Digital Dollar Perils, Issue 3 of 6: Money That Can Expire, Be Restricted, or Be Frozen Is a Different Asset Class

The defining technical feature that distinguishes central bank digital currencies and stablecoins from physical cash and from bank deposits is programmability. The issuing entity can write rules that determine how the instrument can be used, by whom, in which contexts, and for how long. That capability is not theoretical. It exists in production CBDC pilots and in the freeze functions of major stablecoins.

For a family office, programmability is a property to evaluate, not a feature to dismiss. The question is which portion of the portfolio should accept programmability as the price of convenience and which portion should not.

CBDC pilots have already demonstrated expiring money, merchant restrictions, and behavioral controls.

China's e-CNY pilots have included programmable features such as transaction limits and expiry dates. These tools are described in Chinese central bank documentation as policy instruments rather than restrictions. The functional effect is the same. Money that expires forces the holder to spend it within a window the issuer specifies. Money with merchant restrictions cannot be used at categories of business the issuer designates as ineligible.

The Bank for International Settlements outlines how identity, compliance, and settlement layers can operate within a single programmable architecture. The European Central Bank's Digital Euro framework describes a similar structure. India, Nigeria, Singapore, and Brazil all have CBDC programs in various pilot phases that incorporate some version of programmability. The capability is being built into the architecture, regardless of whether the political consensus permits its full activation in any given jurisdiction.

Major stablecoin issuers have freeze functions and have used them repeatedly.

Tether and Circle, the two dominant stablecoin issuers, both maintain the technical capability to freeze any address holding their tokens. Both have used this capability multiple times. Circle froze USDC addresses at the request of the U.S. Office of Foreign Assets Control following the Tornado Cash sanctions in August 2022. Tether has frozen addresses associated with hacks, theft, and law enforcement actions on numerous occasions.

The freeze function is not a bug. It is a designed capability that allows issuers to cooperate with law enforcement and comply with sanctions regimes. For most users, in most circumstances, the capability is invisible because it is not exercised. For a family office evaluating long-duration holdings, the capability is structural. The capability is also unconditional from the holder's perspective. A USDT or USDC holder has no contractual protection against an unanticipated freeze, no appeals process that operates on transactional timeframes, and no recourse to the underlying value during the freeze period.

The GENIUS Act does not constrain stablecoin issuer programmability.

The GENIUS Act, which took effect in July 2025, establishes reserve requirements and issuer eligibility standards for payment stablecoins. It does not constrain the freeze capability, the blacklist function, or the architectural programmability of the underlying tokens. U.S. regulated stablecoins under the new framework will continue to operate with the same programmability properties they had before the legislation.

The Act prohibits stablecoin issuers from paying interest to holders, which is a structural choice that distinguishes payment stablecoins from money market funds and bank deposits. The prohibition reinforces the regulatory positioning of stablecoins as payment instruments rather than savings vehicles. The programmability features remain available to issuers as compliance and law enforcement tools.

Programmable money is useful infrastructure for transactional purposes.

There is nothing inherently wrong with programmable money for transactional purposes. A working capital balance held in USDC for vendor payments is a reasonable operational position with manageable risk. A corporate compliance program can be enhanced by tools that automatically enforce spending policies. Restricted accounts for trust beneficiaries or wards may benefit from the architectural capability to limit certain spending categories. Programmability has legitimate uses, and the use case can justify the structural risk.

The question is different for the portion of family wealth intended for long-duration preservation. An instrument that can be programmed by an external party is, by definition, not unconditionally the holder's instrument. The conditions of holding can be modified after the position is established. The conditions of use can be restricted retroactively. For a family office that thinks in multi-generational terms, that property is a different kind of risk than market volatility or credit exposure. It is a continuity risk.

The portfolio responses available.

A family office that is concerned about programmability has several responses available. The conventional approach is to limit stablecoin and CBDC holdings to transactional positions only, with long-duration wealth held in instruments where programmability is not a structural feature. Cash, gold, real estate, operating-business equity, and other productive assets that are not subject to external programmability.

The cost of this approach is operational friction. As the surrounding monetary system digitizes, the family office maintains an increasingly bifurcated balance sheet. Transactional infrastructure runs on programmable digital instruments. Long-duration wealth runs on analog instruments that are decreasingly compatible with the surrounding system. The bifurcation is sustainable. It also represents a long-term commitment to operating against the trajectory of the broader financial system.

Some families will consider an allocation to Bitcoin, which has no issuer-level programmability that can be applied to specific holdings. The trade-offs include historical drawdowns above 70 percent from peak to trough, a custody architecture that differs from conventional securities custody, and tax positioning that requires specialized planning. Bitcoin is one of several defensible responses and the right composition depends on the family's risk framework, existing exposures, and time horizon. Other digital monetary instruments with similar non-programmability properties may emerge over time.

The question to think through.

The programmability question is partly about the present and partly about the future. The present capabilities of CBDC and stablecoin programmability are constrained by political consensus, regulatory framework, and issuer policy. The future capabilities are constrained by architecture, which is being built today across multiple jurisdictions. A family office making allocation decisions in 2026 is making them against the architecture that will exist in 2036.

Issue Four of the Digital Dollar Perils Series examines the reserve question. What is actually backing the dollar peg, how the audit and attestation regime works, and what the portfolio responses to reserve risk look like. Full piece in next week's newsletter.

Which programmability feature concerns your office most for long-duration holdings?