How to Verify a Mexican Company

Written By Ben van Leewarden

A Mexican company can produce an impressive set of documents in an afternoon. A notarized incorporation deed, a tax certificate, a letterhead, an address in a good part of Mexico City and a bank account are all obtainable by an entity that trades nothing, employs nobody and exists to issue invoices. Every one of those documents may be perfectly genuine and still tell you nothing about who controls the company, whether it does the work you are buying, whether the person signing can bind it, or what it is already exposed to.

Verifying a Mexican counterparty is therefore not a matter of collecting documents. It is a matter of testing them against records the counterparty does not control, and then, where the money justifies it, going to look.

This sets out how that is done, in the order worth doing it, and what each record will and will not tell you. It is written for people buying from, selling to, lending to, investing in or partnering with a Mexican company from outside the country, where the usual instinct is to run the name through a screening platform and treat a clean result as an answer. It is general information and not legal or tax advice.

Define the Question First

Scope should follow the decision. Confirming that a company legally exists is a different exercise from establishing who ultimately owns it, whether it can perform the contract, or whether it carries fraud or organized crime exposure. Establish which of those you actually need before anyone starts searching.

Then record what you are working from:

  • The full legal name, the denominación or razón social, including the corporate form.

  • The RFC, the federal taxpayer registry code.

  • The registered office and the states where the company says it operates.

  • The name of the person proposed to sign, and the authority they say they hold.

  • The shareholders, directors, managers and ultimate beneficial owners as the company describes them.

  • Trading names, former names, affiliates and related companies relevant to the deal.

  • The account holder and bank details proposed for payment.

Most Mexican companies are an S.A. de C.V. or an S. de R.L. de C.V., roughly a stock corporation and a limited liability company. The trading name on the website is frequently not the legal name on the invoice, and the entity that will owe you the obligation is the one on the invoice.

Ask at the outset for the constancia de situación fiscal, the tax status certificate, along with the incorporation instrument, the current bylaws, evidence of signing authority and a current ownership chart. Requesting these is ordinary commercial practice rather than a signal of suspicion. Treat the tax certificate as a starting document. It shows the RFC, registered name, fiscal address and tax regime. It is not evidence of solvency, good standing or that anyone works there.

Start With the Tax Record, Because It Is the Most Efficient

The tax authority, the SAT, holds the most useful public information about a Mexican company, and it is the step most often skipped from abroad.

Validate the RFC. For a company it is twelve characters. A valid RFC confirms the entity exists as a registered taxpayer and returns its status. An RFC that does not validate, or returns a status other than active, ends the enquiry until it is explained.

Then compare, across every document you hold, the legal name and RFC, the fiscal address against the operating address, the registered economic activities against the business being proposed, the date of commencement or any recent change of status, and the invoice issuer against the party you are being asked to pay. A company presenting itself as a specialist logistics operator whose registered activity is general commerce, or whose registered activity changed two months before your transaction, is worth a question. This comparison costs nothing and catches a surprising amount.

A discrepancy is not proof of misconduct. It is something that needs an explanation and corroboration. For anything material, ask for a current SAT opinion on tax compliance and verify it through the SAT's own channels rather than accepting a PDF.

The 69-B Lists, Which Almost Nobody Outside Mexico Reads

Under Article 69-B of the Federal Tax Code, the SAT publishes lists of taxpayers it presumes to have issued invoices covering operations that never took place, or that the issuer had no assets, personnel or capacity to perform. In Mexican practice these are the empresas que facturan operaciones simuladas, universally shortened to EFOS, and the companies that deducted their invoices are the EDOS.

The procedural stage is the whole point, and the SAT publishes each one separately. A taxpayer may appear as presumed, as having rebutted the presumption, as definitive, or as having obtained a favorable judgment. These are four different positions and a report that treats them as one finding is worse than no report.

A counterparty on the definitive list is a serious finding with direct financial consequences, because invoices from a listed entity can be disregarded for tax purposes and the deduction unwound with interest and penalties. Anyone who gave tax effect to those invoices generally has a window in which to substantiate the underlying transaction or correct their position, which is a matter for Mexican tax counsel and worth raising early rather than late. A presumed listing is a reason to pause, not a conclusion.

Search by full legal name and by RFC, and keep the result, the category searched and the date, because the publications are updated continuously. Article 69 of the same code publishes further categories worth the same look, including firm tax liabilities, cancelled debts and taxpayers recorded as no localizado. A counterparty the SAT could not find at its own registered address is telling you something the incorporation deed will not.

This is a short check that international screening tools generally do not perform, and it is the highest-yield search available on a Mexican company.

The Commercial Registry and What It Actually Shows

Mexican companies are recorded in the Registro Público de Comercio, which gives legal publicity to registrable commercial acts. It runs on the Ministry of Economy's SIGER 2.0 platform, which operates a single national database in which each company holds an electronic commercial folio, the folio mercantil electrónico, and which can be queried by folio or by company name through a registered user account.

A registry review can show the incorporation instrument and registered corporate purpose, the formation date, duration and registered office, the founding shareholders or partners, subsequent amendments including capital changes, mergers, transformations, dissolutions and liquidations, registered appointments and powers of attorney, and certain registered security interests.

What varies is depth. How complete the electronic file is depends on the age of the company, which acts were actually required and presented for registration, and how far earlier paper records were migrated. For an older company, or for a matter where the document itself has to be relied on, certified copies or an enquiry with the relevant registry office are still needed, and those move at the pace of the state office rather than the platform.

Be careful what you ask the registry to prove. An entry establishes that a company was constituted and that certain acts were recorded. It does not establish that the company is still trading, that it owns what it says it owns, that it has no unrecorded liabilities, or that the people who founded it still control it.

Confirm Who Can Sign

Identifying the company is only half of the contractual question. The person putting their name to the agreement has to be able to bind it for the act in question, and this is the failure that surfaces late and expensively.

Ask for the power of attorney, the poder, or the corporate resolution relied on, and check the identity of the grantor and the attorney-in-fact, whether the power is still in force, whether it covers the type and the value of the transaction proposed, whether signatures have to be exercised jointly, and whether any corporate approval or third-party consent is also required.

A registry reference to a power is not a substitute for reading the instrument and checking for any later revocation or limitation. Where contractual validity matters, this is a question for Mexican counsel rather than for an investigator.

Ownership Is the Hard Part, and the Part Most Reports Get Wrong

This is where the expectation imported from the United Kingdom or the United States breaks down. There is no Mexican equivalent of a Companies House shareholder filing that reliably shows who owns a company today.

A Mexican company's shareholders are recorded in its own book. An S.A. keeps a share register, the libro de registro de acciones, and an S. de R.L. keeps a partners' ledger. Both are private corporate records held by the company. The public registry shows the founding shareholders in the incorporation deed and whatever has since been formally recorded, which in many companies is neither current nor complete. Certain transfers must be notified through the Ministry of Economy's electronic publication system, but identifying detail is not always public and compliance should not be assumed. Shares can and do change hands without anything appearing publicly.

Layered on top is the use of nominees. A prestanombre is a person who appears as shareholder or director on behalf of someone else, common enough to be a standard consideration rather than an exotic one. Founding shareholders who turn out to be employees of the notary, or a chain that runs through two or three holding entities before it reaches a human being, are patterns worth recognizing.

A proportionate ownership review therefore asks for the current share register or partners' ledger, transfer documents, shareholder or partner resolutions, the current bylaws and capital history, the beneficial controller file Mexican companies are required to keep for tax purposes, an ownership chart certified by an officer, identification for the natural persons at the end of the chain, and corporate records from any foreign jurisdiction the chain passes through. It then compares all of it against related companies, shared addresses, shared officers and the actual payment flows.

The object is to separate legal ownership, economic benefit and real control. Unexplained nominees, a holding company introduced shortly before the deal, ownership charts that do not reconcile, or an owner with no credible connection to the business are reasons to look harder. None of them is proof of concealment on its own. This is the substance of due diligence in Mexico rather than a records search, and it is why a beneficial ownership question cannot be answered from a desk in London or Chicago.

Litigation, Insolvency and Labor Exposure

Existing proceedings tell you what the balance sheet will not.

Federal matters, including amparo proceedings, are searchable through the federal judiciary's systems. State civil, commercial, labor and administrative matters sit with each state judiciary and its own bulletin, with wide variation in whether cases can be searched by party name and how far back the record goes. This is manual work, done in the states where the company actually operates.

A defensible search plan names the jurisdictions where the company is registered and trades, the former names and affiliates searched, the principals whose personal proceedings bear on the risk, the federal, state, labor, administrative and insolvency sources used, the period covered, and any limitation on name-based searching. The output should never be the bare sentence "no litigation found". It should say what was searched, under which names, on what date, and what the search could not reach. Where a case matters to the decision, get the docket or the pleadings rather than relying on a search result line.

Insolvency has its own federal process, concurso mercantil, and deserves a specific search before extending credit or acquiring.

Labor exposure deserves separate attention because it travels. Mexican labor liabilities have a way of following a business through a transaction, particularly where a business or establishment is transferred, where there is employer substitution, or where the operation is labor-intensive or staffed through a third party. A company facing collective claims, or with a history of dismissals found unjustified, carries a cost that will not appear in the accounts you are shown.

Does the Company Actually Employ Anyone?

Where a counterparty claims a workforce, ask for evidence proportionate to the claim: employer registration, current IMSS compliance documentation, anonymized workforce information and payroll or social security evidence, all handled under proper confidentiality and data protection controls.

An IMSS opinion of compliance shows whether a company is registered as an employer and current on its obligations. Third-party access to it depends on the company having published its result or authorized the requester, so this is a document to request rather than a database to search. A company claiming two hundred workers that cannot produce it is either not employing them, employing them through another entity, or not employing them formally at all. Each of those has consequences for you, particularly if your own compliance framework reaches into your supply chain.

REPSE, the register of specialized service providers maintained by the labor ministry, applies where the statutory specialized services regime applies, including where personnel are made available to the beneficiary. It is not a general license every Mexican supplier must hold, and treating it as one wastes time. Where it does apply, check that the provider is registered, that the registration is current and has been renewed within its three-year cycle, and that the service you are contracting for actually falls inside the registered scope. The consequences of getting this wrong land on the party receiving the services as well as the supplier, because the deduction and credit for those payments depend on it.

Misconduct that emerges after onboarding, in procurement, vendor collusion or control failures, belongs in an internal investigation rather than a pre-contract screening exercise.

Then Send Someone to Look

Every record above describes the company on paper. None of them establishes that the warehouse holds stock, that the factory runs a shift, that the office is more than a mailbox, or that the twelve people on the organizational chart exist.

Depending on the risk, operational verification means a lawful site visit, disclosed or discreet, confirming signage, occupancy and observable activity, comparing the facility against the photographs, licenses and capacity claimed in negotiation, enquiring locally about trading history and reputation, checking logistics, suppliers or customers where that is authorized and appropriate, and recording photographic evidence within legal and safety limits.

A site visit is a snapshot, not an audit, and its date, method and limits belong in the report. It is also, in our experience, the step that changes the conclusion more often than any single document. Idle plants presented as operating, addresses that turn out to be a lawyer's office and warehouses shared with an unrelated business are ordinary findings rather than exceptional ones.

Sanctions, Adverse Media and the 2025 Designations

Screening should cover the company, its affiliates, beneficial owners, controllers, directors and any other material principal, tested with name variants, aliases and identifiers. A name match is a lead, not a finding.

This carries a different weight for US-connected transactions since the United States designated six Mexican cartels as foreign terrorist organizations and specially designated global terrorists on 20 February 2025. Work from the designation notice itself rather than press coverage of it, and treat any possible direct or indirect connection as a matter for factual investigation and for sanctions counsel, not for a screening tool. Our separate analysis of cartel-related due diligence risk in Mexico sets out what the designations changed in practice.

Adverse media requires judgment as much as searching, and it should be run in Spanish as well as English, including regional outlets and alternative spellings. Mexican regional press reports disputes, enforcement actions and proceedings that appear in no database and are frequently not indexed in a way a search from abroad will surface. Some outlets publish paid material. Assess the source, the date, its independence and the procedural posture of what is alleged before anything becomes a finding.

Where the pattern suggests bribery, diverted payments or concealed assets, the answer is a scoped fraud investigation rather than a wider database search.

What a Real Red Flag Looks Like

Single findings rarely decide anything. Patterns do. The ones worth acting on:

  • A recently incorporated entity presenting a much longer trading history.

  • Material differences between the legal name, the RFC, the invoice issuer and the bank account holder.

  • Registered activities or facilities inconsistent with the work proposed.

  • A definitive Article 69-B listing on the company or on any material entity in its ownership chain.

  • A tax address at a virtual office while the operating address is somewhere else entirely.

  • Unexplained changes of ownership, management, address or banking instructions shortly before the transaction.

  • A claimed workforce or capacity that cannot be reconciled with the evidence provided.

  • Signing powers that are missing, limited, inconsistent or apparently revoked.

  • Principals or affiliates absent from the ownership chart but connected through records, addresses or payment flows.

  • Material litigation or regulatory proceedings that were not disclosed.

Any one of these has an innocent explanation. Three together do not. The right response is to identify the discrepancy, give the counterparty a fair chance to explain it, and test the explanation against evidence rather than against tone.

What the Report Should Say

A verification report is only useful if the reader can see what kind of thing each statement is. Ours separate:

  • Verified fact, supported by an identified document, record or direct observation.

  • Reported information, attributed to a source but not independently established.

  • Analytical inference, a reasoned conclusion drawn from stated facts.

  • Unresolved issues, meaning what could not be obtained or reconciled.

  • Limitations arising from scope, access, time or the coverage of the sources.

Each material proposition carries its source and date, important records are preserved rather than summarized away, allegations are not written up as findings, and the report explains why each issue matters to the decision in front of the client. A risk rating without the facts and the reasoning underneath it is of no use to counsel, an investment committee or a compliance team.

How Long This Takes

Tax checks, the 69-B lists and open-source work are same-day. A registry query is quick, but certified copies and older paper records move at the pace of the state office. Litigation searches depend on how many jurisdictions are in scope. A site visit depends on where the site is.

A focused verification of one company in one state is a matter of days. A group operating across several states, with a cross-border ownership chain and real field enquiry, is a matter of weeks. The useful discipline is to decide which questions must be answered before signing or paying, and which can be handled as conditions, warranties or post-closing work.

Scope drives both cost and time, which is why the first question any competent firm asks is where the company actually operates rather than how much you want to spend.

Where We Come In

Warden Consulting has verified Mexican counterparties for investors, acquirers, lenders and international law firms since 1995, from our office in the World Trade Center in Mexico City. Our files are supervised by investigating lawyers, the records are obtained in the states where they actually sit, and the report separates what was verified from what was reported so that your counsel can test it.

If you are weighing a Mexican supplier, distributor, partner or acquisition target, contact our Mexico City office. All enquiries are confidential. Please do not send privileged or highly sensitive material with a first enquiry, so that conflicts, scope and handling can be settled first.

Frequently Asked Questions

Is there a public company register in Mexico?

Yes. The Registro Público de Comercio records incorporation, powers of attorney and certain corporate changes, and runs on the Ministry of Economy's SIGER 2.0 platform, which operates a single national database searchable by folio or company name through a registered account. What varies is how complete the electronic file is for any given company, particularly older ones, so certified copies or an enquiry at the state registry office are still needed where the document itself has to be relied on.

Can I find out who owns a Mexican company?

Not reliably from public records alone. Current shareholders are recorded in the company's own share register or partners' ledger, which is a private book, and shares can change hands without a public filing. Establishing real ownership means combining the registry file, documents obtained from the counterparty including the beneficial controller file kept for tax purposes, notarial records, foreign filings where the chain crosses borders, and enquiry. It is an investigation rather than a search.

What is an RFC and how do I check one?

The RFC is the federal taxpayer registry code issued by the SAT, twelve characters for a company and thirteen for an individual. It appears on every invoice. It can be validated to confirm the taxpayer exists and is active, and the tax status certificate shows the registered address, tax regime and registered economic activity. Registration proves a tax identity and nothing more. A refusal to provide an RFC is itself a finding.

What is the SAT 69-B list?

It is a set of SAT publications naming taxpayers presumed or determined to have issued invoices for operations that did not exist. The categories are separate and must not be conflated: presumed, rebutted, definitive, and those that obtained a favorable judgment. Invoices from a definitively listed entity can be disregarded for tax purposes, which means the exposure lands on the company that deducted them as well as the issuer. Search by both RFC and full legal name, keep the dated result, and take any match to Mexican tax counsel.

How long does verification take?

Tax and open-source checks are same-day. Registry queries are quick, though certified and older paper records depend on the state office. Litigation searches depend on the number of jurisdictions. A focused check on one company in one state takes days. A group across several states with ownership resolved rather than assumed takes weeks.

Can this be done entirely from outside Mexico?

Some of it. RFC validation, the 69-B lists, registry queries and open-source research can be done from anywhere by someone who reads Spanish and knows where to look. What cannot be done remotely is obtaining certified and older records that exist on paper in a state office, resolving ownership beyond the public record, local court research, interviews, and confirming that an address is a working business. Method should follow risk rather than assuming every engagement needs fieldwork.

Is this the same as a legal opinion?

No. Investigative due diligence establishes and tests facts. Legal validity, tax consequences, sanctions exposure, labor liability and deal structure are questions for qualified Mexican and home-jurisdiction counsel, and a good report is written so that they can work from it.

Sources

Related reading: how to run a background check on someone in Mexico and how to hire a private investigator in Mexico.

This article is general information and not legal or tax advice. Official systems, published lists and designations change, so primary sources and transaction-specific advice should be checked at the time. Reviewed September 2026 by the investigating lawyers of Warden Consulting, Mexico City.

Ben van Leewarden
Next

How to Run a Background Check on Someone in Mexico