Aviation Security Explained

Country guides

Border control at Mexican airports: what happens to travellers and their data

The National Migration Institute (INM) checks travellers at Mexican airports 6. Automated gates at seven airports take a face photo and issue a digital FMM for eligible tourists from 30 passport countries 1. Citizens of Russia, Türkiye and Ukraine can use a free online authorisation, the SAE, for air travel 3,4. Airlines must send passenger and crew data to the INM 6. A new public sector data law of 20 March 2025 sets a 20-day limit to answer data requests 8.

Last checked: 12 sources

Arriving: the steps at the border

Under Article 37 of the Migration Law of 25 May 2011, foreign nationals entering Mexico must present a valid passport and, where needed, a visa at the INM inspection point. They must give the information and personal data that the authorities request 6.

Article 81 defines migration control as checking the documents of people entering or leaving and inspecting the vehicles they travel in. The law text says the Federal Police assist the INM in this work 6.

Travellers at eligible airports can use automated gates, called Filtros Migratorios Autónomos (FMA), in place of a staffed desk. The gate issues a ticket with a QR code that downloads the digital Forma Migratoria Múltiple (FMM), which travellers keep until they leave Mexico 1.

If officers find a match on a migration control list, or other issues at entry, the case goes to a second inspection 7.

Entry permission: visas, the SAE and the planned AEV

Article 37 says foreign nationals do not need a visa if they come from a country with a visa waiver agreement or a country Mexico has exempted on its own 6.

Mexico runs the Sistema de Autorización Electrónica (SAE) for air travel. A Mexican consulate page says citizens of Russia, Türkiye and Ukraine flying to Mexico as visitors need the SAE. Those with a valid visa or permanent residence from the United States, Canada, Japan, the UK or the Schengen Area do not. The approval is printed and shown at the airline counter. Officers can grant up to 180 days as a visitor 4.

Embassy pages differ on how long an SAE stays valid. One page, last updated on 15 April 2019, says 30 days and one entry, free of charge 3. The consulate page says 180 days and one entry 4. Travellers should check the INM site.

On 25 July 2025 the government published an agreement in the official gazette for an Electronic Travel Authorisation (AEV) for foreign nationals arriving by air. Nationals of countries that need a Mexican visa would apply online before boarding. A press report said the eligible countries had not been named and gave no start date 5.

Biometrics and eGates

As of 13 January 2026 the Mexican Embassy in Belgium listed FMA gates at Mexico City (Terminals 1 and 2), Cancún (Terminals 3 and 4), San José del Cabo, Guadalajara, Puerto Vallarta, Querétaro and Tijuana 1.

Users must be 18 or older, travel only for tourism, travel without minors and hold an ordinary electronic passport valid for at least 180 days from one of 30 listed countries. Examples include Mexico, the United States, Canada, Spain, France, Germany, the UK and Japan. The service is free and needs no registration 1.

The traveller scans the passport and steps into a booth, where a photo is taken for face matching. The system checks biographic data, biometric data and flight information 1.

In April 2026 the Quintana Roo governor said Cancún was moving to 40 e-gates across Terminals 3 and 4, coordinated by the INM. Staffed desks were rising from 48 to 54 2.

FMA ruleDetail
Age18 or older 1
PurposeTourism only 1
PassportOrdinary e-passport from one of 30 listed countries, valid 180 days 1
BiometricFace photo in the booth 1
RegistrationNone needed 1

Passenger data: API and PNR

Article 46 of the Migration Law requires airlines and shipping firms carrying international passengers to send the INM electronic data on passengers, crew and vehicles entering or leaving Mexico. The INM sets the timing in general administrative rules 6.

Article 157 sets fines of 1,000 to 10,000 days of minimum wage for carriers that fail to send the data, or send it late, incomplete or wrong 6. The regulation defines when a transmission counts as incomplete, incorrect or late 7.

Mexico has collected advance data for customs too. In July 2015 a statement from EU Commissioner Dimitris Avramopoulos said Mexico had required carriers to send passenger and crew data to customs before arrival since 2012, to flag high-risk travellers and find drugs, weapons and undeclared cash 9.

The same 2015 statement said the EU and Mexico had opened talks on a PNR agreement on 14 July 2015 with the head of the tax and customs authority (SAT). Mexico's finance ministry tied PNR from EU flights to the agreement entering into force 9. Airline guidance lists both API and PNR for flights to and from Mexico 10.

Watch lists and checks

The Migration Law regulation defines migration control lists as databases of records produced by the competent authorities. A migration alert is the notice generated when a person or document matches a record on those lists 7.

Federal bodies must give the INM information on the entry, exit and stay of people in Mexico. The INM runs the lists and shares their contents with national security bodies that ask for it. Each body is responsible for the records it asks to add, update or remove 7.

When the INM finds that a person seeking entry falls under the law's grounds for refusal, it informs the competent authorities and carries out a second inspection 7.

Your data: the law and how to ask for records

A decree published on 20 March 2025 issued a new General Law on the Protection of Personal Data Held by Obligated Subjects, which covers public bodies. The same decree issued a new federal law for private parties such as airlines 8.

The decree moved the functions of the former National Institute for Transparency, Access to Information and Personal Data Protection (INAI). Its staff passed to the Ministry of Anticorruption and Good Government and to the new body Transparencia para el Pueblo 8.

People can use ARCO rights: access, rectification, cancellation and objection. A public body must answer within 20 days, with one extension of up to 10 days. Copies of up to 20 pages are free 8.

The law says data protection can be limited only for national security, public order, public safety and health, or to protect the rights of others. National security bodies can appeal directly to the Supreme Court against rulings they say put national security at risk 8. We could not find a published retention period for INM border records as of 19 October 2026.

Who runs the systems

The INM handles migration control, the FMM, the SAE, passenger data and the control lists 1,36,7. The Ministry of the Interior (SEGOB) is to decide which nationalities fall under the AEV 5.

Some airports have military roles. In May 2023 a report said the Navy runs security work at Mexico City International Airport 12. The official sources we opened did not name the contractors behind the gates or data systems.

Security screening on departure

In May 2023 the Navy said it would step up inspections of aircraft at Mexico City airport to fight drug trafficking. It said it would not search passengers on board 12.

A May 2025 press guide, citing the Mexico City airport and the US TSA, said cabin liquids are limited to containers of up to 100 ml, packed in one clear resealable bag of up to 1 litre per passenger. Prescribed medicines and special diets are exempt. Items that fail the rules are taken at the checkpoint 11.

Common questions

Can I use the eGates in Mexico?

If you are 18 or older, travelling only for tourism, without minors, and hold an ordinary e-passport from one of 30 listed countries, valid for 180 days 1.

What is the FMM?

The Forma Migratoria Múltiple is the entry record. At FMA gates you download a digital FMM by scanning a QR code, and you keep it until you leave 1.

Who needs the SAE?

Citizens of Russia, Türkiye and Ukraine flying in as visitors. Holders of a valid visa or permanent residence from the US, Canada, Japan, the UK or the Schengen Area are exempt 4.

Has Mexico started its new AEV?

An agreement was published on 25 July 2025. A press report at the time gave no start date or list of countries 5.

How fast must a public body answer my data request?

Within 20 days, with one extension of up to 10 days 8.

Related

Sources

  1. Embassy of Mexico in Belgium: Filtros Migratorios Autónomos (FMA) en aeropuertos internacionales de México (updated 13 January 2026)
  2. La Razón: Con 40 e-gates y más filtros, Cancún moderniza control migratorio (3 April 2026)
  3. Embassy of Mexico in Russia: Autorización electrónica (updated 15 April 2019)
  4. Consulate of Mexico in Milan: Documentación a extranjeros, SAE (checked 19 October 2026)
  5. Publimetro: México tendrá visa electrónica para extranjeros (25 July 2025)
  6. Cámara de Diputados: Ley de Migración (25 May 2011, last reform 15 January 2026)
  7. Cámara de Diputados: Reglamento de la Ley de Migración (28 September 2012, last reform 23 May 2014)
  8. Cámara de Diputados: Ley General de Protección de Datos Personales en Posesión de Sujetos Obligados (20 March 2025, last reform 14 November 2025)
  9. Dimitris Avramopoulos (European Commissioner): Opening of negotiations for an EU-Mexico PNR agreement (14 July 2015)
  10. All Nippon Airways (ANA): API/PNR special guidance for each country (no page date, checked 19 October 2026)
  11. ADN40: Qué líquidos puedes llevar en equipaje de mano al viajar en avión (21 May 2025)
  12. El Financiero: Mano dura en el AICM, militares intensificarán inspecciones de aeronaves (30 May 2023)

Spotted an error? Write to [email protected]. See how we work on the methodology page.