Tokenization is often presented as a neutral technical operation: take some right, credential, object, or claim, represent it on a ledger, and make its transfer easier to verify. Sometimes that is exactly what it is. A warehouse receipt, a share in a company, or a ticket can benefit from a reliable digital record. The fact that a thing has a token does not, by itself, make the thing morally suspect.
The danger begins when representation is confused with permission. If a token can be transferred, fractionalized, pledged, priced continuously, and executed by software, it can tempt its designers to treat every human good as though it were an asset. Catholic social thought starts elsewhere. A person is never a thing to be owned, and certain goods are not merely valuable objects but practices, relationships, and conditions of human dignity. Their value cannot be exhausted by a market price or improved by making them liquid.
A boundary, not a ban on markets
“Never tokenize” needs careful definition. It does not mean that no record may be kept about a person, that no institution may use a digital credential, or that every exchange involving a human interest is forbidden. A university may issue a tamper-resistant diploma. A city may publish a verifiable transit pass. A worker may hold a portable certification. The token can be a tool for recognition while the underlying good remains governed by law, professional judgment, and the person’s continuing freedom.
The red line is making a person, a basic power of conscience, or a constitutive common good into a transferable asset or a speculative claim. A token is not simply a container. Its affordances alter what can be demanded, exchanged, and automated. If a design makes a human being collateral, turns consent into a permanently alienated license, or lets the holder of a token exercise public authority as private property, it has crossed that line even if the code is transparent and the transaction is voluntary in a narrow sense.
A rights-and-affordances test
The word “token” is therefore not the test. Before approving one, ask what legal power it conveys and what practical power its affordances create: Can it be pledged or resold? Can the subject refuse, withdraw, and exit without losing a basic right? Who may revoke it, on what notice, and with what appeal? Does it expose a person or enable a third party to coerce them? What remedy remains if the code, issuer, or key fails? A diploma or transit ticket may answer these questions differently from a bearer claim on bodily access, even if both are represented by tokens.
This test also keeps the boundary from becoming a blanket ban that protects only those who already have alternatives. A portable benefit or carbon allowance may improve access or bargaining power when law fixes its purpose, limits resale, and protects non-participants; a non-transferable credential may still enable surveillance or arbitrary exclusion. The relevant comparison is not liquidity versus purity but the actual alternatives: who gains portability, who bears monitoring, and whether expiration, data minimization, human review, and a remedy improve their position. Comparative evidence across benefits, labor, health, land, and carbon systems is not supplied here, so policy conclusions remain jurisdiction-specific prudential judgments.
Persons are not property
The first category is the most obvious and the one most easily evaded by euphemism. A person cannot be tokenized as an asset, bought in fractions, inherited by a wallet, or represented by a transferable claim to his or her labor, location, reproduction, or obedience. The history of slavery shows why legal language that treats human beings as property is not a harmless abstraction. The Universal Declaration of Human Rights, Catholic teaching on the dignity of the person, and modern labor law all reject that conversion.
A “human token” may be marketed instead as access, participation, or fractional ownership. The vocabulary does not solve the problem. If the token holder can decide where someone lives, extract an indefinite stream of compulsory work, sell a claim on a child, or veto a person’s exit, the arrangement is domination by another name. The prohibition must apply to the rights and powers conveyed, not merely to whether the token’s metadata contains a legal name.
This also excludes speculative claims on a person’s future identity or biography. A person’s consent to one project today cannot make a stranger the owner of every future use of that person’s image, voice, memory, or relationships. Privacy and publicity can be regulated interests, and particular licenses can be contracted. The human subject remains more than the licensed use.
Sacraments cannot become access tokens
Catholic sacraments are not scarce consumer products and are not services for which a buyer acquires a proprietary entitlement. Baptism, the Eucharist, reconciliation, anointing, confirmation, marriage, and holy orders belong to the sacramental life of the Church, not to a market for programmable access. The Church regulates their celebration for reasons of doctrine, valid matter and form, pastoral care, and ecclesial communion; those conditions are not pricing mechanisms.
A parish can use a database to schedule catechesis or a cryptographic credential to protect a record. It may accept an offering, while Catholic doctrine distinguishes free offerings from the commercial sale of spiritual things. But no token can make grace the private property of its holder, guarantee sacramental efficacy through payment, or turn admission to the altar into a secondary market. “Proof of participation” is not ownership of a sacrament.
The objection that tokens could increase access deserves a practical answer. Better scheduling, translation, safeguarding, and recordkeeping may indeed serve the faithful. The right architecture should therefore tokenize administrative facts only when necessary, minimize personal data, permit pastoral correction, and leave authority with the competent ecclesial community. It must not imply that a liturgical act is valid because a ledger says so or that a person who lacks a credential lacks a place in the Church.
Civic authority is a public trust
Political power is another good that cannot be privatized by token design. A vote, a judicial office, a public license, or a person’s basic civic standing is not a bearer asset to be traded on an exchange. Democratic authority is exercised under a constitution and for the common good. It cannot be acquired by a wealthy wallet, rented to an anonymous principal, or permanently attached to a token that circulates without accountability.
This does not prohibit digital voting credentials, public-benefit cards, or transferable tickets for a public event. It requires that the credential remain subordinate to equal citizenship and due process. A voting system needs secrecy, accessibility, recounts, remedies, and accountable institutions. A token whose transfer is visible on-chain may make a vote more auditable in one dimension while making coercion or vote buying easier in another.
The same principle applies to public offices and regulatory permissions. A market for carbon allowances can be a policy instrument under a lawful cap; it does not follow that a token holder owns the atmosphere or may purchase immunity from health and safety law. A professional license can be digitally verified; it cannot be detached from competence, current supervision, and the public’s right to protection. Civic authority is delegated, not alienated.
Consent is an act, not a transferable object
Consent makes a particular action permissible under particular conditions. It is not a durable commodity that can be sold once and exercised forever by whoever later acquires the token. A consent token for medical treatment, intimate contact, data disclosure, or political communication would be dangerous precisely because it appears precise. The person must be able to understand the request, refuse it, withdraw when withdrawal is possible, and receive care without retaliation.
A signed record can document that a decision occurred. It cannot remove the need for a present, informed decision. Nor can smart-contract execution determine whether a person was pressured, intoxicated, deceived, afraid, or dependent. The strongest cryptographic proof of a signature is not proof of a free act. Designers should therefore treat consent records as revocable, contextual, purpose-limited, and reviewable by humans, not as bearer instruments.
Bodily access is not a leasehold
Human bodies are not public infrastructure and cannot be converted into perpetual access rights. This covers organs, reproductive capacity, intimate images, biometric identifiers, location in a home, and physical presence. A person may enter a carefully bounded agreement involving a service or a donation, subject to law and ethics. That agreement does not make the body, or an indefinite claim upon it, alienable property.
Here the language of “yield” is especially revealing. A token promising revenue from future bodily access can invite investors to treat vulnerability as an income stream. Poor people will bear the pressure to sell what the affluent can buy. Catholic teaching does not require denying every form of compensation or donation; it does require attention to coercion, solidarity, and the integrity of the person. The safest technical default is no bearer claim, no automatic enforcement, no secondary market, and no presumption that refusal is a breach.
Justice cannot be fractionalized
A final category is justice itself: the right to a fair hearing, a remedy, equal treatment before the law, and the material conditions needed for participation. A token may record a settlement payment or represent an assignable civil claim where applicable law permits. Those transactions do not erase the underlying truth of a wrong or exhaust the moral duty to repair it. Legal consequences differ: some civil claims can be released, assigned, or resolved; criminal and regulatory liability, non-waivable rights, and duties owed to the public follow different rules across jurisdictions. A market may transfer a legally recognized interest without turning accountability itself into a speculative asset.
Nor should basic necessities be designed as collateral claims that can be called in at the moment of greatest vulnerability. Housing credentials, food assistance, identity documents, and access to essential health care may require administration and fraud controls. Making them bearer assets can create theft, exclusion, surveillance, or a market in necessities. Solidarity sometimes uses prices, but it never lets price exhaust the requirements of justice.
Strong objections
“If adults agree, why should the protocol intervene?”
Consent is morally important, but it is not the only question. Catholic social teaching asks whether an agreement respects the person, whether background conditions make refusal realistic, and whether third parties bear unpriced harms. A starving worker’s acceptance of an indefinite claim on future labor is not made just by putting it on a blockchain. Neither is a vote purchase made legitimate by a signature. Freedom needs law, bargaining power, and social conditions that make a meaningful “no” possible.
“A token is only a representation; the law can define its limits.”
Correct in part. Representation is not ownership, and good law can prevent many abuses. But an architecture also distributes practical power. Instant transfer, collateralization, composability, and irreversible execution create incentives that a disclosure cannot cancel. The law must therefore govern both the legal claim and the system’s affordances. A token that technically can be traded but legally cannot be may still generate confusion and speculative pressure. Prohibition of the wrong instrument can be a legitimate design requirement, not hostility to innovation.
“Non-transferability makes systems inefficient.”
Sometimes it does. Non-transferability can reduce liquidity and raise administrative costs. Those are real tradeoffs, not decisive arguments. A market is efficient only relative to a legitimate objective; it is not efficient to trade away due process in order to settle faster. Designers should ask whether a non-transferable credential, escrow with human review, or a revocable permission achieves most of the benefit without creating an asset that can be weaponized.
Implications for markets and design
A serious tokenization review should begin with the good, not the ledger. Is this a thing that can legitimately be owned, or a relationship and authority that must remain accountable? Who can revoke it? Can a person exit without losing basic dignity? What happens when a court, pastor, doctor, family member, or community must interpret circumstances that code cannot see? Who bears the cost of fraud, exclusion, and error?
The answers suggest concrete controls: separate credentials from entitlements; prohibit secondary markets for sensitive permissions; use purpose limitation and data minimization; build in expiration and appeal; preserve off-chain remedies; require institutional accountability; and test for coercion, discriminatory access, and concentration of power. A “soulbound” label is not enough if an administrator can still arbitrarily erase a person, while a transferable token is not automatically wrong if it represents an ordinary ticket. The moral object and the surrounding governance matter.
Sources and qualifications
This argument draws on the human dignity and common-good principles found in Gaudium et Spes, the social teaching on work and the danger of treating labor as a commodity in Rerum Novarum andLaborem Exercens, and the account of private property’s social function in Centesimus Annus. The Catechism’s treatment of sacramental economy, justice, consent, and respect for bodily integrity supplies relevant distinctions, but none of these texts directly addresses blockchain tokens. The application here is a prudential design judgment, not a new dogmatic definition.
Economic qualifications matter as well. Elinor Ostrom’s work warns against assuming that every shared resource is best governed by either a state or a market; Alvin Roth’s market-design work shows that rules and matching institutions shape outcomes; Karl Polanyi explains why social protections arise when labor and other fundamental realities are treated as fictitious commodities. These sources do not entail one universal policy. They support examining institutions, power, and external effects rather than treating tokenization as neutral plumbing.
Synthesis: liquidity has a rightful place
Catholic technology need not fear every ledger or every market. It should fear the category error that makes whatever can be represented, priced, and transferred into property. Persons are not property. Sacraments are not access licenses. Civic authority is not a portfolio. Consent is not a bearer instrument. Bodies are not leases. Justice is not a tradable release.
The most humane system will often be less liquid than the most profitable one. That is not a technical failure. It is a recognition that some goods are protected precisely because they belong to a realm of freedom, obligation, and communion that no market can own. Tokenization is worthy of trust only when it serves that order instead of pretending to replace it.
Source Notes
The Council’s account of human dignity, conscience, social responsibility, and the common good against which tokenization is evaluated.
The Church’s teaching on sacramental life, justice, consent, bodily integrity, and respect for persons.
Catholic teaching on labor, property, worker dignity, and the limits of treating human work as a mere commodity.
Catholic social teaching on private property’s social function, economic freedom, and the common good.
International reference for equal dignity, freedom, and the prohibition of treating human beings as property.
The Church’s account of the person’s priority over the measurable product of work and the limits of treating labor as a commodity.
Market-design research showing how allocation and matching rules can reflect legitimate constraints and purposes beyond highest bids.
A historical account of labor and other human realities as fictitious commodities requiring social protection.
Editorial revision note
This essay completed one self-editing, cross-essay consistency, and strongest-criticism pass. Its controlling thesis was preserved while objections, qualifications, evidence limits, and practical consequences were strengthened.