passport.sv The Ledger Non-CRS, Not Non-Compliant
Privacy · The Ledger

Non-CRS, not non-compliant.

Privacy by sovereign design, stated honestly. El Salvador sits outside the reporting standard that over 120 jurisdictions adopted. That is a structural feature, not a loophole, and it is lawful, not opaque.

By Adam Juchniewicz, CEO, 21 CBI 5 June 2026 ~5 min read
The coast at El Zonte, El Salvador, where Bitcoin became a legal experiment before it became national policy.

Privacy is treated as a confession in this field, and it should not be. The reflex when a jurisdiction is described as non-CRS is to read secrecy, to assume the omission is the point, to picture a place that exists to hide things. That reading is wrong about El Salvador, and getting it wrong costs serious people a serious option. The accurate frame is narrower and more useful: El Salvador has not adopted one specific multilateral reporting mechanism. It complies with everything else.

The mechanism is the OECD Common Reporting Standard, the global framework under which financial institutions report account-holder data to their local tax authority, which then exchanges it automatically with the account holder’s country of tax residence. Over 120 jurisdictions participate. El Salvador does not. There is no automatic cross-border pipeline running your Salvadoran financial data back to a foreign revenue service on a schedule you never see and cannot audit. For a Bitcoiner, that absence is not an accident to exploit; it is an architecture to understand.

Privacy is not secrecy.

The distinction is the entire piece, so it is worth stating precisely. Secrecy is the absence of records. Privacy is the presence of records and the absence of an automatic obligation to broadcast them. El Salvador runs full know-your-customer onboarding through DGME on the immigration side and screens the money through CNAD, the national financial-intelligence and anti-money-laundering authority, on the compliance side. It meets the Financial Action Task Force standards on anti-money-laundering and counter-terrorist-financing. The file the Freedom Passport requires is the same provenance-grade file any serious program demands: a documented, legitimate source of the funds behind the $1,000,000 contribution, traced to a real origin.

So the data exists. The identity is verified. The source of funds is audited. What does not exist is a standing arrangement that ships that data, unprompted and continuously, to a foreign government’s database. That is the whole of it. A country can hold your records to a high standard and still decline to make automatic disclosure of them the default. Holding both of those facts at once is the literacy this topic requires, and most coverage cannot manage it.

Secrecy is the absence of records. Privacy is the presence of records and the absence of an automatic obligation to broadcast them.

Why self-custody already sits outside the standard.

There is a deeper structural point that the CRS conversation usually misses, and it matters more to a Bitcoiner than the jurisdiction question does. The Common Reporting Standard governs financial institutions. It reaches custodians, banks, brokers, and the regulated entities that hold assets on your behalf. It does not reach your keys. A coin you hold in self-custody is not an account at a reporting institution; there is no institution in the relationship to do the reporting. The standard was built for a world of intermediated finance, and self-custodied Bitcoin is the asset class that steps outside that world by design.

This is why the El Salvador framing resonates with people who already think in these terms. The cypherpunk move was never to hide the money; it was to remove the intermediary whose job was to report on it. Cryptographic proof replaced institutional trust. A jurisdiction that has not signed up to automatic institutional reporting is the policy-layer expression of the same instinct that put your coins on a hardware device in the first place. The keys were sovereign already. The citizenship is the part of the architecture most people leave in one government’s hands.

The honest caveats.

Now the part the marketing version omits, because the brand register only works if the caveats are louder than the pitch. Non-CRS is a real feature, and it is also bounded. Three boundaries, stated plainly.

First, your home-country obligations do not disappear because El Salvador does not report. They never travel with the passport; they travel with you. If you are tax-resident somewhere, that somewhere still wants its filings, and the legal duty to make them is yours regardless of what any other country exchanges. A second citizenship is not a tax event and does not, on its own, change where you are resident.

Second, US persons are a category apart. The United States does not rely on CRS; it runs its own regime, FATCA, plus worldwide income reporting on citizens and green-card holders no matter where they live or bank. El Salvador’s non-CRS status changes nothing for an American, because the reporting obligation that binds an American runs through US law, not the OECD’s. For US persons the relevant question is not reporting but expatriation, and that is a different document and a different decision. We cover the renunciation path through exit.ly; this passport is not a substitute for that conversation.

Third, non-CRS is policy, not a treaty guarantee. El Salvador has chosen not to participate. A choice is not a covenant. Policy can change, and any honest statement of this feature has to say so out loud rather than sell it as permanent. We state it as it is today, June 2026, and we will mark the diff here if it moves.

Who this is actually for.

Stated honestly, the non-CRS feature is not a way to escape what you owe. It is sovereign data custody for someone who already files correctly and simply prefers that their financial life not be broadcast on an automatic schedule to a list of governments they did not choose. That is a legitimate preference, and it is a different person from the one the secrecy caricature imagines. The first owes nothing and discloses what the law requires. The second is looking for a place to hide, and El Salvador, with its full KYC and FATF compliance, is conspicuously the wrong place for that. . . The file is too transparent for it.

That is the register the Freedom Passport is built in: privacy as a design choice for the compliant, not cover for the non-compliant. Sovereign data custody, full KYC, real provenance, honest caveats. If that is the version you wanted, it is the version that is true.

Adam Juchniewicz, CEO, 21 CBI
The Ledger · June 2026

Privacy for the compliant

Decide whether this is the version you actually wanted.

If sovereign data custody for someone who already files correctly is the thing you were looking for, the next step is a confidential conversation about whether the Freedom Passport fits your situation. If it is not, that is the right outcome of the reading. The first call is with Adam.

Speak with Adam Not sure it fits? Decide in two questions