Cashu’s Offline Bitcoin Tap-to-Pay Demo Revives Debate Over Untraceable Transfers

A pseudonymous developer known as Calle has demonstrated a near-field communication feature allowing Bitcoin-backed “ecash” tokens to be transferred between two phones with a single tap and no internet connection, according to Crypto Briefing. The demonstration, dated 7 July, showcases the Cashu protocol’s ability to move value entirely offline and without leaving a trace on any public ledger.

For an audience of policymakers and institutional risk officers, the development is notable less for its technical novelty than for what it implies about the growing gap between offline, privacy-preserving payment rails and the transaction-monitoring frameworks that underpin anti-money-laundering regimes across the UK and European Union.

Blind signatures and the traceability question

Cashu is an open-source protocol that issues ecash tokens representing Bitcoin or Lightning Network deposits held at entities called “mints”. Users deposit Bitcoin and receive tokens that reside locally on their device, functioning much like physical cash. Near-field communication, the same technology underlying Apple Pay and contactless bank cards, allows tokens to be beamed from one phone to another without any network connection or blockchain confirmation.

The protocol relies on blind signatures, a cryptographic technique conceived by David Chaum in the 1980s, which lets a mint verify that tokens are legitimate without knowing who is spending them or where. That stands in sharp contrast to conventional on-chain Bitcoin transfers, which leave a permanent, publicly auditable record — a feature that has historically made Bitcoin more traceable than cash, not less.

Counterparty trust replaces network settlement

The offline capability addresses a genuine limitation of existing crypto payment rails. Lightning Network reduced settlement times to near-instant with minimal fees, but still requires both parties to be online. Cashu’s tokens can change hands in environments where no connectivity exists at all.

That convenience comes with a structural trade-off. Unlike on-chain Bitcoin, where the network itself guarantees settlement, Cashu users must trust the mint that issued their tokens. Should a mint go offline permanently or act in bad faith, holders’ tokens could become worthless — a counterparty risk more akin to holding an IOU than holding Bitcoin outright, and one that sits outside the custodial safeguards typically demanded of regulated payment firms.

An expanding ecosystem with no listed asset

The tap-to-pay feature builds on Numo, a free Android application launched on 24 February that turns a merchant’s phone into an NFC payment terminal without specialised hardware, using Cashu ecash. Numo can automatically route received ecash into a merchant’s Lightning wallet, and is distributed as a downloadable APK rather than through official app stores.

Cashu itself has been in development since Calle first introduced the protocol in October 2022, and supports offline transfers via Bluetooth and QR codes in addition to NFC. Crucially, Cashu has no associated tradable token or market-listed asset — it functions as an open-source framework rather than a project with equity or coin holders, which limits the avenues supervisors typically use to apply commercial pressure or licensing conditions.

That structure — decentralised, mint-operated, and untethered from any single corporate entity — mirrors tensions already visible elsewhere in the sector, where privacy-preserving or offline-capable tools outpace the supervisory categories regulators use to assess them.

Read more: Banks Pivot From Stablecoin Issuance to Payment Rails as USDGO Tops $500m