BIS report says digital cash privacy model faces bank breach risks

BIS report says digital cash privacy model faces bank breach risks
Digital cash privacy risks

Central banks and policymakers are still weighing how digital cash can protect user privacy without creating full transaction anonymity. The Bank for International Settlements says a new prototype can deliver cash-like privacy features, but warns the technology is not yet ready for production use and still carries data exposure risks if a bank is compromised.

Highlights

  • BIS Project Aurum Phase 2 report introduces a privacy-preserving digital cash prototype achieving partial user anonymity while preventing wide identity exposure across banks.
  • The BIS report states that a breach at an individual bank could expose its users, but other counterparties' identities remain protected; validator-level breaches alone cannot compromise user identities.
  • BIS highlights technical achievability of privacy-preserving CBDC design but underscores that operational and cybersecurity risks at banks remain key impediments to broad CBDC adoption.

Privacy design and technical limits

As reported by Cointelegraph, citing the Bank for International Settlements, its Project Aurum Phase 2 report says digital cash can be designed with privacy properties similar to physical cash while limiting the exposure of user identities across counterparties.

The report says the latest phase builds a privacy-preserving digital cash prototype on BIS's existing Aurum codebase, aiming for a middle ground between complete anonymity and full transaction transparency. BIS says that if one bank is compromised, customer data at that institution may be exposed, but identities linked to other counterparties would remain protected. It also says a validator-level compromise on its own is not sufficient to expose end users.

The study focuses on the technical features required for a privacy-preserving central bank digital currency, or CBDC, an area that remains under scrutiny because of concerns that digital state-backed money could enable financial surveillance.

Policy debate and broader CBDC implications

Privacy concerns around CBDCs are already shaping policy and public debate in several markets. In 2023, Brazil's central bank published the source code for its CBDC pilot, and observers said they quickly identified surveillance and control functions in the code, including tools that could allow the central bank to freeze or reduce funds held in CBDC wallets.

Earlier this year, U.S. President Donald Trump banned federal agencies from issuing a CBDC in January, citing privacy and financial stability concerns. The BIS findings add to that debate by suggesting that privacy-preserving digital cash may be technically achievable, while also underscoring that operational and cybersecurity risks at the banking level remain a key barrier to wider deployment.

In our earlier article on the proposed 2030 U.S. census rule change, we examined plans to exclude certain noncitizens from population counts used for congressional apportionment and funding formulas, a shift critics say could reshape representation in immigrant-heavy states. We also noted concerns that altering how demographic and status data are collected could suppress participation, introduce errors, and spark legal challenges with long-lasting impacts on federal aid allocations.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.