Blockstream

How tokenized deposits work: 24/7 settlement for banks

AddedAdvanced
TL;DR: A tokenized deposit is a commercial bank deposit represented as a transferable record on a programmable ledger. It stays a liability of the issuing bank, stays on that bank's balance sheet, and redeems one-for-one into an ordinary deposit. The token makes existing bank money programmable and settleable around the clock. It is not a stablecoin: a stablecoin is e-money, a claim on an issuer's pool of reserve assets, while a tokenized deposit is bank money, the same claim a customer already holds against the bank.

For a bank or treasury team weighing on-ledger money, "tokenized deposit" is the term that separates a regulated deposit from a stablecoin. The phrase has a precise meaning, and understanding what it covers, and what it leaves untouched, shapes how a bank can add programmable, 24/7 settlement without changing what its money legally is. This article is educational and is not legal or regulatory advice; product and compliance decisions should be made with qualified counsel.

Tokenized deposit: A digital token recorded on a distributed or programmable ledger that represents a deposit liability of a commercial bank, holding a one-for-one relationship with the underlying account balance. The deposit retains its legal status as a bank deposit, sits on the issuing bank's balance sheet, and stays subject to the same prudential rules and deposit-guarantee coverage as any other deposit at that bank.

Bank money vs e-money: the distinction that defines the instrument

Everything else about a tokenized deposit follows from what it is a claim on. A stablecoin and a tokenized deposit can look identical on a ledger and still be claims on entirely different parties.

A bank deposit is commercial bank money: a direct claim on the bank that holds it. When a customer holds $1 million in a checking account, the bank owes that customer $1 million, and the obligation sits on the bank's balance sheet as a liability. The customer's claim is account-based. The bank knows who holds it and records every change.

A stablecoin is electronic money (e-money): a claim on the issuer that is backed by a separate pool of reserve assets the issuer holds. The holder does not have a deposit at the issuer. The holder has a token that the issuer promises to redeem against its reserves. Under the EU framework, a token referencing a single official currency is an e-money token, regulated as e-money, while a tokenized deposit retains its classification as a bank deposit (European Banking Authority, Report on Tokenised Deposits, December 2024). For the wider family of tokens this distinction sits within, see How do businesses use stablecoins on Liquid?

Tokenizing a deposit changes the rail it moves on, from a legacy ledger to a programmable one. The deposit itself stays bank money owed by the same bank, with its legal nature untouched.

Why the distinction is not academic

The Bank for International Settlements frames the difference through the singleness of money: the property that a dollar of one bank's money exchanges at par for a dollar of any other bank's money or central bank money, with no fluctuating exchange rate between them (Garratt and Shin, BIS Bulletin No 73, April 2023).

A stablecoin circulates as a digital bearer instrument. Whoever holds the token holds a transferable claim on the issuer, and the token can trade at a market price that drifts away from par. BIS notes that stablecoins on permissionless platforms show departures from par value even in normal times, with the wedge widening under stress. The historical analog the BIS cites is the free-banking era in the United States, when privately issued banknotes were discounted by as much as 20 percent in distant locations.

A tokenized deposit, in the BIS model, does not circulate as a bearer instrument and does not involve a direct transfer of the issuer's liability between holders. Transfers are recorded at the individual bank level and settled in central bank money. A person who receives a payment from a customer of any bank knows the payment will be credited to their own account at face value. Settlement in central bank money is the feature that preserves singleness.

The mechanics, step by step

A tokenized deposit runs through four operations: issuance, transfer, settlement, and redemption. The exact plumbing differs between an intrabank and an interbank model, covered further down, but the lifecycle is the same. The on-ledger transfer step is, in effect, a private permissioned version of the payment rail a bank already operates.

1. Issuance against a real deposit

A client moves funds from an ordinary deposit account into a tokenized form. The bank debits the ordinary deposit and mints an equal value of tokens against it. No new money is created. The same dollars now exist as on-ledger tokens instead of an ordinary ledger entry, and the bank's total deposit liability is unchanged.

J.P. Morgan's deposit token (issued through its Kinexys unit) works this way: a client deposits USD into a Blockchain Deposit Account, and the bank converts the balance into a bank-backed deposit token. The funds stay inside the bank's infrastructure at every stage, and the token is a digital representation of a commercial bank deposit recorded on a blockchain (J.P. Morgan, Kinexys deposit tokens).

2. On-ledger transfer

The holder sends the token to another party on the ledger. Because the token is programmable, the transfer can carry conditions: it can require that the recipient sits on an approved list, that the amount falls under a limit, or that it executes only alongside another leg of a trade. Conditions like these are what a legacy deposit cannot carry.

In the bank-money model, the transfer does not hand the recipient a transferable slice of the sender's bank as a bearer claim. The ledger records that the sender's tokenized balance fell and the recipient's rose, and the underlying settlement reconciles those positions in bank or central bank money. The recipient ends up with a claim on their own bank, at par.

3. Atomic settlement

A programmable ledger lets two legs of a transaction settle as one indivisible event, or not at all. This is atomic settlement. Delivery-versus-payment (DvP) ties an asset transfer to its payment so neither completes without the other. Payment-versus-payment (PvP) ties two currency legs together the same way.

Atomic settlement removes the gap between execution and settlement that creates counterparty exposure in legacy rails, where a trade agreed today might settle a day or two later. Unifying payment, settlement, and reconciliation into a single on-ledger action also removes the separate reconciliation step that legacy systems run after the fact. The same mechanism is what lets a payment leg settle against a security leg in one event, a pattern covered in What are tokenized securities?

4. Redemption

The holder converts tokens back into an ordinary deposit. The bank burns the tokens and credits the equivalent value to an ordinary account, one-for-one, with no lock-up. Because the token was always a deposit at that bank, redemption is a format change on the same liability, not a sale of one asset for another.

Intrabank vs interbank models

The settlement plumbing under the four steps above depends on whether the tokens move within one bank or across several.

Intrabank modelInterbank model
ParticipantsClients of a single bankClients of multiple banks
What a transfer isA book transfer between two accounts at the same bankA transfer that crosses bank boundaries
Reserve settlementNone needed; the bank owes both sidesRequires interbank settlement in central bank reserves at each hop
24/7 capabilityAvailable now, because it is an internal book entryHarder, because reserve settlement systems are not yet always-on across banks
Status in 2026In production (single-bank deposit tokens)Early; shared multi-bank networks are being designed, not yet running at scale

An intrabank transfer is the simplest case. Both the sender and the recipient bank with the same institution, so the bank can move value between them at any hour as an internal book entry, with no other bank or reserve system involved. Single-bank deposit-token products run this way today.

An interbank transfer is harder. When tokens move between clients of different banks, the banks still owe each other, and that interbank obligation has to settle in central bank reserves, exactly as a legacy transfer does. Achieving 24/7 atomic settlement across banks depends on shared infrastructure and on reserve-settlement systems that operate continuously. Several banks are designing shared deposit-token networks to support this, but a broad production interbank network does not yet exist.

Why banks pursue tokenized deposits

Three properties drive the interest.

Round-the-clock settlement. Legacy interbank payment systems keep banking hours and close on weekends. A deposit token on an always-on ledger can move at 2 a.m. on a Sunday. For a treasurer funding a position or a desk posting collateral, the difference between same-day and next-business-day settlement is real money in trapped liquidity.

Programmability. A tokenized deposit can carry rules. Payments can release on conditions, settle atomically against an asset, or enforce limits and approvals in the transfer itself. This is the capacity that legacy account entries lack and that a programmable ledger supplies.

Preserved legal and regulatory status. A tokenized deposit stays a deposit. It keeps its place on the bank's balance sheet, stays inside the bank's existing prudential and supervisory perimeter, and where applicable stays covered by deposit-guarantee schemes. A bank can add programmable settlement without converting client money into a different, more lightly regulated instrument, which preserves the supervisory treatment the institution already operates under.

Where the rails come in: Liquid, AMP, and Confidential Transactions

A tokenized deposit needs a ledger to live on, a way to enforce who may hold and transfer it, and a way to keep balances private without giving up auditability. These are infrastructure questions, separate from who issues the deposit. A bank issues and operates a deposit token; the bank chooses the rail it runs on. The same rail set underpins the broader question of how asset tokenization works.

The Liquid Network is a Bitcoin layer-2 built by Blockstream and secured since its 2018 launch by a distributed federation of major Bitcoin industry participants. It settles in roughly one to two minutes, runs continuously, and supports issued assets, which is the function a deposit token needs. As a settlement rail, an always-on network removes the banking-hours constraint that limits legacy systems.

Controlled issuance is where transfer rules live. Blockstream's AMP enforces transfer restrictions cryptographically: a hardware security module refuses to cosign any transaction that breaks a configured rule, so a token cannot move to a wallet outside its approved list, and the rule is enforced at signing rather than checked after the fact. An issuer who must restrict a token to vetted counterparties needs exactly this kind of enforcement.

Privacy with selective disclosure comes from Confidential Transactions, which hide both the amount and the asset type from outside observers on Liquid while letting the issuer disclose details to an auditor or regulator. A bank moving large balances does not want every transfer amount visible to competitors on a public ledger, and a regulator still needs a window in. Confidential Transactions provide both.

None of this makes Blockstream a deposit-token issuer. Blockstream builds the rails. A bank that decides to tokenize its deposits could run them on Liquid, restrict transfers through AMP, and keep amounts confidential through Confidential Transactions, while the deposit stays the bank's liability and the bank stays the issuer.

Frequently Asked Questions

Is a tokenized deposit the same as a stablecoin?

No. A tokenized deposit is commercial bank money, a direct claim on the issuing bank, and it stays on the bank's balance sheet as a deposit. A stablecoin is e-money, a claim on a separate issuer that is backed by a pool of reserve assets. The tokenized deposit redeems one-for-one into a deposit at the same bank; the stablecoin redeems against the issuer's reserves. The legal nature, the regulatory treatment, and the party on the hook all differ.

Does a tokenized deposit stay on the bank's balance sheet?

Yes. Tokenizing a deposit changes its format, not its legal nature. The deposit remains a liability of the issuing bank, stays within the bank's prudential and supervisory perimeter, and where applicable keeps deposit-guarantee coverage. This is a defining feature, and it is why banks treat tokenized deposits as an extension of existing deposit infrastructure rather than a new product class.

How does 24/7 settlement actually work?

Within a single bank, a tokenized-deposit transfer is a book entry between two accounts at that bank, so it can settle at any hour with no other party involved. Across banks, the banks still owe each other and that obligation settles in central bank reserves, so continuous cross-bank settlement depends on reserve systems and shared infrastructure that run around the clock. Intrabank 24/7 settlement exists today; broad interbank 24/7 settlement is still being built.

What is atomic settlement?

Atomic settlement means two linked legs of a transaction complete together or not at all, with no window in which one side is exposed. Delivery-versus-payment links an asset transfer to its payment; payment-versus-payment links two currency legs. A programmable ledger can enforce this in the transfer logic itself, which removes the settlement lag that creates counterparty risk in legacy rails.

Does Blockstream issue tokenized deposits?

No. Blockstream provides infrastructure for a bank to run. The Liquid Network is a settlement and issuance rail, AMP enforces transfer restrictions cryptographically, and Confidential Transactions provide privacy with selective disclosure. A bank could use these rails to issue and operate its own tokenized deposits, but the bank is the issuer and the deposit is the bank's liability. Blockstream does not issue, hold, or operate tokenized deposits.

Why would a regulator prefer tokenized deposits to stablecoins?

The Bank for International Settlements argues that tokenized deposits, which settle in central bank money and do not circulate as bearer instruments, are more conducive to the singleness of money than stablecoins, which trade as bearer instruments and can drift from par. Keeping settlement in central bank money preserves the property that every form of money exchanges at par, which is a stated reason supervisors favor the deposit-token model for regulated money on a ledger.

Mockup view Refreshed Added Overlap resolution