Digital Dollar Perils, Issue 1 of 6: Every Transaction You Make Is About to Become a Permanent Record

Money is becoming digital. That is not a forecast or an opinion. It is a description of where the global monetary system is going, observable in central bank policy documents, in regulatory frameworks like the GENIUS Act, in the rapid scaling of digital payment rails, and in the declining utility of cash for routine settlement. For a family office, the question is not whether digital monetary instruments will be part of the portfolio. They already are. The question is which digital instruments, for which functions, and with what understanding of their structural properties.

This series examines the two categories of digital currency that most family offices are encountering first. Central bank digital currencies and dollar-pegged stablecoins. They are not the only digital monetary instruments that exist. They are the two with the most institutional momentum, the largest current adoption, and the most active regulatory frameworks. They also share architectural properties that an allocator should understand before committing meaningful balance sheet to them. This is the first of those properties.

China's digital yuan has processed 3.4 billion transactions. Every one is tied to a verified identity.

China's e-CNY remains the largest CBDC pilot in the world. By December 2025, retail e-CNY had processed more than 3.4 billion transactions worth roughly 16.7 trillion renminbi, or about 2.3 trillion U.S. dollars. In January 2026, the People's Bank of China reclassified e-CNY as a deposit liability rather than digital cash, which signals an intent to integrate the system more deeply into the banking infrastructure rather than position it as a parallel cash equivalent.

Nigeria's eNaira paired its rollout with a national digital identity expansion. India's e-Rupee uses Aadhaar-based verification. Singapore's MAS treats CBDC and identity interoperability as foundational architecture under Project Orchid. The European Central Bank's draft Digital Euro rulebook, published in October 2025, describes a similar structure where identity service providers verify users and link wallets to credentials.

The Human Rights Foundation and the Bank for International Settlements have separately documented that identity-linked CBDC architecture creates unprecedented financial visibility for the issuing state. The architectural choice is consistent across jurisdictions. The political consequences vary by regime.

Stablecoins solve a different problem and create the same record.

Stablecoins were not designed as surveillance instruments. They were designed as dollar-substitute payment instruments. Their value proposition is open settlement on public blockchains, denominated in a stable unit, accessible to anyone with a wallet. That value proposition is real and has driven adoption to roughly $200 billion in total stablecoin market capitalization as of late 2025.

The settlement architecture, however, produces a permanent public record of every transaction. Tether and Circle, the two dominant issuers, both maintain freeze and blacklist capabilities and have used them repeatedly at the request of law enforcement and in response to regulatory actions. Public ledger transactions can be analyzed using commercial chain analysis tools, and addresses can be linked to identities through exchange KYC records, IP metadata, and behavioral patterns.

For a family office that uses stablecoins for treasury operations, the transaction record is more transparent than the conventional banking equivalent in some ways and less so in others. The record is permanent, public, and analyzable by any party with the tools. The identity link is established the moment a regulated exchange touches the flow.

The U.S. House passed legislation to prevent a domestic CBDC. It does not address the stablecoin question.

In July 2025, the U.S. House of Representatives passed the Anti-CBDC Surveillance State Act, which prohibits the Federal Reserve from issuing or testing a digital dollar without explicit Congressional approval. The bill also prohibits using a CBDC as a monetary policy tool and offers protections for open permissionless dollar-denominated currencies. The political consensus that drove the bill reflects bipartisan concern about programmable digital dollars as instruments of state control.

The legislation does not address the surveillance properties of dollar-pegged stablecoins. The GENIUS Act, signed July 18, 2025, regulates stablecoin issuance and reserve requirements but does not constrain the public-ledger architecture or the issuer's freeze capability. The U.S. has chosen a path in which the federal government will not issue a CBDC but will permit, and arguably encourage, the proliferation of private dollar stablecoins with similar transactional visibility properties.

The conventional analog responses have limits.

A family office concerned about identity-linked monetary infrastructure has historically had analog responses available. Physical cash. Physical gold. Bearer instruments. Jurisdictional diversification across multiple banking regimes. Each of these has worked well for centuries and continues to play a role in well-constructed family balance sheets.

The limits of the analog responses are becoming visible. Cash transactions above defined thresholds trigger reporting requirements in most jurisdictions. Physical gold is impractical for the transactional functions that increasingly require digital settlement. Multi-jurisdiction banking diversification still operates within an interconnected correspondent banking system that is itself being digitized and increasingly identity-linked. The analog responses solve some problems. They do not solve the problem of operating in a monetary system that is, in fact, becoming digital.

If the digital age requires digital monetary instruments, the properties of those instruments matter.

This is the framing that the series will return to repeatedly. The digital monetary transition is happening. For some portfolio functions, particularly transactional settlement and cross-border movement, analog instruments are increasingly impractical. The family office that intends to operate effectively across the next several decades will hold digital monetary exposure in some form.

Within the universe of digital monetary instruments, the architectural properties differ substantially. CBDCs are identity-linked and programmable by the issuing state. Stablecoins are identity-linked through their on-ramps and programmable by the issuing company. Other digital instruments exist with different properties. The portfolio question is not whether to hold digital monetary exposure. The portfolio question is which digital instruments, with what properties, for which functions.

Issue Two examines counterparty risk. The 2023 USDC depeg, the Tether reserve composition history, the Terra collapse, and what the available portfolio responses actually look like. Full piece in next week's newsletter.

How is your office thinking about which digital monetary instruments belong in which portfolio functions?