Corporate Lawyers Mexico 2026: Importer Liability & Customs Compliance Rules

Corporate lawyers Mexico-wide are advising manufacturers, mining companies and cross-border importers on an urgent shift in the regulatory landscape: the 2026 amendments to the Ley Aduanera (Mexico’s Customs Law), published in the Diario Oficial de la Federación (DOF), significantly expand importer liability, introduce mandatory verification-of-legal-existence obligations for suppliers, and impose new traceability recordkeeping requirements. These reforms arrive at a moment when nearshoring activity is driving record import volumes across northern Mexico’s industrial corridors. For general counsel, compliance officers and transactional lawyers, the practical consequences are immediate, existing supply agreements, vendor onboarding protocols and M&A due diligence playbooks all require revision before enforcement ramps up.

Executive Summary, What’s Changed and Why GCs Should Act Now

The 2026 Customs Law reforms represent the most consequential expansion of importer liability Mexico has enacted in over a decade. At a high level, three pillars define the new regime:

• Mandatory supplier verification. Importers must now confirm the legal existence, tax registration (RFC) and operational status of every domestic and foreign supplier before goods clear customs. Failure to do so triggers administrative liability, even where the importer had no knowledge of the supplier’s deficiency.
• Expanded joint and direct liability. Under the amended provisions, an importer of record can be held jointly liable for customs infractions attributable to its supplier, including valuation misstatements, classification errors and documentation fraud. The reform shifts the burden of proof: importers must demonstrate they took reasonable verification steps to avail themselves of a compliance defence.
• Traceability obligations. New recordkeeping mandates require importers to maintain end-to-end traceability data, including origin documentation, transportation records, CFDI (electronic invoice) cross-references and warehouse logs, for a minimum of five years, accessible for audit at any time by the Administración General de Aduanas (AGA).

Immediate priorities for GCs: (1) audit all active supplier relationships against the new verification requirements; (2) update standard supply-agreement templates to include customs-compliance representations, audit rights and indemnity clauses; (3) add customs and traceability checks to any pending M&A due diligence. The sections below provide the step-by-step compliance playbook, sample contract language and M&A due diligence customs Mexico matrices needed to operationalise these priorities.

The Mexico Customs Law 2026 Reforms, Legal Text and Practical Interpretation

The amendments to the Ley Aduanera were published in the DOF as part of a broader package of fiscal and trade-facilitation reforms. The decree modifies, adds and restructures several key articles of the Customs Law, with the stated legislative purpose of strengthening supply-chain integrity, combating smuggling and tax evasion, and aligning Mexico’s customs framework with OECD trade-facilitation standards.

Which Articles Changed

The core amendments affect the following provisions of the Ley Aduanera:

• Article 59 (importer obligations). Expanded to include an express duty to verify the legal existence and tax-compliance status of suppliers prior to importation. The provision now requires importers to obtain and retain documentary evidence of RFC validity, corporate registration and active tax status from SAT’s public consultation tools.
• Article 108 (temporary imports under the IMMEX programme). Amended to extend traceability obligations to all goods imported under maquila and shelter-company regimes, closing a gap that previously allowed certain IMMEX participants to rely on simplified documentation.
• Article 176 and 178 (customs infractions and penalties). Revised to establish joint liability for importers whose suppliers commit infractions such as undervaluation, false certificates of origin or incorrect tariff classification, provided the importer failed to conduct the verification procedures set out in Article 59.
• New Article 59-A (traceability). A newly inserted provision creating a standalone traceability framework that specifies data-retention requirements, minimum data fields, retention periods and the obligation to make records available electronically to AGA upon request.

Administrative vs Criminal Penalties

The reform maintains a two-track penalty structure. Administrative infractions, such as failure to verify supplier status or incomplete traceability records, trigger fines calculated as a percentage of the transaction value, ranging from 70% to 100% of unpaid duties, plus potential seizure of goods. Criminal liability under the Código Fiscal de la Federación (Federal Tax Code) remains reserved for cases involving fraud, smuggling or intentional misrepresentation, but the expanded administrative provisions significantly lower the threshold at which an importer faces material financial exposure.

Timeline and Enforcement Expectations

Industry observers expect the AGA to adopt a phased enforcement posture, prioritising high-risk sectors (automotive, electronics, mining and steel) during the initial audit cycles before broadening scope. Early indications suggest that the regulator will treat demonstrable good-faith compliance efforts favourably, making prompt implementation a strategic advantage.

Expanded Importer Liability Mexico, Scope and Corporate Risk Matrix

Under the previous regime, importer liability Mexico rules were largely limited to the importer of record’s own declarations. The 2026 amendments fundamentally alter that framework by extending liability upstream into the supply chain. Where a supplier provides false or incomplete documentation, for example, an incorrect certificate of origin or a misclassified tariff heading, the importer now faces joint administrative liability unless it can demonstrate that it completed the mandatory verification procedures before importing.

This is not strict liability in the purest sense: the reforms create an affirmative-defence mechanism. An importer that can produce evidence of having verified the supplier’s legal existence, RFC status and documentation accuracy under Article 59 may reduce or eliminate its joint-liability exposure. However, the practical effect is to impose a quasi-strict standard, because the verification burden is extensive and the penalties for incomplete verification are severe.

Examples: Manufacturing Imports and Mining Equipment Imports

For manufacturers operating under the IMMEX programme, particularly in the automotive and aerospace sectors along Mexico’s northern border, the reforms mean that every tier-one supplier must be re-verified. A maquiladora importing sub-assemblies from a domestic supplier that turns out to have an inactive RFC or a suspended tax status now faces potential seizure of the goods at the customs yard, plus fines equivalent to the full duty value.

Mining companies importing heavy equipment and consumables face analogous risks. Equipment imported under preferential tariff classifications (such as those available under USMCA or the Pacific Alliance trade agreements) now requires verified proof-of-origin documentation traceable to the supplier. If the supplier’s documentation is deficient, the importer loses the preferential tariff rate and faces retroactive duty assessment, plus the new joint-liability penalties.

Penalties, Fines and Seizure Risk

The penalty matrix under Articles 176 and 178 includes fines of 70–100% of underpaid duties, seizure (embargo precautorio) of goods pending investigation, and potential suspension of the importer’s padrón de importadores (importer registry) listing. Suspension of the padrón effectively halts all import operations, making it an existential risk for companies dependent on cross-border supply chains.

Verify Legal Existence and Tax Status of Suppliers, Step-by-Step Checklist

One of the most operationally demanding elements of the 2026 reforms is the requirement to verify the legal existence of suppliers before goods enter the customs process. Corporate lawyers in Mexico are developing standardised onboarding protocols that procurement teams can execute consistently. The following customs compliance checklist for importers captures the minimum verification steps now required:

Quick Online Checks (Public Registries and SAT Consulta)

• Step 1, RFC validation. Use the SAT’s online “Consulta de Contribuyentes” tool to confirm the supplier’s Registro Federal de Contribuyentes (RFC) number is active and not listed on the SAT’s Article 69-B “blacklist” of taxpayers with simulated operations (EFOS/EDOS lists).
• Step 2, Tax-compliance status (opinión de cumplimiento). Request the supplier’s current SAT opinión de cumplimiento, which confirms the entity is up to date on tax filings and payments. This document is available digitally via the SAT portal.
• Step 3, Public registry extract. Obtain a current extract (constancia de inscripción) from the Registro Público de Comercio confirming the supplier’s corporate registration, legal representatives and current status.
• Step 4, EFOS/EDOS screening. Cross-reference the supplier against the SAT’s published lists of entities presumed to issue invoices for simulated operations (Article 69-B of the Código Fiscal de la Federación). This check should be repeated quarterly.
• Step 5, Padrón de importadores / exportadores. Where the supplier itself imports or exports, confirm it holds an active listing on the relevant padrón.

Documents to Request and Sample Verification Language

• Step 6, Constitutional documents. Request copies of the supplier’s acta constitutiva (articles of incorporation) and any amendments, certified by a public notary (fedatario público).
• Step 7, Power of attorney. Obtain a copy of the power of attorney (poder notarial) for the individual signing commercial agreements, confirming they have authority to bind the entity.
• Step 8, Proof of address. Request official proof of the supplier’s registered business address (comprobante de domicilio fiscal) matching the address registered with SAT.
• Step 9, Customs authorisations and certifications. For suppliers handling regulated or sensitive goods, request copies of sector-specific permits, NOM certifications or IMMEX programme registration.
• Step 10, CFDI verification. Confirm that the supplier’s electronic invoices (Comprobantes Fiscales Digitales por Internet) are validated on the SAT platform and that the RFC on invoices matches the verified RFC.
• Step 11, Anti-money-laundering screening. Run the supplier against relevant AML watchlists and sanctions databases, including the OFAC SDN list and Mexico’s Unidad de Inteligencia Financiera (UIF) alerts.
• Step 12, Annual re-verification. Establish a calendar-driven re-verification process. Legal existence and tax-compliance checks should be refreshed at least annually; EFOS/EDOS screening should be quarterly.

Sample contractual language for onboarding: “The Supplier represents and warrants that it is duly incorporated and existing under the laws of Mexico, that its RFC is active with SAT, that it is not listed on any EFOS/EDOS list published under Article 69-B CFF, and that it will promptly notify the Buyer of any change to its tax or corporate status. The Supplier shall provide updated documentation upon request and no less than annually.”

Traceability Obligations Mexico, What to Record, How Long, and Technology Options

Article 59-A of the amended Ley Aduanera establishes a standalone traceability framework that applies to all importers, regardless of sector or import volume. Traceability obligations Mexico-wide now require end-to-end documentation from the point of origin to the final destination warehouse.

Minimum Traceability Data Points

Under the new framework, importers must capture and retain the following as a minimum:

• Supplier identity and verified legal-existence documentation
• Purchase orders, commercial invoices and CFDI cross-references
• Certificates of origin and preferential-tariff declarations
• Transport documentation (bill of lading, waybill, carrier identity)
• Customs declaration (pedimento) references
• Warehouse receipt and inventory records at destination
• Quality inspection and NOM compliance certificates (where applicable)

Integration with Customs Declarations

The traceability data must be cross-referenced with the electronic pedimento (customs declaration) and the corresponding CFDI. AGA auditors are expected to use automated data-matching tools to identify discrepancies between declared values, invoice amounts and transport records. Companies whose ERP systems already integrate SAT’s CFDI validation API will be positioned for faster compliance; those relying on manual documentation will need to invest in system upgrades.

Enforcement and Audits

AGA has signalled that traceability audits will be both random and risk-triggered. The likely practical effect will be that companies in high-risk sectors, automotive, steel, mining, electronics and textiles, face higher audit frequency. Retention periods of five years align with the existing statute of limitations for customs infractions under the Código Fiscal de la Federación, meaning records must be audit-ready for a full five-year window from the date of importation.

M&A Due Diligence: Customs and Tax Checks to Add to Your Diligence Pack

For transactional lawyers, the 2026 reforms transform M&A due diligence customs Mexico protocols. Any acquisition of a company that imports goods, whether as an IMMEX participant, a distributor or a mining operator, now requires a dedicated customs-compliance diligence workstream. The failure to identify pre-existing customs liabilities can result in successor liability for the acquirer, making this an essential risk-assessment step.

Sample Diligence Request List

When to Escalate to Regulator Counsel

If diligence reveals open AGA proceedings, EFOS-listed suppliers in the target’s supply chain, or material gaps in traceability records, the acquirer should engage specialist customs counsel before proceeding. Industry observers expect regulators to scrutinise post-acquisition compliance more closely, given the new joint-liability provisions.

Structuring Deal Protections

Where customs risk is identified, deal documentation should include:

• Specific representations and warranties covering customs compliance, padrón status, supplier verification and traceability recordkeeping
• Indemnity carve-outs for pre-closing customs liabilities, including any penalties arising from the seller’s failure to comply with Article 59 or 59-A
• Escrow or holdback provisions sized to the estimated exposure from identified customs risks
• Conditional closing mechanisms where material customs liabilities remain unresolved

Contract Drafting and Commercial Levers to Limit Importer Liability

Supply-chain compliance Mexico-wide now depends heavily on the contractual architecture between importers, suppliers and logistics providers. Corporate lawyers in Mexico are redrafting standard supply agreements to include the following protective provisions:

Clauses for Manufacturers and Mining Contracts

Supplier compliance representation: “The Supplier represents that it is in full compliance with Articles 59 and 59-A of the Ley Aduanera and all applicable SAT and AGA regulations. The Supplier shall maintain accurate traceability records and make them available to the Buyer within five (5) business days of any written request.”

Audit rights clause: “The Buyer shall have the right, upon reasonable notice, to audit or cause to be audited the Supplier’s customs compliance records, traceability documentation, and tax-status certifications. The Supplier shall cooperate fully with any such audit, including by providing access to its premises, systems and personnel.”

Indemnification clause: “The Supplier shall indemnify, defend and hold harmless the Buyer from and against any and all losses, fines, penalties, seizures, customs duties and associated costs arising from the Supplier’s failure to comply with applicable customs laws, including any infraction under Articles 176 or 178 of the Ley Aduanera attributable to the Supplier’s acts or omissions.”

When Limitation Clauses May Not Be Enforceable

Under Mexican commercial law (Código de Comercio) and applicable civil law principles, indemnification clauses are generally enforceable between commercial parties. However, practitioners should note that clauses purporting to limit liability for criminal conduct or to override mandatory regulatory obligations may be struck down. Additionally, where the importer’s own negligence contributed to the infraction, for example, by failing to conduct the required verification despite having the contractual right to do so, a court may limit the scope of indemnification. Careful drafting that ties indemnity triggers to specific statutory obligations, rather than blanket exculpation, is therefore essential.

Compliance Programme Checklist and Rollout Plan (90-Day Action Plan)

The following 90-day action plan provides a phased implementation roadmap for GCs and compliance managers:

Days 1–30, Immediate actions:

• Conduct a gap assessment of current supplier-verification practices against Article 59 requirements
• Identify all active suppliers and rank them by risk (import volume, sector, prior compliance issues)
• Engage customs counsel to review existing supply agreements and flag non-compliant clauses
• Issue internal communication to procurement, operations and finance teams outlining the new obligations

Days 31–60, Medium-term actions:

• Deploy updated supplier-onboarding protocols incorporating the 12-step verification checklist
• Begin re-verification of existing tier-one suppliers (RFC validation, EFOS/EDOS screening, SAT opinión de cumplimiento)
• Configure ERP or recordkeeping systems to capture traceability data points required by Article 59-A
• Negotiate updated contract terms with key suppliers and customs brokers

Days 61–90, Monitoring and readiness:

• Complete re-verification of all active suppliers; document results and retain evidence
• Conduct an internal mock audit simulating an AGA traceability review
• Establish quarterly EFOS/EDOS screening calendar and annual re-verification reminders
• Report compliance status to the board or audit committee

Enforcement Scenarios and Likely Regulatory Posture, Practical Examples

To illustrate how the new rules are likely to operate in practice, consider two hypothetical scenarios:

Scenario 1, Automotive maquiladora. A Monterrey-based IMMEX manufacturer imports sub-assemblies from a domestic supplier whose RFC was cancelled by SAT six months ago due to non-filing. Under the 2026 rules, AGA identifies the discrepancy during a risk-based audit. Because the maquiladora did not verify the supplier’s tax status before clearing goods, it faces joint liability for the full duty amount, fines of up to 100% of underpaid duties and potential seizure of goods in the customs yard. Had the company run a quarterly EFOS/EDOS and RFC check, it would have identified the issue and either remediated with the supplier or sourced from a compliant alternative, and could assert the Article 59 compliance defence.

Scenario 2, Mining equipment import. A Sonora-based mining company imports drilling equipment under a USMCA preferential tariff, relying on a certificate of origin provided by the foreign supplier. AGA audits the transaction and determines the certificate was inaccurate, the equipment does not meet the rules-of-origin threshold. Under the expanded liability framework, the mining company is jointly liable for the tariff differential plus penalties, even though the origin error originated with the supplier. The recommended mitigation: the importer should have included a contractual warranty on the accuracy of origin certifications and retained its own verification records, enabling it to seek full indemnification from the supplier and demonstrate compliance efforts to AGA.

Early indications suggest that companies that can present a documented compliance programme, verification records, traceability logs, contractual protections and internal audit results, will be in a stronger position to negotiate reduced penalties or avoid escalation to criminal proceedings.

Why Corporate Lawyers in Mexico Must Act Now, Conclusion and Recommended Next Steps

The 2026 Customs Law reforms mark a structural shift in how Mexico allocates compliance risk across the import supply chain. For corporate lawyers Mexico-wide, the message is clear: reactive compliance is no longer sufficient. Companies that delay implementation face not only fines and seizure but the existential risk of padrón suspension, which halts all import operations.

The practical steps outlined in this guide, from the 12-step supplier verification checklist to the M&A due diligence customs Mexico matrix, sample contract clauses and the 90-day rollout plan, provide an actionable framework for immediate implementation. Organisations operating in manufacturing, mining, automotive and electronics should treat customs compliance as a board-level priority and allocate resources accordingly.

For tailored guidance on importer liability Mexico exposure, supply-chain compliance Mexico operational strategies, or M&A deal structuring in light of the 2026 reforms, engaging experienced corporate and customs counsel is the critical next step.

Sources

1. Diario Oficial de la Federación (DOF), Official Gazette of Mexico
2. Ley Aduanera, Consolidated Text (Cámara de Diputados)
3. Servicio de Administración Tributaria (SAT), Mexico Tax Administration
4. Garrigues, Client Alert on Mexico Customs Law Reforms
5. Prodensa, Business Advisory on Mexico Trade Compliance
6. C.H. Robinson, Logistics Perspective on Importer Risk in Mexico
7. OECD, Trade Facilitation and Customs Compliance Guidelines