DNIT Resolution 47 in Paraguay: What Every Crypto Resident Needs to Know

A new crypto reporting obligation has entered the Paraguayan regulatory landscape. What it requires, what it doesn't change on the tax front, and how to comply smoothly through a proper corporate structure.

DNIT Resolution 47 is a measure issued by Paraguay's National Directorate of Internal Revenue (DNIT) introducing reporting obligations for cryptocurrency holders and operators residing in Paraguay. It falls in line with the global trend towards fiscal transparency for digital assets — a shift observed across virtually all major economies since 2023.

First, let's be clear: DNIT 47 does not create any new tax. It does not challenge the fundamental principle of Paraguayan taxation — territoriality — under which only income generated within Paraguayan territory is taxable. Foreign-source income of Paraguayan residents remains exempt.

To understand the true scope of this measure, it helps to place it in its international context. The three main crypto reporting frameworks currently in force (the OECD's CARF, the European DAC8, and the US 1099-DA form) share a common philosophy: the reporting burden falls on intermediaries (exchanges, brokers), not on individuals directly.

A notable difference stands out: the OECD examined and then abandoned the requirement for transaction hashes and wallet addresses, deeming them too granular for a proportionate reporting obligation. DNIT 47 retains them. On the other hand, the collected data is not automatically transmitted to foreign tax authorities, unlike what is provided for under CRS or CARF in signatory countries.

Any new regulatory obligation deserves careful examination. DNIT 47 raises practical questions for expatriates and crypto entrepreneurs residing in Paraguay — questions that do not undermine the transparency objective being pursued, but call for a clear structural response.

The Data Security Question

The information requested (wallet addresses, transaction hashes, origin and destination flows) constitutes particularly sensitive financial data. Ley 7593 on personal data protection provides the applicable legal framework, with an enforcement regime that is progressively consolidating.

Securing this type of data is a global challenge: incidents involving tax databases linked to cryptocurrencies have been documented in several countries with highly robust institutions. Vigilance in cybersecurity is a universal priority — not specific to Paraguay — and the Paraguayan authorities are fully aware of this as they develop their digital regulatory framework.

The Individual Reporting Burden

The obligation applying to DeFi operations and foreign platforms creates new administrative friction for residents operating primarily across borders. This is not a reversal of the fiscal principle — it is an operational reality that calls for a concrete response: the corporate structure.

The most robust response to DNIT 47 is also best practice for any serious crypto activity in Paraguay: shift the reporting obligation from the individual to a legal entity. This approach is used by the most astute entrepreneurs established in the country, regardless of DNIT 47.

1. Set up a local corporate structure: the Paraguayan EAS

   The Empresa por Acciones Simplificadas (EAS) is the most suitable local structure: easy to incorporate, holding its own RUC, it carries the reporting burden on behalf of the resident. DNIT filings are submitted in the entity's name by your local accountant. Your personal financial life remains separate and protected. Note: a foreign LLC or other offshore entity (US, Panama...) does not replace a local EAS — its limitations are detailed in the FAQ below.

2. Separate personal and business flows

   Clearly distinguish operations related to your activity (trading, DeFi, business income) from your personal transactions. This separation is best practice in any jurisdiction: it simplifies compliance and clarifies your overall tax position.

3. Use locally regulated exchanges

   Exchanges registered with SEPRELAD in Paraguay (X4T, uzpay.io) assume their own reporting obligation towards the DNIT. For your significant flows, routing through these intermediaries reduces your personal reporting burden while keeping you within a documented legal framework.

4. Systematically document your transactions

   Maintaining a clean record of your crypto transactions (date, amount, network, counterparty) is a safeguard in any jurisdiction. Tools like Koinly or CoinTracker automate most of the work. A local accountant with an active RUC completes the setup.

A question of enforcement: the DNIT currently has limited technical capacity to monitor non-custodial wallets and DeFi protocols. Large-scale on-chain analysis, cross-chain data matching, and pseudonymous address tracing remain real operational challenges — even for well-resourced tax administrations. The regulatory framework exists; its effective enforcement will take time and resources. This does not exempt anyone from compliance (a rule not enforced today can be enforced tomorrow), but it does put the perceived urgency into perspective for low on-chain activity HODL profiles.

A broader observation: the collection of data as granular as transaction hashes and wallet addresses goes significantly further than what international standards consider necessary. In a context where the blockchain is by design a permanent public ledger, linking this data to a tax identity constitutes a form of financial surveillance that deserves robust personal data protection safeguards — a matter that Ley 7593 has begun to address and that we will follow with interest.

Sources: DNIT Paraguay (dnit.gov.py), Law 7572/2025 on digital assets, SEPRELAD, Ley 7593 data protection, OECD CARF documentation.