Mexican citizenship: the three legal routes, and where forgery begins

Mexico is one of the countries most affected by fraud in the second-passport market. Understanding why requires understanding how the Mexican civil registry actually works — without that, it is impossible to tell a genuine document from one that is about to be cancelled.

Three routes to citizenship

The first is birth on Mexican soil. The foundational document here is a birth certificate issued at birth on an officially numbered form. Citizenship does not depend on the parents' nationality.

The second is birth abroad to a Mexican-citizen parent. Under the constitution, such a person is a citizen from birth and can claim the status at any point — there is no deadline. The first document issued is a registration act. Under the regulations, an administrative check confirms that a parent holds citizenship; the check is strict, and the act is signed by a senior official.

The third is naturalization. This is formalized with a naturalization card after an exam. Grounds include a citizen child, a citizen spouse, or years of residence.

CURP: the code that gives everything away

The first document any Mexican citizen holds is a unique population registry code. It is not a random string — it encodes initials, date of birth, and place of birth.

The key detail: people who obtained citizenship through birth abroad carry a marker in their code showing birth outside the country. This is exactly why the most common forgery collapses instantly on inspection — the code carries the foreign-birth marker, while the passport lists Mexico as the place of birth. That combination is impossible: the document is generated by the system, not typed up by a person, and a mismatch like that means someone intervened by hand.

How the typical scheme works

Organizers find a registry office in a district with weak oversight, place their own person there, and start entering into the electronic database whatever the client requests. That is why these passports come with an offer to keep the client's existing surname and place of birth — even though, by the logic of the Mexican system, that combination should not be possible.

A separate red flag is surname structure. In Mexico, a child's record is required to carry two surnames — paternal and maternal. A missing second surname immediately raises questions, both for the algorithm and for any official who checks.

Clients are driven to actual government offices, have their biometrics taken, watch the database opened, and watch the document printed. On the surface the process looks entirely official — and that is exactly what builds trust.

What happens next

The scheme has a limited shelf life — usually around a year, until a large-scale audit catches up with it. After that, the office is inspected, the documents are cancelled, and clients are left holding invalid passports. Some find out the hard way, at a border crossing.

How to check a document

1. Cross-check the population registry code against the place of birth on the passport: a foreign-birth marker together with a Mexican place of birth is impossible.
2. Check the surname structure — both parts should be present.
3. Check the chip: current passports carry a cryptographically protected chip readable with standard e-document reader apps. The chip itself cannot be forged — it can only be issued officially.
4. Check that the underlying document exists: without it, the passport will be cancelled at the first systemic audit.

Bottom line

A genuine passport issued on a nonexistent legal basis is a document with a built-in expiry date. It works exactly until the database is checked automatically, and after that it becomes grounds for detention. More on this topic in upcoming articles.