Currently, when you receive a note, there is no guarantee that it is not empty - and even if it is verified after you receive it. If the trace has been erased in a manner that is not obvious, once the issuer signs, you're out of luck. It could still be spent before you try to redeem it. The design doesn't need to be changed at all, but the security before and after circulation should be beefed up, as I suggested in my previous post. The more that issuance and redemption restrictions are automated, the better. It doesn't matter who the issuing (or de-issuing) party is, as long as notes are guaranteed to contain the funds while in circulation.