Mexico's Financial Fraud Claims Rise 16.7% in 1H26

Financial fraud claims in Mexico increased 16.7% in the first half of 2026, while first-quarter infrastructure cyberattack losses rose 167% to MX$67.5 million. These operational risks affect commercial banks, fintech platforms, and credit institutions, driving regulatory collaborations between Condusef and the Financial Intelligence Unit to enhance compliance and tracking mechanisms. As digital transaction volumes expand, strengthening institutional security architectures remains critical to maintaining market liquidity, protecting corporate data, and ensuring financial sector stability.

——

Mexico's National Commission for the Protection and Defense of Financial Services Users (Condusef) registered a 16.7% year-over-year increase in financial fraud attempts during 1H26, totaling 43,871 claims. This change contributed to an 11.3% expansion in total reports received by the commission, which reached 118,287 cases during the six-month period. Condusef emphasizes that systematic tracking of these incidents serves to identify operational weaknesses and adapt institutional defense mechanisms. 

The increase in fraud attempts occurs alongside the digitalization of financial services in Mexico, which has altered the interaction between users and financial entities. Commercial banking institutions recorded the highest volume of these fraudulent activities, accounting for 41,118 complaints out of the more than 50 banks operating in the country, up from 34,987 claims reported in the same period of 2025. Credit and debit cards remained the primary focus of these files, generating over 36 percent of all registered grievances. Possible financial fraud accounted for 37.4% of all claims received during 1Q26, illustrating pressure on traditional banking infrastructure. 

To counteract these trends, Condusef and the Financial Intelligence Unit (UIF) formalized a collaboration agreement to enhance data-sharing channels and technical training aimed at preventing operations with resources of illicit origin. The reach of these fraudulent schemes extended across alternative financial sectors as well. Popular Financial Societies (Sofipos) recorded 1,012 claims, while Multiple Purpose Financial Companies (Sofomes) accounted for 656 reports, Electronic Payment Fund Institutions (IFPEs) registered 519 cases, and development banks registered 428 complaints during the six-month period.

Central Bank Tracks Infrastructure Losses From Cyberattacks

Parallel to consumer-facing fraud, cyberattacks targeting core operating networks generated MX$67.5 million (US$3.8 million) in financial losses during 1Q26, according to a report from the Bank of Mexico (Banxico). This figure represents a 167% year-over-year increase from the MX$25.2 million (US$1.4 million) recorded in 1Q25. 

Central bank records indicate that authorities detected three security incidents between January and June, affecting automated teller machines (ATMs), internal corporate networks, and interbank transfer channels. The first intrusion occurred in February, causing MX$11.8 million (US$679,976) in damage to a commercial bank's ATM infrastructure, while a March incident involving interbank transfer operations resulted in MX$55.7 million (US$3.2 million) in losses from an unidentified malware strain.A third cyber incident in May involved a Prometei-type Trojan malware infection capable of extracting sensitive information and modifying administrative access controls, though none of the three recorded attacks compromised individual customer accounts. 

Reflecting on global stability vectors, the central bank noted in its June Financial Stability Report that cyber risks continue to rank among the most relevant for the financial system globally. While geopolitical factors originally prompted an orange alert, Banxico reduced its alert status to yellow as national infrastructure remained unaffected. 

Raúl Mendivil, an information technology specialist at the National Polytechnic Institute (INP), noted that “the cybersecurity situation in Mexican banks requires constant attention and the implementation of efficient alert systems... to address the continuous evolution of cyber threats.” Mendivil stated that while technological advances provide protective tools, they also introduce options for attackers utilizing social engineering to exploit credentials, an issue that has intensified alongside ransomware and card information sales since 2020.