The National Banking and Securities Exchange Commission (Comisión Nacional Bancaria y de Valores) has published the Guidelines for the Prevention and Detection of Operations with Illegally Obtained Resources in the Financial System derived from Acts of Corruption (“Guidelines”) in order to assist Supervised Subjects (General Deposit Warehouses; Investment Advisors; Brokerage Houses; Exchange Houses; Exchange Centers; Credit Institutions; Financial Technology Institutions; Companies Authorized to Operate with Novelty Models; Investment Fund Operating Companies; Investment Fund Stock Distribution Companies; Popular Financial Companies; Multiple Purpose Financial Companies; among others) to better understand the risk factors related to acts of corruption, derived from their business relationships with Politically Exposed Persons (individuals who perform relevant public functions such as heads of state, political leaders, government officials, judicial officers, among other functions, hereinafter “PEP”), or with Vulnerable Persons (clients or users who may represent a risk derived from illegally obtained resources, related to corruption). 

The Guidelines recommend Supervised Subjects to have a risk management system to identify whether a customer or final beneficiary is a PEP or a Vulnerable Person and that they use a Risk Based Approach (“RBA”), which is the essential basis for any regime for prevention of money laundering and financing of terrorism. The RBA focuses on identifying and knowing the customers and users, as well as understanding the nature of the business relationship and applying due diligence measures when circumstances require so, in order to monitor the relationships and transactions of PEPs and Vulnerable Persons and mitigate the risk of money laundering and financing of terrorism in an appropriate manner. Risk management focuses on “large-scale corruption”, which refers to offences such as bribery, influence peddling, embezzlement, unlawful enrichment or illicit financing. 

Risk Mitigation Measures 

It is important to establish that, for the purpose of classifying PEPs and Vulnerable Persons degree of risk (high and low), the inherent and transactional characteristics of these must be analyzed individually, in order to establish specific risk management and mitigation measures. The risk mitigation measures adopted by the Supervised Subjects, derived from the relationship with customers that are considered Vulnerable Persons or PEPs, must be documented based on the Compliance Manual of each Supervised Subject. It is recommended that the Supervised Subjects provide staff training programs in areas of compliance, in order to improve understanding of the risks of corruption. 

The Guidelines establish measures that must be adopted for PEPs and high-risk Vulnerable Persons: 

(i) The implementation of a customer or user monitoring scheme, analyzing that each of their transactions and operations remain within stable parameters, considering the type of operations they usually perform, the frequency with which they perform them, the amount and their characteristics, such as the currency, geographical area of operation, channel for sending or receiving resources, and the information on persons with whom they have financial relations. The foregoing, in order to understand and mitigate risks in an appropriate manner. 

(ii) In the event that the PEPs or Vulnerable Persons are partners or shareholders of any company, it must be corroborated whether the company is on the list of companies with allegedly non-existent operations issued by the SAT (Tax Administration Service) (Servicio de Administración Tributaria), as well as identify whether the company is on COMPRANET, which is thelist of State procurement suppliers, on the National Register of Suppliers, or on any state register of suppliers of any Local Public entity. 

(iii) For PEPs or Vulnerable Persons who are public officials, a copy of the most recent version of their declaration of assets and interests must be requested from the Internal Control Body of the agency, entity or public body in which they work.



Notes 
https://www.cnbv.gob.mx/PrevencionDeLavadoDeDinero/Documents/Guia_Anticorrupcion_2020.pdf