Digital Payments — The Control-Grid Component

June 26, 2026

Cash is the last unmonitored transaction. Once payments move onto a state- or platform-visible rail, the same infrastructure that clears a purchase can decline one — and, with a central-bank digital currency, can decline it conditionally: this category, this window, this person. The framing differs by jurisdiction (convenience, financial inclusion, anti-fraud, monetary sovereignty); the capability converges on a single switch. Scored in the Convergence Index.

China

China runs the most complete deployment. Private rails already cover near-totality: Alipay and WeChat Pay dominate retail, reported through the PBOC’s quarterly payment-system statistics (PBOC), and the state CBDC — the e-CNY — is in live rollout, tracked by the Human Rights Foundation (HRF CBDC Tracker). The programmability is not theoretical: IMF and central-bank literature documents CBDC designs in which spending can be restricted by category or expiry (IMF working paper), and the surrounding system already demonstrates financial exclusion as policy: the court-defaulter blacklist blocked tens of millions of “untrustworthy” individuals from buying plane and high-speed-rail tickets (China Law Translate). The e-CNY supplies the rail to automate that — freeze a wallet, cap a transaction, expire a balance — and there is no legal limit a citizen can invoke against it. Capability, scale, and unconstraint all max out.

European Union

The EU is building the rail with the limits written on the box. The ECB’s digital-euro project is in its preparation phase, with the ECB stating explicitly that it “does not support a programmable digital euro that would restrict how users can spend their money” and promising pseudonymization for offline use (ECB; ECB FAQ). The live fight is the gap between that promise and what the legislative framework will actually mandate — some policymakers have floated programmable features, and the privacy guarantees rest on implementation that does not yet exist. The capability is being built; the limit is a stated intention, not yet a tested constraint, which is why the EU scores high on capability and only moderate on unconstraint.

India

India built the world’s largest real-time retail-payment system without a CBDC at all. The Unified Payments Interface (UPI) processes well over ten billion transactions a month at retail scale (NPCI), and it ships abroad as part of India Stack — the open-source export of the Aadhaar + UPI + Account Aggregator model now being imported by the Philippines, Sri Lanka, and others (India Stack). UPI is interbank rather than central-bank-programmable, so the freeze capability runs through existing legal channels — Aadhaar-linked accounts can be frozen under anti-money-laundering powers exercised by the Enforcement Directorate (Enforcement Directorate). Comprehensive visibility, scaled; the off-switch exists but routes through a (contestable) legal process.

United States & United Kingdom

Neither has a retail CBDC, and the US has effectively foreclosed one — FedNow is a bank-to-bank instant-settlement system the Fed explicitly states “is not related to a digital currency” (Federal Reserve; Atlantic Council CBDC Tracker). The off-switch is built elsewhere. For non-US persons it is the dollar itself: OFAC sanctions are de-facto programmable money, deciding who may transact in the global reserve currency (OFAC). Domestically the precedents are Operation Choke Point, where federal pressure on banks cut off legal-but-disfavored businesses (FDIC OIG audit), and Canada’s 2022 invocation of the Emergencies Act to freeze convoy-protester accounts without a court order — later found to be overreach by the Federal Court (POEC final report; Federal Court of Appeal 2026). Fragmented at the retail layer; total at the sanctions layer — and the judicial pushback is the friction that still distinguishes it from China.

The counter-argument

Real-time digital payment is a genuine public good: UPI collapsed transaction costs for hundreds of millions of previously cash-only Indians, and India’s government credits Aadhaar-linked direct transfers with roughly $1 billion a year in saved subsidy leakage. The instructive failure is Nigeria’s eNaira, which after a forced rollout saw adoption below 1% — proof the public will not take the rail unless it is genuinely useful, which is precisely why the useful version (UPI, Alipay) is the one that ends up universal, and universal is what makes the off-switch matter. The component does not care whether convenience or control put you on it.


Part of the Convergence Index component set. Scored in the interactive index; full cross-country comparison in the convergence table.

Get updates on the Evil Robots series

Newsletter essays on AI escape, deception, and the humans who built them.