Mexico Does Not Ask Your Legal Representative to Live There. It Asks for More Than That.

The sentence that gets the appointment accepted

A foreign group incorporates in Mexico and someone has to sign. The candidate is usually an executive at headquarters, and he is told two things on the way to signing. Both are true.

The first is that the appointment is a line in the incorporation deed. The second is that he does not need to live in Mexico.

That second sentence is correct. There is no residency requirement, and it is the reason the role is accepted so often without a second reading.

What follows is what Mexico does ask instead. Every item below is a requirement of law or of an administrative rule currently in force, and each one is quoted rather than summarised, because the operative language is where the surprises live.

First, it asks where the powers come from

English flattens four Mexican figures into "legal representative." Two of them matter here, and a single article of the Ley General de Sociedades Mercantiles (LGSM) separates them by the source of their authority.

Article 10, first paragraph:

"La representación de toda sociedad mercantil corresponderá a su administrador o administradores, quienes podrán realizar todas las operaciones inherentes al objeto de la sociedad, salvo lo que expresamente establezcan la Ley y el contrato social."

The representation of a company belongs to its administrador, who may carry out every operation inherent to the corporate purpose, save what the Law and the bylaws expressly provide. Nobody grants those powers. They attach to the office by operation of law.

The same article governs the other route:

"Para que surtan efecto los poderes que otorgue la sociedad mediante acuerdo de la asamblea o del órgano colegiado de administración, en su caso, bastará con la protocolización ante notario de la parte del acta en que conste el acuerdo relativo a su otorgamiento…"

That is the apoderado, whose powers come from a mandate someone drafted.

The practical difference is the one clients most often get wrong. An attorney-in-fact's scope is written, so you can grant acts of administration and withhold acts of ownership, and confine the mandate to one bank or one contract. An administrador's scope is not written by you. It is the corporate purpose, bounded only by the Law and by bylaws drafted before anyone knew who would hold the office.

Appointing an administrador is therefore not a checklist item. It is handing over the representation of the company in the full breadth of its purpose.

Article 10 was last amended on 11 June 1992 (DOF 11-06-1992); the LGSM's most recent general amendment is DOF 20-10-2023.

Then it asks the person to be a Mexican taxpayer in his own right

Here is the first requirement that nobody mentions in the conversation about residency.

Rule 2.4.13. of the Resolución Miscelánea Fiscal (RMF), headed "Inscripción en el RFC del representante legal de personas morales":

"Para los efectos del artículo 27, apartados A, fracción III y B, fracción I del CFF, por representante legal obligado a solicitar su inscripción en el RFC y su certificado de e.firma, se entiende aquel que vaya a solicitar la e.firma de la persona moral, o bien, ejerza facultades de representación de la persona moral ante las autoridades fiscales, cuyas facultades le hayan sido conferidas en escritura pública."

Three filters, and each one disposes of a common assumption.

Who is meant. Not every representative the company has. The one who is going to apply for the company's e.firma, its advanced electronic signature, or who exercises powers of representation before the tax authorities. Function, not seniority.

What he owes personally. Not the company's registration. His own registration in the Registro Federal de Contribuyentes, the RFC, and his own e.firma certificate. This is where the residency reassurance gets its correction. He need not live in Mexico. He must hold a Mexican taxpayer number and an electronic signature in his own name.

How the powers must have been granted. En escritura pública. For this figure the rule speaks only of powers conferred in a public deed.

Then it asks the notary to write the number down

Foreign groups expect the bank to be the difficult one. In practice it runs the other way: the bank accepts the power of attorney and the SAT does not, and the reason is usually a data field rather than a defect in the powers.

Article 27 of the Código Fiscal de la Federación (CFF), apartado B, fracción IX, puts the obligation on the notary:

"Asentar en las escrituras públicas en las que hagan constar actas constitutivas o demás actas de asamblea, la clave en el registro federal de contribuyentes que corresponda a cada socio y accionista o representantes legales, o en su caso, verificar que dicha clave aparezca en los documentos señalados, cerciorándose que la misma concuerda con la cédula respectiva."

Note the verb governing the second limb. Cerciorándose. The notary does not copy a number across; he must satisfy himself it matches the cédula. Apartado A, fracción III makes legal representatives obligated subjects in their own right, fracción V routes the fedatario's duties, and apartado D, fracción V adds a verification duty against the constancia de situación fiscal.

Rule 2.4.5. of the RMF then tells the notary how little he can get away with. Despite its heading, it is a facility rather than an added burden:

"Para los efectos del artículo 27, apartados A, fracción V y B, fracción IX del CFF y 28 de su Reglamento, se tendrá por cumplida la obligación de señalar la clave en el RFC en el instrumento de constitución y demás actas de asamblea de personas morales emitidas por fedatario público, cuando tratándose del representante legal, dichos fedatarios realicen lo siguiente:"

Its fracción I narrows the requirement to one person and says which:

"Cuando el contribuyente en el instrumento de constitución o representación emitido por fedatario público o demás actas de asamblea de personas morales designe a uno o más representantes legales, únicamente deberá señalarse en la escritura pública correspondiente la clave en el RFC de aquel que solicite la e.firma de la persona moral o, en su caso, de uno de los que ejerza facultades de representación de la persona moral en los trámites ante la autoridad fiscal."

And its closing paragraph provides an escape route with one condition attached:

"En caso de que el representante legal no proporcione su clave en el RFC, la cédula de identificación fiscal o la constancia de situación fiscal emitida por el SAT, se tendrá por cumplida la obligación a que se refiere el primer párrafo de la presente regla, siempre y cuando el fedatario público así lo señale en el instrumento de constitución o de representación correspondiente."

Silence is not compliance. The obligation is deemed fulfilled only if the notary states in the instrument that the number was not supplied. The escape costs one sentence, and somebody has to write it on the day of signing.

Now the failure you actually meet. An instrument executed before this architecture existed contains neither the RFC nor the notary's declaration. It satisfies neither the obligation nor the facility. It is a valid instrument, and a bank reviewing it for scope will take it. The rule did not invalidate it; it made it unusable in one forum. Validity and usability are not the same thing, and a group assured that its corporate documents are in order has usually been assured about the first.

Two consequences follow. The oldest powers are the most exposed, and they tend to be the ones held by the longest-serving representatives, which is to say the ones the company relies on. And nothing signals the defect. The instrument sits in the corporate book looking complete until the day there is a filing to make, which is the day you have least room to solve it.

The remedy is an audit rather than a fire drill: every instrument the company relies on before the SAT, checked against rule 2.4.5.

One more requirement worth knowing before you plan a timetable. Procedure sheet 2/CFF of Anexo 2 of the RMF, the application to register a company in the RFC, requires:

"Instrumento para acreditar la representación (copia certificada), o carta poder firmada ante dos testigos y ratificadas las firmas ante las autoridades fiscales o ante fedatario público (original). Si fue otorgado en el extranjero deberá estar debidamente apostillado o legalizado y haber sido formalizado ante fedatario público mexicano y en su caso, contar con traducción al español realizada por perito autorizado."

A power signed at headquarters is not enough on its own. Apostille or legalisation, formalisation before a Mexican fedatario, translation by an authorised perito. Those steps consume calendar time that incorporation timetables routinely fail to budget.

Then it asks whether the company can be registered at all, given who you are

This one runs in the opposite direction to everything above, and it is recent.

Apartado C, fracción XIV of article 27 of the CFF, added by the reform published in the DOF on 7 November 2025, allows the SAT to deny a company's registration in the RFC when its legal representative under the first paragraph of article 19, a socio or accionista, or any person forming part of its organic structure, is in one of the situations of article 17-H, fracciones X to XIII, or of the twelfth paragraph of article 69, fracciones I to IV and IX, and has not corrected it.

So the question is not only what the representative will answer for. It is whether naming this person will stop the company from being registered. That check belongs before the appointment.

Then it asks the person to answer for what the company does

Article 26 of the CFF lists who is jointly liable with the taxpayer. Two of its provisions reach the figures we have been discussing, and they work in opposite ways. This distinction is the single most useful thing in this guide.

The one that reaches whoever runs the company. An unnumbered paragraph between fracciones III and IV:

"La persona o personas cualquiera que sea el nombre con que se les designe, que tengan conferida la dirección general, la gerencia general, o la administración única de las personas morales, serán responsables solidarios por las contribuciones causadas o no retenidas por dichas personas morales durante su gestión, así como por las que debieron pagarse o enterarse durante la misma, en la parte del interés fiscal que no alcance a ser garantizada con los bienes de la persona moral que dirigen, cuando dicha persona moral incurra en cualquiera de los supuestos a que se refieren los incisos a), b), c), d), e), f), g), h) e i) de la fracción X de este artículo."

Read the opening words. "Whatever name they are given." The statute is indifferent to the title and looks at whether you hold the general direction, the general management or the sole administration.

Then read the two limits, which most summaries drop. It is subsidiary: it reaches only the part of the tax interest the company's own assets cannot cover. And it is conditional: it attaches only where the company falls into one of nine situations in fracción X. Those nine are, in substance, failing to register in the RFC; changing domicile without notice once an audit has been notified or a liability assessed; not keeping accounting records, or concealing or destroying them; vacating the fiscal domicile without filing notice; not being locatable at the registered domicile; failing to remit within the legal term amounts withheld or collected; appearing on the article 69-B list for invoices covering non-existent operations; falling under article 69-B's eighth paragraph for not having evidenced actual acquisition of goods or receipt of services; and appearing on the article 69-B Bis list for improper transfer of tax losses.

Which means the exposure of whoever runs a Mexican company is not a function of the title. It is a function of how the company behaves. A subsidiary that registers properly, keeps its books, stays findable and remits what it withholds does not put its administrador's patrimony in play under this paragraph.

The one that reaches whoever is designated. Fracción V is different, and it is the one that lands on foreign structures:

"Los representantes, sea cual fuere el nombre con que se les designe, de personas no residentes en el país o residentes en el extranjero, con cuya intervención éstas efectúen actividades por las que deban pagarse contribuciones, hasta por el monto de dichas contribuciones, así como los que sean designados en cumplimiento a las disposiciones fiscales y aquéllos que sean designados para efectos fiscales, hasta por el importe de las contribuciones o aprovechamientos a los que se refieran las disposiciones aplicables."

Again, whatever name they are given. But note what this fracción does not contain: any condition. No list of nine situations, no requirement that the company misbehave. It is capped by amount, and that cap is real. It is not capped by conduct. The second limb is the operative one for most foreign structures: those designated in compliance with tax provisions, and those designated for tax purposes. The designation itself is the ground of liability. Fracción V was last amended on 12 November 2021.

The article closes with a limit worth reading precisely:

"La responsabilidad solidaria comprenderá los accesorios, con excepción de las multas. Lo dispuesto en este párrafo no impide que los responsables solidarios puedan ser sancionados por los actos u omisiones propios."

Accessories travel with the liability. Fines do not. But the second sentence closes the door it appears to open: you can still be fined for your own acts or omissions. The exclusion covers the company's fines, not yours.

Then it asks the same thing again, this time for anti money laundering

There is a second regime, and it is the one that turns an unfilled formality into personal exposure by default. It runs on the Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita (LFPIORPI), last amended in the DOF on 16 July 2025.

Article 20:

"Las personas morales y quienes actúen a través de fideicomisos o cualquier otra figura jurídica que realicen Actividades Vulnerables, deberán designar ante la Secretaría a una persona Representante Encargada del Cumplimiento de las obligaciones derivadas de esta Ley, y mantener vigente dicha designación, cuya identidad deberá resguardarse en términos del artículo 38 de esta Ley. En tanto no haya una persona Representante Encargada del Cumplimiento o la designación no sea aceptada, el cumplimiento de las obligaciones que esta Ley señala corresponderá a los integrantes del órgano de administración o a quien funja como administrador único de la persona moral; a la parte fideicomitente o su representante, o la persona que funja como administrador en cualquier otra figura jurídica."

Read the second paragraph slowly. There is no gap in this regime. If nobody has been designated, or if a designation exists but has not been accepted, the obligations do not go unassigned and they do not remain with the company as an abstraction. They fall on the members of the administrative body or on whoever acts as administrador único.

That is the same person article 10 of the LGSM put in the role. The figure we started with, whose powers come from the statute rather than from any instrument, is the residual compliance subject of the anti money laundering regime by default, without anyone appointing him to it.

Two requirements in the first paragraph are the ones that quietly fail. The designation must be kept current, so a compliance representative who leaves and is not replaced reopens the default. And the designated person's identity is safeguarded under article 38, which means this is not a name for an organisation chart. A third paragraph adds an annual training obligation.

And the designation is not effective because the company resolved on it. Article 10 of the Reglas de carácter general requires the designated person to enter the Portal "utilizando su clave del Registro Federal de Contribuyentes y su certificado vigente de la Firma Electrónica Avanzada, a fin de aceptar o rechazar la designación."

Which brings the same two personal credentials back for the third time, and with a word attached: vigente. An expired e.firma is not a renewal pending. It is a designation that cannot be accepted, and under article 20 an unaccepted designation leaves the administrador único holding the obligations.

If you buy the role instead of filling it

Groups that would rather not expose one of their own executives sometimes purchase the role from a service provider. That is a legitimate structure. It is also a Actividad Vulnerable in its own right, under article 17, fracción XI of the LFPIORPI:

"La prestación de servicios profesionales, de manera independiente, sin que medie relación laboral con el cliente respectivo, en aquellos casos en los que se prepare para un cliente o se lleven a cabo en nombre y representación del cliente cualquiera de las siguientes operaciones: a) La compraventa de bienes inmuebles o la cesión de derechos sobre estos; b) La administración y manejo de recursos, valores o cualquier otro activo de sus clientes; c) El manejo de cuentas bancarias, de ahorro o de valores; d) La organización de aportaciones de capital o cualquier otro tipo de recursos para la constitución, operación y administración de sociedades mercantiles, o e) La constitución, escisión, fusión, operación y administración de personas morales o vehículos corporativos, incluido el fideicomiso y la compra o venta de entidades mercantiles. Serán objeto de Aviso ante la Secretaría cuando el prestador de dichos servicios lleve a cabo, en nombre y representación de un cliente, alguna operación financiera que esté relacionada con las operaciones señaladas en los incisos de esta fracción, con respeto al secreto profesional y garantía de defensa en términos de esta Ley"

Read incisos b), d) and e) against what a representative of an operating subsidiary actually does. That is not the periphery of the role; it is the role.

The opening line decides who is caught: de manera independiente, sin que medie relación laboral con el cliente respectivo. An executive who is an employee of the group is not rendering an independent professional service, and our reading is that he falls outside the supuestos of this Law on that ground. Fracción XI catches independent providers, not employees. An external provider is squarely inside it.

Which inverts the intuition. Outsourcing the role lowers the group's exposure of its own people and simultaneously brings the arrangement inside a regulated activity, with a registered provider, a compliance representative and filing obligations attached. Keeping it in house does the opposite on both counts.

The general rules under the LFPIORPI were substantially modified by an Acuerdo published in the DOF on 7 August 2026, adding chapters on a risk based approach, client risk classification, politically exposed persons, the beneficial owner, virtual asset service providers, and an internal policies manual whose contents now expressly include "las funciones y responsabilidades de la persona Representante Encargada de Cumplimiento." Its obligations are phased in on a staggered calendar. Read the dates in the Acuerdo rather than in any summary of it, including this one.

And it keeps asking after the person leaves

A departing representative assumes the role ends when the employment does. It does not, and three separate records have to move.

The company must replace him before the SAT. Until it does, the tax authority's records show a person who no longer sits at the company as the person answering for it. That obligation serves both sides. For the individual, because the point of leaving is to stop carrying responsibility for an entity where he no longer has visibility, authority or access to the records he would need to answer for anything. For the company, because its ability to comply and its operational continuity depend on the registered person being someone who is actually there.

The replacement instrument has to be drafted correctly on the day it is signed. Rule 2.4.5., fracción II:

"Los fedatarios públicos que hayan protocolizado el instrumento de constitución de una persona moral, podrán no señalar la clave en el RFC del representante legal cuando se trate de las demás actas de asamblea que hagan constar, salvo que en esa acta se designe un nuevo representante legal y este sea quien solicite la e.firma, o bien, ejerza facultades de representación de la persona moral en los trámites ante la autoridad fiscal."

Read the exception, because it is the ordinary case in a replacement. Later assembly minutes normally need not carry the representative's RFC. They must carry it when the minute appoints a new representative who will request the e.firma or act before the tax authority. Miss it there and the defect is created on the same day the problem was supposed to be solved.

And if he was also the compliance representative, that designation has to be accepted, not merely resolved. The successor enters the Portal with his own RFC and his own current e.firma. Until he does, article 20 puts the obligations on the administrador único.

The failure mode is quiet in all three cases. Nothing breaks on the day of the departure. It breaks on the day the company needs a signature, or the day an authority sends a notice to the person whose name is still on file.

What to establish before signing

We provide this service, so the useful way to close is to state the conditions on which we accept it. They are not a commercial preference. They follow from the two provisions above that do the real work: the unnumbered paragraph of article 26 of the CFF, and the second paragraph of article 20 of the LFPIORPI. Both make one person answerable for the company's own conduct.

So the question is not whether the candidate is trustworthy. It is whether he will be able to see what the company is doing. Accepting the role without visibility over compliance is accepting liability for facts you will not learn until an authority tells you.

Our conditions are two.

We run our KYC on the client before we accept. Not a formality borrowed from banking. Under fracción XI, providing the service is a regulated activity for us, so the client's identification and risk profile are our obligation rather than our preference. A client who will not complete it is a client we do not represent.

And we require visibility, in one of two ways, with the choice belonging to the client. Either the engagement also covers our tax compliance service, so that the obligations the representative answers for are the obligations we are performing; or the client contracts the representation alone and commits to a monthly compliance report. There is no third option, and no version where we hold the appointment and find out once a year.

Read the logic rather than the arrangement, because the logic is what transfers. Whoever answers for a company's omissions must either control compliance or receive documented evidence of it on a defined cadence. Every workable version of this role is one of those two. Every version that fails is a signature without either.

That is also the test for an internal candidate. If the executive at headquarters being asked to sign has no monthly line of sight into the Mexican subsidiary's filings, the group has not solved the problem by keeping the role in house. It has moved the exposure to the person who will be the last to know.

What this guide does not tell you

No amounts. Any figure on tax exposure depends on the specific contributions, periods and surcharges of the case. We are not going to estimate it.

No tesis. We do not cite criteria of the Poder Judicial de la Federación that we have not read in the official source.

No terms of engagement. The conditions above are the conditions on which we accept the role. They are not a fee schedule, a scope of work, or an offer.

And a note on currency. Article 10 of the LGSM has stood unchanged since 1992. Nothing else here is stable. The article 26 CFF provisions carry a 12 November 2021 amendment marker; article 27 carries additions published on 7 November 2025; the CFF has been amended as recently as April 2026. The RMF is reissued annually, its rules are renumbered, and for 2026 its annexes were renumbered as well. The LFPIORPI was last amended on 16 July 2025 and its general rules were modified again on 7 August 2026, with obligations phased in thereafter. Confirm every provision in the version in force on the day you rely on it.

Companion analysis

Who should hold this appointment in your structure?

Tell us three things: who signs for the company today, whether that person holds their own RFC and a current e.firma, and whether the role sits in house or with a provider. A lawyer will tell you what the appointment requires in your case and what to check before the next filing.

A lawyer replies within one business day. Sending this does not create an attorney-client relationship.