Payroll Compliance Requirements for Hiring Employees in Mexico
Learn payroll compliance requirements in Mexico. Understand taxes, filings, CFDI, and employer obligations for hiring in 2026.
Can You Run Payroll in Mexico Without Compliance Setup?
No. Payroll in Mexico is not a standalone process. It is the operational output of a compliance infrastructure that must be fully built before a single payment can be made legally.
Running payroll without these registrations in place creates immediate penalty exposure with SAT, IMSS, and INFONAVIT simultaneously.
RFC registration (SAT): required for all tax reporting, ISR withholding, and CFDI payroll receipt generation; no payroll system can function without it
IMSS registration: mandatory before hiring employees; the Registro Patronal must be active before contributions can be filed or employees enrolled
INFONAVIT registration: required for housing fund contribution payments of 5% of salary, which are mandatory for all registered employees
Entity requirement: a Mexican legal entity must exist before any of the above registrations can be obtained, unless an EOR is handling employment on your behalf
No payroll without setup: compliance infrastructure must be complete before the first payroll cycle runs; there is no grace period
This is the starting point. Mexico's payroll tax system connects tax, social security, and housing fund obligations into a single integrated compliance structure that must be set up correctly before operations begin.
What Is Required Before Running Payroll in Mexico?
The prerequisites for running payroll in Mexico are sequential. Each one depends on the one before it, which is why the setup process takes time and why shortcuts create compliance exposure.
Obtain RFC and tax credentials: the federal taxpayer identification number from SAT is the foundation of all payroll and tax reporting activity in Mexico
Register as employer with IMSS and INFONAVIT: both registrations are mandatory and must be active before any employee can be enrolled or contributions filed
Set up a CFDI-compliant payroll system: all payroll payments must generate electronic payroll receipts validated through SAT-certified systems; standard payroll software from other markets does not meet this requirement
Collect employee tax and personal data: RFC if applicable, CURP, social security number (NSS), banking details, and personal identification are all required to configure each employee correctly in the system
Define salary structure and benefits: the Salario Base de Cotización (SBC) must be established correctly for each employee before the first IMSS contribution can be calculated and filed
This setup sequence ensures the employer is operationally ready to process payroll correctly from the first cycle rather than retroactively correcting errors that have already accumulated.
Step-by-Step Payroll Compliance Setup (Correct Sequence)
Understanding the correct sequence prevents the most common setup mistakes. Each stage creates the foundation for the next, and attempting to run payroll before any stage is complete creates gaps that trigger audits.
Entity setup if applicable: the legal entity must be formed and registered in the Public Registry of Commerce before any tax or social security registration can be initiated
RFC registration with SAT: the employer's federal taxpayer identification is the first registration required and unlocks access to all subsequent SAT systems
IMSS and INFONAVIT employer registration: the Registro Patronal is issued by IMSS once the employer registration is approved; INFONAVIT employer registration follows the same pathway
Employee registration with IMSS: each new employee must be enrolled within within five business days of their start date; IMSS employer registration and ongoing employee enrollment are separate but connected obligations
Payroll system setup with CFDI capability: the system must be configured to generate compliant digital payroll receipts for every payment, including the correct salary components, deductions, and tax withholding
First payroll calculation and processing: once all registrations and system configurations are confirmed, the first cycle can run; this cycle is also the first test of whether SBC calculations and tax withholding are correct
What Taxes and Contributions Must Employers Pay?
Every payroll cycle triggers multiple simultaneous obligations across different authorities. These are not optional contributions and all of them carry penalties for late or incorrect payment.
ISR (income tax withholding): the employer calculates and withholds ISR from each employee's gross pay every cycle; how ISR works in Mexico depends on the employee's salary level, applicable exemptions, and the progressive tax table
IMSS social security contributions: IMSS employer and employee contributions cover health, disability, life insurance, retirement, and occupational risk; rates vary by insurance branch and risk classification
INFONAVIT contributions: 5% of the employee's SBC paid entirely by the employer; mandatory for all registered employees without exception
SAR/AFORE retirement contributions: additional retirement savings contributions directed to the employee's individual AFORE pension account, separate from the IMSS retirement branch
State payroll tax (ISN): a state-level tax ranging from 1% to 4% depending on the state where the employee is registered; applies to all employers with registered employees in that state
All five obligations apply to every payroll cycle for every registered employee. Missing any one of them creates exposure with the corresponding authority independently.
How Payroll Is Processed in Mexico
Mexican payroll follows regulated cycles, calculation methods, and payment rules that differ from most other markets. Getting these details right from the first cycle is essential because errors compound quickly.
Payroll cycles: pay periods in Mexico are commonly weekly or biweekly for most employees; the chosen frequency affects how contributions and proportional benefits are calculated each period
Payment currency: all payroll payments must be made in Mexican pesos; any foreign currency conversion must comply with applicable exchange regulations
Integrated salary calculation (SBC): IMSS contributions are not calculated on base salary alone; the SBC includes base salary, recurring bonuses, commissions, and certain benefits, and must be calculated correctly for every employee
Apply deductions and contributions correctly: ISR withholding, IMSS employee contribution, and any other authorized deductions must be applied in the correct order and reflected accurately in the CFDI payroll receipt
Ensure accurate net pay calculation: the net amount received by the employee must match what is reflected in the CFDI; discrepancies between the payroll system and the digital receipt are a common audit trigger
Payroll errors in Mexico do not stay internal. They are visible to SAT, IMSS, and INFONAVIT through cross-referenced reporting systems that flag inconsistencies automatically.
CFDI Electronic Payroll Compliance (Critical Requirement)
The CFDI (Comprobante Fiscal Digital por Internet) payroll receipt is one of the most strictly enforced requirements in Mexican payroll compliance. Every single payroll payment must generate a compliant digital receipt regardless of payment frequency or amount.
CFDI required for each payroll payment: there are no exceptions; weekly, biweekly, and monthly payments all require a validated CFDI receipt per employee per cycle
Must include salary, deductions, and net pay: the receipt must reflect every component of the payment including gross salary, all deductions, ISR withheld, and the net amount paid
Issued through SAT-certified systems: only payroll software authorized by SAT can generate valid CFDI receipts; certificates must be current and the issuer must hold an active RFC
Digital validation required: each CFDI is validated and timestamped by SAT at the moment of issuance; unvalidated receipts are not legally recognized
Mandatory for tax compliance: what CFDI means in Mexico goes beyond a payment receipt; it is the primary document that SAT uses to verify that payroll was processed correctly and ISR was withheld accurately
Failure to generate compliant CFDIs creates a gap between what was paid and what SAT can verify, which is treated as a compliance failure regardless of whether the actual payment was correct.
Filing and Reporting Requirements
Payroll compliance does not end when the employee receives their payment. Multiple reporting obligations to multiple authorities continue throughout each month and year.
Monthly ISR tax filings: the employer must file and remit all withheld ISR to SAT on a monthly basis; the filing covers the combined withholding from all employees across all pay cycles in the month
IMSS contribution reporting: contributions are filed and paid bimonthly to IMSS; the filing must reflect the correct SBC for every enrolled employee and match the CFDI payroll data submitted to SAT
INFONAVIT reporting obligations: housing fund contributions are also filed bimonthly and must align with the salary figures reported to IMSS
Annual tax reporting requirements: employers must submit annual ISR declarations for each employee, which reconcile the withholding made throughout the year against the employee's final annual tax liability
Digital submission to authorities: all filings are submitted electronically through SAT and IMSS portals using the employer's e.firma; paper submissions are not accepted for most compliance obligations
The continuous nature of these reporting obligations is one of the main reasons companies entering Mexico consistently underestimate the ongoing compliance burden.
Payment Deadlines and Compliance Timing
Every compliance obligation in Mexican payroll has a specific deadline. Missing deadlines triggers automatic surcharges and interest regardless of whether the underlying payment was correct.
ISR payments typically due by the 17th of each month: the monthly ISR remittance covering all payroll cycles in the prior month must reach SAT by this date; delays trigger surcharges from day one
IMSS contributions are due monthly, no later than the 17th of the following month: employers must remit general social security contributions (health, disability, life, and occupational risk) monthly to avoid late payment penalties. Only retirement (SAR) and INFONAVIT contributions follow a bimonthly filing schedule
Payroll cycles must align with reporting deadlines: companies that choose weekly payroll cycles must ensure that contribution data is consolidated and filed on the bimonthly schedule, not on the weekly payroll frequency
Late payments result in penalties and interest: IMSS, SAT, and INFONAVIT all apply inflation-adjusted surcharges on late payments; these accumulate from the day after the deadline and are not waived retroactively
Timing discipline in payroll is not optional. The penalty structure in Mexico assumes compliance from day one and treats late payment as a systemic failure rather than a simple oversight.
Mandatory Benefits That Affect Payroll
Statutory benefits are not separate from payroll. They are an integrated part of how payroll is calculated, accrued, and paid throughout the year. Several of them require specific payroll entries that must be timed correctly.
Aguinaldo (Christmas bonus): a minimum of 15 days of salary must be paid before December 20 each year; how aguinaldo is calculated and paid affects both the payroll cycle in which it is paid and how it integrates into the SBC
Vacation and vacation premium: vacation pay and the mandatory 25% premium must be paid when the employee takes vacation; they cannot be deferred or accumulated as a lump sum at year end
Profit sharing (PTU): employers must calculate and distribute 10% of taxable profits to employees annually; profit sharing in Mexico has its own calculation rules, deadlines, and payroll treatment that must be reflected correctly in the year it is paid
Social security benefits: IMSS contributions fund healthcare, disability, maternity, and retirement benefits; these are payroll obligations, not optional additions, and must be calculated on the correct SBC every cycle
Each of these benefits must appear correctly in the relevant CFDI payroll receipts and must be consistent with what is reported to SAT and IMSS.
Integrated Salary (SBC) and Why It Matters
The Salario Base de Cotización is the most technically complex element of Mexican payroll compliance and the most frequently calculated incorrectly.
Using the wrong SBC affects every IMSS contribution calculation and creates systematic underpayment that accumulates across every payroll cycle.
Includes base salary plus integrated benefits: the SBC is not just the gross monthly salary; it must include the daily value of recurring bonuses, commissions, food vouchers above the exempt limit, and any other periodic benefit the employee receives
Impacts social security contributions directly: every peso that should be in the SBC but is missing results in an underpayment of IMSS contributions that IMSS can demand retroactively with interest
Affects total employer cost significantly: correctly calculated SBC produces higher contribution amounts than base salary alone; employers who calculate on base salary only are systematically underestimating and underpaying their obligations
Incorrect calculation leads to compliance issues: SBC recalculation in Mexico is one of the most common sources of IMSS audit findings; getting it right from the start is significantly less expensive than correcting it retroactively
Payroll Recordkeeping and Audit Requirements
Payroll records in Mexico must be maintained in a form that is accessible to IMSS, SAT, and labor authorities on request. Audits can cover multiple prior years, which means records must be preserved well beyond the current payroll cycle.
Store all CFDI payroll receipts: every digital payroll receipt issued must be archived; SAT can request these as part of any tax review and they must be producible for any period within the statute of limitations
Maintain tax and contribution records: ISR withholding records, IMSS filing confirmations, and INFONAVIT payment receipts must all be retained and organized by employee and period
Keep payroll documentation for at least five years: the standard retention period covers the main statute of limitations for tax and labor claims; some records related to IMSS contributions should be kept longer
Ensure records are audit-ready: records must be organized, complete, and accessible; authorities do not provide extended time to organize records after an audit is initiated
Reviewing common payroll audit errors in Mexico is one of the most practical steps a company can take to identify recordkeeping gaps before an inspection surfaces them.
Most Common Payroll Compliance Mistakes
The errors that generate the most IMSS and SAT penalties in Mexico are consistent across company sizes and industries. Most of them are avoidable with the right setup and processes.
Incorrect CFDI generation: missing components, incorrect salary figures, or unvalidated receipts are among the most frequent errors and are immediately visible to SAT through cross-referencing
Underreporting salary or benefits: calculating SBC on base salary only rather than the full integrated salary is the most common source of IMSS underpayment and the most commonly audited discrepancy
Late tax filings or payments: even a single day past the ISR deadline triggers surcharges; companies that manage payroll manually without automated deadline tracking consistently experience late filings
Failure to update IMSS records: salary changes, new hires, and departures must all be reported to IMSS within defined timeframes; delayed updates create contribution mismatches that flag in IMSS audits
Misclassification of employees: treating employees as independent contractors removes them from payroll entirely and creates retroactive IMSS, ISR, and benefit exposure from the start of the working relationship
Cross-System Compliance Risk (SAT, IMSS, INFONAVIT)
Mexico's payroll compliance environment is more tightly integrated than most countries. SAT, IMSS, and INFONAVIT cross-reference data from each other's systems, which means an error in one place is almost always detectable in another.
SAT, IMSS, and INFONAVIT data must match: the salary figures reported in CFDI payroll receipts, IMSS contribution filings, and INFONAVIT payments must all reflect the same SBC for the same employee in the same period
Inconsistencies trigger audits automatically: the cross-referencing is systematic; discrepancies between what was reported to SAT through CFDI and what was filed with IMSS for the same employee generate audit flags without requiring a human reviewer to initiate the process
Integrated reporting increases transparency: the digital nature of CFDI and electronic filings means the authorities have real-time visibility into payroll data across the entire employer base
Errors are easier to detect than in most markets: Mexico's payroll compliance environment rewards accuracy from the start because the cost of being caught with inconsistencies is significantly higher than the cost of getting it right initially
This cross-system transparency is why employer tax responsibilities in Mexico cannot be managed as separate obligations. They must be managed as a single integrated compliance framework.
How Much Does Payroll Compliance Cost Employers?
Understanding the full cost of employment in Mexico requires building the calculation correctly. Base salary is only one component of what an employer actually pays per employee per month.
Social security contributions: IMSS employer contributions typically add 20% to 35%+ of SBC depending on risk classification and salary level
Housing and retirement contributions: INFONAVIT at 5% of SBC plus SAR/AFORE retirement contributions add to the statutory contribution total
State payroll tax: ISN ranging from 1% to 4% depending on the state where the employee is registered
Administrative and compliance costs: payroll system maintenance, CFDI certification, accounting fees, and compliance management all represent real costs that sit above the statutory contributions
The combined employer burden typically adds 30% to 45% above base salary when all statutory obligations are included. Building a hiring budget without this complete picture consistently produces underestimates that create financial planning problems.
Why Payroll Compliance in Mexico Is Complex
Companies entering Mexico from markets with simpler payroll frameworks consistently underestimate how interconnected and continuously monitored Mexico's compliance environment is.
SAT, IMSS, and INFONAVIT are all involved simultaneously: every payroll cycle triggers obligations to three separate authorities with different filing schedules, payment deadlines, and data requirements
Strict digital reporting requirements: CFDI generation, SAT filings, IMSS contribution reports, and INFONAVIT payments are all submitted electronically with validation at the point of submission
High audit visibility: the cross-system data matching means compliance gaps are detectable without a targeted audit; SAT and IMSS both conduct automated reviews of payroll data consistency
Ongoing compliance obligations are permanent: there is no stabilization point where payroll compliance becomes simpler; the monthly, bimonthly, and annual obligations continue for as long as the employment relationship exists
Most companies discover this complexity after their first filing cycle, not before. Building the right infrastructure from the start is the only way to avoid the accumulated penalties that result from retroactive correction.
Can Foreign Companies Run Payroll Without an Entity?
No. A foreign company cannot register with SAT, IMSS, or INFONAVIT without a Mexican legal entity. Without those registrations, there is no legal mechanism to run payroll in Mexico.
Entity required for direct payroll: all three primary payroll authorities require a legally registered Mexican employer before accepting any registration, filing, or contribution payment
Risk of permanent establishment: foreign companies that attempt to manage employees directly without an entity or EOR may inadvertently create a taxable presence in Mexico, triggering corporate tax obligations on top of the payroll exposure
Compliance burden is high: even with an entity, the ongoing payroll compliance obligations require dedicated local expertise in tax, accounting, and labor law
Alternative: use an EOR: companies without a Mexican legal entity can hire employees and run compliant payroll through an Employer of Record in Mexico, which holds all required registrations and manages all payroll compliance on the client's behalf
This is a structural requirement, not a procedural one. There is no workaround that allows a foreign company to run Mexican payroll without either an entity or an EOR.
How EOR Simplifies Payroll Compliance in Mexico
An Employer of Record holds all required registrations, manages the complete payroll cycle, and carries the compliance responsibility that would otherwise sit with the client company.
Manages all payroll calculations and payments: gross salary, SBC calculation, ISR withholding, deductions, and net pay are all calculated and processed by the EOR for every employee every cycle
Handles CFDI generation and SAT filings: compliant digital payroll receipts are issued for every payment and all monthly ISR filings are submitted on time under the EOR's RFC and e.firma
Ensures IMSS and INFONAVIT compliance: employee enrollment, bimonthly contribution filings, salary updates, and deregistration are all managed by the EOR within required timeframes
Reduces risk of errors and penalties: the EOR's dedicated payroll infrastructure eliminates the most common sources of compliance errors that companies managing payroll independently consistently encounter
Allows hiring without entity setup: client companies can have legally employed staff in Mexico with fully compliant payroll running from day one without forming a legal entity, obtaining an RFC, or building any of the compliance infrastructure themselves
For most foreign companies entering Mexico, the EOR model removes the entire payroll compliance burden while providing the same legal employment outcome as direct entity-based hiring.
Manage Payroll Compliance in Mexico With Confidence Through Human Resources Mexico (HRM)
Payroll compliance in Mexico is not a process you want to learn through errors. Human Resources Mexico (HRM) is an Employer of Record with over 16 years of physical presence in Mexico, a full Mexican team on the ground, and operations built exclusively around employment and payroll compliance in Mexico.
Complete payroll compliance managed from day one: SBC calculation, ISR withholding, CFDI generation, IMSS filings, INFONAVIT contributions, and state payroll tax are all handled correctly every cycle on your behalf
No entity or registration required on your side: HRM holds all required SAT, IMSS, and INFONAVIT registrations so your employees can be legally paid in Mexico without any setup on the client side
Zero missed deadlines: HRM's dedicated payroll infrastructure ensures every monthly ISR filing and every bimonthly IMSS and INFONAVIT payment is submitted on time, every time
One simple fee, no hidden costs: HRM charges a single fee on gross taxable compensation with no setup fees, no onboarding fees, no offboarding fees, and nothing else
Real human support in Mexico: every employee receives direct support from a team born, raised, and educated in Mexico, not an automated platform
Reach out to HRM today and get a custom hiring proposal built around your headcount, salary structure, and timeline.
FAQs
What is required before running payroll in Mexico?
You must register with SAT to obtain an RFC, register as an employer with IMSS and INFONAVIT, set up a CFDI-compliant payroll system, and register each employee with IMSS within five business days of their start date. All of these must be in place before the first payroll cycle runs.
What taxes do employers pay in Mexico payroll?
Employers must withhold ISR from each employee's pay and separately remit IMSS contributions, INFONAVIT contributions at 5% of SBC, SAR/AFORE retirement contributions, and state payroll tax ranging from 1% to 4% depending on the state. All apply to every payroll cycle.
What is CFDI in Mexican payroll?
CFDI is the electronic payroll receipt required for every payroll payment in Mexico. It must include gross salary, all deductions, ISR withheld, and net pay, and must be issued through SAT-certified systems with digital validation at the time of issuance. It is the primary document SAT uses to verify payroll compliance.
How much do payroll costs add in Mexico?
The combined employer burden of IMSS contributions, INFONAVIT, state payroll tax, and mandatory benefits typically adds 30% to 45% above base salary. The exact percentage depends on the employee's salary level, the state where they work, and the company's industry risk classification.
Can foreign companies run payroll in Mexico without an entity?
No. A Mexican legal entity is required to register with SAT, IMSS, and INFONAVIT, which are all prerequisites for running payroll legally. Foreign companies without an entity must use an Employer of Record, which holds all required registrations and manages payroll compliance on their behalf.
