PEMEX urges Suppliers and Contractors to prevent Fraud and Identity Impersonation
Petróleos Mexicanos (PEMEX) informs its suppliers and contractors that fraud attempts have been identified involving emails, telephone calls, SMS messages, WhatsApp, and other messaging applications from individuals falsely claiming to represent PEMEX.
To help protect your organization from potential fraud schemes, we strongly recommend observing the following security measures:
Security Recommendations
- PEMEX does not conduct official communications related to supplier registration or validation through WhatsApp or other instant messaging applications. All communications must be carried out through authorized institutional channels.
- Do not disclose financial, banking, tax, contractual, corporate, or other sensitive information without first verifying the authenticity and legitimacy of the request.
- Verify that any communication related to supplier registration originates exclusively from the following authorized institutional domains:
- @pemex.com
- @pemexprocurement.com (official domain of PEMEX Procurement International (PPI))
- Do not respond to emails sent from domains other than those identified above.
- Exercise heightened caution with any request involving banking information, payment instructions, account updates, or financial transactions. Before taking any action, independently verify the request through official PEMEX channels.
- The supplier registration is a self-registration process. Therefore, no one within Pemex, and certainly no external party, is authorized to complete your company’s registration on your behalf.
- Supplier registration with PEMEX is free of charge. PEMEX does not request payments, deposits, transfers, commissions, or fees to complete, maintain, validate, or update supplier registrations.
- Do not send sensitive documentation by email. All supplier information and supporting documentation must be submitted and managed exclusively through the HIIP 2.0 platform.
If you receive any suspicious communication claiming to be from PEMEX, do not provide information, share documentation, make payments, or follow any instructions contained in the message. Instead, independently verify the authenticity of the communication through official PEMEX channels before taking any action.
