How to Run a Background Check on Someone in Mexico
Companies hiring in Mexico, appointing agents, taking on distributors or vetting a joint-venture partner usually approach a background check with an American or British model in mind. You enter a name and a date of birth into a screening platform, and a report comes back with criminal history, credit and employment. That model does not transfer. The records in Mexico are held differently, some of the most important ones are not open to third parties at all, and a report produced by running a Mexican name through an international database is very often worthless.
This is not a counsel of despair. A great deal can be established about a person in Mexico, to a standard a board or a court will accept. It is established through different records, in a different order, and with more manual work than buyers expect. What follows is what is actually possible, and what a check can never tell you.
Why a Mexican Background Check Works Differently
Relevant information sits across federal, state and local institutions. Access rules differ by record and by state, several of the most useful records belong to the person concerned rather than the public, and coverage varies. The consequence most often missed is this: the absence of a database result does not prove the absence of a record.
International screening platforms still have a place. They are useful for sanctions and for broad media sweeps. They do not replace jurisdiction-specific searching, and they cannot do identity resolution, which is where a Mexican check is won or lost.
So the question is never simply whether a name appears somewhere. It is whether each record can be attributed to the right person, placed in its legal and factual context, and supported by a source the person making the decision can weigh for themselves.
Start With the Name Problem
Mexican legal names carry two surnames. A person is recorded as a given name, then the father's surname, then the mother's surname. Ana María Ruiz Hernández may appear in one record as Ana Ruiz, in another as Ana M. Ruiz H., in a third as Ana Maria Ruiz-Hernandez with the accents stripped, and in a fourth under a married form. Common surname combinations produce large numbers of genuine namesakes.
The consequence is structural. A name alone is not an identifier in Mexico. A check that returns a clean result on a name search has established very little, and a check that returns a hit on a name search has to prove the hit belongs to your subject before it means anything. Nearly every false result we see in reports produced elsewhere comes from this single point.
Before any substantive searching starts, the identifiers you hold should be compared across official identification, contracts, tax documents, corporate instruments and anything else lawfully obtained. Reconciling those first is cheaper than unwinding a wrong match later.
The Identifiers That Do the Work
Three identifiers carry the weight, and understanding what each unlocks is the difference between a check that resolves and one that does not.
The CURP is the population registry key, an eighteen-character code issued to every resident that encodes name, date of birth, sex and state of birth. It is the closest thing Mexico has to a universal personal identifier and it is what separates namesakes.
The RFC is the taxpayer registry code issued by the tax authority, the SAT. It attaches to individuals and to companies. For an individual it establishes tax presence and status, and for a company it is the key to a great deal else.
The NSS is the social security number issued by IMSS, the social security institute, which records formal employment. With the CURP and a personal email address it lets the holder pull their own contribution history.
None of these is freely searchable in reverse. You cannot enter a name and retrieve the CURP or RFC of a stranger through an open public tool. They are validated once you hold them, not discovered from nothing. This is why the first practical question in any Mexican background check is what identifying documents the subject has already provided, whether through an employment application, a contract, an invoice, a tax certificate or a signed consent.
They are also personal data in their own right. Collect them for a stated purpose, hold them securely, and use them only for that purpose.
Set the Scope Before You Search
What is lawful and proportionate depends on the decision being made. Screening a warehouse hire, appointing a director, onboarding a supplier, buying a business and investigating a suspected fraud do not justify the same enquiries, and treating them as though they do creates both privacy risk and noise.
A written scope should record the purpose of the check, the states and time periods to be examined, the categories of information relevant to the role or transaction, the documents and consent needed from the subject, any sensitive data that may be processed, the threshold at which a possible finding gets escalated or corroborated, and who is authorized to receive the report.
This is not paperwork for its own sake. It keeps irrelevant material out of the decision, which is where discrimination risk lives, and it leaves a defensible record of why each enquiry was made.
Criminal History: The Honest Answer
There is no national criminal records database in Mexico that a private party may search. Criminal records are held by the federal authority and by each state's prosecutors, and the certificate that reports them, the constancia de antecedentes no penales, is issued to the individual concerned on their own application and identification. Mexicans abroad obtain it through a consulate.
A criminal record check on a Mexican subject is therefore consent-based by design. The subject applies for the certificate and provides it, and the investigator verifies it. That verification means confirming that the document is authentic and current, that it relates to the right person, which authority issued it, whether it covers federal or state records, what period and what type of record it addresses, and whether it was issued for a purpose that limits its use. That is a real check and it is the one that stands up. It is also why a covert criminal history search cannot be delivered lawfully, a point covered in our guide on how to hire a private investigator in Mexico.
A certificate also has limits worth stating plainly to whoever reads your report. It reports what the issuing authority holds, within its own jurisdiction. A person with matters in another state, or with proceedings that never produced a recorded conviction, can hold a clean certificate. It is not evidence that someone has never been investigated or charged anywhere in Mexico. Where the risk justifies it, public court research and other lawful sources go around the certificate. They do not turn it into a national guarantee.
Court and Litigation Records
Litigation history is often more revealing than criminal history for commercial purposes, and it is more accessible.
Federal proceedings, including amparo, the constitutional protection action used extensively in Mexican litigation, are searchable through the federal judiciary's public systems, now administered by the Órgano de Administración Judicial, which took over the administrative functions of the Consejo de la Judicatura Federal in September 2025. State courts are separate. Each state judiciary publishes its own judicial bulletin and maintains its own case system, with wide variation in how far back the records go, whether parties can be searched by name, and whether the file itself is accessible or only its docket entries. Party names are sometimes abbreviated or redacted, particularly in protected categories of case.
Civil, commercial and labor matters therefore have to be searched jurisdiction by jurisdiction, in the states where the subject has actually lived, worked, held office or traded. This is manual work and it is the part international screening platforms skip, which is why their Mexican results are so often thin. Insolvency proceedings, concurso mercantil, are handled federally and are worth a separate search where a company is involved.
Every apparent match then has to be resolved against the identifiers and the surrounding facts, and read for what it actually is. A docket entry is not a judgment. An allegation is not an adjudicated fact. Several proceedings frequently arise from one underlying dispute and should not be counted as a pattern. Where the findings may feed pleadings, enforcement or contentious strategy, the work should be done with source preservation in mind and under the direction of counsel.
Tax Status and the List Most Foreign Checks Never Read
Where the subject is a company or a person trading in their own name, the tax record is the most efficient source available.
The SAT publishes lists under Article 69-B of the Federal Tax Code naming taxpayers presumed to have issued invoices for operations that did not exist. These are the empresas que facturan operaciones simuladas, commonly called EFOS. The stages matter and are not interchangeable: a taxpayer under presumption, a taxpayer who has rebutted the presumption and a taxpayer on the definitive list are in three different positions, and a report that blurs them is worse than no report. A definitive listing is a serious finding with direct consequences for anyone who gave tax effect to that taxpayer's invoices. Separate lists published under Article 69 cover other categories, including taxpayers with final unpaid liabilities and those the authority has been unable to locate.
These lists are free, public and updated regularly, and in our experience they are almost never checked in reports prepared outside Mexico. A subject's tax certificate, the constancia de situación fiscal, will also show registered activity, address and status, and a company whose registered activity has nothing to do with what it claims to sell is telling you something. It is an inconsistency that needs an explanation, not proof of fraud on its own.
Corporate Records and Who Really Owns the Company
Mexican companies are recorded in the Registro Público de Comercio, the public commercial registry. Under the Commercial Code the registry falls within the remit of the federal Ministry of Economy and is operated through registry offices in each state under coordination arrangements, which is why practice and digitization differ so much from state to state. Incorporation, powers of attorney, changes of officers and certain charges are recorded there through notarial instruments.
Shareholding is the point where expectations break. A Mexican company's current shareholders are not reliably established from the public registry. Ownership is recorded in the company's own share ledger, the libro de registro de acciones, which is a private book. What the registry shows is the position at incorporation and whatever has since been formally recorded, which is frequently neither current nor complete.
Establishing who actually owns and controls a Mexican company means reconciling the public record against the current share or partnership ledger, shareholder meeting minutes, notarial instruments and powers of attorney, statutory notices of changes in shareholders or partners, beneficial ownership information obtained from the counterparty, and whatever evidences indirect ownership or control. That is the substance of due diligence in Mexico rather than a background check. Where the subject of your enquiry is a company rather than a person, our separate guide on how to verify a Mexican company sets out the records in the order worth working through them.
Credentials and Employment History
Professional qualifications are one area where Mexico is more transparent than most jurisdictions. Degrees carrying a professional license are recorded in the Registro Nacional de Profesionistas maintained by the education ministry, the SEP, and the cédula profesional can be verified publicly, including by name. A claimed Mexican law, accountancy, engineering or medical qualification can be checked directly. Compare the name, institution, qualification and license details against the subject's identification and their CV rather than against the CV alone.
Employment history is the opposite. IMSS records of contributed weeks are the worker's own data, accessible to them with their social security number, CURP and a personal email address. A third party cannot pull an employment history. Verification is done through the subject's own IMSS statement or by approaching former employers with consent.
The record also has a built-in limit. Informal work, self-employment and any period without IMSS registration leave no trace, so a gap is a question to ask, not a conclusion to draw.
Sanctions, Cartel Exposure and Adverse Media
Sanctions, politically exposed person and watchlist screening should cover the Mexican and international sources relevant to the client, the transaction and the payment flows. Matching has to go beyond names to dates of birth, aliases, addresses, ownership and control, or it produces both false positives and false comfort.
The 2025 designation of six Mexican cartels by the United States as foreign terrorist organizations and specially designated global terrorists raised the consequences of certain associations sharply for US persons and US-connected matters. Name screening alone will not surface indirect ownership, coercion, subcontracting, territorial control or who ultimately benefits. Our separate analysis of due diligence in Mexico and cartel-related risk sets out what that means in practice, and where the pattern suggests misappropriation, collusion or concealed payment flows the right response is a structured fraud investigation.
Adverse media requires judgment as much as searching. Mexican regional press reports commercial disputes, regulatory action and criminal proceedings that never surface in any searchable database, and much of it is not indexed in a way that a keyword search from abroad will find. It also includes outlets that publish paid material. Publication is not proof. Trace material reporting to its original source, weigh the outlet's independence, and corroborate against documents or other credible reporting before it goes in a report as a finding.
What Field Enquiry Adds
The records establish what is on paper. They do not establish whether the address is a real office, whether the company at that address employs anyone, whether the subject holds the position claimed, or how they are regarded by counterparties who have dealt with them.
Discreet local enquiry and a site visit answer questions no registry will, and in Mexico they are frequently the step that changes the conclusion. The work should be lawfully instructed, carefully sourced, and reported so that direct observation, source reporting and analysis are visibly separate. Where the concern arises inside a company, in procurement, conflicts or control failures, the right instrument is an internal investigation rather than a background check on an individual.
Consent and Data Protection
Mexico replaced its private-sector data protection law in March 2025, with a consequential amendment in November 2025, and oversight now sits with the Secretaría Anticorrupción y Buen Gobierno following the abolition of the previous regulator. Processing a person's data requires a lawful basis and must respect purpose, proportionality, information, responsibility and consent. Information already lawfully public is treated differently from information obtained from the subject or from a third party, though being public does not switch off every other obligation. Sensitive categories require a higher standard.
A screening program should have a privacy notice, consent where consent is required, a clear view of which statutory exceptions it relies on, purpose limitation and data minimization, security measures, a retention and deletion rule, a position on transfers to clients and service providers including cross-border transfers, and a route for the subject to exercise their access, rectification, cancellation and objection rights. Screening criteria should be job-related and applied consistently, with legal review before any adverse decision.
For an employer or an acquirer this is straightforward to manage, and much easier to manage before the work begins than afterwards. A signed consent drafted for the purpose converts a difficult check into a routine one. It produces the identifiers that make the records resolve, and it makes the criminal record certificate available. Where consent is not available, as in counterparty and fraud work, the check is built from public records and lawful enquiry, and the report should show which is which. A recurring program should be reviewed by Mexican counsel.
What a Defensible Report Contains
A background check worth relying on states its purpose, scope, jurisdictions and search date. It identifies the subject and the identifiers used to resolve identity. It gives the source and date of every material finding. It separates verified fact, allegation, source reporting and analysis. It explains why a record is or is not attributable to the subject. It records what could not be established, which sources were unavailable and where the subject did not cooperate. It does not present the absence of a record as proof that nothing happened. And where litigation, regulatory review or a disciplinary process is foreseeable, it preserves the underlying records rather than summarizing them away.
A report that returns a list of database hits against a name, with no identifier resolution and no statement of sources, is not a background check. It is a search result, and in Mexico it is as likely to mislead as to inform.
When a Background Check Becomes Enhanced Due Diligence
A standard check is enough for most defined hiring and appointment decisions. A wider enquiry is usually warranted where the subject will control funds, act as an intermediary, deal with public officials, appoint subcontractors, operate in a higher-risk state, or take a material ownership or partnership position.
Enhanced due diligence adds beneficial ownership analysis, related-party mapping, source of wealth and source of funds enquiry, litigation and regulatory review, operational verification, reputation enquiries and an assessment of sanctions or organized crime exposure. The scope should follow the risk in the role or the transaction rather than a fixed checklist.
How Warden Consulting Can Help
Warden Consulting has conducted background, counterparty and asset enquiries in Mexico since 1995, from our office in the World Trade Center in Mexico City and across the country. Our work as a private investigator in Mexico is supervised by investigating lawyers, which means the scope is set against a lawful basis before the enquiry starts and the report is built to be used rather than filed.
If you are considering a hire, an agent, a supplier or a partner in Mexico and want a view on what can realistically be established about them, contact our Mexico City office. All enquiries are confidential.
Frequently Asked Questions
Can an employer run a background check in Mexico?
Yes. The scope has to be relevant to the role, proportionate, and compliant with Mexican privacy, labor and anti-discrimination requirements, and the employer has to give the required privacy information and obtain consent where consent applies. Intrusive checks should not be the default for every position, and the criteria should be applied consistently across candidates for the same role.
Is there a public national criminal record database in Mexico?
No. A private party cannot search a comprehensive national criminal history. Federal and state certificates exist with different procedures and different scope, and the appropriate certificate is obtained by the subject on their own application where the legal requirements are met.
What do I need before a Mexican background check can start?
At minimum the full legal name with both surnames, date and place of birth, current and former addresses, and reliable identification. Depending on the authorized scope, a CURP, RFC, NSS, tax certificate or signed consent may also be needed. Collect each item only where it is relevant and lawfully permitted, and expect the quality of the check to track the quality of the identifiers.
Can employment history be verified through IMSS?
Only with the subject's participation. The contribution weeks report is the worker's own record, retrieved with their social security number, CURP and personal email, and it is not searchable by a third party. It also misses informal work, self-employment and any period without registration, so it confirms what it shows rather than disproving what it does not.
How long does a background check in Mexico take?
It depends on the number of states, whether the subject cooperates, which records are needed and whether anyone has to go and look at something. A narrow documentary review is quick. Multi-state court research, certificate retrieval, corporate analysis and field verification are not. A proposal should give both the timetable and the records the timetable depends on.
Does a clean background check mean there is no risk?
No. A check reports what could be established from the sources, jurisdictions and period examined. A report that does not say where it stopped looking is not telling you the most important thing in it.
Sources
Código Fiscal de la Federación, Article 69-B, the basis for the SAT listings: diputados.gob.mx
Ley Federal de Protección de Datos Personales en Posesión de los Particulares, 2025: diputados.gob.mx
SAT portal, listings of taxpayers presumed to have simulated operations: sat.gob.mx
SEP, Registro Nacional de Profesionistas, cédula profesional search: cedulaprofesional.sep.gob.mx
Órgano de Administración Judicial, federal case consultation: oaj.gob.mx
IMSS, contribution weeks report: imss.gob.mx
This article is general information and not legal advice. The right scope and the lawful basis for it depend on the facts of the matter. Reviewed September 2026 by the investigating lawyers of Warden Consulting, Mexico City.