Compliance

SAT Article 69-B Check (EFOS)

Credits: 1 per call.

Validates if an individual or legal entity is listed in the Mexican Tax Authority (SAT) Article 69-B blacklist. This list is specifically for EFOS (Empresas que Facturan Operaciones Simuladas), commonly known as ‘Factureros’ or shell companies involved in tax fraud and money laundering.

Business Rules (Search Priority):

The client must provide EITHER a name (name / Razón Social) OR an exact identifier (rfc).
If rfc is provided, the backend performs a strict exact match. If only name is provided, the backend performs a highly restrictive text search.

Risk Level Matrix (riskLevel mapped to SAT Status):

NONE: No matches found in the SAT 69-B list. Safe for automated approval.
LOW: The SAT status is ‘Desvirtuado’ (Investigated but successfully proved innocence) or ‘Sentencia Favorable’ (Won in court / cleared). Provided for audit trails and historical record.
MEDIUM: Reserved for intermediate risk states. Currently not produced by the SAT 69-B classification.
HIGH: The SAT status is ‘Presunto’ (Currently under investigation for simulated operations). Extreme caution advised; usually triggers Enhanced Due Diligence (EDD) or temporal blocks.
CRITICAL: The SAT status is ‘Definitivo’ (Confirmed shell company / EFOS). Legally binding block required for AML compliance.

Multi-match selection: A taxpayer may appear in more than one record (e.g., first listed as PRESUNTO, later reclassified to DEFINITIVO or SENTENCIA_FAVORABLE). The top-level riskLevel reflects only the record with the most recent publicationDateSat (falling back to publicationDateDof). All historical records are still returned in matches[] so you can audit the full timeline.

cURL

curl -X POST https://api.origoid.com/mex/compliance/v1/sat-69b-searches \
  -H "x-api-key: YOUR_API_KEY" \
  -H "content-type: application/json" \
  -d '{"name": "JUAN PEREZ LOPEZ"}'

const response = await fetch("https://api.origoid.com/mex/compliance/v1/sat-69b-searches", {
  method: "POST",
  headers: {
    "x-api-key": process.env.ORIGOID_API_KEY,
    "content-type": "application/json",
  },
  body: JSON.stringify({
    "name": "JUAN PEREZ LOPEZ"
  }),
});

if (!response.ok) {
  throw new Error(`HTTP ${response.status}`);
}

const result = await response.json();
console.log(result);

import os
import requests

response = requests.post(
    "https://api.origoid.com/mex/compliance/v1/sat-69b-searches",
    headers={
        "x-api-key": os.environ["ORIGOID_API_KEY"],
        "content-type": "application/json",
    },
    json={
        "name": "JUAN PEREZ LOPEZ"
    },
    timeout=30,
)
response.raise_for_status()
result = response.json()
print(result)

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.time.Duration;

public class Example {
    public static void main(String[] args) throws Exception {
        String payload = "{\"name\": \"JUAN PEREZ LOPEZ\"}";

        HttpClient client = HttpClient.newBuilder()
            .connectTimeout(Duration.ofSeconds(10))
            .build();

        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.origoid.com/mex/compliance/v1/sat-69b-searches"))
            .header("x-api-key", System.getenv("ORIGOID_API_KEY"))
            .header("content-type", "application/json")
            .timeout(Duration.ofSeconds(30))
            .POST(HttpRequest.BodyPublishers.ofString(payload))
            .build();

        HttpResponse<String> response = client.send(
            request, HttpResponse.BodyHandlers.ofString()
        );

        System.out.println(response.statusCode());
        System.out.println(response.body());
    }
}

<?php
$payload = '{"name": "JUAN PEREZ LOPEZ"}';

$ch = curl_init('https://api.origoid.com/mex/compliance/v1/sat-69b-searches');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => $payload,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'x-api-key: ' . getenv('ORIGOID_API_KEY'),
        'content-type: application/json',
    ],
]);

$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

if ($status >= 400) {
    throw new Exception("HTTP $status");
}

$result = json_decode($response, true);
print_r($result);

package main

import (
	"bytes"
	"encoding/json"
	"fmt"
	"log"
	"net/http"
	"os"
	"time"
)

func main() {
	payload := []byte(`{"name": "JUAN PEREZ LOPEZ"}`)
	req, err := http.NewRequest("POST", "https://api.origoid.com/mex/compliance/v1/sat-69b-searches", bytes.NewBuffer(payload))
	if err != nil { log.Fatal(err) }
	req.Header.Set("x-api-key", os.Getenv("ORIGOID_API_KEY"))
	req.Header.Set("content-type", "application/json")

	client := &http.Client{Timeout: 30 * time.Second}
	resp, err := client.Do(req)
	if err != nil { log.Fatal(err) }
	defer resp.Body.Close()

	var result map[string]any
	if err := json.NewDecoder(resp.Body).Decode(&result); err != nil {
		log.Fatal(err)
	}
	fmt.Println(result)
}

using System;
using System.Net.Http;
using System.Text;
using System.Threading.Tasks;

class Program
{
    static async Task Main()
    {
        using var client = new HttpClient { Timeout = TimeSpan.FromSeconds(30) };
        client.DefaultRequestHeaders.Add("x-api-key",
            Environment.GetEnvironmentVariable("ORIGOID_API_KEY"));

        var payload = "{\"name\": \"JUAN PEREZ LOPEZ\"}";
        var content = new StringContent(payload, Encoding.UTF8, "application/json");

        var response = await client.PostAsync("https://api.origoid.com/mex/compliance/v1/sat-69b-searches", content);
        response.EnsureSuccessStatusCode();

        var body = await response.Content.ReadAsStringAsync();
        Console.WriteLine(body);
    }
}

{
  "status": "OK",
  "type": "SUCCESS",
  "message": "No SAT 69-B matches found",
  "data": {
    "matchFound": false,
    "riskLevel": "NONE",
    "totalMatchesFound": 0,
    "matches": []
  },
  "transactionId": "c3d4e5f6-a7b8-9c0d-1e2f-234567890123",
  "processedAt": "2026-03-19T10:05:00-06:00",
  "billable": true
}

Authorizations

x-api-key

string

header

required

Body

application/json

Option 1
Option 2

name

string

required

Full name for individuals or Legal Business Name for companies.

rfc

string

Subject's RFC. Prioritized for exact matching if provided.

Response

SAT Article 69-B search results (Strict Envelope Pattern).

status

enum<string>

required

High-level outcome. OK means the request was successfully processed (regardless of business result). ERROR means the request was rejected or could not be processed.

Available options:

OK,

ERROR

type

string

required

Stable result type code. Includes generic codes (SUCCESS, INVALID_REQUEST, UNAUTHORIZED, SERVICE_UNAVAILABLE, INTERNAL_ERROR, RATE_LIMIT_EXCEEDED) plus endpoint-specific result codes — see this endpoint's response examples.

message

string

required

Human-readable summary of the result. Always in English (per Language Conventions in the API overview).

transactionId

string<uuid>

required

Unique identifier of this request, generated by the API Gateway. Propagated end-to-end for traceability.

processedAt

string<date-time>

required

ISO 8601 datetime with Mexico City offset (-06:00). Always set by the API Gateway when the response leaves the system.

billable

boolean

required

Whether this request will be charged against the client's plan. Typically true for successful business results and false for validation errors or system errors that prevented processing.

data

object | null

Response payload. null on error responses. Shape depends on the endpoint — see each operation's response schema.

errors

object[]

Per-field error details. Present only on INVALID_REQUEST responses.

Show child attributes

cURL

curl -X POST https://api.origoid.com/mex/compliance/v1/sat-69b-searches \
  -H "x-api-key: YOUR_API_KEY" \
  -H "content-type: application/json" \
  -d '{"name": "JUAN PEREZ LOPEZ"}'

const response = await fetch("https://api.origoid.com/mex/compliance/v1/sat-69b-searches", {
  method: "POST",
  headers: {
    "x-api-key": process.env.ORIGOID_API_KEY,
    "content-type": "application/json",
  },
  body: JSON.stringify({
    "name": "JUAN PEREZ LOPEZ"
  }),
});

if (!response.ok) {
  throw new Error(`HTTP ${response.status}`);
}

const result = await response.json();
console.log(result);

import os
import requests

response = requests.post(
    "https://api.origoid.com/mex/compliance/v1/sat-69b-searches",
    headers={
        "x-api-key": os.environ["ORIGOID_API_KEY"],
        "content-type": "application/json",
    },
    json={
        "name": "JUAN PEREZ LOPEZ"
    },
    timeout=30,
)
response.raise_for_status()
result = response.json()
print(result)

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.time.Duration;

public class Example {
    public static void main(String[] args) throws Exception {
        String payload = "{\"name\": \"JUAN PEREZ LOPEZ\"}";

        HttpClient client = HttpClient.newBuilder()
            .connectTimeout(Duration.ofSeconds(10))
            .build();

        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.origoid.com/mex/compliance/v1/sat-69b-searches"))
            .header("x-api-key", System.getenv("ORIGOID_API_KEY"))
            .header("content-type", "application/json")
            .timeout(Duration.ofSeconds(30))
            .POST(HttpRequest.BodyPublishers.ofString(payload))
            .build();

        HttpResponse<String> response = client.send(
            request, HttpResponse.BodyHandlers.ofString()
        );

        System.out.println(response.statusCode());
        System.out.println(response.body());
    }
}

<?php
$payload = '{"name": "JUAN PEREZ LOPEZ"}';

$ch = curl_init('https://api.origoid.com/mex/compliance/v1/sat-69b-searches');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => $payload,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 30,
    CURLOPT_HTTPHEADER => [
        'x-api-key: ' . getenv('ORIGOID_API_KEY'),
        'content-type: application/json',
    ],
]);

$response = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

if ($status >= 400) {
    throw new Exception("HTTP $status");
}

$result = json_decode($response, true);
print_r($result);

package main

import (
	"bytes"
	"encoding/json"
	"fmt"
	"log"
	"net/http"
	"os"
	"time"
)

func main() {
	payload := []byte(`{"name": "JUAN PEREZ LOPEZ"}`)
	req, err := http.NewRequest("POST", "https://api.origoid.com/mex/compliance/v1/sat-69b-searches", bytes.NewBuffer(payload))
	if err != nil { log.Fatal(err) }
	req.Header.Set("x-api-key", os.Getenv("ORIGOID_API_KEY"))
	req.Header.Set("content-type", "application/json")

	client := &http.Client{Timeout: 30 * time.Second}
	resp, err := client.Do(req)
	if err != nil { log.Fatal(err) }
	defer resp.Body.Close()

	var result map[string]any
	if err := json.NewDecoder(resp.Body).Decode(&result); err != nil {
		log.Fatal(err)
	}
	fmt.Println(result)
}

using System;
using System.Net.Http;
using System.Text;
using System.Threading.Tasks;

class Program
{
    static async Task Main()
    {
        using var client = new HttpClient { Timeout = TimeSpan.FromSeconds(30) };
        client.DefaultRequestHeaders.Add("x-api-key",
            Environment.GetEnvironmentVariable("ORIGOID_API_KEY"));

        var payload = "{\"name\": \"JUAN PEREZ LOPEZ\"}";
        var content = new StringContent(payload, Encoding.UTF8, "application/json");

        var response = await client.PostAsync("https://api.origoid.com/mex/compliance/v1/sat-69b-searches", content);
        response.EnsureSuccessStatusCode();

        var body = await response.Content.ReadAsStringAsync();
        Console.WriteLine(body);
    }
}

{
  "status": "OK",
  "type": "SUCCESS",
  "message": "No SAT 69-B matches found",
  "data": {
    "matchFound": false,
    "riskLevel": "NONE",
    "totalMatchesFound": 0,
    "matches": []
  },
  "transactionId": "c3d4e5f6-a7b8-9c0d-1e2f-234567890123",
  "processedAt": "2026-03-19T10:05:00-06:00",
  "billable": true
}

Authentication

RENAPO

Social Security

INE

Biometrics

Compliance

Email

Proof of Address

Fiscal

Banking

SAT Article 69-B Check (EFOS)

Authorizations

Body

Response