Question
What real-world costs of the traditional "trust-based" payment model motivate a trustless electronic-cash system?
Answer
Because banks must be able to mediate disputes, no online payment is ever truly final — that reversibility raises costs, kills tiny payments, and forces merchants to distrust their customers.
Online commerce relies on financial institutions as trusted third parties. That trust model has built-in costs:
- Nothing is truly non-reversible — the institution can always reverse a payment to settle a dispute, so completely final payments aren't possible.
- Mediation raises transaction cost, which sets a minimum practical payment size and cuts off small, casual micropayments.
- Merchants must distrust customers, demanding more personal information than they'd otherwise need, and a certain fraud rate is simply accepted.
Physical cash avoids all this in person — but before Bitcoin, nothing did so over a network. The goal: a payment system based on cryptographic proof instead of trust, so any two parties can transact directly.
Go deeper:
Bitcoin: A Peer-to-Peer Electronic Cash System — Nakamoto (2008) — the primary source; the abstract states the trust-vs-proof problem in two sentences.
But how does bitcoin actually work? — 3Blue1Brown — builds the whole system from scratch, starting with why a shared ledger needs no bank.
Bitcoin — Wikipedia — history and context of the trustless-cash idea and its launch.
Note saved — thanks!
Question
What is the "double-spending problem," and why is it hard without a central authority?
Answer
A digital coin is just data, so its holder could copy and spend it twice — with no central ledger checking every payment, nothing inherently stops that.
Physical cash can't be double-spent: handing it over means you no longer hold it. A digital coin is a number that can be duplicated, so the same coin could be signed over to two different people. Banks solve this by being a central ledger that sees every transaction and decides which came first.
A peer-to-peer system has no such authority, so it needs another way for everyone to agree a coin was already spent. The key insight: the earliest spend is the valid one, and the only way to confirm a coin wasn't already spent is to be aware of all transactions — which is why they must be publicly announced and put in an agreed order.
Go deeper:
Double-spending — Wikipedia — why duplicable digital money is hard to secure, and how proof-of-work addresses it.
Note saved — thanks!