Identifying the controlling beneficiary is not filling in an isolated annual return. Mexican legal entities must keep in their accounting reliable, complete and updated information about the individuals who obtain the ultimate benefit or exercise control. In 2026, a solid file must explain the ownership chain, the control chain and the method used to reach each identified person. This material is informational and requires adaptation to the specific structure of the group.
Whom the company must identify
The Federal Tax Code deems the controlling beneficiary to be the individual or group of individuals who obtains, directly, indirectly or contingently, the ultimate benefit of an interest, asset, service or transaction, or who exercises control of the legal entity or legal arrangement. The review does not end at the immediate shareholder: the ownership chain must be followed and, separately, the ability to impose decisions, appoint or remove directors, exercise voting rights or direct the strategy. If no individual is identified under the benefit or control criteria, rule 2.8.1.20 deems the sole director or equivalent to be the controlling beneficiary; if there is a board of directors or equivalent body, each of its members will have that status.
The file is part of the accounting
The Miscellaneous Tax Resolution for 2026 requires internal-control procedures to identify, verify and validate the controlling beneficiary. The file must contain the data required by the rules, identity and tax-residence documents, organizational charts, direct and indirect percentages, agreements granting control and evidence of the steps taken. It must also document who requested the information, when it was confirmed and which sources were cross-checked. A generic statement from the legal representative is not enough. The information, the ownership chain, the control chain and the support for the procedure must be kept for the applicable tax period and be available when the authority requests them.
Changes, requests and responsibilities
When the identity or interest of a controlling beneficiary changes, the file must be updated within the fifteen calendar days following the change. This is a different period from the one granted to respond to a SAT request: in that case, the Code provides fifteen business days, with the possibility of requesting a justified ten-day extension before the deadline. The company must connect this control with capital increases, transfers, trusts, voting agreements, restructurings and changes of management. Violations may lead to high penalties for each controlling beneficiary, so the risk is not managed only upon receiving an official letter. Prevention consists of maintaining continuous traceability and defined owners.
Key points
- The analysis must reach individuals and cover both economic benefit and effective control.
- The information is part of the accounting and must be supported with ownership and control chains.
- Changes are updated within fifteen calendar days; a SAT request uses a different period.
- Penalties may be assessed for each controlling beneficiary omitted or incorrectly reported.
What to review
- Build an organizational chart showing direct and indirect percentages and control mechanisms.
- Approve an internal procedure that triggers the review upon any corporate or contractual change.
- Audit files at least once a year and before restructurings, investment or financing.