Are Your USMCA Benefits at Risk? The Rules of Origin Mistakes That Trigger Enforcement Actions

Many companies have grown comfortable operating under the USMCA, treating certificates of origin as just another routine step in the export process. Everything may seem to run smoothly... until a compliance issue exposes hidden risks in the supply chain. The reality is that Rules of Origin have become one of the most vulnerable areas for companies trading across North America, not only because of the agreement’s requirements, but because the responsibility for getting them right falls largely on the exporter, who must absorb the legal, financial, and operational consequences of any mistake.

An incorrect tariff classification, a vague description on a certificate of origin, a supplier that cannot properly document where its materials come from, or a company that does not keep complete records of its temporary imports... any of these issues can put millions of dollars in exports at risk. How, you might ask? Audits covering up to six years, penalties ranging from 70% to 100% of the value of the goods and even the suspension of IMMEX program benefits.

The USMCA is not just a way to access tariff benefits; it also sets the rules for who can participate fully in regional trade. Companies that are unable to clearly prove where their products come from may face difficulties taking advantage of the agreement and competing within the North American market.

At the end of this article, you will find a link to download “USMCA 2026: What Executives Need to Know (Before Everyone Else)”, an executive guide that explores these topics in greater depth and provides practical insights to help your company anticipate regulatory changes, strengthen compliance strategies, and avoid costly risks associated with the evolving USMCA landscape.

General Criteria: Where Most USMCA Audits Begin

At first glance, raising the de minimis threshold from 7% to 10% (allowing a slightly higher share of materials from outside North America without affecting a product’s preferential status) may seem like a benefit for manufacturers.

More room for error. More flexibility for Asian inputs. Less pressure on regional suppliers.

However, this apparent flexibility is misleading. In sensitive sectors such as automotive, textiles, and steel, Product-Specific Rules (PSRs) have become so detailed that the margin for operational error has narrowed dramatically.

Table 1. Evolution of USMCA General Criteria and Their Practical Implications

The underestimated risk here is the belief that greater flexibility automatically means easier compliance. In practice, the opposite is true. Since there is no longer a standard certification form (such as NAFTA’s former CBP Form 434), companies must create and manage their own documentation process. This gives businesses more flexibility, but it also means they are responsible for making sure all the required information is accurate and complete.

Self-Certify, Self-Destruct? The Hidden Risk Behind USMCA Compliance

One of the major innovations of the USMCA was the elimination of the rigid NAFTA Certificate of Origin format and its replacement with self-certification. In theory, this represents trade facilitation: any commercial document (an invoice, packing list, or company-designed format) may serve as proof of origin, provided it contains nine specific data elements.

The silent risk of self-certification lies in the phrase “under penalty of perjury.” By signing electronically or physically, the certifier assumes legal responsibility for proving during an audit that every non-originating material underwent the correct tariff shift or that the Regional Value Content (RVC) calculation was performed using accurate accounting data.

Companies that simply copy and paste certificates from previous years, or blindly trust information provided by suppliers, are building a hidden tax liability that can be activated at any time.

Important Note: Traceability (the ability to track and document the origin of a product and its inputs throughout the production chain) is an essential component supporting any certificate of origin. Without a file containing purchasing records, composition specifications, detailed production processes, and commercial agreements, the certification becomes little more than an unsupported piece of paper.

The Enforcement Arm: Audits, Penalties, and the Sharp Edge of Retroactivity

Today’s regulatory environment is defined by deep, technology-driven enforcement.

Authorities have moved away from random reviews and toward risk-based audits powered by artificial intelligence capable of cross-referencing electronic invoicing data (CFDI) with import declarations. Mexico’s SAT continues to deploy increasingly sophisticated systems for identifying anomalies in import patterns, while U.S. Customs and Border Protection (CBP) performs similar functions through its ACE platform.

Why Past Certifications Can Become Future Liabilities 

Authorities may initiate origin verifications up to five years after the date of importation in the United States and up to six years afterward in Mexico and Canada.

This means that a company may enjoy tariff benefits for years only to receive notice in the fifth or sixth year that an audit is challenging the validity of its past operations.

If the audit result is unfavorable, the consequences can be severe:

• Retroactive payment of duties covering the previous five or six years, adjusted for inflation and surcharges.
• Significant penalties. In Mexico, SAT may impose fines ranging from 70% to 100% of the value of the goods or omitted duties.
• Suspension from key registries, including the importer registry or the IMMEX program, effectively halting operations.
• Permanent scrutiny. Companies that fail origin audits are flagged in customs risk-analysis systems, increasing the likelihood that future shipments will be physically inspected.

 The Weak Links: SMEs and Tier 2/Tier 3 Suppliers 

The greatest vulnerability within the USMCA framework often lies in the lower tiers of the supply chain.

Large automotive and aerospace manufacturers operating in Mexico have invested heavily in compliance departments. Smaller suppliers, however, frequently lack the infrastructure required to meet treaty standards.

Many SMEs still manage compliance intuitively, without data-driven controls or personnel trained in customs legislation. This creates multiple points of failure:

• Lack of internal traceability: They cannot identify which imported raw-material lot was used in which exported finished product, making origin audits impossible to defend.
• Dependence on third parties: They rely entirely on customs brokers for tariff classification, forgetting that legal responsibility ultimately belongs to the importer or exporter.
• Inability to respond: During an origin audit, SAT or CBP typically grants approximately 30 days to produce supporting documentation. SMEs without organized digital files often lose the case simply because they cannot provide evidence in time.

The vulnerability of SMEs ultimately becomes the vulnerability of major OEMs.

If a Tier 3 supplier fails to certify the origin of a steel component, the OEM may be unable to satisfy the treaty’s regional sourcing requirements.

Companies making major capital investments (CAPEX) in 2026 based on today’s rules may find themselves operating under a significantly different regulatory framework in 2027.

"One of the central topics of discussion with the United States will be Rules of Origin, and I believe that is very good news for Mexico. More investment will arrive, and we can ensure that more of what is produced in North America is actually made in North America."

Emilio CadenaCEO, Prodensa

However, that additional regional investment will only flow to companies capable of demonstrating compliance with increasingly demanding standards.

Future-Proofing Your USMCA Strategy

To survive the growing rigor of the USMCA, companies must evolve from a model of reactive compliance to one of customs intelligence and proactive risk management.

This transformation requires three immediate actions:

Ultimately, Rules of Origin are the filter that will determine who the winners are in the new regional economy.

Although they represent the most fragile point, they also offer an opportunity for tariff optimization through product engineering and the development of robust supply chains that provide a sustainable competitive advantage.

• Rules of Origin (ROO):

The requirements used to determine whether a product qualifies for preferential tariff treatment under the USMCA based on where its materials and production activities originate.

• Regional Value Content (RVC):

The percentage of a product’s value that must be generated within North America in order to meet USMCA requirements.

• Certificate of Origin:

A document used to certify that a product qualifies for USMCA preferential treatment. Under the agreement, companies may self-certify origin provided they maintain supporting documentation.

• Tariff Shift Rule:

A methodology used to determine origin by evaluating whether non-originating materials undergo a required change in tariff classification during production.

Why are Rules of Origin becoming more important under the USMCA?

Because customs authorities are increasing enforcement and demanding greater traceability, documentation, and verification of origin claims.

What happens if a company fails an origin audit?

Potential consequences include retroactive duty payments, significant fines, suspension of IMMEX benefits, and increased customs scrutiny.

Who is legally responsible for a Certificate of Origin?

The importer, exporter, or producer that certifies origin assumes responsibility for proving compliance during an audit.

Why are Tier 2 and Tier 3 suppliers considered a risk?

Because weak documentation, poor traceability, or inaccurate origin certifications at lower levels of the supply chain can compromise compliance for the entire operation.

How can manufacturers reduce origin-related risk?

By implementing traceability systems, validating supplier documentation, conducting preventive audits, and maintaining complete digital compliance records.

• Rules of Origin are no longer a customs formality. They are becoming one of the most important competitive and risk-management issues facing manufacturers in North America.
• Traceability is replacing cost as the new strategic differentiator. Companies that can prove origin quickly and accurately will be better positioned for future audits and enforcement actions.
• The weakest supplier can become the greatest compliance risk. Origin compliance is only as strong as the least prepared link in the supply chain.
• Preparation creates resilience. Organizations that invest in systems, documentation, supplier validation, and customs intelligence today will be better equipped to navigate the next phase of USMCA enforcement.