Risk-based approach: first steps for Mexican reporting entities under the 2027 reform

The 2026 General Rules mandate an EBR risk assessment methodology starting March 1, 2027. What the methodology must contain, the four key factors, and how to begin.

Glass bar chart with a rising curve

With the 2025–2026 regulatory overhaul (Agreement 115/2026), the Risk-Based Approach (EBR) transitions from an international best practice into a mandatory legal obligation with strict deadlines.

Key Enforcement Milestones

March 1, 2027: Risk assessment methodology, customer classification model, CDD policies, and AML manual ready for SAT inspection. June 1, 2027: Automated monitoring mechanisms. 2027: First annual staff training program. 2028: First annual compliance audit.

The Four Risk Factors

Entities must evaluate four risk factors: 1) Customers (type of legal person, PEP status, country of origin), 2) Products & Services offered, 3) Delivery channels (face-to-face, remote), and 4) Geographic risk zones.

Inherent risk vs. Residual risk

Methodologies must score inherent risk, apply verifiable internal mitigants (KYC, screening, cash caps), and calculate residual risk, with mandatory annual reviews by the compliance officer.

Guía Regulatoria Oficial · PLDUnity 2026

Descarga la Guía Ejecutiva de Cumplimiento LFPIORPI en PDF

Compendio técnico y normativo para blindar las operaciones de tu empresa ante el SAT con las tasas actualizadas de la UMA 2026 ($117.31 MXN).

  • Metodología de cumplimiento preventivo
  • Umbrales en UMA 2026 y plazos legales
  • Directrices oficiales de identificación KYC
Formato: PDF EjecutivoActualizado: UMA 2026 ($117.31)Descarga 100% Inmediata
ACCESO INMEDIATO

Ingresa tus datos para generar tu descarga

Tus datos están protegidos conforme a la LFPDPPP. Recibirás tu ejemplar en PDF de forma directa y una copia en tu bandeja. Cero spam.

Reviewed by Compliance Officer · BDUnity.

  • #EBR