Chapter 38: Central Bank Digital Currencies: When Governments Build Blockchains

The Irony: Governments Building What Cypherpunks Invented to Escape Governments

On October 31, 2008, a pseudonymous figure calling themselves Satoshi Nakamoto published a nine-page paper titled "Bitcoin: A Peer-to-Peer Electronic Cash System." The paper's genesis block, mined on January 3, 2009, contained a message embedded in the coinbase transaction: "The Times 03/Jan/2009 Chancellor on brink of second bailout for banks." The message was a timestamp, but it was also a manifesto. Bitcoin was born from distrust of governments and central banks. It was a system designed so that no government, no central authority, and no trusted intermediary could control, inflate, freeze, or confiscate your money.

Fifteen years later, more than 130 countries — representing 98% of global GDP — are exploring or developing their own digital currencies. China has already rolled one out to hundreds of millions of people. The European Central Bank is in the advanced design phase of a digital euro. India, Brazil, Nigeria, the Bahamas, Jamaica, and dozens of other nations have launched or are piloting retail digital currencies issued directly by their central banks. The Bank for International Settlements, the central bank of central banks, reported in its 2023 survey that 93% of the world's central banks were engaged in some form of CBDC work.

The irony could not be thicker. The technology movement that was born from the conviction that governments should not control money has prompted governments worldwide to build new, more sophisticated systems of digitally controlled money. The cypherpunks wanted to escape government surveillance of financial transactions; several CBDC designs would give governments more granular visibility into financial activity than they have ever had. Satoshi wanted trustless money; CBDCs are the ultimate expression of trusted money — currency where every transaction is visible to, and potentially controllable by, the issuing state.

This chapter examines what CBDCs actually are (the answer is more surprising than you might expect), why governments want them, how the major projects compare, what risks they create, and what it means for the future of money that the same decade produced both Bitcoin and the digital yuan. We will be precise about technology, honest about data, and fair about the genuine tensions. Because the CBDC debate is not a simple case of freedom-loving crypto versus authoritarian government money. It is a complicated negotiation between financial inclusion and surveillance, between payment efficiency and banking stability, between monetary sovereignty and individual privacy. And the design choices being made right now — in Beijing, Frankfurt, Washington, Abuja, and Nassau — will shape the financial architecture that billions of people live within for the next generation.

🔗 Cross-Reference: This chapter draws heavily on the monetary theory developed in Chapter 4 (The Money Question), the stablecoin analysis from Chapter 24 (where private-sector alternatives to CBDCs are examined), and the regulatory frameworks from Chapter 29. If you have not read those chapters, the arguments here will lack essential context.

What CBDCs Are (and Aren't)

The Definition That Matters

A central bank digital currency is a digital form of a country's fiat currency that is a direct liability of the central bank. That last clause is the critical one. When you hold a dollar bill, you hold a liability of the Federal Reserve — it is the Fed's obligation. When you hold a dollar in your bank account, you hold a liability of your commercial bank, which in turn holds reserves at the Fed. The bank is an intermediary. A retail CBDC would eliminate that intermediary for at least some transactions, giving ordinary citizens a direct claim on the central bank.

This distinction — direct liability of the central bank versus liability of a commercial bank — is what separates CBDCs from every existing form of digital money. The balance in your Chase checking account is not a CBDC. The dollars in your Venmo wallet are not a CBDC. Even the reserves that banks hold electronically at the Federal Reserve are not typically considered a CBDC in the retail sense, because ordinary people cannot access them. A CBDC is central bank money — the most fundamental layer of the monetary system — made directly available in digital form to a broader set of users than currently has access to it.

Most CBDCs Are Not Blockchains

Here is the fact that surprises most people coming from the cryptocurrency world: the vast majority of CBDC projects under development do not use blockchain technology. They are centralized ledgers. They are databases operated by the central bank or its designated intermediaries. Some borrow concepts from distributed ledger technology — cryptographic verification, token-based representations of value, programmability features — but they do not have decentralized consensus, they do not have permissionless participation, they do not have immutability in the Bitcoin sense, and they do not distribute trust across independent validators.

China's digital yuan (e-CNY) runs on a centralized ledger operated by the People's Bank of China and designated commercial banks. The digital euro, as proposed by the European Central Bank, would use a centralized settlement system with privacy protections built in at the architectural level. The Bahamas' Sand Dollar uses a centralized platform developed by NZIA Limited (formerly known as the startup behind the technology). Nigeria's eNaira is built on a permissioned version of Hyperledger Fabric — technically a distributed ledger, but one where every node is operated by the Central Bank of Nigeria or its approved partners. This is distributed in the same sense that a company running its database across three data centers is distributed: it improves resilience, but it does not distribute trust.

⚠️ Common Misconception: "CBDCs are governments adopting blockchain." This is misleading. Most CBDCs adopt some concepts from the blockchain world — digital tokens, programmability, cryptographic identity — but reject the core innovation of blockchain: decentralized, permissionless consensus. A CBDC is typically a centralized system with some modern technology features. Calling it a blockchain is like calling a centrally planned economy a "free market" because it uses price signals.

The Design Spectrum

CBDC designs exist on a spectrum defined by several key architectural choices:

Token-based vs. Account-based. In a token-based CBDC, the digital currency works like digital cash: possession of the token is proof of ownership, much like holding a physical banknote. In an account-based CBDC, users have accounts at the central bank (or at intermediaries), and transactions involve updating account balances. Token-based systems offer more potential for privacy and offline use. Account-based systems are easier to integrate with existing financial infrastructure and regulatory requirements (know-your-customer, anti-money-laundering). Most advanced CBDC projects use a hybrid approach: token-like instruments managed through account-based infrastructure.

Direct vs. Intermediated. In a direct model, citizens hold CBDC accounts directly at the central bank. In an intermediated (or two-tier) model, the central bank issues the currency but commercial banks or payment service providers manage the customer-facing accounts. Almost every CBDC project under serious development uses the intermediated model, for reasons we will examine in detail when we discuss bank disintermediation. The direct model, while conceptually cleaner, would require the central bank to handle millions of retail accounts — a task for which central banks are neither designed nor staffed — and would devastate the commercial banking sector's deposit base.

Programmable vs. Non-programmable. Can the money itself carry conditions? Can a government stimulus payment be programmed to expire after 90 days if unspent? Can housing subsidies be restricted to transactions with approved vendors? Programmability is one of the most powerful — and most alarming — features of CBDC design. China's digital yuan supports programmable features. The ECB has been deliberately cautious about programmability, recognizing its potential for abuse. We will return to this question in the privacy section.

Interest-bearing vs. Non-interest-bearing. Should CBDC balances earn interest? If they do, the central bank gains a powerful new monetary policy tool (changing the CBDC interest rate directly affects the real economy). If they do not, the CBDC is more cash-like, which reduces its disruptive impact on bank deposits. Most current designs propose non-interest-bearing or zero-interest CBDCs, at least initially, to minimize disruption to commercial banking.

💡 Key Insight: The most important thing to understand about CBDCs is that the technology is the least interesting part. The critical questions are political, economic, and philosophical: Who can see your transactions? What conditions can be placed on your money? What happens to commercial banks if people prefer to hold government money directly? These are design choices, not technical constraints — and different countries are making very different choices.

Why Governments Want CBDCs

Central banks do not adopt new technologies for fun. They are among the most conservative institutions on earth. The fact that over 130 countries are exploring CBDCs reflects genuine pressures that have accumulated over the past decade. Understanding these motivations — and evaluating which are compelling and which are pretextual — is essential for analyzing any specific CBDC project.

Motivation 1: Financial Inclusion

Approximately 1.4 billion adults worldwide remain unbanked — they have no account at a financial institution or mobile money provider. The World Bank's Global Findex Database (2021) documented that the most commonly cited barriers to banking are: accounts are too expensive, the financial institution is too far away, the person lacks necessary documentation, and the person does not trust financial institutions. These barriers are concentrated in developing countries, but they exist in wealthy nations too: approximately 4.5% of US households (5.9 million) were unbanked in 2021, according to the FDIC.

A retail CBDC, the argument goes, could lower these barriers by providing a government-issued digital wallet accessible through a basic mobile phone, without the fees, minimum balances, and documentation requirements of a traditional bank account. The Bahamas' Sand Dollar was explicitly motivated by financial inclusion: many of the Bahamas' 700 islands have no physical bank branch, and a digital currency accessible by phone could serve populations that the banking system has failed to reach.

The financial inclusion argument is strongest in developing countries with large unbanked populations and weak banking infrastructure. It is weakest in countries with well-developed payment systems. Sweden, which is exploring a digital krona (the e-krona), already has near-universal financial inclusion through commercial banking and mobile payment apps like Swish. For Sweden, the motivation is less about reaching the unbanked and more about ensuring that the central bank retains a role as physical cash usage declines toward zero.

⚖️ Both Sides: Critics argue that financial exclusion is not primarily a technology problem. If people are unbanked because they lack documentation, a CBDC still requires some form of identity verification. If people are unbanked because they distrust institutions, a government digital currency may not solve that distrust. Mobile money services like M-Pesa in Kenya achieved remarkable financial inclusion without any CBDC. Proponents counter that mobile money creates private-sector dependency — M-Pesa is owned by Vodafone and Safaricom — and that a public-sector alternative provides a foundation that the private sector cannot withdraw.

Motivation 2: Payment Efficiency and Modernization

Most countries' payment infrastructure is old. The US payments system is built on ACH (Automated Clearing House), a batch-processing network designed in the 1970s that still takes one to three business days to settle ordinary transfers. International payments are worse: a remittance from the US to the Philippines can take three to five days and cost 5-10% in fees, passing through multiple correspondent banks with each taking a cut.

A CBDC could enable instant settlement at near-zero cost, domestically and potentially internationally. If two countries both have interoperable CBDCs, a cross-border payment could settle in seconds rather than days, at a fraction of the current cost. The BIS Innovation Hub has conducted multiple experiments on cross-border CBDC interoperability, including Project mBridge (connecting digital currencies from China, Thailand, the UAE, and Hong Kong) and Project Dunbar (connecting Australia, Malaysia, Singapore, and South Africa).

However, the payment efficiency argument has a significant weakness: you do not need a CBDC to modernize payments. India's Unified Payments Interface (UPI) processed over 10 billion transactions per month by late 2023, enabling instant, near-free payments between any bank account in the country. Brazil's Pix system, launched in 2020, processed over 3 billion transactions per month by 2023. The US launched FedNow in July 2023, enabling real-time payments between participating banks. None of these systems is a CBDC. They are modernized payment rails that work within the existing two-tier banking system.

📊 By the Numbers: India's UPI processed 10.6 billion transactions worth $207 billion in a single month (October 2023). Brazil's Pix had 156 million registered users by 2024, covering 75% of the adult population, just four years after launch. The UK's Faster Payments system has been processing instant bank transfers since 2008. These numbers suggest that modern payment infrastructure does not require CBDC — though a CBDC could provide a universal public-sector foundation that these systems currently lack.

Motivation 3: Monetary Policy Tools

This is the motivation that excites central bankers and frightens libertarians. A CBDC could provide central banks with monetary policy tools that are impossible with physical cash.

Consider the "zero lower bound" problem. When a central bank wants to stimulate the economy during a recession, it cuts interest rates. But interest rates cannot easily go below zero when physical cash exists, because people can simply withdraw their money from banks and hold cash, which earns zero rather than the negative rate. Economists call this the zero lower bound, and it has constrained monetary policy during every major recession of the 21st century. If a retail CBDC replaced most cash, the central bank could implement negative interest rates directly on CBDC holdings — your digital wallet balance would shrink over time, incentivizing you to spend or invest rather than hoard. The economist Kenneth Rogoff made this argument in detail in The Curse of Cash (2016).

Programmable money takes this further. A government stimulus payment issued as programmable CBDC could carry an expiration date: spend this within 90 days or it disappears. This would ensure that stimulus money enters the economy rather than being saved, increasing the fiscal multiplier. China has already experimented with this feature in digital yuan pilots, issuing time-limited coupons through the e-CNY app.

The monetary policy argument is powerful but double-edged. The same tools that enable more effective macroeconomic management also enable more intrusive economic control. An expiration date on stimulus money might be good economic policy. An expiration date on your salary is something else entirely. Where does one draw the line? The technology itself does not answer this question. Politics does.

Motivation 4: Defending Monetary Sovereignty Against Private Stablecoins

In 2019, Facebook (now Meta) announced Libra — a stablecoin backed by a basket of currencies and government bonds, designed to serve Facebook's then-2.7 billion users as a global payment system. Central bankers panicked. Not because they feared a particular technology, but because they feared losing control of monetary policy if a significant share of their citizens' transactions migrated to a private currency they could not regulate, inflate, deflate, or shut down.

Libra was ultimately blocked by regulatory opposition and renamed Diem before being abandoned entirely in 2022. But the fear it sparked did not dissipate. If anything, the subsequent growth of Tether (USDT) and USD Coin (USDC) — which collectively exceeded $130 billion in market capitalization by 2024 — reinforced the concern. Private companies were issuing de facto digital dollars at scale, outside the direct control of the Federal Reserve.

🔗 Cross-Reference: Chapter 24 (Stablecoins) examines in detail how stablecoins work, the risks they carry (reserve quality, bank-run dynamics, regulatory status), and the spectrum from fully-backed fiat stablecoins to the algorithmic stablecoin designs that led to the Terra/Luna collapse. The CBDC-as-defense-against-stablecoins argument only makes sense with that background.

The monetary sovereignty argument is: if digital dollars are going to exist, the central bank — not a private company — should issue them. A government CBDC would provide the convenience and programmability of stablecoins with the full faith and credit backing that private stablecoins can only approximate. The European Central Bank has been explicit about this motivation. In its October 2023 report on the preparation phase of the digital euro, the ECB stated that the digital euro would serve as a "monetary anchor" ensuring that private digital money remains redeemable at par in central bank money.

Wholesale vs. Retail CBDCs

The CBDC landscape divides into two fundamentally different categories that are often conflated in public discussion.

Wholesale CBDCs: The Quiet Revolution

A wholesale CBDC is a digital currency accessible only to financial institutions — banks, payment processors, and other entities that already hold accounts at the central bank. It is an upgrade to the existing interbank settlement system. Wholesale CBDCs are unglamorous, generate few headlines, and are probably the most likely form of CBDC to achieve widespread deployment.

The logic is straightforward. Banks already settle transactions with each other through central bank reserve accounts. These systems work but are often slow (batch-processed), operate only during business hours, and are expensive for cross-border transactions. A wholesale CBDC that enables instant, 24/7 settlement between financial institutions using digital tokens representing central bank reserves would reduce settlement risk, improve liquidity management, and — most importantly for international finance — dramatically reduce the cost and time required for cross-border payments.

Project Helvetia (Switzerland), Project Jasper (Canada), Project Ubin (Singapore), and Project mBridge (multi-country) have all demonstrated the technical feasibility of wholesale CBDCs. Some of these projects use actual distributed ledger technology with permissioned consensus — not a public blockchain, but a genuine DLT system where multiple financial institutions operate validator nodes. The distinction matters: wholesale CBDCs have fewer privacy concerns (the transacting parties are all regulated financial institutions), lower disintermediation risk (they do not change the relationship between citizens and banks), and smaller implementation challenges (the user base is thousands of institutions, not millions of individuals).

Retail CBDCs: The Hard Problem

A retail CBDC is a digital currency accessible to the general public. This is what most people mean when they say "CBDC," and it is where all the hard questions live. A retail CBDC changes the relationship between citizens and the central bank, between citizens and commercial banks, and between citizens and the state.

The design challenges are enormous:

Scale. A retail CBDC for a country like the United States would need to handle the transaction volume of the entire economy. Visa processes approximately 65,000 transactions per second at peak capacity. A US retail CBDC would need comparable throughput, with five-nines reliability (99.999% uptime), and it would need to work during natural disasters, power outages, and cyberattacks — because if the national currency goes offline, the economy stops.

Identity. Who gets a CBDC wallet? Anti-money-laundering (AML) and know-your-customer (KYC) regulations require identity verification for financial accounts. But the financial inclusion goal requires reaching people who lack formal identification. Most CBDC designs resolve this tension through tiered access: small wallets with low transaction limits can be opened with minimal identity verification, while larger wallets require full KYC. China's digital yuan uses a four-tier system, ranging from anonymous (lowest limits, essentially anonymous up to a small balance) to fully verified (highest limits, full KYC).

Offline capability. Physical cash works without electricity or internet. If a CBDC replaces cash, it must work in environments where connectivity cannot be guaranteed. Several CBDC projects, including China's e-CNY, have developed offline payment capabilities using NFC (near-field communication) chips in phones or dedicated hardware devices. These systems allow two devices to transact without an internet connection, with the transactions syncing to the central ledger when connectivity returns. The security challenge is preventing double-spending in offline mode — a problem that Bitcoin solved with proof of work but that centralized systems must solve differently, typically through hardware security modules and transaction limits.

Cybersecurity. A retail CBDC would be the single highest-value target for cyberattack in human history. Compromising the central ledger or forging CBDC tokens would be equivalent to counterfeiting the national currency with perfect fidelity. The security requirements exceed anything in the current financial system, because the system would be simultaneously more centralized (a single ledger) and more widely accessible (millions of endpoints) than existing payment infrastructure.

💡 Key Insight: The distinction between wholesale and retail CBDCs is not just technical — it is political. Wholesale CBDCs are evolutionary improvements to existing financial infrastructure, involving sophisticated institutions that are already regulated. Retail CBDCs are revolutionary changes to the relationship between citizens and money, involving every person in the economy. Most central banks are comfortable with the former and cautious about the latter.

China's Digital Yuan (e-CNY)

The Most Advanced CBDC on Earth

China's digital yuan — officially the e-CNY, issued by the People's Bank of China (PBOC) — is the world's most advanced retail CBDC project by any measure: development timeline, pilot scale, transaction volume, or geographic scope. Understanding what China has built, how it works, and what it reveals about CBDC design is essential for evaluating every other CBDC project.

Development began in 2014, making it one of the earliest CBDC research programs globally. Pilot testing began in earnest in late 2019, initially in four cities: Shenzhen, Suzhou, Chengdu, and Xiong'an. By 2024, pilots had expanded to 26 provinces and cities, covering over 260 million individual wallets, with cumulative transaction volume exceeding 7 trillion yuan (approximately $980 billion). The e-CNY app is available on both iOS and Android and functions through both QR code scanning and NFC-based tap-to-pay.

Architecture

The e-CNY uses a two-tier architecture. The PBOC issues the digital currency to authorized commercial banks (the "first tier"), which then distribute it to the public (the "second tier"). This intermediated model preserves a role for commercial banks and avoids the central bank having to manage hundreds of millions of retail accounts.

The underlying technology is deliberately not a blockchain. The PBOC describes it as a centralized ledger system that incorporates elements of distributed database design for resilience. The system supports programmability — the ability to attach conditions to e-CNY tokens — and has experimented with time-limited spending vouchers, merchant-restricted payments, and smart contract-based conditional transfers.

The e-CNY supports a tiered wallet system with four levels of identity verification. The lowest tier allows users to open a wallet with just a phone number, supporting small balances and low transaction limits. Higher tiers require a linked bank account and full identity verification, with correspondingly higher limits. This tiered approach is China's answer to the financial inclusion vs. AML/KYC tension.

Adoption Reality

The headline numbers are impressive but require context. As of mid-2024, China reported approximately 260 million individual e-CNY wallets, 120 billion yuan in circulation, and cumulative transactions exceeding 7 trillion yuan. But these numbers do not tell a straightforward success story.

First, many wallets were created during promotional campaigns where the government distributed free e-CNY "red envelopes" (digital hongbao) to encourage registration. Creating a wallet during a promotion is not the same as adopting a new payment method. Second, much of the transaction volume has been driven by government salary payments, tax payments, and transportation subsidies — transactions where users had little choice. Third, China already has two dominant mobile payment platforms — Alipay (owned by Ant Group, an affiliate of Alibaba) and WeChat Pay (owned by Tencent) — that collectively process over $30 trillion in transactions annually and are used by over a billion people. The e-CNY is not entering a payment vacuum. It is competing with two of the most successful payment platforms in human history.

Surveys of e-CNY pilot city residents have found that while awareness is high, regular voluntary use is low. Users who received promotional red envelopes spent them and often did not return to the e-CNY app. The "stickiness" problem — getting people to use e-CNY by choice rather than by incentive or mandate — has been the PBOC's most persistent challenge.

📊 By the Numbers: Alipay and WeChat Pay combined process approximately $30 trillion in annual transaction volume. The e-CNY's cumulative transaction volume since its 2019 pilot launch through 2024 is approximately $980 billion total — roughly one week of Alipay and WeChat Pay combined volume. By market share, the e-CNY is a rounding error in Chinese digital payments. By geopolitical significance, it is the most watched financial experiment on earth.

Surveillance Capabilities

The surveillance dimension of the digital yuan cannot be discussed responsibly without acknowledging both the technical reality and the political context.

Technically, the PBOC has described the e-CNY as offering "controllable anonymity" — a phrase that tells you everything you need to know. At the lowest wallet tier (phone number only, small balances), transactions are anonymous to the commercial banks and merchants involved. But they are not anonymous to the PBOC. The central bank maintains the ability to trace any transaction when required for law enforcement, tax compliance, or anti-money-laundering purposes. The system is designed so that privacy is the default for commercial parties (your bank does not need to know what you buy), but transparency is the default for the state (the PBOC can always look if it decides to).

The political context matters. China already operates the world's most comprehensive digital surveillance infrastructure. The Social Credit System, while less monolithic than Western media often portrays, does link financial behavior to social scoring in various local implementations. China's internet is monitored through the Great Firewall. Financial transactions through Alipay and WeChat Pay are already accessible to the government through regulatory requirements. In this context, the e-CNY does not represent a dramatic expansion of government surveillance capacity — the government already has extensive access to financial data through its regulatory authority over Alipay and WeChat Pay. What the e-CNY does provide is a unified, state-controlled infrastructure for that surveillance, rather than relying on private-sector intermediaries.

For citizens of liberal democracies, the surveillance concern is about precedent and architecture. Even if a democratic government launches a CBDC with strong privacy protections, the underlying system is architecturally capable of surveillance. Protections are policy choices, not technical constraints. A future government could change the policy.

The Geopolitical Dimension

China's digital yuan has a geopolitical dimension that extends beyond domestic payments. The PBOC has been actively promoting cross-border use of the e-CNY through Project mBridge and bilateral agreements with trading partners. The long-term strategic concern, discussed extensively in Western policy circles, is that a mature cross-border digital yuan could reduce global dependence on the US dollar-denominated SWIFT system for international payments.

This concern should be evaluated carefully. The dollar's dominance in international trade is not based primarily on payment technology — it is based on the depth and liquidity of US capital markets, the rule of law in the US financial system, and the network effects of a century of dollar-denominated trade and debt. Replacing SWIFT with a digital yuan payment rail does not change these fundamentals. However, for countries subject to US financial sanctions — Russia, Iran, Venezuela, and others — a Chinese-controlled cross-border payment system that bypasses SWIFT is strategically valuable regardless of whether it threatens dollar hegemony.

The Digital Euro

The ECB's Careful Approach

The European Central Bank has taken a deliberately cautious approach to CBDC development, reflecting both the institutional culture of European central banking and the political complexity of the eurozone (20 countries sharing a single currency, each with different financial systems and political dynamics).

The ECB's digital euro project entered its "investigation phase" in October 2021 and transitioned to a "preparation phase" in November 2023. The preparation phase focuses on finalizing rules, selecting technology providers, and conducting testing. The ECB has emphasized that the preparation phase is not a commitment to issue a digital euro — that decision would require additional approval from the ECB's Governing Council and, likely, legislation from the European Parliament and Council.

Design Philosophy

The digital euro's design philosophy differs markedly from China's digital yuan in its emphasis on privacy. The ECB has proposed a tiered privacy model where low-value, in-person transactions would have cash-like privacy (meaning neither the ECB nor the intermediary would see the transaction details), while higher-value or online transactions would be subject to standard AML/KYC requirements. The ECB has described this as "privacy at the center of the design" — a deliberate contrast with China's "controllable anonymity."

The holding limit debate has been one of the most contentious aspects of the digital euro design. To prevent bank disintermediation (discussed in detail below), the ECB has proposed a cap on the amount of digital euros any individual can hold — with early discussions suggesting a figure in the range of 3,000 euros. Amounts above the limit would automatically be swept into the user's linked bank account. This "waterfall" mechanism would preserve the digital euro's usefulness for payments while preventing it from becoming a large-scale substitute for bank deposits.

⚖️ Both Sides: Proponents argue that a holding limit is a prudent safeguard that allows the digital euro to serve its payment function without destabilizing the banking system. Critics argue that a currency you cannot accumulate beyond a government-set limit is not really currency at all — it is a payment tool controlled by the state, and the holding limit reveals that the digital euro serves government interests (preserving the banking system) rather than citizen interests (having an alternative to bank deposits).

Timeline

The ECB has indicated that a digital euro would not launch before 2028 at the earliest, and potentially later. The legislative framework — the Digital Euro Regulation — was proposed by the European Commission in June 2023 and is working its way through the European legislative process. This regulatory approach is characteristically European: establish the legal framework first, then build the technology within that framework. The contrast with China — which launched pilots first and is developing regulations retroactively — reflects fundamentally different governance philosophies.

The US Situation

The Conspicuous Absence

The United States is the most significant major economy without an active retail CBDC program. The Federal Reserve has studied the topic, published research papers, and conducted technical experiments, but it has not launched a pilot and has no announced timeline for doing so. This absence is not accidental. It reflects a unique combination of political opposition, institutional caution, existing infrastructure that partially addresses CBDC motivations, and a policy preference for private-sector stablecoin innovation.

FedNow: Modernization Without CBDC

In July 2023, the Federal Reserve launched FedNow — an instant payment service enabling real-time settlement of bank-to-bank transfers 24 hours a day, 7 days a week, 365 days a year. FedNow is not a CBDC. It does not create a new form of money. It does not give citizens accounts at the Federal Reserve. What it does is modernize the plumbing of the existing payment system, enabling instant transfers that previously took one to three business days through ACH.

FedNow is significant in the CBDC context because it addresses one of the primary motivations for CBDC — payment modernization — without any of the disruptive implications. Bank deposits remain bank deposits. The two-tier banking system is preserved. No new form of money is created. If the primary goal is faster domestic payments, FedNow achieves that goal with minimal disruption.

By early 2025, over 1,000 financial institutions had joined FedNow, with transaction volumes growing steadily. The system supports transfers up to $500,000 and settles in seconds. For the practical purpose of sending money from one US bank account to another, FedNow eliminates the speed advantage that a retail CBDC would provide.

Political Opposition

In the United States, a retail CBDC has become one of the rare financial policy issues that generates intense bipartisan opposition — though for different reasons.

Conservative opposition frames CBDCs as a tool for government surveillance and control. The "CBDC Anti-Surveillance State Act," introduced in Congress in 2023 and passed by the House in 2024, would prohibit the Federal Reserve from issuing a CBDC directly to individuals or using one for monetary policy. The bill's sponsor, Representative Tom Emmer, described a CBDC as "a CCP-style surveillance tool" — an explicit invocation of China's digital yuan as a negative example. Former President Donald Trump declared during the 2024 presidential campaign that he would "never allow the creation of a central bank digital currency."

Progressive opposition exists but is more nuanced. Privacy advocates, including the ACLU and the Electronic Frontier Foundation, have raised concerns about the surveillance potential of a CBDC, though they tend to argue for privacy-preserving design rather than outright prohibition. Some progressive economists argue that a CBDC could provide financial inclusion benefits, but only with strong privacy protections and civil liberties safeguards that may be difficult to maintain over time.

The Stablecoin-as-Alternative Argument

An influential argument in US policy circles is that regulated private stablecoins can provide many of the benefits of a CBDC (digital payments, programmability, financial inclusion) without the risks (government surveillance, banking disruption, political control of money). Under this framework, the government's role is to regulate stablecoin issuers — requiring full reserve backing, regular audits, and consumer protections — rather than to issue a competing digital currency.

The Clarity for Payment Stablecoins Act and similar legislation under consideration in Congress would create a regulatory framework for stablecoins, potentially establishing them as the de facto US CBDC substitute. This approach appeals to the US preference for private-sector innovation within a government-set regulatory framework, rather than government provision of the service itself.

💡 Key Insight: The US approach represents a genuine philosophical difference, not just political posturing. The European model (build a public-sector digital euro) and the US model (regulate private-sector stablecoins) reflect competing theories about the proper role of government in the financial system. Neither is obviously correct. The European model risks creating a surveillance tool. The US model risks creating a payment system controlled by private companies (again) rather than by the public sector.

Other CBDC Projects Around the World

While China, the EU, and the US dominate the headlines, CBDC development is a global phenomenon, and some of the most instructive projects are happening in smaller economies.

Nigeria: eNaira

The eNaira, launched in October 2021, was one of the first retail CBDCs in a major developing economy. It was built on a permissioned version of Hyperledger Fabric and designed to promote financial inclusion in a country where approximately 40% of adults were unbanked. The Central Bank of Nigeria set ambitious adoption targets.

The reality fell short. By 2023, only about 13 million eNaira wallets had been created — approximately 6% of Nigeria's population — and transaction volumes remained low. Adoption was hampered by low smartphone penetration in rural areas, distrust of government financial initiatives (Nigeria had recently imposed restrictions on cash withdrawals and foreign exchange), and the absence of compelling use cases that existing mobile money and bank transfer services could not serve. The eNaira became a cautionary tale about the gap between CBDC ambitions and ground-level adoption. We will examine it in detail in Case Study 2.

The Bahamas: Sand Dollar

The Sand Dollar, launched in October 2020, was the world's first nationally deployed CBDC. The Bahamas — an archipelago of 700 islands with only about 400,000 people — had a clear use case: many outer islands lacked bank branches, and hurricane damage regularly disrupted physical financial infrastructure. A digital currency accessible by mobile phone could serve populations that traditional banking could not reach.

The Sand Dollar achieved modest success in its intended use case but faced challenges scaling beyond it. Total Sand Dollar in circulation remained a tiny fraction of Bahamian dollar circulation — less than 1% by most estimates. The primary barrier was, again, the incumbency of existing payment methods (cash, debit cards, mobile banking apps) for the majority of the population that already had access to them.

India: Digital Rupee

The Reserve Bank of India launched wholesale and retail digital rupee pilots in late 2022. The wholesale pilot focused on settlement of government bond transactions. The retail pilot, initially limited to four cities, expanded gradually. India's situation is unique because UPI — its existing real-time payment infrastructure — is already so successful that the marginal benefit of a CBDC for domestic payments is unclear. The Reserve Bank of India has framed the digital rupee as complementary to UPI rather than a replacement, exploring use cases like offline payments and cross-border remittances where UPI does not currently operate.

Brazil: DREX

Brazil's CBDC project, initially called the Digital Real and rebranded as DREX (Digital Real Electronic X) in 2023, has taken a distinctive approach focused on programmability and tokenized assets. Rather than positioning DREX primarily as a payment instrument competing with Pix (which already provides instant payments), Brazil's central bank has emphasized DREX as a platform for smart contracts — enabling tokenized deposits, automated conditional payments, and programmable government transfers. This focus on financial innovation rather than payment replacement distinguishes DREX from most other CBDC projects.

Jamaica: JAM-DEX

Jamaica launched JAM-DEX (Jamaica Digital Exchange Currency) in 2022, making it one of the earliest nationally deployed CBDCs. Jamaica's central bank promoted JAM-DEX through the NCB (National Commercial Bank) wallet system and offered incentive programs to drive adoption. Like the Sand Dollar, JAM-DEX has struggled with adoption beyond initial promotional pushes, though it continues to operate and expand.

📊 By the Numbers: As of early 2025, the Atlantic Council's CBDC Tracker identified 36 countries in pilot phase, 21 in development, 46 in research, and 3 with launched retail CBDCs (Bahamas, Jamaica, Nigeria). Three countries (Ecuador, Senegal, and Finland) had explored and cancelled CBDC projects. The landscape is dynamic, with projects accelerating and decelerating based on political changes, technological challenges, and evolving assessments of costs and benefits.

The Privacy Problem

Programmable Money + Government Control = ?

The privacy implications of CBDCs represent the single most important policy issue in the entire CBDC discourse, and the issue where the philosophical tension between crypto and government is sharpest.

Physical cash is anonymous. When you hand someone a twenty-dollar bill, no third party records the transaction. No database logs the serial number, the time, the location, or the participants. This anonymity is a feature, not a bug — it protects law-abiding citizens' financial privacy, enables transactions that people might prefer to keep private (charitable donations, purchases related to medical conditions, political contributions in hostile environments), and provides a zone of economic activity that is beyond government surveillance.

Cash is also used for tax evasion, money laundering, drug trafficking, bribery, and every other form of financial crime. This is the tension: the same anonymity that protects the privacy of the innocent also protects the activity of the criminal. Eliminating cash anonymity would reduce financial crime and increase tax collection. It would also eliminate financial privacy for everyone.

A CBDC, depending on its design, could fall anywhere on the spectrum between cash-like anonymity and total surveillance. The design choice is not technical — the technology can support either extreme. The design choice is political.

The Surveillance Scenario

Consider the maximally surveilled CBDC. Every transaction is recorded, timestamped, and attributed to a verified identity. The government can observe, in real time, that you bought a pregnancy test at 11:47 PM on a Tuesday, donated to a political opposition group on Wednesday, purchased a book about tax optimization on Thursday, and visited a therapist on Friday. Each of these transactions is individually innocuous. Together, they compose a detailed portrait of your life, your beliefs, your health, and your vulnerabilities.

This is not a hypothetical. China's e-CNY system, as described by the PBOC, allows the central bank to trace any transaction. The "controllable anonymity" framework means that your transactions are private from commercial counterparties but transparent to the state. In a country with a free press, independent judiciary, and strong civil liberties protections, you might trust the government not to abuse this access. In a country without those protections — and the architects of Bitcoin would argue that no country maintains them permanently — the infrastructure for financial surveillance is also the infrastructure for financial control.

Programmability as Control

The programmability features of CBDCs introduce a dimension of control that goes beyond surveillance. If money is programmable, it can carry conditions. Consider:

Expiration dates. Stimulus money that must be spent within 90 days. China has already piloted this. The economic logic is sound — ensuring stimulus money circulates rather than being saved increases its multiplier effect. But the precedent is profound: money that the government can make disappear is not money in any traditional sense.

Geographic restrictions. CBDC that can only be spent within a designated area. This has been proposed for localized economic development initiatives. It is also a tool for economic restriction — preventing people from spending money outside government-approved zones.

Category restrictions. CBDC that can only be spent on approved categories of goods or services. Government housing subsidies that can only be used for rent. Food assistance that can only be used for groceries. This already exists in blunt form (food stamps in the US are restricted to food purchases), but programmable money could implement these restrictions with precision that current systems cannot achieve.

Conditional access. CBDC accounts that can be frozen, reduced, or restricted based on government-defined criteria. In the most dystopian version, this is social credit: your financial access is conditional on your behavior. You missed a tax payment, so your CBDC spending limit is reduced. You attended a protest, so your CBDC account is frozen pending investigation.

🔴 Critical: None of these scenarios requires a CBDC. Governments can already freeze bank accounts, seize assets, and restrict financial access through the existing banking system. The difference is one of efficiency and granularity. Freezing a bank account requires a legal process, institutional intermediaries, and bureaucratic friction. Freezing a CBDC wallet could, depending on the design, require nothing more than a database query. The reduction in friction is the danger — not because governments will immediately abuse it, but because reducing the cost of abuse makes abuse more likely over time.

Privacy-Preserving Designs

Not all CBDC designs maximize surveillance. Several projects are explicitly attempting to build privacy protections into the architecture.

The ECB's proposed digital euro includes "offline privacy" for low-value, in-person transactions — transactions that would be as private as cash. The technology for this exists: hardware security modules in user devices can execute transactions locally without transmitting data to a central server. The challenge is ensuring that the privacy protections survive implementation. Architectures proposed on paper often acquire "exceptions" during development — law enforcement access, regulatory reporting requirements, fraud prevention features — that erode the original privacy guarantees.

Zero-knowledge proofs, discussed in Chapter 37, offer a theoretical path to privacy-preserving CBDCs. A ZK-based CBDC could verify that a transaction is valid (the sender has sufficient funds, the amount is within legal limits, the parties satisfy AML requirements) without revealing the identities of the parties or the amount of the transaction. The MIT Digital Currency Initiative and the Bank of England have both published research on ZK-CBDC designs. However, no major CBDC project has adopted ZK proofs for its core architecture as of 2025, partly because the computational cost remains significant at scale and partly because most governments want some level of transactional visibility.

🔗 Cross-Reference: Chapter 37 (Zero-Knowledge Proofs) explains the cryptographic foundations that could enable privacy-preserving CBDCs. The technical possibility is real. The political will to implement it is the open question.

The Bank Disintermediation Risk

The Fundamental Problem

If a retail CBDC gives ordinary citizens the ability to hold digital money directly at the central bank — or in a central-bank-guaranteed wallet — why would anyone keep their money in a commercial bank?

This question, more than any other, has shaped the design of every major CBDC project. It is the reason that nearly every proposed retail CBDC uses a two-tier intermediated model, imposes holding limits, and pays no interest. The fear is called "bank disintermediation," and it represents an existential threat to the fractional reserve banking model that has underpinned the global financial system for centuries.

How Fractional Reserve Banking Works (and Why CBDCs Threaten It)

Commercial banks do not store your deposits in a vault. When you deposit $1,000 in your checking account, the bank keeps a small fraction as reserves (typically 0-10%, depending on the regulatory regime) and lends the rest out. Your $1,000 deposit might support $900 in loans to other customers, who deposit that $900 in their accounts, enabling $810 in further loans, and so on. This multiplier effect means that the banking system as a whole creates money — far more money is in circulation as bank deposits than exists as central bank reserves.

This system works because depositors rarely withdraw all their money simultaneously. When they do — a bank run — the bank fails, because it does not have the cash to cover its liabilities. Deposit insurance (like the FDIC in the US, which guarantees deposits up to $250,000) prevents most bank runs by assuring depositors that their money is safe even if the bank fails.

Now introduce a retail CBDC. If citizens can hold money directly at the central bank — the one institution that cannot fail, because it can create money — why take the risk of keeping money at a commercial bank? Even with deposit insurance, a CBDC held directly at the central bank is a superior safe asset: no counterparty risk, no need for insurance, no need to trust a commercial institution.

The Cascade Effect

If even 20-30% of bank deposits migrated to CBDC holdings, the consequences for the banking system would be severe:

Reduced lending capacity. Banks fund most of their lending through deposits. If deposits shrink, banks must find alternative funding sources (bonds, interbank borrowing, central bank facilities), which are more expensive. The cost of credit rises throughout the economy.

Increased fragility. In a financial crisis, the flight from bank deposits to CBDC would be faster and more destructive than a traditional bank run. You do not need to queue at an ATM. You just tap your phone. A "digital bank run" could drain billions in deposits within hours, collapsing banks that were healthy the day before.

Structural transformation. If the disintermediation is large enough, the entire business model of commercial banking changes. Banks would transform from deposit-funded lending institutions into something more like investment banks or narrow banks — entities that borrow wholesale to fund lending, without a stable deposit base. The implications for credit availability, mortgage rates, small business lending, and the broader economy are profound and not fully understood.

💡 Key Insight: The bank disintermediation problem explains why every major CBDC design includes features that intentionally limit the CBDC's attractiveness as a store of value: holding limits (the ECB's proposed 3,000-euro cap), zero interest (making bank deposits relatively more attractive), and the intermediated model (routing CBDC distribution through commercial banks rather than cutting them out). These are not technical limitations. They are deliberate design choices to prevent the CBDC from destroying the banking system it is supposed to complement.

The Counterargument

Some economists argue that the disintermediation risk is overstated. Deposits offer services that a bare CBDC wallet does not: overdraft facilities, credit card integration, interest payments (however small), mortgage relationships, and the bundled financial services that people value. People do not keep money in banks purely because they lack alternatives. They keep money in banks because banking is a package of services, not just a storage facility.

Furthermore, if the CBDC pays no interest and has a holding limit, the only deposits that would migrate are those held purely for liquidity — money that people want available for immediate spending. These are typically the least profitable deposits for banks (checking accounts with minimal balances). The more valuable deposits — savings accounts, CDs, money market accounts — would remain at banks because they earn interest that the CBDC does not provide.

This counterargument has merit in calm economic times. The problem is that bank runs do not happen in calm times. They happen in crises, when fear overrides rational calculation and the perceived safety of central bank money dominates any consideration of interest rates or services. The existence of a risk-free CBDC alternative could turn every future banking wobble into a full-blown run.

The Philosophical Tension: Crypto's Foundational Irony

What the Cypherpunks Wanted

Return to first principles. The cypherpunk movement — the intellectual tradition that produced Bitcoin — was animated by a specific fear: that governments would use digital technology to create unprecedented systems of financial surveillance and control. Timothy May's "Crypto Anarchist Manifesto" (1988) warned that governments would attempt to restrict the use of cryptography to preserve their surveillance capabilities. Eric Hughes' "A Cypherpunk's Manifesto" (1993) declared: "Privacy is necessary for an open society in the electronic age." David Chaum built DigiCash in the 1990s specifically to create digital cash that preserved the anonymity of physical cash.

Bitcoin was the culmination of this tradition: a system designed so that no government could freeze your account, trace your transactions (at least in theory), inflate away your savings, or prevent you from sending money to anyone in the world. The entire point was to create money that was beyond government control.

What Governments Are Building

CBDCs are, in many respects, the precise opposite of what the cypherpunks feared and what Bitcoin was designed to prevent. A government CBDC with full transaction visibility gives the state more financial surveillance capability than it has ever had. Programmable money gives the state more control over how citizens use their money than any previous monetary system. The combination — surveillance plus programmability — creates the infrastructure for financial control that the cypherpunks wrote manifestos to prevent.

And yet the picture is not that simple.

The Complication

The cypherpunk vision assumed that the alternative to government money was freedom. But the actual alternative, in practice, has often been private-sector control rather than individual sovereignty. Visa and Mastercard can (and do) cut off merchants they disapprove of. PayPal freezes accounts. Banks debank individuals and organizations for political reasons. The existing financial system is already a surveillance system — it is just surveilled by a fragmented coalition of private companies and government agencies rather than by a unified state system.

If the realistic choice is not between government money and freedom, but between government-controlled digital money and private-corporation-controlled digital money, the calculus becomes more complicated. At least a democratic government is, in theory, accountable to voters. Visa is accountable to shareholders.

Furthermore, the financial inclusion argument has real force. The people most harmed by the current system — the unbanked, the underbanked, the residents of countries with dysfunctional financial institutions — are not people who benefit from the status quo. A CBDC that provides basic financial services to people who currently have none is difficult to oppose on libertarian grounds, because the libertarian alternative (Bitcoin on a smartphone) has not, in practice, reached these populations at scale.

The Convergence and the Divergence

The ironic convergence is that cryptocurrency and CBDCs both represent the digitization of money. They share technological ancestors, conceptual vocabulary, and, in some cases, actual code (several CBDC projects use technology derived from blockchain platforms).

The ironic divergence is that they represent opposite answers to the question "who should control money?" Cryptocurrency answers: no one — or everyone, through decentralized consensus. CBDCs answer: the government — but with modern technology that makes that control more efficient, more powerful, and potentially more beneficial (or more dangerous) than ever before.

Both answers have serious intellectual foundations. Both have serious risks. The cypherpunks were not wrong that governments can abuse financial control. And governments are not wrong that uncontrolled financial systems can enable crime, instability, and exploitation. The CBDC debate is not a debate between good and evil. It is a debate between two different models of trust, two different theories of what money is for, and two different assessments of where the greater danger lies.

⚖️ Both Sides: The most honest framing of the CBDC debate is not "freedom vs. tyranny" but "which risks are you more willing to accept?" A world with CBDCs and no cryptocurrency risks government overreach, financial surveillance, and the elimination of monetary privacy. A world with cryptocurrency and no CBDCs risks financial instability, money laundering at scale, and the concentration of monetary power in the hands of early adopters and private technology companies. A world with both — which is the world we are getting — involves an ongoing negotiation between these risks, mediated by technology, law, and politics.

Summary and Looking Ahead

Central bank digital currencies represent one of the most consequential financial innovations of the 21st century — not because of the technology, which is mostly conventional, but because of what they reveal about the evolving relationship between governments, money, and citizens.

The core facts: Over 130 countries are exploring CBDCs. Most designs are centralized ledgers, not blockchains. The primary motivations are financial inclusion, payment modernization, new monetary policy tools, and defending monetary sovereignty against private stablecoins. The primary risks are surveillance, privacy erosion, bank disintermediation, and the concentration of financial control. China's digital yuan is the most advanced project, demonstrating both the technical feasibility and the adoption challenges of retail CBDCs. The digital euro is proceeding cautiously with stronger privacy protections. The US has no active CBDC program and strong political opposition to one, preferring regulated stablecoins as an alternative.

The deeper lesson: CBDCs force us to confront questions that cryptocurrency raised but did not resolve. Who should control money? How much privacy should financial transactions have? What is the proper role of the state in the monetary system? These are not technical questions. They are political and philosophical questions that will be answered differently in different countries, and the answers will shape the financial architecture that billions of people live within for generations.

Chapter 39 looks at the broader question of what blockchain technology — in all its forms, from decentralized protocols to CBDCs to enterprise ledgers — might actually matter in ten years. We will attempt the hardest task in any technology book: honest futurism, distinguishing between developments that are near-certain, developments that are probable, developments that are speculative, and developments that are wishful thinking. CBDCs will figure prominently in that analysis, but they are one piece of a larger puzzle about how digital infrastructure reshapes institutions, trust, and power.

🔗 Cross-Reference: Chapter 39 (The Future of Blockchain) examines where CBDCs fit in the 10-year outlook for decentralized and centralized digital finance. Chapter 40 (Forming Your Own View) provides the framework for integrating everything you have learned — including the CBDC analysis from this chapter — into a coherent, defensible perspective on decentralized systems.