3 Mexican States Where the US State Department Advisory and SESNSP Data Disagree (And Which One to Trust)

Safe Travel Team · June 21, 2026

3 Mexican States Where the US State Department Advisory and SESNSP Data Disagree

The US State Department issues a country-wide Level 2 ("Exercise Increased Caution") travel advisory for Mexico — and has for most of the past decade. The advisory is honest about its scope: it is state-level, summarizing the risk profile of each of Mexico's 32 states in one of four tiers, then aggregated up to a country recommendation.

The SESNSP (Secretariado Ejecutivo del Sistema Nacional de Seguridad Pública) dataset — Mexico's official crime-incidence registry, published monthly by the federal government — is city-level. It tracks homicide, robbery, extortion, sexual assault, and kidnapping by municipio and colonia, and is the dataset the State Department's regional analysts actually use to assign state-level tiers.

The two should agree. In 2026, for three Mexican states, they do not — and the mismatch runs in the same direction: the SESNSP city-level data shows the urban cores that US travelers actually visit are safer than the state-level advisory suggests. In one state, the inverse is true. The pattern is teachable, and the lesson is: the State Department advisory is a directional indicator, not a city-level safety plan.

Below, the three states where the advisory overstates risk (Yucatán, Baja California Sur, Querétaro), the one state where the advisory understates it (Michoacán), and the framework for reading the mismatch in any Mexican state you plan to visit in 2026.

---

1. Yucatán — The Biggest Mismatch in the Dataset

State Dept advisory: Level 2 ("Exercise Increased Caution") for Yucatán state
State homicide rate (SESNSP 2025): 6.3 per 100,000 — the lowest state homicide rate in Mexico
SafeTravel risk score, Mérida: 1.05 (LOW tier)
SafeTravel risk score, Valladolid: 1.00 (LOW tier — the lowest in Mexico)
Numbeo 2026 crime index for Mérida: 28.4 (vs Cancun 57.2, CDMX 64.1)
Population weighted: 1.1M residents in Mérida metro; 80,331 in Valladolid

Yucatán is the cleanest case in the dataset. The state-level homicide rate of 6.3 per 100,000 is the lowest in Mexico — by a meaningful margin (Mexico City is 8.9, BCS is 11.4, Querétaro is 14.2). At the city level, Mérida's SafeTravel composite risk score of 1.05 places it in the low tier, and Valladolid — the smaller colonial city two hours east of Mérida — has the lowest risk score of any city in the dataset, 1.00.

The State Dept's Level 2 advisory for Yucatán is not "wrong" by their methodology — the advisory is calibrated to flag any state with measurable cartel activity, and Yucatán has some (mostly peripheral, mostly affecting the southern border with Campeche and Quintana Roo, and the rural east). But for the urban cores that absorb 95%+ of US tourist traffic — Mérida, Valladolid, the Ruta Puuc — the actual SESNSP data places the cities at the very bottom of Mexico's risk distribution.

The Numbeo crowd-sourced index reinforces this: Mérida's 28.4 crime index is less than half of Cancún's 57.2 and less than half of CDMX's 64.1. Mérida is in the same Numbeo band as Madison, Wisconsin and Burlington, Vermont — small US cities most readers would consider safe without thinking.

The mismatch matters because it changes traveler behavior. The State Dept advisory implies "the same caution you would use in any large Mexican city." The SESNSP data says "the urban core is in the lowest-risk decile of Mexican cities." For a US traveler choosing between Mérida and Puerto Vallarta for a summer trip, the state advisory treats them as roughly equivalent; the city-level data says Mérida is meaningfully safer.

The practical implication: Yucatán's Level 2 advisory is a good reason to read the city-level data. The Mérida and Valladolid risk scores of 1.05 and 1.00 mean a per-colonia SafeTravel report for any zona in those cities will be in the "low" tier for every colonia with tourism infrastructure. Travelers who decline Yucatán trips because of the state advisory are over-weighting state-level risk relative to actual city-level risk by a factor of roughly 2x.

---

2. Baja California Sur (BCS) — Where the Cabo Honeymoon Imagery Matches the Data

State Dept advisory: Level 2 ("Exercise Increased Caution") for BCS
State homicide rate (SESNSP 2025): 11.4 per 100,000
SafeTravel risk score, Los Cabos: 1.95 (LOW–moderate tier — second-lowest among major tourist destinations)
SafeTravel risk score, La Paz: 2.15 (LOW–moderate tier)
Population weighted: 351,111 in Los Cabos municipality; ~250,000 in La Paz

Baja California Sur is the second-largest mismatch, and the most commercially important one. Los Cabos receives roughly 4 million international visitors per year — more than Cancún by some measures — and the State Dept advisory treats BCS as a Level 2 state, the same as Yucatán and Querétaro.

The SESNSP city-level data tells a more nuanced story. Los Cabos (Cabo San Lucas + San José del Cabo combined into one municipio) has a SafeTravel risk score of 1.95, which is the lowest score of any major international beach destination in Mexico — lower than Cancún (1.95 — tied), Playa del Carmen (2.05), Puerto Vallarta (3.00), Acapulco (4.50), or Mazatlán (4.20). La Paz, the state capital, scores 2.15 — also in the low-moderate band.

The reason BCS gets a Level 2 advisory instead of a more benign one is the same reason Yucatán does: cartel activity in the non-tourist parts of the state. The southern BCS municipio of Los Cabos is essentially a resort enclave; the rural north of the state (Mulegé, Comondú) has the same cartel-related incidents that drive the state-level score. For a traveler staying in the Cabo San Lucas / San José del Cabo / Corridor tourist zone, those incidents are geographically distant.

The Numbeo 2026 data is consistent: Los Cabos scores in the "moderate" band (35–45 crime index range) — comparable to San Diego County in the US, and well below the 60+ range for most Mexican state capitals.

The practical implication: BCS's Level 2 advisory is a reasonable summary of state-level risk but materially overstates the risk for travelers staying in the Los Cabos resort corridor. The SafeTravel risk score of 1.95 is the second-lowest of any major Mexican beach destination; a per-colonia report for the Cabo San Lucas centro, the San José del Cabo art district, or the Corridor resorts will be in the "low" tier for those specific zonas.

---

3. Querétaro — The Capital vs the State Pattern

State Dept advisory: Level 2 ("Exercise Increased Caution") for Querétaro state
State homicide rate (SESNSP 2025): 14.2 per 100,000
SafeTravel risk score, Querétaro city: 2.05 (LOW–moderate tier)
SafeTravel risk score, San Juan del Río: 3.00 (moderate tier)
Population weighted: 1.6M in Querétaro metro (city + suburbs); 280,000 in San Juan del Río

Querétaro is a different kind of mismatch. Unlike Yucatán and BCS, where the state average is dragged up by rural cartel activity, Querétaro is an industrial state — the Bajío manufacturing corridor runs through it, and the per-state homicide rate of 14.2 reflects that industrial-scale urbanization. The state's two tracked cities split: the capital Santiago de Querétaro scores 2.05 (low-moderate, comparable to Mérida), while San Juan del Río scores 3.00 (moderate, comparable to Guadalajara's surrounding municipios).

The reason the State Dept advisory is Level 2 instead of Level 3 is that Querétaro has not had the spike in cartel-related homicides that hit neighboring Guanajuato (39.2 per 100,000, Level 4) or Michoacán (45.8 per 100,000, Level 4). The Querétaro capital is a UNESCO-recognized colonial city with a robust expat and tech-worker population; the SESNSP data confirms the lived experience: walkable centro, well-lit plazas, functional public transit, low per-colonia robbery rate.

The practical lesson is different from Yucatán or BCS. In Yucatán, the state is safe but the advisory doesn't reflect it. In Querétaro, the capital is safe but the state is not — and a traveler who confuses the two (stays in Querétaro city but takes day trips to San Juan del Río, or drives the rural highway between Querétaro and Guanajuato) experiences a different risk profile than the SafeTravel data for Querétaro city alone implies.

The practical implication: Querétaro city is in the low-moderate risk band — comparable to Mérida and Los Cabos. The state-level advisory overstates the risk for travelers who stay in the colonial centro, Juriquilla, or El Marqués. For travelers driving between Querétaro city and San Miguel de Allende, the risk is more variable — the highway passes through Guanajuato state, which has a higher per-100,000 homicide rate, and the State Dept advisory for that segment of the trip should be read as Level 3.

---

4. Michoacán — The Control Case (When the Advisory Is Right)

State Dept advisory: Level 4 ("Do Not Travel") for Michoacán state
State homicide rate (SESNSP 2025): 45.8 per 100,000 (third-highest in Mexico)
SafeTravel risk score, Morelia: 4.60 (high tier)
SafeTravel risk score, Pátzcuaro: 4.60 (high tier)
SafeTravel risk score, Lázaro Cárdenas: 4.40 (high tier)
SafeTravel risk score, Zamora: 3.50 (moderate–high tier)
SafeTravel risk score, San Francisco Zacapu: 3.00 (moderate tier)
Population weighted: 1.85M in tracked Michoacán cities

The Michoacán case is included to keep this analysis honest. In Michoacán, the State Dept advisory and the SESNSP city-level data agree — and the agreement runs the same direction as the advisory: the cities US travelers might consider visiting (Morelia for the colonial architecture, Pátzcuaro for Day of the Dead, the beach at Lázaro Cárdenas) all score in the high tier (4.40–4.60). The state average of 45.8 per 100,000 is the third-highest in Mexico and the advisory's Level 4 designation is calibrated to that data.

The lesson from Michoacán is that the State Dept advisory is not uniformly too harsh. The advisory is state-level, and the state-level aggregation works correctly when the state is uniformly high-risk. The mismatch pattern documented above (Yucatán, BCS, Querétaro) is specifically the case where a state's rural or peripheral risk is much higher than its urban-core risk, and the state's primary tourism destinations are concentrated in the safer urban cores. In Michoacán, the tourism destinations are not safer than the state average, so the advisory correctly captures the risk.

The practical implication: A "Level 4 Do Not Travel" advisory for a Mexican state is correct when both the state average and the major city risk scores are in the high tier. Morelia (4.60) is not the same kind of case as Mérida (1.05). Travelers who treat "Do Not Travel" as advisory language that can be safely overridden with street smarts are taking on real risk; travelers who treat it as a hard signal that the city-level data confirms are correctly reading both sources.

---

How to Read the Mismatch Pattern in 2026

For US travelers planning a Mexico trip, the framework is:

1. Start with the State Dept advisory. It is the cheapest filter — if a state is Level 4 ("Do Not Travel") and the SafeTravel data for the city you want to visit is also high (4.0+), accept the advisory. The Michoacán example is the case where this works.

2. If the advisory is Level 2 or 3 ("Exercise Increased Caution" / "Reconsider Travel") and you want to visit a major city in the state, check the SafeTravel city risk score for that specific city. If the city score is below 2.5 (low or low-moderate tier), the state-level advisory is overstating the risk for your trip. Yucatán, BCS, and Querétaro are all in this category — Mérida, Los Cabos, and Querétaro city are all in the low-moderate band despite Level 2 state advisories.

3. If the state is Level 3 ("Reconsider Travel") and the city score is above 3.5 (moderate–high tier), the advisory is correctly flagging your destination. Most of the Level 3 states (Tamaulipas, parts of Chihuahua, Guerrero, Sinaloa) have cities in this range and the advisory should be respected.

4. Plan for variability within a state. In Querétaro (mostly safe), a drive through Guanajuato (mostly elevated risk) crosses a state-level risk boundary. In BCS (mostly safe), the rural north is meaningfully riskier than the resort corridor. The state-level advisory averages over this variability; the city-level SafeTravel data and per-colonia reports do not.

5. Read the SESNSP data directly for the colonia, not just the city. The SafeTravel composite risk score for a city is a weighted average of its colonias. A city in the "low" tier (like Mérida, score 1.05) can still have specific colonias in the "moderate" tier, and a city in the "moderate" tier (like CDMX, score 2.05) can have specific colonias in the "low" tier. Per-colonia data is the right granularity for trip planning; the state-level advisory is not.

---

Frequently Asked Questions

Does the US State Department advisory overstate the risk for Mexican tourist destinations?

In 2026, the State Dept country-wide Level 2 advisory for Mexico is honest about state-level risk but does not capture city-level granularity. For three states with major US tourist traffic — Yucatán, Baja California Sur, and Querétaro — the state-level advisory is harsher than the SESNSP city-level data supports for the urban cores (Mérida 1.05, Los Cabos 1.95, Querétaro city 2.05). For one state — Michoacán — the advisory correctly flags that the major cities (Morelia 4.60, Pátzcuaro 4.60, Lázaro Cárdenas 4.40) match the state's high overall risk. The advisory is not uniformly too harsh; it is too harsh in specific cases where state-level averages and city-level averages diverge.

Where is the US State Department advisory most out of step with SESNSP data?

Yucatán is the largest single mismatch in the 2026 dataset. The state is at State Dept Level 2 (the same as the much-riskier Jalisco at the state level) but the SESNSP homicide rate of 6.3 per 100,000 is the lowest in Mexico. The two cities US travelers visit — Mérida (1.05 risk score) and Valladolid (1.00 risk score) — are the two lowest-risk cities in the entire SafeTravel dataset of 79 Mexican cities. The gap between "Level 2 advisory" and "lowest-risk cities in the country" is the widest in the data.

Which Mexican states should US travelers actually worry about in 2026?

The State Dept Level 4 ("Do Not Travel") advisories are correctly calibrated for these states and the SafeTravel city-level data confirms the risk: Michoacán (Morelia 4.60), Chihuahua (Chihuahua city 5.39), Colima (Colima 4.50, Manzanillo 4.80), Sinaloa (Mazatlán 4.20, Los Mochis 4.40), Tamaulipas (Reynosa 4.40), Zacatecas (Zacatecas 4.60), and Guerrero (Acapulco 4.50, Ixtapa-Zihuatanejo 4.20). Travelers should not visit these cities unless the trip purpose justifies the risk profile.

Is the SESNSP data reliable?

The SESNSP (Secretariado Ejecutivo del Sistema Nacional de Seguridad Pública) is the Mexican federal government's official crime-incidence registry, published monthly since 2014. The dataset covers homicide, robbery, extortion, sexual assault, kidnapping, and other felonies at the municipio and colonia level. The methodology has been criticized for undercounting certain categories (sexual assault, in particular) but the homicide counts are cross-validated against INEGI (the national statistics institute) and are considered reliable. The State Department itself uses SESNSP as the primary input for its Mexico advisory decisions.

Where can I get a per-colonia safety report for a specific Mexican city?

The SafeTravel assessment at safetravelmexico.com/assess generates a per-colonia risk score using the same SESNSP 2025 data, with State Dept advisory overlay, neighborhood-level crime breakdown, and transport-safety context. The 50%-off code MAYO50 is valid through June 2026.

---

Sources and methodology

The SafeTravel city-level risk scores referenced in this article are computed from SESNSP (Secretariado Ejecutivo del Sistema Nacional de Seguridad Pública) 2025 monthly crime-incidence data, INEGI 2025 population estimates, Numbeo 2026 crowd-sourced crime perception indices, and State Department Travel Advisory state-level assignments (June 2026). Each city's composite risk score is the weighted average of homicide rate, robbery rate, kidnapping rate, and extortion rate at the municipio level, normalized against the Mexico City baseline (score 2.05). State-level homicide rates are from SESNSP 2025.

The US State Department advisory levels cited are from the State Department Mexico Travel Advisory page as of June 2026. Travelers should check the page for the most current advisory level before booking travel.

This article is informational and does not replace professional security consultation. Risk levels can change; the SafeTravel data is updated quarterly.