THE RAILS / the back door
a body of knowledge  ·  present tense
What they say

We're not doing a CBDC.

That sentence is true. It is also the most load-bearing piece of misdirection in money right now.

The front door — a government digital currency in your pocket — got bolted shut, loudly. The back door — privately operated, state-regulated, programmable rails — is being built in public, quietly. The same capabilities arrive either way.

Deny the retail token. Build the rail underneath. Money that is traceable, conditional, and steerable at scale arrives without anyone ever issuing "a CBDC" — and the denial stays technically true the entire time.

01 / THE DECOY

There are two CBDCs. Conflating them is where the fog comes from.

Almost every headline argument runs on a confusion between two completely different things that share three letters.

FRONT DOOR RETAIL CBDC loudly denied · prohibited BACK DOOR PRIVATE RAILS built quietly · in public THE SAME ROOM programmable · traceable · steerable money
Only one door is open. The room gets reached anyway — through the one nobody is watching.

A retail CBDC is a digital dollar in your pocket, issued straight by the central bank. Across the G7 it is stalled or dead. The United States didn't just decline it — it prohibited it. Canada wound its program down. The UK's "digital pound" is stuck in design; the digital euro is perpetually "in preparation." This is the thing being loudly denied. This is the decoy.

A wholesale CBDC is central-bank money that banks use to settle with each other. It is alive, funded, advancing, and almost never mentioned in the public fight. The denial is precise about the first kind and silent about the second. That gap is the whole game.

"There is not currently a compelling case to move forward." Then, in the same breath: the research will be "invaluable if, at some point in the future, Canadians decide they want or need a digital Canadian dollar." Bank of Canada, winding down retail CBDC work, September 2024

Read that twice. The program isn't cancelled, it's shelved with the parts kept oiled. The option is preserved on purpose. The "no" is a "not yet," stated out loud, and almost nobody heard the second half.

02 / THE PIECES

"Private rails" is not a metaphor. The buildout has names.

While the retail token gets denied, a parallel system of real, regulated, named infrastructure is being assembled. These are not predictions. They exist now.

Tokenised fund2024 →
BlackRock BUIDL
The world's largest asset manager put a money-market fund on a public blockchain via Securitize, with BNY Mellon as custodian. It has grown to roughly $2.3B and now lives across seven networks. Real treasury value, as a programmable token. source
U.S. lawJul 2025
The GENIUS Act
The first federal framework for stablecoins. Issuance is restricted to banks and approved institutions, with 100% reserves in dollars and Treasuries. It doesn't kill private digital dollars — it licenses them, to the players large enough to comply. source
U.S. orderJan 23 2025
One signature, both moves
The same executive order that bars a U.S. CBDC in the same document embraces private stablecoins and orders a federal framework for them. The front door bolted and the rail opened, by one pen, on one day. source
The substrateongoing
Aladdin · Kinexys · the unified ledger
BlackRock's Aladdin already runs the risk and asset plumbing for much of the industry. JPMorgan's Kinexys (formerly Onyx) tokenises bank deposits. The BIS "unified ledger" concept puts central-bank money, bank money, and assets on one programmable platform. The pipes are being standardised before anyone votes.
03 / THE COORDINATION

The harmonisation is real. But it's a press release, not a back room.

The instinct is to imagine a secret meeting. There is no secret meeting. There is a project with a logo.

Project Agorá, convened by the Bank for International Settlements, brings seven central banks — the Bank of France for the Eurosystem, the Bank of Japan, Bank of Korea, Bank of Mexico, Swiss National Bank, Bank of England, and the New York Fed — onto one platform, with the Bank of Canada joining and more than 40 financial institutions including JPMorgan, HSBC, Deutsche Bank, Swift, Mastercard and UBS.

Its stated aim, in the open: integrate tokenised commercial-bank deposits with tokenised central-bank money — wholesale CBDC — in a single "network of networks." As of May 2026 it is advancing to real-value testing. It is published.

This matters: coordination is not being hidden, it's being filed under a different word. Not "control," but "interoperability." Not "a CBDC," but "cross-border efficiency." You don't need a conspiracy when the policy is announced and simply read as plumbing.

SEVEN CENTRAL BANKS EUROSYSJAPANKOREAMEXICOSWISSENGLANDNY FED + CANADA joining + 40 REGULATED INSTITUTIONS JPMorgan · HSBC · Deutsche Bank · Swift · Mastercard · UBS PROJECT AGORÁ — ONE SHARED LEDGER a network of networks · published, not a back room
Seven central banks, 40+ institutions, one programmable ledger. The coordination has a press release.
04 / WHERE THE STEERING LIVES

Trace one payment and you find four control surfaces. Each is owned by someone.

"Programmable money" makes people picture coins that expire. That's the smallest part. Follow a single token through the rail and the leverage is everywhere:

PAYMENT CASH OUT THE REAL GRIP — who may hold it · who may cash out 01 ISSUANCE 02 WALLET 03 SETTLEMENT 04 OFF-RAMP
Programmability lives at node 3 — and gets all the headlines. The leverage is at 2 and 4.
Issuance
Who is allowed to mint the token — a bank, a licensed stablecoin issuer, a central bank for the wholesale leg. Control: who may hold it at all.
The wallet / identity binding
Every unit is tied to a KYC'd address. Control: freeze, allow-list, deny-list, per-person rules.
The settlement layer
The smart contract that clears the trade. Control: the conditions of execution — atomic, time-locked, category-locked.
The off-ramp
Converting back to ordinary money or cash. Control: the chokepoint where exit is granted or denied.

The famous fear fixates on surface 3. But the real grip is at 2 and 4: you never need the money itself to be programmable if you control who can hold it and who can cash out. That is already how sanctions and AML work. Tokenisation doesn't invent the capability. It changes the resolution and the speed — from slow, human, and exceptional to instant, automatic, and granular.

05 / ONE PRIMITIVE, TWO FACES

Efficiency and control are not two features. They are the same feature, pointed two ways.

The exact smart-contract capability that delivers the benefits is the capability that delivers the steering. There is no version that has one without the other, because they are the same line of code.

▸ Pointed at you
  • Instant settlement, no waiting days
  • Atomic delivery-versus-payment
  • Automated, cheaper compliance
  • Cross-border in seconds
▸ Pointed at the holder
  • Money that expires on a date
  • Spend restricted to approved categories
  • Geofenced or per-wallet frozen
  • Conditions enforced before it moves

Hold onto the one distinction the officials hide behind: programmable payments (conditions on a transaction) versus programmable money (conditions baked into the unit itself). They publicly disown the second. The first — already being built — gets you most of the way there.

06 / WHY PRIVATE

"Private" isn't the cover story. It's the only design that doesn't blow up the banks.

If the goal were control, why not just issue a retail CBDC directly? Because a direct retail CBDC guts the commercial banking system.

If everyone can hold risk-free central-bank money, deposits flee the banks at the first wobble — an instant, frictionless digital bank run. Banks lose the deposit base they lend against. Central bankers know this and are genuinely afraid of it.

So the architecture being built isn't a choice of control over efficiency. It's the resolution of a structural conflict: keep the banks alive (they hold the deposits and mint the tokens) while still getting unified, programmable, traceable rails (the standards layer, with wholesale CBDC underneath). Which means you don't need to assume deception to predict the exact outcome. The incentives alone build it. That is a stronger claim than a plot, not a weaker one.

07 / THE DENIAL DOES REAL WORK

"We're not doing a CBDC" is load-bearing. It does three jobs at once.

It demobilises the opposition

Privacy and liberty energy organises against retail CBDC — the one thing that isn't happening — while the wholesale and tokenisation buildout sails past unwatched. The fight is aimed at the decoy by design.

It keeps every official statement true

Nobody has to lie. Each denial is narrowly accurate, so fact-checks "confirm" it, and anyone describing the larger shape gets filed under conspiracy. Technical truth as a shield.

It clears the runway

Because the rails are neutral substrate, a retail CBDC becomes plug-and-play later — when a crisis, a war, or a "we need to move stimulus fast" makes it convenient. The denial today doesn't foreclose the issuance tomorrow. It builds the road and leaves it empty. The present-tense honesty is exactly what makes the future-tense capability frictionless.

08 / THIS IS THE THIRD TIME

Infrastructure capture, then weaponisation, has already run twice.

You're not predicting a novel evil. You're predicting that a pattern which has happened before will happen again, with sharper tools. Each time, the rail was sold as neutral plumbing; each time, the power to deny came later and was never the thing debated when the pipes were laid.

SOLD AS NEUTRAL THE POWER TO DENY · LATER SWIFT messaging cooperative everyone's settlement layer CUT OFF Iran 2012 · Russia 2022 VISA/MC private card rails everyday payments BLOCKADED WikiLeaks · whole categories CANADA 2022 no rail needed — a single emergency order FROZE accounts, by political category THE RAILS now built now · in public programmable by default ? the predicted beat
Sold as neutral plumbing every time. The power to deny arrives later — never debated when the pipes go in.
SWIFT
A "neutral" messaging cooperative that became a geopolitical weapon the moment it was needed — Iran 2012, Russia 2022. Nobody designed it as a weapon. It became one because it was the chokepoint.
VISA / MC
Private rails that quietly acquired the power to deny whole categories of legal commerce — the WikiLeaks blockade, adult content, gun dealers — with no statute and no appeal. Card networks do content moderation on money.
CANADA 2022
The convoy account freezes were a working proof of concept: the state froze legal-tender access by political category, before programmable rails even existed. The rails simply remove the friction and the need for an emergency order.
09 / WHO ACTUALLY LOSES

Name the losers, in order of exposure.

10 / THE SEAM

Where the airtight argument stops and the overreach begins.

This is the line that decides whether the whole thing is bulletproof or dismissible. Everything on the left is documentable. The moment you cross to the right, you've handed every critic the one thread that unravels it — and traded an argument you can't refute for one you can.

▸ Solid · documented

The projects, the laws, the named players. The dual-use capability. The four control surfaces. The concentration tendency baked into compliance-by-scale. The technically-true denial. The 2022 freeze as a real precedent.

▸ Overreach · unnecessary

"They harmonised it in 2025 in order to deceive the public while secretly building a CBDC."

That's intent you can't see and don't need. Convergent incentives, lobbying, and genuine policy fights produce the identical outcome — without a single villain.

The structure is the point, not a cabal. "BlackRock runs it" is the gravity well to avoid: it's a class of operators and a design, and the design is what does the work.

11 / THE COUNTER-FORCES

It is not a flat inevitability. It's contested, and incomplete.

Honesty about what cuts the other way is what keeps this from reading as doom:

Cash-protection and "right to cash" laws are being pushed, including in the EU. Decentralised and privacy-preserving alternatives keep appearing. Rival blocs are building rails outside the dollar chokepoint — China's e-CNY, cross-border CBDC experiments, BRICS settlement — because everyone watched Russia 2022 and learned that access to Western rails is revocable. The G7's harmonisation and the anti-G7 rail-building are the same phenomenon seen from two ends: everyone now treats payment infrastructure as a weapon to either hold or escape.

And the efficiency is genuinely real. Faster settlement, fewer intermediaries, cheaper cross-border payments — that's why the thing has momentum, and why "it's all a scam" misreads it. The sharp version isn't "tokenisation is bad." It's: the same thing that helps you is the thing that can steer you, and the authority to use it is being legislated in a different building so the two debates never meet.

12 / CARRY ONE LINE

Take a line. Put it where the decoy fight isn't looking.

The denial works by aiming the opposition at the door that's already shut. The counter is unglamorous and effective: say the quiet part in public. Ten lines, built to travel — every one links back to the sourced page.

Sources

Every factual anchor on this page was checked against the sources above on 26 June 2026. The reasoning — the four control surfaces, the bank-run logic, the SWIFT/Visa/2022 pattern, the seam between documented and inferred — is argument built on those facts, and is labelled as such. The page deliberately does not claim a secret coordinated plot. It doesn't need one.

↓ Download the one-page brief (PDF)

THE RAILS  ·  the back door, built in public  ·  present tense