The CBDC Is Not a Currency. It Is a Control System.

The Bank for International Settlements — the central bank of central banks, headquartered in Basel, Switzerland — published a 2020 report on retail central bank digital currencies that is worth reading carefully. Not for the reassuring language about inclusion and innovation, but for the technical specifications buried in the middle sections.

A retail CBDC, the BIS report explains, would be "a digital form of central bank money that is different from balances in traditional reserve or settlement accounts." Unlike physical cash, it would be programmable. Unlike commercial bank deposits, it would be a direct liability of the central bank. Unlike any previous form of money, it would be fully traceable, identity-linked, and capable of carrying embedded conditions on its use.

"Programmable money" is the phrase that appears in the technical literature. It means money that can be coded to do things — or to not do things. Money that can be programmed to expire. Money that can be restricted to certain categories of spending. Money that can be blocked from specific vendors or geographic areas. Money that can be automatically taxed, fined, or reduced through negative interest rates applied algorithmically without the account holder's consent.

This is not a futurist projection. It is the stated design goal in the technical architecture documents.

The Pilot Landscape

The Atlantic Council's CBDC Tracker documents 134 countries actively exploring central bank digital currencies as of 2024. Of these, 36 are in pilot phase — actual testing with real users and real transactions. China's digital yuan (e-CNY) is the most advanced retail CBDC in a major economy, with pilots in dozens of cities, approximately 260 million wallets opened, and integration with the Beijing 2022 Olympics payment infrastructure.

The Bahamas launched the Sand Dollar in 2020 — the first nationally deployed retail CBDC. Nigeria launched the eNaira in 2021. Jamaica launched the JAM-DEX in 2022. The Eastern Caribbean Central Bank operates the DCash system across eight member nations.

In Europe, the European Central Bank is in the preparation phase for a digital euro, with a projected implementation timeline in the late 2020s. The Bank of England is conducting research on a potential digital pound. The US Federal Reserve has been more cautious — a combination of Congressional resistance and internal debate — but has published extensive research and participated in cross-border CBDC interoperability trials through the BIS Innovation Hub's Project mBridge.

What China's Pilot Reveals

The e-CNY pilot in China provides the most developed case study in CBDC design and its implications.

The digital yuan operates through a two-tier system: the People's Bank of China issues e-CNY to commercial banks, which distribute it to users through apps. Each e-CNY wallet is linked to a verified identity — either a national ID or a linked phone number. Every transaction creates a permanent record in the PBOC's database. The PBOC has "controllable anonymity" — meaning transactions are anonymous at the commercial bank level but not at the central bank level. The PBOC can, at any time, review the complete transaction history of any wallet.

The e-CNY has been tested with expiration dates: the government has distributed e-CNY vouchers with 28-day expiration windows to incentivize spending during economic slowdowns. It has been tested with spending category restrictions: some e-CNY distributions have been restricted to specific categories (groceries, transportation) rather than general use. These are not theoretical capabilities. They have been deployed in actual pilot programs.

The e-CNY also integrates with China's social credit system — not officially, but technically. The infrastructure that tracks and scores citizen behavior and the infrastructure that tracks financial transactions are operated by the same state apparatus. The degree of integration, and its future trajectory, is a matter of official opacity.

The Western Architecture Is Not Different

Western CBDC advocates consistently argue that their designs incorporate privacy protections that make them fundamentally different from the e-CNY. The argument is worth examining carefully.

The proposed digital euro architecture includes "privacy" tiers: small transactions below a threshold could have "cash-like anonymity"; larger transactions would require identity verification. The ECB's technical documents acknowledge that even in the most private tier, transactions would not be fully anonymous — the ECB would have access to transaction data, subject to regulatory safeguards.

"Subject to regulatory safeguards" is the operative phrase. It means: the data exists, the central bank has access to it, and the conditions under which that access can be exercised are defined by law — law that can be changed. The infrastructure for full financial surveillance would be present; its activation would be a policy decision. In a political environment where emergency powers are routinely invoked and sunset clauses routinely extended, the distance between "privacy-preserving by default" and "fully surveilled by default" is a legislative session.

Project Hamilton — a collaboration between the Federal Reserve Bank of Boston and MIT — produced CBDC technical research that explicitly explored programmability as a feature. The research paper describes the capacity to "program" money to implement monetary policy, tax collection, and subsidy distribution automatically. These are presented as benefits. The same technical infrastructure that automatically distributes subsidies can automatically restrict disfavored purchases.

The Inclusion Argument

The argument most frequently made in favor of retail CBDC adoption is financial inclusion: approximately 1.4 billion adults globally are unbanked, lacking access to formal financial services. A CBDC on a smartphone could provide them access to payments, savings, and credit infrastructure.

This argument contains genuine substance. Financial exclusion is real and has real costs. But the inclusion argument elides a crucial distinction: financial inclusion through a surveillance-enabled programmable money system is not the same thing as financial inclusion through cash or through decentralized payment systems.

A Nigerian smallholder farmer who was previously unbanked and now holds eNaira has gained access to digital payments. She has also, simultaneously, entered a financial surveillance system operated by the Nigerian government, linked to her national identity, and capable of restricting her financial activity based on her compliance with government requirements. Whether this represents inclusion or a new form of control depends on how much you trust the Nigerian government — and on whether you believe the governments of the future will be equally trustworthy as the governments of today.

Cash has one property that no CBDC design preserves: transactions between consenting parties that do not require a third-party record. This property — financial privacy — has historically been the foundation of economic autonomy. It enables political dissent, organizational privacy for labor unions and civil society groups, and the basic capacity to conduct transactions without state awareness. No CBDC design currently in development preserves this property. The tradeoff is explicit in the technical literature.

The BIS Coordination Layer

The Bank for International Settlements coordinates CBDC research across central banks through its Innovation Hub, a network of technology centers in Basel, Hong Kong, Singapore, London, Paris, Stockholm, New York, and Toronto. The Innovation Hub has produced more than a dozen CBDC research projects, including Project mBridge (cross-border CBDC transactions between China, Hong Kong, Thailand, UAE, and Saudi Arabia), Project Jura (France and Switzerland), Project Helvetia (Switzerland), and Project Dunbar (Australia, Malaysia, Singapore, South Africa).

The cross-border interoperability projects are particularly significant. mBridge, which connects the PBOC's e-CNY infrastructure with central banks in the Gulf and Southeast Asia, creates a payment corridor that bypasses the SWIFT messaging system and the dollar-dominated correspondent banking network. For its participants, it reduces transaction costs and processing times. It also creates a surveillance infrastructure for cross-border financial flows that is controlled by the participating central banks — including the PBOC — rather than by private banks operating under Western regulatory frameworks.

The BIS's role in coordinating this infrastructure is under-examined in public discourse. The BIS is not a democratic institution. It is owned by its member central banks. It has no public accountability mechanism beyond the accountability of its member institutions to their respective governments — accountability that is itself often limited. The BIS is building the technical architecture for a global programmable money system. The entities making the design decisions are not elected. The populations who will use the resulting system have no input into its design.

What Programmable Money Actually Enables

The technical capabilities of programmable CBDC money can be described neutrally, as the BIS documents do. They can also be described in terms of their application to populations with disfavored politics.

A CBDC that can be programmed to expire after 30 days could be used to prevent citizens from saving. A CBDC that can be restricted to approved vendors could be used to prevent purchases from non-compliant businesses. A CBDC that can be blocked in specific geographic areas could be used to enforce movement restrictions. A CBDC that can be automatically reduced through negative interest rates could be used to tax savings out of existence. A CBDC that is identity-linked and fully traceable could be used to identify and cut off the financial networks of political opposition movements, labor organizers, or any group the issuing government designates as a threat.

None of these applications require hacking or misuse of the system. They are the designed functionality of programmable money, applied to purposes other than the official use cases described in central bank press releases.

The CBDC is not a conspiracy. The pilot programs are public. The technical specifications are published. The BIS reports are available online. The question is whether people are reading them or reading the press releases. The design is in the documents. The documents say what programmable, surveillance-enabled, identity-linked digital money can do. The officials promoting it have simply decided that the benefits justify the risks. They are making that decision for everyone.