How tokenized deposits work: 24/7 settlement for banks

A tokenized deposit is a commercial bank deposit represented as a token on a ledger. The bank that holds the deposit is the sole issuer of the token, and the token is a direct claim on that deposit liability. It is not a stablecoin issued by a third party and it is not central bank money. It is the bank’s own deposit, in a movable digital form.

That distinction is the whole point. Because the token is the bank’s own liability, the holder’s legal position is the same as holding a deposit: a claim on a regulated bank. What changes is how the deposit moves. Instead of being trapped inside batch systems and banking hours, it can settle around the clock.

Here is how it actually works, end to end.

The lifecycle is simple and tightly controlled.

• Mint on deposit.A customer holds a deposit at the bank. The bank issues, or mints, an equivalent amount of deposit tokens to the customer’s onboarded wallet.
• Transfer between approved holders. The token moves on the ledger between accounts the bank has approved, settling in minutes rather than waiting for the next batch window.
• Burn on withdrawal. When a holder redeems, the bank burns the tokens and credits the corresponding deposit in the legacy system.

Throughout, the bank keeps its traditional core-banking ledger in sync. Every mint and burn is mirrored by a credit or debit on the legacy ledger, so the two views never diverge. The token is a representation layered on top of the existing deposit, not a replacement for the bank’s books. This parallel-ledger discipline is what keeps tokenized deposits inside the existing regulatory and accounting perimeter.

Moving a deposit as a token removes the timing constraints of legacy rails. Three capabilities follow directly.

• 24/7 wholesale movement. Deposits can settle on weekends, holidays, and overnight, instead of queuing for the next business-day window.
• Atomic FX and delivery-versus-payment. When two currency tokens, or a security token and a cash token, can swap in a single atomic settlement, both legs complete or neither does. That closes the timezone and Herstatt settlement gap, where one party pays and the other fails before the offsetting leg clears.
• Intraday liquidity. Funds that previously sat idle waiting for cut-off times can be moved and reused within the day, tightening liquidity management.

A tokenized deposit is only useful to a bank if it stays fully governed. The control model is what makes it a banking product rather than a crypto experiment.

• Restricted transfer.Tokens move only between onboarded banks and corporates that have cleared the issuer’s KYC and eligibility checks. The transfer rules are enforced at the asset level, so they travel with the token.
• HSM cosigning.Issuance and transfers are gated by hardware-security-module cosigning, so no transaction settles without the bank’s cryptographic approval.
• Regulator view-key. Supervisors can be granted a view-key that lets them inspect holdings and flows without those details being public, satisfying oversight without broadcasting positions.
• Deposit insurance.Because the token represents a claim on an underlying bank deposit, it is generally eligible for the same insurance as that deposit — subject to the standard limits, recordkeeping, and conditions of the jurisdiction. Exact treatment is still being formalized by regulators, so confirm it for your market.

This model is what lets supervisors such as the OCC in the US, BaFin in Germany, and MAS in Singapore treat a tokenized deposit as what it is: a regulated bank deposit with a new settlement mechanism.

Blockstream’s implementation uses the Liquid Network for settlement and AMP for issuance and control. Liquid is an open-source Bitcoin sidechain, in production since 2018, run by a federation of 80 or more members including exchanges, custodians, and financial institutions. It settles in roughly one-minute blocks with two-confirmation deterministic finality, no reorgs, and sub-cent fees, around the clock. Those properties map directly onto what a deposit token needs: fast, final, cheap, and always on.

AMP is the issuance and compliance layer. A bank issues its deposit token in AMP’s Transfer-Restricted model, which applies per-asset whitelists and rules enforced by 2-of-2 HSM cosigning. Restriction groups, wallet and asset locks, and auditor view-keys give the bank and its regulator the controls described above. Confidential Transactions keep amounts and asset types hidden by default, with selective disclosure to auditors through blinding keys, so wholesale flows are not exposed to the public while remaining fully auditable.

The result is a deposit that behaves exactly like a deposit on the bank’s books, while moving with the speed and availability of a modern settlement network.

A tokenized deposit is the bank’s own deposit, minted as a token, burned on withdrawal, and mirrored on the legacy ledger the whole time. It buys 24/7 settlement, atomic FX and delivery-versus-payment, and intraday liquidity, while staying inside the bank’s compliance and insurance perimeter through restricted transfers, HSM cosigning, and regulator view-keys.