Selling a vehicle also involves Know who buys them.
The LFPIORPI lays down identification obligations for those who market vehicles. It digitalizes customer verification and keeps evidence in an integrated file.
JAAK allows to incorporate documentary checks, biometrics, identity consultations, scanning and digital signature within a single process.
JAAK provides technology and information for your identification processes. Determining and complying with regulatory obligations is the responsibility of the obligated entity.
Why should an automobile agency know about LFPIORPI?
The regular or professional marketing or distribution of new or used vehicles, whether air, sea or ground, corresponds to Article 17, Section VIII LFPIORPI. This page focuses on ground vehicles and the automotive sector.
When an activity is considered vulnerable, the law lays down obligations to identify the client, preserve evidence and, in some cases, give notice to the authority. The following sections explain each of these concepts separately.
Three distinct concepts, three distinct thresholds
Identification, warning and cash restriction are not the same. Filling them's the most common mistake with talking about LFPIORPI.
Identification
3,210 UMA
MX$376,565.10
Following this assumption, an obligation to identify the client as an LFPIORPI.
Warning
6,420 UMA
MX$753,130.20
The notice should be submitted to the required person. JAAK does not give notice and helps to organize information that supports them.
Cash limitation
3,210 UMA
MX$376,565.10
Concept other than the identification threshold applicable to cash payment (Section 32).
Comparison at scale
Valuation with UMA 2026 MX$117.31 daily, valid as from 1 February 2026. Always check the values valid for the financial year.
A detail that can change calculation
Article 17 thresholds
To determine the identification and notice amounts, the Regulation lays down that contributions and other accessories to the act or operation have to be considered.
Restriction of article 32
To determine the limitation applicable to the use of cash, contributions and accessories should be considered.
Consultation with your enforcement officer or legal advisor to determine the treatment applicable to each operation.
It's not always about a single operation.
The Regulation provides for aggregating acts or transactions carried out with the same client over a period of up to six months to determine when Notices must be filed under the applicable rules.
The Section is an educational content about the regulatory framework. The accumulation of operations for information purposes is the responsibility of the person concerned.
The anti-washing regulations are evolving.
2012–2013
LFPIORPI + Regulation and General rules
The original framework came into force: the law, its regulations and the rules that today continue to govern the status of Vulnerable Activities.
Julio 2025
Reform LFPIORPI
It strengthens client identification and knowledge, incorporates the Controller Beneficiaries, strengthens evidence retention, risk-based approach, training, automated mechanisms and audit.
- Strengthened client identification and knowledge
- Beneficiario Controlador
- Conservation of evidence
- Risk-based approach
- Training
- Mecanismos automatizados
- Audit
Marzo 2026
Reform of the LFPIORPI
It requires rules for the determination of amounts, the accumulation of operations, politically exposed persons and the harmonization with law reform and procedures of Vulnerable Activities.
- Rules for determining amounts
- Cumulation
- Political Exposed
- Harmonization with legal reform
- Procedures related to Vulnerable Activities
The obligations of Article 18 (VII) to (XI) have a transitional regime with the time limits established by the General Rules. The reform also incorporates new obligations related to risk management, monitoring, training, automated mechanisms and audit, and its scope and entry into force should be analysed with applicable secondary regulations.
Revised content using official sources available. Regulation can be updated.
A copy of INE It doesn't necessarily prove who was in front of you.
An agency receives
- Identification
- Comprobante
- Personal information
- Contrato firmado
But later she needs to prove
- That the identification was valid
- That the data were from official sources
- That the person was who they said they were
- That the document did not belong to a third party
- What checks have been made and when
- What resulted from each check
- What document was signed
That's the difference between capturing documents and really identifying the client.
Compliance and fraud prevention start at the same place: identity.
The LFPIORPI It lays down an obligation to identify and verify the client. Technology can strengthen this process with a view to suplanting attempts.
Traditional process
Potential challenges
- Other person's document
- Handcuffed document
- Capture errors
- Lack of evidence of the process
- Rebuilding challenges
Digital process
The biometrics and life-testing are technological tools to strengthen identity monitoring and their specific use should not be presented as a textual obligation of the LFPIORPI.
A digital flow to identify the buyer
Capture, validation, consultations and file, integrated into the same process.
Capture
The client uploads his official identification and takes a life-proof selfie.
Validation
OCR and face biometrics compare document and face and evaluate documentary validity.
Consultation
Consultation of available information and screening of established risk lists.
Record
The results are organised and preserved in an audible digital file.
Retiring and risk analysis aren't the same
01 · Identity
Objective: To confirm who the person is
Possible components JAAK:
- OCR Identification
- Vigencia documental
- Facial Comparison
- Liveness detection
- CURP
- Consulta RENAPO
- Consultation / validation of INE as applicable to available service
The document's data are no longer only captured information and can be tested against available official sources.
02 · Risk
Objective: to know if elements require review
Components:
- Political Exposed
- Official lists communicated by authorities
- International lists
- Screening AML/PLD
- Other risk sources set up JAAK
INE and RENAPO they belong to the front of identity validation / data - they are not risk lists.
From buyer to file, without separate evidence.
Each validation generates information. The value is to preserve it structured and related to the operation.
Record
Customer #AUT-2026-01872
Identity
- Personal information
- Captured document
- OCR
- Vigencia
Biometrics
- Liveness detection
- Facial Comparison
Official sources
- CURP / RENAPO
- INE if applicable
Screening
- Resultado PEP
- Lists consulted
- Consultation date
Operation
- Operating-related data
- Date
- Trazabilidad
Documents
- Consentimientos
- Contrato
- Digital signature
Evidencia
- Stamps of time as appropriate
- Process Records
- Integridad documental
- Expediente exportable
The question isn't just:
“Did you get an ID?”
The question is:
“Can you prove how you identified that client?”
See an example of a fileEvidence to be available for years after
The LFPIORPI includes the maintenance of information and documentation supported for 10 years for operations under the appropriate procedure.
The challenge isn't just to check today. It's to be able to rebuild the process as necessary.
What automates JAAK and what's still yours
JAAK can help you with
- Digitizing Identity Capture
- Realizar validaciones documentales
- Incorporate biometrics and liveness detections
- Consult information and information available
- Realizar screening configurable
- Organizar resultados
- Conservar evidencia digital
- Incorporate Digital Signature
- Generate an auditable record according to contracted modules
The organisation remains responsible for
- Determining if you conduct a Vulnerable Activity
- To be discharged as appropriate
- Establishment of internal policies
- Determining When an Operation Is Identifiable
- Monitoring and accumulation as appropriate
- Determining When To Produce an Warning
- To report Notices to the authority
- Filling cash restrictions
- Identify Driver Beneficiaries When applying
- Evaluar riesgos
- To meet authority requirements
- Define the legal and regulatory treatment of each operation
Identifies the client and then links that identity to his sign document.
After KYCFlow can continue to sign sales contracts, authorisations, conjunctions, delivery documents, financing as appropriate and contractual annexes with Digital Signature NOM-151 and a time stamp.
The digital signature does not replace the Warning LFPIORPI nor, by itself, does it satisfy the identification obligations.
See sign demo NOM-151What obligation can be activated by the amount?
Proprietary result. It does not constitute legal or fiscal advice. The determination should consider specific characteristics of the operation, accumulation, form of payment, contributions and current regulations.
The process suits who buys
Natural person
The basic case: documentary validation, identity, biometrics, identity and file consultations.
- Documentary validation
- Identity verification
- Biometrics and Liveness detection
- Identity consultations
- Expediente integrado
Moral person
The file may require additional information that complements the identification of the person representing the company.
- The representative's information
- Company activity
- Estructura societaria
- Beneficiaries Controller when applying
Most at-risk client
When the profile or operation warrant this, the process can be tightened with additional layers.
- Screening ampliado
- Consulta PEP
- Fuentes adicionales
- Strengthened review
Choose how you want to move forward
Check what layers of identity, screening, sign and evidence you can integrate into your operation.
FAQ
Is the sale of vehicles a Vulnerable activity?
Article 17, Section VIII LFPIORPI considers Vulnerable activity the regular or professional commercialization or distribution of new or used vehicles, whether air, sea or ground. That page focuses on ground vehicles and the automotive sector.
What's the 2026 threshold?
3,210 UMA / MX$376,565.10with UMA 2026 MX$117.31From this assumption arises an obligation to identify the client according to LFPIORPI.
What's the warning threshold at 2026?
6,420 UMA / MX$753,130.20. The Notice should be submitted to the forced person performing the Vulnerable activity.
Who's presenting the Warning?
The forced person performing the Vulnerable activity - that is, the agency, group, distributor or car market.
¿JAAK Do you have an announcement from my company?
It isn't presented as an JAAK. JAAK helps to get, structure and preserve information and evidence from your client that can feed your organisation's internal compliance processes.
The LFPIORPI Do you have to use biometrics?
No textual obligation to use biometrics at LFPIORPI. The biometrics, facial comparison and liveness detection are technological tools that can strengthen the client's identity check.
¿INE and RENAPO Are they risk lists?
No. INE and RENAPO they belong to the front of validation of identity and data.PEPand international and official lists) are a different front: client risk analysis.
What if a client conduct several operations?
The Regulation provides for the aggregation of acts or operations carried out with the same client over a period of up to six months to determine when a Notice must be filed, in accordance with the applicable rules.
How long should information be held?
The LFPIORPI provides for the retention of information and documentation supported for 10 years for operations under the appropriate procedure.
Can I integrate a digital signature?
Yes, as an additional component of evidence and recruitment within the same identification flow. It does not replace the obligation to identify, notify or restrict cash from LFPIORPI.
Official sources consulted
The information submitted on this page is an executive and guiding summary. Always check the official arrangements for their complete text, scope, exceptions and specific application.
Chamber of Deputies
LFPIORPI — texto vigente
Federal Act for the Prevention and Identification of Transactions with Inetidal Promises.
Consultar leyChamber of Deputies
Reforma LFPIORPI 2025
History of Reforms of LFPIORPIincluding the Decree published at DOF on 16 July 2025 amending and supplementing a number of provisions of the Act.
See Reforms HistorySAT / Portal PLD
Regulation LFPIORPI and updates
Policy framework for the Money-Laundering Prevention Portal SATwith reference to the Regulation LFPIORPI and its reforms published in the Official Journal of the Federation.
See policy frameworkSAT
Vulnerable Activities - fraction VIII
Mysitio of Vulnerable Activities of Tax Administration Service.
See ministioSAT / Portal PLD
Identification and notice thresholds
Money-laundering prevention portal - thresholds applicable by vulnerable activity.
See thresholdsSAT / Portal PLD
Retirement of use of cash and metal
Limits applicable to cash payments under Article 32 of LFPIORPI.
See restrictionSAT
Identification of unique clients and archives
Money Laundering Prevention Portal SAT - guidelines for integrating the client or user's identification file.
See guidelinesINEGI / DOF
UMA 2026
Daily Value of Unit of Measurement and Updating as from 1 February 2026.
See Value UMAWarning
Information prepared for information with official sources available at August 12, 2026The applicable obligations depend on the characteristics of each operation and may be modified by normative changes and always consult with your enforcement or legal advisor.