underlying enabler-jurisdiction dynamic: licensed, supervised sectors functioning as sustained facilitation channels rather than isolated control failures.

The F3 enforcement-reality dimension of this finding is sharpened by a FATF follow-up conclusion that Mexico Unidad de Inteligencia Financiera generates high-quality financial intelligence that does not consistently convert into money-laundering investigations or prosecutions. This helps explain, without fully resolving, why CIBanco, Intercam and Vector operated for years before United States, rather than Mexican, intervention; whether this reflects a capacity deficit or a political choice remains unresolved in available evidence. On the United States side of the same enabler architecture, FinCEN maintains a Southwest Border Geographic Targeting Order lowering money-service-business cash-reporting thresholds to two hundred United States dollars in thirty border ZIP codes, a forward-looking bulk-cash detection measure directly aimed at the corridor most implicated in cartel financial flows.

Outlook

The CIBanco liquidation, permitted under the amended Section 9714 order, is expected to complete within 2026, testing whether the Mexican administrative-intervener model can protect depositors through an orderly wind-down, a concrete test of enabler-jurisdiction institutional capacity. The Southwest Border Geographic Targeting Order faces a renewal or modification decision in the third quarter of 2026 as its lowered threshold matures operationally. Whether the facilitation functions previously run through CIBanco, Intercam and Vector have migrated to alternative Mexican or offshore conduits remains an open evidentiary question that would clarify whether the disrupted status of that scheme understates residual enabler-jurisdiction risk.

Cumulative analysis

Enabler Jurisdictions and Professional Facilitators — Cumulative Analysis

The cumulative D3 picture for Mexico centres on a repeated pattern: licensed, supervised domestic institutions functioning as sustained cartel-facilitation conduits, disrupted only by United States rather than Mexican enforcement action. The FinCEN Section 9714 special measures against CIBanco, Intercam Banco and Vector Casa de Bolsa, issued in June 2025 and amended in April 2026 to permit CIBanco orderly liquidation, established that three licensed Mexican financial institutions had played a key role in laundering funds for CJNG, the Gulf Cartel, the Beltran-Leyva Organization and the Sinaloa Cartel over a sustained multi-year period. The parallel Section 311 finding against ten Mexico-based casinos, centrally overseen from Mazatlan and issued in November 2025, documented structuring of cartel deposits below the Mexican reporting threshold in language the finding itself likens to classic structuring, with proceeds channeled to senior Sinaloa Cartel figures.

Across both cases, the explanatory backdrop is the same FATF follow-up finding: Mexico Unidad de Inteligencia Financiera generates high-quality financial intelligence that does not consistently convert into investigations or prosecutions. This is the structural, rather than incidental, reason licensed conduits operated undetected domestically for years; whether the gap reflects capacity constraints or political choice remains an open question this monitor has not resolved and continues to flag. On the enforcement side, the United States has built forward-looking detection capacity along the border corridor most implicated in these flows, through the Southwest Border Geographic Targeting Order lowering money-service-business cash thresholds, reflecting an enabler-jurisdiction response built at the United States end of the corridor rather than the Mexican end.

The integrated reading across cycles is that Mexico enabler-jurisdiction risk is best understood as systemic gatekeeper capture across two regulated sectors, banking/brokerage and gaming, rather than isolated firm-level compliance failures, with detection and disruption capacity concentrated extraterritorially.

Outlook

The near-term trajectory is dominated by wind-down processes: CIBanco liquidation completion within 2026 will test the Mexican administrative-intervener model, and the Southwest Border Geographic Targeting Order renewal decision in the third quarter of 2026 will indicate whether detection capacity along the border corridor is sustained or scaled back. The open question of whether disrupted facilitation functions have migrated to alternative Mexican or offshore conduits remains the central uncertainty for assessing whether current enforcement gains are durable or merely displace the same architecture elsewhere.

domain_sub_briefs · D3 · Cumulative analysis

D4 Conflict Finance and Extractive-Industry Integrity

Conflict Finance and Extractive-Industry Integrity

Continue reading

Fiscal fuel theft, known in Mexico as huachicol fiscal, is the defining D4 finding this cycle: a trade-based money-laundering network, principally associated with CJNG, that exploits Mexico energy-tax and permitting framework to smuggle United States-sourced fuel into Mexico and stolen Pemex crude north across the border, mislabeled as waste or hazardous cargo, through storage and transshipment hubs in Veracruz, Altamira and Monterrey. Financial institutions have reported over seven billion United States dollars in related suspicious activity, a volume indicating high transaction-monitoring salience for banks and cross-sector trade-finance counterparties operating in these corridors.

Applying a source-channel-deployment trace: the source is cartel fuel-tax arbitrage exploiting Mexico energy and fiscal framework; the channel is mislabeled cross-border shipments through the named hubs; and the deployment is cartel war-economy financing, generating tens of billions of dollars annually according to FinCEN current assessment. OFAC has pursued this network through sequential designations, the CJNG fuel-theft and oil-smuggling network in May 2025, building on a September 2024 action against thirty-five huachicoleros, and the Santa Rosa de Lima Cartel in December 2025, though the latter designation rests on a single tier-two source without independent corroboration this cycle.

The architecture-over-incident significance of this finding is that a 2019 Mexican government claim of a 94 percent reduction in fuel theft is directly contradicted by FinCEN current assessment of tens of billions of dollars in annual cartel revenue from the same activity. This demonstrates that point-in-time enforcement gains, individual pipeline-tap eradication, sanctions against specific networks, have not addressed the underlying permitting and tax-arbitrage architecture that allows huachicol fiscal to recur at scale, an architecture-over-incident exemplar for this monitor extractive-industry integrity coverage.

Outlook

No horizon item indicating structural reform of Mexico energy-permitting or tax-arbitrage framework has been identified this cycle, suggesting the recurring-cycle pattern of enforcement without durable structural correction is likely to continue. Continued OFAC designations targeting individual networks and figures are likely, consistent with the sequential pattern observed since 2024, but such designations should be read as incident-level disruption rather than resolution of the underlying architecture absent evidence of permitting or fiscal reform.

Cumulative analysis

Conflict Finance and Extractive-Industry Integrity — Cumulative Analysis

The cumulative D4 record for Mexico is anchored in a single recurring architecture: fiscal fuel theft, or huachicol fiscal, generating tens of billions of dollars annually for cartels, principally CJNG, through exploitation of Mexico energy-tax and permitting framework. The mechanism traced across sources involves fuel-tax arbitrage as the revenue source, cross-border shipments mislabeled as waste or hazardous cargo through Veracruz, Altamira and Monterrey hubs as the laundering channel, and sustained cartel war-economy financing as the deployment. Financial institutions have reported over seven billion United States dollars in suspicious activity connected to this network, evidencing substantial transaction-monitoring salience across the banking and trade-finance sectors exposed to these corridors.

OFAC sequential designation activity, the September 2024 action against thirty-five huachicoleros, the May 2025 CJNG fuel-theft network designation, and the December 2025 Santa Rosa de Lima Cartel designation (carried at Assessed confidence given single-source tier-two corroboration), demonstrates sustained enforcement attention but has not, on the evidence reviewed across cycles, produced a durable reduction in the underlying activity. This is the central architecture-over-incident judgment for D4 Mexico coverage: a 2019 Mexican government claim of a 94 percent reduction in fuel theft stands directly contradicted by FinCEN current assessment of continuing tens-of-billions-of-dollars annual cartel revenue from the same scheme, demonstrating that individual enforcement successes, however genuine at the time, have not been durable absent reform of the underlying permitting and tax-arbitrage framework.

This network also carries direct cross-monitor significance: SCEM conflict-finance tracking and ERM commodity-flow integrity tracking both intersect with the same underlying fuel and crude-oil smuggling architecture, reflecting the fact that extractive-industry integrity failures in Mexico simultaneously constitute war-economy financing and commodity-market integrity issues.

Outlook

Absent evidence of energy-permitting or fiscal-framework reform, the cumulative trajectory suggests continued recurrence of huachicol fiscal cycles: enforcement actions targeting specific networks and individuals are likely to continue, consistent with the pattern observed since 2024, but should be read as incident-level disruption of a structural revenue architecture that persists across enforcement cycles rather than evidence of durable resolution.

domain_sub_briefs · D4 · Cumulative analysis

D5 Crypto, Digital Assets, and Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Continue reading

The defining D5 development for Mexico this cycle is confirmation of a cash-to-crypto fentanyl-proceeds laundering pipeline operated by Sinaloa Cartel, specifically Los Chapitos, money-broker networks. Bulk United States street-level cash generated from drug sales is converted to stablecoins near the border, layered through decentralized-exchange swaps between stablecoins, and cashed out at centralized exchanges, with the same broker networks reportedly used to pay Chinese precursor-chemical suppliers through crypto and over-the-counter or peer-to-peer channels. OFAC designated more than a dozen individuals and entities linked to this cell in May 2026, confirming the underlying stablecoin-based laundering typology at High confidence, though the broader broker-network architecture described in the associated scheme record is corroborated only to a single tier-two source and remains at Assessed confidence.

This pipeline operates inside a pronounced Mexican regulatory vacuum. Banco de Mexico reaffirmed a healthy distance posture toward crypto-asset integration with the traditional financial system in December 2025, despite global stablecoin-regulation momentum represented by the United States GENIUS Act and the European Union MiCA framework. No dedicated Mexican virtual-asset-service-provider law exists beyond the narrow 2018 Fintech Law ITF framework, and the Comision Nacional Bancaria y de Valores role over crypto assets remains secondary. This regulatory gap coexists with heavy operational cartel use of stablecoins, per Chainalysis and TRM Labs blockchain tracing, a mismatch between light-touch domestic posture and heavy illicit operational use that underlies the worsening trajectory recorded on this monitor standing crypto-integrity tracker.

A broader vendor-analytics figure, that stablecoin transactions accounted for approximately sixty percent of illicit crypto transaction volume in the first quarter of 2025, is pattern-consistent with the Los Chapitos scheme but is not independently corroborated to a Mexico-specific percentage, and is accordingly carried at Possible confidence.

Outlook

A pattern-consistent, though not independently confirmed, judgment is that cartel money-laundering architecture is migrating from licensed correspondent-banking conduits toward crypto and stablecoin rails as United States enforcement disrupts traditional bank and brokerage channels, given the temporal sequencing of the CIBanco, Intercam and Vector special measures in 2025 followed by the Los Chapitos crypto-cell designation in 2026. No dated Mexican regulatory horizon item addressing virtual-asset-service-provider licensing was identified this cycle, suggesting Banco de Mexico healthy distance posture is likely to persist in the near term even as the underlying illicit operational use it fails to capture continues to scale.

Cumulative analysis

Crypto, Digital Assets, and Financial Innovation — Cumulative Analysis

The cumulative D5 baseline for Mexico is defined by a single confirmed scheme operating inside a persistent regulatory vacuum. Sinaloa Cartel, principally the Los Chapitos faction, money-broker networks convert bulk United States street-level fentanyl cash into stablecoins near the border, layer the resulting funds through decentralized-exchange swaps, and cash out at centralized exchanges, with the same networks reportedly used to pay Chinese precursor-chemical suppliers via crypto and over-the-counter or peer-to-peer channels. OFAC first designated more than a dozen individuals and entities tied to this cell in May 2026, confirming the stablecoin-based laundering typology at High confidence, while the fuller broker-network architecture remains corroborated to a single tier-two source and is accordingly carried at Assessed confidence across the cycles reviewed.

The structural backdrop against which this scheme operates has not changed across the baseline period: Banco de Mexico maintains a healthy distance posture toward crypto-asset integration, reaffirmed in December 2025 notwithstanding global stablecoin-regulatory momentum under the United States GENIUS Act and the European Union MiCA framework, and no dedicated Mexican virtual-asset-service-provider law exists beyond the narrow 2018 Fintech Law ITF framework. This light-touch regulatory posture coexists with, and arguably enables, heavy operational cartel use of stablecoin rails, per Chainalysis and TRM Labs blockchain-tracing analysis, a mismatch that has been recorded as worsening on the standing crypto-integrity tracker throughout the baseline.

A cross-cutting analytical judgment carried across this cycle is that cartel laundering architecture may be migrating from licensed correspondent-banking conduits toward crypto and stablecoin rails as a direct consequence of United States enforcement pressure on traditional bank and brokerage channels, given the temporal sequencing of the CIBanco, Intercam and Vector special measures in 2025 followed by the Los Chapitos crypto-cell designation in 2026; this channel-substitution judgment is pattern-consistent but not independently confirmed as causal.

Outlook

Absent any dated Mexican regulatory horizon item on virtual-asset-service-provider licensing, Banco de Mexico healthy distance posture is expected to persist, leaving the worsening trajectory on cartel stablecoin use largely unaddressed by domestic regulatory response in the near term. The channel-substitution hypothesis, correspondent-banking disruption driving crypto-rail migration, remains the central open question this monitor will continue testing as further United States enforcement actions against traditional channels unfold.

domain_sub_briefs · D5 · Cumulative analysis

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

Regulatory horizon
In Force Pending2026 · ±half_year

CIBanco liquidation completion under amended FinCEN order

CIBanco orderly liquidation, permitted by the April 2026 FinCEN amendment, is expected to complete within the year, testing the Mexican administrative-intervener model.
Adopted2026-09 · ±quarter

FATF report on underground banking and hawala exploitation

FATF approved but unpublished typology report on underground banking and hawala exploitation will inform future national risk assessment updates relevant to Mexico cash-intensive informal economy and cartel money-broker networks.
In Force Pending2026-Q3 · ±quarter

FinCEN Southwest Border Geographic Targeting Order renewal cycle

The 200 United States dollar cash-reporting threshold for border-area money-service businesses approaches a renewal or modification decision point.
Proposed2027 · ±multi_year

Mexico fifth-round FATF mutual evaluation (effectiveness assessment)

Mexico AML/CFT effectiveness will face independent FATF assessment for the first time; on-site scheduling has not yet been announced.
4 dated · 4 pending date · baseline financial-integrity-2026-07-05
Role action cards
MLROHigh

United States special-measures and terrorism designations against Mexican licensed institutions and cartel networks materially expand screening and reporting exposure this cycle.

FinCEN Section 9714 measures against three Mexican financial institutions, a Section 311 finding against ten casinos, and FTO/SDGT designations of six cartels each generate direct screening and reportable-activity implications for institutions with Mexico-linked correspondent or customer exposure. The cash-to-crypto laundering typology and the Southwest Border Geographic Targeting Order lowered cash-reporting threshold add further SAR-relevant detection surface.

5 evidence refs
ComplianceHigh

Mexico counterparty risk calibration diverges sharply between United States and European Union/United Kingdom regulatory frameworks this cycle.

Mexico absence from the FATF grey list, the EU high-risk third-country list, and the UK high-risk third-country list means standard, not enhanced, due diligence remains the formal requirement in Europe even as United States enforcement intensity against Mexico-linked institutions peaked. Compliance functions with Mexico exposure face a policy-calibration gap between jurisdictions.

4 evidence refs
LegalAssessed

Terrorism-linked designation of Mexican cartels creates secondary-sanctions and client-instruction risk with no European Union or United Kingdom equivalent.

The February 2025 FTO/SDGT designation of six Mexican cartels under Executive Order 14157 exposes counsel advising on Mexico-linked transactions to a unilateral United States sanctions and terrorism-financing regime that is not mirrored abroad, raising liability-exposure questions distinct from standard sanctions-screening obligations.

2 evidence refs
BoardHigh

Sustained, multi-year cartel-facilitation activity inside licensed Mexican financial institutions was disrupted by foreign, not domestic, intervention.

The finding that CIBanco, Intercam and Vector operated as cartel-laundering conduits for years before United States, rather than Mexican, action, and that Mexico financial-intelligence unit generates intelligence that does not consistently convert into prosecutions, represents a material reputational and institutional-risk signal for any board with Mexico-linked banking relationships or subsidiary exposure.

3 evidence refs
CTOAssessed

A cash-to-crypto fentanyl-proceeds pipeline using stablecoin layering and decentralized-exchange swaps confirms an active digital-asset evasion vector inside a regulatory vacuum.

The Los Chapitos cell designation confirms bulk cash is converted near the border into stablecoins, layered via decentralized-exchange swaps, and cashed out at centralized exchanges, in a jurisdiction with no dedicated virtual-asset-service-provider licensing regime, a technical typology directly relevant to blockchain-analytics and screening-architecture design for crypto-exposed platforms.

3 evidence refs
RiskAssessed

Cartel laundering architecture shows pattern-consistent signs of migrating from correspondent banking toward crypto rails following United States enforcement disruption of traditional channels.

The temporal sequencing of the 2025 special-measures action against three Mexican financial institutions followed by the 2026 Los Chapitos crypto-cell designation is pattern-consistent with channel substitution, an emerging-typology and exposure-concentration signal for risk functions modeling Mexico-linked exposure, though causal displacement is not independently confirmed.

3 evidence refs
OperationsHigh

Lowered cash-reporting thresholds and casino-sector structuring findings add new transaction-monitoring and screening-threshold considerations for border-corridor and gaming-sector exposure.

The Southwest Border Geographic Targeting Order lowered money-service-business cash threshold and the Section 311 casino finding describing structuring below the Mexican peso reporting threshold each carry direct operational-workflow implications for monitoring rule calibration in Mexico-linked corridors and gaming-sector relationships.

2 evidence refs
AuditHigh

Multi-year undetected cartel-facilitation activity inside licensed Mexican institutions raises questions about control-testing scope and audit-trail adequacy for correspondent and gaming-sector relationships.

That CIBanco, Intercam and Vector sustained cartel-facilitation channels for years before detection, alongside a FATF finding that Mexico financial-intelligence unit intelligence does not consistently convert into prosecutions, suggests that existing control-testing and evidentiary-documentation frameworks may not have been fit for purpose in this corridor, a gap relevant to audit scope-setting for Mexico-linked relationships.

2 evidence refs
Decision lens
MLRO

United States special-measures and terrorism designations against Mexican licensed institutions and cartel networks materially expand screening and reporting exposure this cycle.

Compliance

Mexico counterparty risk calibration diverges sharply between United States and European Union/United Kingdom regulatory frameworks this cycle.

Legal

Terrorism-linked designation of Mexican cartels creates secondary-sanctions and client-instruction risk with no European Union or United Kingdom equivalent.

Board

Sustained, multi-year cartel-facilitation activity inside licensed Mexican financial institutions was disrupted by foreign, not domestic, intervention.

CTO

A cash-to-crypto fentanyl-proceeds pipeline using stablecoin layering and decentralized-exchange swaps confirms an active digital-asset evasion vector inside a regulatory vacuum.

Risk

Cartel laundering architecture shows pattern-consistent signs of migrating from correspondent banking toward crypto rails following United States enforcement disruption of traditional channels.

Operations

Lowered cash-reporting thresholds and casino-sector structuring findings add new transaction-monitoring and screening-threshold considerations for border-corridor and gaming-sector exposure.

Audit

Multi-year undetected cartel-facilitation activity inside licensed Mexican institutions raises questions about control-testing scope and audit-trail adequacy for correspondent and gaming-sector relationships.

Shared evidence: 5 refs
Scenario sketches

AMLA direct-supervision transition and cross-border obliged-entity evasion adaptation

An illustrative orientation: as the AMLA Regulation direct and indirect supervision perimeter expands over cross-border obliged entities within the European Economic Area, alongside the directly applicable AML Regulation and per-state sixth AML Directive transposition, non-EEA-linked networks with European touchpoints could face a hybrid EU-level supervisory layer rather than purely national oversight. This may reshape where evasion architecture seeks weaker links, potentially favouring counterparties and corridors outside the AMLA direct-supervision perimeter altogether, of the kind Mexico currently represents as a non-EEA jurisdiction. This is an illustrative structural sketch, not a prediction, and not an observed development this cycle.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Illustrative channel-substitution pathway from correspondent banking to stablecoin rails

An illustrative sketch of how disruption to licensed correspondent-banking conduits, of the kind seen in the special-measures action against three Mexican financial institutions, could, in principle, accelerate a laundering network shift toward stablecoin-based rails operating in jurisdictions without dedicated virtual-asset-service-provider licensing regimes. This is architecture-over-incident orientation illustrating a possible structural mechanism, not a claim that this migration has been confirmed or is occurring at any specific scale.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo material MX-linked findings this cycle.
T2 · EU AML Package / AMLAno_changeNo MX-specific transposition or supervisory-perimeter movement surfaced this cycle; not directly applicable to a non-EU jurisdiction.
T3 · FATF Grey Listincremental_developmentMexico is not on the grey list; remains in enhanced follow-up since 2018; compliant on 10/40 Recommendations, largely compliant on 24. Concluded FATF Presidency (Elisa de Anda Madrazo) at the June 2026 Plenary, UK taking over 1 July 2026.
T4 · Beneficial-Ownership Register Statusno_changeNo MX-specific BO-registry development surfaced this cycle; logged as a coverage gap (no_source).
T5 · Crypto & Digital-Asset Integrityincremental_developmentMX Fintech Law/Circular 4/2019 continues to bar virtual-asset legal-tender status; no MX CBDC pilot timeline exists. A July 2025 AML-law VASP amendment reportedly introduced travel-rule and 210-UMA reporting obligations, not independently corroborated this cycle.
T6 · Sanctions Regime Divergencematerial_changeUS Treasury (OFAC/FinCEN) escalated unilateral extraterritorial action against MX-based casinos and financial institutions, run in explicit coordination with, not divergence from, the Government of Mexico.
Registers

Enforcement actions

  • FinCEN issued Section 9714 special measures orders under the Fentanyl Sanctions Act/FEND Off Fentanyl Act identifying three Mexico-based financial institutions as primary money-laundering concerns, prohibiting US transmittals of funds involving them or their digital-asset addresses. 25 Jun 2025
  • Pursuant to EO 14157, State designated eight organizations including six Mexico-based cartels as Foreign Terrorist Organizations and Specially Designated Global Terrorists; OFAC implemented the designations on its SDN list. 20 Feb 2025
  • OFAC designated more than a dozen individuals/entities linked to Los Chapitos' cash-to-crypto laundering network converting US fentanyl cash into stablecoins for transfer to Mexico. 20 May 2026
  • OFAC sanctioned Mexican individuals and companies linked to CJNG's cross-border fuel theft/oil smuggling operations on the US southwest border, building on a September 2024 action against 35 huachicoleros. 1 May 2025
  • Treasury added Mexico's Santa Rosa de Lima Cartel to its sanctions list over fuel theft that undercuts global energy markets. 17 Dec 2025
  • FinCEN issued a Section 311 finding and proposed rulemaking identifying transactions involving 10 Mexico-based casinos as a class of primary money-laundering concern tied to Sinaloa Cartel financing. 3 Nov 2025

Sanctions changes

  • US State Department/OFAC designated six Mexico-based cartels (plus Tren de Aragua and MS-13) as FTOs/SDGTs pursuant to EO 14157, a unilateral US listing action with no equivalent EU or UK terrorist-organization designation for these groups. 20 Feb 2025
  • FinCEN's June 2025 Section 9714 special measures against CIBanco, Intercam and Vector saw two effective-date extensions (July 21 to Sept 4, then to Oct 20, 2025) before an April 2026 amendment permitting orderly liquidation of CIBanco specifically. 15 Apr 2026
  • The EU Commission's December 2025 high-risk third-country delegated regulation update (Regulations (EU) 2026/46 and 2026/83) added Bolivia and the British Virgin Islands and delisted six countries; Mexico was not added to, or already present on, the EU AML high-risk list despite intensifying US sanctions activity against Mexico-based cartels and financial institutions in the same window. 4 Dec 2025
  • OFAC added the Santa Rosa de Lima Cartel to its sanctions list for fuel-theft activity undercutting energy markets, continuing the huachicol-focused designation sequence begun in September 2024. 17 Dec 2025

Regulatory horizon (register)

  • Mexico's 5th-round FATF mutual evaluation (effectiveness assessment)
  • FinCEN Southwest Border GTO renewal cycle
  • CIBanco liquidation completion under amended FinCEN order
  • FATF report on underground banking/hawala exploitation (informs Mexico exposure)

Active schemes

  • [CRITICAL] Cartel cash-to-crypto fentanyl proceeds pipeline
  • [CRITICAL] Fiscal fuel theft (huachicol fiscal) TBML network
  • [CRITICAL] Cartel-facilitating commercial bank/brokerage conduits
  • [HIGH] PEP real-estate offshoring via opaque US structures
  • [HIGH] Sinaloa-linked casino structuring network
Sources
  1. FATF / GAFILAT (multilateral first-party mutual evaluation of Mexico)
  2. FATF
  3. FinCEN (US Treasury)
  4. OFAC (US Treasury)
  5. FinCEN (US Treasury)
  6. European Commission (Directorate-General for Financial Stability, Financial Services and Capital Markets Union)
  7. HM Treasury / UK Government
  8. ICIJ
  9. Chainalysis
  10. TRM Labs
  11. Elliptic
  12. OCCRP
Coverage gaps
Mexico lacks a centralized, publicly accessible beneficial-o…
Mexico lacks a centralized, publicly accessible beneficial-ownership registry equivalent to emerging EU/UK models; the 2018 FATF MER found the legal/institutional framework strong on criminalisation and financial intelligence but weaker on 'key preventive measures including identification of beneficial owners.'
The FATF's own follow-up assessment noted the UIF 'functions…
The FATF's own follow-up assessment noted the UIF 'functions well' and 'is producing good financial intelligence' but that 'this financial intelligence does not often lead to investigations of money laundering, underlying crimes, and terrorist financing' — a structural disconnect between intelligence generation and prosecutorial follow-through.
Despite a 2019 government claim of a 94% reduction in fuel t…
Despite a 2019 government claim of a 94% reduction in fuel theft, huachicol and its 'fiscal fuel theft' evolution have re-emerged at a scale FinCEN now assesses generates tens of billions of dollars annually for cartels, indicating prior enforcement gains were not durable.
The seed-designated authoritative NRA for this jurisdiction …
The seed-designated authoritative NRA for this jurisdiction (GAFILAT ML Regional Threat Report, Second Update, 2017-2018) could not be directly retrieved and quoted verbatim within this research session; the FATF's own 2018 Mutual Evaluation Report (which incorporates and supersedes much of that regional threat material with Mexico-specific findings) was used as the primary substitute national-equivalent source.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.