ECB Outlines Three Models for Putting Central Bank Money Onchain
The European Central Bank has taken a significant step toward defining how central bank money could coexist with tokenized securities, commercial bank deposits, and stablecoins on distributed ledger infrastructure. Speaking at the Bank of England's Future of Money conference in London on 2 October 2026, ECB Executive Board member Isabel Schnabel presented three distinct architectural models, and confirmed that the ECB is already piloting the underlying technology through two live projects. For accounting firms, CFOs, and auditors working with digital assets, the framework has direct implications for how settlement assets are classified, how stablecoin accounting is approached, and what the EU's tokenized financial market will look like at a structural level.
Why the ECB Is Acting Now
Tokenization of financial assets is no longer a theoretical exercise for European institutions. The ECB's intervention comes as major financial players increase capital allocation toward DLT-based infrastructure. Schnabel argued that tokenization can make financial transactions both programmable and atomic, meaning the transfer of an asset and its payment can occur simultaneously rather than through the sequential steps that characterize traditional settlement. Tokenized infrastructure could also allow financial assets and money to interact directly on the same, or interoperable, DLT networks.
The backdrop is telling. A Lloyds survey of senior decision-makers at the UK's largest financial institutions found that 71% expect tokenization to reshape financial services. Faster payments and settlement were cited as the biggest potential benefit by 60% of respondents, while collateral and liquidity management came in at 41%. Investment in new and emerging technologies was flagged as a growth priority by 77% of respondents, up sharply from 41% the previous year. Rob Hale, co-head of global markets at Lloyds, pointed to faster settlement, more efficient collateral use, and improved liquidity movement as the tangible near-term gains.
The Three Models Explained
Schnabel outlined three distinct approaches the ECB is considering. Each preserves the two-tier monetary system in which central bank money anchors settlement while commercial banks continue to serve customers, but they differ materially in how central bank money reaches DLT platforms.
Model 1: Direct Reserve Issuance on a Programmable Platform
Under the first approach, the ECB would issue central bank reserves directly onto a programmable platform. The reserves themselves would exist natively on the DLT environment. This gives the central bank a direct presence on the chain and enables atomic settlement with tokenized assets without any bridging mechanism. It is the most architecturally integrated option, but it also requires the ECB to operate and govern on-chain infrastructure at scale.
Model 2: Interoperability Layer Linking RTGS to DLT
The second model keeps the ECB's existing real-time gross settlement system intact and introduces an interoperability layer between it and external DLT platforms. Reserves are not themselves tokenized. Instead, the two systems are linked by hash, a cryptographic reference that coordinates finality across both environments. This approach minimizes changes to existing central bank infrastructure and allows the RTGS to remain the definitive settlement record, while still enabling DLT-based transactions to achieve finality linked to central bank money.
Model 3: Tokenized Reserve-Backed Settlement Tokens
The third option involves tokenizing reserves held at the central bank and issuing settlement tokens fully backed by those reserves. Critically, Schnabel noted that these tokens would be private claims rather than direct claims on the central bank. Commercial banks or other authorized entities would issue the tokens, with the backing reserves ring-fenced at the ECB. This model has the closest structural resemblance to a regulated stablecoin: a privately issued token, fully backed by a central bank liability, designed for use in DLT-based transactions.
The Two-Tier Structure and Stablecoins
A recurring theme in Schnabel's presentation was the ECB's intention to preserve the existing two-tier monetary system. Central bank money would remain the foundation of settlement. Commercial banks would continue to supply money and financial services to end customers. What changes is the medium through which that settlement occurs.
Stablecoins sit inside this picture. The ECB's framework explicitly places central bank money on DLT infrastructure alongside tokenized securities, tokenized deposits, and stablecoins. That co-existence matters for firms managing stablecoin accounting positions today. If settlement-grade central bank money becomes available on the same networks where stablecoins operate, the risk hierarchy between different on-chain instruments becomes sharper and more formally defined. A stablecoin used for settlement that does not carry a central bank backing will sit in a different risk category from a Model 3 settlement token, even if both circulate on the same ledger.
For firms applying IFRS or EU GAAP, this distinction is likely to inform how instruments are classified on the balance sheet. A reserve-backed settlement token issued by a commercial bank under Model 3 could conceivably be treated as a cash equivalent or a financial instrument rather than a crypto-asset, depending on the legal structure. That determination will require legal analysis once the ECB finalizes the framework, but firms should begin identifying which existing stablecoin positions might be affected by or substituted for such instruments.
The ECB's Live Projects: Pontes and Appia
The framework is not purely prospective. Schnabel confirmed that the ECB's Pontes project, launched the month before the conference, is already providing tokenized central bank money for DLT-based transactions. Pontes represents a working implementation within the ECB's evolving approach, though the full details of which model it follows will be important for market participants to track as the project matures.
Appia: Architecture for Tokenized Markets
Alongside Pontes, the ECB's Appia project is examining different architectural options for tokenized markets more broadly. Appia appears to function as the research and design layer, informing which of the three models, or which combination, is best suited to the ECB's long-term objectives. For firms engaging with EU tokenized asset markets, Appia's outputs will be worth monitoring closely because they may determine which settlement instruments ultimately become standard.
Accounting and Reporting Implications for Firms
Each of the three models carries distinct accounting treatment considerations, even at this early stage. The classification of a settlement asset determines where it sits on the balance sheet, how it is measured, and what disclosures are required.
Models 1 and 2: Reserve Proximity
Under Models 1 and 2, the central bank retains direct ownership of reserves. Counterparties transacting via these systems would hold a claim against a tokenized transaction, not against the reserve itself. The accounting treatment would likely mirror that of existing RTGS-based transactions: settlement is recognized when finality is confirmed, and there is no intermediate asset sitting on the counterparty's balance sheet between initiation and completion. The interoperability layer in Model 2 raises a question about how interim states are treated if settlement spans two systems simultaneously, a point auditors should flag for any client operating in that environment.
Model 3: Private Claims and Balance Sheet Classification
Model 3 is the most consequential for digital asset accounting software and reporting workflows. If an entity holds a reserve-backed settlement token issued by a commercial bank, that token is a private claim. Under IFRS 9, it would need to be assessed against the contractual cash flow characteristics test. If the token passes that test (paying only principal and interest on a fixed schedule), it could qualify for amortized cost treatment. If it fails, fair value through profit or loss becomes the default. Given that settlement tokens are likely to be redeemable at par on demand, the SPPI test outcome may be favorable, but the analysis is not automatic and must be documented.
For firms using stablecoin accounting workflows already shaped by MiCA, Model 3 tokens may require a separate treatment track distinct from e-money tokens or asset-referenced tokens regulated under the existing MiCA framework. Whether Model 3 tokens fall inside or outside MiCA's scope will be a legal and regulatory question the ECB and the European Commission will need to address explicitly.
What Firms Should Do Now
The ECB's framework is still at the design and pilot stage, and no binding implementation timeline has been announced. That said, firms operating in EU digital asset markets should treat this as an early-warning signal for accounting and operational change.
Review Existing Stablecoin and Settlement Asset Policies
Finance teams should map their current use of stablecoins and tokenized deposits against the three ECB models. Where stablecoins are being used as settlement instruments today, Model 3 in particular could introduce a structurally similar but legally distinct alternative. Accounting policies should be flexible enough to accommodate a new instrument category. Firms whose MiCA compliance and stablecoin accounting frameworks are already documented will be better positioned to extend those frameworks to cover ECB settlement tokens when the time comes.
Engage Auditors Early on Classification Questions
The private-claim structure of Model 3 tokens means auditors will need to assess classification under applicable standards before any such instrument appears on a client's balance sheet. Firms that wait until the tokens are live to begin that analysis risk late and disruptive adjustments to financial statements. Beginning the dialogue with auditors and standard-setters now, while the ECB's framework is still in draft, is the more defensible approach.
Monitor Pontes and Appia Outputs
The ECB's own project disclosures will be the primary source of authoritative detail on how the models evolve. Firms should designate a team member responsible for tracking ECB communications on both projects and flagging changes that affect settlement practices or balance sheet classification. Staying current on the ECB's digital asset activity also intersects with broader EU compliance obligations under MiCA, which the ESMA is actively reviewing.
Frequently Asked Questions
What is the difference between the ECB's three models in plain terms?
Model 1 puts actual central bank reserves natively on a DLT platform. Model 2 keeps the existing payment system but links it to DLT networks via a cryptographic hash, with no reserves on-chain. Model 3 issues privately held tokens that are fully backed by reserves held at the central bank, similar in structure to a bank-issued, reserve-backed stablecoin.
How does Model 3 differ from a regulated stablecoin under MiCA?
A Model 3 settlement token would be a private claim backed by central bank reserves, rather than an e-money token or asset-referenced token as defined in MiCA. Whether it falls within MiCA's scope will depend on the legal instrument the ECB and EU legislators use to authorize it. That question has not been resolved at this stage.
Does the ECB framework affect how firms classify stablecoins on the balance sheet today?
Not directly, because no ECB settlement tokens exist yet in a final form for general use. However, the framework signals a future in which different on-chain settlement instruments will carry different legal and risk characteristics. Firms should review whether their current stablecoin accounting policies are granular enough to distinguish between instrument types as the market evolves.
What are the Pontes and Appia projects?
Pontes is an ECB initiative launched in September 2026 to provide tokenized central bank money for DLT-based transactions. Appia is a parallel project examining different architectural models for tokenized markets. Both are active research and pilot programs, not yet a finalized framework for public use.
Should auditors treat Model 2's interoperability layer as a new risk area?
Yes. When settlement spans two systems linked by hash rather than occurring entirely within one system, there is a question about how interim states are treated in the audit trail. Auditors should consider whether a transaction that has been confirmed on the DLT side but not yet fully reflected in the RTGS represents a recognized or unrecognized asset or liability at a reporting date, and document the accounting policy for that scenario.
Source: The Block