48hEscrow Set-Upfor standard templates
0Releases Above Entitlementenforced by the rules engine
10Governed AI Agentsverify, detect, explain
90Day Pilotbeside your existing core

Figures are MVESCROW design targets for pilot deployments, not historical performance.

Why bank CEOs are acting now

Escrow just moved from the back office to the boardroom


Regulators have written escrow into the structure of bank accounts, fraudsters target every high-value release, and fintechs are building escrow franchises on top of partner banks. The bank that runs escrow digitally keeps the balances, the fees and the regulator's trust.

Regulation

Escrow is now hard-wired into accounts

India's RERA requires 70% of homebuyer money in a protected project account. Tamil Nadu and Uttar Pradesh now mandate three linked accounts with automatic sweeps, no cheque books and no liens. Dubai has required off-plan escrow since 2007.
From 1 Jan 2026 — Tamil Nadu RERA three-account rule for new registrations.
Fraud

Paper, email and callbacks don't scale

Most escrow desks still work from PDF agreements, emailed release requests and phone callbacks. One-off, high-value releases to new beneficiaries are exactly what business email compromise targets.
USD 2.77 billion — business email compromise losses reported to the FBI's IC3 in 2024.
Franchise

Programmable money is here

Event-triggered payments, purpose-bound money and tokenised deposits are live. Conditional release is becoming a core payments capability — and the franchise goes to whoever offers it digitally.
Sept 2026 — tokenised-deposit weekend settlement between Singapore and the US went live.

How it works


Every escrow in MVESCROW follows the same controlled path. A deterministic rules engine decides how much can be released. Named officers decide whether it is.

Step 01

The agreement becomes machine-readable rules

The Agreement Intake Agent reads the signed escrow agreement and drafts a versioned rule set: parties, accounts, conditions, release waterfall, retentions, fees and expiry. Every rule is linked to the clause it implements.

  • Your legal or escrow team verifies the draft; a checker approves it
  • Templates for RERA, Dubai off-plan, marketplace, M&A, trade and purpose-bound escrow
  • Amendments create a new version — nothing is overwritten
# rule set v3 — clause links shown
arrangement: "Marina Crest Tower"
accounts:
  collection:  core:AE07-…-0412   # no debits
  project:     core:AE07-…-0413   # protected
release_rule:            # clause 7.2
  type: proportional_completion
  base: approved_cost
  evidence: [consultant_certificate]
retention: per_template   # clause 9.1
approvals: maker_checker
Step 02

Collections land in the right place, automatically

Every payer, unit or order gets its own virtual account number, so incoming money is identified the moment it arrives. MVESCROW keeps a sub-ledger per arrangement, per party and per unit, reconciled to your core account every 15 minutes.

  • Same-day percentage sweeps (for example 70% protected / 30% operating)
  • Rounding always favours the protected account
  • Holds and restrictions placed through your core — no cheque books, no liens, no set-off
# receipt of INR 25,00,000 via virtual account
amount_minor:     250000000  # paise
→ rera_account:   175000000  # 70%
→ txn_account:     75000000  # 30%
collection_after: 0
sweep: same_day  status: settled
Step 03

Conditions are proven, not asserted

Certificates, invoices, bills of lading and system events arrive by portal, API or controlled mailbox. Each is hashed, time-stamped and verified. AI agents check signatures, professional registrations, arithmetic and document tampering before an officer ever opens the file.

  • Digital signature and registry checks (for example CA UDIN verification in India)
  • Consistency with prior certificates, budget and the construction curve
  • Evidence is never edited — only superseded
evidence: consultant_certificate #CC-0419
sha256:       9f2c…e71a
signature:    valid
registration: verified
completion:   35%  # claimed
agent_E2:     "13-pt jump in one month vs
               expected curve; 2 photos reused"
status:       under_review
Step 04

The engine calculates exactly what can move

Entitlement is computed by a deterministic, versioned rules engine — never by an AI model. It shows the arithmetic, the rules applied and the evidence used, so officers, auditors and regulators see the same answer.

  • Proportional-completion, milestone, time and event-based rules
  • Retentions and caps applied automatically
  • Requests above entitlement are capped or rejected by design
entitlement =
  certified_pct × approved_cost − released
= 28% × AED 300,000,000.00 − 72,000,000.00
= AED 12,000,000.00
  # 1,200,000,000 fils
requested:  AED 60,000,000.00
decision:   capped_to_entitlement
Step 05

Releases pass fraud checks and four eyes

Every release is scored by the Release Fraud Shield, sent only to a pre-verified beneficiary, and approved under your maker-checker matrix. The instruction goes to your core or MVPAY as a standard payment; signing for tokenised rails happens outside any database transaction.

  • Beneficiary changes need independent confirmation and a cooling-off period
  • Idempotent instructions — no duplicate payments
  • Every step lands in MVGRC as control evidence
release R-2291  AED 12,000,000.00
fraud_score:  low
beneficiary:  pre-verified (name match ✓)
maker:        ops.officer.14   ✓
checker:      ops.checker.03   ✓
dispatch:     core.payment → executed
grc_evidence: recorded

Legacy coexistence

Beside your core. Not instead of it.


MVESCROW never asks you to move money out of your core banking system or change a line of its code. Your core keeps the accounts and the balances. MVESCROW adds the rules, the evidence, the sub-ledger and the release controls — and talks to your core through the interfaces it already has.

Swipe sideways to see the full diagram →

What stays with your core

Your system of record doesn't change

  • Every escrow and project account, and every balance
  • Your payments engine, limits and existing controls
  • Your general ledger and regulatory books
  • Your legal role as escrow agent — and the client relationship
What MVESCROW adds

The control layer your core was never built for

  • Agreements as versioned, executable rules
  • Evidence verification and entitlement calculation
  • Per-party, per-unit sub-ledgers reconciled to the core
  • Fraud-scored, four-eyes releases and regulator-ready reports

Integration options

Use the account features your core already has

MVESCROW opens and links accounts, issues virtual account numbers and places holds through your core's own services — for example lien marking in Infosys Finacle or locked-amount events in Temenos Transact. Where a core has no hold feature, each arrangement gets a dedicated escrow account and reference-based matching.

See every credit and debit as it happens

Incoming funds, balance changes and returns stream from your core through the Moneyverse event backbone, or from database change-data-capture feeds. Every event carries an idempotency key and can be replayed without double counting.

Speak the language of modern payments

Releases, sweeps and refunds are sent as standard pain.001, pacs.008 or pacs.009 instructions. Escrow accounts reconcile against camt.053 and camt.054 statements, with MT940 supported through a legacy adapter.

Escrow-as-a-Service for your clients and partners

OpenAPI 3.1 endpoints secured with OAuth 2.0, mTLS and FAPI 2.0 let developers, marketplaces and fintech partners create arrangements, submit evidence and request releases from their own systems — under your controls, with the balances in your bank.
POST /v1/arrangements
POST /v1/arrangements/{id}/evidence
GET  /v1/arrangements/{id}/entitlement
POST /v1/arrangements/{id}/release-requests
POST /v1/release-requests/{id}/decision   # maker-checker
webhook: escrow.release.executed         # no personal data

Mainframe and older cores are welcome

Where a core only produces batch extracts, secure file adapters parse fixed-width and EBCDIC formats on schedule. You start in read-only mode and switch on write-back only after a parallel run.
  • Temenos Transact
  • Infosys Finacle
  • Oracle FLEXCUBE
  • TCS BaNCS
  • Mainframe & in-house
  • MVCORE — native

Better together

MVESCROW + MVCORE: escrow as a native banking product


MVESCROW works with any core. With MVCORE, escrow stops being an overlay and becomes a first-class product — configured in smart contracts, backed by native virtual accounts and holds, and ready for tokenised money on the same infrastructure.

Mode A · Augmentation

MVCORE beside your legacy core

Keep your existing core for the main book. Run MVCORE as the augmentation layer for escrow and project accounts, with MVESCROW on top. You get modern escrow products in weeks without a core replacement programme.
  • Escrow accounts on MVCORE, customer relationship on your core
  • Settlement back to the legacy core through standard payments
  • A low-risk first step towards core modernisation
Mode B · Native

MVCORE as your core

For digital banks, NBFCs and new entities running on MVCORE, MVESCROW plugs straight into native account, hold and payment services. No adapters, no batch files — escrow is simply another product your bank can launch.
  • Configuration only — no integration project
  • Real-time events end to end
  • Fiat and tokenised escrow on one platform

Escrow as a smart-contract product

MVCORE's configuration layer defines the escrow account product itself — restricted debits, sweep behaviour, interest allocation — using the same smart-contract product logic banks use for every MVCORE product.

Native virtual accounts & holds

Millions of virtual accounts and precise holds, liens and restrictions are native MVCORE capabilities, so collections match instantly and protected money cannot be touched outside the rules.

Tokenised escrow on Sui

The same agreement can run on tokenised deposits or regulated stablecoins through Move escrow contracts on Sui, mirrored in the fiat sub-ledger — with freeze capability held by the bank.

Governed AI

Ten AI agents that make every release safer


MVESCROW's agents read, verify, detect and explain at machine speed. They never approve or execute a release. That line is enforced by the platform, not by policy.

Agents verify and explain. The rules engine calculates. People release. Autonomy capped at L2 — prepare, never execute.
E1L2 · Prepare

Agreement Intake

Turns the signed agreement into a draft rule set, links each rule to its clause and flags ambiguous terms for legal review.
E2L1 · Advise

Evidence Verification

Checks signatures, registrations, arithmetic and signs of tampering on certificates, invoices and trade documents.
E3L1 · Advise

Diversion Sentinel

Compares withdrawals with certified progress and budget, spots related-party payees and runs the Diversion Control Score.
E4L1 · Advise

Release Fraud Shield

Scores every release for email-compromise and account-takeover risk and triggers independent confirmation.
E5L2 · Prepare

Collections Matching

Matches receipts to payers, units and instalments, and resolves partial or unidentified payments.
E6L0 · Observe

Certifier Integrity

Watches certifying professionals across your portfolio and flags unusual volumes, geography or links to developers.
E7L2 · Prepare

Dispute Copilot

Builds a neutral, chronological case file of clauses, evidence and releases. It never recommends an outcome.
E8L2 · Prepare

Regulatory Reports

Assembles RERA, DLD and audit reports from the sub-ledger, validates them and drafts variance commentary.
E9L1 · Advise

Progress Verification

Estimates construction progress from site, drone or satellite imagery and compares it with the engineer's certificate.
E10L1 · Advise

Client Concierge

Answers "what's needed for my next release?" and "is my payment protected?" from each client's own data.
GOVERNANCEModel risk ready

Built for your model-risk and audit teams

Every agent finding carries its evidence, model version and confidence. Agents run in your environment or an approved no-retention endpoint, are registered in your model inventory, and send every finding to MVGRC.

Built for the boardroom

What your CEO sees on day one


Escrow stops being an operational risk you hope is under control and becomes a franchise you can measure, show your regulator and grow.

Diversion Control Score

Prove, project by project, that protected money was never diverted

96 PORTFOLIO
Marina Crest Tower98
Adyar Greens Phase II95
Harbour Lane Residences71 · review

Illustrative projects.

Where Is My Money

Trust you can show every payer

Unit 1204 · Payment protected
INR 25,00,000
✓ In protected project account
RERA account₹17,50,000
Operating account₹7,50,000
Next milestoneSlab 14
Release Fraud Shield

No release reaches an unverified account

  • Beneficiary pre-registeredPass
  • Account name matchPass
  • Bank details changed 2 days agoHold · confirm
  • Request from look-alike domainBlocked
48-Hour Escrow

Win mandates on speed

Agreement intake, templated rules and digital due diligence through MVKYC and MVKYB target standard escrows live within 48 hours — instead of weeks of manual set-up.
One Agreement, Any Rail

Ready for tokenised money

Model the conditions once. Run them on fiat accounts today and on tokenised deposits, regulated stablecoins or CBDC tomorrow — without re-papering your clients.
Deposits & fees

Grow a sticky, purpose-locked franchise

Escrow and project balances are large and stable, and every arrangement carries set-up, administration and transaction fees. Escrow-as-a-Service APIs bring developer, marketplace and fintech flows into your bank.

What MVESCROW powers

One engine. Every kind of conditional money.


Start with the escrow your regulator already demands, then extend the same engine across your franchise.

Available for pilot

RERA and off-plan project escrow

India's single-account and three-account RERA models and Dubai off-plan escrow, with same-day sweeps, instrument and lien restrictions, proportional-completion releases and architect, engineer and chartered-accountant certificates.

Why it wins

  • Regulator-ready reports generated from the sub-ledger
  • Developers get paid faster once evidence is complete
  • Homebuyers see their protected balance
Available for pilot

Platform, marketplace and payment-aggregator escrow

Per-merchant sub-ledgers, settlement rules and strict segregation of inward and outward flows, in line with the escrow architecture of the RBI's 2025 Payment Aggregator Directions.

Why it wins

  • Banker certificates produced from system data
  • No commingling — enforced by rules
  • Platform balances stay with your bank
Roadmap

Holdbacks, indemnity escrows and earn-outs

Joint instructions from buyer and seller, time-based releases, purchase-price adjustments and claims handling with a complete audit trail.

Why it wins

  • Multi-signatory approvals without email chains
  • Dispute freezes applied instantly
  • Neutral case files for tribunals
Roadmap

Trade escrow — release on documents

Funds held until an electronic bill of lading is transferred and an inspection certificate is received, with a retention for quality claims. Electronic transferable records are legally recognised under MLETR-based laws in Singapore and under the UK Electronic Trade Documents Act 2023.

Why it wins

  • A simpler alternative to documentary collections for SMEs
  • Exporters see protected funds before they ship
  • Settlement on fiat or regulated stablecoin via MVPAY
Roadmap

Grants, subsidies and loan drawdowns

Money released only to approved payees or purposes — the idea behind MAS Project Orchid's Purpose Bound Money — including construction-loan drawdowns with MVLEND.

Why it wins

  • Leakage controlled at the point of payment
  • Lenders see exactly what each drawdown funded
  • Programme owners get real-time reporting
Roadmap

Tokenised escrow on Sui

Escrow of tokenised deposits, regulated stablecoins or CBDC through audited Move contracts. The bank holds release and freeze capabilities; personal data never goes on-chain.

Why it wins

  • 24/7 settlement for cross-border deals
  • Same rules as fiat — one agreement model
  • A credible tokenisation answer for your board

Try the engine

See the rules engine think


Two of MVESCROW's everyday calculations, running in your browser. Money is handled in integer minor units — paise, fils, cents — exactly as the platform does it. No floating-point money, ever.

Proportional-completion release

How much can the developer draw?

Releasable now
—
RERA same-day sweep

Where does each receipt go?

Protected (RERA) account
—
Operating (Transaction) account: —
Rounding favours the protected account

Illustrative scenario

A Dubai tower, a bold certificate and AED 48 million kept safe


A fictional developer asks its escrow bank for a large release against an optimistic progress certificate. Here is what happens when the bank runs MVESCROW.

Request

The developer submits a consultant's certificate showing 35% completion and asks for AED 60 million. Approved cost is AED 300 million; AED 72 million has already been released.

→ Rules engine caps the request at AED 33 million (35% × 300m − 72m) and shows its working.

Evidence

The Evidence Verification Agent notices last month's certificate said 22% — a 13-point jump far outside the expected build curve — and two site photos reused from another project.

→ The Certifier Integrity Agent adds that the consultant signed 14 certificates this month against an average of 3.

Decision

The escrow officer orders the independent inspection the agreement allows. It certifies 28%.

→ Entitlement recalculated to AED 12 million, approved by maker and checker, executed through the core.

Two days later

An email asks to change the main contractor's bank account.

→ Release Fraud Shield holds it for out-of-band confirmation. The request came from a look-alike domain and is rejected.

AED 48,000,000 protected

Buyers' money that would have left under the original request stays in escrow — with a complete, regulator-ready record of every check and decision.

Fictional entities and figures, for illustration only.

Compliance-first

Designed around the rules you are measured on


Jurisdiction templates are configuration, not code — so new regulatory requirements become new rules, not new projects.

India · RERA Act 2016

70% of allottee money in a separate project account; withdrawals in proportion to completion, with engineer, architect and CA certification.

Tamil Nadu RERA · 2026

Collection, RERA (70%) and Transaction (30%) accounts in the same bank and branch, with same-day sweeps.

Uttar Pradesh RERA · 2026

Daily 70% transfer to the separate account; no cheque books; no liens on protected accounts.

RBI Payment Aggregator Directions · 2025

Escrow-based settlement, segregated cross-border collection accounts and banker certification.

Dubai · Law No. 8 of 2007

Off-plan payments only into project escrow with an approved bank; releases against verified construction progress.

Singapore · MAS Project Orchid

Purpose Bound Money — a common model for conditions on the use of digital money.

Banking-grade by design

Engineered the way your regulator would want it


An append-only ledger

PostgreSQL double-entry sub-ledger. Every journal is balanced and hash-chained; corrections are reversals, never edits. Money is stored in integer minor units.

Keys never meet the database

Releases are committed first, then signed by an HSM or MPC service outside any database transaction, then confirmed. Signing keys stay with the bank or its approved custodian.

No personal data in events

Events and analytics carry pseudonymous references only. Personal data stays in MVKYC or your core, in your region, under PDPA, GDPR or DPDP rules.

Four eyes, always

Rule approval, release requests, release approvals and beneficiary changes are separate roles. No single user can change a beneficiary and approve a payment to it.

Your cloud, your region

Deploy on public, hybrid or private cloud, or in your own data centre. Evidence documents never leave your chosen region.

A clean exit, by contract

Full export of arrangements, rules, evidence and ledgers in open formats, as outsourcing rules such as MAS, RBI and DORA require.

Deployment velocity

Live in 90 days — not 18 months


A controlled pilot that starts read-only, proves itself against your core to the paise, and goes live on real projects inside one quarter.

DAYS 0–15

Discover & connect

Pick the product line and jurisdiction template, map your accounts and holds, connect read-only adapters.
Gate: core events flowing; templates approved by your legal team
DAYS 16–45

Collect

Arrangements, virtual accounts, sub-ledger, collections matching and sweeps — in shadow mode.
Gate: sub-ledger reconciles to the core to the paise for 10 days
DAYS 46–75

Control

Evidence, entitlement, maker-checker releases, fraud shield and the first five AI agents in advisory mode.
Gate: end-to-end release tested; second-line review of agents
DAYS 76–90

Go live

Three to five live projects, the first regulator report from the system, runbooks and a disaster-recovery test.
Gate: business, compliance and operations sign-off

Questions bank leaders ask

Frequently asked questions


Does any money leave our bank?

No. Every fiat balance stays in accounts in your core. MVESCROW holds the rules, evidence and a sub-ledger that reconciles to your core. Tokenised escrow runs in wallets controlled by your bank or its approved custodian.

Is Moneyverse the escrow agent?

No. Your bank, or the licensed entity named in the agreement, is the escrow agent and keeps the legal duties and the client relationship. Moneyverse provides the software.

Do we need MVCORE to use MVESCROW?

No. MVESCROW runs beside Temenos, Finacle, FLEXCUBE, BaNCS, mainframe and in-house cores. MVCORE makes escrow a native product with built-in virtual accounts, holds and tokenised rails — either as an augmentation layer beside your core or as your core.

Can the AI release money on its own?

Never. The deterministic rules engine calculates the entitlement, and named officers approve releases under maker-checker. Agents are capped at "prepare" — they verify, detect and explain, and the platform blocks them from approving or executing.

What if the rule set and the legal agreement disagree?

The agreement always prevails. Every rule links to its clause, every rule set is verified by your legal or escrow team before activation, and changes create a new approved version.

Where does the pilot start?

Usually with real-estate project escrow, where regulation already requires the controls. Marketplace and payment-aggregator escrow can run in the same pilot; M&A, trade, purpose-bound and tokenised escrow follow on the same engine.