Central bank digital currencies increase government surveillance and control over individuals' financial transactions

What's this about?

People disagree about whether state-run digital money gives leaders more power to watch and control how people spend. Cash often leaves no record, but digital payments can create records.

What supporters say

• A digital currency can keep records of payments that cash does not keep.
• Banks, payment firms, or state groups may see these records, based on the system's rules.
• Rules that fight crime often require ID checks and checks of payment use.
• If laws allow it, officials could freeze money, block some payments, or add spending limits through code.

What critics say

• Digital currency does not have to give officials full access to every payment record.
• System makers can limit data, protect user details, and let only approved groups view needed facts.
• Strong laws, clear public rules, and outside checks can curb misuse of payment data.
• Today’s bank cards and phone apps already collect much payment data, even without a digital currency.

The bottom line

Digital currency could raise state watching and control beyond cash. Yet the result depends most on its design, laws, and checks; it does not happen by default.

Central bank digital currencies, or CBDCs, could give governments greater ability to see or influence payments than physical cash does. But the evidence suggests that outcome depends heavily on how each system is designed, regulated and overseen—not on digital currency alone.

The case for

The strongest argument is that digital money can leave a data trail that cash does not. A CBDC could record transaction information that is visible, under different rules, to central banks, commercial intermediaries or government agencies. Systems that give public authorities or required intermediaries a role in wallets, accounts or payment checks can make official access to that information easier in practice (see Figure 1). 1

That matters because financial rules aimed at fighting money laundering, fraud and sanctions evasion often require identity checks and transaction monitoring. Compared with anonymous cash, a CBDC could therefore make individual payments more legible to authorities. Whether that information is routinely available or tightly restricted would depend on the system’s access rules and legal mandates. 2

A CBDC could also make some forms of intervention technically possible. If authorized by law and built into the system, officials could potentially freeze funds, enforce sanctions, or limit certain transactions. Programmable money could, in principle, place conditions on where, when or on what goods funds may be spent. 4

Privacy concerns are not merely theoretical. Research including a randomized survey experiment has found that information about CBDC privacy changes public attitudes and preferences. Policy analysis likewise points to data governance, transparency and institutional safeguards as central to public trust and willingness to use such systems. 3

The case against

Critics of the claim argue that pervasive surveillance is not an unavoidable feature of a CBDC. Technical designs can reduce the amount of personal data seen by participating institutions. These options include privacy-focused systems, arrangements using intermediaries rather than direct central-bank accounts, and offline payments that can offer more protection for small transactions. 5

Several major proposals show how those safeguards might work. The proposed digital euro, for example, includes pseudonymisation, data minimisation and stronger privacy protections for low-value offline payments. Its legal framework sets rules for how data may be processed and accessed, rather than granting the central bank unrestricted visibility into users’ payments. 6

Nor must a CBDC be designed to dictate how money is spent. The United Kingdom’s proposed digital pound, for instance, has been described as non-programmable by the central bank. That would separate a digital public payment method from direct official control over permitted purchases. 7

The comparison point also matters. A CBDC may increase government visibility when measured against cash, but it might make little difference—or even improve privacy—when compared with today’s commercial digital-payment systems. Debit cards, bank transfers and app-based payments already generate extensive data; the key question is who holds it, who can request it and under what conditions.

The bottom line

The evidence supports the claim as a conditional risk, not a certainty. CBDCs can increase government surveillance and control relative to physical cash when their technology, legal powers and data-access rules allow it. They can make transaction monitoring, account restrictions and conditional spending technically available.

But those outcomes are not built into the idea of a CBDC itself. Privacy-preserving technology, strict data-protection law, limits on official access, independent oversight and a ban on central-bank programmability can materially curb the risk.

There is a real trade-off. More anonymity can limit information used to combat money laundering, fraud and sanctions evasion; more monitoring can create data that authorities or others may misuse. The core issue is therefore institutional design: who controls the data, who can access it, what restrictions are enforceable, and whether meaningful accountability exists.

Confidence in that conditional conclusion is high. Existing research clearly identifies both surveillance-capable systems and privacy-protective alternatives. The main uncertainty is that there is still limited long-term evidence from operating CBDCs, especially on whether promised safeguards will hold up under future legal changes and real-world enforcement.