Money Transmitters and Payments

Registration, technical opinion and perimeter

In brief

The starting point is not the commercial name of the product but the legal flow of funds: who receives, where they receive them, with what habituality, for what consideration and under whose instruction they deliver or transfer them. Once the perimeter is confirmed, the registration and the technical opinion must be prepared as a single, consistent file.

Registration and technical opinion pathway for a money transmitter.
Sequence of perimeter, technical opinion, registration, observations and renewal; the illustration is indicative and the regulatory content remains in the reviewed text.

Contents: ten microblogs

Map of decisions and controls

Map of decisions and controls. Columns: Topic, Risk it resolves and Minimum evidence.
Topic Risk it resolves Minimum evidence
When does a payment model fall within the money transmitter perimeter? The analysis is triggered when a company habitually receives funds or rights in Mexico, charges a consideration and transfers or delivers them in accordance with a sender's instruction. Draw the legal and operational flow of every peso.
Registration pathway before the CNBV for a money transmitter The pathway must treat the favorable technical opinion as a precedent to the registration and coordinate bylaws, representative, domicile, shareholders, beneficial owners and statements. Name an owner for each annex and for each master datum.
The technical opinion is not a general authorization to operate The opinion evidences the existence of minimum AML/CFT controls for the corresponding procedure. Record the exact scope and date of the opinion.
How to schedule the renewal of registration and technical opinion The registration must be renewed every three years and the preparation of the opinion should not wait for the formal window. Create alerts at 12, 9, 6 and 5 months.
Minimum file for a transmitter's first registration The file combines the application letter, accreditation of the representative, corporate information, operating domicile, capital structure, favorable opinion and additional required data. Use a foliated index with version control.
Corporate purpose and reserved activities in a money transmitter A transmitter's purpose is not limited to transmission, but it may not encroach on the operations reserved to exchange centers under article 81-A. Map each statutory verb to a real activity.
How to document shareholders and beneficial owners in the registration The authority needs to understand who participates directly or indirectly in the capital and who exercises effective control. Prepare a direct and indirect cap table.
Statements under oath: how to avoid contradictions A statement must express a verifiable fact as of a cutoff date and have support. Define a cutoff date in each statement.
How to evidence that there is not yet a website or operations The absence of operations is a state that must be capable of being proven, not a phrase of convenience. Define what an operation means for each system.
Matrix for responding to CNBV observations The response must break down each observation into fact, legal basis, evidence, corrective action, owner and date. Assign a unique identifier to each item.

Implementation method

First build a flow-of-funds diagram and a matrix of assertions. Then tie each assertion to bylaws, contracts, manual, system and corporate evidence. The last step is a cross-review: no statement under oath should contradict the product, the website, the manual or the system tests.


When does a payment model fall within the money transmitter perimeter?

Decision point

Distinguish treasury with own funds from receipt on behalf of a sender. Identify ownership, individual instruction, delivery and consideration. A mandate loses force if accounts, messages and reconciliations show a different flow.

Checklist

  1. Draw the legal and operational flow of every peso.
  2. Separate receipt, momentary custody, instruction and delivery.
  3. Validate habituality, consideration and territory before launching.

Observed pattern

In an anonymized internal analysis, the decisive finding was not the technology, but that the contracts and the flow showed local receipt, individual instruction and subsequent delivery to a beneficiary.

How to put it into practice

To close the perimeter, reconstruct an instruction from the contract to the bank statement. Identify when the company obtains availability, how long it holds the funds and what obligation arises toward the beneficiary. Compare that path with a transaction between affiliates financed exclusively with own money. The difference must be reflected in accounting, receipts and messages to the user. If the fee is calculated on the transmitted amount or the delivery depends on an individual order, document why those facts fit or fall outside the legal definition.


Registration pathway before the CNBV for a money transmitter

Decision point

The opinion and the registration form a coordinated pathway, but they produce distinct decisions. The application must start from a master source for name, powers, domicile, shareholders and beneficial owners; then manual, system, statements and supporting documents are added. The critical sequence depends on current signatures and on the described model matching what the platform will do at launch.

Checklist

  1. Name an owner for each annex and for each master datum.
  2. Close the opinion, corporate and registration on a single timeline.
  3. Run a consistency review before signing.

Observed pattern

A private registration checklist revealed that several annexes depended on the same corporate datum; centralizing that datum in a master source avoided contradictory versions.

How to put it into practice

The critical path begins with the documents that condition the others: bylaws, powers and shareholding structure. The team must decide what can be prepared in parallel and what waits for the favorable opinion. Use a signing calendar that considers apostilles, certifications and validity periods, not just the submission date. Before filing the application, select three sensitive data points —domicile, capital and representative— and track them across all annexes. Any difference is resolved at the corporate source and then replicated; it is never corrected only in the final form.


The technical opinion is not a general authorization to operate

Decision point

The opinion observes minimum AML/CFT controls within a procedure and a cutoff date. It does not validate commercial contracts, advertising, data protection or any future product; nor does it prevent supervision from testing whether the control operated. The resolution must be read together with its background, scope, validity and implementation pending items.

Checklist

  1. Record the exact scope and date of the opinion.
  2. Maintain a remediation plan following the resolution.
  3. Avoid commercial messages of comprehensive approval.

Observed pattern

In an anonymized file, the favorable resolution coexisted with open tasks on system, manual and implementation evidence; treating them as closed would have created a supervision risk.

Frequent risk

Presenting it to partners or suppliers as a comprehensive authorization creates an assertion that the document does not support.

How to put it into practice

Read the resolution as a regulatory snapshot and mark which documents were actually assessed. Then confront that snapshot with the product that operates today, including suppliers, channel and system rules. A function deployed after the cutoff may require independent analysis even if the opinion remains valid. In communications with banks or investors, describe the exact effect of the document and avoid verbs such as authorizes, approves everything or certifies the operation. The file must retain both the resolution and the list of matters that remain subject to supervision and improvement.


How to schedule the renewal of registration and technical opinion

Decision point

The one-hundred-fifty-day window should not become the project's start date. Renewal requires evidence from the period: reports, minutes, training, audit, system, handling of observations and corporate changes. A reverse calendar must reserve time to obtain signatures, correct inconsistencies and respond to requests for clarification without compromising the continuity of the registration.

Checklist

  1. Create alerts at 12, 9, 6 and 5 months.
  2. Maintain a living index of regulatory evidence.
  3. Reserve time for observations and signatures.

Observed pattern

A private review showed that reconstructing three years of evidence at the end of the period was more costly than keeping minutes, reports, tests and remediations by quarter.

Frequent risk

Discovering at the end that an old recommendation lacks closure can render a formally complete file insufficient.

How to put it into practice

Build the calendar from the expiration backward and allocate slack for observations, signatures and electronic uploads. At twelve months review findings; at nine confirm audit and manual; at six close system tests; within the formal window consolidate the package. Each milestone must produce a verifiable file, not just a meeting. If a remediation depends on a supplier, include the contractual date and a contingency alternative. Renewal becomes predictable when the file grows during the cycle and not when three years of compliance are attempted to be recreated at the end.


Minimum file for a transmitter's first registration

Decision point

A useful checklist does not merely list documents; it relates requirement, datum, owner, version, signatory and dependency. In this way it is detected that a change in capital or representation affects several statements and annexes. The review must cover legibility, validity, powers and material consistency with bylaws, manual and operational flow.

Checklist

  1. Use a foliated index with version control.
  2. Verify the powers and validity of each signatory.
  3. Cross-check name, domicile and capital across all annexes.

Observed pattern

In an anonymized practice file, a control sheet by requirement, document, version, signatory and date made it possible to detect expired annexes before submission.

Frequent risk

A valid copy can be useless if it accredits a representative different from the one who signs the filing.

How to put it into practice

Test the index with a person who did not take part in the preparation: they must locate each requirement and explain its validity. Mark documents reused by several annexes so that an update does not leave old copies behind. Identifications, powers and receipts require a review of legibility and correspondence with the actual signatory. Add a closure-condition column when the requirement depends on a future act. Finally, generate a frozen copy of the submitted package and a working copy; mixing the two makes it impossible to know what the authority received.

Stress test

A useful test consists of changing the attorney-in-fact after assembling the package. The team must identify all affected pieces, replace powers and identifications, verify signatures and retain the displaced version without confusing it with the one submitted. The index is only closed when the search by person, requirement and date leads to the current document and makes it possible to explain what changed, who authorized it and before which submission it occurred.


Corporate purpose and reserved activities in a money transmitter

Decision point

The corporate purpose may include additional activities, but each verb must be mapped against a real function and an applicable regime. Fund transmission, purchase or sale of foreign currency, technology, promotion and administrative services must be separated. Advertising and product terms also count: a prudent purpose does not correct an offer that promises a reserved activity.

Checklist

  1. Map each statutory verb to a real activity.
  2. Eliminate or narrow descriptions that suggest a reserved activity.
  3. Align bylaws, contracts and advertising.

Observed pattern

An anonymized bylaws review detected broad verbs that, read together with the commercial website, appeared to promise activities different from those actually registered.

Frequent risk

Using broad expressions such as manage, safeguard or exchange without explaining the flow can unintentionally expand the perimeter.

How to put it into practice

Prepare a table with activity, statutory verb, flow of money, counterparty and legal basis. Review foreign-exchange, transmission, technology and promotion separately, because they may coexist without sharing a regime. The analysis must also read buttons, frequently asked questions and receipts: those texts describe the service to the public. When an activity is contemplated but inactive, note that condition and the control that prevents it from being offered. The closure consists of bylaws, contract and digital experience using compatible terms without turning ancillary services into a reserved promise.


How to document shareholders and beneficial owners in the registration

Decision point

The authority needs to see the chain from the shareholders' book to the person who controls. The analysis includes direct and indirect percentages, series, voting rights, agreements, options and powers to appoint management. A chart serves as an index; each link requires support and a common cutoff date.

Checklist

  1. Prepare a direct and indirect cap table.
  2. Attach support for each corporate link.
  3. Explain special rights and non-shareholding control.

Observed pattern

In an anonymized case, the initial organizational chart omitted an intermediate layer; reconstructing the chain from books and constitutive documents changed the identification of the ultimate controller.

Frequent risk

A cap table that adds up to one hundred percent can still conceal contractual control or an omitted intermediate company.

How to put it into practice

Start from the corporate book and advance layer by layer up to the natural persons. For each intermediate company record jurisdiction, constitutive document, percentage and source. Then add rights that do not appear in the arithmetic: vetoes, appointment of directors, options or voting agreements. The conclusion must distinguish the economic owner from the person with control. An independent review must be able to recalculate the chain and obtain the same result. If it cannot, the organizational chart is illustrative, but it does not yet constitute sufficient evidence for the registration.

Stress test

Consider a chain in which no direct shareholder exceeds the relevant percentage, but two vehicles share veto rights and the power to appoint directors. A purely arithmetic calculation would not resolve control. The folder would have to link agreements, bylaws and organizational charts, distinguish ownership from influence and leave a reasoned conclusion about each natural person located at the end of both routes.


Statements under oath: how to avoid contradictions

Decision point

Each statement must formulate a verifiable fact and bound it in time. Before signing it is contrasted with contracts, accounts, web domain, technology environments, reports and governing-body decisions. The words never, none or exclusively require special care because a pilot test or a contracted supplier can render them false.

Checklist

  1. Define a cutoff date in each statement.
  2. Link each assertion to evidence.
  3. Conduct a joint legal-operations-technology review.

Observed pattern

A private file contained declarations prepared by different teams; a matrix of assertions found differences between "no operations", "no users" and "no production system".

Frequent risk

Reusing a statement prepared for another cutoff can turn a recent operational change into a documentary contradiction.

How to put it into practice

Turn each statement into a binary question and note the evidence that makes it possible to answer it. Review pilot environments, already-signed contracts and opened accounts in particular, since they can contradict an assertion of non-existence. The cutoff date must appear in the analysis even if the format does not highlight it. When a fact changes after signing, document the event and assess whether it requires an update or notice. The final control compares the statement with the rest of the file and requires the signatory to be aware of any material exception.

Stress test

Test the statement against a pilot environment that already contains users, test movements and an activated contract. The term 'no operations' could still be correct or turn out to be misleading depending on the nature of those events. The supporting note must classify each record, explain its accounting and operational treatment, set a cutoff date and demonstrate that the signatory knew of the exception before declaring.


How to evidence that there is not yet a website or operations

Decision point

Having no operations or transactional website must be demonstrated with several sources. Databases without records, accounts without operational movements, zero-value reports and dated captures of the non-production environment must coincide. It is also necessary to distinguish an informational site, a reserved domain and an interface capable of accepting instructions.

Checklist

  1. Define what an operation means for each system.
  2. Retain evidence of the cutoff and extraction.
  3. Ensure consistency with zero-value regulatory reports.

Observed pattern

In an anonymized response, the most useful evidence was the reconciliation among empty databases, accounts without operational movements and dated captures of the non-production environment.

Frequent risk

An empty database does not prove the absence of activity if the funding or the instructions were recorded outside the platform.

How to put it into practice

First define which event constitutes an operation: enrollment, funding, acceptance, dispatch or delivery. Then check each system where that event could be recorded, including accounts and the payment provider. The captures must show date, environment and disabled function; an empty screen without context contributes little. For the website, distinguish institutional content from transactional capability and retain the configuration that evidences it. A zero-value response is solid when several independent sources coincide and any test activity is explained.

Stress test

A reserved domain, a landing page and production credentials do not by themselves prove that the service is available, but neither should they be omitted. Confront DNS, deployments, bank accounts, ledger and access logs. If technical activity exists, describe why it does not constitute a user instruction and retain the configuration that prevents a real session from ending in a transmission of funds.


Matrix for responding to CNBV observations

Decision point

The observation is divided by paragraph and by assertion. For each one, legal basis, fact, response, annex, exact location, corrective action and date are recorded. This matrix makes it possible to decide what already existed at the cutoff, what was remedied afterward and what commitment requires follow-up, without mixing defense with promise.

Checklist

  1. Assign a unique identifier to each item.
  2. Cite the exact page or section of the annex.
  3. Close with quality control and proof of submission.

Observed pattern

In an anonymized handling, converting a lengthy official letter into a requirement matrix reduced duplications and made it possible to distinguish existing documents from future remediations.

Frequent risk

Responding by means of a folder of attachments without indicating what each file evidences forces the authority to reconstruct the argument.

How to put it into practice

Number the observations respecting the structure of the official letter and allow sub-items when a request contains several facts. The response must include a brief conclusion and then indicate file, page and section. Separate contemporaneous evidence from documents created to remedy; both serve, but they prove different things. Check that names and dates in the text match the annexes. Before submission, another person must reconstruct two complete paragraphs using only the matrix. If they cannot, references or clarity are still missing.

Stress test

Suppose an observation simultaneously requests shareholding structure, powers and an explanation of a flow. Dividing it into three sub-items makes it possible to assign different sources without losing the reference to the original paragraph. The final review must verify that the cited annexes exist, that the indicated page contains the promised datum and that no brief response contradicts a statement included in another section of the official letter.


Next step

SVA.LAW can review Registration, technical opinion and perimeter within the specific model and turn the Money Transmitters and Payments analysis into decisions, owners and implementation evidence. Start a conversation.