CBDC Regulatory Framework — Master Guidance Document

Executive Summary

Central bank digital currencies have moved from theoretical discussion to operational reality — and, in several cases, to operational failure or retreat. As of June 2026, over 130 countries are exploring CBDCs (BIS Papers No. 159, August 2025). Across the 20 jurisdictions analysed here, 6 have launched or operate a live/at-scale CBDC (Bahamas, Nigeria, Jamaica, Eastern Caribbean, China, India), though one of those (Eastern Caribbean's DCash) is suspended and two (China, India) remain pilot-scale rather than full nationwide legal-tender launches. One major economy — the United States — has taken a formally anti-CBDC stance, the only major economy to bar federal CBDC development by executive action. China's e-CNY — the largest pilot globally with 3.48 billion cumulative transactions worth CNY 16.7 trillion — was reclassified effective 1 January 2026 from a central bank liability toward a commercial bank deposit-money model, leading the Peterson Institute to question whether it still qualifies as a CBDC.

The central finding of this guidance is sobering: no launched retail CBDC has achieved meaningful adoption. Nigeria's eNaira saw 98.5% of wallets inactive after one year (IMF WP/23/104) and the CBN acknowledged in November 2025 that it is "not a rosy story," pivoting to a wholesale focus. The Bahamas Sand Dollar represents just ~0.39% of physical cash in circulation. Jamaica's JAM-DEX sits at ~0.1% of currency, with its outgoing Governor calling slow adoption "a disappointment" in May 2026. India's e₹-R circulation actually contracted ~24% year-on-year in FY2025-26 — its first reported decline — to ₹771.7 crore. Even China's e-CNY, after six years and massive state support, operates alongside — not instead of — Alipay and WeChat Pay.

Seven non-negotiable elements emerge from the evidence for any jurisdiction proceeding with a CBDC:

1. Explicit legal authority enacted before launch — not after (see Legal Framework & Authorization). Nigeria and China demonstrate the costs of legal ambiguity. The IMF identifies clear legal authority as a prerequisite for sustainable programmes.

2. Privacy architecture that earns public trust — designed to meet or exceed existing data protection standards (see Privacy & Data Protection). The EU's "unlikely to use" survey results and Russia's >50% unwillingness show that perceived surveillance destroys adoption before it begins.

3. Holding limits calibrated to financial stability evidence — not arbitrary round numbers (see Monetary Policy Impact). The ECB's modelling at EUR 3,000 (EUR 699 billion maximum outflow) and the Bank of England's Financial Stability Paper No. 53 provide the methodological standard.

4. Technology architecture selected for resilience, not novelty — with mandatory offline capability and proven scalability (see Technology & Design Choices). The Eastern Caribbean DCash outage and Brazil's DLT-to-centralized pivot are cautionary evidence.

5. A credible value proposition for users and merchants — CBDC is not a shortcut to financial inclusion (see Financial Inclusion). Every launched CBDC that assumed "build it and they will come" has failed.

6. Intermediary compensation that makes distribution commercially viable (see CBDC Licensing & Intermediary Frameworks). No jurisdiction has created a standalone CBDC intermediary licence; all rely on existing financial sector licensing.

7. Exit criteria defined before launch — not after failure becomes evident (see Economic Outcomes). Nigeria's pivot, DCash's suspension, and China's reclassification were reactive, not planned.

This guidance is not an advocacy document for CBDCs. The evidence does not support a universal case for retail CBDC issuance. For some jurisdictions — particularly those with well-functioning fast payment systems, strong rule of law, and competitive private-sector payment innovation — the optimal policy outcome may be regulated stablecoins, tokenised deposits, or no digital currency intervention at all. South Africa's November 2025 Position Paper — finding retail CBDC technically feasible but with "no compelling immediate need" — is the clearest articulation that not launching can be the responsible decision.

Part I: Context and Foundations

1. The Global CBDC Landscape (June 2026)

Across the 20 jurisdictions analysed in this guidance, the status distribution is as follows (recomputed for N=20):

• Launched / live or at-scale (6 of 20): Bahamas (Sand Dollar), Nigeria (eNaira), Jamaica (JAM-DEX), Eastern Caribbean (DCash — now suspended), China (e-CNY — pilot-scale, not formal nationwide legal-tender launch), India (e₹ — dual retail/wholesale pilot at scale).
• Active pilot / advanced preparation, not yet launched (8 of 20): Brazil (Drex — restarted), Russia (digital ruble — legally-mandated large-scale launch 1 Sep 2026), Singapore (live wholesale issuance; retail research), South Korea (Project Hangang deposit-token pilot), Australia (Project Acacia wholesale — final report May 2026), Thailand (retail pilot concluded, wholesale active), EU (digital euro — preparation phase concluded, moved to next phase), Ghana (eCedi — pilot "completed," design phase).
• Research / cautious, no issuance decision (5 of 20): Canada (retail scaled down), Japan (decision pending 2026), Sweden (research, EU-contingent), United Kingdom (design phase), South Africa (research/PoC, "no compelling immediate need").
• Anti-CBDC (1 of 20): United States (only major economy to bar federal CBDC development by executive action).

The following table summarises status, legislative model, privacy model, holding limit, and technology for each jurisdiction. Full analysis for each regulatory dimension is linked via wikilinks.

2. International Organization Positions

Bank for International Settlements (BIS). The BIS has evolved from an active CBDC platform developer (mBridge co-developer through October 2024) to a standards-setting and research body. The 2020 foundational principles report, co-authored with seven central banks, established that CBDCs must "coexist with and complement existing forms of money." The BIS 2024 survey (Papers No. 159) confirmed 91% of 93 central banks are exploring CBDCs, with 49 pilots active. The BIS Annual Economic Report 2025 promoted the "unified ledger" concept — central bank money and regulated private digital assets under a coordinated framework. Project Agorá published its first-phase report on 27 May 2026, confirming atomic multi-currency wholesale settlement is feasible (BOJ and South Korea's BOK among participants; Bank of Canada joining for real-value testing).

International Monetary Fund (IMF). The IMF CBDC Handbook (Policy Paper 2025/041, November 2025) is the most comprehensive international guidance, covering legal foundations, monetary policy, financial stability, and financial integrity. Key positions: clear legal authority is a prerequisite; CBDC design must address ML/TF risks prior to issuance; holding limits are essential safeguards; financial inclusion requires dedicated design, not assumption. The IMF's Fintech Note 2024/005 on CBDC adoption provides the metrics framework used throughout this guidance.

Financial Action Task Force (FATF). The FATF classifies CBDCs as digital representations of fiat currency — not virtual assets. CBDC intermediaries are financial institutions subject to Recommendations 10-21 (CDD, record-keeping, STR, travel rule), not the VASP regime under Recommendation 15. The February 2025 Plenary approved amendments encouraging simplified measures in lower-risk scenarios, directly supporting tiered KYC for CBDC wallets. See Compliance & Enforcement for full analysis.

World Bank. The Global Findex 2025 confirms 1.3 billion adults remain unbanked, with ~900 million owning mobile phones (530 million smartphones). This defines the addressable population for CBDC financial inclusion. The World Bank emphasises that CBDC is one tool among many — mobile money and fast payment systems have proven inclusion track records that CBDCs have not matched.

Part II: Regulatory Dimensions

3. Legal Framework and Authorization

Full analysis: Legal Framework & Authorization

Six legislative models have emerged across the studied CBDC programmes:

• Model A — Dedicated CBDC legislation (EU proposed, Russia, Jamaica): Highest legal certainty. The EU's COM(2023) 369 is the most comprehensive single instrument — covering legal tender status, holding limits, offline payments, privacy architecture, and intermediary compensation; it remains proposed, not enacted. Russia's Federal Law 340-FZ provides legal clarity (digital ruble as a third form of the ruble) but lacks judicial oversight provisions. Jamaica was the first country to designate its CBDC as legal tender by statute (BoJ Amendment Act 2022).
• Model B — Central bank act amendment (India, Bahamas): Efficient and minimally disruptive. India's single definitional change (Finance Act 2022, s.139) enabled pilot deployment within months. The trade-off: comprehensive operational rules must then come through secondary regulation — which in India remains incomplete as of June 2026.
• Model C — Existing monetary law interpretation (China, Nigeria, Brazil, Eastern Caribbean, Thailand, Australia, Canada, Ghana, South Africa): Highest legal risk where a CBDC is actually deployed. China has achieved massive pilot scale without enacted legislation, with its draft amended PBOC Law still unenacted (a "legal vacuum"). Nigeria's reliance on Section 19 of the CBN Act and regulatory guidelines contributed to the legitimacy deficit that undercut eNaira adoption. For research-stage jurisdictions (Canada, South Africa), this model reflects that any future issuance would require legislative amendment.
• Model D — Executive/legislative prohibition (United States): The only major economy to bar federal CBDC development. Executive Order 14178 (23 January 2025) is the binding prohibition in force, revoking EO 14067. Statutory bans have passed both chambers in differing, unreconciled forms — the House passed the Anti-CBDC Surveillance State Act (H.R. 1919) 219-210 on 17 July 2025; the Senate passed the 21st Century ROAD to Housing Act 89-10 on 12 March 2026 with a CBDC moratorium through 31 December 2030; the House passed an amended version 396-13 on 20 May 2026 — but no statutory ban has been enacted. The GENIUS Act (S.1582, signed as Public Law 119-27 on 18 July 2025) positions regulated stablecoins as the preferred digital dollar. Fed Chair Kevin Warsh (sworn in 22 May 2026) reaffirmed opposition to a retail CBDC.
• Model E — Consultation and design (UK, Sweden, Japan): Extended research without legislative commitment. The UK has received 50,000+ consultation responses and committed to requiring primary legislation before any launch. Sweden's enabling legislation does not exist; its trajectory is now tied to the EU digital euro. Japan expects a retail-CBDC decision in 2026 with no Diet bill yet introduced.
• Model F — Central bank authority plus crypto framework (Singapore, South Korea): Using existing central bank mandates alongside separate crypto/digital asset regulation; both operate live wholesale/hybrid pilots without dedicated CBDC statutes.

Recommendation: Jurisdictions approaching an issuance decision should enact dedicated legislation (Model A) that explicitly authorises issuance, defines legal tender status, establishes holding limits, mandates privacy safeguards, and creates intermediary obligations. This is consistent with the IMF's CBDC Handbook recommendation and the EU's approach.

4. Privacy and Data Protection

Full analysis: Privacy & Data Protection

Four privacy models are operational or proposed:

• Model A — Cash-equivalent anonymity (EU offline, Sweden e-Krona offline card): Offline transactions replicate cash anonymity. The EDPB/EDPS Joint Opinion 02/2023 recommended extending cash-like privacy to online low-value transactions. The European Parliament adopted amendments (10 Feb 2026) endorsing both online and offline functionality. BIS Project Tourbillon demonstrated payer anonymity using blind signatures and mix networks.
• Model B — Tiered/controllable anonymity (China, India, Bahamas, Jamaica, Nigeria): Privacy graduated by transaction value and wallet verification level. China's "small amounts anonymous, big amounts traceable" framework has drawn sustained international criticism. India has not published specific anonymity thresholds. Nigeria's account-based design enables full CBN monitoring despite tiered wallet labelling.
• Model C — Pseudonymised with law enforcement access (EU online, UK, Brazil, Eastern Caribbean): All transactions recorded but user identity pseudonymised at the central bank. The ECB's N-XT UTXO model "does not need to know which wallet holds UTXOs." The UK committed to enshrining privacy protections in primary legislation. Brazil's privacy architecture remains unresolved — the single most consequential obstacle that drove the November 2025 platform pivot.
• Model D — Full surveillance (Russia, Nigeria in practice): Complete central bank visibility over all transactions. Russia's digital ruble explicitly "does not provide for the anonymity of payments," storing all data on CBR-operated infrastructure with Rosfinmonitoring collaboration. Surveys indicate >50% of Russian respondents unwilling to use the digital ruble due to surveillance concerns (media-sourced, indicative only).

Privacy scorecard (summary):

Recommendation: Privacy architecture must be designed before — not after — public engagement begins. Jurisdictions subject to GDPR or equivalent data protection law should adopt at minimum pseudonymisation with offline anonymity for small-value transactions. Legislative privacy guarantees (as the UK has committed to) are the strongest trust signal.

5. Monetary Policy Impact

Full analysis: Monetary Policy Impact

Holding limits are the single most consequential monetary policy design decision. Every advanced CBDC programme has adopted or proposed them:

• EU: EUR 3,000 per person modelled (Commission impact assessment); the Council (Dec 2025) provides for an ECB-set limit within a Council-agreed ceiling, reviewed at least every two years; businesses and public authorities have a zero limit (waterfall to bank account). ECB modelling shows EUR 699 billion maximum deposit outflow under stress (~8.2% of retail sight deposits); ~EUR 100 billion under business-as-usual (<2%).
• UK: GBP 10,000-20,000 proposed. BoE Financial Stability Paper No. 53 (Nov 2025) models deposit-flight scenarios; the Treasury Committee recommended lower limits closer to the EU's EUR 3,000.
• China: Tiered by wallet category (CNY 10,000 for Category 4 anonymous wallets to CNY 500,000 for fully verified Category 1).
• India: INR 1,00,000 (~EUR 1,100) — among the most restrictive globally; ₹10,000 per transaction, ₹50,000 daily cumulative.
• Russia: RUB 300,000 monthly top-up (digitisation) limit for individual wallets (replenishment only); business/legal-entity wallets uncapped; framed as a bank-disintermediation safeguard.
• Bahamas / Jamaica: Bahamas applies tiered caps (B$500-8,000 personal); Jamaica's BOJ imposes no min/max, leaving limits to wallet providers.

Interest-bearing design: The global consensus strongly favours non-remuneration. The EU, UK, India, Russia, Bahamas, Nigeria, Jamaica, Japan, and South Korea all set CBDC/deposit-token interest at zero (or leave interest to the underlying bank deposit). China broke with orthodoxy effective 1 January 2026, offering 0.05% annual interest to verified (Category 1-3) wallets — deliberately negligible, with the first quarterly payout on 20 March 2026, and designed to integrate e-CNY with the deposit system, not to attract savings.

Recommendation: Set holding limits based on quantitative financial stability modelling, not arbitrary thresholds. The ECB's methodology — scenario-testing at multiple limit levels against deposit outflow, LCR compliance, and central bank lending requirements — is the standard other jurisdictions should follow.

6. Technology and Design Choices

Full analysis: Technology & Design Choices

Four architecture models are in use:

• Model A — Centralized ledger (China, Russia, Jamaica, Nigeria, EU core): Maximum central bank control; scalability limited only by database engineering. China reports 300,000+ TPS capacity (NOT VERIFIED). Russia built entirely in-house to mitigate sanctions risk. Jamaica's JAM-DEX is explicitly NOT a blockchain — a centralized ledger with "digital bearer instrument" tokens. The EU's digital euro uses a centralized N-XT engine with a UTXO data model.
• Model B — DLT-based (Eastern Caribbean DCash, Brazil Drex initial, Singapore wholesale, Bahamas Sand Dollar, Sweden pilot): Distributed ledger with the central bank as validator/operator. DCash suffered a ~2-month outage in early 2022 (expired Fabric identity certificates) — the most severe CBDC infrastructure failure on record. Brazil decommissioned its Hyperledger Besu platform on 10 November 2025 after concluding tested privacy-preserving DLT solutions lacked maturity, and is rebuilding "from scratch."
• Model C — Hybrid (India, South Korea, Japan research): Combines centralized and distributed components. India runs wholesale (e₹-W) on Hyperledger Fabric while keeping the retail layer (e₹-R) intentionally non-DLT (UPI-inspired API architecture) for scalability. South Korea uses a two-layer wholesale-CBDC + deposit-token model.
• Model D — Platform with open API (EU digital euro, UK digital pound design): Central bank operates core settlement; private sector builds consumer-facing applications. The ECB's N-XT engine uses a UTXO data model. The UK envisions PIP/ESIP layers over BoE core infrastructure.

Offline capability is the strongest differentiator for financial inclusion. India officially launched offline NFC transactions at the Global Fintech Fest in October 2025. China deploys SIM-card and hardware wallets with dual offline transactions. The EU regulation mandates offline capability (Giesecke+Devrient selected). Ghana's eCedi is offline-first by design. Sweden's offline card supports up to 5 consecutive offline payments (SEK 3,000 cap). Without offline payments, CBDCs offer little that existing digital payment systems do not already provide.

Recommendation: Select architecture for resilience, scalability, and offline capability — not for technological novelty. The DLT track record for production CBDCs is mixed (DCash outage, Brazil pivot). Centralized or platform models have demonstrated greater reliability at scale.

7. Financial Inclusion

Full analysis: Financial Inclusion

The evidence is clear: CBDC is not a shortcut to financial inclusion.

The World Bank Global Findex 2025 confirms 1.3 billion adults remain unbanked. The addressable population for mobile-first CBDC is approximately 900 million (mobile phone owners among the unbanked). However, every launched CBDC intended to advance inclusion has underperformed:

• Nigeria: 98.5% wallet inactivity (IMF WP/23/104). A coercive cash-restriction policy triggered a severe liquidity crisis and public backlash; the CBN now concedes eNaira is "not a rosy story" and is pivoting to wholesale.
• Bahamas: Sand Dollar represents ~0.39% of physical cash in circulation — negligible adoption despite being the world's first CBDC; cash circulation actually rose ~20% over the same period.
• Jamaica: ~0.1% of currency; growth driven by existing users transacting more (transaction values up 550%, volumes up 267% YoY in 2025), not new unbanked sign-ups; only two public wallets (Lynk, JN Pay) by end-2025.
• India: e₹-R circulation fell ~24% YoY in FY2025-26 to ₹771.7 crore — the first reported decline — against UPI's 500 million+ users. The existing fast payment system has already achieved mass financial inclusion.

The strongest CBDC inclusion case is offline payment capability for populations without reliable internet — an estimated ~47% of Ghanaians (self-reported, not independently verified) and a large share of rural Indians. Programmable welfare delivery (India's PMGKAY food-currency pilots in Puducherry, Gujarat G-SAFAL; South Korea's deposit-token EV-charging subsidy) is a secondary differentiator.

Recommendation: Do not launch a CBDC with financial inclusion as the primary justification unless existing fast payment systems (UPI, Pix, M-Pesa equivalents) have demonstrably failed. If inclusion is a genuine objective, design for offline-first, simplified KYC, and targeted use cases (welfare delivery, remittances) — and invest in merchant infrastructure before launch, not after.

8. Cross-Border Interoperability

Full analysis: Cross-Border & Interoperability

Several BIS-affiliated projects and independent initiatives define the cross-border CBDC landscape:

• mBridge (China, Hong Kong, Thailand, UAE, Saudi Arabia): The most operationally advanced. Reported ~USD 55.5 billion across 4,000+ transactions (self-reported). BIS withdrew in October 2024; the platform is now governed by participating central banks. Geopolitically significant: China-led, US and most G7 absent. Singapore, Japan, the EU, Russia, Australia, and Canada are not mBridge participants; South Korea holds observer status.
• Icebreaker (BIS, Bank of Israel, Norges Bank, Sweden's Riksbank): Hub-and-spoke model interlinking domestic systems; completed proof of concept (Mar 2023). Each CBDC stays within its domestic system; FX conversion via competitive liquidity providers.
• Dunbar (Australia, Malaysia, Singapore, South Africa): Multi-CBDC platform (R3 Corda + Partior/Quorum). Explored governance and access challenges of shared platforms.
• Project Acacia (Australia): RBA/DFCRC wholesale experimentation; the final report (18 May 2026) covered 20 use cases (12 pilot + 8 PoC), A$4.4m in pilot wCBDC issued, and a self-reported DFCRC estimate of A$24bn/yr potential gains.
• Mandala / Mariana / Ubin+ (Singapore-led): Privacy-preserving compliance (Mandala Phase 2, Nov 2025), AMM-style FX (Mariana), and interlinked-ledger settlement.
• Agorá (BIS + 7 central banks including the Fed, BoE, ECB, BoJ, BOK): The largest current project. First-phase report (27 May 2026) confirms atomic multi-currency wholesale settlement is feasible; advancing to real-value testing with Bank of Canada joining. US participation at the wholesale level is notable given its anti-retail-CBDC stance.

Geopolitical dimension: mBridge's China-led governance post-BIS withdrawal, plus the proposed BRICS-CBDC linkage (RBI floated placing it on the 2026 BRICS Summit agenda; a proposal, not agreed) and Russia's largely conceptual BRICS Bridge, create the contours of an alternative cross-border settlement infrastructure outside Western-dominated correspondent banking. The US absence from retail CBDC, combined with Agorá participation at the wholesale level, reflects a strategic split between retail prohibition and wholesale engagement.

Recommendation: Prioritise interoperability standards from the outset. The hub-and-spoke model (Icebreaker) offers maximum sovereignty preservation — each CBDC remains domestic. Common-platform models (mBridge) offer maximum efficiency but require governance trust among participants. Wholesale CBDC for cross-border settlement is a stronger near-term case than retail CBDC for domestic payments.

9. Stablecoin Coexistence

Full analysis: Stablecoin Coexistence

The stablecoin market has reached approximately $312-320 billion in capitalisation with $33 trillion in 2025 transaction volume (72% year-over-year growth). Five coexistence models have emerged:

• Displacement / ban on private alternatives (China): e-CNY is positioned to subsume stablecoin functions; PBOC Notice Yinfa No. 42 (6 Feb 2026) formalised a ban on RMB-linked stablecoins and RWA tokenization, with extraterritorial reach.
• Parallel regulation (EU): MiCA regulates stablecoins; the digital euro regulation operates separately (the digital euro is excluded from MiCA scope). Both instruments coexist under distinct legal frameworks.
• Stablecoins-first (US, Nigeria, Brazil): The GENIUS Act (PL 119-27, July 2025) establishes a federal framework for regulated stablecoins while CBDC development is barred — stablecoins are the digital dollar. Nigeria's CBN is studying an official stablecoin (cNGN) as it deprioritises eNaira. Brazil operationalized a VASP/stablecoin framework (BCB Resolutions 519/520/521, effective Feb 2026) as Drex was de-scoped.
• Complementary (Singapore, Thailand, South Korea, Canada): MAS regulates stablecoins under its single-currency stablecoin framework while exploring wholesale CBDC; Thailand pivoted to a Programmable Payment Sandbox for stablecoin experimentation; South Korea weighs a won-backed stablecoin; Canada enacted a Stablecoin Act (Royal Assent 26 Mar 2026, not yet in force; expressly excludes CBDCs).
• CBDC absorbs stablecoin features (Brazil original Drex design): Drex was designed to incorporate tokenisation and programmability typically associated with stablecoins, before its 2025 de-scoping.

Recommendation: CBDC and stablecoin frameworks should be designed in coordination, not in isolation. The EU's parallel approach — MiCA for stablecoins, separate regulation for the digital euro — is the most legally coherent model for jurisdictions proceeding with both instruments. Jurisdictions that decline or ban a CBDC should still regulate stablecoins (as the US has done via the GENIUS Act and Canada via its Stablecoin Act).

10. Licensing and Intermediary Frameworks

Full analysis: CBDC Licensing & Intermediary Frameworks

No jurisdiction has created a standalone CBDC intermediary licence. All studied programmes rely on existing financial sector licensing:

• Model A — Bank licence only (China, India, Jamaica, South Korea): Only licensed banks may distribute. China doubled its authorized-operator roster to 22 on 2 April 2026; India runs ~19 banks; Jamaica has three wallet providers; South Korea's Hangang Phase 2 runs through 9 banks. Maximum entry barriers; excludes most fintech.
• Model B — Extended PSP framework (EU): Credit institutions, payment institutions, and e-money institutions all required to distribute. Broadest access among all models.
• Model C — New dedicated categories (UK proposed): PIP (Payment Interface Provider) and ESIP (External Service Interface Provider) categories under design. Closest to a dedicated licence but not yet implemented.
• Model D — State-directed mandatory participation (Russia): Systemically important banks and large retailers (>RUB 120M revenue) must participate by the 1 September 2026 large-scale launch. Mandatory, not voluntary.
• Model E — Central bank direct platform (Bahamas, Nigeria): Central bank operates the platform directly, with wallets offered through banks and authorised agents (AFIs in the Bahamas; DMBs/PSBs/MFBs in Nigeria).

Compensation models vary dramatically. The EU is most developed: COM(2023) 369 caps merchant fees at 0.20% interchange, provides government compensation for mandatory basic services, and prohibits surcharging. China subsidises distribution through state-owned banks. Russia published a detailed fee schedule (0% for individuals, 0.3% for merchants).

Recommendation: Extend CBDC distribution obligations to all supervised payment service providers, not just banks. Design compensation models that make CBDC distribution commercially viable for intermediaries — the EU model (fee caps + government compensation for basic services) provides the most complete framework.

11. Compliance and Enforcement

Full analysis: Compliance & Enforcement

The FATF's classification of CBDC as fiat currency — not virtual asset — establishes the compliance foundation. CBDC intermediaries are financial institutions subject to the mature FI compliance framework (Recommendations 10-21), not the evolving VASP regime.

Tiered KYC is essential for inclusion-oriented CBDCs. The FATF's February 2025 amendments explicitly encourage simplified measures in lower-risk scenarios. Operational models range from phone-number-only basic wallets (China Category 4: CNY 10,000 cap; Nigeria Tier 0: N120,000 balance / N20,000-N2,000,000/day) to fully verified wallets with higher limits.

Privacy-preserving compliance technologies are maturing but not production-ready for most jurisdictions. Zero-knowledge proofs can verify transaction compliance without revealing amounts; secure multi-party computation enables threshold checks across institutions (demonstrated in Singapore's Project Mandala). The ECB and MIT DCI are the leading R&D programmes. Brazil's failure to resolve the privacy-compliance tension — the explicit driver of its November 2025 platform decommissioning — is a caution against overestimating technology readiness.

Recommendation: Implement tiered KYC aligned with FATF risk-based standards. Basic wallets (phone number, low limits) enable inclusion; fully verified wallets enable higher-value use. Design AML monitoring at the intermediary level, not the central bank level, to preserve the separation between monetary authority and surveillance function.

Part III: Evidence and Outcomes

12. The CBDC Adoption Paradox

Full analysis: Economic Outcomes

The defining empirical finding of the first generation of retail CBDCs is the adoption paradox: every launched CBDC has achieved wallet creation but failed to achieve sustained active usage — and India has now demonstrated that usage can even contract. Adoption and transaction figures below are self-reported by the issuing central banks unless otherwise noted.

Development costs: The EU digital euro is the only programme to publish detailed projections (~EUR 1.3 billion through first issuance; framework agreements estimated at ~EUR 432.1M, max ~EUR 1.164bn). No other jurisdiction has disclosed comparable development costs.

13. Case Studies: What Failed, What Retreated, and What Persists

Failure: Nigeria — speed without preparation. Nine months from development to launch (25 Oct 2021). No standalone legislation, no proven value proposition, no merchant infrastructure. A coercive cash-restriction policy triggered a liquidity crisis and public backlash; 98.5% wallet inactivity. Now pivoting to wholesale (eNaira v2.0) and studying a stablecoin (cNGN). The lesson: speed without legal preparation, user research, or merchant infrastructure produces a CBDC that nobody uses.

Failure: Eastern Caribbean DCash — technology risk materialised. DLT-based architecture suffered a ~2-month outage in early 2022 (expired Fabric certificates). The pilot closed in January 2024; the ECCB suspended DCash 2.0 development in February 2026 in favour of a conventional Fast Payment System + CARICOM (CAPS) integration. The lesson: production CBDC infrastructure must meet the same availability standards as existing payment systems (99.99%+ uptime).

Retreat: Brazil Drex — privacy trilemma unresolved. Four years of development could not reconcile privacy, decentralisation, and programmability on a DLT platform. The BCB decommissioned its Hyperledger Besu platform on 10 November 2025 and is rebuilding "from scratch," narrowing scope toward collateral/lien reconciliation. The lesson: do not bet a national payment infrastructure on unproven technology.

Contraction: India e₹ — adoption can reverse. After 334% circulation growth in FY2024-25, e₹-R circulation fell ~24% to ₹771.7 crore in FY2025-26 — the first reported decline. India's offline NFC launch (Oct 2025) and programmable welfare pilots remain its strongest differentiated capabilities, but UPI's 500 million+ users leave limited headroom for a parallel system. The lesson: early growth does not guarantee durable demand.

Scale without displacement: China e-CNY. 3.48 billion cumulative transactions, CNY 16.7 trillion in value, 22 authorized operators after the April 2026 doubling. Achieved through state-directed merchant acceptance, public-sector payments, and integration with dominant payment platforms — yet it has not displaced Alipay/WeChat Pay and was reclassified toward a deposit-money model effective January 2026. The lesson: massive state resources can achieve scale, but not organic adoption.

Process thoroughness: EU digital euro. A multi-year timeline allows comprehensive legal, technical, and stakeholder preparation. The preparation phase concluded in October 2025; the Governing Council moved the project to its next phase (29-30 Oct 2025); the PSP pilot call opened 5 March 2026; an ECON Committee vote on the draft report is scheduled for 23 June 2026; a 12-month pilot is planned for H2 2027, with potential first issuance during 2029 contingent on the EU adopting the Regulation in 2026. The risk: private-sector solutions may fill the gap first.

Responsible non-issuance: South Africa. SARB's November 2025 Position Paper found a retail CBDC technically feasible but with "no compelling immediate need," prioritising PayShap and NPS modernisation while continuing wholesale exploration (Project Khokha 2x). The lesson: declining to launch can be the responsible decision.

14. Exit Criteria Framework

Every CBDC programme should define exit criteria before launch, not after failure. Three levels:

• Level 1 — Scale-back: Reduce geographic scope, lower spending targets, pause expansion. Trigger: adoption metrics consistently below minimum thresholds after 18-24 months. (Canada's September 2024 retail scale-down and Nigeria's wholesale pivot are examples.)
• Level 2 — Suspension: Halt new wallet creation, maintain existing functionality, conduct comprehensive review. Trigger: infrastructure failure, unresolvable compliance gap, or adoption below 1% of target after 36 months. (Eastern Caribbean's DCash 2.0 suspension; Brazil's platform decommissioning and rebuild.)
• Level 3 — Termination: Orderly wind-down with user fund conversion to bank deposits. Trigger: legislative prohibition, fundamental design flaw, or policy determination that costs exceed benefits.

No jurisdiction has yet executed a planned Level 3 termination; the closest analogue is the US anti-CBDC stance (prohibiting issuance before any launch).

Part IV: Implementation

15. Phased Implementation Roadmap

Full analysis: Implementation Guide

Five implementation models from real jurisdictions:

Recommended phased approach (5-year model):

Six common failure patterns identified from the evidence:

1. Launching without enacted legal authority (China, Nigeria)
2. Launching without a user value proposition (Nigeria, Bahamas)
3. Coercive adoption strategies (Nigeria cash restrictions)
4. Betting on unproven technology (Brazil DLT, DCash DLT)
5. Ignoring existing payment system competition (India e₹ vs UPI; Thailand vs PromptPay)
6. Absence of merchant infrastructure at launch (Nigeria, Jamaica)

16. Country Profile Decision Matrix

Jurisdictions considering CBDC can identify with one of five profiles based on their existing conditions:

Profile 1 — Advanced economy, strong payment infrastructure (e.g., UK, Sweden, Japan, Canada, Australia, South Korea)

• Existing fast payment systems work well; marginal retail-CBDC benefit is low
• Primary CBDC case: monetary sovereignty, wholesale cross-border settlement, contingency infrastructure
• Recommended approach: Cautious/deliberate model; prioritise wholesale CBDC and cross-border interoperability (e.g., Australia's Project Acacia, Canada's Project Samara); retail CBDC only if a clear gap is identified
• Risk: building infrastructure nobody needs

Profile 2 — Advanced economy, single-currency bloc (e.g., EU/Eurozone)

• CBDC serves currency integration, payment harmonisation, and strategic autonomy objectives
• Primary CBDC case: pan-eurozone digital payment instrument; reduce dependence on non-EU card schemes
• Recommended approach: Deliberate model with comprehensive legislation; long timeline acceptable given institutional complexity
• Risk: multi-year timeline may render the product obsolete before launch

Profile 3 — Large emerging economy, existing digital payment success (e.g., India, Brazil, Thailand)

• Fast payment systems (UPI, Pix, PromptPay) already achieve mass adoption; CBDC competes with domestic success
• Primary CBDC case: specific use cases (offline payments, programmable welfare, wholesale settlement)
• Recommended approach: Phased model focused on differentiated capabilities; do not attempt to replicate what UPI/Pix/PromptPay already do
• Risk: duplicating existing infrastructure at public expense (India's FY2025-26 circulation contraction is a live warning)

Profile 4 — Emerging economy, weak payment infrastructure (e.g., Nigeria, Ghana)

• Large unbanked population, unreliable internet, low trust in institutions
• Primary CBDC case: financial inclusion via offline payments and simplified KYC
• Recommended approach: Offline-first design (as Ghana's eCedi attempts); invest heavily in merchant infrastructure and public trust before launch; avoid coercive strategies
• Risk: Nigeria-style failure if launched without preparation

Profile 5 — Small island/developing economy (e.g., Bahamas, Jamaica, Eastern Caribbean)

• Limited banking infrastructure, tourism-dependent economy, cross-border remittance needs
• Primary CBDC case: reducing cash handling costs, improving remittance efficiency, financial inclusion
• Recommended approach: Simple design, targeted use cases, realistic adoption expectations
• Risk: low adoption due to small population and limited merchant ecosystem (all three live small-state CBDCs sit at or below ~0.4% of cash)

Appendices

Appendix A: Comparative Tables Reference

Detailed comparison tables for each regulatory dimension are available in the linked section files:

• Holding limits comparison: Monetary Policy Impact, Section 1.1
• Privacy model comparison: Privacy & Data Protection, Section 1
• Technology architecture comparison: Technology & Design Choices, Section 1
• Legislative model comparison: Legal Framework & Authorization, Section 1
• Licensing model comparison: CBDC Licensing & Intermediary Frameworks, Section 1
• Cross-border project comparison: Cross-Border & Interoperability, Section 1
• Stablecoin coexistence models: Stablecoin Coexistence, Section 2
• FATF compliance framework: Compliance & Enforcement, Section 1
• Adoption metrics: Economic Outcomes, Section 2
• Implementation models: Implementation Guide, Section 1
• Financial inclusion evidence: Financial Inclusion, Section 2

Appendix B: Source Index

This guidance synthesises evidence from the following primary source categories:

International organizations: BIS Papers No. 159 (August 2025); BIS Project Agorá first-phase report (May 2026); IMF Policy Paper 2025/041 (November 2025); IMF Fintech Note 2024/005 (September 2024); IMF WP/23/104 (May 2023); FATF Updated Guidance (October 2021, February 2025 amendments); World Bank Global Findex 2025; EDPB/EDPS Joint Opinion 02/2023.

Central bank publications: ECB Preparation Phase Closing Report (October 2025); ECB Opinion CON/2026/3 (January 2026); BoE Financial Stability Paper No. 53 (November 2025); BoE Consultation Paper (February 2023); PBOC White Paper (July 2021) and Action Plan (effective January 2026); RBI Annual Report 2025-26 (May 2026); RBA/DFCRC Project Acacia final report (May 2026); SARB Position Paper on a Retail CBDC (November 2025); CBN Regulatory Guidelines (October 2021); CBR Digital Ruble Status (June 2025).

Legislation: COM(2023) 369 (EU Digital Euro Regulation, proposed); Federal Law 340-FZ (Russia); Finance Act 2022 s.139 (India); Bank of Jamaica Amendment Act 2022; EO 14178 (US); GENIUS Act / S.1582 / PL 119-27 (US); Canada Stablecoin Act (Bill C-15, Royal Assent March 2026); MiCA (EU).

Academic and analytical: PIIE analysis of e-CNY reclassification (2026); Carnegie Endowment analyses of Nigeria and Russia; Cambridge University analysis (eNaira privacy assessment); Stanford DigiChina (controllable anonymity analysis).

Appendix C: Verification Notes

The following claims in this guidance and its linked section analyses carry verification caveats:

• US statutory CBDC ban: NOT enacted. Only Executive Order 14178 (23 Jan 2025) is in force. The House (H.R. 1919, 219-210) and Senate/House (ROAD to Housing Act, 89-10 then 396-13) passed CBDC moratoria in differing, unreconciled forms; no statute has been enacted as of June 2026. Fed Chair Kevin Warsh was sworn in 22 May 2026.
• China e-CNY 300,000+ TPS: Appears in secondary sources only; NOT VERIFIED against primary PBOC technical documentation.
• China cumulative transaction data (3.48B transactions, CNY 16.7T; 2.25B wallets): Self-reported PBOC/State Council aggregate data (November-December 2025); not independently audited. The April 2026 doubling to 22 authorized operators (12 new banks) is reported but the full list is NOT FULLY VERIFIED.
• Adoption / transaction figures (Bahamas, Jamaica, Nigeria, India, China, Eastern Caribbean, Russia, Singapore, South Korea): Self-reported by the issuing central banks or their trackers and flagged as such throughout; independent verification is limited. India's e₹-R figure of ₹771.7 crore (~24% YoY decline, 31 Mar 2026) is from the RBI Annual Report 2025-26.
• Brazil Drex platform decommissioning (10 Nov 2025) and MP 1303 lapse (8 Oct 2025): Reported by the BCB and Brazilian legislative records; the Phase 2 final report was NOT VERIFIED as published as of this refresh.
• Australia Project Acacia A$24bn/yr potential gains: A self-reported DFCRC research estimate (final report, 18 May 2026), not an audited figure; A$4.4m wCBDC was actually issued across 8 use cases.
• EU EUR 1.3 billion development cost / framework agreements (~EUR 432.1M, max EUR 1.164bn): From ECB Preparation Phase materials (October 2025). Only CBDC programme to publish detailed cost data. The ECON Committee vote is scheduled for 23 June 2026 (per the European Parliament Legislative Train, updated 22 May 2026).
• Nigeria 98.5% wallet inactivity: From IMF Working Paper WP/23/104 (May 2023). Widely cited, independently verified. The ~13m wallet figure circulates but is NOT independently re-verified.
• Russia pilot scale (~2,500 wallets) and projections (up to 5% of cashless payments): CBR self-reported (June 2025); the 1 September 2026 large-scale launch is legally mandated. Survey figures (>50% unwilling) are media-sourced and indicative only.
• Ghana eCedi "completed pilot" (22 May 2026): A design-phase shift announced by the Governor, NOT a live launch; enabling legislation remains unpassed. The ~47% offline-need figure is self-reported.
• Stablecoin $33 trillion 2025 transaction volume: Based on on-chain data from third-party analytics; flagged as estimate.

All jurisdiction-specific data in the linked section analyses includes inline source citations with URLs. Where data could not be independently verified or contradicts other sources, this is noted explicitly in the relevant section file. No Wikipedia, Reddit, Quora, X/Twitter, or Medium sources are relied upon.

---

This guidance document references but does not duplicate the following detailed analyses. Each covers one regulatory dimension in full, with jurisdiction-specific evidence, comparative tables, and recommendations:

1. Legal Framework & Authorization
2. Privacy & Data Protection
3. Monetary Policy Impact
4. Technology & Design Choices
5. Financial Inclusion
6. Cross-Border & Interoperability
7. Stablecoin Coexistence
8. CBDC Licensing & Intermediary Frameworks
9. Compliance & Enforcement
10. Economic Outcomes
11. Implementation Guide