Mexico E-Invoicing Guide: CFDI 4.0 Compliance, SAT Requirements & Penalties

Mexico's Comprobante Fiscal Digital por Internet (CFDI) version 4.0 has been mandatory for all taxpayers since April 1, 2023, administered by the Servicio de Administración Tributaria (SAT). Non-compliance penalties range from MXN 17,020 to MXN 97,330 per invoice (approx. USD 950–5,400), with potential business closure for repeated violations. Mexico was a global pioneer in mandatory e-invoicing, having required electronic fiscal documents since 2011.

What Is Mexico's CFDI E-Invoicing System?

CFDI (Comprobante Fiscal Digital por Internet) is Mexico's mandatory electronic invoicing system that requires all tax-relevant transactions to be documented as structured XML files, digitally signed, validated by an authorized certification provider (PAC), and stamped by SAT. The current version, CFDI 4.0, introduced in January 2022 and made mandatory April 2023, adds stricter validation requirements including mandatory RFC verification for both issuers and receivers.

What Changed from CFDI 3.3 to 4.0?

Mandatory receiver data: Buyer's RFC, legal name, fiscal regime, and tax domicile postal code must match SAT records exactly Uso CFDI alignment: The intended use code (Uso CFDI) must correspond to the receiver's fiscal regime

Key changes in CFDI 4.0 include:

• Mandatory receiver data: Buyer's RFC, legal name, fiscal regime, and tax domicile postal code must match SAT records exactly
• Uso CFDI alignment: The intended use code (Uso CFDI) must correspond to the receiver's fiscal regime
• Export indication: New field to flag export transactions
• Payment-related CFDIs: Updated Complemento de Pago version 2.0 for payment receipts
• Stricter cancellation rules: Receiver acceptance required for cancellation of CFDIs over MXN 1,000

Who Must Comply With CFDI 4.0?

Personas morales (legal entities): All corporations, partnerships, and associations registered with SAT Personas físicas con actividad empresarial: Individuals with business activities

CFDI 4.0 is mandatory for all Mexican taxpayers:

• Personas morales (legal entities): All corporations, partnerships, and associations registered with SAT
• Personas físicas con actividad empresarial: Individuals with business activities
• Freelancers and professionals: All who issue invoices for services
• Non-profit organizations: Required for deductible donation receipts
• Foreign companies with RFC: Any entity with Mexican tax registration

There are no size-based exemptions — even micro-businesses must issue CFDI 4.0 for all commercial transactions.

How Does the CFDI Process Work?

Generate XML: Create the CFDI 4.

1. Generate XML: Create the CFDI 4.0 XML document with all mandatory fields using your invoicing software
2. Digital signature: Sign the CFDI with your CSD (Certificado de Sello Digital) issued by SAT
3. PAC certification: Submit to your chosen PAC (Proveedor Autorizado de Certificación) for validation and SAT stamping
4. Receive timbrado: The PAC returns the CFDI with SAT's digital stamp (timbre fiscal), confirming validity
5. Deliver to receiver: Provide the XML and optional PDF representation to the buyer
6. Store for 5 years: Both issuer and receiver must retain the XML for the statutory period

What Are the CFDI 4.0 Mandatory Fields?

What Are the CFDI 4. 0 Mandatory Fields — RFC Emisor: Issuer's tax ID — Must match SAT registry exactly.

Field	Description	Validation
RFC Emisor	Issuer's tax ID	Must match SAT registry exactly
RFC Receptor	Receiver's tax ID	Must match SAT registry — CFDI 4.0 validates against SAT database
Nombre Receptor	Receiver's legal name	Must match SAT registration letter-for-letter
Régimen Fiscal Receptor	Receiver's tax regime code	Must match SAT records
Domicilio Fiscal Receptor	Receiver's postal code	Must match SAT-registered address
Uso CFDI	Intended use code	Must be valid for the receiver's regime
Método de Pago	Payment method (PUE/PPD)	PUE = paid, PPD = pending (requires Complemento de Pago)

What Are the Penalties for CFDI Non-Compliance?

the Penalties for CFDI Non-Compliance includes: MXN 17,020–97,330 per invoice (approx.

SAT enforces significant penalties under the Código Fiscal de la Federación (CFF):

• MXN 17,020–97,330 per invoice (approx. USD 950–5,400) for failure to issue CFDI or issuing non-compliant CFDIs
• Business closure: SAT can temporarily close establishments for repeated violations (3-15 days)
• RFC cancellation: Persistent non-compliance can result in SAT cancelling your RFC registration
• Criminal liability: Fraudulent CFDIs can result in prison sentences of 2-9 years under Mexico's anti-fraud laws

How to Set Up CFDI 4.0 E-Invoicing

Obtain your RFC from SAT at sat. gob.

1. Obtain your RFC from SAT at sat.gob.mx
2. Get your e.firma (FIEL): Digital certificate for SAT portal access
3. Generate CSD: Certificado de Sello Digital for signing CFDIs
4. Choose a PAC: Select from SAT's list of authorized certification providers
5. Configure your invoicing software with CSD and PAC integration
6. Issue your first CFDI 4.0 and verify the timbrado (SAT stamp)

Which Software Supports Mexico CFDI 4.0?

Invoicemonk supports CFDI 4.0 generation with integrated PAC certification, automatic RFC validation against SAT records, and Complemento de Pago management. Our compliance engine validates all mandatory fields before PAC submission.

Frequently Asked Questions

Can I still issue CFDI 3.3?

No. CFDI 3.

No. CFDI 3.3 was deprecated April 1, 2023. All new invoices must use CFDI 4.0. Existing 3.3 CFDIs remain valid for their original purpose but cannot be re-issued.

What is a PAC and do I need one?

A PAC (Proveedor Autorizado de Certificación) is a SAT-authorized company that validates and stamps your CFDIs. Yes, every CFDI must be certified by a PAC before it's fiscally valid.

A PAC (Proveedor Autorizado de Certificación) is a SAT-authorized company that validates and stamps your CFDIs. Yes, every CFDI must be certified by a PAC before it's fiscally valid.