Privacy-Preserving Financial Surveillance: An Architectural Framework for CBDC Implementation

Abstract

This paper challenges the prevailing assumption in Central Bank Digital Currency (CBDC) design that comprehensive transaction surveillance is necessary for financial stability and crime prevention. We propose an alternative privacy-preserving architecture that achieves equivalent or superior fraud detection through mechanism design rather than identity monitoring. Key contributions: Separation of pattern detection from identity: Transaction graph analysis identifies structural anomalies without accessing participant identities Transaction-level intervention: Suspicious activity flags individual transactions, not accounts or users Opt-in deanonymization: Identity revelation is always voluntary; users may abandon flagged transactions without consequence Architectural enforcement: Privacy guarantees are structural, not policy-dependent The framework inverts the burden of proof in financial surveillance. Rather than requiring users to demonstrate legitimacy, it requires the system to demonstrate suspicion—and even then, users retain the option to walk away. This creates a game-theoretic deterrent where illicit actors cannot complete transactions, while legitimate users experience minimal friction. We demonstrate that privacy-preserving CBDC architecture is technically feasible using established cryptographic primitives (zero-knowledge proofs, secure multi-party computation, threshold cryptography) and that the choice to implement surveillance infrastructure represents a policy decision rather than technical necessity. Part of the Adversarial Systems Research program investigating friction dynamics in complex systems where competing interests generate structural conflict.