Rule · SHCP · 14 Jul 2026 · DOF 5793637
Institutions must require in-person identity verification for natural persons requesting Level 2 Bis or Level 4 Bank Accounts and related operations, and for non-face-to-face contracting of Level 2 Bis or Level 4 accounts, consumer and commercial credits, must perform a Liveness Test and record date and time from a protected time server. For Level 2, Level 2 Bis, Level 3 and Level 4 accounts, Institutions must collect an email address or mobile phone number for SMS notifications, and for Internet Banking require a single Destination Account held by the User. The Resolution enters into force the day after publication in the Official Gazette of the Federation and repeals Article 316 Bis 9.
| DOF: 14/07/2026 |
|---|
The National Banking and Securities Commission, based on articles 52, eighth paragraph; 96 Bis, first paragraph; 98, second paragraph and 98 Bis of the Law of Credit Institutions; as well as 4, fractions XXXVI and XXXVIII and 16, fractions I and XVII of the Law of the National Banking and Securities Commission, and
That articles 52, eighth paragraph; 96 Bis, first paragraph, and 98, second paragraph, of the Law of Credit Institutions empower the National Banking and Securities Commission to issue general provisions regarding the contracting of financial services, use of electronic means, information and documentation of the clientele necessary for their authentication, as well as to regulate the identification data that credit institutions themselves must collect;
That Banco de México published in the Official Gazette of the Federation on 17 June 2026 Circular 11/ 2026, through which Circular 3/2012 was amended to incorporate the new operation level called Level 2 Bis in the classification of bank demand deposit accounts, establishing for said level specific operating characteristics and limits;
That, derived from the incorporation of the aforementioned Level 2 Bis, the Ministry of Finance and Public Credit made the corresponding adjustments to the General Provisions referred to in article 115 of the Law of Credit Institutions, with the purpose of adapting the requirements for the integration of client and user identification files in accordance with the new account level scheme, and
That, consequently, it is necessary to harmonize the General Provisions applicable to credit institutions with the amendments issued by Banco de México and the Ministry of Finance and Public Credit, in order to update the regulation regarding the definition of bank accounts, the requirements for in-person and non-in-person identification of clients, as well as the contracting for the use of electronic banking, thereby strengthening the consistency of the regulatory framework, as well as granting greater legal certainty to credit institutions and their clients, for which it has resolved to issue the following:
SOLE.- Articles 1, fraction XLVI, second paragraph; 51 Bis, first and fifth paragraphs; 51 Bis 2, first paragraph; 51 Bis 6, first, fourth paragraphs, fraction VII, beginning e) and seventh, fraction VI; 51 Bis 8, fraction V; 307, first paragraph, fractions I, subparagraphs b) and d), IV and V, second paragraph, subparagraph a) and third; 307 Bis, fraction I, subparagraph a) are AMENDED; article 1, fraction CXLVI Bis; article 51 Bis 6, in the fourth paragraph, fraction I, subparagraph c) and fraction VII Bis, and 51 Bis 8, the second paragraph are ADDED and article 316 Bis 9 and Annex 63 of the General Provisions applicable to credit institutions published in the Official Gazette of the Federation on 2 December 2005, amended through various resolutions, are REPEALED, to read as follows:
List of Annexes
ANNEXES 1 to 62
. . .
ANNEX 63
Repealed.
ANNEXES 64 to 75
. . .
Article 1.-
. . .
I. to XLV.
. . .
XLVI.
. . .
Bank Accounts may be of
Level 1
Level 2
Level 2 Bis
Level 3
Level 4
in accordance with the provisions of the aforementioned Circular 3/2012.
XLVII. to CXLVI.
. . .
CXLVI Bis.
Liveness Test: the technical tests carried out based on algorithms, to measure and
analyze the anatomical characteristics or voluntary and involuntary reactions of the applicant,
in order to determine whether a biometric sample is being captured from a living subject
present at the capture point.
CXLVII. to CXCVII.
. . .
Article 51 Bis.- Institutions must require natural persons, national or foreign as applicable, who in person request the execution of passive operations related to Level 2 Bis or Level 4 Bank Accounts, or active operations, services or payment methods that are related to Level 2 Bis, Level 3 and Level 4 Bank Accounts, when said accounts are opened at the Institution itself, or at another, said operations being able to be carried out on their own behalf or, in the case of Level 3 and Level 4 Bank Accounts, in the name and representation of third parties, to provide, regarding the person presenting themselves and, as applicable, the person they represent, the following:
I. to IV.
. . .
. . .
Institutions shall not be obligated to carry out the verification actions referred to in fraction I of this article, in the case of legal representatives or attorneys-in-fact of legal entities. Nor shall they have to carry out said verification actions in the contracting of trusts constituted by the federal, state and municipal governments or their parastatal entities, or by natural persons who maintain open in their name a Level 2 Bis, Level 3 or Level 4 Bank Account at the same Institution or another and that is considered an active Account in terms of Article 207 Bis, fraction II of these provisions, which must be verified prior to contracting.
. . .
Article 51 Bis 2.- The Institutions, in substitution of what is required by Articles 51 Bis and 51 Bis 1 of these provisions regarding identity verification, may create a database of biometric information of their clients, observing the technical requirements set forth in Annex 71 of these provisions, in order to use it for the verification of the identity of their clients in the execution of contracts to carry out passive operations related to Level 2 Bis and Level 4 Bank Accounts; active or service operations, or in the request for payment methods, related to Level 2 Bis, Level 3 and Level 4 Bank Accounts, when said accounts are opened at the Institution itself or at another, as well as to make cash withdrawals and transfers of resources charged to Level 4 Bank Accounts, provided that they give notice and attach the information requested in the corresponding format of Annex 75 to the Commission, no later than within 20 business days following the date on which they begin operations regarding identity verification using the biometric information database.
. . .
Article 51 Bis 6.- The Institutions, for the identification of their clients or applicants who are Mexican natural persons or Mexican legal entities, as applicable, for the non-face-to-face execution of the following contracts: (a) opening of Level 2 Bis or Level 4 Bank Accounts; (b) consumer credits for clients or applicants who are natural persons, related to Level 2 Bis, Level 3 or Level 4 Bank Accounts, and (c) commercial credits for clients or applicants who are natural persons with business activity or legal entities, related to Level 2 Bis, Level 3 or Level 4 Bank Accounts, must adhere to the provisions of this article, as well as articles 51 Bis 7 and 51 Bis 9 of these provisions.
. . .
I.
. . .
. . .
a) and b)
. . .
c)
When the Institutions carry out the opening of Level 2 Bis Bank Accounts.
. . .
II. to VI.
. . .
VII.
. . .
a) to d)
. . .
e)
Perform a Liveness Test on the applicant during the implementation of the
technological mechanisms referred to in this section.
VII. Bis.
For the opening of Level 2 Bis Accounts, the Institutions may implement technological
mechanisms other than those that allow identifying the applicant or User, in substitution of what is
provided in section VII of this article. Such mechanisms must consider, at
least, the following:
a)
Record the date and time on which the procedure is carried out, obtained from a protected
time server, and
b)
Perform a Liveness Test on the applicant or User.
VIII.
. . .
. . .
I. to V.
. . .
VI.
Perform a Liveness Test on the applicant or User during the communication.
. . .
Article 51 Bis 8.-
. . .
I to IV
. . .
V.
Perform a Liveness Test on the applicant or User.
The authorization referred to in the first paragraph of this article is not necessary when the Institutions implement the mechanisms established in sections I to V for the opening of Level 2 Bis Accounts.
Article 307.-
. . .
I.
. . .
a)
. . .
b)
Those offered through Automated Teller Machines and Point of Sale Terminals, when
these refer exclusively to the operation of Level 1,
Level
2, Level 2 Bis and Level 3 Bank Accounts.
c)
. . .
d)
Mobile Banking, Internet Banking, Telephone Banking Audio Response and Telephone
Banking Voice to Voice, when they are associated with Level 1, Level 2,
Level 2 Bis and Level 3 Bank Accounts, as applicable, and are used to carry out transactions
other than those provided for in Article 313 of these provisions.
e)
. . .
II. and III.
. . .
IV.
In the case of Level 2, Level 2 Bis, Level 3 and Level 4 Bank Accounts, they must request from
their Users at the time of contracting, data of some means of communication, such
as their email address or mobile phone number for receiving
SMS Text Messages, so that the Institutions send them the notifications to
which Article 316 Bis 1 of these provisions refers.
V.
. . .
. . .
a)
At the time of contracting the Internet Banking service, the Institutions
must require their Users to register a single Destination Account whose holder
is the User himself, without requiring a second Authentication Factor of
Categories 3 or 4 referred to in Article 310 of these provisions, in terms
of the provisions of Article 314 of these provisions. When the originating
accounts correspond to a Level 2, Level 2 Bis and Level 3 Bank Account, or
securities administration accounts with the same transactional levels,
it will not be necessary for the Destination Account to belong to the User himself.
b) and c)
. . .
For the contracting of Internet Banking, Telephone Banking Audio Response or Telephone Banking Voice to Voice services related to Level 2, Level 2 Bis and Level 3 Bank Accounts or others with the same transactional levels, as originating accounts, in order to carry out the transactions described in this fraction, the Institutions may use identification mechanisms similar to those required for the opening of said originating account.
VI.
. . .
Article 307 Bis.-
. . .
I.
. . .
a)
Level 2 Bis, Level 3 or Level 4 Bank Accounts;
b) and c)
. . .
. . .
II.
. . .
Article 316 Bis 9.- Repealed.
SOLE . - This Resolution will enter into force on the day following its publication in the Official Gazette of the Federation.
Sincerely
Mexico City, on 13 July 2026.- President of the National Banking and Securities Commission, Ángel Cabrera Mendoza .- Signature.
In the document you are viewing there may be text, characters or objects that are not displayed correctly due to conversion to HTML format, so we recommend always taking as reference the digitized image of the DOF or the PDF file of the edition.
Río Amazonas No. 62, Col. Cuauhtémoc, C.P. 06500, Mexico City Tel. (55) 5093-3200, where you can access our services menu Email address: dof.gob.mx
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
RegAlert holds no document that amends or replaces this one. This is not a check that it is in force: confirm with the regulator.
“...through which Circular 3/2012 was amended to incorporate the new operation level called Level 2 Bis...”
More like this from SHCP
SHCP published 2 documents in the last 30 days. We email you each new one the day it's published.
Source: Secretaria de Hacienda y Credito Publico — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added