If your company does business with suppliers, customers, distributors or partners in Mexico, the official compliance watchlists published by SAT, IMSS, INFONAVIT and international authorities are a basic tool for managing risk. Most compliance teams understand this. The problem isn’t being unaware that the lists exist — it’s assuming that screening a third party on the day you onboard them as a supplier guarantees they’re still clean twelve months later.
It doesn’t. And the difference between checking once and checking continuously can be the difference between catching, in time, a supplier who landed on SAT 69-B Definitive and discovering it when SAT disallows your deductions for the last eighteen months.
This guide is for Finance, Compliance, Legal and Procurement teams that already screen official lists — but do it as a one-time event, not as a continuous process.
The lists are not static
The lists published by Mexican authorities and international bodies are updated constantly. Some concrete examples:
- SAT 69-B: Mexico’s tax authority (Servicio de Administración Tributaria) publishes new “presumed” and “definitive” taxpayers in the Official Gazette (Diario Oficial de la Federación) on roughly a monthly basis. Each update adds new RFCs to the category of companies that invoice simulated transactions (EFOS).
- SAT 69 — Revoked Digital Seal Certificates (CSD Sin Efectos): SAT revokes digital seal certificates individually as it detects non-compliance. A supplier who could issue valid CFDIs yesterday may have lost the seal this week.
- OFAC SDN: the U.S. Department of the Treasury updates its Specially Designated Nationals list several times a month. A single designation can reach operators with a presence in Mexico.
- UN, European Union, United Kingdom and World Bank sanctions: each authority publishes additions and amendments on its own cadence.
- IMSS ICSOE and INFONAVIT: the lists of non-compliant employers are updated periodically with new delinquent entities.
A one-time check captures the state of the world on the day it runs. Twenty-four hours later, that picture may no longer match reality.
The false comfort of the one-time check
The most common pattern in mid-sized and large companies is this: when a new supplier or customer is onboarded, an initial screening against official lists is run. If it comes back clean, the contract is signed and the report is filed away. Twelve months later, that same supplier enters the normal invoicing cycle without anyone ever looking again.
The problem is operational, not technical: there is no recurring process that re-screens active suppliers against the current lists. Meanwhile:
- The supplier may have been notified as a presumed EFOS by SAT
- It may have lost its digital seal certificate
- It may have been debarred by the Ministry of Public Administration (Secretaría de la Función Pública)
- It may have appeared in an international sanction applicable to transactions with a Mexican counterparty
Why it matters: in the specific case of SAT 69-B, the consequences are retroactive. If your supplier is classified as Definitive on the EFOS list, every CFDI your company received from them loses tax effect — including those issued before publication. The authority can disallow deductions, demand repayment of the credited tax, and impose fines and surcharges. The bill for the oversight is retroactive, not prospective.
What changes between one Monday and the next?
To gauge the pace of change, consider what is published in a single week in Mexico:
- Movements in SAT 69 (Final, Cancelled, Revoked Digital Seals, Not Located, Enforceable)
- Movements in SAT 69-B (Presumed, Definitive, Court Rulings, Cleared)
- Updates to IMSS ICSOE
- New international sanctions in OFAC, UN, EU, OFSI and the World Bank
At consultas.referencecheck.mx we track twenty-four official Mexican and international lists that together contain more than 1.78 million records. That figure grows and changes week to week. A company that runs its due diligence annually is looking at a snapshot that is fifty-two weeks out of date.
What continuous monitoring means
Continuous monitoring is the process by which the entire portfolio of suppliers, customers and counterparties is compared periodically — weekly is the reasonable standard — against the current set of official lists. The organization learns of a new finding within the week it occurs, not when it surfaces in an audit or a SAT information request.
Three attributes define a serious continuous monitoring process:
- Full portfolio, not sampling. Every active supplier and customer enters the process, not just the ones that are material by amount.
- Regular, documented frequency. Ideally weekly, aligned with the update cadence of the official sources. The documentation of each run is part of the compliance file.
- Reporting changes, not status. The organization does not need a weekly report repeating that five thousand counterparties are clean. It needs to be notified only when something changes: a new finding appears, or a prior finding is no longer current.
Recommendation: any company with more than one hundred active suppliers, or any operation subject to the LFPIORPI (Mexico’s anti-money-laundering law), should evaluate moving from one-time checks to a documented recurring process.
Beyond SAT
One additional observation is worth making. Most Mexican monitoring tools focus exclusively on SAT lists — particularly 69-B. That covers tax risk, but leaves several others uncovered:
- Administrative and labor risk: IMSS, INFONAVIT, SFP, SABG
- International sanctions: OFAC, FBI, UN, EU, United Kingdom, World Bank
- Government debarment risk: SFP for public-sector contracting
For a company whose only monitoring is SAT 69-B, labor risk and international sanctions are blind spots. A comprehensive view requires covering the different categories of official lists — not just the best-known one.
If you want to review each of the SAT lists and how to interpret them in detail, the post Mexico’s SAT Blacklists Explained walks through all fourteen sublists and which ones represent real risk and which are noise.
Related reading
If your company has international exposure, the other half of the picture is foreign sanctions lists: International Restrictive Lists: Why Your Mexican Compliance Must Include OFAC, UN, EU, UK and World Bank.
How ReferenceCheck.mx can help
We have operated for more than fifteen years in background checks, due diligence and compliance for companies in Mexico. Our services include:
- Free instant screening at consultas.referencecheck.mx against twenty-four official lists — useful as a first filter for one-off cases
- Continuous portfolio monitoring with weekly notification of new findings across your supplier and customer base
- National and international coverage: SAT (fourteen sublists), IMSS ICSOE, INFONAVIT, SFP, SABG, OFAC, FBI, UN, EU, United Kingdom, World Bank
- Auditable, traceable reports, valid as evidence in internal audits, SAT inspections or CNBV information requests
- Professional verification with legal validity when a finding requires an in-depth investigation
If your company has a portfolio of suppliers or customers in Mexico and does not yet operate under a documented continuous monitoring process, we can review your case with you and propose coverage appropriate to the size and risk profile of your operation.