⏱ 7 min read
In February 2026, Mexico’s Ministry of Labor (STPS) automatically cancelled 42,300 REPSE registrations due to non-renewal or missed reporting. In August 2025, authorities had already flagged 14,455 registered companies with social security debts — many slated for imminent cancellation.
Behind each of those cancelled registrations is a B2B client who signed a contract months earlier, validated the REPSE at that moment, found it active, and proceeded with confidence. Today, that same client is exposed to fines, lost deductions, and joint liability for the IMSS contributions their vendor stopped paying.
The uncomfortable but clear conclusion: an active REPSE at signing doesn’t guarantee it’ll still be active in six months, three months, or next week.
Why initial validation doesn’t protect you
Mexico’s 2021 labor reform made clear that you, as a company contracting specialized services, are jointly liable for any social security and labor obligations your vendor fails to meet.
That means if your vendor loses their REPSE during the contract — or stops filing their ICSOE reports with IMSS or SISUB with INFONAVIT — the consequences reach you too:
- SAT rejects deductions for invoices issued after the registration was lost
- IMSS and INFONAVIT can require direct payment of contributions your vendor failed to remit
- Your operations get exposed to classification as EDOS (Company that Deducts Simulated Operations) at SAT
- Fines can range from MXN 234,600 to 5,865,500 per affected contract
Real-world cases show the actual numbers: a construction company fined MXN 1.95M plus joint liability of MXN 2.1M; a client who lost MXN 4.2M in deductions due to a maintenance contractor without valid REPSE at invoice time.
The 4 risks that reach you even when you did everything right
1. Automatic joint liability
You don’t need to know your vendor defaulted. If IMSS or INFONAVIT detect debt, they can charge you directly.
2. Retroactively rejected deductions
SAT doesn’t only block future invoices: it can challenge past ones if it determines the REPSE wasn’t valid at the time of the operation.
3. Cascade audits
An EDOS classification triggers in-depth reviews of your tax filings for the past five years.
4. Chain contract cancellations
A cleaning company in Querétaro lost its REPSE for missing three consecutive ICSOE reports. Result: 15 contracts cancelled and fines of MXN 704,100. Its clients had to reorganize operations on the fly.
The three validation phases that actually protect you
Before: pre-contract validation
This phase is what most companies already do, but it’s often done poorly:
- Check STPS public registry by vendor RFC
- Request current registration notice with activity folios
- Verify that authorized activities match the contracted service
- Request tax and social security compliance certificates
- Validate corporate purpose and CFDI payroll records for assigned personnel
If this initial check doesn’t cover all five points, you’re already starting with assumed risk.
During: active relationship monitoring
This is the phase almost nobody covers, and where most problems live:
- Verify the REPSE registry monthly, not just at signing
- Request quarterly evidence from the vendor of ICSOE and SISUB filings
- Confirm RFC remains active in the registry and doesn’t appear on SAT 69 or 69-B lists
- Cross-check received invoices against authorized activities in their registration
- Validate IMSS and INFONAVIT payments via vendor certificates
Critical reminder: REPSE registration is valid for 3 years. Renewal must be requested in the 3 months prior to expiration. If your vendor doesn’t request it on time, STPS cancels automatically — with no advance notice to clients.
Always: continuous environmental vigilance
Your vendor can be in good standing with STPS but appear on other lists that disqualify them as a safe counterparty. Continuous monitoring of official watchlists is a discipline in itself:
- SAT 69 lists (firm credits) and 69-B (simulated operations)
- Updated IMSS ICSOE
- FONACOT affiliation registry — Affiliated Workplaces (a positive signal: the employer meets its obligations toward formal workers)
- Sector-specific sanctions (CNBV, COFEPRIS, PROFECO)
- International lists if your vendor has cross-border operations (OFAC, World Bank, EU)
Reactive verification — when there’s already been a notification or a problem — always arrives late.
Practical checklist: what your vendor process should include
For each REPSE-required vendor, every relationship cycle:
- ☐ Complete initial validation (5 points above)
- ☐ Monthly STPS registry verification by RFC
- ☐ Quarterly confirmation of ICSOE/SISUB filings
- ☐ Semi-annual review of authorized activities vs invoiced services
- ☐ Automated alert 90 days before registration expiration
- ☐ Continuous cross-check against SAT 69/69-B lists
- ☐ Vendor FONACOT affiliation check
- ☐ Annual validation of tax and social security compliance
If your HR or procurement team is doing this manually, two things are likely: either they aren’t really doing it, or they’re spending many more hours than automation would cost.
How continuous monitoring gets automated
Initial validation can be done by hand. Continuous monitoring of 50, 200, or 1,000 active vendors cannot.
The vendor verification services worth using cross-check in real time:
- Official STPS REPSE registry
- SAT 69 and 69-B lists (simulated operations, firm credits, forgiven)
- IMSS ICSOE
- FONACOT registry — Affiliated Workplaces
- Tax compliance opinion
- SEP professional certifications
- International AML/PLD lists when applicable
And they deliver automated alerts when any of those variables changes for one of your active vendors.
Closing
REPSE validation isn’t a box you check at signing and forget. It’s a layer of protection that needs to be alive throughout every vendor relationship. Each month that passes without reviewing your contractors’ status is a month where something you should know about could have changed.
At ReferenceCheck MX we’ve spent over 15 years helping companies in Mexico structure verification processes that protect the business without paralyzing operations. If your team spends hours validating vendors and still doesn’t sleep well, let’s talk.
In the meantime, you can check for free whether a company appears on SAT, IMSS ICSOE, or OFAC lists — no registration, no cost.
🇲🇽 Versión en español: REPSE no se valida una vez: la verificación de proveedores es antes, durante y siempre