#
Mexico's Chamber of Deputies Finance Committee approved the draft Ley de Economía Digital para Pagos Digitales y Electrónicos on 1 October 2026 (24-4), building on SPEI/CoDi/DiMo infrastructure and introducing a digital CURP/citizen digital file for financial-service contracting; this sits alongside Banxico's parallel 'Fintech Law 2.0' consultation and proposed reforms to SPEI Circulars 3/2012 and 14/2017.
In Mexico, the CNBV authorises e-money institutions as IFPEs (Instituciones de Fondos de Pago Electrónico) under the 2018 Fintech Law, subject to the prior favourable opinion of an inter-institutional committee that includes SHCP and Banxico. The IFPE is the largest fintech category, with roughly 87-88 active institutions and 89 total ITF authorisations by mid-2025. It is the principal non-bank e-money authorisation in Mexico and the legal basis for the country's dominant wallet and neobank cohort, including Mercado Pago, Klar and Spin. This claim is held at High confidence: multiple law-firm guides support it but no Tier-1 anchor is present.
Outlook
Both the Brazilian PI regime and the Mexican IFPE regime are established standing positions rather than moving targets, and the trajectory is stable. The forward watch items sit in adjacent modules — safeguarding rules, AML supervision and settlement access — rather than in the licensing perimeter itself. Crypto and financial-promotion enforcement across LATAM was not separately searched to quota this cycle and is flagged for periodic follow-up.
Licensing, Authorisation & Market Access
Mexico's payments-regulation perimeter moved on two tracks this cycle. The Chamber of Deputies passed a Digital Payments Law on 6 October 2026 that would empower the finance ministry to mandate digital-only payment acceptance in specified sectors, beginning with highway tolls and fuel, and would require federal, state and municipal government bodies to accept digital payment. The bill is draft primary legislation — it has cleared the lower house and now moves to the Senate, with enactment not yet secured. Separately, Banxico Circular 9/2026 sets a compliance deadline of 14 December 2026 for direct and indirect SPEI participants to adapt their banking apps to standardised mobile-transfer guidelines, a binding operational requirement already in force rather than a proposal. The two instruments sit at different stages of the legislative-regulatory pipeline: the Digital Payments Law is prospective and contingent on Senate passage, while the Circular 9/2026 deadline is a confirmed near-term compliance date that institutions must meet regardless of the legislative outcome. Together they signal sustained regulatory attention on digitising payment acceptance and standardising mobile-transfer infrastructure in Mexico's licensed payments sector, with the SPEI participant population — both direct and indirect — carrying the immediate operational burden.
Outlook
The Digital Payments Law's progress through the Senate is the development to watch into Q4 2026; if enacted, the finance ministry's sector-by-sector mandate authority, starting with tolls and fuel, would materially expand mandatory digital-payment acceptance obligations on affected merchants and government bodies. The nearer-dated marker is the 14 December 2026 Banxico Circular 9/2026 compliance deadline, which SPEI participants must meet irrespective of the legislative track.
6 earlier distinct update(s)
Licensing, Authorisation & Market Access
Mexico's Chamber of Deputies Finance Committee approved the draft Ley de Economía Digital para Pagos Digitales y Electrónicos by a vote of 24 to 4 on 1 October 2026, as part of President Sheinbaum's 2027 Economic Package. The draft introduces a digital CURP, or citizen digital file, intended to support financial-service contracting, and proceeds next toward a full legislative vote. Separately, Banxico's own reporting shows the Fintech Law framework, now eight years old, has produced 89 authorisations to date, but zero approvals under the law's Modelos Novedosos regulatory-sandbox category -- a gap that accompanying commentary flags as a pending question for market consolidation and innovation uptake in Mexico's licensed fintech sector.
Outlook
The draft digital-payments law's full legislative vote is expected in the fourth quarter of 2026; its passage would introduce a new digital-identity layer into Mexican financial-service contracting. The continued absence of any approved regulatory-sandbox model under the Fintech Law remains a standing feature of the licensing landscape to watch for change.
Licensing, Authorisation & Market Access
Brazil's payments-licensing perimeter underwent a structural tightening this cycle. Banco Central do Brasil Resolution 494 revoked the prior exemption model, under which payment institutions below certain financial-volume or transaction-count thresholds had not required prior authorisation, and replaced it with a universal prior-authorisation requirement applying to every payment institution regardless of size. A single filing window ran from 1 to 31 May 2026 for institutions needing to regularise their status under the new regime.
The evidence available this cycle points to a materially stricter authorisation pipeline accompanying this rule change, with a slower pace and higher denial rate observed in the January-April 2026 period compared with the full prior year. This is consistent with a regulator moving from a permissive, threshold-based market-access model to a more restrictive, universally applied gatekeeping model, and the effect falls specifically on non-bank payment institutions that previously operated under the volume exemption; bank-affiliated payment service providers, already subject to banking-licence authorisation, are less directly affected by this specific change even where they compete in the same payment-services market.
This is best read as a structural shift in market-access conditions rather than a single enforcement event. The removal of the exemption model changes the default posture for every new entrant and for existing smaller institutions that had previously operated below the threshold, and the timing -- a defined filing window followed by observable tightening in outcomes -- suggests the new regime is being actively administered rather than merely declared.
Outlook
The key open question is whether the stricter authorisation pipeline observed in the early months of the new regime is a transitional adjustment as the market works through a backlog of filings under the new universal requirement, or a durable feature of BCB's revised approach to payment-institution licensing. Institutions that missed or are still working through the May 2026 filing window, or that are newly entering the Brazilian market, should expect the observed denial-to-authorisation ratio to be a more reliable guide to near-term market-access conditions than the pre-Resolution 494 baseline.
Licensing, Authorisation & Market Access
Brazil's licensing perimeter for virtual-asset service providers crossed a firm threshold this cycle. The Banco Central do Brasil's VASP authorization regime, created under Resolutions 519 through 521, entered force on 2 February 2026. The regime imposes minimum capital requirements ranging from BRL 10.8 million to BRL 37.2 million depending on the activity conducted, and provides a 270-day grandfathering window running to 30 October 2026, after which unauthorized providers lose the ability to operate as authorized VASPs. This is a bank-and-nonbank-both licensing regime: it applies across the market-access spectrum rather than being confined to bank-affiliated entities, extending Brazil's payments-market-access architecture to a previously unauthorized activity category.
Mexico's licensing landscape, by contrast, remains at the proposal stage. The country's fintech industry is pushing the securities regulator CNBV, under new head Ángel Cabrera, for a Fintech Law 2.0 with tiered licensing and open-finance rules. This push launched in June 2026, but on the single source available to this monitor it has not yet converted into formally filed legislation, and confidence in the trajectory of this reform is accordingly Uncertain. Unlike Brazil's completed rule-entry-into-force, Mexico's development remains industry advocacy for regulatory change rather than a market-access development that has yet occurred.
Argentina presents a third pattern: incremental tightening of an existing registration perimeter rather than the creation of a wholly new licensing category. The Comisión Nacional de Valores, Argentina's securities regulator, updated its PSAV, proveedor de servicios de activos virtuales, registration requirements through General Resolution 1058/2025, amended by Resolution 1139/2026. The updated requirements impose net-worth and documentation thresholds, and they apply not only to domestically incorporated providers but explicitly to foreign providers targeting Argentine users. This extraterritorial reach is a notable market-access feature: it means the registration perimeter is defined by the location of the targeted user base rather than solely by the provider's place of incorporation, which has direct implications for any foreign virtual-asset service provider marketing to Argentine users without a local registration.
Across all three jurisdictions, the licensing story this cycle is one of divergent speed and divergent mechanism. Brazil completed its rule-making and entered a defined implementation window; Argentina tightened an existing framework's thresholds and extraterritorial reach; Mexico remains at the industry-advocacy stage with no confirmed legislative vehicle yet. The bank-versus-nonbank distinction is most sharply drawn in Brazil, where the new VASP authorization category sits alongside, rather than replacing, existing bank-based payment licensing, meaning institutions must now track two parallel authorization tracks for any counterparty engaged in both traditional payments and virtual-asset activity.
Outlook
Brazil's 30 October 2026 grandfathering cliff is the domain's clearest near-term deadline; the next cycle should reveal whether the transition from unauthorized to authorized VASP status proceeds cleanly across the market or whether meaningful gaps persist. Mexico's Fintech Law 2.0 push bears watching for any move from industry advocacy toward a formally filed legislative text, which would represent a material escalation in confidence and materiality. Argentina's extraterritorial PSAV registration requirement may prompt further clarification or enforcement guidance regarding what specifically constitutes targeting Argentine users, a definitional question with direct market-access consequences for foreign providers.
Licensing, Authorisation & Market Access
Brazil's Central Bank tightened Pix payment-institution authorisation this cycle through Resolution 506, adopted 26 September 2025, which revised the authorisation criteria set under the original Resolution 1/2020. This is assessed at probable confidence from a tier-4 secondary summary; no tier-1 primary BCB.gov.br host was independently reached this pass, and the finding should be read with that sourcing caveat in mind. Alongside this, a separate activity-tied minimum-capital rule now distinguishes between Pix-offering and non-Pix prepaid institutions: those offering Pix must hold BRL 17.4 million in capital, versus BRL 12.4 million for institutions that do not, with the rule phasing in from 1 July 2026 to the full amount by January 2028. This is a bank-PSP versus non-bank-PI/EMI distinction rendered explicit by the regulation itself: non-bank payment institutions and e-money institutions offering Pix now face a materially higher capital bar than their non-Pix counterparts, while bank-PSPs offering the same functionality are presumably already subject to bank-level prudential capital regimes and are not the direct target of this activity-tied rule.
The market-access implication is that Brazil's non-bank PI/EMI sector faces a rising capital floor tied specifically to Pix participation, which functions as a de facto market-structure filter: smaller non-bank fintechs offering Pix will need to scale capital reserves substantially over the 2026-2028 phase-in window or exit Pix-offering status. This is architecture rather than incident: a structural recalibration of who can participate in Brazil's dominant instant-payment rail as a non-bank institution, rather than a single enforcement action against a named firm.
Separately, and with materially weaker sourcing, Mexico's Fintech Law 2.0 is characterised in trade press as requiring crypto custodians to maintain a minimum capital threshold of US$200,000, tied to the national digital-identity framework. This rests on a single tier-4 blog source, and no primary Banxico or CNBV text was independently reached this pass. This finding is held at uncertain confidence and should not be treated as a settled characterisation of Mexican law; it is flagged explicitly as an area of Mexican primary-source under-indexing relative to the depth of Brazilian sourcing achieved this cycle.
Read together, these two national developments describe a region where licensing and market-access requirements are tightening unevenly: Brazil's tightening is well-evidenced and specific, while Mexico's is asserted but not yet independently verified. This unevenness is itself a finding worth carrying forward: LATAM payments-licensing coverage this cycle is asymmetric across its two largest fintech markets.
Outlook
Watch for the 1 July 2026 commencement of Brazil's phased capital-rule implementation as the first observable market-structure effect of this tightening, and watch for whether smaller non-bank Pix-offering institutions begin exiting or consolidating in response. Separately, watch for whether primary Mexican regulatory text becomes available to confirm or revise the current uncertain-confidence characterisation of the crypto-custodian capital threshold. This is analytical orientation on the regulatory operating environment, not compliance instruction.
Licensing, Authorisation & Market Access
Brazil's cross-border electronic FX (eFX) authorization framework has been restructured this cycle through BCB Resolution 561, published 30 April 2026 and effective 1 October 2026. The resolution restricts eFX activity to specified BCB-authorized institution types, narrowing the population of entities permitted to operate in this channel, and requires affected providers to update their registration through the Unicad system by 30 October 2026. Providers that are not currently authorized may continue operating on a transitional basis but must apply for BCB authorization by 31 May 2027 or exit the market; this is a bank-and-non-bank-relevant distinction, since both bank-affiliated FX desks and non-bank payment institutions currently active in the eFX channel fall within the restructured perimeter and must separately confirm their authorization status against the new institution-type criteria.
Layered onto the eFX restructuring is a separate, already-in-force capital requirement for participants in Brazil's domestic instant-payment scheme, Pix: since 1 January 2026, Pix participants must maintain a minimum net equity of BRL 5 million, in addition to existing AML/KYC and LGPD data-protection obligations. Together, these two developments show Brazil tightening market-access conditions on two related but distinct payment rails within the same regulatory season — the domestic instant-payment scheme via capital adequacy, and the cross-border FX channel via authorized-institution-type restriction — rather than a single unified licensing reform.
Outlook
The near-term compliance calendar for market participants is dense: eFX providers must reconcile their institution-type status against Resolution 561 by the 1 October 2026 effective date, update Unicad registration by 30 October 2026, and unauthorized international payment providers face a longer-dated 31 May 2027 authorization deadline. Whether non-bank payment institutions currently active in the eFX channel will qualify under the BCB-authorized institution types named in Resolution 561 is the key open question for market-access purposes and should be the focus of the next research cycle.
Licensing, Authorisation & Market Access
Brazil's Banco Central has established the region's most comprehensive licensing and market-access regime for virtual-asset service providers this cycle. Resolutions 519, 520 and 521 create a formal SPSAV authorization framework, with capital requirements ranging from R$10.8 million to R$37.2 million depending on activity scope, in force since February 2, 2026. Firms already operating in Brazil's virtual-asset market have a 270-day transition window, running to October 30, 2026, within which to notify or apply for BCB authorization; any firm that does not secure authorization by that deadline must cease operations and migrate client assets within 30 days. This is a tier-one, high-confidence finding directly sourced to the Banco Central's own press materials, and it applies across both bank and non-bank market participants — the regime does not carve out a lighter-touch path for non-bank virtual-asset operators relative to banks entering the same activity.
A related instrument, expected around May 2026, would add a further market-access precondition: independent CVM-registered audits as a requirement before licensing is granted. This raises the bar specifically for non-bank applicants, who are less likely to already maintain CVM-standard audit relationships than bank entrants, and represents a second, distinct market-access control layered on top of the core capital-and-authorization requirement in Resolutions 519-521.
The bank-versus-non-bank distinction carries particular weight in Brazil's case because the new capital thresholds — R$10.8 million to R$37.2 million — sit well above the capitalization levels many smaller, non-bank virtual-asset platforms have historically operated with in the region's light-touch VASP environment. Banks entering the same VASP authorization category are likely to clear the capital bar more readily given existing prudential capital bases, meaning the practical market-access effect of Resolutions 519-521 may be a consolidation of Brazil's non-bank VASP sector toward fewer, better-capitalized players, alongside increased participation from bank-affiliated entities entering the space under the same licensing umbrella.
In Mexico, market-access dynamics this cycle are shaped less by a new licensing instrument than by the continuing partial implementation of an existing one. Open-finance API-sharing obligations under Fintech Law Article 76 remain only partially in force: ATM-location and branch-data sharing obligations are active, but secondary rules governing transactional-data sharing were still pending as of January 2026. This is a market-access-relevant gap because it affects the conditions under which non-bank fintech entrants can build products dependent on transactional data access from incumbent banks — a structurally different market-access constraint than Brazil's capital-and-audit-based licensing model, but one that similarly shapes which categories of firm can compete on equal footing.
Read together, these two jurisdictions illustrate different modes of market-access control operating in the region at the same time: Brazil moving to a comprehensive, capital-and-audit-gated authorization model for a previously unlicensed activity category, and Mexico continuing a slower, rule-by-rule implementation of an already-legislated open-finance mandate.
Outlook
Brazil's October 30, 2026 transition deadline is the defining near-term market-access event in the region: it will determine how many existing virtual-asset operators can meet the capital, audit and authorization bar, and by extension how concentrated the post-transition Brazilian VASP market becomes. The pending CVM-audit precondition adds a further filter likely to weigh more heavily on smaller non-bank entrants than on bank-affiliated applicants. In Mexico, the pace at which transactional-data-sharing secondary rules are finalized will determine when the open-finance market-access mandate moves from partial to full implementation, a milestone still without a confirmed date as of this cycle.
Sources and findings (6)
- T1Law No. 12.865/2013 (Brazil payments) — Planalto/BCB
- T1BCB Resolution #495/2025 and Resolution #80 (BCB official)
- T1World Bank FPS Brazil/Pix case study
- T1Ley para Regular las ITF (Fintech Law) — CNBV (gob.mx)
- T1Fintech Law (ITF/IFPE authorisation) — CNBV (gob.mx)
- T3Mexico Business News