Since 2022, every Mexican legal entity, trust and legal arrangement must identify and keep information on its controlling beneficiary (beneficial owner). Most assume the incorporation deed and the shareholders IDs are enough – and that oversimplification is precisely what triggers the seven-figure fines the SAT is already applying, per beneficiary not identified. Here’s what you need to stay off the hook.

What a controlling beneficiary is

It’s the individual – never a company, trust or fund – who ultimately obtains the economic benefit of an entity or exercises control over it. Articles 32-B Per, Quáter and Quinquies of the Federal Tax Code (CFF) define and require it. Unlike the AML regime, here control is triggered from 15% of capital stock – a broader threshold that captures minority shareholders too.

Who is obligated

Nearly every structure: legal entities (regardless of size), trusts and any other legal arrangement. The duty is ongoing to obtain, keep, update and provide the SAT – on request – truthful, complete and current information. It isn’t filed periodically, but it must be ready to hand over at any time as part of your accounting records.

The cascading test

Determining the controlling beneficiary is not naming the majority shareholders. Article 32-B Quáter sets a successive test: first, who obtains the benefit, then, who exercises control (through votes, contracts or any legal act). if no criterion identifies an individual, the sole administrator – or each member of the board – is treated as the controlling beneficiary.

When the shareholder is another company – a holding, even abroad, or behind a trust – you must trace the full chain of ownership and control down to the real individual. If the file “Stops in Delaware”, the SAT treats it as incomplete.

What your file must contain

• Identification of each controlling beneficiary (name, address, and tax ID for foreign individuals).
• Ownership percentages and the ownership/control chain where control is indirect.
• Validation of the information: receiving and ID copy isn’t enough – you must reasonably corroborate the data is true.
• Updates within 15 calendar days whenever something changes (for example, a change of shareholders holding 15%).

The fines: per beneficiary, not per company

This is what multiplies the risk. The penalties under Article 84-M and 84-N of the CFF apply per controlling beneficiary and, in 2026 figures, run approximately:

• Failing to obtain, keep or provide the information: about MXN $1.68-$2.25 million per beneficiary.
• Failing to keep it updated: roughly MXN $900,000-$1.12 million.
• Incomplete or inaccurate information: around MXN $562,000-$900,000.

There’s a quieter blow too: non-compliance turns your tax compliance opinion (32-D) negative, which can block contracts, public tenders and financing.

Why the SAT is pushing now

This duty stems from FATF and OECD Global Forum transparency standards. In 2026 the SAT enforces it with AI and automated cross-checks, and links it to other tools: the new Article 49-Bis express audits and digital-seal restriction (17-H Bis). The authority’s stated goal is to stop chasing empty “shells” and reach – by name – the individual who decides and benefits.

Do it with DYNAMI

Mapping the control chain, safeguarding the file and updating it within 15 days every time the structure changes is continuous work that gets neglected by hand. DYNAMI centralizes the controlling-beneficiary file, flags when a corporate change triggers an update, and keeps the audit trail ready for when the SAT asks.

Frequently asked questions

Does this apply even to a small company? Yes. The obligation covers every legal entity, regardless of size or revenue.

Is the controlling beneficiary always the sole administrator? Not necessarily. The administrator or board is only used when the cascading test identifies no individual by benefit or control.

Do I have to report this in a filing? Not periodically. You must integrate it into your accounting records and provide it when the SAT requests it.

Identify yours today, not during the audit

The controlling beneficiary is no longer a formality: it carries confiscatory fines that multiply per unidentified person, and it’s a direct path to a negative 32-D opinion. Mapping the structure, validating the data and keeping it current costs little compared with rebuilding it under a formal request. At Cumbre Asesores we build controlling beneficiary files for companies in Mérida, Mexico City and Guadalajara. If you have holdings, foreign shareholders or trusts, let’s review your control chain before the SAT does.