--- title: "Your Card Already Does Everything You Are Afraid Of." dek: "The fear is money that watches, expires and refuses. Our correspondent's card already reports where she was, what sort of shop it was, and when — to five parties, every time. We counted for a week." kind: investigation (Investigation) desk: Money & Mechanisms author: Harriet Kwon-Massey (fictional) published: 2026-08-10T10:00:00Z url: https://theyburied.com/article/card-already-does-it tags: central bank digital currency, payments, privacy, offline, rulebook genre: satire status: fiction — nothing in this story happened; every person, source and document is invented --- # Your Card Already Does Everything You Are Afraid Of. *The fear is money that watches, expires and refuses. Our correspondent's card already reports where she was, what sort of shop it was, and when — to five parties, every time. We counted for a week.* Our correspondent paid for a haircut, a prescription, a train ticket and two drinks. Then she filed subject-access requests on every organisation she could identify that might hold a record of it. Five came back inside the statutory period. One came back after a reminder. > **Figure:** How many parties learn about a payment, by how you make it — see https://theyburied.com/article/card-already-does-it ## What they held The amount. The time, to the second. The merchant. The merchant's category — which is a four-digit code that says *pharmacy* or *bar* whether or not you would like it to. And, in four of the six, the location, because a terminal has one. She had not consented to any of it in any way she can remember. She had tapped a card. ## The clause everybody reads Every account of the coming instrument quotes the same worry: that money could be made programmable. That it could expire. That it could be restricted to certain purchases, or switched off. That is a real property a designer could build. It is not the property this design describes, and the published documents say so at length. Reporting that is not the same as promising it, and this newspaper is not promising it. A design document is not a system. ## The clause nobody reads Deep in the same material is the offline section, and it is the most interesting thing in the whole file. It describes two people transferring value directly between certified devices, with the transaction visible to the payer and the payee and to nobody else. That is not an improvement on a card. That is a description of cash. > Offline capability is a property of a wallet. Refusal is a property of a rulebook. They are not the same document. > > — Prof. Anneliese Obuya-Sandström ## Why that matters more than the surveillance argument Because the surveillance argument is over. It was lost fifteen years ago, quietly, at tills, by everybody, without a vote. Cash does not disclose. It is the only instrument most people have ever held that discloses nothing to anybody, and it has been leaving high streets steadily since about 2010 — not because anybody legislated it away, but because a card is easier and a shop pays a fee to accept one and the fee is worth it. Two of the three shopkeepers our correspondent spoke to would rather take cash. Both take cards. Their reasons were about fees, not freedom, and one of them laughed at the question. So the question worth asking about a new public instrument is not whether it watches you. Almost everything already does. It is whether it can be spent with nobody else in the room. ## The objection we could not answer Professor Anneliese Obuya-Sandström read our draft and objects to the headline, and her reply runs in full at the foot of this page. Her argument, which this desk thinks is correct: pointing at an old harm to soothe a worry about a new one is not reassurance, it is two harms. And the distinction that actually matters is not *who sees* a payment but *who can refuse* one, and on what basis. A private issuer refusing you is commercial and appalling and appealable to a phone number. A sovereign issuer refusing you would be political, and the appeal route would be political too. Those are different, and our headline flattens them. We have printed her saying so directly underneath it. ## What we would tell a reader to do Read the offline annex. It is public, it is dull, and it is the part that decides whether the thing is cash or a better card. And in the meantime, if the disclosure bothers you: it is happening now, to you, several times a day, and you can find out exactly what is held by asking, which took our correspondent one afternoon and six emails. She was more unsettled by what came back than by anything in the rulebook. ## Sources (invented) - The published scheme rulebook drafts and the preparation-phase closing report, Public — Read in full, including the annexes on offline functionality (2026) - Our correspondent's own payment record, one week, Her own data, subject-access requested from every party she could identify — Requested; five responded within the statutory period, one after a reminder (May–June 2026) - Prof. Anneliese Obuya-Sandström, Payments economist; advises no central bank and has consulted for none — Interviewed by video call three times (April–June 2026) - Two shopkeepers and a market trader, Named in our notes — Interviewed about what they now accept and what it costs them (June 2026) ## Documents cited (invented) - PX-2131: https://theyburied.com/vault/PX-2131 ## What we could not confirm - What will actually be built. Everything in this story about the future instrument comes from published design documents and draft rules. Designs change, legislation changes them, and a document is not a system. - Whether the offline promise can be delivered at scale. Offline value transfer between two devices with no third party is a genuinely hard engineering problem — double-spending is the obvious one — and nobody has demonstrated it at a national scale. - Whether a future government could change the rules. Of course it could. That is true of banknotes, bank deposits, and every payment instrument that has ever existed, and it is an argument about politics rather than about technology. ## Right of reply **Prof. Anneliese Obuya-Sandström, payments economist** (Objects to the framing and asked to say so at length. Printed unedited.): > Your facts are right and your headline does something I want to argue with. > > 'Your card already does everything you are afraid of' is true and it is also the oldest move in the book: answering a worry about a new thing by pointing at an old thing nobody consented to either. That is not reassurance. It is two problems. > > The distinction that matters is not how many parties see a transaction. It is who can refuse one, and on what basis. > > Today a private issuer can decline a payment, and does, for its own commercial reasons — you have probably had a card declined abroad by an algorithm you cannot appeal to. That is bad, and it is not much discussed, and your piece is right that it is already here. > > But a central-bank instrument is not a private issuer. If refusal were ever built into it, refusal would be sovereign rather than commercial, and the appeal route would be political rather than a phone number. That is a real difference and your framing flattens it. > > So: read the offline clause, yes. It is the best thing in the document and you are right that nobody quotes it. But do not let it do more work than it can. Offline capability is a property of a wallet. Refusal is a property of a rulebook. They are not the same document and they will not be amended by the same people. --- They Buried is a satirical newspaper. Every story, source, document and person in it is invented. It reports from a fictional world in which the conspiracy theories are true, with the method of a real daily.