Who Controls Your Digital Money? A Five-Layer Test for Bitcoin, Stablecoins, and CBDCs

Imagine this.

You and a friend each buy $1,000 of Bitcoin.

You move yours to a private wallet. Your friend leaves his on an exchange.

A year later, you lose your phone. If your recovery information is safe, you can restore the wallet. If both the wallet access and recovery information are gone, there may be no company that can reset it for you.

Your friend forgets his exchange password. The exchange may be able to verify his identity and restore account access.

Now change the problem. The exchange pauses withdrawals.

Your friend can see Bitcoin in his account, but he may have to wait before moving it. You, if you still control your keys, do not need the exchange’s permission.

Same Bitcoin. Different control.

This is the practical question behind digital money: when something goes wrong, who can move the money, stop the money, recover access, or decide what happens next?

Recent reader discussions around self-custody keep returning to this tension: people worry about exchanges failing, but they also worry about losing seed phrases, making wallet mistakes, or leaving assets inaccessible to family.

The policy world is now asking a similar question at a much larger scale. On September 24, 2026, the Federal Reserve proposed rules for Board-supervised payment-stablecoin issuers, including reserve, capital, risk-management, and reserve-safekeeping requirements.[1]

Digital money may run on software. Trust still depends on where control and responsibility sit.

Digital money does not remove control.
It relocates control across different layers.

This article uses five layers to find those control points: rules, issuance, custody, settlement, and law.

This is Part 5 of The Contexta’s Digital Money series.

The Five-Layer Control Test

“Centralized” and “decentralized” are useful labels. They are not enough for everyday problems.

A better question is: who controls each layer, and who answers when that layer fails?

  1. Rules: Who decides what counts as a valid transaction?
  2. Issuance: Who creates or destroys units?
  3. Custody: Who controls the keys or account?
  4. Settlement: When is a payment economically and operationally complete?
  5. Law: Who handles fraud, insolvency, disputes, and user protection?

Figure 1. Five Layers of Control in Digital Money. The Contexta framework for comparing Bitcoin, stablecoins, and CBDCs.

LayerControl questionFailure question
RulesWho can change or reject the rules?What happens after a bad upgrade or governance conflict?
IssuanceWho creates or redeems units?Can supply or redemption promises fail?
CustodyWho can move, freeze, or recover funds?Who bears loss after theft, lost keys, or account failure?
SettlementWhat makes a transfer final?Can technical finality conflict with commercial or legal finality?
LawWhich institution has authority?Who resolves insolvency, fraud, sanctions, or disputes?

The Contexta Original Asset: The Control–Failure Map.

A system can be open at one layer and concentrated at another. That is why the same asset can feel decentralized to one user and highly intermediated to another.

Bitcoin Distributes Protocol Control — but Custody Can Re-Centralize It

Bitcoin has no central issuer.

Its protocol is open-source. Bitcoin.org notes that developers cannot force users to accept a software change; users, node operators, miners, and businesses ultimately decide what software they run and what rules they accept.[2]

That separates protocol control from company control.

An exchange can fail without changing Bitcoin’s 21-million supply rule. A custodian can freeze an account without changing the Bitcoin protocol. A wallet provider can disappear while the network continues operating.

But custody changes the practical experience.

If you hold your own keys, you control access. You also carry recovery risk. If an exchange or custodian holds the keys, recovery and support may become easier, but control becomes more concentrated.

The protocol may be distributed while the user experience is centralized.

Stablecoins Put a Private Issuer Between the Token and the Dollar

Now imagine a client sends you $500 in a dollar stablecoin.

Your wallet shows “$500.” That feels simple. But suppose you need actual dollars to pay rent tomorrow.

Can you always turn those tokens into $500? Who promises that conversion? What assets are sitting behind the token if many people want their dollars back at the same time?

Those questions lead to the issuer and its reserves.

A dollar stablecoin can move on a public blockchain, but the token is still a private liability.

The key questions are not only “Which chain does it use?” They are:

  • Who issues and redeems the token?
  • What assets back it?
  • Where are those assets held?
  • Can the issuer freeze or block an address when law requires it?
  • What happens during a redemption surge?

The United States is now turning those questions into operating rules. The GENIUS Act became law in July 2025, creating a federal framework for payment stablecoins.[3]

On September 24, 2026, the Federal Reserve proposed implementation rules for Board-supervised issuers. The proposal includes full backing with specified high-quality liquid assets, standardized capital requirements, risk-management standards, and rules for firms that safeguard reserve assets.[1]

This is the important distinction:

A stablecoin can use decentralized settlement rails while relying on centralized issuance, reserves, redemption, and legal compliance.

The blockchain is one layer. The issuer is another.

CBDCs Centralize the Liability — Not Necessarily Every Service

Imagine buying coffee with a future digital euro.

A natural question is: does the central bank now know which café you visited?

That question is more useful than asking whether a CBDC is simply “centralized.” It forces us to separate who issues the money from who operates the wallet, who sees customer information, and what payment data reaches the central infrastructure.

A central-bank digital currency would be a direct form of public digital money.

That does not automatically mean the central bank must operate every wallet or inspect every purchase.

The proposed digital euro illustrates the difference between public liability and private distribution.

The ECB says users would access the digital euro through a bank or public intermediary. For online payments, payment service providers would still know customer identities for compliance purposes, while the Eurosystem says it would not be able to directly link transactions to specific individuals. Offline payments are being designed for cash-like privacy.[4]

The project is moving beyond concept studies. The ECB has selected 36 payment service providers for a pilot planned to begin in the second half of 2027. A potential first issuance remains targeted for 2029 if the necessary EU legislation is adopted.[5]

So “CBDC = central bank sees everything” is not a sufficient description. Privacy, intermediation, holding limits, offline use, and dispute handling depend on the final architecture and law.

Technical Finality Is Not the Same as Legal Finality

Imagine scanning the wrong QR code and sending $100 to the wrong person.

Your app may say “confirmed.” You have a different question: can I get it back?

Those are two different problems.

A network can confirm that a transfer happened.

That does not settle every question about ownership, fraud, insolvency, or commercial obligation.

With Bitcoin, there is normally no central operator that can reverse a confirmed payment. With a stablecoin, an on-chain transfer may be final while the issuer still controls redemption or can act on specific addresses under its legal framework. With a CBDC, technical settlement would sit inside a formal public-law and payment-law structure.

The BIS argues that trustworthy money depends on more than transaction speed. It emphasizes singleness, elasticity, integrity, interoperability, and a trusted settlement anchor.[6]

Code records what happened.
Institutions decide what the transfer means when something goes wrong.

Control Can Move Without Changing the Asset

The same asset can produce different control structures depending on how a person uses it.

AssetUser setupWhere control concentrates
BitcoinSelf-custodyUser keys and recovery process
BitcoinExchange custodyExchange account and custodian
StablecoinSelf-hosted walletUser keys + stablecoin issuer
StablecoinExchange accountExchange + issuer + reserve system
CBDCBank or PSP walletPublic liability + private access layer
CBDCOffline device, if implementedPublic rules + device-level payment control

This is why custody is not a side issue. It can change the effective control model without changing the underlying asset.

What Changed in 2026?

1. Stablecoin governance is becoming operational

The debate is moving from “Should stablecoins be regulated?” toward reserve composition, redemption, capital, custody, and failure management. The latest U.S. proposal is one example.[1]

2. CBDC design is becoming more concrete

The digital euro has moved into technical preparation for a pilot. Privacy and offline use are now engineering and rulebook questions, not only policy slogans.[5]

3. Tokenization is widening the comparison

The BIS’s 2026 work increasingly compares stablecoins with tokenized deposits and tokenized central-bank money. Its preferred architecture remains a two-tier monetary system anchored in central-bank money, while recognizing the potential of programmable and tokenized infrastructure.[6]

4. Cross-border rules remain uneven

The Financial Stability Board’s latest implementation review found progress but continuing gaps and inconsistencies across jurisdictions, especially for global stablecoin arrangements.[7]

The Real Test Is Accountability

Digital money often promises fewer intermediaries.

The deeper question is what happens after failure.

  • Who restores access after an account problem?
  • Who covers a reserve shortfall?
  • Who fixes a software defect?
  • Who handles a disputed payment?
  • Who has authority during insolvency?
  • Which law applies across borders?

A decentralized network can remove one point of control. It can also remove a recovery path.

A centralized issuer can respond quickly. It can also concentrate power and operational risk.

Good governance does not make control disappear.
It makes control, risk, and responsibility visible.

What to Watch Next

1. Reserve Rules

Which assets are permitted to back major stablecoins, and how liquid must those reserves remain?

2. Redemption Under Stress

Can holders redeem at par during a surge in withdrawals?

3. Custody Concentration

Does adoption make users increasingly dependent on a small number of exchanges, custodians, wallet providers, or payment firms?

4. Privacy by Design

What can the central infrastructure see, what can intermediaries see, and what information remains on the user’s device?

5. Failure and Recovery

Who bears loss after theft, insolvency, a software failure, or a mistaken payment?

6. Interoperability

Can stablecoins, bank deposits, tokenized assets, and public digital money move across compatible systems without creating new silos?

The Main Idea

Bitcoin, stablecoins, and CBDCs are not three versions of the same digital-money system.

Bitcoin distributes protocol control but can re-centralize at the custody layer. Stablecoins use digital rails but depend on private issuers, reserves, and redemption. CBDCs centralize the monetary liability while potentially keeping distribution and user services in a two-tier system.

Digital money does not remove control. It changes where control sits.

The useful question is not “Is it decentralized?”

Ask instead: Who controls each layer, what can they do, and who answers when it fails?

Part 6 examines the next question: How could stablecoins expand the global reach of the U.S. dollar?

Series Position

This is Part 5 of 8 in Crypto’s Next Phase.

Previous: Why Has Crypto Struggled to Become Everyday Money?

Next: How Stablecoins Could Expand the U.S. Dollar’s Global Reach

Related Reading

Key Terms

Governance (noun)
The rules and institutions used to make decisions and assign responsibility.
Example: Governance determines who can change a digital-money system.

Issuer (noun)
The organization that creates a financial asset or token.
Example: A stablecoin issuer manages issuance, reserves, and redemption.

Custody (noun)
The safekeeping and control of an asset or its keys.
Example: Custody can change the practical control model of Bitcoin.

Redemption (noun)
The exchange of a token for the money or asset it represents.
Example: Stablecoin trust depends partly on reliable redemption.

Legal finality (noun phrase)
The point at which a payment has settled an obligation under applicable law.
Example: Blockchain confirmation and legal finality are not always the same.

Sources

  1. Federal Reserve Board requests public comment on two proposals related to payment stablecoin issuers under the GENIUS Act — Federal Reserve Board, September 24, 2026.
  2. Bitcoin FAQ — Who Controls the Bitcoin Network? — Bitcoin.org.
  3. The President Signed into Law S. 1582 — The White House, July 18, 2025.
  4. FAQs on the digital euro — European Central Bank, updated 2026.
  5. FAQs on the digital euro pilot — European Central Bank, updated September 15, 2026.
  6. Anchoring Trust in Money: Innovation Beyond Stablecoins — Bank for International Settlements, Annual Economic Report 2026.
  7. Thematic Review on FSB Global Regulatory Framework for Crypto-asset Activities — Financial Stability Board.

Source status and current policy/project information checked September 27, 2026. Regulatory and CBDC designs may change. The Five-Layer Control Test and Control–Failure Map are The Contexta analytical frameworks. This article explains monetary governance and payment infrastructure.