← Back to Blog
Due Diligence

KYC and Money Laundering Prevention in Real Estate Transactions

March 15, 2026 — Enrique Benet-Gregg

Regulatory Framework: LFPIORPI and the Real Estate Ecosystem as a Vulnerable Sector

The Federal Law for the Prevention and Identification of Operations with Illicit Source Resources (LFPIORPI), published in the Official Gazette of the Federation on July 17, 2012 and with amendments in force as of 2025, expressly classifies real estate operations as vulnerable activities subject to obligations of identification, reporting, and safeguarding of information. Article 17, section XIV subjects to its provisions those who habitually conduct operations on real property; however, the specific thresholds that trigger the notice obligation are not uniform for all operational modalities. The General Rules referred to in the LFPIORPI (hereinafter, the Rules), issued by the SHCP and updated through successive miscellaneous resolutions, differentiate thresholds according to the type of legal act involved:

  • Sale and transmission of real rights: The obligation to file notice is triggered when the value of the operation equals or exceeds 8,025 times the daily value of the UMA, in accordance with the Rule applicable to divestment operations. At the daily value of the UMA in force for 2025 ($108.57 MXN), this threshold is equivalent to approximately $870,874 MXN.
  • Lease: The Rules establish a differentiated threshold for lease contracts habitually entered into as a vulnerable activity; practitioners must consult the current version of the Rules to verify the multiple of UMA applicable to this modality, as it has been subject to adjustments in recent updates.
  • Constitution of trusts over real property: Fiduciary operations with real estate likewise follow the specific thresholds established in the Rules for this instrument, which may differ from the sale threshold based on the value of the trust estate.

Given that the Rules have been modified on multiple occasions, including updates subsequent to the reforms regarding controlling beneficial owner in 2021 and 2022, obligated subjects must verify the current consolidated version published in the DOF and not limit themselves to the original 2013 version. The Regulations of the LFPIORPI, published on August 16, 2013 and amended in subsequent years, develop the procedures for customer identification, the integration of the KYC file, and the mechanisms for filing notices with the Financial Intelligence Unit (UIF) of the Ministry of Finance and Public Credit.

Non-compliance exposes the obligated subject to the sanctions provided for in Article 53 of the LFPIORPI, whose structure is tiered and cannot be summarized solely in its maximum ceiling. Said article establishes a typology of infractions with differentiated consequences: minor or formal omissions may result only in warning; infractions of first non-compliance with substantive obligations are sanctioned with fines in medium ranges starting from 200 days of UMA; repeated, systematic infractions, or those committed with proven fraud reach the ceiling of 10,000 days of UMA (equivalent to approximately $1,085,700 MXN at 2025 value). Additionally, when fraud concurs, the same Article 53 provides for possible autonomous criminal liability under the Federal Penal Code. This tiered structure is relevant to the actual calibration of regulatory risk: an isolated omission in a file of a first-time operation does not receive the same treatment as the systematic absence of controls in a portfolio of dozens of transactions.

Obligated Subjects in the Real Estate Cycle: Notaries, Agents, and Developers

The LFPIORPI does not impose the same obligations on all participants in the transactional cycle. Its practical operability requires distinguishing three categories:

  • Public notaries and brokers: Article 17, section XI requires notaries and public brokers who intervene in property transfer operations or the constitution of real guarantees. Article 18 imposes on them the obligation to identify both the transferor and the acquirer, verify that they do not appear on lists of blocked persons, and submit the corresponding notice to the UIF when the value of the operation reaches the legal threshold.
  • Real estate agents and intermediation service providers: They are included in section XIV of Article 17 when they act habitually. The customer identification obligation includes verification of the identity of the controlling beneficial owner, a figure strengthened by amendments to the Federal Tax Code (Articles 32-B Ter and 32-B Quáter, effective since 2022) that impose identification and registration of the controlling beneficial owner with the SAT.
  • Real estate developers: Those who construct and market real estate directly to the public are subject to the same identification obligations when the sale price exceeds the applicable UMA threshold according to the type of operation. The receipt of cash payments above the threshold established in the General Rules activates an additional absolute prohibition against receiving them: it is not merely a reporting obligation, but a substantive restriction whose violation is independently sanctionable. Obligated subjects must also report any attempt at cash payment exceeding said threshold, regardless of whether the operation has been completed or not.

Independent and cumulative obligations of notaries and agents

A point of high practical exposure that frequently generates compliance errors is the concurrence of a notary and a real estate agent in the same operation. The obligations arising from Article 17, section XI (notaries) and Article 17, section XIV (agents and intermediaries) are independent and cumulative: each obligated subject is responsible for the performance of its own obligations before the UIF independently of what the other has submitted or failed to submit. The fact that the notary submits its notice does not release the agent from submitting its own; conversely, the agent’s omission does not transfer responsibility to the notary nor mitigate the former’s infraction. Both must, furthermore, maintain separate and independent KYC files, since each is responsible for documentary integration in the event of an authority review. Developers, agents and promoters operating under the assumption that notarial intervention covers their obligation incur in an error that the administrative authority has not admitted as an exemption.

Compliance gap in the identification of the controlling beneficial owner

Article 18 of the LFPIORPI and the General Rules impose the identification of the controlling beneficial owner as part of the KYC file. In parallel, Articles 32-B Ter and 32-B Quáter of the CFF require legal entities and trusts to identify, obtain, preserve and provide to the SAT information concerning their controlling beneficial owner. Although both obligations point to the same transparency objective, their definitions of “controlling beneficial owner” are not identical: the CFF adopts effective control criteria, indirect shareholding participation and command authority inherent to the tax transparency regime, while the LFPIORPI and its Rules use a definition constructed from the perspective of AML risk, which may include persons with determining influence over the operation even though they do not have formal participation in the ownership structure. This divergence generates a compliance gap that internal prevention programs must resolve explicitly: it is not sufficient to satisfy the definition of one of the two regimes. Compliance programs must simultaneously identify the controlling beneficial owner in accordance with both standards and, in the event of any difference in the universe of persons identified, adopt the more stringent standard as the basis for due diligence. The omission of this dual analysis exposes the obligated subject to regulatory non-compliance before both the SAT and the UIF simultaneously.

KYC file content: minimum applicable standard

Article 18 of the LFPIORPI, in conjunction with the General Rules issued by the SHCP (published in the DOF on August 23, 2013 and updated through various miscellaneous resolutions), establishes that the identification file must contain, at a minimum: official identification with photograph of the client or their legal representative; documents evidencing the existence and representation of legal entities; identification of the controlling beneficial owner in accordance with the dual standards described in the previous section; declaration regarding the lawful origin of resources; and, when applicable, information on the corporate structure of interposed vehicles such as trusts or holding companies. In cross-border transactions with foreign buyers, enhanced due diligence includes verification against OFAC lists, UN lists, and the System for Consultation of Politically Exposed Persons of the UIF.

Notices to the UIF: deadlines, thresholds, and consequences of non-compliance

Notices must be submitted in the electronic formats enabled by the UIF within 17 business days following the closing of the transaction, in accordance with article 24 of the LFPIORPI. The failure to submit a mandatory notice constitutes an autonomous violation, regardless of whether the transaction is or is not of unlawful origin.

Regarding the objective nature of this violation, the Collegiate Courts in Administrative Matters have held, when resolving constitutional appeals filed by obligated subjects, that it is sufficient to prove the omission to establish administrative liability, without it being necessary to prove knowledge of the unlawful origin of the resources. This criterion has been expressed in various resolutions of the Collegiate Courts in Administrative Matters in the Eleventh Epoch of the Federal Judicial Gazette. However, given that the specific theses supporting this proposition have not been individually assigned a registration number in the research underlying this article, it must be noted that this position is presented as an analytical criterion consistent with the predominant jurisdictional interpretation, and practitioners must verify the specific records in the search engine of the Federal Judicial Gazette (sjf2.scjn.gob.mx) under the headings corresponding to LFPIORPI and vulnerable activities. What is unequivocal is that the regulatory design of article 53 does not require proving knowledge of the unlawful origin to impose the sanction for notice omission, which makes procedural compliance the only effective defense.

Practical implications for transactions in the Riviera Maya

The real estate market of Quintana Roo presents characteristics that elevate the AML risk profile: high participation of foreign buyers, frequent transactions through banking trusts established in accordance with constitutional article 27, prices denominated in dollars, and mixed payment structures. In this context, the correct integration of the KYC file is not only a regulatory obligation, but an element of protection against the potential nullity of the legal act in criminal proceedings, the joint liability of the obligated subject that failed in its due diligence duty, and the possible loss of ownership of the real property transferred under the National Code of Loss of Domain in effect since August 2019.

Regarding loss of domain, article 22 of the Political Constitution of the United Mexican States establishes the framework under which this action operates, and the National Code of Loss of Domain develops its procedure with a mechanism for distribution of evidentiary burdens that registral titleholders must understand with precision. In general terms, it is the responsibility of the authority to prove the nexus between the asset and the unlawful activity; however, once said nexus is established before the judge of the case, the procedural burden shifts to the titleholder to demonstrate the lawful origin of the resources with which the asset was acquired and the absence of participation or knowledge of the unlawful act. Good faith without diligence is insufficient to resist the action: whoever alleges good faith must prove that they adopted the identification and verification measures reasonably required in accordance with their activity, which in the context of obligated subjects under the LFPIORPI is equivalent to demonstrating that their KYC file was complete, timely, and consistent. A properly integrated KYC file constitutes, consequently, not only evidence of regulatory compliance but the material proof that supports the defense of diligent good faith in an action for loss of domain.

Regarding the position of the First Chamber of the SCJN on the matter of asset forfeiture and good faith of the registered titleholder, the criteria supporting the proposition that the omission of due diligence is incompatible with the good faith exemption derive from the interpretation of constitutional article 22 carried out in the Tenth and Eleventh Epochs. Given that the specific registration numbers of the relevant theses have not been individually verified for this article, said proposition is presented as an analytical position grounded in the constitutional structure of article 22 and in the systematic interpretation of the National Asset Forfeiture Code; readers who require citing case law or isolated theses in active litigation must.

Remediation of Deficient Files: Historical Portfolios and Voluntary Disclosure

A frequent question among developers, agents and promoters with operations closed under standards prior to the 2021 and 2022 reforms is whether incomplete or non-existent KYC files in already-completed transactions can be corrected and what effect such correction has on exposure to sanctions. This scenario is as common as the construction of files for new operations, and its absence of analysis in available compliance materials creates a significant gap.

  • Retroactive remediation of files: The LFPIORPI does not prohibit the retroactive integration of documentation in files for closed operations. However, the authority distinguishes between genuine correction of an incomplete file and document fabrication subsequent to a review or demand. Remediation must be documented with certain dates, include an explanatory note on the origin of the delay, and be preserved together with the original documents that did exist at the time of the operation.
  • Voluntary disclosure and its mitigating effect: Article 53 of the LFPIORPI, in its tiered sanctions structure, does not expressly contemplate a formal voluntary disclosure program equivalent to the one that exists in tax matters under the CFF. However, in administrative practice, the spontaneous submission of belated notices and proactive communication with the UIF regarding deficiencies identified in compliance programs have been considered by the authority as mitigating factors in determining the range of the sanction within the brackets of article 53. This practice does not amount to a legal exemption, but it does reduce the risk that the authority will classify the omission as systematic or willful.
  • Prescription of the administrative infraction: Administrative infractions under the LFPIORPI are subject to the prescription periods applicable to administrative sanctions under the Mexican federal regime. In accordance with the general principles of administrative sanction law and the Federal Law of Administrative Procedure, the general prescription period for sanctioning powers is five years counted from the date the authority became aware of the infraction or from the date the infringing conduct ceased when it is of a continuous nature. Obligated subjects with historical portfolios should evaluate, operation by operation, whether the prescription period has elapsed before initiating remediation processes that could reveal omissions to the authority.

Operative Conclusion

AML compliance in real estate transactions is not exhausted in the formal submission of notices. It requires the implementation of an internal prevention program that includes: written policies for client and controlling beneficial owner identification under the dual standards of the CFF and the LFPIORPI; risk matrices by type of operation, origin of the buyer, and vehicle used; periodic training of involved personnel; and compliance audits with minimum annual frequency. The absence of these elements exposes the obligated subject to both administrative sanctions and incorporation into the criminal process as an omissive participant. Structuring the file correctly from the beginning of the operation, and not on the eve of notarial closing, is the difference between substantive compliance and regulatory exposure. For historical portfolios, the assessment of prescription and documented remediation must precede any interaction with the authority.

IBG Legal has represented real estate developers, investment funds, and intermediation agents in review proceedings before the UIF, including defense in sanctioning processes under article 53 of the LFPIORPI and the structuring of remediation programs for portfolios with deficient KYC files. Our AML compliance methodology starts with a transactional diagnosis operation by operation, builds risk matrices differentiated by buyer profile and legal vehicle, and produces files that withstand both an administrative review and eventual defense in asset forfeiture. If your company operates in the real estate sector of Quintana Roo or the Riviera Maya and requires an evaluation of your AML compliance program or remediation of your historical portfolio, contact us for an initial diagnostic consultation.

Sources and References

Legislation

  • Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin (LFPIORPI), DOF July 17, 2012, as amended through 2025. Articles 17 (subsections XI and XIV), 18, 24 and 53.
  • Regulations of the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin, DOF August 16, 2013, as subsequently amended.
  • General Rules referred to in the LFPIORPI, SHCP, DOF August 23, 2013 and subsequent miscellaneous updating resolutions. The thresholds by type of operation (purchase and sale, lease, trusts) are differentiated in the current Rules; consultation of the most recent consolidated version published in the DOF is recommended.
  • Federal Tax Code, DOF, text in force as of March 15, 2026. Articles 32-B Ter and 32-B Quáter (controlling beneficial owner, incorporated through reform published in the DOF on November 12, 2021, in force since January 2022).
  • National Code for the Extinction of Property Rights, DOF August 9, 2019, in force. Articles applicable to property subject to vulnerable activities and nexus with illicit acts.
  • Federal Criminal Code, DOF, text in force as of March 15, 2026. Articles relating to operations with resources of illicit origin (articles 400 Bis and 400 Bis-1).
  • Political Constitution of the United Mexican States, article 22 (extinction of property rights and allocation of burden of proof) and article 27, first paragraph and subsection I (acquisition of real property by foreigners and restricted zone).
  • Federal Administrative Procedure Law, DOF, text in force. Applicable provisions regarding the statute of limitations on sanctioning powers.

Judicial Criteria

  • First Chamber of the SCJN: analytical position founded on the interpretation of constitutional article 22 and the National Code for the Extinction of Property Rights, to the effect that the action for extinction of property rights operates on the basis of the nexus between the property and the illicit activity, with the consequent shift of the burden of proof to the registered owner once such nexus is established, good faith invocation being insufficient when the owner failed to exercise due diligence required by their activity. Practitioners requiring citation of specific theses or jurisprudence must verify the corresponding records in the Semanario Judicial de la Federación, Tenth and Eleventh Epochs, under the headings “extinction of property rights,” “good faith” and “due diligence”: sjf2.scjn.gob.mx.
  • Administrative Collegiate Courts: analytical criterion consistent with predominant jurisdictional interpretation, to the effect that the infraction for failure to report to the UIF under the LFPIORPI is objective in nature; it is sufficient to establish the omission to constitute administrative liability, without requiring proof of knowledge of the illicit origin of the resources. This criterion is consistent with the design of article 53 of the LFPIORPI, which does not require a subjective element to impose sanctions for failure to report. To identify isolated theses or specific jurisprudence with registration numbers, consult the Semanario Judicial de la Federación, Eleventh Epoch, under the heading “vulnerable activities” and “LFPIORPI”: sjf2.scjn.gob.mx.

Doctrine

  • Díaz Bravo, Arturo. Operations with Resources of Illicit Origin: Legal Analysis and Compliance Regime. Editorial Porrúa, Mexico. (Consult the most recent available edition to verify the incorporation of the 2021 and 2022 controlling beneficial owner reforms.)
  • Quintana Valtierra, Jesús. Mexican Tax Law. Editorial Trillas, Mexico. (Chapters relating to fiscal transparency obligations and controlling beneficial owner; note that this work is primarily a treatise on tax law and its relevance to the AML regime is complementary and limited to the intersection with the Federal Tax Code.)
  • GAFILAT. Mutual Evaluation Report on Mexico, Financial Action Task Force of Latin America, most recent available version. Primary reference for analysis of the effectiveness of the Mexican anti-money laundering regime in the real estate sector and for framing domestic compliance within FATF standards.
  • FATF/GAFI. Guidance for a Risk-Based Approach: Real Estate Sector, Financial Action Task Force, Paris, 2022. International reference document for the calibration of due diligence programs in real estate operations with foreign buyers and fiduciary structures.

Official Sources

Chat on WhatsApp