{
  "story_id": "233175588b4887e6718552701384e5ca",
  "desk": "drm3",
  "revision": 1,
  "published_at": "2026-09-03T02:33:08.000Z",
  "content_hash": "24de71ab06dfb2b0d4108fcf46cb6053e177bf0c6c8c45665adbfad24ffeaa42",
  "hash_basis": "sha256 over `headline\\ndek\\nprose`, plus `\\n` + the canonical citations JSON when any source is placed, plus `\\n#blog` for blogs",
  "basis": {
    "headline": "Mexican Banks Allow SMS for High-Security Financial Authentication",
    "dek": "CNBV regulation now permits SMS as a Category 3 authentication factor for specific digital banking operations in Mexico.",
    "prose": "The National Banking and Securities Commission (CNBV) in Mexico updated regulations to include SMS as a permitted channel for sending Category 3 authentication factors. [^1]\n\nMexican banks will implement SMS-based authentication for specific financial transactions starting September 2, 2026. [^2]\n\nPreviously, Category 3 authentication factors were restricted to encrypted email or secure instant messaging services. [^3]\n\nThe new regulation applies to services provided by technology-based intermediaries (comisionistas de base tecnológica) in Mexico. [^4]\n\nThe specific operations covered include opening Level 2 accounts, transfers up to 3,000 UDIS (equivalent to 26,434.79 Mexican pesos), and payments for goods and services. [^5]\n\nThe new regulation allows text messages to serve as a Category 3 authentication factor to verify account ownership for high-security operations. [^6]\n\nThe regulation applies to base technology agents offering services including account openings, loans up to 3,000 UDIs, payments, and balance inquiries. [^7]\n\nBanks must provide clear and visible options on their websites or agent applications for customers to update their registered phone numbers for receiving SMS codes. [^8]",
    "cited": "[{\"statement\":\"The National Banking and Securities Commission (CNBV) in Mexico updated regulations to include SMS as a permitted channel for sending Category 3 authentication factors.\",\"source\":\"Expansión News\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T16:54:39.000Z\",\"publisher_count\":1,\"sources\":[\"Expansión News\"]},{\"statement\":\"Mexican banks will implement SMS-based authentication for specific financial transactions starting September 2, 2026.\",\"source\":\"Vanguardia\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-03T02:33:08.000Z\",\"publisher_count\":1,\"sources\":[\"Vanguardia\"]},{\"statement\":\"Previously, Category 3 authentication factors were restricted to encrypted email or secure instant messaging services.\",\"source\":\"Expansión News\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T16:54:39.000Z\",\"publisher_count\":1,\"sources\":[\"Expansión News\"]},{\"statement\":\"The new regulation applies to services provided by technology-based intermediaries (comisionistas de base tecnológica) in Mexico.\",\"source\":\"Expansión News\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T16:54:39.000Z\",\"publisher_count\":1,\"sources\":[\"Expansión News\"]},{\"statement\":\"The specific operations covered include opening Level 2 accounts, transfers up to 3,000 UDIS (equivalent to 26,434.79 Mexican pesos), and payments for goods and services.\",\"source\":\"Expansión News\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T16:54:39.000Z\",\"publisher_count\":1,\"sources\":[\"Expansión News\"]},{\"statement\":\"The new regulation allows text messages to serve as a Category 3 authentication factor to verify account ownership for high-security operations.\",\"source\":\"Vanguardia\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-03T02:33:08.000Z\",\"publisher_count\":1,\"sources\":[\"Vanguardia\"]},{\"statement\":\"The regulation applies to base technology agents offering services including account openings, loans up to 3,000 UDIs, payments, and balance inquiries.\",\"source\":\"Vanguardia\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-03T02:33:08.000Z\",\"publisher_count\":1,\"sources\":[\"Vanguardia\"]},{\"statement\":\"Banks must provide clear and visible options on their websites or agent applications for customers to update their registered phone numbers for receiving SMS codes.\",\"source\":\"Vanguardia\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-03T02:33:08.000Z\",\"publisher_count\":1,\"sources\":[\"Vanguardia\"]}]",
    "kind": "news"
  },
  "receipt_verify": "Ed25519 over the dot-joined string `slice_hash.cursor_from.cursor_to.view.view_version.row_count`; public_key and sig are base64url of the raw 32-byte key / 64-byte signature",
  "receipt": null,
  "receipt_note": "this revision predates receipt-keeping (before v0.37.0); the filed row lives in the record",
  "generation_chain": {
    "wire": {
      "stream": "fountain_news",
      "story_id": "aae37d70d0773d60d330a3d03a6350dc",
      "thread_id": "35be6a6f660657302576b9c9a558bc5a",
      "thread_label": "CNBV",
      "novelty": "UPDATE",
      "content_hash": "99564ea174f100b7f3e2861fbba96eeb1a6636313214745bdc2e553658d911de",
      "last_published_at": "2026-09-03T02:33:08.000Z",
      "read_receipt": {
        "slice_hash": "85da8bf8dbdb985d831757997629c12273022effbecfd0e126c2f368f00b2970",
        "cursor_from": "eyJ0cyI6IjIwMjYtMDktMDNUMDI6MDI6NDIuMDAwMDAwWiIsImlkIjoiYmYyN2Y5MGFmNDQ3MmI4ZDE3NTEwZDZiYzFmOWVkYjEiLCJ2IjoiMSJ9",
        "cursor_to": "eyJ0cyI6IjIwMjYtMDktMDNUMDI6NTE6MTkuMDAwMDAwWiIsImlkIjoiNTU5MGI3OGYwMzBhYmRlMWI5NDMwMGU1ZjU0NGNmMmYiLCJ2IjoiMSJ9",
        "view": "v_fountain_news",
        "view_version": "1",
        "row_count": 100,
        "window_days": 3,
        "bytes_scanned": 12568115,
        "credits": 8,
        "price_per_100_rows": 8,
        "sig": "UkKAzvXxcHY8DtvNX9cQQ5sA4E17GIFVNTCBlsLEJksHFwaf8SE4_neOS1mWBQpuJn0dtVwPOsXLXvhR2ckpDA",
        "public_key": "bMUigy8O0jOnBxQ4Sc-5lwhIZ8LQVAhxMbR7qESVuUE",
        "signer_path": "lakehouse/data-extract/v1",
        "alg": "Ed25519",
        "signed": true
      }
    },
    "written_at": "2026-09-03T06:46:01.252Z"
  },
  "cited_facts": [
    {
      "statement": "The National Banking and Securities Commission (CNBV) in Mexico updated regulations to include SMS as a permitted channel for sending Category 3 authentication factors.",
      "source": "Expansión News",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T16:54:39.000Z",
      "publisher_count": 1,
      "sources": [
        "Expansión News"
      ]
    },
    {
      "statement": "Mexican banks will implement SMS-based authentication for specific financial transactions starting September 2, 2026.",
      "source": "Vanguardia",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-03T02:33:08.000Z",
      "publisher_count": 1,
      "sources": [
        "Vanguardia"
      ]
    },
    {
      "statement": "Previously, Category 3 authentication factors were restricted to encrypted email or secure instant messaging services.",
      "source": "Expansión News",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T16:54:39.000Z",
      "publisher_count": 1,
      "sources": [
        "Expansión News"
      ]
    },
    {
      "statement": "The new regulation applies to services provided by technology-based intermediaries (comisionistas de base tecnológica) in Mexico.",
      "source": "Expansión News",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T16:54:39.000Z",
      "publisher_count": 1,
      "sources": [
        "Expansión News"
      ]
    },
    {
      "statement": "The specific operations covered include opening Level 2 accounts, transfers up to 3,000 UDIS (equivalent to 26,434.79 Mexican pesos), and payments for goods and services.",
      "source": "Expansión News",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T16:54:39.000Z",
      "publisher_count": 1,
      "sources": [
        "Expansión News"
      ]
    },
    {
      "statement": "The new regulation allows text messages to serve as a Category 3 authentication factor to verify account ownership for high-security operations.",
      "source": "Vanguardia",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-03T02:33:08.000Z",
      "publisher_count": 1,
      "sources": [
        "Vanguardia"
      ]
    },
    {
      "statement": "The regulation applies to base technology agents offering services including account openings, loans up to 3,000 UDIs, payments, and balance inquiries.",
      "source": "Vanguardia",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-03T02:33:08.000Z",
      "publisher_count": 1,
      "sources": [
        "Vanguardia"
      ]
    },
    {
      "statement": "Banks must provide clear and visible options on their websites or agent applications for customers to update their registered phone numbers for receiving SMS codes.",
      "source": "Vanguardia",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-03T02:33:08.000Z",
      "publisher_count": 1,
      "sources": [
        "Vanguardia"
      ]
    }
  ],
  "note": "A signature proves who filed this and that it has not changed since. It never makes a claim true."
}