Send lawyers, guns and Bitcoin passwords

One of the arguments about the transition to a cashless, less-cash or contact-free economy is that such an economy marginalises people who are trapped in the cash economy and is very bad for them. I’m not sure it’s bad for them, though. I don’t want people to be marginalised, of course, but the people who are trapped in the cash economy are the people who end up paying the highest costs. Just to pick one random news story this week (and I could have chosen many), here’s a case from China in which a man who didn’t trust banks buried his life savings underground five years ago. When he dug it up, a quarter of it was beyond repair and he lost 500,000 Yuan.

Of course, there are people who prefer to exist in a cash economy for reasons other than a fundamental lack of trust in the international financial and monetary system. Criminals and corrupt politicians, for example. Cash works rather well for them, but can sometime be quite inconvenient. For remote purchasing, for example. Only yesterday I read about two freelance pharmaceutical intermediaries who were arrested in California after police caught them dumping nearly $1 million in cash which was intended to buy marijuana some distance from their main place of residence.

(If you are wondering why they didn’t just Venmo or Square Cash the money along I-5, remember that the state of California imposes a 15% excise tax on licensed cannabis so the cash-based black market avoids tax. The state estimates the regulated market has captured less than one-third of activity, once again suggesting to me that the primary function of $100 bills is tax evasion.)

“Well, we’ll see how smart you are when the K9 come!” / I got 99 problems but the Bitcoin aint one.

California, incidentally, has a huge $100 bill problem right now. The coronavirus has disrupted supply chains so that drug dealers in the USA cannot use the normal trade-based cross-border money laundering pathways to pesos. Hence, Hugh quantities of dollars are piling up outside the financial system.

(In other news, the Fed reports that as of 8th April there are $1.84 TRILLION of Federal Reserve notes in circulation, around $200 billion more than this time last year.)

Now, I can understand why the disconnected, marginalised poor in remote parts of the world eschew the benefits of electronic payments for the currency of choice for the global criminal on the go, the $100 bill. But in California? Don’t they have Bitcoin there? Given the huge hassle of counting, bagging and transporting the Benjamins, why didn’t these entrepreneurs simply buy a few Bitcoins, drive to the drop zones and press the “send” button when the goods are in from of them. It only takes an hour or so for the half a dozen confirmations that the wholesale distributors would want to see, and then Bob’s your uncle. 

But no, they packed up the greenbacks and set off in their car.

Surely, I have to reflect, if drug dealers won’t use Bitcoin, then who will? There must be many people who don’t want to carry around huge wads of cash for such purchases. Why aren’t they in crypto? What about the millions of people who buy things that they would prefer not to show up on their credit card statements? Remember the newspaper story about noted England rugby player Lawrence Dallaglio’s credit card being used in a brothel in London? A police raid on the establishment uncovered burner phones, diaries, POS terminals, a bag filled with bank cards and receipts (what a well-run organisation!) showing that customers were were paying between £80 and £100 for a gram of coke and… no Bitcoin hard wallets or passwords written on Post-Its.

(If I was off to brothel and wanted to buy some cocaine while I was there, I would certainly be at the very least reticent to use my credit card, even if the establishment was PCI-DSS compliant, which I’m pretty sure a bag full of bank cards in a plastic bag in a toilet is not.)

Anyway, back to the point. How can it be more convenient to cart around great wodges of cash than to zip some magic internet money through the interweb tubes? That’s not to say that Bitcoin is the perfect solution for criminal on the go, though. For example, in a recent Irish case, a drug dealer who wisely decided to invest in cryptocurrency rather than the euro amassed a fortune of €54 million in digital loot. He hid the passwords to the digital wallets holding his ill-gotten gains with his fishing rod. Unfortunately, the fishing rod has “gone missing” so while the Irish Criminal Assets Bureau (CAB) has in theory confiscated the 12 wallets (containing 6,000 bitcoin), in practice they cannot get hold of them.

(On the other hand, thanks to people such as Chainalysis, the Irish police can at least find out who sent money to the wallet and where money from the wallets was sent to, which ought to help them further their investigations.)

The noted software entrepreneur John Macafee said, on a recent episode of the Breaking Banks radio show that I was co-hosting, said something similar. He said that Bitcoin is no good for this sort of thing because it can be traced (he has previously called Bitcoin “ancient technology”) and he advised listeners to use Monero instead saying that it hs 99% of the “dark” market right now and also that he is launching a distributed exchange for Monero in the near future. A recently published Rand Corporation study shows that Bitcoin and Monero dominate the black market with Zcash (the other leading privacy coin) nowhere to be seen. 

(The price of Monero has roughly halved over the last year so I guess that there just aren’t that many criminals out there right now, but who knows. )

I should note, though, that the issue of more private versions of digital currencies is not of exclusive interest to criminals and corrupt politicians. There are many people who are engaged in perfectly legal businesses (eg, selling weed in Colorado, performing adult services in Nevada or trying to buy food in Venezuela) that are still excluded from the global financial system and are therefore driven to look for alternatives.

Venezuela is an interesting example. It used to crop up in talks by Bitcoin fans although restaurants, shops, supermarkets and even the street vendors today accept – and prefer – dollars in cash or by bank transfer. You can pay by Zelle in supermarkets there! A Columbian start up, Valiu, has just launched to provide a USD “stablecoin” for the Venezuelan market so perhaps that might eat into the bank transfer market but I wouldn’t bet on it.

What, no Bitcoin?

What’s the niche for cryptocurrency then? A quick investigation tells me that the market-leading porn site accepts four cryptocurrencies, three of which I’ve never heard of, and not Bitcoin, Monero or Zcash although that may change soon as a number of campaigners have sent letters to Visa, Mastercard, Amex and all demanding that they stop processing payments for porn. Mastercard said that they were investigating claims made the and would “terminate their connection to our network” if illegal activity was confirmed.

If the porn people won’t use Bitcoin, then who will? Maybe taking payment cards away from sites such as PornHub will stimulate evolution in user journey and ease of use for Monero et al and push them into the mainstream at last.

(It won’t, of course. What will actually happen is that the porn and gambling guys will get together and launch an over-18 version of Libra which, as it will be the only way to pay for these services, will soon become the currency of choice for adult services.  You read it here first. Pretty soon, the average person will have a digital wallet full of Facebucks and Buttbucks and precious little else.

Margaret Attwood, Kenneth Rogoff and William Gibson (and me)

A few years ago I was involved in a series of Twitter exchanges about the relationship between cash and anonymity that stimulated me to write a blog post on that topic and that debate (see “It doesn’t have to be the handmaid’s tale” from September 2016). Some more recent exchanges on the same topic made me think about revisiting and revising that post and exploring some of the ideas in further in light of recent discussions (eg, Libra and central bank digital currencies).

The root of these debates is, of course, that many in the Bitcoin community see Bitcoin’s sort-of-anonymity as an important characteristic because it defends the individual against state power and they berate me for wanting to replace cash “in circulation” with a digital alternative. Cash, they claim, is freedom, and they are correct about this: as cash is uncensorable, you have the freedom to buy what ever you want with it.

So should we replace cash with an anonymous cryptocurrency or digital currency? There are many people who I greatly respect who think the former. For example, in his presentation on ’The Zero Lower Bound and Anonymity”, Kocherlakota tends toward some form of cryptocurrency to replace fiat currency rather than a central bank digital currency and one of the reasons for this is his (entirely reasonable) concern about anonymity. This point is illustrated by a literary reference to Margaret Attwood’s “Handmaid’s Tale”, in which a theocratic American government (the “Republic of Gilead”) has taken away many of the rights that women currently enjoy. One of the tools that this government uses to control women is a ban on cash. In Gilead, all transactions now routed digitally through the “Compubank”.

The Handmaid's Tale

It was many, many years since I’d read “The Handmaid’s Tale” so I went to my bookshelf to dig it out and re-read that part. The narrator does indeed talk about how the evil junta in charge of that future America took over and says that it would have been harder if there had still been paper money. But the truth is, I don’t see how. North Korea has everyone using paper money and virtually no cards. Denmark has virtually no paper money and everyone uses cards (and phones). To be frank, in the modern world, I don’t think cash is that closely related to dictatorship.

The point I wanted to make here, though, is that it is wrong to present the only two alternatives as total surveillance and anonymity. I simply do not accept that the alternative to the unconditional anonymity of cash and the crime that goes with it is a dystopian, totalitarian nightmare. That’s only one way to design a circulating medium of exchange and it’s not the way that I would design it. I would opt for something along the lines of a universal pseudonymous mechanism capable of supporting an arbitrary number of currencies, a Mondex de nos jours, an M-PESA with go-faster stripes. In a world where there are completely, unconditionally anonymous payment mechanisms in widespread use there’s no way to stop very bad people from using them to do very bad things, so I’d prefer a world in which there are pseudonymous mechanisms that defend against routine surveillance and petty intrusion but allow societies legitimate interests to protect against crime.

Does this mean that anonymous mechanisms should be banned? Probably not, for the good reason that it would be impossible to do so. More likely would be a situation shown in the diagram below where there is an anonymous layer that has a pseudonymous layer on top of it and a absonymous (I made this word up) on top of that. People, governments and businesses would use the pseudonymous layer for the majority of transactions: the anonymous money would be useless for almost all transactions for almost all people since no-one would accept it. I would love to give this kind of anonymous money the generic name zerocash, after the William Gibson novel (“Count Zero”) in which one of my all-time favourite quotes about the future of money appears, a quote that more accurately describes the foreseeable future of payments than anything from IBM or the IMF:

He had his cash money, but you couldn’t pay for food with that. It wasn’t actually illegal to have the stuff, it was just that nobody ever did anything legitimate with it.

(Unfortunately, someone else had already beaten me to the name! See E. Ben-Sasson, A. Chiesa, C. Garman, M. Green,I. Miers, E. Tromer, and M. Virza, “Zerocash: Decentralized anonymous payments from bitcoin” in IEEE Symposium on Security and Privacy, SP 2014, Berkeley, CA, USA, May 18-21, 2014. IEEE Computer Society, pp.459–474 (2014). But I’ll stick to using the all lower-case zerocash to mean generic unconditionally anonymous electronic cash. The wallet that this electronic cash is stored in is an anonymous digital identity. It’s just a string of bits.)

Now, you could imagine some form of zerocash in circulation as a cash alternative but not accepted in polite society (i.e., any attempt to spend it would be regarded as prima facie evidence of money laundering and exchanges would be barred from handling it). Polite society instead decides to protect privacy through managed conditional anonymity, or pseudonymity. A pseudonymous currency that is managed by a central bank but where transactions take place on a distributed ledger is much more like “RSCoin”, the cryptocurrency that was proposed by George Danezis and Sarah Meiklejohn at UCL [Danzis, G. and S. Meiklejohn. “Centrally Banked Cryptocurrencies”, NDSS ’16, 21-24 February 2016, San Diego, CA, USA] using Ben Laurie’s “mintettes” concept. By creating a pseudonym that is bound to the zerocash digital identity, we make it useful (provided that the binding is done by someone who trusted in the relevant transactional use cases).

Why bind it in this way? Well, there is the usual privacy paradox to be dealt with here: I want my transactions to be anonymous, but everyone else’s to be not anonymous in case they turn out to be criminals. I cannot see any way round this other than pseudonymity. There are people out there (e.g., my colleagues at Consult Hyperion) that know how to design systems that work like this, so there’s nothing stop the FATF, Bank of England, or Barclays or anyone else from starting to design the future, privacy-enhancing electronic money system that we need.

In the real world, as the discussions around Facebook’s proposed “Libra” digital currency have shown, regulators will never allow zerocash. In fact, in the light of the recent FATF rules about identification for cryptocurrency transfers, they will not allow any form of transaction that does not provide full details of counterparties. They might, however, as I have suggested many times before, be prepared to allow some form of pseudonymous alternative provided that we can bind the pseudonym to real-world legal entity through trusted institutions.

Bank are of course a good place to form and maintain this binding, since they’ve already done the KYC and know who I am. So I give present my pseudonym to them and they can bind it to my “real” name to form a nym. In the example below, Barclays know who I really am, and I can present my Barclays nym where needed, but most transactions with counterparties take place at the pseudonymous layer and I can present my Vodafone pseudonym “Neuromancer” there if I want to. My counterparty doesn’t know that I am Dave Birch, only that Vodafone know who (and presumably, where) I am. For the overwhelming majority of day-to-day transactions, this is more than adequate. This layered approach (show below) seems to me a viable vision of a working infrastructure. Few transactions in the top layer (for privacy), most transactions in the middle layer, few transactions at the lower layer.

Layered model of cryptomarkets

So in this made-up example, Barclays know my “real” identity and Vodafone knows a persistent pseudonym tied to my phone number. (Of course, I could go to Barclays and choose to bind my Vodafone identity to my Barclays identity, but we don’t need to think about this sort of thing here.) I’m going to reflect on how these bindings might work in practice more in the future, but for now I want to circle back to that opening concern about losing the anonymity of cash. Here’s another version of that meme that I read in Reason magazine (“Cash means freedom”) a while back: “Cash—the familiar, anonymous paper money and metallic coins that most of us grew up using—isn’t just convenient, it’s also a powerful shield for our autonomy and our privacy”

But it really isn’t. Your privacy is being taken away because of social media, people wearing cam-shades and ubiquitous drones, not because of debit cards. And none of this has anything to do with dictatorship. I wouldn’t want to live in the America of the “The Handmaid’s Tale” whether it had anonymous payments or not. I understand the concerns of those concerned with privacy (as I am) that there might be an inevitable tendency for a government to want to trespass on the pseudonymous infrastructure in the name of money laundering or terrorism, but that’s a problem that needs to be dealt with by society, not by technology.

Look, I think we should start to consigning cash to the dustbin of history, beginning with the $100 bill, the £50 note and that affront to law-abiding people everywhere, the Swiss 1,000 franc note. There are an increasing number of people coming around to my way of thinking, including the former chief economist to the International Monetary Fund (IMF) Kenneth Rogoff, who in his book “The Curse of Cash” argued that large value banknotes should be withdrawn not only because of their use in criminal endeavours but because they prevent central banks from using their full range of monetary policy tools. If we are going to start getting rid of cash though, we need to come up with alternatives the provide levels of privacy and security determined by society as a whole, not by a few engineers.