RFC Verification: Verify Mexico RFC Tax Registration Number

What Is an RFC in Mexico?

The RFC (Registro Federal de Contribuyentes) is Mexico’s federal taxpayer registry number, issued by SAT to every individual and legal entity with economic activity in Mexico. Registration is a statutory obligation under Article 27 of the Código Fiscal de la Federación (CFF, Federal Tax Code). The RFC gates CFDI invoicing, ISR (Impuesto Sobre la Renta, income tax) and IVA (Impuesto al Valor Agregado, VAT) filings, banking, payroll, and customs.

Searchers often confuse the RFC with two other Mexican IDs. They differ by issuer, purpose, and length.

The CURP matters here for one practical reason: an individual can retrieve their own RFC from it, covered in the FAQ below.

What Is the Correct RFC Format?

An RFC is 12 characters for a legal entity and 13 for an individual, built from name letters, a date, and a 3-character homoclave that SAT assigns algorithmically. The homoclave is not random. Its final character is a modulus-11 check digit computed from the preceding characters, which lets you pre-validate an RFC’s structure offline before ever querying SAT.

When the derived four letters would spell an offensive word, or contain “Ñ,” SAT substitutes the first letter with “X.” The homoclave exists specifically to prevent duplicate RFCs for taxpayers with identical name-and-date combinations, per SAT’s official taxpayer guidance.

What Are the Generic RFCs XAXX010101000 and XEXX010101000?

SAT’s Anexo 20 CFDI-filling guide defines two generic keys for when the receiver has no RFC. Use XAXX010101000 for domestic sales to the general public, where the receiver name must read “PÚBLICO EN GENERAL.” Use XEXX010101000 for foreign residents or clients without a Mexican RFC. The legal basis is CFF Article 29-A and the Resolución Miscelánea Fiscal.

How Do You Verify an RFC Online With SAT?

SAT’s free “Verifica si estás registrado en el RFC” tool confirms in real time whether an RFC (12 or 13 positions) or a CURP is currently registered in the federal registry. It returns an immediate result, needs no password or e.firma, and works for a single record. A result tells you the RFC exists; it does not confirm the counterparty’s full tax status or screen for fraud.

Follow these corrected steps:

1. Open SAT’s Verifica si estás registrado en el RFC tool.
2. Enter the RFC key, or a CURP if you are retrieving an individual’s RFC.
3. Complete the captcha and submit.
4. Read the real-time result: registered or not registered.

Note what this does not tell you: it will not reveal a company’s RFC you do not already have, and it does not check the 69-B phantom-invoicer list.

Can You Look Up a Company’s RFC in Mexico?

No. There is no public, browsable database of Mexican RFCs searchable by company name, per the org-id.guide MX-RFC reference. SAT only offers a validator that confirms an RFC you already hold. You must obtain a counterparty’s RFC directly from them, unlike some EU VAT-number registries you can search from scratch. “RFC lookup Mexico” realistically means validation, not open search.

How Do Individuals Retrieve Their Own RFC?

Individuals can retrieve their own RFC key by submitting their CURP through SAT’s official “Consulta tu clave de RFC mediante CURP” procedure, listed on the gob.mx trámites catalog as ficha SAT132. This is a self-service retrieval for the taxpayer, not a way to look up someone else.

How Do You Verify a Supplier’s RFC Before Invoicing?

Existence-checking is not enough for a defensible supplier check. A sound review has four layers, from cheapest to most protective. The fourth layer, screening against the Article 69-B phantom-invoicer list, is what protects your deductions and is missing from most guides.

1. Offline pre-validation. Test the RFC’s structure and check digit to catch typos before hitting SAT.
2. SAT online validation. Confirm the RFC exists and the name pairing matches the registry.
3. Constancia de Situación Fiscal. Request the supplier’s Certificate of Tax Status PDF and scan its QR code back to SAT to confirm status, regime, and address.
4. 69-B EFOS screening. Check the RFC against SAT’s Article 69-B list of EFOS (Empresas que Facturan Operaciones Simuladas, companies issuing simulated invoices). Under CFF Article 69-B, transacting with a listed phantom invoicer can get your deductions disallowed.

The Constancia is what older guides call the “tax registration certificate.” It is the document, not a separate ID.

Can You Validate RFCs in Bulk?

Yes. SAT offers free batch validation where you upload a file of RFC keys and confirm each one against the federal registry, with an immediate result and no service-desk case. Accounts-payable and finance teams use it to clear large supplier lists before invoicing. Offline check-digit pre-validation is the cheap first pass at scale, filtering typos before you submit the batch.

For reference, SAT’s online validation service processes up to 5,000 records in one batch file, according to SAT’s official tool page.

What Happens If You Use an Invalid RFC?

An invalid RFC blocks CFDI issuance and exposes you to SAT penalties. The consequences fall into three buckets: fines, denied benefits, and reputational damage. Under CFF Article 29-A, a receipt missing required elements such as the correct RFC cannot be deducted or credited for tax purposes, so a bad RFC directly destroys the deduction.

Denied benefits include blocked IVA registration and disallowed deductions, including the 69-B risk. Reputational damage follows when counterparties run their own due diligence and find your RFC does not validate. Peso fine amounts are set in the CFF and re-indexed each year, so confirm the current figure against the code rather than repeating a stale band.

What Should You Do When RFC Verification Fails?

Read the result, identify the cause, then apply the matching fix. Most failed checks come from typos, propagation delay on a newly issued RFC, a name mismatch, or a canceled status, not from any “state code,” because RFCs contain no state code at all.

How Does a Foreign Company Get an RFC in Mexico?

Foreign companies with Mexican operations or a permanent establishment register with SAT to obtain a standard RFC, while foreign residents without one appear on CFDI invoices under the generic XEXX010101000. A non-resident that establishes a taxable presence in Mexico needs its own RFC. A foreign customer with no Mexican taxable presence simply appears under the generic key on the CFDI its supplier issues.

Non-resident digital service providers, such as streaming, apps, and marketplaces, register with SAT under Mexico’s digital-services VAT regime, obtain an RFC, appoint a Mexican legal representative and domicile, and collect and remit IVA. Whether an intermediary selling physical goods needs a full local entity depends on presence and activity, so confirm the obligation for your specific model before assuming the generic RFC covers you.

How Commenda Helps With Mexico Tax Compliance

Commenda’s indirect tax platform tracks your Mexican VAT and CFDI compliance obligations, surfaces what you have to file and when, and confirms it got done, so a bad RFC never quietly blocks an invoice or a deduction. If you are standing up a Mexican entity or registering a foreign company, Commenda’s entity management standardizes formation and keeps registration data current across borders.

For the day-to-day work, use Commenda’s global tax ID verification to validate counterparty IDs during onboarding and invoicing, and the compliance calendar to track filing deadlines by country and entity. Commenda supports 100+ ERPs, APIs, and custom integrations, so supplier and RFC checks fit your existing accounts-payable stack.

Book a demo for a walkthrough of your Mexico compliance exposure, from RFC and CFDI setup to VAT filing, and see exactly what you need to file and when.