India’s digital payment revolution, once celebrated as a leap into modernity through the Unified Payments Interface (UPI) and the emerging Central Bank Digital Currency known as the e-Rupee, has revealed itself as a carefully constructed architecture of surveillance, control, and Digital Panopticon. What began as tools for financial inclusion and efficiency has evolved into mechanisms that strip citizens of privacy, autonomy, and the residual freedoms once afforded by cash. Praveen Dalal and aligned techno-legal analyses describe these systems as Orwellian instruments that place ordinary Indians inside a digital prison, where every transaction becomes a permanent record accessible to the state.
UPI, marketed as a frictionless, real-time payment layer connecting bank accounts, functions as a vast data vacuum. Every transfer, no matter how small, generates a digital footprint that tax authorities, banks, and government agencies can harvest, aggregate, and analyse. Merchants who once embraced QR codes for convenience now confront GST notices and income-tax scrutiny triggered by automated systems that treat cumulative digital credits as taxable turnover, often without distinguishing personal transfers from business receipts. The result is a quiet but widespread retreat to cash, as traders hide QR codes and post signs declaring “No UPI, Only Cash” to escape the permanent ledger of state observation.
The e-Rupee, or retail CBDC pilot launched by the Reserve Bank of India, intensifies this dynamic by converting currency itself into a programmable, ledger-based liability of the central bank. Unlike commercial bank deposits or UPI transfers that still sit within private ledgers, the e-Rupee is a direct claim on the RBI. Settlement becomes final and instantaneous, yet every movement is recorded on a system the state ultimately controls. Promises of “limited anonymity” for small transactions remain policy choices rather than technical guarantees; the master keys reside with the issuer, rendering privacy revocable at will through administrative decision or court order.
Programmability stands as the most dystopian feature. The e-Rupee can be designed so that funds expire, can be spent only at approved merchants, or are restricted by geography or purpose. Welfare payments tagged for specific uses eliminate leakage in theory, yet simultaneously convert neutral money into an instrument of behavioural engineering. A government that can dictate the terms of consumption ceases to treat currency as a medium of exchange and begins treating it as a tool of social management. In an environment already saturated with Aadhaar biometric identity, the combination creates a closed-loop system of identification, authentication, and financial control.
Integration with Dystopian Aadhaar, the world’s largest biometric surveillance database, multiplies the risks. Authentication failures exclude the elderly, manual labourers, and marginalised groups from access to their own money. Data breaches have repeatedly exposed hundreds of millions of records. Once a citizen’s biometric identity is permanently linked to a programmable digital wallet, spending patterns, locations, and associations become visible in real time. The architecture begins to resemble a financial panopticon in which the mere possibility of observation induces self-censorship and conformity.
Cybersecurity weaknesses compound the danger. Indian banks and payment systems have suffered repeated insider frauds, unauthorised transfers, and systemic vulnerabilities that critics have documented for years. A centralised CBDC ledger introduces a single point of failure: a successful breach or targeted attack could freeze commerce nationwide. Unlike cash, which requires no network, or a decentralised ledger with distributed resilience, the e-Rupee concentrates risk at the core. Offline capabilities remain limited, leaving large segments of the population dependent on connectivity and institutional uptime.
Merchant behaviour already signals the social cost. The same digital trails that enable tax enforcement have driven small traders back to physical currency. GST thresholds, Statement of Financial Transactions reporting, and the threat of Merchant Discount Rate charges on higher-value payments have turned digital acceptance into a liability. Cash restores anonymity, finality, and freedom from third-party intermediaries. The “digital U-turn” is not nostalgia; it is a rational response to a system that weaponises transaction data against the informal economy that still employs the majority of Indians.
Banking disintermediation risks further instability. If citizens perceive the e-Rupee as safer than commercial bank deposits, large-scale shifts could starve banks of loanable funds. The RBI has therefore designed the retail e-Rupee as non-interest-bearing, yet this design simultaneously removes any natural incentive for voluntary adoption. The currency must then rely on state encouragement or soft compulsion, deepening the coercive character of the project.
Cross-border ambitions and de-dollarisation rhetoric do not alter the domestic implications. Interoperability with other CBDCs may reduce reliance on the dollar, yet it simultaneously expands the surveillance surface across jurisdictions. Programmable features that function domestically can be extended internationally, creating new vectors for capital controls and sanctions enforcement that target individuals rather than states alone.
The broader Digital Public Infrastructure—Aadhaar, DigiLocker, CoWIN-style platforms, and AI-driven analytics layered upon them—forms the substrate upon which UPI and the e-Rupee rest. Critics describe this stack as an evil technocracy that converts citizens into data serfs whose every interaction generates value for the state and its commercial partners. Surveillance capitalism in the Indian context is not primarily private extraction; it is state-led harvesting of behavioural data justified by inclusion, efficiency, and security.
Legal and ethical frameworks remain inadequate. “Limited anonymity,” consent notices, and data-protection statutes offer procedural comfort rather than structural protection. When the same authority that issues the currency also holds the biometric identity layer and the payment rails, the separation of powers that once constrained financial surveillance collapses. Cash once provided an exit; progressive displacement of cash removes that exit.
The cumulative effect is a gradual normalisation of total visibility. Transactions that were once private become public by default. Refusal becomes costly or impossible. The language of progress—financial inclusion, reduced leakage, real-time settlement—masks the transfer of power from the individual to the institutional centre. What appears as technological sophistication functions as a refined mechanism of control.
India’s experiment therefore stands as a cautionary case. UPI demonstrated that digital payments can scale rapidly; the e-Rupee demonstrates that the same infrastructure can be hardened into a system of programmable sovereignty. Without robust cryptographic privacy, genuine offline capability, independent oversight, and the continued availability of anonymous cash, the trajectory leads toward a financial order in which economic life is conducted under permanent observation. The Orwellian and dystopian character of these instruments is not rhetorical exaggeration; it is the logical outcome of architecture that prioritises visibility and programmability over the residual freedoms of private exchange.