Mexico’s financial and telecommunications authorities are converging on a 30 June deadline that requires all mobile lines—particularly prepaid numbers—to be registered against a valid official identification. The measure, distinct from the biometric Padrón Nacional de Usuarios de Telefonía Móvil (PANAUT) struck down by the Supreme Court in 2022, does not mandate fingerprints or facial scans. Yet its proximity has triggered warnings from the national financial consumer protection agency (Condusef) that users who fail to register could face disruptions in banking apps that rely on SMS or cellular data for authentication, while BBVA México has publicly stated its mobile application will continue to function over WiFi even if a line loses mobile data.

Viewed from Mexico City, the banking sector’s response is fragmented. Condusef president Óscar Rosado urged citizens not to wait until the final days, cautioning that saturation could mirror annual tax-filing bottlenecks and that some financial intermediaries might restrict services for unregistered lines. By contrast, BBVA’s communications director Mauricio Pallares clarified that the bank’s app authenticates transactions internally and does not depend on SMS, meaning customers with internet access—via WiFi or registered mobile data—can operate normally. However, he acknowledged that initial app activation on a new device and certain administrative processes still require voice or SMS channels, which would be blocked if a line is suspended. Separately, the Bank of Mexico (Banxico) has published new rules to standardise transfer interfaces across all banking apps, with a compliance deadline of 14 December, aiming to boost adoption of instant payment rails like SPEI, CoDi and DiMo.

Legal analysts in Mexico note that the current registration regime is being tested in the courts on narrower grounds. The Juzgado Décimo de Distrito in the State of Mexico granted a definitive suspension to an individual plaintiff who challenged the collection of biometric data by a mobile operator during the registration process. The tribunal argued that the line between voluntary and obligatory consent becomes “blurred” when essential services are conditioned on biometric surrender, and it cited existing telecom regulations that explicitly prohibit providers from storing such data. The ruling is an individual amparo, not a general invalidation, and the defendant company has already filed an appeal against the admission of the case. This judicial scrutiny runs parallel to, but does not suspend, the broader 30 June deadline.

Across Latin America, the tension between digital finance expansion and identity-verification mandates is playing out in different registers. In Colombia, market observers point to the arrival of natively digital banks as a response to high smartphone penetration—over 90 million active lines—and a regulatory framework that has permitted electronic wallets and open-finance initiatives without a full structural overhaul. Colombian authorities have adopted what local legal experts describe as a “pragmatic and pro-competitive” stance, while insisting that new entrants must demonstrate robust risk management. The Mexican case, by contrast, is unfolding as a patchwork of administrative deadlines, bank-by-bank contingency plans, and individual constitutional challenges, leaving the practical consequences for millions of mobile-banking users dependent on how each institution and court interprets the rules before the end of June.