Paraguay KYC, KYB & AML compliance checklist
Une checklist pratique et sourcée pour mettre en œuvre les exigences KYC, KYB et AML en Paraguay.
- Dernière revue
- Dernière revue:
- Version
- Version 1.0
Réponse directe
Que couvre la checklist de conformité pour Paraguay ?
La checklist pour Paraguay traduit les principales règles KYC, KYB et AML en 11 domaines de contrôle et 31 contrôles d’implémentation, avec les autorités, obligations de déclaration et preuves à conserver.
Faits réglementaires clés
- FIU
- SEPRELAD
- Primary framework
- Law 1015/1997 as amended, including Law 6497/2019
- Suspicion reporting
- Completed or attempted suspicious operations, regardless of amount, to SEPRELAD under the applicable sector rule
- Beneficial ownership
- Natural-person ownership or control; Law 6446 administrative registers
- Retention
- Five years after the relationship ends or occasional transaction
- FATF status
- Not named on FATF public lists reviewed 12 August 2026
Détail d’implémentation
Exigences et actions de conformité pour Paraguay
Ouvrez chaque domaine pour consulter l’exigence, l’action recommandée, les preuves à conserver et la source primaire utilisée.
01Scope, authorities, and licensingResolve the exact legal entity, activity and supervisor before applying a sector rule.3 éléments+
Determine whether each activity is within the reporting-entity sectors in Law 1015.
- Action d’implémentation
- Map products, customers and delivery channels to article 13 and the current SEPRELAD or natural-supervisor rule; document uncertain scope.
- Preuves à conserver
- Applicability memo, product map and authority or counsel confirmation.
- Source primaire
- Law 1015 art. 13, as amended by Law 6960
Treat SEPRELAD as the FIU and national AML/CFT application authority.
- Action d’implémentation
- Complete applicable registration, nominate authorised users and maintain tested access to the live reporting channel.
- Preuves à conserver
- Registration, user approvals, access test and reporting procedure.
- Source primaire
- Law 1015 arts. 25 and 28, as amended
Obtain authorisation before regulated financial, payment, remittance, credit or virtual-asset activity.
- Action d’implémentation
- Classify the model with BCP, SEPRELAD and any other competent supervisor and secure required licences or registrations before launch.
- Preuves à conserver
- Perimeter analysis, authority correspondence and licence register.
- Source primaire
- Law 1015 art. 13; applicable sector legislation
02Governance and risk assessmentGovernance must reflect the entity's sector, products, customers, channels and geography.2 éléments+
Maintain written risk-based AML/CFT/CPF policies and controls.
- Action d’implémentation
- Approve risk assessment, CDD, monitoring, reporting, sanctions, training, audit and remediation arrangements and update them for legal change.
- Preuves à conserver
- Board approvals, manual, risk assessment, testing and remediation log.
- Source primaire
- Law 1015 arts. 15-16 and 21, as amended by Law 6497
Designate an empowered compliance officer when required by the applicable rule.
- Action d’implémentation
- Verify eligibility, independence, access, resources and any registration or approval requirement for the sector.
- Preuves à conserver
- Appointment, role profile, authority filing and board minutes.
- Source primaire
- Law 1015 art. 35; applicable SEPRELAD sector resolution
03Natural-person identificationCDD must use reliable independent documents, data or information.3 éléments+
Identify and verify the customer and understand the relationship purpose.
- Action d’implémentation
- Collect identity, address, activity, purpose and expected activity; authenticate evidence before service where required.
- Preuves à conserver
- Identity file, verification output, profile and approval.
- Source primaire
- Law 1015 art. 15, as amended by Law 6497
Identify the person acting for a customer and verify authority.
- Action d’implémentation
- Verify the representative and customer, authenticate powers and resolve discrepancies.
- Preuves à conserver
- Identity results, power, registry evidence and approval.
- Source primaire
- Law 1015 arts. 15-16
Do not start or continue when required CDD cannot be completed.
- Action d’implémentation
- Refuse the operation or relationship, document the decision and assess a confidential ROS without tipping off.
- Preuves à conserver
- Decline or exit record, investigation and ROS decision.
- Source primaire
- Law 1015 art. 15, as amended by Law 6497
04KYB, registries, and beneficial ownershipRegistry evidence supports but does not replace independent ownership and control analysis.4 éléments+
Verify legal existence, purpose, address, governance and authority.
- Action d’implémentation
- Obtain current registry, constitutive, tax, director, signatory and power evidence.
- Preuves à conserver
- Registry extract, constitutive documents, RUC evidence and powers.
- Source primaire
- Law 1015 arts. 15-16; Law 6446
Identify and reasonably verify the natural-person beneficial owner.
- Action d’implémentation
- Trace every ownership and control layer and apply the Law 6446 ownership, voting, benefit, appointment and other-control conditions without collapsing them into one test.
- Preuves à conserver
- Ownership chart, source records, control analysis and verified identities.
- Source primaire
- Law 1015 arts. 15-16; Law 6446
Confirm required communications to the administrative legal-person and beneficial-owner registers.
- Action d’implémentation
- Obtain current SIARA evidence, monitor changes and annual confirmation duties, and escalate discrepancies.
- Preuves à conserver
- Registry communications, receipts, refresh log and discrepancy decision.
- Source primaire
- Law 6446; current MEF/DGPEJBF rules
Use beneficial-owner information only through authorised access.
- Action d’implémentation
- Record the legal basis for registry access and do not describe the detailed register as an unrestricted public database.
- Preuves à conserver
- Access approval, query log and customer evidence.
- Source primaire
- Law 6446 arts. 8-10; Decree 3241/2020
05PEPs, EDD, and remote onboardingHigher risk requires enhanced evidence and oversight.2 éléments+
Detect PEPs and apply enhanced measures under the current sector rule.
- Action d’implémentation
- Screen customers, beneficial owners and connected persons; obtain senior approval, source-of-wealth and source-of-funds evidence and enhanced monitoring where required.
- Preuves à conserver
- Screening, match decision, approval, provenance and monitoring plan.
- Source primaire
- Law 1015 arts. 15-16; applicable SEPRELAD sector resolution
Control non-face-to-face onboarding risk.
- Action d’implémentation
- Use proportionate authentication, liveness, device, fraud and exception controls and validate their effectiveness.
- Preuves à conserver
- Remote-onboarding assessment, test results and exceptions.
- Source primaire
- Law 1015 arts. 15-16; applicable sector rule
06Monitoring and suspicious reportingSuspicion is independent of amount and reporting is confidential.3 éléments+
Monitor transactions against the customer's profile.
- Action d’implémentation
- Detect and investigate unusual, complex, linked and attempted activity and preserve a reasoned conclusion.
- Preuves à conserver
- Alerts, investigation, disposition and rule governance.
- Source primaire
- Law 1015 arts. 15, 17 and 19
Report completed or attempted suspicious operations to SEPRELAD regardless of amount.
- Action d’implémentation
- Apply the live sector analysis and filing timetable and submit through SIRO or the prescribed channel with supporting information.
- Preuves à conserver
- ROS decision, chronology, submission and acknowledgement.
- Source primaire
- Law 1015 art. 19, as amended by Law 6497; applicable sector resolution
Prevent tipping off and protect ROS confidentiality.
- Action d’implémentation
- Restrict access, exclude ROS information from customer disclosures and train staff and providers.
- Preuves à conserver
- Access logs, procedure and training.
- Source primaire
- Law 1015 arts. 19-20 and 32
07Payments, wires, thresholds, and agentsObjective reports, thresholds and deadlines are sector-specific.3 éléments+
Configure only the objective reports applicable to the entity's current rule.
- Action d’implémentation
- Confirm amount, currency, aggregation, period, negative-report duty and deadline from the current resolution before configuration.
- Preuves à conserver
- Rule copy, mapping, tests and receipts.
- Source primaire
- Applicable SEPRELAD sector resolution and SIRO manual
Preserve originator and beneficiary traceability for transfers.
- Action d’implémentation
- Validate required data and apply risk-based reject, suspend or escalation rules for missing information.
- Preuves à conserver
- Payment message, validation and exception decision.
- Source primaire
- Law 1015 arts. 17-18; applicable BCP/SEPRELAD rule
Retain accountability for agents and outsourced providers.
- Action d’implémentation
- Perform diligence, contract for security and record access, monitor performance and test retrieval.
- Preuves à conserver
- Due diligence, contract, monitoring and retrieval test.
- Source primaire
- Law 1015 arts. 15-18 and 21
08Targeted financial sanctionsScreening must lead to the statutory immobilisation and reporting process.3 éléments+
Screen applicable UN sanctions designations and national notices.
- Action d’implémentation
- Screen customers, beneficial owners, counterparties and transactions on onboarding, list updates and before execution.
- Preuves à conserver
- List source, update log, match logic and dispositions.
- Source primaire
- Law 6419 arts. 1-2
Immobilise covered funds or assets without delay and communicate immediately to SEPRELAD.
- Action d’implémentation
- Prevent movement or availability, identify all assets and report the match, reasons and action timestamps through the prescribed route.
- Preuves à conserver
- Match file, freeze timestamp, asset inventory and SEPRELAD communication.
- Source primaire
- Law 6419 art. 3
Release only under a legally sufficient authority process.
- Action d’implémentation
- Document false-positive, exclusion or delisting analysis and authenticate the release instruction.
- Preuves à conserver
- Authority decision and controlled release approval.
- Source primaire
- Law 6419
09Records and regulator accessRecords must reconstruct customers, operations, analyses and reports.3 éléments+
Retain operation records for five years from the operation or relationship end, as applicable.
- Action d’implémentation
- Preserve complete transaction records in retrievable form and document the retention trigger.
- Preuves à conserver
- Schedule, archive sample and deletion control.
- Source primaire
- Law 1015 art. 18, as amended by Law 6497
Retain CDD, files, correspondence and analysis for five years after relationship end or occasional transaction.
- Action d’implémentation
- Link identity, ownership, monitoring and reporting support under stable identifiers.
- Preuves à conserver
- CDD archive, case files and retrieval test.
- Source primaire
- Law 1015 art. 18, as amended by Law 6497
Respond to lawful SEPRELAD and supervisor requests.
- Action d’implémentation
- Authenticate the request, preserve confidentiality, collect reproducibly and log production and receipt.
- Preuves à conserver
- Request, legal review, production index and acknowledgement.
- Source primaire
- Law 1015 art. 22
10Privacy, biometrics, and transfersLaw 7593/2025 supplies the general data-protection framework alongside sector secrecy and AML duties.3 éléments+
Process personal data on a documented legal basis and for defined purposes.
- Action d’implémentation
- Map notices, rights, minimisation, security, retention and AML disclosure bases; record the legal applicability date.
- Preuves à conserver
- Data inventory, notices, legal-basis record and rights procedure.
- Source primaire
- Law 7593/2025
Apply enhanced controls to sensitive and biometric data and transfers.
- Action d’implémentation
- Minimise collection, restrict access, perform a risk assessment and confirm current implementing requirements with the National Personal Data Protection Agency.
- Preuves à conserver
- Impact assessment, access controls, transfer analysis and authority check.
- Source primaire
- Law 7593/2025
Apply the separate credit-data regime where relevant.
- Action d’implémentation
- Map Law 6534 rights, security and retention rules and BCP supervision to credit-data processing.
- Preuves à conserver
- Credit-data inventory, rights workflow and retention rule.
- Source primaire
- Law 6534/2020
11Practical evidence packsKeep concise packs that let a reviewer reproduce each decision.2 éléments+
Maintain a reconstructable onboarding pack.
- Action d’implémentation
- Bundle identity, KYB, beneficial ownership, screening, risk, approvals and exceptions.
- Preuves à conserver
- Complete sampled onboarding pack.
- Source primaire
- Operational control supporting Law 1015 arts. 15-18
Maintain a reconstructable monitoring and reporting pack.
- Action d’implémentation
- Link transactions, alerts, analysis, approvals, submissions and post-filing controls while protecting confidentiality.
- Preuves à conserver
- Complete sampled case pack and access log.
- Source primaire
- Operational control supporting Law 1015 arts. 19-22
Registre des sources primaires
12 sources utilisées pour cette checklist
Utilisez ces liens pour vérifier la législation, les lignes directrices, les procédures de déclaration et les statuts internationaux.
- Consolidated Law 1015/1997 - current AML frameworkSEPRELAD · Primary legislation - consolidated
- Law 6497/2019 - principal preventive-framework amendmentsSEPRELAD · Primary legislation
- SEPRELAD frequently asked questionsSEPRELAD · Official FIU guidance
- SEPRELAD resolutions inventorySEPRELAD · Official regulatory inventory
- Law 6419 - targeted financial sanctionsCongressional legal database · Primary legislation
- Law 6446 - legal-person and beneficial-owner registersCongressional legal database · Primary legislation
- DGPEJBF registry authority and current legal inventoryMinistry of Economy and Finance · Official registry authority
- Law 7593/2025 - general personal-data protectionCongressional legal database · Primary legislation
- Law 6534 - personal credit-data protectionCongressional legal database · Primary legislation
- Banco Central del ParaguayBCP · Official financial supervisor
- FATF Paraguay mutual-evaluation pageFATF · Authoritative country assessment
- FATF black and grey listsFATF · Authoritative current status
Réponses directes
Questions KYC, KYB et AML pour Paraguay
Who receives suspicious-operation reports in Paraguay?+
SEPRELAD, through SIRO or the reporting channel prescribed for the obliged entity.
When is a ROS filed?+
Law 1015 covers completed or attempted suspicious activity regardless of amount. The analysis and filing timetable is sector-specific, so apply the current SEPRELAD resolution.
Is there one universal objective-report threshold?+
No. Report types, thresholds, aggregation periods, deadlines and negative-report duties vary by sector and current resolution.
How long are AML records retained?+
Five years, calculated from the operation, relationship end or occasional transaction as specified by article 18.
Is beneficial ownership only a registry check?+
No. Reporting entities must identify and reasonably verify natural-person ownership or control; registry evidence supports but does not replace CDD.
What happens on a sanctions match?+
A covered reporting entity must immobilise the funds or assets without delay and communicate immediately to SEPRELAD under Law 6419.
Does Paraguay have a general data-protection law?+
Yes. Law 7593/2025 establishes the general regime and national authority; confirm implementation and sector overlays for the planned processing.
Is Paraguay on a FATF public list?+
Paraguay was not named on the FATF public lists reviewed 12 August 2026. Recheck the live lists before reliance.
Méthode de recherche et de revue
VOVE ID Compliance Research cartographie le périmètre réglementaire, traduit les obligations en contrôles opérationnels, relie les affirmations importantes aux sources et date chaque revue.
General regulatory information, not legal advice or a licence determination. Reviewed and legally scoped as applicable on 12 August 2026. Confirm the entity, activity, current sector resolution, SIRO filing specification, objective-report threshold, beneficial-owner access, sanctions procedure, Law 7593 implementation and product licensing with SEPRELAD, the competent supervisor and qualified Paraguayan counsel before launch.