Study Materials
Industry & regulatory knowledge
A primer on the settlement standards, digital-money terminology and regulatory landscape this role explicitly tests — SWIFT, CLS, DvP/PvP models, and jurisdiction-by-jurisdiction context.
New to the wording on this page? 9 terms explainedShow
ISO 20022
The modern international standard for the messages banks send each other about payments. It carries far more structured detail than the older format it replaces — including what a payment is actually for.
For example: The old format might carry a cramped free-text line like 'INV 4471 PYMT'. The new one carries separate, properly labelled fields for invoice number, purpose code and full party addresses — so a computer can read it rather than a human guessing.
MT and MXMessage Type and Message eXchange
The old and new SWIFT payment message formats. MT is the legacy style; MX is the newer ISO 20022 style carrying much richer structured information.
For example: MT is like a telegram with strict character limits and abbreviations. MX is like a structured form with a labelled box for every piece of information.
CLSContinuous Linked Settlement
A bank-owned system that settles most of the world's currency trading safely by paying both currency legs at the same time. It is the established, working solution to Herstatt risk.
For example: When two large banks trade dollars for yen, the trade typically settles through this system, which holds both legs and releases them together — removing the risk that one side pays and the other does not.
RTGSReal-Time Gross Settlement
Central-bank systems that settle large payments one at a time, immediately and irreversibly, using central-bank money. 'Gross' means each payment settles individually rather than being bundled and netted off.
For example: CHAPS in the United Kingdom is how the money moves when you buy a house — a single large payment settled on its own, same day, and impossible to reverse once done.
DvPDelivery versus Payment
A rule that an asset only moves if the payment for it moves at the same instant — never one without the other.
For example: Like buying a house where the keys and the money are legally required to change hands in the same second. You cannot hand over the keys and hope the buyer pays next week, and they cannot pay and hope you move out.
PvPPayment versus Payment
The same idea as delivery-versus-payment, but for two currencies. Both sides of a currency swap settle simultaneously, so neither party can pay out and receive nothing back.
For example: You agree to swap US$1m for HK$7.8m with another bank. Without this rule, you might wire your dollars in New York hours before their Hong Kong dollars arrive — and if they collapse in between, your money is gone. With it, both legs move together or neither does.
CBDCCentral Bank Digital Currency
Digital money issued by a central bank itself rather than by a commercial bank like HSBC. Wholesale versions are restricted to banks settling with each other; retail versions would be issued to the general public.
For example: Wholesale: HSBC and Standard Chartered settle a large trade between themselves using digital Hong Kong dollars issued directly by the Hong Kong Monetary Authority. Retail: you hold central-bank digital cash in an app on your phone instead of notes in your wallet.
Stablecoin
A digital token designed to hold a steady value, usually one-for-one against a currency, backed by a separate pot of reserves such as cash and short-term government debt. Unlike a deposit, it is not a claim on a bank's balance sheet — it is a claim on that reserve pot.
For example: You buy 100 units of a Hong Kong dollar stablecoin for HK$100. The issuer puts your HK$100 into a reserve account. You can send those 100 units to anyone with a compatible wallet — they never need to be an HSBC customer — and redeem them for HK$100 later.
Tokenised depositTokenised bank deposit
Money you already hold in a normal bank account, represented as a digital token so it can move instantly and around the clock. Nothing new is created — it is the same deposit, in a form software can move and check automatically.
For example: A company has US$10m sitting in its HSBC Hong Kong account. Tokenised, that same US$10m can be moved to its Singapore subsidiary at 2am on a Sunday. The money never left HSBC and no new money was created — only the record of which entity owns it changed.
Verified market signals
Fact-checked as of 12 September 2026. These are product and regulatory signals, not legal advice or proof that a pilot is a production rail.
Fact check: BlackRock, HKDAP and EnsembleTX are three different things
No primary source supports a claim that BlackRock launched an HKD Digital Fund powered by HKDAP on EnsembleTX. BlackRock is an EnsembleTX industry pioneer; HKDAP is Anchorpoint Financial's HKD-backed stablecoin, in beta since 12 August 2026 and issued on supported blockchains. They should not be presented as one product launch.
EnsembleTX has moved from sandbox to controlled real-value pilot
HKMA launched EnsembleTX in November 2025 for controlled real-value transactions in tokenised HKD deposits and digital assets. The broader fixed-income roadmap records sandbox tests of tokenised money-market funds settling through tokenised deposits, as well as digital-bond settlement and corporate treasury use cases.
OSFI clarified that tokenised deposits are not a new legal category
Canada's prudential supervisor said that the underlying technology does not determine a product's legal nature and that tokenised deposits are not legally distinct from traditional deposits. Federally regulated institutions must still meet applicable risk, technology and third-party requirements and engage their lead supervisor before novel launches.
Korea enacted a legal framework for token securities
Korea's National Assembly passed amendments recognising distributed ledgers as securities account infrastructure and enabling token securities, with preparatory work ahead of commencement. The framework keeps token securities inside capital-markets rules rather than creating an unregulated parallel market.
BIS Project Agorá completed real-value testing
The BIS project tested tokenised commercial-bank deposits and tokenised central-bank reserves on a shared multi-currency platform. Twenty-eight institutions and central banks completed 17 real-value scenarios across six currencies; the project remains experimental rather than a production payment network.
The CLARITY Act is advancing, but is not law
The Senate process released updated Digital Asset Market CLARITY Act text after a bipartisan Banking Committee vote. The bill aims to establish market-structure rules and allocate responsibilities across US digital-asset regulation; it still needs to complete Congress and be enacted.
BlackRock expanded tokenised money-market products outside Hong Kong
BlackRock launched tokenised money-market products in the US in August, including on-chain shares of an existing Treasury liquidity fund on Ethereum and a new stablecoin-reserve vehicle. Separately, the European Commission is proposing to broaden its DLT Pilot Regime after modest take-up.
Glossary
Definitions where the term isn't self-explanatory, each paired with a concrete example from this case study rather than a textbook abstraction.
Blockchain
A shared, append-only digital ledger maintained across multiple computers rather than one central database, where new entries are cryptographically linked to and dependent on all prior entries — making the history very hard to alter after the fact without everyone noticing.
Example: Not every blockchain is public or permissionless. This case study's platform runs on a permissioned ledger — only approved bank entities can write to it, unlike a public network like Bitcoin or Ethereum that anyone can join.
DLT (Distributed Ledger Technology)
The broader category blockchain belongs to — any system where multiple parties keep synchronised copies of the same record, without one party unilaterally controlling it. Blockchain is one specific way to build a DLT; there are others (e.g. directed acyclic graphs) that don't chain blocks at all.
Example: When the JD or this case study says 'DLT-based settlement flows,' it's being deliberately broader than 'blockchain' — a bank might use permissioned DLT that technically isn't structured as a chain of blocks at all.
DvP (Delivery versus Payment)
A settlement mechanism where an asset only transfers if the corresponding payment settles at the same time — never one leg without the other. It exists specifically to remove the risk that a seller delivers an asset and then never gets paid, or a buyer pays and never receives the asset.
Example: On this case study's Bond DvP page: Meridian Asset Management's cash only leaves escrow the instant Horizon Capital Markets' bond units are confirmed available — if either check fails, neither leg moves, and both parties keep what they started with.
PvP (Payment versus Payment)
The FX equivalent of DvP — both currency legs of a foreign-exchange trade settle simultaneously, so neither counterparty is ever exposed to having paid out one currency without receiving the other. Removes what's called Herstatt risk (named after a 1974 German bank failure mid-settlement).
Example: On this case study's FX PvP page: Party A's USD and Party B's HKD only release together — if HKD liquidity isn't available, the USD leg is never released either, even though it was technically ready.
Atomic settlement
A technical guarantee that a set of linked actions either all complete together, or none of them do — there's no possible state where only some of them happened. DvP and PvP are both specific applications of atomicity to settlement.
Example: The 'Simulate exception' buttons on the Bond DvP and FX PvP pages exist specifically to demonstrate this: when one leg can't complete, the platform rolls back the other leg too, rather than leaving a half-finished trade.
Tokenised deposit
A digital representation of money a client already holds as a normal bank deposit — moving the token moves a claim on that same underlying deposit. It isn't a new form of money; it's an existing bank liability made programmable and instantly transferable.
Example: On this case study's Tokenised Treasury page, transferring a tokenised USD deposit between two entities doesn't create new money — it debits one entity's underlying account and credits the other's, just faster and with richer data than a traditional wire.
Smart contract
Code that runs automatically on a ledger when pre-agreed conditions are met, without needing a person to manually execute each step. Not a legal contract itself — a programmatic enforcement of terms that a legal contract separately governs.
Example: The atomic-settlement logic in this case study's DvP/PvP simulators is conceptually a smart contract: 'if funds check passes AND holdings check passes AND compliance passes, release both legs simultaneously; otherwise, release neither.'
Escrow (in a settlement context)
Holding an asset or payment in a neutral, conditional state — committed but not yet released to either party — until the conditions for final settlement are confirmed.
Example: In the atomic-settlement diagram on the Architecture page, both legs sit in escrow through the pre-settlement checks, and are only released together once every check clears.
Reconciliation break
A detected mismatch between two systems that are supposed to agree — e.g. a tokenised ledger showing one balance while the core banking system shows another. Not itself a failure of the platform; it's the control that catches when something has gone wrong upstream.
Example: This case study's risk framework treats a reconciliation break as a first-class operational event with its own SLA and exception case — not something quietly corrected later.
Legal finality
The point, under a specific jurisdiction's law, at which a transfer becomes irrevocable and enforceable against third parties — including in an insolvency. A separate question from whether a system is technically 'final' (i.e. atomic).
Example: This case study's risk framework deliberately keeps this control at 'Monitoring' status rather than 'Effective' — technical atomicity is real today, but a legal opinion confirming finality has to be obtained corridor by corridor before production use.
Maker-checker
A control requiring two different people (or systems) for any sensitive action — one to initiate ('maker'), a different one to approve ('checker') — so no single actor can both propose and authorise the same action.
Example: In this case study's Transfer wizard, the compliance-check step and the confirmation step are deliberately separated so a single user can't both initiate and self-approve a transfer.
New Product Approval (NPA)
A bank's internal governance process for reviewing and signing off a genuinely new product before launch — covering risk, legal, compliance, operations and technology, not just the commercial case.
Example: This case study's Risk & Controls page 'Governance' category (new-product approval, risk acceptance, control testing) is a simplified version of the real NPA process a bank would run before any of these products actually launched.
Orchestration (in a settlement platform)
The layer that sequences and coordinates calls to multiple underlying services in the correct order, so a client or downstream system can't skip a required step by calling a service directly.
Example: The Architecture page's 'Settlement Orchestration API' is exactly this — it forces every transfer through entitlement, screening and funds checks in order, rather than letting a caller jump straight to the ledger.
RTGS (Real-Time Gross Settlement)
Central-bank systems that settle high-value payments individually, in real time and in central-bank money — the benchmark 'gold standard' for settlement finality that most other systems are compared against.
Example: See the Industry & Regulatory Knowledge section above — RTGS (e.g. CHAPS, Fedwire) is why 'settlement finality' is treated as such a heavily scrutinised gate throughout this case study.
Settlement message standards & models
What's actually live in banks today versus what's mid-upgrade versus what's a stable reference framework not going anywhere — each card below states its current stage explicitly, plus where (if anywhere) it's headed next.
SWIFT MT → ISO 20022 (MX) migration
Actively migratingSWIFT's global migration from legacy MT message formats to the richer, structured ISO 20022 (MX) standard for cross-border payments and reporting. MX carries far more structured data (purpose codes, richer remittance information) than MT ever could — directly relevant to why a tokenised settlement platform's purpose-code tagging and structured audit trail is a genuine improvement, not just a technology preference.
Where it is today
The MT/MX coexistence period for cross-border payments (CBPR+) ended 22 Nov 2025 — MX is now the required format for in-scope SWIFT payment traffic. Most banks, including HSBC, have already cut over.
Where it's headed
Not finished: structured-address enforcement and the MT101 → pain.001 migration both land in Nov 2026, so this is a live, multi-year rollout still in its tail end, not a completed one-off event.
SWIFT gpi
Live todaySWIFT's Global Payments Innovation initiative — end-to-end payment tracking, same-day use of funds, and transparent fees for correspondent banking payments. The closest legacy-rail equivalent to the real-time visibility this case study's tokenised treasury proposition offers; worth being able to contrast the two directly.
Where it is today
Fully in production across correspondent banking — this is the current standard, not a pilot or a migration in progress.
Where it's headed
No planned replacement. It's being complemented by ISO 20022's richer data, not superseded — the upgrade path for this one is additive, not a rip-and-replace.
CLS (Continuous Linked Settlement)
Being challengedThe bank-owned market infrastructure that settles the majority of the world's FX trading volume on a PvP basis today, across 18+ currencies. It works by netting and settling both currency legs simultaneously through a central settlement system — eliminating Herstatt risk (the risk that one currency leg pays before the other settles). CLS is the incumbent PvP model; the FX PvP page in this case study is proposing an atomic, DLT-based alternative to the same underlying problem CLS already solves at scale — an interviewer may well ask directly how the two compare.
Where it is today
Live and dominant — CLS settles the large majority of global FX volume today, and no bank is walking away from it in the near term.
Where it's headed
Not being formally replaced, but increasingly challenged at the edges: DLT-based atomic PvP (what this case study's FX PvP product proposes) targets currency pairs and corridors CLS doesn't cover well, rather than displacing CLS outright.
BIS Delivery-versus-Payment models (1, 2, 3)
Reference frameworkThe Bank for International Settlements' classic 1992 framework for DvP: Model 1 settles both the securities and cash legs gross, trade by trade, simultaneously. Model 2 settles securities gross (trade by trade) but nets and settles cash at the end of the cycle. Model 3 nets and settles both legs at the end of the cycle. This case study's Bond DvP simulator is effectively a Model 1 implementation on a permissioned ledger — atomic, gross, trade-by-trade — worth being able to say explicitly.
Where it is today
Still the industry-standard taxonomy for describing DvP settlement, over 30 years after publication — this isn't legacy tech to retire, it's the shared vocabulary regulators and banks both use.
Where it's headed
The three models themselves aren't being replaced — they're being re-implemented on new infrastructure. Tokenised-bond platforms (like this case study's Bond DvP) run the same Model 1 logic on a permissioned ledger instead of a traditional CSD.
RTGS (Real-Time Gross Settlement)
Live todayCentral-bank-operated systems (e.g. CHAPS in the UK, Fedwire in the US) that settle high-value payments individually and irrevocably in real time, in central-bank money. RTGS is the ultimate settlement-finality benchmark tokenised platforms are usually compared against — and the reason 'settlement finality' is such a heavily scrutinised gate in this case study's risk framework.
Where it is today
Live, in daily production use, and still the gold-standard benchmark for settlement finality that every tokenised platform gets compared against.
Where it's headed
Central banks are piloting DLT/tokenised extensions alongside RTGS (e.g. Project Agorá) rather than retiring it — RTGS in central-bank money stays the finality benchmark even as the rails around it experiment.
The digital-money spectrum
Interviewers in this space often test whether a candidate conflates these — worth being precise about the distinctions, not just the similarities.
Tokenised deposit
A digital representation of an existing commercial-bank deposit liability — still on the issuing bank's balance sheet, still covered by existing deposit and prudential frameworks. This is what this case study's product is built on.
Stablecoin
A separately issued, typically reserve-backed digital token pegged to a currency, issued by a non-bank or bank entity outside the deposit-taking balance sheet. Regulatory treatment (e.g. under the GENIUS Act in the US, enacted July 2025, or MiCA in the EU) is materially different from a deposit — a distinction worth being precise about, since interviewers in this space often test whether candidates conflate the two.
Wholesale CBDC
Central-bank digital currency restricted to use between regulated financial institutions for interbank settlement — the category Project Agorá and most central-bank tokenisation pilots explore. Not the same as a bank's own tokenised deposit, but the two are designed to interoperate on shared programmable platforms.
Retail CBDC
Central-bank digital currency issued directly to the public — a materially different policy question (disintermediation risk to commercial banks, financial-inclusion goals) from the wholesale, institutional focus of this case study.
Regulatory landscape by jurisdiction
Enough to speak confidently corridor by corridor, not a legal opinion