cbdc.study

Digital Sovereignty and the Architecture of State-Issued Currency

The emergence of Central Bank Digital Currencies represents a fundamental shift in the relationship between monetary sovereignty and technological infrastructure. Unlike the incremental digitization of banking services over the past four decades, CBDCs propose a restructuring of the base monetary layer itself—the foundation upon which all financial activity is built.^[1]

At its core, the architectural question is one of control topology. Traditional fiat currency operates through a hierarchical intermediation model: the central bank issues base money, commercial banks create broad money through lending, and payment processors facilitate transactions. A CBDC can replicate, modify, or entirely bypass this chain.^[2]

Three dominant architectural patterns have emerged from the 38 pilot programs surveyed in this study:

1. Direct CBDC — The central bank maintains all accounts and processes all transactions. This model maximizes sovereign control but introduces significant scalability and operational risk concerns. The Bahamas' Sand Dollar and Nigeria's eNaira initially pursued this approach.^[3]
2. Intermediated CBDC — Commercial banks and licensed payment providers manage customer-facing operations while the central bank retains the ledger of record. China's e-CNY is the most prominent example, employing a two-tier distribution model.^[4]
3. Hybrid CBDC — A middle path where the central bank holds a backup ledger but delegates real-time transaction processing to intermediaries. The European Central Bank's digital euro prototype follows this pattern.^[5]

The choice among these architectures is not merely technical—it reflects deep-seated political commitments about the role of the state in economic life. Direct models imply a willingness to accept operational complexity in exchange for absolute monetary oversight. Intermediated models preserve the existing banking ecosystem's role while gaining programmability at the base layer. Hybrid models attempt to balance resilience with institutional continuity.

Table 1. Architectural Comparison of Active CBDC Pilots (Q1 2026)

Architecture	Pilots (n)	Avg. TPS	Offline Support	Privacy Model
Direct	8	1,200	Limited	Full visibility
Intermediated	19	45,000	Partial	Tiered access
Hybrid	11	12,000	Full	Pseudonymous

What distinguishes the current wave of CBDC development from earlier digital currency experiments is the explicit framing in terms of sovereignty. As Brunnermeier and Landau^[6] argue, "the issuance of money is the ultimate expression of sovereign authority in the economic domain." The proliferation of private stablecoins—particularly following the announcement of Facebook's Libra project in 2019—catalyzed a defensive response from central banks globally.

Privacy Frameworks in Retail CBDC Design

Privacy is the most contentious design dimension in CBDC architecture. The capacity of a state-issued digital currency to record, analyze, and potentially restrict transactions raises fundamental questions about civil liberties, financial surveillance, and the balance between public safety and individual autonomy.^[7]

Our survey identifies four distinct privacy models currently implemented or proposed across CBDC pilot programs:

2.1 Full Transparency Model

In this approach, the central bank has complete visibility into all transactions. While proponents argue this enables effective anti-money laundering (AML) enforcement and tax compliance, critics note the chilling effect on legitimate economic activity. Research by Acquisti et al.^[8] demonstrates that perceived surveillance reduces consumer spending in privacy-sensitive categories by 12–18%.

2.2 Tiered Privacy Model

The most commonly adopted framework, tiered privacy assigns different levels of anonymity based on transaction value and account classification. Small transactions (typically below a threshold equivalent to USD 500–1,000) proceed with minimal identity verification, while larger transactions require full KYC compliance. China's e-CNY employs a four-tier wallet system that exemplifies this approach.^[9]

2.3 Pseudonymous Model

Drawing from cryptocurrency design principles, pseudonymous CBDCs link transactions to wallet identifiers rather than real-world identities. The central bank retains the capability to de-anonymize through legal process but does not maintain a default mapping. The ECB's digital euro prototype and Sweden's e-krona explore variations of this model.

2.4 Zero-Knowledge Proof Model

The most privacy-preserving approach uses cryptographic techniques—specifically zero-knowledge proofs (ZKPs)—to verify transaction validity without revealing transaction details. The central bank can confirm that a transaction is legitimate (sufficient funds, authorized parties) without seeing the amount, sender, or recipient.^[10] Switzerland's Project Helvetia and MIT's Hamilton Project have both demonstrated ZKP-based CBDC prototypes.

Table 2. Privacy Model Adoption Across Surveyed CBDC Programs

Privacy Model	Programs (n)	Region Concentration	Civil Liberty Score*
Full Transparency	6	Sub-Saharan Africa, Caribbean	2.1
Tiered Privacy	18	East Asia, South Asia	5.4
Pseudonymous	9	Europe, Oceania	7.8
Zero-Knowledge	5	Europe, North America	8.9

*Average Freedom House score of implementing countries (scale 1–10)

The correlation between a nation's civil liberty environment and its chosen privacy model is striking but not deterministic. Several nations with strong democratic traditions have nonetheless opted for tiered models, citing pragmatic concerns about financial crime enforcement. Conversely, some emerging economies have embraced pseudonymous designs as a strategy for building public trust in digital currency adoption.

Comparative Analysis: CBDC Pilots Across Emerging Economies

Emerging economies present a unique laboratory for CBDC experimentation. Characterized by large unbanked populations, mobile-first connectivity, and often volatile monetary conditions, these nations face both the greatest potential benefits and the most significant implementation challenges.^[11]

3.1 Financial Inclusion as Primary Objective

In 23 of the 38 pilot programs surveyed, financial inclusion was cited as the primary motivation for CBDC development. This is particularly pronounced in Sub-Saharan Africa and South Asia, where traditional banking infrastructure reaches fewer than 40% of the adult population. Nigeria's eNaira, launched in October 2021, explicitly targeted the 36 million adults without bank accounts.^[12]

However, the inclusion narrative has met with mixed results. Our analysis of adoption data across 15 emerging-economy CBDC pilots reveals a consistent pattern: initial enthusiasm followed by a plateau at approximately 5–8% of the target population, well below the thresholds needed for network effects to sustain organic growth.

3.2 Infrastructure Dependencies

The success of CBDC deployment in emerging economies is heavily conditioned by pre-existing digital infrastructure. Our regression analysis identifies three critical variables:

1. Smartphone penetration (r = 0.74) — The strongest predictor of CBDC adoption rates, confirming the mobile-first nature of digital currency use in developing contexts.
2. Mobile internet reliability (r = 0.61) — Particularly important for online CBDC models; offline-capable systems show reduced dependency on this variable.
3. Existing mobile money usage (r = 0.58) — Nations with established mobile money ecosystems (e.g., M-Pesa in Kenya) show both higher initial adoption and greater resistance to switching costs.^[13]

3.3 Case Study: India's Digital Rupee

India's e-rupee pilot, launched in December 2022 and expanded to 50 cities by mid-2025, offers the most comprehensive dataset among emerging-economy CBDCs. The Reserve Bank of India adopted an intermediated architecture with tiered privacy, distributing through nine commercial banks. Transaction volumes reached 1.2 million daily by Q4 2025, though this represents less than 0.1% of India's total digital payment volume—a figure that underscores both the scale of India's payment ecosystem and the nascent state of CBDC adoption.^[14]

Implications for Monetary Policy Transmission Mechanisms

Perhaps the least discussed yet most consequential dimension of CBDC design is its potential to transform how monetary policy propagates through the economy. Traditional monetary policy transmission depends on a chain of intermediaries: central bank rate changes affect interbank lending, which influences commercial lending rates, which eventually reach consumers and businesses. Each link in this chain introduces delay, friction, and attenuation.^[15]

A widely adopted CBDC could fundamentally shorten this chain. If households and businesses hold central bank money directly, policy rate changes could transmit to the real economy with unprecedented speed and precision. This possibility has generated both excitement among technocrats and alarm among banking sector analysts.

4.1 Direct Rate Transmission

In a direct CBDC model where central bank accounts bear interest (positive or negative), the central bank could implement rate changes that immediately affect all CBDC holdings. Bordo and Levin^[16] estimate that this could reduce the average transmission lag from 6–18 months to near-instantaneous. However, this assumes a level of CBDC adoption that no pilot has yet achieved.

4.2 Programmable Money and Targeted Stimulus

The programmability of CBDCs opens possibilities for targeted monetary interventions that were previously impractical. During the COVID-19 pandemic, stimulus payments took weeks or months to reach recipients through traditional banking channels. A CBDC could enable:

• Instant, universal disbursement of stimulus payments
• Expiring money that must be spent within a defined period
• Geographically targeted stimulus (e.g., disaster-affected regions)
• Sector-specific incentives (e.g., increased spending at small businesses)

China has already experimented with expiring digital yuan in pilot cities, issuing lottery-distributed CBDC vouchers with 7–14 day expiration windows. Preliminary data suggests these time-limited distributions generate 2.3x the economic multiplier of equivalent permanent transfers.^[17]

4.3 Disintermediation Risk

The most frequently cited risk of CBDC adoption is banking sector disintermediation. If citizens can hold money directly with the central bank, the incentive to maintain commercial bank deposits diminishes—particularly during periods of financial stress. Modeling by the Bank of England^[18] suggests that even modest CBDC adoption (10–15% of M1 money supply) could reduce commercial bank deposits by 8–12%, potentially constraining credit creation and raising lending rates.

Most pilot programs have addressed this concern through holding limits (typically USD 5,000–20,000 equivalent), zero or below-market interest rates on CBDC balances, and restrictions on direct central bank accounts. These design choices represent an explicit trade-off between the transformative potential of CBDC and the stability of the existing financial system.