SBP Launches National Digital Asset Custody Framework & Wholesale Digital Rupee (CBDC) Pilot with Commercial Banks

The State Bank of Pakistan (SBP), in coordination with PVARA and commercial banking partners, has officially commenced the pilot phase of its National Digital Asset Custody framework and Wholesale Digital Rupee (CBDC) interbank settlement network.

SBP Launches National Digital Asset Custody Framework & Wholesale Digital Rupee (CBDC) Pilot with Commercial Banks

In an unprecedented regulatory and technological leap for South Asian financial architecture, the State Bank of Pakistan (SBP) has formally rolled out the operational pilot for the National Digital Asset Custody Framework and the Wholesale Digital Rupee (CBDC) settlement infrastructure. Developed in close technical collaboration with decentralized ledger firm Soramitsu and operating under the newly enacted statutory oversight of the Pakistan Virtual Asset Regulatory Authority (PVARA), the initiative marks Pakistan’s entry into sovereign-backed institutional digital assets and real-time programmable wholesale settlement.

The pilot integrates Tier-1 commercial banking institutions—including Habib Bank Limited (HBL), Meezan Bank, Bank Alfalah, MCB Bank, and selected digital retail banks—into an enterprise-grade Distributed Ledger Technology (DLT) core linked directly with Pakistan’s national instant payment backbone, Raast.


Strategic Architecture: The Dual-Layer CBDC & Custody Engine

Pakistan’s financial system has historically grappled with high paper-cash circulation, expensive physical cash logistics, friction in interbank wholesale liquidity management, and substantial correspondent banking fees for international trade settlement. The newly launched pilot resolves these inefficiencies through a dual-layer institutional ledger.

flowchart TD
    subgraph SBP Sovereign Core
        SBP[State Bank of Pakistan - Monetary Authority]
        CBDCEngine[Soramitsu-Engineered Hyperledger DLT Core]
        Vault[Sovereign Token Mint & Burn Registry]
        SBP --> CBDCEngine
        CBDCEngine --> Vault
    end

    subgraph Interoperability & Identity Rail
        Raast[Raast ISO 20022 Gateway]
        NADRA[NADRA Pak-ID Verifiable Credentials]
        CBDCEngine <--> Raast
        CBDCEngine <--> NADRA
    end

    subgraph Institutional Tier: Commercial Banks
        HBL[HBL Digital Custody Node]
        Meezan[Meezan Islamic Tokenized Liquidity Node]
        BAFL[Bank Alfalah Smart Contract Rail]
        MCB[MCB Wholesale Settlement Node]
        
        CBDCEngine === HBL
        CBDCEngine === Meezan
        CBDCEngine === BAFL
        CBDCEngine === MCB
    end

    subgraph Regulated Market Participants
        VASP[PVARA-Licensed VASPs & Exchanges]
        Treasury[Corporate & Institutional Treasuries]
        Fintech[EMIs & Payment Service Providers]
        
        HBL --> VASP
        Meezan --> Treasury
        BAFL --> Fintech
    end

1. Sovereign Tokenized Liquidity & Interbank Wholesale Clearing

Under the Wholesale CBDC layer, interbank liquidity settlements that previously required end-of-day batch processing via the Real-Time Gross Settlement (RTGS) / PRISM system can now settle atomically in sub-second finality (T+0).

Commercial banks deposit statutory reserves at the central bank, which programmatically mints matching 1:1 tokenized Digital Rupees within institutional escrow vaults. This enables:

  • 24/7/365 Real-Time Collateral Movement: Banks can optimize their liquidity ratios across weekends and bank holidays without counterparty default exposure.
  • Smart-Contract-Enabled Islamic Liquidity Instruments: In collaboration with Meezan Bank’s Shariah supervisory board, the DLT architecture supports automated, asset-backed Murabaha and Sukuk fractional token settlements complying strictly with Islamic jurisprudence.
  • Zero-Egress Interbank Netting: Interbank transaction verification runs across low-latency local cloud topologies, minimizing external bandwidth overhead.

2. Institutional Digital Asset Custody & PVARA Integration

Following the statutory passage of the Virtual Assets Act 2026, the custody framework establishes standardized technical parameters for financial institutions holding digital assets on behalf of corporate clients, high-net-worth investors, and licensed Virtual Asset Service Providers (VASPs).

Under SBP BPRD Circular directives, all qualified custodian banks must maintain:

  • Multi-Party Computation (MPC) and Cold Vault Architecture: Institutional private keys cannot reside in single-point storage; they require quorum-based shard signing across geographically separated data centers.
  • FIPS 140-3 Level 4 Hardware Security Modules (HSMs): Key management infrastructure must meet physical tamper-resistance and local cryptographic storage mandates.
  • 100% In-Country Data Residency: In accordance with the national sovereign cloud directive, all distributed ledger nodes, validator logs, and customer transaction meta-indices must execute strictly on onshore infrastructure such as Enterprise Dedicated Servers Pakistan and compliant Pakistan Cloud VPS.

Technical Specifications: Soramitsu Core & Raast ISO 20022 Mesh

The engineering backbone powering the Digital Rupee pilot is built on an enterprise-hardened iteration of Hyperledger Iroha 2, optimized specifically for central banking operations with Byzantine Fault Tolerant (BFT) consensus algorithms.

Metric / Dimension Specification in SBP Pilot Engine Operational Benefit
Consensus Algorithm Sumeragi / BFT Consensus Model Zero fork probability, deterministic 400ms transaction finality
Throughput Capacity 25,000+ Transactions Per Second (TPS) Scalable to national retail volumes without congestion surcharges
Messaging Standard Native ISO 20022 XML (pacs.008, pacs.009, pain.001) Flawless API interoperability with SWIFT and Raast Instant Rails
Cryptographic Standards Ed25519, Secp256k1 & Dilithium Quantum-Resistant Forward-looking defense against post-quantum cryptographic decryption
Key Custody Protocol Multi-Signature Threshold Secret Sharing (TSS 3-of-5) Eliminates single points of compromise for bank-grade asset custody
Sovereignty & Hosting Tier-3 / Tier-4 Domestic Onshore Cloud Nodes Complete immunity from extraterritorial cloud outages and sanctions
sequenceDiagram
    autonumber
    actor Corp as Corporate Payer / Exporter
    participant BankA as Commercial Bank Node (HBL/BAFL)
    participant SBPNode as SBP Core CBDC Engine
    participant BankB as Beneficiary Commercial Bank (Meezan/MCB)
    actor Beneficiary as Corporate Supplier / Tech Exporter

    Corp->>BankA: Initiate Wholesale Transfer (ISO 20022 XML)
    BankA->>BankA: Verify HSM Key Signature & Balance Quorum
    BankA->>SBPNode: Transmit Atomic DvP / Smart Settlement Request
    SBPNode->>SBPNode: Validate BFT Consensus & Execute Mint/Burn Balance Shift
    SBPNode-->>BankA: Instant Settlement Confirmation (pacs.002)
    SBPNode-->>BankB: Credit Tokenized Wholesale Reserve (pacs.009)
    BankB->>Beneficiary: Instant Fiat/Digital Rupee Credit Notification

Macroeconomic Impact on Pakistan’s Digital Economy

The operationalization of the Digital Rupee and the Custody Framework represents a watershed moment for the broader tech and financial sectors in Pakistan:

1. Slashing Cross-Border B2B Settlement Costs for Tech Exporters

Pakistani IT exporters, software agencies, and SaaS enterprises have historically lost 3.5% to 7% in foreign exchange conversion spreads, correspondent bank intermediary commissions, and multi-day clearing delays when repatriating earnings.

The Digital Rupee wholesale rail introduces direct programmable liquidity bridges with bilateral regional trading corridors. By settling against sovereign tokenized assets, Pakistani tech exporters can achieve immediate same-day realization of software service receivables into corporate bank accounts with zero intermediary leakage.

2. Elimination of Unregulated Shadow Custody

Prior to PVARA and the SBP custody directive, domestic investors and tech entrepreneurs had to rely on offshore, unverified third-party platforms for digital asset custody, exposing billions of rupees in domestic capital to offshore regulatory freezes and exchange insolvency.

Regulated commercial bank custody brings digital assets under the statutory protection of the central bank, backed by mandatory capital adequacy reserves and comprehensive cybersecurity audits mandated by SBP and SECP.

3. Synergies with Local High-Performance Cloud Infrastructure

The rigorous cryptographic latency and high-availability demands of running distributed ledger validator nodes have catalyzed demand for high-tier local data centers.

Fintechs, neo-banks, and enterprise software firms participating in the SBP sandbox cannot route cryptographic payloads through overseas relays. To meet strict sub-10ms network requirements, organizations are deploying node clusters across domestic edge data centers powered by Ultra-Fast Pakistan Shared Hosting for frontend portals and Managed Cloud Solutions for low-latency backend core operations.


Regulatory Safeguards: Anti-Money Laundering & Tiered Privacy

A paramount consideration addressed in the SBP pilot whitepaper is the delicate balance between user privacy and international Financial Action Task Force (FATF) anti-money laundering (AML) compliance:

  1. Zero-Knowledge Proof (ZKP) Identity Layer: While wholesale interbank transfers require full KYC identity matching via NADRA’s Pak-ID biometrics, low-value retail transactions (below PKR 25,000) leverage zero-knowledge cryptographic proofs. This ensures everyday consumer privacy without compromising anti-terror financing vigilance.
  2. Real-Time Automated Sanctions Screening: The Soramitsu-engineered ledger features automated smart contract compliance modules that verify sender and receiver wallet addresses against global sanctions lists before committing blocks to the ledger.
  3. Emergency Circuit Breakers: The central bank maintains supervisory multi-sig authority to halt anomalous transaction spikes or isolate compromised network nodes without taking down the entire national clearing grid.

What Lies Ahead: Roadmap to Nationwide Commercial Rollout

The SBP has outlined a structured three-phase rollout plan leading to complete national implementation:

  • Phase 1 (Q3 2026 - Pilot Trial): Wholesale interbank settlement, statutory reserve tokenization, and institutional digital custody sandbox for licensed commercial banks and top-tier fintechs.
  • Phase 2 (Q1 2027 - Corporate & Cross-Border Corridor): Expansion to corporate treasury management, programmable tax deduction via the Federal Board of Revenue (FBR) Raast gateway, and cross-border CBDC interoperability pilots with Middle Eastern central banks.
  • Phase 3 (Q4 2027 - Public Retail Digital Rupee): Full consumer wallet rollout integrated natively into digital banking apps, offering offline digital payments via NFC and biometric verification.

As Pakistan continues its rapid digital transformation, the convergence of progressive monetary policy, sovereign DLT infrastructure, and resilient local cloud hosting ensures the nation is firmly positioned at the forefront of the global digital finance revolution.