On December 8, Mexico’s Federal Telecommunications Regulator (CRT) approved a new set of guidelines mandating that all mobile phone lines—prepaid and postpaid—be registered to a verifiable individual or legal entity. The regulation, which will come into effect on January 9, 2026, is designed to eliminate anonymous mobile usage, a practice authorities associate with criminal activities such as extortion and fraud.
Under the new framework, individuals must present official identification—such as a voter ID or passport—along with their Unique Population Registry Code (CURP) to register a mobile line. Legal entities are required to provide their Federal Taxpayer Registry (RFC). Telecom operators will be responsible for collecting and storing this information in compliance with the Federal Law on Protection of Personal Data Held by Private Parties.
The CRT emphasized that the regulation formalizes existing practices already applied to postpaid services. The measure was adopted unanimously following a public consultation process, suggesting broad institutional support for the policy shift. It reflects a growing regulatory emphasis on enhancing trust in mobile communications infrastructure while aligning with broader public security objectives.
The CRT’s move signals a broader trend toward formalizing digital identity in telecommunications.
The initiative places significant responsibility on telecom providers, who must now ensure not only the accurate collection of user data but also its secure storage and protection. This will likely require technical upgrades and procedural adjustments, particularly in regions where informal or undocumented mobile usage is more prevalent. Coordination with data protection authorities and law enforcement agencies will be essential to ensure compliance and prevent misuse.
While the regulation aims to bolster security, it also raises concerns about privacy and implementation. Civil liberties advocates may question whether the collection of personal data could lead to potential misuse or unauthorized access, despite the existence of legal safeguards. Moreover, the logistical burden of registering millions of prepaid users—many of whom may lack formal identification—could prove challenging for operators, especially in rural or underserved areas.
The effectiveness of the measure in reducing crime remains uncertain and will depend heavily on enforcement mechanisms and inter-agency coordination. Without robust oversight and clear protocols for data access by law enforcement, the policy risks becoming a symbolic gesture rather than a substantive deterrent to illicit activity.
Nonetheless, the CRT’s move signals a broader trend toward formalizing digital identity in Mexico’s telecommunications sector. By requiring that every mobile line be traceable to a known entity, regulators aim to close loopholes that have long hindered efforts to combat phone-based crimes. Whether this regulatory tightening translates into measurable improvements in public safety will become clearer after implementation begins in 2026.
