Crypto in Paraguay: What the DNIT Can Trace and What It Cannot

Resolución General DNIT N° 47, published on 10 March 2026 and available on dnit.gov.py, creates a new reporting obligation for every Paraguayan tax resident who holds, exchanges, receives, or issues virtual assets. This is not a new tax. It is a reporting obligation.

Individuals: DNIT 47 obligations

• Who: any Paraguayan tax resident acting in an individual capacity (cédula or individual RUC).
• Threshold: transactions or holdings exceeding 5,000 USD in aggregate over the calendar year.
• What you report: wallet addresses, flows, asset type (BTC, ETH, stablecoins, NFTs, DeFi tokens, staking/mining rewards), amounts in USD at the date of each transaction.
• Form: DJI-Criptoactivos via Marangatu, annual filing.
• Current penalty: multa of ₲ 1,000,000 (~150 USD) for late filing or failure to file.

Legal entities: distinct obligations

• Who: any company domiciled in Paraguay (SA, SRL, EAS, branches) that holds, exchanges, receives, or issues virtual assets.
• Broader scope: legal entity flows are presumed to be professional. All crypto activity falls within the reporting obligation.
• Valuation: in USD at the transaction date. No official reference rate is designated, which constitutes a gap to be filled by an internally documented and consistent methodology.
• Reporting: annual filing via Marangatu, within the same deadlines as the ordinary tax return.
• Taxation: locally generated profits remain subject to IRACIS (10%). Foreign-source income remains exempt. The territorial principle is unchanged.

The text is ambitious in scope. Its practical reach depending on individual profiles is a separate question, which the following sections detail. To understand how this territorial tax system works as a whole, see our dedicated guide.

The reaction in Telegram groups and expat forums was immediate: "Paraguay is becoming a financial surveillance state", "This is the end of crypto freedom here". This anxiety is understandable, but it deserves calibration.

What is legitimate

• Private property on the blockchain. A Bitcoin address is pseudonymous by nature. Requiring it to be declared to a state is akin to asking someone to reveal the location of their safe. DNIT 47 makes an authoritative decision: yes, it must be declared.
• The self-reporting obligation. Unlike the CRS banking framework where your bank sends your data, here it is you who must self-report — an unusual principle for assets whose very design is built on disintermediation.

What qualifies as overreaction

Paraguay remains a non-signatory to CARF and a non-signatory to CRS. Your data filed with the DNIT is not automatically transmitted to France, Spain, Brazil, or any other state. There is, to date, no bilateral automatic exchange of information agreement for crypto between Paraguay and the main countries of origin of expatriates. This is a structural difference from Dubai or the European Union. It remains intact after DNIT 47.

Blind spot #1: non-custodial wallets

The DNIT has no direct access to self-custodial wallets (Ledger, Trezor, MetaMask, cold storage). Without KYC linking an address to an identity, the administration cannot prove that you are the holder of a given wallet. Chainalysis can cluster groups of addresses, but without a KYC entry point, the holder's identity remains unknown.

Blind spot #2: foreign exchanges without automatic reporting

Binance, Kraken, Bybit, and OKX do not automatically transmit data to the Paraguayan DNIT. There is no legal obligation for these platforms to report their Paraguay-resident users. Active international cooperation would be required. It is not in place as of today.

Blind spot #3: DeFi, bridges, and privacy coins

DeFi protocols (Uniswap, Aave, Curve), cross-chain bridges (LayerZero, Stargate), and privacy coins (Monero, Zcash) are technically beyond the reach of DNIT 47. Transactions are pseudonymous, fragmented across protocols, and Chainalysis is explicitly ineffective on privacy coins and most cross-chain bridges.

Blind spot #4: multi-sig structures and DAOs

A Paraguayan resident who is a co-signer of a 2/3 or 3/5 multi-sig wallet where the other keys are held by offshore trustees: the DNIT cannot prove "control" of the asset within the meaning of Art. 3°. DAOs without legal personality exist in a complete legal vacuum — they are neither a natural person nor a legal entity under the text.

Blind spot #5: opaque offshore structures

A Paraguayan resident whose assets are held in a company incorporated in a third-party jurisdiction (IBC, SA, LLC in a crypto-friendly jurisdiction without a public registry of beneficial owners) structurally falls outside the scope of DNIT 47. The resolution targets residents and companies domiciled in Paraguay. An offshore entity with no presence in Paraguay is not a Paraguayan taxpayer, provided the structure is genuine and effective management is not exercised from within the territory.

The response to DNIT 47 is neither panic nor flight. It is a precise understanding of what each channel creates as a trail, and organising your situation accordingly.

Centralised exchanges (CEX): the most exposed channel

Any KYC centralised exchange — Paraguayan (X4T) or foreign (Binance, Bybit, Kraken, OKX) — constitutes a documented entry point: your identity is linked to your wallet addresses, your trading volumes, your deposits and withdrawals. For local exchanges, the DNIT has direct or indirect access to KYC data. For foreign exchanges, access is contingent on non-automatic international cooperation. The practical rule: if you completed KYC with your Paraguayan cédula on an exchange, that flow is potentially visible.

Decentralised exchanges (DEX): on-chain traceability, off-chain identity

DEXs (Uniswap, PancakeSwap, Curve) do not collect identity information. Transactions are public on the blockchain, but the wallet address is not linked to any identity without a KYC entry point. If your DEX wallet has never interacted with a KYC exchange or an identified address, the link to your Paraguayan identity does not exist in the data accessible to the DNIT.

Non-custodial wallets with integrated cards: a dual reading

The most relevant case for Paraguayan residents in 2026: the Cypher Card (Cypher wallet, backed by Y Combinator and Coinbase Ventures, 500+ tokens / 25 blockchains, 160+ countries including Paraguay, rewards in $CYPH).

• Card with full KYC: your identity is linked to your wallet. Spending in Paraguay constitutes traceable transactions. If they exceed the aggregate threshold, they fall within the reporting scope.
• No-KYC card: some prepaid crypto cards without full verification generate local banking logs without directly linking your Paraguayan resident identity. A technically grey area under the text of DNIT 47.

EMI fintechs vs fully licensed banks

What determines your exposure:

• KYC with PY cédula + CRS-reporting institution: automatic reporting.
• KYC with foreign passport without PY residence declaration: no link in the institution's data.
• PY residence declared at a CRS-active bank: automatic annual reporting to the DNIT.
• FATCA: if you have a US nexus, any indicator of US nationality on your account can trigger the procedure, even if you are not a US tax resident.

To better understand how the RUC and tax identification in Paraguay work, refer to our comprehensive guide.

Using a crypto card in Paraguay: the concrete risk

Paying in Paraguay with a card backed by a crypto account (Cypher Card, COCA Card, or any equivalent) generates logs in the local banking system with every POS transaction, visible to Paraguayan banks and potentially to the DNIT. The frequency and volume of these payments can constitute a body of evidence regarding your crypto activity. It is not an offence in itself, but it is a contextual element that a tax auditor can use to justify an in-depth review.

Lever: voluntary disclosure

For those holding assets on KYC exchanges, filing is the best protection. DNIT 47 does not create additional taxation on foreign income. Foreign income remains at 0% under the territorial tax system. The DJI-Criptoactivos form maps your assets without creating any new tax liability on foreign-source income.

Lever: structuring through a Paraguayan company

A company domiciled in Paraguay, declaring its crypto assets under DNIT 47 and its income under IRACIS (10% on local income only), benefits from a clear and auditable framework. For miners and active traders generating local income, this is the most secure path in the long term. If you are considering this option, our article on IRP and personal income taxation will provide the complementary tax context.

Lever: documenting your USD valuation method

The resolution requires declaring the "gross value in US dollars" without specifying an official reference rate. Adopt a consistent and documented methodology: BCP rate on the transaction date, or CoinMarketCap 24-hour average price, applied systematically. In the event of an audit, the consistency of your methodology is your first line of defence.

On the blockchain, your address is public. Every transaction is visible to anyone. But your identity — the link between that address and you as a natural person — is the only element you truly control. This is the layer that DNIT 47 seeks to map. The blockchain is transparent, but its owner is only transparent if a third party builds the link.

The 1992 Paraguayan Constitution guarantees the inviolability of private property (Art. 109). Law 7572/2025 recognises DLT assets as full legal assets. DNIT 47 creates a reporting obligation. It does not confiscate, does not tax foreign income, and does not transmit your data abroad. The tension between individual sovereignty and fiscal transparency is real, but Paraguay remains, in 2026, one of the jurisdictions that best preserves this boundary.

The real trigger is KYC. As soon as a documented link exists between your Paraguayan resident identity and a crypto address (local exchange, cédula, KYC card, bank account with declared PY residence), you enter the reporting scope.

For CEX traders, miners, and locally structured entrepreneurs, filing via DJI-Criptoactivos creates no additional tax. Paraguay remains at 0% on crypto capital gains, non-CARF, non-CRS. Compliance, not taxation.

For those who refuse to link their identity to their assets, the answer is not the absence of structure — it is a different structure. A legally constituted offshore corporate architecture separates personal identity from asset holding, in compliance with both Paraguayan and international law.