Mexico's Financial Intelligence Unit (Unidad de Inteligencia Financiera, UIF) General Criterion for Article 17, Section XVI of the Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (LFPIORPI) is an AML/CFT interpretive notice for virtual-asset services. Issued in August 2021 under UIF Comunicado No. 040/2021, the criterion addresses providers that offer Article 17(XVI) services from outside Mexico or through foreign infrastructure while serving clients or users located in Mexico. It should be read with the statute's current text, the SAT Portal de Prevención de Lavado de Dinero, and later LFPIORPI reforms.
What the UIF criterion covers
The criterion refers to activities described in Article 17(XVI): habitual and professional virtual-asset exchange by parties other than financial entities, carried out through electronic, digital or similar platforms. The current statutory language covers platforms that administer or operate services facilitating purchase or sale of client-owned virtual assets, or that provide means to custody, store, or transfer virtual assets other than those recognized by Banco de México under the FinTech Law.
The official notice focuses on territorial reach rather than creating a new asset category. UIF states that these services can be offered from technology infrastructure located abroad or by companies incorporated abroad, but still be directed to or conducted with clients or users in Mexican territory. Under the criterion, a provider that offers Article 17(XVI) virtual-asset services is subject to LFPIORPI obligations, including the obligation to file the relevant Avisos, even where the provider's technical infrastructure or corporate domicile is outside Mexico.
Why it matters for virtual-asset AML coverage
Article 17(XVI) is part of Mexico's “Actividades Vulnerables” framework for preventing and identifying transactions involving proceeds of crime. Its addition to LFPIORPI was adopted through the 2018 FinTech Law decree and took effect after the statutory transition period. The UIF criterion narrowed an operational ambiguity for crypto exchanges, custodial services and similar providers by making clear that cross-border delivery does not, by itself, place a covered service outside the FIU's interpretation of the LFPIORPI framework.
Relationship to registration and notices
Covered persons are linked to several layers of implementation. SHCP Agreement 126/2020 amended the general LFPIORPI rules, adding Chapter II Bis and Article 10 Bis for persons operating with virtual assets, including documentation that must be submitted before electronic registration as an Actividad Vulnerable. The SAT PLD portal also maintains current thresholds for Article 17(XVI) virtual-asset operations, listing identification as “always” and notice thresholds based on UMA amounts.
- Scope: virtual-asset exchange, custody, storage and transfer services described in Article 17(XVI).
- Cross-border position: foreign infrastructure or incorporation does not remove a provider from the criterion when services are directed to Mexican clients/users.
- Reporting link: the criterion connects covered services to LFPIORPI Avisos.
- Current-law context: Article 17(XVI) was later updated in 2025, including current UMA-based notice thresholds and additional information requirements in the consolidated statutory text.
Practical perimeter issues
The profile should distinguish the UIF criterion from other Mexican crypto measures. It does not by itself recognize a token, approve a business model, or replace separate financial-sector rules administered by Banco de México or the Comisión Nacional Bancaria y de Valores. It is most relevant where a service provider is outside Mexico but has a functional customer or user nexus with Mexico. For CryptoSlate taxonomy purposes, the profile is therefore primarily an AML/CFT and regulatory-perimeter item, with secondary links to registration, custody and payments.
Status and editorial treatment
As of June 30, 2026, the criterion remains best classified as Mexican agency guidance, not as a standalone statute. The underlying Article 17(XVI) remains part of the LFPIORPI, but the current law should be checked alongside the 2025 LFPIORPI amendments and the 2026 regulation update listed in the official SAT legal-framework page. Editors should avoid presenting the criterion as a licensing authorization or as comprehensive Mexican crypto regulation; it is a UIF interpretation that clarifies how the AML “Actividades Vulnerables” regime applies to virtual-asset service offerings with a Mexico nexus.
