iGaming payments in Mexico

The Ley Federal de Juegos y Sorteos has never been amended since 31 December 1947. It prohibits games of chance nationwide and lets SEGOB permit a short list of exceptions, and everything else lives one level down, in the 2004 Reglamento. Online betting exists because Articles 85 and 86 of that regulation let a permitted establishment take bets 'via Internet, telephone or electronically'. There is no standalone online license; every Mexican gambling site is legally an annex of somebody's land-based permit. That is why the market runs on skins: SEGOB's own registry maps around 119 authorized domains onto 73 permit records held by 43 companies, and the mappings are stranger than the trade press assumes.

A permit family issued in May 2005 and expiring 24 May 2030, whose Producciones Moviles branch carries 78 of those domains, hosts stake.mx, bcgame.mx and roobet.mx: the crypto-casino generation acquired legal Mexican storefronts by renting a twenty-year-old permit. The register also shows how fast the skins machine works procedurally. Ganador Azteca, the TV Azteca vehicle, got its permit on 13 September 2018 for 25 years; an amendment on 7 November 2018 bolted on third-party online operation, DGJS approved the bet365.mx domain three weeks later, and bet365 went live in mid-2019 on somebody else's paper that runs to 2043. The November 2023 decree that trade coverage calls an online crackdown did something narrower: it banned slot machines outright, capped new permits at 15 years, abolished the operator figure, and barred renewal of slot-based permits. Twenty brand-new permits were still registered in February 2024, after the decree, via a court order to a single company whose majority partner the anti-corruption group MCCI later tied to a cartel-linked network. The register, not the statute, is where Mexican gambling law actually happens.

Mexico's biggest gambling enforcement action in memory did not touch a single offshore site. On the night of 11 November 2025 the finance ministry's intelligence unit, the UIF, put 13 casino operators on its blocked-persons list over suspected money laundering, freezing their bank access, and SEGOB suspended their operations the same day, physical floors and ten licensed online domains alike, bet365.mx and betano.mx among them, both riding the Ganador Azteca permit of Grupo Salinas. Two days later, in an explicitly coordinated action, FinCEN issued a finding and proposed rulemaking under Section 311, its first aimed at gambling establishments, naming transactions of ten Mexico-based casinos a class of primary money-laundering concern; the proposed special measure would cut them off from US correspondent accounts, though it imposed nothing yet. OFAC designated 27 targets the same day. The alleged typologies were payment typologies: bets funded through stolen identities, prepaid cards, digital codes, and transfers of unverified origin.

The gambling IEPS jumped from 30% to 50% on 1 January 2026, by a standalone decree published on 7 November 2025 and signed by President Sheinbaum two days earlier. Congress passed it over the industry association's warning that it would push players offshore. The rate is only half the story. For SEGOB permit holders the base stays what it was: amounts received from players minus prizes actually paid and stakes returned, a gross-revenue-like base with a carryforward when prizes exceed a month's take. For foreign operators without a Mexican establishment, a new paragraph of Article 18 sets the base at the total amounts received from participants, in the law's own words 'sin disminucion alguna', with no deduction for prizes at all.

The location tests come from the VAT digital-services regime: a player counts as Mexican if they give a Mexican address, use a Mexican IP or phone number, or pay through an intermediary located in Mexico. The payment rail is itself a nexus. A ten-day transition let pre-2026 services settle at 30%, related parties excluded. The finance ministry projects MXN 5,024.7 million of gambling IEPS for 2026 in the revenue law; the industry association projects the opposite, arguing a 50% gross-base tax collects nothing because nobody rational registers to pay it. Seven months in, the register suggests the industry has the better of the argument.

The design has two quirks a payments professional should know. First, there is no acquirer backstop: the statute puts no withholding duty on Mexican card acquirers or PSPs for payments to unregistered foreign gambling platforms. Instead, Article 18-I of the VAT law shifts the make-up liability to the Mexican user, who is supposed to self-assess the tax as an import. The player, not the processor, is the legal backstop, which is to say there is none in practice. Second, the surveillance layer is stacking: from 1 April 2026 a new Article 30-B of the Federal Tax Code requires digital platforms to give SAT permanent, real-time access to their systems, with the same blocking sanction for refusal. Mexico has built a complete offshore-enforcement machine out of tax law. What it has not done, anywhere, ever, is switch it on.

The AML frame does publish its numbers. Gambling is a 'vulnerable activity' under Mexico's anti-laundering law: operators must identify any player transacting above 325 UMA, MXN 38,126 in 2026, and file a notice to the financial intelligence unit above 645 UMA, MXN 75,665, by the 17th of the following month. The sector filed 202,045 such notices in the first five months of 2026 alone, flagging at least MXN 15.3 billion, against 405,427 notices in all of 2024. Meanwhile the state-built retail rails stay out of the game entirely: Banxico's CoDi has 21.8 million validated accounts and only about a tenth have ever transacted, DiMo reached some 12 million registrations, and no licensed gambling cashier documents accepting either. The rail that matters is plain SPEI, which cleared about seven billion operations in 2025, most of them in exactly the under-MXN-10,000 band where gambling deposits live.

• SPEIdominant

  instant bank transfer

  Banxico instant interbank rail; primary deposit AND withdrawal (about two hours verified at the market leader). In practice runs over STP-issued virtual CLABEs: players are told to pick STP MEX, a SOFOM, as destination bank. CLABE/reference auto-reconciliation is the capability that separates serious providers.

• OXXO Paymajor

  vouchers & cash

  Cash at 20,000+ stores, both directions at the leader: deposits against a 14-digit reference credited in ~5 minutes (store fee MXN 10-13, MXN 10,000/order via aggregators), cash pickup payouts from MXN 220. Bounded by LFPIORPI: identification above 325 UMA, UIF notice above 645 UMA, and a federal cash cap on large prize payments.

• CoDi / DiMo

  instant bank transfer

  Banxico QR/phone instant on SPEI rails; zero documented gambling-cashier adoption (CoDi: 21.8M validated accounts, ~2.2M ever transacted). Watch, do not build on.

• Visa/Mastercard

  local cards

  Live at licensed books with card pre-registration; the leader's own terms warn some issuers block gambling charges, and HSBC strips gambling of rewards accrual, grouping it with cash advances. Debit-leaning in practice; no MCC-blocking mandate exists.

The strange part is what did not happen: the licensed market absorbed the 20-point jump and grew through it. Codere Online, the one operator that publishes Mexican numbers, took EUR 63 million in World Cup stakes, 180% above the 2022 tournament, added roughly 40,000 customers around the event, grew Mexico revenue 21% in the second quarter, and raised its full-year guidance by EUR 20 million at the half-year mark, in the very year the IEPS went from 30% to 50%. Caliente, the market leader, publishes nothing, but Playtech's 30.8% stake in its online holding contributed EUR 55 million of EBITDA and EUR 33 million of dividends in 2025, on an original EUR 17 million investment the company values at more than forty times cost. The industry association claims about 60% of online betting sites serving Mexicans are illegal and warned the tax would feed them; it also reported platforms doubling their customer counts during the tournament, with in-play betting spiking as much as 150% during hydration breaks. Independent sizing is contested, with 2025 online estimates running from about $0.8 billion to $1.35 billion depending on the research house. Nobody's number is authoritative, including the government's.