Overview
- Regulators set a phased schedule: users have until September 30 to configure their MTU, banks must enable the controls by October 1, and the regime becomes mandatory on January 1, 2026.
- Major banks including BBVA, Santander, HSBC and Banorte have published in‑app and web guides to set per‑operation, daily and monthly caps, with second‑factor or biometric verification required to confirm changes.
- Transfers that exceed a user’s MTU may be blocked or require additional authentication to proceed, adding a layer of protection against fraud and unauthorized movements.
- The MTU covers most digital operations such as SPEI transfers, CoDi and Dimo payments, card payments to third parties, and service or tax payments, but it does not affect in‑person card purchases or cash deposits.
- Media reports differ on the exact default amount for those who do not configure a limit, so customers should check their bank’s figure before relying on it.