Which Mexican rules apply to AI agents in finance?

Sector rules and data protection law, not an AI statute. Banxico oversees payment systems including SPEI, the CNBV supervises banks and other financial entities, and CONDUSEF protects financial consumers. Mexico's private-sector personal data law governs what agents do with customer data. Each applies to an agent because the regulated firm is accountable for the work, whoever or whatever performs it.

Who regulates what?

What do the rules require, in substance?

Supervisory rules. The CNBV expects supervised entities to govern their risks, including technology and outsourcing risk, with management accountable and records available to the supervisor. An agent platform or model provider is an outsourced service; the entity remains responsible for the activity and must be able to show how it is controlled.

Consumer protection. CONDUSEF expects clear information, fair treatment and effective complaint handling. An agent that gives misleading information about costs, or makes complaints hard to lodge, puts the firm in breach whatever its design intent.

Payments. SPEI transfers settle quickly and are hard to recover once made. An agent able to initiate them needs tight controls, because the consequence of a mistake or a manipulated instruction is immediate.

Data protection. In substance, Mexico's law requires a privacy notice explaining what data is processed and why, consent where the law requires it, processing limited to the stated purposes, security measures, and responses to people's rights to access, rectify, cancel and object to processing. Transfers to third parties and abroad must meet the law's conditions.

This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.

Where does the line fall, and why?

The reasoning is accountability plus irreversibility. The firm answers for every outcome, and some actions, such as a SPEI transfer, cannot easily be undone.

• Agent may: answer customers in Spanish from approved content, explain costs and fees, gather documents for account opening, reconcile incoming SPEI payments to invoices, draft complaint responses.
• Agent may, within limits: reverse small fees, update contact details after verification, schedule payments the customer has confirmed to known payees.
• Stays with a person: any outgoing SPEI transfer to a new payee or above the customer's limit, credit decisions that refuse or reduce credit, final complaint decisions, and any use of personal data beyond the privacy notice.

An illustrative example

Take a Mexican fintech that offers business accounts and uses an agent to manage supplier payments for its customers. The agent reads invoices sent by email, matches them to purchase orders and prepares SPEI payments.

An invoice arrives with new bank details "following a change of bank". The agent prepares the payment as usual. Because the payee details changed and the instruction came from an emailed document, the platform holds the payment for the customer's finance lead, who calls the supplier and finds the invoice was forged. The fintech records the event, reviews its privacy notice to confirm it covers the agent's processing of supplier contact data, and adds the case to the agent's test set. Complaints from customers about held payments are handled by staff under CONDUSEF's expectations for clear responses.

Which controls meet the rules?

• Outsourcing assessments of agent platforms and model providers for the CNBV.
• Holds on outgoing payments to new payees or above limits.
• Provenance checks: instructions from emailed documents cannot authorise payments alone.
• Clear cost information and easy complaint routes for CONDUSEF.
• Privacy notices that cover agent processing, and rights requests that reach agent records.
• Decision logs available to supervisors.

For comparison, see which Hong Kong rules apply to AI agents in finance and which Indian rules apply to AI agents in banking. The full map is in AI agent regulation, mapped to controls.