SAT tax audit in Mexico: what to do if you receive a tax review

The moment the audit notice arrives, the clock is already running

There is a very human first reaction when a SAT notification appears in the tax mailbox: freeze. Do not open the document, do not forward it to the accountant, wait and see if it is a mistake. That response, which feels harmless, can be the most expensive move in the entire process. The reason is simple: CFF deadlines do not distinguish between those who knew and those who did not. They run from the date of notification, regardless of whether you read the document.

The second thing to understand from the start is that an audit is not synonymous with fraud or bad faith on SAT's part. It can result from a statistical discrepancy between your CFDI invoices and your tax returns, from information SAT received from a third party — a bank, a large client, a digital platform — or simply from a random sampling process. What determines the outcome is not why it started, but how the response is managed.

SAT has five types of audit, but one type has dominated since 2020

Article 42 of the Federal Fiscal Code lists SAT's verification powers. They are not equal in procedure or impact. Knowing the differences matters because the audit type defines the deadlines, the documents you can submit and the available exit options.

The electronic review displaced the field audit as the primary audit format in Mexico starting in 2020. SAT can launch tens of thousands of simultaneous reviews without deploying physical auditors, using automated cross-checking of CFDI invoices, tax returns, DIOT bank information and IMSS records. It is faster for SAT and more surprising for the taxpayer: the notification appears in the tax mailbox without prior warning.

What SAT is actually looking for in your records

SAT's fiscal risk algorithms identify patterns that statistically correlate with evasion or avoidance. Knowing them is not about evading anything — it is about understanding why some perfectly legal situations can trigger a review and what documentation needs to be ready in advance.

The most frequent discrepancies that trigger an electronic review are: accumulated CFDI invoices that do not match ISR or VAT declared; authorized deductions exceeding the sector average by SCIAN code; ISR withholdings reported by employers to IMSS that do not match what the worker declared in their annual return; bank deposits exceeding declared income — SAT receives data from all financial institutions under Article 32-B CFF; and transactions with suppliers later listed under Article 69-B (companies issuing invoices for simulated operations, EFOS).

Anyone operating under the digital platforms tax regime (Uber, Airbnb, Rappi) should know that withholdings reported by the platform are automatically cross-checked against your monthly returns. Even a small discrepancy can be enough to trigger a review.

The Conclusive Agreement: how to reduce fines by 100% — but it has an expiry

The Conclusive Agreement (Acuerdo Conclusivo) is probably the most valuable fiscal mechanism available in Mexico to a taxpayer facing an audit with a balance due. It is regulated in Articles 69-C to 69-H of the CFF and operates through PRODECON as mediator.

The mechanics: during an active audit — before SAT issues the final tax assessment — the taxpayer can request PRODECON to open a mediation process with SAT. The parties discuss the observations point by point. If they reach an agreement on the facts, SAT issues the assessment with reduced fines.

The trap of the Conclusive Agreement is time: it can only be requested while the audit is active and SAT has not issued the final assessment. Once the final liquidation arrives, that window closes. Many taxpayers arrive too late because they spent weeks trying to resolve the issue alone before consulting a specialist. Nexoconsult recommends requesting a specialist review within the first 48 hours of receiving an audit notification — that is when the most options remain open.

If the audit ends in a tax assessment: three ways to challenge it

When SAT issues a final resolution establishing a collectible tax credit, you are not obligated to pay immediately if you believe there are errors. You have three options, with different deadlines and costs.

1. Administrative appeal (Recurso de revocación) — Article 116 CFF: filed before SAT itself within 30 business days of the assessment notification. SAT has up to 3 months to resolve. It is free of charge and can work when there are formal procedural defects. The drawback: SAT resolves its own case.

2. Nullity action before the TFJA (Federal Administrative Justice Tribunal): The specialized jurisdictional route. 30 business days from notification. Cases typically take 12 to 36 months. Requires guaranteeing the credit (surety bond or fiscal guarantee) to suspend collection while the case proceeds.

3. Constitutional challenge (Amparo indirecto): Applies when there are constitutional violations — fairly common when SAT's own deadlines were not respected or when a norm was applied retroactively. The most complex and expensive route, but the one that can suspend collection most immediately.

Your rights during a SAT audit — what the Taxpayer Charter says

The Carta de Derechos del Contribuyente (Taxpayer Rights Charter), published by PRODECON and recognized in Article 33-A of the CFF, establishes guarantees that most taxpayers do not know about and that can change the outcome of an audit if exercised in time.

The most practically important right is the right to request the presence of a legal representative or accountant before handing over any documentation during a field audit. Auditors cannot deny the taxpayer reasonable time to make that call. In a desk review, you can attend any SAT appointment with your advisor.

The second key right is the right to be informed of the process status. During a field audit, SAT must issue partial records (actas parciales) at each significant stage. You can request certified copies of those records. If SAT refuses, that procedural defect can be challenged.

The third — and perhaps least known — is the right to contact PRODECON at any point during the audit. PRODECON cannot nullify the audit on its own, but it can intercede with SAT, mediate procedural conflicts and, crucially, facilitate the Conclusive Agreement.

What a poorly managed audit actually costs — in real numbers

A taxpayer who received an electronic review for a $120,000 MXN discrepancy between CFDI invoices and ISR declared for 2023, and who tried to respond without professional advice, submitting partial and out-of-context documentation: the result was a $187,400 MXN assessment (omitted tax + inflation adjustment + surcharges + 65% fine). They missed the challenge deadline. The amount became collectible and fiscal seizure proceedings (PAE) were initiated. By the time they retained professional help, the amount already included PAE costs.

The same case managed from the first notification with a Conclusive Agreement: adjusted omitted tax of $90,000 MXN (corrected with proper documentation) + surcharges and adjustment of $28,000 MXN + fines waived at 100% = total payment of $118,000 MXN. A difference of $69,400 MXN. The advisory cost for that process: $22,000 MXN.

For context on how SAT fines are calculated across different types of non-compliance, see our guide on SAT fines in Mexico and how much you can end up paying.

Frequently asked questions about SAT audits in Mexico

How long does SAT have to audit me in Mexico?

SAT has 5 years to exercise its verification powers, counted from the day after the return was due (Article 67 of the CFF). This extends to 10 years if you did not file a required return, have no RFC registered or have undeclared foreign-source income. Once a formal audit starts, SAT has up to 12 months to complete it (18 months in special cases under Art. 46-A CFF). If SAT does not finish within that window, the audit expires and its findings cannot be used.

What should I do if SAT sends me an audit notice?

First verify the notice arrived via buzón tributario with a valid electronic signature from the issuing official — fake notices circulate. If real, you have 15 business days (electronic review) or up to 20 business days (desk review) to submit your response with documentation. Do not respond alone: you need an accountant or tax attorney to review exactly what SAT is questioning before you hand over a single document. Submitting the wrong documentation can expand the scope of the review.

What is a Conclusive Agreement (Acuerdo Conclusivo) with SAT and how does it work?

The Conclusive Agreement is a tax mediation mechanism regulated in Articles 69-C to 69-H of the CFF. You request it through PRODECON (the Taxpayer Defense Office) during an active audit, before SAT issues the final assessment. If this is your first time using the mechanism, fines are reduced by 100%. On the second occasion, the reduction is 50%. PRODECON acts as an impartial mediator and the process takes between 12 and 45 business days depending on complexity.

Can SAT audit me without warning in Mexico?

Not without a prior formal order. For a field audit (visita domiciliaria), SAT must present a signed inspection order from a competent authority specifying which tax years and contributions are being reviewed. Without that order, you can deny access. For electronic and desk reviews, notification comes through the buzón tributario. What can happen without advance notice is that SAT cross-checks your data internally and opens a fiscal discrepancy file — that file may already exist before you receive any notification.

How much can a SAT audit cost me in Mexico?

Total cost depends on three factors: the tax amount SAT determines was omitted, accumulated surcharges (1.47% monthly on the inflation-adjusted tax under Art. 21 CFF) and fines (55% to 75% of the omitted tax under Art. 76 CFF, or up to $89,580 MXN for unfiled returns under Art. 82). With three years of surcharges, a $100,000 MXN ISR debt can reach $220,000–$250,000 MXN total. Professional advisory costs — between $15,000 and $60,000 MXN depending on complexity — are typically a fraction of what you save by negotiating well from the start.