← Back to Blog
AML Compliance / LFPIORPI

AML Compliance Program for Real Estate Companies: Design and Implementation

March 15, 2026 — Enrique Benet-Gregg

Regulatory Framework: LFPIORPI and Its Obligations for the Real Estate Sector

The Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin (LFPIORPI), published in the DOF on October 17, 2012 and subject to various subsequent regulatory modifications, classifies real estate companies as Vulnerable Activities under its article 17, section XVI. This classification imposes a set of due diligence obligations, client identification, information safeguarding and notice submission requirements to the Financial Intelligence Unit (UIF) that are neither optional nor negotiable. Non-compliance activates the sanctioning regime of article 55, with fines that can reach the equivalent of 65,000 times the current Measurement and Update Unit (UMA), independent of criminal liability for offenses typified in the Federal Penal Code. The structure, gradation and procedural consequences of this sanctioning regime are analyzed in detail below.

The Regulations of the LFPIORPI, published in the DOF on August 16, 2013 and its modifications, develops in articles 12 through 18 the criteria for determining the risk level per transaction, the monetary threshold that activates the notice obligation, and the minimum documentary standards for the integration of client files.

Regarding the specific threshold, article 17, section XVI of the LFPIORPI originally formulates it as equivalent to 8,025 times the general daily minimum wage in effect in Mexico City (SMGVDF). However, the constitutional reform published in the DOF on January 27, 2016 severed the SMGVDF from its function as a unit of account in legal obligations, creating the Measurement and Update Unit (UMA) for that purpose. This severance generated interpretive uncertainty regarding which unit applies to the LFPIORPI thresholds. The General Rules referred to in the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin, in its consolidated version published in the DOF on August 23, 2013 and modified through various subsequent resolutions of the SHCP (with the most recent operative modification published in the DOF on August 16, 2018), have maintained the reference to the SMGVDF for purposes of the real estate reporting threshold, a criterion that the SHCP itself has sustained in its operational guides by considering that the LFPIORPI is a special law of public order whose reference unit was not automatically substituted by the constitutional reform. Based on the SMGVDF in effect as of the date of this publication for Mexico City, the threshold is approximately equivalent to 645,000 Mexican pesos, although companies must verify the updated SMGVDF value in the DOF at the time of each transaction subject to reporting, and monitor any new publication of the General Rules that could adjust or restate this parameter in UMA.

Structural Components of an Effective AML Program

1. Institutional Risk Assessment

The starting point is not a generic form, but an analysis of risk specific to the company. Article 18 of the LFPIORPI obliges those who carry out vulnerable activities to establish criteria for client identification and knowledge proportional to the risk of the transaction. In practice, this requires mapping the client portfolio by profile (domestic natural person, legal entity, foreign client, politically exposed person), the type of transaction (purchase and sale, lease, guarantee trust, pre-sales development), the geographic area (the Riviera Maya and the Mexican Caribbean present differentiated exposure due to the volume of cash transactions and the participation of offshore structures), and the business origination channel.

2. Identification and Due Diligence Policies

Standard due diligence for natural persons requires official identification, CURP or its foreign equivalent, proof of address and declaration of fund origin in accordance with article 18 of the LFPIORPI and the operative provisions of the General Rules that develop the identification standards for natural persons. For legal entities, article 18 in general terms, supplemented by the specific provisions of the General Rules issued by the SHCP and the UIF, extends the obligation to the identification of controlling beneficial owners. As of the modifications to the Federal Tax Code introduced in 2022 and in effect as of the date of this publication, the controlling beneficial owner figure is cross-cutting: its non-identification generates consequences in both AML and tax matters.

It is important to clarify that the fraction-by-fraction allocations of article 18 that circulate in secondary literature do not always correspond with precision to the current consolidated text of the LFPIORPI as published in the DOF and subsequently modified. Article 18 establishes a general framework of obligations whose operationalization fraction by fraction is complemented and clarified through the General Character Rules, which are the normative reference instrument for determining the specific scope of each obligation. References to specific fractions in this article are made on the basis of the function of the obligation described, and the reader should verify the exact correspondence in the text of the current DOF.

Enhanced due diligence applies when high-risk factors concur: Politically Exposed Persons (PEP) in accordance with article 18 of the LFPIORPI and the corresponding General Character Rules; clients domiciled in jurisdictions included in the FATF lists; opaque ownership structures; or inconsistency between the declared economic profile and the value of the real property.

3. Internal Governance Structure and Compliance Officer

Article 18 of the LFPIORPI, in its regulatory function of internal governance, imposes the designation of a Compliance Officer who centralizes the receipt of internal reports, coordinates the submission of notices to the UIF and maintains the updated risk matrix. This position cannot be merely nominal. The responsibility of the Compliance Officer is personal and enforceable before the authorities.

As to the judicial foundation of this standard of responsibility, it is appropriate to clarify that the references frequently made to criteria of the First Chamber of the SCJN in matters of administrative infractions without proof of intent, and to criteria of Collegiate Courts of the Seventeenth Circuit regarding the autonomous nature of the infraction for lack of training, correspond to interpretive criteria observed in administrative and litigation practice before the UIF, the Federal Administrative Justice Court (TFJA) and the amparo courts, rather than to isolated theses or jurisprudence with registration numbers. The absence of a citation with thesis number, case file and registration in the SJF prevents attributing these positions with certainty to specific resolutions of those bodies, for which reason they are recorded as practical guidance derived from the development of administrative litigation in the matter. The program must document the reporting line, the frequency of review of the risk matrix and the escalation protocols.

4. Submission of Notices to the UIF: Operational Mechanics and Points of Failure

Article 17, fraction XVI, in relation with article 24 of the LFPIORPI, establishes the deadlines for the submission of notices: the timely notice must be submitted within 17 business days following the close of the calendar month in which the transaction subject to reporting was conducted. Submission is made exclusively through the UIF’s User Portal System (SICOFI).

The UIF’s sanctioning practice reveals that the most frequent causes of infractions do not derive solely from the total omission of reporting, but from three recurring operational failures that must be understood with precision:

Notice by transaction versus notice by accumulation. The former applies when an individual transaction exceeds the reporting threshold autonomously. The latter, the notice by accumulation, is mandatory when a company conducts with the same client multiple transactions that individually do not exceed the threshold but that, when added within a determined period, reach or exceed it. Confusion between both modalities or the assumption that only transactions individually exceeding the threshold generate a reporting obligation is one of the most documented causes of sanctioning procedures in the real estate sector.

Notice of non-submission (month without reportable transactions). Companies registered with the UIF as obligated subjects have the obligation to submit monthly a notice informing that during the month no transactions subject to reporting were conducted. The omission of this zero activity notice constitutes autonomous non-compliance, independent of any reporting obligation regarding specific transactions.

Registration in SICOFI and annual revalidation. Access to the SICOFI system requires an initial registration process that includes accreditation of the company, formal designation of the Compliance Officer and configuration of credentials. This process represents a recurring operational barrier for new participants in the Quintana Roo real estate market, particularly for developers that begin pre-sales operations. Additionally, the system requires periodic revalidation of credentials and company data that, if not managed in a timely manner, may interrupt the ability to submit notices within the legal deadline. Registration in SICOFI and its annual revalidation must be treated as independent milestones of the compliance calendar, not as secondary administrative tasks.

5. Training, Continuous Monitoring and Program Review

An AML program is not a static document. The LFPIORPI and its Regulations require periodic training of personnel in accordance with article 18 and the General Rules of Character that develop this requirement, preservation of files for a minimum of five years as established in the same article, and updating of the program in the event of material changes in the company’s activities or in the regulatory framework.

In accordance with interpretive criteria observed in litigation practice before the TFJA and amparo courts, the lack of documentary evidence of training provided may be considered an autonomous breach, distinct and independent of other obligations under the LFPIORPI, which multiplies the number of infractions that may be counted for purposes of sanctions. This position, although not attributable to a thesis with verified registration in the SJF, is consistent with the criteria applied by the UIF in its sanctioning procedures and with the interpretation that administrative courts have upheld in reviewing such procedures.

6. Sanctioning Regime: Graduation, Procedure and Thresholds for Criminal Reference

Article 55 of the LFPIORPI does not establish a single sanction but rather a scheme of graduated bands whose application depends on the specific infraction committed. Sanctions range from warnings and minor fines for low-impact formal violations, to fines reaching 65,000 times the UMA for the most serious infractions, among which are included the failure to file notices regarding operations exceeding the reporting threshold, the failure to identify the controlling beneficial owner in high-risk operations, and the refusal or obstruction of inspection acts by the authority. Infractions of a formal nature, such as late filing or the failure to file a notice of non-filing, are located in the intermediate ranges of the sanction scale, but they are the most frequent and, therefore, those that generate the greatest cumulative impact when they occur repeatedly.

Administrative procedure for imposition. The SHCP, through the UIF, initiates the sanctioning procedure through an inspection or information request. The obligated subject has the right to be heard in a hearing before the sanctioning resolution is issued, in compliance with the guarantees of constitutional article 14. The resolution imposing the sanction is challengeable before the Federal Administrative Justice Court (TFJA) through contentious administrative proceedings, and the TFJA judgment may in turn be subject to direct amparo before the competent Circuit Collegiate Courts.

Mitigation mechanisms and voluntary disclosure. Although the LFPIORPI does not contemplate a formal amnesty or self-reporting program equivalent to that of other laws, administrative practice and TFJA case law recognize that the voluntary correction of formal violations prior to the initiation of the sanctioning procedure, active cooperation with the authority during inspection, and proof of a formally implemented AML program are factors that the SHCP may weigh in determining the amount of the sanction within the applicable range. Companies that detect compliance gaps have a practical incentive to correct them proactively and document that correction.

Threshold for criminal reference. When the UIF, in analyzing the notices received or information obtained in inspection, detects indications that the reported or unreported operations correspond to transactions with funds of illicit origin as classified in articles 400 Bis and 400 Bis-1 of the Federal Criminal Code, it has the legal obligation to file a complaint or accusation before the General Prosecutor’s Office (FGR). The LFPIORPI does not establish an automatic monetary threshold for this criminal reference; the decision is based on financial intelligence analysis of the available information as a whole. Nevertheless, in practice, operations that exceed several multiples of the reporting threshold or that involve corporate structures designed to split payments are typically those that trigger the reference to the FGR. Once the criminal investigation is initiated, the administrative sanctioning procedure and the criminal process proceed in parallel and independently.

The Notarial Protocol and Its Relationship with the Obligations of the Real Estate Company

One of the most frequent confusions in the daily operation of the real estate sector is the assumption that the company’s AML obligations are satisfied, or at least covered, by the compliance of the notary public intervening in the deed. This assumption is legally incorrect and operationally risky.

Article 17, section XIX of the LFPIORPI designates public notaries as obligated subjects in a independent and autonomous manner. Their obligations regarding party identification, verification of the origin of funds, and submission of notices to the UIF are inherent to their notarial function and do not derive from nor depend on the obligations that correspond to the real estate company under section XVI of the same article. Consequently, the notary’s compliance does not discharge, substitute, or extinguish the obligations of the real estate company: both obligated subjects must comply independently with their respective AML programs and their reporting obligations.

In practice, this independence generates coordination points that must be managed explicitly in the transaction closing protocol:

Shared identification documentation. The real estate company and the notary require client identification documentation that largely coincides. A well-designed protocol establishes which party collects the original documentation, in what format it is shared with the other party, and how it is documented in each party’s file that the documents were effectively verified, without the notary’s receipt substituting the company’s obligation to integrate its own file.

Timing of notices. The real estate company has the obligation to submit its notice within 17 business days following the closing of the month in which the reportable transaction was conducted, which may be the signing of the purchase agreement, the payment exceeding the threshold, or the notarial formalization, as applicable. The notary has its own deadlines for submitting the notice derived from the execution of the deed. These dates do not necessarily coincide, and the submission of the notarial notice does not prove the real estate company’s compliance with its deadline.

Coordination with the fiduciary institution. In transactions involving bank trusts under Article 27 of the Constitution, which is common in the restricted zone of Quintana Roo, a third obligated subject is added: the fiduciary institution, regulated in AML matters by the Single Circular of Banks. The compliance protocol must articulate with precision the function and deliverables of each of the three subjects to avoid both inefficient duplications and gaps in the compliance chain that the UIF may identify through information cross-referencing.

Operational Implications for Real Estate Companies in Quintana Roo

Real estate companies with operations in the Riviera Maya face a specific risk profile: a high proportion of foreign buyers whose funds transit through fiduciary structures (the bank trust of Article 27 of the Constitution remains the dominant vehicle for acquisitions in restricted zones), pre-sales structured with installment payments, and the presence of institutional investors with multi-level corporate control chains. In this context, the articulation of the AML program with notarial, fiduciary, and corporate structuring processes is technically necessary, not merely recommended. Coordination with the intervening public notary, whose independent obligations under Article 17, section XIX of the LFPIORPI are analyzed in the preceding section, and with the fiduciary institution, subject to the Law of Credit Institutions and the General Provisions Applicable to Credit Institutions (Single Circular of Banks) in AML matters, determines whether the compliance chain is solid or whether there are gaps that the UIF may identify through information cross-referencing.

IBG Legal is a boutique litigation firm specialized in real estate and corporate law with established practice in AML compliance and implementation of AML programs for the real estate sector, headquartered in Cancún with offices in Mexico City and Querétaro. Our practice in this area includes the representation of real estate developers and operators in sanctioning proceedings before the UIF and the TFJA, the performance of SICOFI compliance audits to identify gaps in notice registration by transaction and by accumulation, and the design and implementation of AML programs specifically structured for the conditions of the Riviera Maya market, including pre-sales transactions with foreign buyers, fiduciary structures in restricted zones, and multi-level corporate chains. If your company faces a UIF inspection, needs to strengthen your program before an audit, or needs to establish your AML compliance protocol for the first time, we invite you to contact our team.

Sources and References

  • Legislation
    • Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin (LFPIORPI), Official Gazette of the Federation (DOF) October 17, 2012; articles 17 sections XVI and XIX, 18, 24 and 55. In force with its amendments as of March 15, 2026.
    • Regulations of the LFPIORPI, DOF August 16, 2013; articles 12 through 18. In force with its amendments as of March 15, 2026.
    • General Rules referred to in the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin, originally published in the DOF on August 23, 2013, with successive amendments by the Ministry of Finance and Public Credit, with the most recent operative amendment published in the DOF on August 16, 2018. Regulatory instrument of reference for the operationalization of reporting thresholds and the obligations section by section of article 18 of the LFPIORPI.
    • Constitutional reform on the de-indexation of the minimum wage (creation of the UMA), DOF January 27, 2016. Relevant for the interpretation of the reporting threshold in article 17, section XVI of the LFPIORPI originally expressed in SMGVDF.
    • Federal Tax Code, articles 32-B Ter, 32-B Quáter and 32-B Quinquies (controlling beneficiary), amended by Decree published in the DOF on November 12, 2021, effective as of January 1, 2022.
    • Federal Criminal Code, articles 400 Bis and 400 Bis-1 (operations with resources of illicit origin). In force with its amendments as of March 15, 2026.
    • Law on Credit Institutions and General Provisions applicable to Credit Institutions (Unified Circular for Banks), Chapter applicable to money laundering prevention. In force as of March 15, 2026.
  • Interpretive criteria and litigation practice
    • Interpretive criteria observed in administrative and litigation practice before the FIU, the Federal Administrative Justice Tribunal (TFJA) and amparo courts, to the effect that in matters of administrative infractions derived from public order laws with preventive function, negligence in the exercise of supervision functions may constitute sufficient grounds for sanctions without requiring proof of intent. These criteria are applied consistently in sanctioning proceedings reviewed by competent courts, although they are not attributed to an isolated thesis or jurisprudence with a registration number.
    • Interpretive criteria observed in litigation practice before the TFJA and amparo courts, to the effect that the lack of documentary evidence of periodic training in AML matters constitutes autonomous and independent non-compliance under the LFPIORPI, computable separately for sanctioning purposes. Practical guidance derived from administrative litigation in this matter, not attributable to a thesis with verified registration in the SJF.
  • Doctrine
  • Official sources
    • Official Gazette of the Federation (DOF): publications of the LFPIORPI and its Regulations, available at dof.gob.mx.
    • Financial Intelligence Unit (UIF), Ministry of Finance and Public Credit: SICOFI system, operational guides, registration and annual revalidation procedures, and lists of blocked persons, available at uif.gob.mx.
    • Official Gazette of the State of Quintana Roo: complementary local regulations on the registration and control of real estate operations.
Chat on WhatsApp