CBDC Design Choices: Retail Access, Intermediated Models, and Offline Payments

CBDC Design Choices: Retail Access, Intermediated Models, and Offline Payments Oct, 27 2026

Imagine walking into a coffee shop in London or New York. You tap your phone to pay, but the internet is down. The card terminal flashes an error. In today’s cashless world, you’re stuck. Now imagine pulling out a physical card or tapping a device that works without a network connection, settling the payment instantly with the backing of the central bank. This isn’t science fiction; it’s one of the core problems Central Bank Digital Currencies (CBDCs) are trying to solve.

We aren’t just talking about Bitcoin or stablecoins here. We are talking about digital money issued directly by a nation’s central bank. But here is the catch: there is no single blueprint for how this money should work. Should you hold a direct account with the Federal Reserve? Should Apple or Chase handle your transactions? And what happens when the power goes out?

The Core Dilemma: Who Holds Your Money?

When we talk about retail CBDC, we mean digital central-bank money intended for individuals and businesses in everyday transactions. This differs from wholesale CBDC, which is restricted to regulated financial institutions. The biggest debate among policymakers isn’t *if* we need digital cash, but *how* it reaches your wallet.

The Bank for International Settlements (BIS) identifies three main architectures for this system. Understanding these helps you see why some countries move fast while others hesitate.

  • Direct Model: The central bank onboards users, records all balances, and processes payments. Think of it as everyone having a checking account at the Fed.
  • Indirect Model: Users hold claims on private intermediaries (like banks), while the central bank only tracks wholesale accounts. This looks most like our current system.
  • Hybrid/Intermediated Model: Users have direct claims on the central bank, but private companies process the payments and provide customer service. This is the middle ground many experts favor.

Why does this matter to you? It determines privacy, innovation speed, and who holds the keys to your financial life.

Retail Access and Financial Inclusion

One of the loudest arguments for CBDCs is financial inclusion. According to the World Bank, roughly 1.4 billion adults remain unbanked globally. For them, traditional banking is often too expensive or geographically inaccessible. A well-designed retail CBDC could offer a basic digital wallet with zero fees, accessible via a simple smartphone or even a smart card.

But access comes with strings attached. If the central bank handles every transaction directly (the Direct Model), they need infrastructure capable of handling billions of daily micro-transactions. Visa processes over 100 billion transactions annually. Can a central bank match that throughput without collapsing under its own weight? Most technical experts say no. That’s why the intermediated model has gained traction.

In an intermediated setup, private banks and fintechs compete to offer the best user experience. They build the apps, manage the customer support, and integrate with existing point-of-sale systems. The central bank sets the rules and ensures stability, but doesn’t try to be your tech support provider. This preserves competition and keeps innovation flowing.

Two cartoon characters using NFC for offline payments in a Memphis design aesthetic, highlighting connectivity independence.

The Privacy Paradox

Let’s address the elephant in the room: surveillance. Cash is anonymous. If I buy a pack of gum with a coin, the government doesn’t know my name. With a digital dollar, every transaction leaves a data trail. Who sees that trail?

Privacy Implications by CBDC Architecture
Model Data Visibility Primary Risk
Direct Central bank sees all transactions State surveillance potential
Indirect Private banks see transactions; Central bank sees aggregates Commercial data mining
Intermediated Intermediaries see details; Central bank sees limited metadata Complex regulatory compliance

Policymakers are experimenting with "tiered privacy." Small transactions might remain semi-anonymous, similar to cash limits, while larger transfers require full identity verification. The European Central Bank, for instance, has suggested that digital euro transactions below a certain threshold could enjoy higher privacy protections. This balance is delicate. Too much anonymity invites money laundering; too little kills adoption.

Offline Payments: The Resilience Test

Here is where CBDCs can actually beat credit cards. Our current payment rails depend heavily on continuous connectivity. When the internet drops, so do sales. During natural disasters or cyberattacks, this fragility becomes dangerous.

Several pilots, including China’s digital yuan and Sweden’s e-krona experiments, have tested offline payment capabilities. How does it work? Typically, devices store a small amount of digital value locally. When two devices come close (via NFC or Bluetooth), they exchange encrypted tokens to transfer value. The transaction settles later when connectivity returns.

This feature is crucial for resilience. It mimics the behavior of physical cash. You don’t need Wi-Fi to hand someone a $20 bill. A robust CBDC must replicate this friction-free experience. However, implementing offline capability introduces double-spending risks. If I send my last $50 to Alice, then immediately try to send it to Bob before syncing, who gets the money? Solving this requires sophisticated cryptographic protocols and hardware security modules in consumer devices.

Diverse cartoon figures accessing a central digital wallet, illustrating financial inclusion in Memphis design style.

Global Momentum and Standards

We are not waiting on a single global standard. The race is already on. The BIS reported that 85 of 93 surveyed central banks were exploring either retail or wholesale CBDCs in 2024. That’s 91 percent of major economies investigating this technology.

Nigeria launched the eNaira in 2021, becoming the first African nation to do so. Jamaica followed with JAM-DEX. China’s digital yuan pilot has processed hundreds of billions of yuan in transactions across dozens of cities. Meanwhile, the US and Europe are moving slower, prioritizing thorough impact assessments over speed.

Why the difference? Some nations view CBDCs as a tool for monetary sovereignty against foreign stablecoins. Others see it as a way to modernize aging payment infrastructure. There is no universal launch date because each country faces unique economic pressures.

What This Means for Consumers

If you’re wondering whether to panic or prepare, consider this: CBDCs won’t replace cash overnight. They will likely coexist with coins, notes, and commercial bank deposits for decades. Your job-to-be-done right now is understanding the trade-offs.

  • Convenience: Expect faster settlement times and lower cross-border fees eventually.
  • Security: Central bank money is theoretically safer than commercial bank deposits because it carries no default risk.
  • Control: Be aware that programmable money could allow expiration dates or spending restrictions, though these features are controversial and may not apply universally.

The design choices made today-whether to go direct, indirect, or intermediated-will shape your financial life for generations. The intermediated model seems to offer the best balance: leveraging private sector efficiency while maintaining public trust through central bank backing.

Is a CBDC the same as cryptocurrency?

No. Cryptocurrencies like Bitcoin are decentralized and typically volatile. A CBDC is centralized, issued by a national central bank, and pegged 1:1 to the national fiat currency. It is legal tender, meaning merchants must accept it if offered.

Will CBDCs eliminate cash?

Unlikely in the near term. Most central banks emphasize that CBDCs are meant to complement cash, not replace it. Physical notes remain vital for privacy, accessibility, and emergency resilience, especially for those without digital literacy or devices.

How do offline CBDC payments work?

Offline payments use local storage on secure hardware chips within phones or cards. When devices communicate via NFC, they transfer encrypted value tokens. The transaction is recorded locally and synced to the main ledger once internet connectivity is restored, preventing double-spending through cryptographic validation.

Who manages my CBDC account?

In an intermediated model, which is favored by many central banks, private entities like commercial banks or licensed fintechs manage the customer interface. They provide the app and support, while the central bank holds the ultimate liability and oversees the system’s integrity.

Are CBDC transactions private?

It depends on the design. Fully transparent models expose all data to the central bank. Many proposed designs include tiered privacy, where small-value transactions retain more anonymity to mimic cash-like usage, while larger amounts require stricter identification to combat illicit finance.