This guide is for the owner or CFO of a U.S. company with a subsidiary in Mexico. The short answer: since 2022, every Mexican company must know which individuals ultimately control it or benefit from it (its beneficiario controlador, or controlling beneficiary), keep that information as part of its accounting records, and hand it to the SAT (Mexican tax authority) within fifteen business days of a request. Nothing is filed every year. The request comes without warning, and fines are counted per controlling beneficiary. If the company does not exist yet, see how a foreign company opens a company in Mexico.
Who the controlling beneficiary is
It is always an individual or a group of individuals, never the parent company. Article 32-B Quáter of the Federal Tax Code (Código Fiscal de la Federación) sets two tests. The first is benefit: whoever, directly or through other persons or legal acts, obtains the benefit of an interest in the company. The second is control: whoever, directly or indirectly, can impose decisions at shareholder meetings or appoint or remove most of the directors; holds voting rights over more than 15% of the capital; or directs the management, strategy or main policies of the company.
Rule 2.8.1.20 of the 2026 Miscellaneous Tax Resolution (Resolución Miscelánea Fiscal) requires applying the tests in that order: benefit first and, only if no one is identified, control. If no individual is found even then, the sole administrator is treated as the controlling beneficiary or, if there is a board of directors, each board member.
Who must comply
Article 32-B Ter applies to every legal entity, whatever its size or business, to trustees, settlors and beneficiaries of trusts, and to the parties to any other legal arrangement. Notaries, commercial brokers (corredores públicos) and others involved in forming companies or trusts, and financial institutions for financial accounts, must also obtain the information and take reasonable steps to verify identity. What you give the notary or the bank does not replace the company's own record.
What information the company must keep
Rule 2.8.1.22 lists the data the company must include in its accounting records for each controlling beneficiary. Among them:
- Identity: full name as it appears on the official ID, aliases, date of birth, sex, all nationalities, CURP or its foreign equivalent, and type and number of ID.
- Tax and contact data: country of tax residence, RFC or foreign tax ID number, home and tax addresses, e-mail and phone numbers, and marital status with the marital property regime.
- Interest: relationship to the company, percentage, form of ownership or control (direct or indirect), number, series, class and par value of the shares or partnership interests, and where they are held.
- Dates: when the person became a controlling beneficiary, and the date and type of each change, including when it ended.
- Ownership or control chain: for each intermediate entity, its name, country of incorporation, country of tax residence, tax ID and tax address.
Rule 2.8.1.21 also requires documented internal control procedures to obtain and update the information, and to have the individuals report any change. Everything is kept for the period in Article 30 of the Code, which as a general rule is five years.
Updates and the SAT request
When the identity or interest of a controlling beneficiary changes, the company must update the information within fifteen calendar days (Article 32-B Quinquies). These are calendar days, not business days.
There is no periodic return. The SAT serves a request, and the company has fifteen business days from the date service takes effect to deliver the information. The period can be extended by ten days if a justified extension request is filed before it runs out (Article 32-B Ter). The SAT can also check it in on-site audits (Article 42, section XII). That is short when the data depends on people in another country.
Fines and other consequences
Article 84-N sets fines per controlling beneficiary, at the amounts in force since January 2026:
- Not obtaining, keeping or delivering the information on time: MXN 1,686,750 to 2,249,000.
- Not keeping it up to date: MXN 899,600 to 1,124,500.
- Delivering it incomplete, inaccurate or with errors: MXN 562,250 to 899,600.
With five controlling beneficiaries, the minimum fine for having no information exceeds MXN 8 million. A company in breach of Articles 32-B Ter and 32-B Quinquies also cannot be hired by Mexican government agencies and entities (Article 32-D, section IX). Rule 2.14.15 allows a request to reduce the fine if the company corrects its situation: 30% during an audit, and 20% or 10% afterwards, depending on how old the fine is.
Typical risks for a subsidiary of a U.S. company
The subsidiary has to reach the individuals through the parent's entire chain of entities, even when they are abroad. The points that fail most often are:
- Incomplete chain: the subsidiary records the parent as shareholder and stops there, without identifying the individuals behind it.
- The one-share partner: the second partner, often an employee or another group company, must also be analyzed. A nominee who appears as partner or director for someone else does not replace the real controlling beneficiary.
- Changes at the parent: a sale, merger or restructuring in the U.S. can change the controlling beneficiary while nothing changes in Mexico, and the fifteen-calendar-day period still runs.
How it fits with the RNIE and the yearly obligations
This record is a tax obligation owed to the SAT. It does not replace the reports to the National Foreign Investment Registry (RNIE) or the notice to the SAT of changes in partners. Separately, since July 2025 the anti-money-laundering law (Article 33 Ter) requires commercial companies to register their controlling beneficiary in a Ministry of Economy system, under guidelines that ministry is to issue, with a different threshold: more than 25% of the votes.
In practice, review everything together: the share register, the RNIE, the partner notice and the controlling beneficiary record should all say the same thing. The annual meeting is a good moment to do it; see the yearly obligations of a Mexican subsidiary.
How we help
Mariela Cárdenas, LL.M., attorney admitted in Mexico, practices from Nuevo Laredo. We trace the chain to the individuals, prepare the record and the internal procedures, and handle the SAT request if one arrives.
Frequently asked questions
Do we have to file a controlling beneficiary return every year?
No. The information is kept as part of the accounting records and delivered when the SAT asks for it. What the company must do is keep it current.
If the parent owns 99% of the subsidiary, is the parent the controlling beneficiary?
No. Under the Federal Tax Code only an individual can be one. The chain has to be followed up to the people who benefit from or control the parent.
What if the parent is publicly listed and no individual can be identified?
The SAT has said the subsidiary must keep official documents showing the market where the parent is listed. If no one is identified after all reasonable steps, the sole administrator or each board member is treated as the controlling beneficiary, and the proof of those steps must be kept.
Does a change of shareholders at the parent require an update in Mexico?
Yes, if the identity or interest of any controlling beneficiary changes. The update is due within fifteen calendar days of the change.
General information, updated October 2026. It does not replace legal advice for a specific case.
Request a first review
Send us the group chart and the subsidiary's share register so we can review whether your controlling beneficiary record would hold up to an SAT request today: Schedule a consultation.
Request a first review
Write a few lines about your company and the matter. The attorney replies personally, in English or Spanish, with a proposed first review.