Washington banned a US central bank digital currency, then quietly built its surveillance twin out of private stablecoins that freeze, block, and report by law. Here's the documented record of how the digital dollar arrived without a CBDC, and what still defends against it.
For years the rallying cry in Bitcoin circles was "no CBDC." No central bank digital currency, no programmable government money, no Federal Reserve account that Washington can switch off when you say the wrong thing. It was a good fight and, on paper, we won it. In January 2025 the President signed an executive order prohibiting a US central bank digital currency outright. The House passed a bill to make that ban permanent. The Fed chair told the Senate there would be no CBDC on his watch.
And while everyone was taking a victory lap, the same digital dollar we were afraid of arrived through a different door.
It came as a stablecoin. It is issued by JPMorgan and Tether and PayPal instead of the Federal Reserve. It is backed by Treasuries and it settles on blockchains and it has a friendly logo. And by federal law passed in the summer of 2025, the companies that issue it are required to maintain the technical ability to freeze, block, and reject your transactions, and to surveil them under the same Bank Secrecy Act regime that already tracks your bank account. Tether has already frozen more than four billion dollars in tokens at the request of the US government.
That is a central bank digital currency's control surface. It was delivered privately, on the record, with bipartisan applause. This piece is the documented account of how it happened, the surveillance rails it runs on, the identity layer being welded on top, and the tools that still let you opt out.
This grew out of a series of conversations on the TFTC podcast with people who have been mapping this for years: investigative journalists Whitney Webb and Mark Goodwin, the ecash developer Calle, former bank regulator Kyle Olney, policy writer Yaël Ossowski, and attorney Preston Byrne. What follows is the documented record, with their analysis layered on top.
| Date | What happened |
|---|---|
| 1970 | Bank Secrecy Act signed; $10,000 cash-reporting threshold set, never indexed since |
| 2019 (IMF) | Economists coin "synthetic CBDC" for private money that does a central bank's job |
| Jan 23, 2025 | Executive order prohibits a US CBDC and directs a dollar-stablecoin framework |
| Feb 2025 | Fed Chair Powell tells the Senate there will be no CBDC while he leads the Fed |
| Mar–Apr 2025 | FinCEN border order drops cash-reporting to $200 for some money services businesses |
| Apr 7, 2025 | DOJ "Blanche Memo" disbands the crypto-enforcement team, narrows mixer prosecutions |
| Jul 17, 2025 | House passes the Anti-CBDC Surveillance State Act, 219–210 |
| Jul 18, 2025 | GENIUS Act signed: stablecoin issuers must run BSA surveillance and freeze/block transactions |
| Jul 30, 2025 | White House digital-asset report proposes a sixth "special measure" for digital assets |
| Sep 2025 | Treasury opens GENIUS rulemaking, asks for comment on digital-identity verification |
| Apr 24, 2026 | Tether freezes a record $344M in USDT alongside OFAC sanctions on Iran |
A central bank digital currency is money issued directly by a central bank as a digital token or account, rather than as physical cash or as a balance at a commercial bank. The reason it became a rallying point for anyone who values freedom is simple: a CBDC is programmable and surveillable by default.
Programmable means the issuer can write rules into the money itself. It can be made to expire if you don't spend it, restricted to certain merchants, denied for certain purchases, or switched off entirely for a specific person. Surveillable means the issuer sees every transaction, because every transaction is a database entry on infrastructure the issuer controls. Put those two properties together and you have the most complete tool of financial control ever proposed: a government that can see everything you buy and stop any of it.
Whitney Webb has a phrase for the endgame that I keep coming back to. She calls it peace through surveillance, the idea that you can impose perfect order on a society if you can watch and control every transaction in it, and that this is what gets sold to the public under friendlier language about safety and inclusion. The fear of a CBDC was never irrational. It was a clear-eyed read of what the technology makes possible.
The technical literature is more specific than the politics. A retail CBDC is a direct claim on the central bank held by an ordinary person, which is why it raises constitutional and disintermediation problems in the United States: it would put the Federal Reserve into a direct account relationship with citizens and pull deposits out of commercial banks. A wholesale CBDC, used only between banks for settlement, raises far fewer of those issues. The US research on both was real. Project Hamilton, a Boston Fed and MIT prototype, demonstrated a retail design capable of 1.7 million transactions per second before it concluded in December 2022. Project Cedar, at the New York Fed, studied wholesale cross-border settlement. Both were research experiments, and both were wound down as the political door closed.
This is the part that makes the rest of the story work, because it is genuine and it is worth understanding before the bait-and-switch.
On January 23, 2025, the President signed an executive order titled "Strengthening American Leadership in Digital Financial Technology." Section 5 prohibits federal agencies from establishing, issuing, or promoting a central bank digital currency within the United States or abroad, and orders any ongoing CBDC work terminated. The same order directs the development of a framework for dollar-backed stablecoins. Read those two provisions next to each other and the strategy is already visible on the first day: close the CBDC door, open the stablecoin door.
In February 2025, Fed Chair Jerome Powell told the Senate Banking Committee that the United States would not have a CBDC while he was at the Fed. In July, the House passed the Anti-CBDC Surveillance State Act, sponsored by Representative Tom Emmer, by a vote of 219 to 210. That bill would bar the Fed from issuing a CBDC, directly or through intermediaries, without authorization from Congress.
So the win is real. There is no US central bank digital currency, there is an executive order against one, and there is a House-passed bill to make the prohibition permanent.
Two caveats keep this honest. Powell's pledge is specific to a retail CBDC and tied to his tenure as chair, which expires around May 2026, so it is a personal commitment rather than a permanent institutional ban. And the Anti-CBDC Surveillance State Act passed the House but has not passed the Senate, so as of this writing it is not law. The executive order binds federal agencies but is not a statute, which is exactly why the bill exists.
Here is the door that opened.
The day after the House passed the Anti-CBDC bill, on July 18, 2025, the President signed the GENIUS Act into law. GENIUS stands for Guiding and Establishing National Innovation for U.S. Stablecoins, and it is the first major piece of crypto legislation in American history. It regulates payment stablecoins, the dollar-pegged tokens issued by companies like Circle, Tether, and Paxos.
On its face the GENIUS Act reads like consumer protection. Issuers must hold 100% reserves in cash and short-term Treasuries, publish monthly reserve disclosures, and submit to audits above a certain size. But two provisions turn it into something else. First, issuers must comply with the Bank Secrecy Act, the federal financial-surveillance regime. Second, issuers must maintain the technical procedures to "block, freeze, and reject" transactions.
Stop on that second phrase, because it is the whole story. A stablecoin issuer is now legally required to be able to freeze your money. That is the precise capability that made a CBDC frightening, and it is now mandated for the private dollar tokens that are replacing cash. Mark Goodwin's framing on the show was that the end result of all of this could be the US Treasury running the entire financial system, not by issuing the money itself, but by setting the rules every private issuer must follow.
The clearest proof that this is not theoretical is Tether. Tether's USDT contract has always included an issuer-controlled freeze function, and Tether uses it. The company has frozen more than $4.4 billion in USDT in coordination with the Office of Foreign Assets Control and US law enforcement, often burning the frozen tokens and reissuing them to government-controlled wallets for forfeiture. The largest single action came on April 24, 2026, when Tether froze $344 million alongside OFAC sanctions targeting Iran, an operation the Treasury Secretary publicly confirmed.
A private company, headquartered offshore, freezing a third of a billion dollars on a government's say-so, in a single afternoon, with no court order visible to the public. That is a CBDC's control surface. It just has a corporate logo on it instead of a federal seal.
The term for this is not new and it is not mine. In 2019, IMF economists Tobias Adrian and Tommaso Mancini-Griffoli coined "synthetic CBDC" to describe private stablecoins that deliver central-bank-grade money while leaving issuance to the private sector. The Center for Strategic and International Studies picked up the term in 2022. Their technical definition is narrower than the way I am using it, since they envisioned stablecoins fully backed by reserves held at the central bank itself, which is not quite the GENIUS model. But the core insight is the same, and critics have since sharpened it: analysts have called the GENIUS Act a "backdoor CBDC," precisely because it folds stablecoins into Bank Secrecy Act surveillance and requires the freeze-and-block machinery. Whether you call it synthetic, backdoor, or private, the function is identical to the thing we were told we defeated.
A clarification matters here, because precision is the difference between an argument and a conspiracy theory. JPMorgan's Kinexys unit, formerly called Onyx, issues a token called JPMD that has processed more than $1.5 trillion in settlement. JPMD is a tokenized bank deposit, not a stablecoin, which is a real legal distinction: it is a claim on deposits at the bank rather than a separately reserved payment token. But it is permissioned and programmable, controlled entirely by the bank, and it belongs in the same family of private programmable dollars. The point is not that every one of these instruments is identical. The point is that the entire category is being built to be controllable in ways physical cash never was.
There is also a piece of plumbing worth naming so it can be set aside. FedNow, the Federal Reserve's instant-payment system launched in 2023, is not a CBDC. It is an interbank settlement rail that moves money between existing bank accounts, the same family as Fedwire and FedACH. The Fed has said plainly that FedNow is not a currency and not a step toward a digital dollar. Conflating the two is a common mistake, and it is the fastest way to lose an argument you should be winning. The synthetic CBDC is the stablecoin system, not the payment rail.
None of this would matter if the underlying financial system respected privacy. It doesn't, and it hasn't since 1970.
The Bank Secrecy Act, signed that year, is the foundation of American financial surveillance. Yaël Ossowski put it bluntly on the show: the law has nothing to do with secrecy, it is a bank regulation, and most banks hate complying with it. The way it works is that financial institutions are required to report your activity to the government, and the threshold for the most basic report has not changed in over half a century.
Two instruments do the work, and they are worth keeping straight because they get conflated constantly. A Currency Transaction Report, or CTR, is automatic: any cash transaction over $10,000 generates one, no suspicion required. A Suspicious Activity Report, or SAR, is discretionary: a bank files one when it decides your activity looks suspicious, at a threshold around $5,000. Both flow into a database at the Financial Crimes Enforcement Network, FinCEN, a bureau of the Treasury. Once a SAR is filed on you, Ossowski described it as a notch on an invisible credit score, a flag that can make banks reluctant to deal with you without your ever knowing why.
The detail that exposes the whole regime is the threshold. The $10,000 figure was set in the early 1970s and has never been adjusted for inflation. The Government Accountability Office calculated in 2025 that an inflation-adjusted threshold would sit around $72,880 in 2023 dollars, and that indexing it would have cut reporting volume by at least 90% since 2014. The system captures vastly more ordinary activity today than it was ever designed to, not because anyone expanded it, but because they simply never touched the number while the dollar lost value around it.
And for all that surveillance, it barely works on its stated terms. The United Nations Office on Drugs and Crime estimates that less than 1% of laundered criminal proceeds, probably around 0.2%, is ever seized. Kyle Olney, who worked as a bank regulator, called the entire know-your-customer and anti-money-laundering apparatus Kabuki theater, effective at surveilling ordinary people and almost useless at stopping the criminals it claims to target.
There is a darker, more recent data point. In the spring of 2025, FinCEN issued a Geographic Targeting Order that dropped the cash-reporting threshold to just $200 for certain money services businesses in named ZIP codes along the southwest border, a fiftyfold reduction from the usual $10,000. The order was later raised to $1,000 and remains in force in modified form. It is a clean illustration of how fast the surveillance dial can be turned when the political will exists. A threshold that took fifty years of inflation to render absurd at $10,000 was deliberately set to $200 in a matter of weeks.
The reason this matters for the digital dollar is that stablecoins are being plugged directly into this machine. The GENIUS Act does not carve out a privacy exception. It subjects the new private dollars to the same Bank Secrecy Act regime, which means the most surveillable money in history is being built on top of a surveillance framework that was already running and was never working.
A surveillance system is only as good as its ability to attach a transaction to a person. That is what digital identity provides, and it is the layer being welded on now.
The pattern is visible across the world at once. In the European Union, the Entry/Exit System began rolling out in October 2025, requiring non-EU travelers, including Americans, to register a facial scan and four fingerprints on first entry to the Schengen area. The State Department issued guidance telling US citizens to expect it. The EU's eIDAS 2.0 regulation requires every member state to offer citizens a digital identity wallet by the end of 2026. In the United Kingdom, Keir Starmer's government announced a mandatory digital ID scheme in September 2025, pitched around stopping illegal immigration, then retreated from full compulsion in January 2026 after a petition gathered nearly three million signatures.
The financial version is the one that connects to everything in this piece. In Vietnam, biometric verification became the condition for keeping a bank account active. On September 1, 2025, the State Bank of Vietnam terminated more than 86 million of the country's roughly 200 million bank accounts that had not been biometrically authenticated, leaving about 113 million verified accounts standing. The state framed it as a cleanup of dormant and fraud-prone accounts. The effect either way was that a face scan tied to a verified identity became the price of admission to the banking system.
Ian Carroll, who came on the show to talk about exactly this, frames digital ID as a double-edged sword. A self-created, self-owned identity that you present voluntarily is one thing. A government-issued identity that you are required to use for everything is another, and his warning is about the power creep between them: the government issues the ID, the bank links to it, the employer requires it, and then, as he put it, more data is more power. The system does not have to be sinister at any single step. It only has to keep adding links to a chain you cannot leave.
Here in the United States, the identity layer is being introduced through the same stablecoin law. After the GENIUS Act passed, the Treasury opened a rulemaking process and explicitly asked for public comment on digital-identity verification as a method for detecting illicit activity in stablecoin transactions. No mandate exists yet. But the question has been formally placed on the table by the agency that will write the rules, in the context of the law that is replacing cash. Whitney Webb and Mark Goodwin both flagged on the show that the digital ID they had expected to arrive through immigration enforcement looks instead like it will arrive through stablecoin compliance.
There is a quieter fight happening over the rules that govern the people who build privacy tools, and it is the one most likely to determine whether any defense survives.
On July 30, 2025, the White House released a digital-asset policy report that, among many recommendations, proposed adding a sixth "special measure" to Section 311 of the Patriot Act. Section 311 currently authorizes the Treasury to impose five categories of special measures, mostly oriented around correspondent banking relationships. A sixth measure aimed at digital assets would let the Treasury restrict or condition certain digital-asset transfers that have no correspondent-banking relationship at all. That is a genuine expansion of surveillance authority into peer-to-peer crypto, and it is worth watching closely.
It is also worth describing accurately, because this is the kind of claim that gets a piece dismissed if it is overstated. The same report does not call for banning privacy tools. It actually declines to finalize an earlier 2023 FinCEN proposal that would have targeted mixing services, and it acknowledges that mixers have legitimate uses for users who want financial privacy on a public blockchain. The aggressive language about CoinJoin, delayed transaction broadcasting, and single-use addresses comes from that separate 2023 rulemaking, not from the 2025 report. The honest version of the story is that the statutory expansion is real and the privacy-tool crackdown is, for now, paused. Both threads deserve attention, but they are two threads.
Kyle Olney's warning on the show was about how these pieces fit together over time. Even if the market-structure legislation protects open-source developers, he argued, the Treasury could later use Section 311 and Bank Secrecy Act authority to require that anyone transacting on decentralized rails be fully identified and surveilled. You would keep the right to write the code, and lose the right to use it privately. As he put it, if 80 or 90% of Bitcoin transactions end up surveilled and known-your-customer'd, the remaining sliver of privacy at the edges does not work, because privacy depends on the size of the crowd you blend into. A surveilled supermajority defeats the privacy of everyone.
The legislative landscape is a thicket of acronyms, and they are easy to confuse. The Blockchain Regulatory Certainty Act, sponsored by Representative Tom Emmer, would clarify that non-custodial developers and node operators are not money transmitters; it was folded into the broader CLARITY Act, which passed the House in July 2025. Senator Mike Lee's Saving Privacy Act would repeal the Bank Secrecy Act's reporting mandates, while his companion Keep Your Coins Act carries the explicit self-custody protection. And Senator Lummis has proposed a de minimis tax exemption for crypto transactions under $300, capped at $5,000 a year, which would end the absurdity of owing capital-gains paperwork on a cup of coffee. None of these is law yet. They are the defensive legislation, and they are outgunned in Washington by a wide margin.
The reason to take the American version seriously is that the same architecture is being assembled simultaneously in allied countries, often further along than here.
Preston Byrne, an attorney who represents platforms targeted by foreign regulators, described the mechanism cleanly on the show: governments that cannot directly censor or surveil their own citizens are learning to launder the work through private companies and through each other. The European Union's Digital Services Act, the United Kingdom's Online Safety Act, and Australia's Online Safety Act all came into force in roughly the same window, and Byrne's argument is that they are being used to impose one country's speech and identity rules on the global internet by pressuring the platforms and payment processors that everyone uses.
The litigation he is involved in shows how this plays out. After the UK communications regulator Ofcom proposed a £20,000 fine on the message board 4chan for failing to respond to information demands under the Online Safety Act, 4chan and another site sued Ofcom in US federal court in August 2026. Ofcom's response was to claim sovereign immunity under the Foreign Sovereign Immunities Act, arguing an American court has no jurisdiction over a British regulator reaching into America. The case is a preview of the jurisdictional fight that financial surveillance will produce next, when a foreign regulator or a stablecoin issuer freezes an American's money under another country's rules.
Mark Goodwin connected the financial dots internationally on the show. As dollar stablecoins spread, he argued, foreign governments face capital flight, because why would anyone hold a weakening local currency when a yield-bearing dollar is one smartphone tap away. The European Central Bank has warned about exactly this. The predictable response from those governments is to choke the on-ramps with digital-ID requirements and holding limits. The Bank of England, for instance, floated a consultation in November 2025 proposing temporary per-person limits on holdings of systemic sterling stablecoins, though it has since signaled it will drop the individual cap. The global pattern is a race between a dollar that wants to absorb every other currency and governments that will reach for identity controls to stop it.
If the threat were only a story about power, this would be a bleak piece. It isn't, because the tools that defeat financial surveillance already exist, they are open source, and they are getting better.
Calle, the developer behind the Cashu protocol, made the case for the defense more clearly than anyone. His starting point is that physical cash is disappearing and digital money is inevitable, so the only real question is what kind of digital money we get. His answer is Chaumian ecash, a privacy-preserving form of digital cash invented by the cryptographer David Chaum in the 1980s, decades before Bitcoin, and never successfully deployed because it depended on the permission of the banking system. What Satoshi added, Calle argues, was the missing piece: a base money that no one has to ask permission to build on. Now ecash can be built on top of Bitcoin, through systems like Cashu and Fedimint, without asking JPMorgan for anything.
Calle quotes Chaum's own line about why this matters, and it is the one piece of this entire story I would ask you to sit with:
Without privacy, democracy is not possible. If you cannot have a private life, you are not able to form your own independent ideas.
He is honest about the trade-offs, which is why I trust the argument. A Cashu mint is custodial, meaning you trust the mint operator with your funds in exchange for privacy and speed, and that is a genuinely different security model from holding your own keys. The defense is not magic and it is not finished. But it is real, it ships, and it improves with every developer who works on it.
The other half of the defense is simpler and requires no software. Digital ID, biometric onboarding, and stablecoin surveillance all depend on mass compliance. They do not work if people refuse. Webb and Goodwin both kept returning to this on the show: these systems are sold as inevitable precisely because inevitability manufactures the consent they require, and the counter is to treat compliance as a choice rather than a fact. When a bank says it will only serve you if you submit a biometric digital ID, the answer Carroll offered was to say no and use Bitcoin instead.
That fight is not abstract. It is the same one that put two open-source developers in federal prison. The Samourai Wallet case, which I covered in detail in a separate piece, is the live test of whether building the defense is itself a crime. The government told the Samourai developers' regulator, six months before charging them, that their non-custodial software was not a money-transmitting business. They were prosecuted anyway, and they are serving years in prison for writing privacy code. Everything in this piece, the synthetic CBDC, the surveillance rails, the identity layer, is the reason that prosecution matters to you even if you have never heard of Samourai. The tools that defend against the system are exactly the tools the system is trying to criminalize.
Hold Bitcoin in self-custody. A stablecoin issuer can freeze a token. No one can freeze a Bitcoin UTXO you control with keys you hold. Self-custody is the foundation; everything else builds on it.
Use the privacy tools that still ship. Chaumian ecash through Cashu and Fedimint, PayJoin through wallets that support it, CoinJoin through the implementations that remain. Use them not because you have something to hide, but because, as Calle put it, it is overwhelmingly the ordinary people who need financial privacy, and privacy only works when enough people use it to create a crowd.
Refuse the soft mandates. The digital-ID and biometric systems require consent that gets manufactured through convenience. Opt out of the face scan. Decline the digital ID where it is still optional. Every refusal raises the cost of the system and keeps the alternative alive.
Pay attention to the legislation. The Anti-CBDC Surveillance State Act, the Keep Your Coins Act, and the de minimis exemption are the defensive bills. They are outgunned in Washington and they move on the margin of public pressure. Contact your representatives; on bills this close, constituent pressure is the variable that moves.
Support the developers. The people building the defense are being prosecuted for it. Following the Samourai case, supporting the developers still under threat, and refusing to treat their prosecution as someone else's problem is part of keeping the tools legal.
Not a central bank digital currency in the literal sense. A January 2025 executive order prohibits federal agencies from issuing one, and the House passed a bill to make the ban permanent, though the Senate has not. The argument of this piece is that a functionally equivalent system, a "synthetic CBDC," is arriving through privately issued, federally regulated stablecoins instead.
The term comes from IMF economists in 2019 and describes private stablecoins that deliver the functions of central-bank money while leaving issuance to private companies. Critics, including analysts at the Cato Institute, have called the GENIUS Act a "backdoor CBDC" because it subjects stablecoins to Bank Secrecy Act surveillance and requires issuers to be able to freeze and block transactions.
No. FedNow is the Federal Reserve's interbank instant-payment rail, in the same family as Fedwire. It moves money between existing bank accounts and is not a currency or a digital dollar. The Fed has stated this directly. Conflating FedNow with a CBDC is a common error.
Yes. Tether's USDT includes an issuer-controlled freeze function, and Tether has frozen more than $4.4 billion in coordination with US law enforcement, including a record $344 million Iran-linked freeze in April 2026. Under the GENIUS Act, payment-stablecoin issuers are required to maintain procedures to block, freeze, and reject transactions.
The Guiding and Establishing National Innovation for U.S. Stablecoins Act, signed July 18, 2025, is the first major US crypto law. It regulates payment stablecoins, requiring 100% reserves in cash and short-term Treasuries, monthly disclosures, Bank Secrecy Act compliance, and the technical ability to freeze and block transactions.
The 1970 law requires banks to report cash transactions over $10,000 automatically (a Currency Transaction Report) and to file Suspicious Activity Reports when they judge activity suspicious. The $10,000 threshold has never been adjusted for inflation; the GAO estimates an indexed figure would be around $72,880. Stablecoins are being folded into this same regime.
Bitcoin held in self-custody, Chaumian ecash systems like Cashu and Fedimint, and other open-source privacy tools, combined with refusing to comply with optional digital-ID and biometric systems. The tools exist and ship today, though some, like Samourai Wallet, have been the target of federal prosecution.
Samourai's developers built non-custodial privacy software and were prosecuted for it, despite their regulator having said their software was not a money-transmitting business. The case is the test of whether building the defense against financial surveillance is itself a crime. The full account is in a separate piece.
