Two-Tier CBDC Architecture Explained: Banks, PSPs, and the Central Bank Layer

Two-tier CBDC architecture is the model most central banks are studying for retail digital currency. The central bank issues the money and runs the core settlement layer. Banks and payment service providers handle wallets, onboarding, compliance, and customer service. That split matters. It keeps public money at the center but avoids turning the central bank into a retail bank for millions of users.

The Bank for International Settlements, the World Bank, and several central bank pilots have all pointed toward intermediated or hybrid CBDC designs. The reason is practical, not ideological. Banks and PSPs already know how to onboard customers, run payment operations, screen transactions, and support merchants at scale. Central banks are built for monetary issuance, settlement, and oversight.

What Is Two-Tier CBDC Architecture?

A two-tier CBDC architecture divides the system into two operating layers:

1. Tier 1 - Central bank layer: issuance, redemption, monetary policy rules, core ledger, settlement, and system oversight.
2. Tier 2 - Intermediary layer: banks, PSPs, fintechs, mobile money operators, and other licensed providers that serve end users.

In a pure two-tier model, retail users do not hold accounts directly with the central bank. You would access CBDC through a regulated bank app, wallet provider, or payment platform. The claim may still be on central bank money, depending on the legal design, but your day-to-day interaction is with an intermediary.

A hybrid CBDC model goes one step further. Intermediaries still run onboarding and payments, but the central bank keeps enough replicated transaction or balance data to restore service if a major provider fails. BIS research has treated this as a useful resilience feature, because retail payment systems cannot simply stop when an intermediary has an outage.

Why Central Banks Prefer an Intermediated Model

A direct retail CBDC sounds simple on paper: everyone opens a wallet with the central bank. In practice, it creates awkward questions. Who answers password reset calls? Who handles suspicious activity reports? Who maintains merchant terminals? Who explains a failed payment to a taxi driver at 11 p.m.?

That is why the two-tier CBDC architecture looks closer to the current financial system. Central banks provide final settlement and trusted money. Commercial banks and PSPs provide retail services. This division reduces disruption to bank funding, credit creation, and compliance operations.

To be blunt, a direct CBDC account system would force central banks into work they are not designed to do. Retail payment operations are messy. Failed reversals, duplicate transaction references, chargeback disputes, expired device certificates, and sanctions false positives are daily problems. In real payment integrations, a retry without an idempotency key can create duplicate wallet funding, while many APIs return an HTTP 409 Conflict when the same transaction reference is reused. These are Tier 2 problems, and experienced PSPs are better placed to manage them.

Role of the Central Bank in Tier 1

In a two-tier CBDC system, the central bank usually performs five core functions.

• Issuance and redemption: It creates and withdraws CBDC, defines monetary characteristics, and manages conversion with cash or reserves.
• Core ledger operation: It operates or oversees the central settlement ledger, whether centralized or based on distributed ledger technology.
• Wholesale settlement: It manages positions among banks and other approved intermediaries.
• Rule setting: It defines access rules, technical standards, wallet limits, privacy requirements, and interoperability expectations.
• Supervision and resilience: It licenses intermediaries, monitors systemic risk, and ensures the core infrastructure can withstand outages or attacks.

The Banque de France and Eurosystem digital euro experiments are a useful example. Their hierarchical model places a centralized ledger at Tier 1, operated by the Eurosystem, while supervised intermediaries connect through existing payment infrastructure such as TARGET services and instant payment rails.

Role of Banks and Payment Providers in Tier 2

Tier 2 is where CBDC becomes usable for the public. Banks and PSPs would provide the interfaces, compliance controls, and operational support that people and businesses actually touch.

Customer Onboarding and Compliance

Intermediaries perform Know Your Customer checks, anti-money laundering monitoring, sanctions screening, suspicious activity reporting, and, where applicable, travel rule compliance. These obligations are already embedded in bank and PSP workflows. Rebuilding them inside a central bank would be inefficient and risky.

Wallets, Apps, Cards, and APIs

Banks and PSPs may offer mobile wallets, merchant tools, cards, API access, QR code payment flows, and offline payment devices. Some intermediaries may focus on consumer wallets. Others may build treasury tools for businesses or programmable payment interfaces for platforms.

Retail Payment Execution

Intermediaries initiate, validate, and record retail transfers. Depending on the design, they may settle directly on the central bank ledger, through batched settlement, or through a hybrid setup where the central bank receives replicated records. In distributed ledger designs, banks may also operate nodes and maintain token accounts.

Customer Support and Post-Transaction Services

This part is often underestimated. End users need statements, receipts, dispute support, merchant reconciliation, notifications, and billing tools. A central bank ledger can confirm that value moved. It will not automatically solve merchant refunds or help a user recover access to a wallet on a lost phone.

Pure Two-Tier vs Hybrid CBDC

The terms are sometimes used loosely, so the distinction is worth making.

• Pure two-tier CBDC: The central bank maintains wholesale positions and settlement infrastructure. Intermediaries maintain retail customer records and provide payment services.
• Hybrid CBDC: Users may have a direct claim on the central bank, while intermediaries still handle payments and accounts. The central bank keeps a backup record or replicated view so it can restore balances if an intermediary fails.

For large economies, the hybrid model is attractive because it balances user protection with private sector service delivery. It also reduces single-provider failure risk without making the central bank the front desk for every payment issue.

Real-World CBDC Architecture Examples

Project Aurum in Hong Kong

Project Aurum, developed by the Hong Kong Monetary Authority and the BIS Innovation Hub, built a two-tier retail CBDC prototype with a wholesale interbank system and a retail e-wallet layer. It tested two instruments: intermediated CBDC and CBDC-backed stablecoins. The important lesson is that a single architecture can support different digital money instruments while keeping wholesale balances anchored at the central bank.

Digital Euro Experiments

Digital euro experiments led by Banque de France and Eurosystem partners used a hierarchical structure. Tier 1 issued digital euros and provided central bank money to supervised intermediaries. Tier 2 systems, run by those intermediaries, managed wallets or accounts for citizens, firms, and merchants. This model shows how CBDC can connect to existing European settlement and instant payment systems rather than replacing them outright.

China's e-CNY Functional Split

The People's Bank of China has described a model where the central bank handles issuance, registration, ownership verification, liquidity management, risk controls, audit, and data analysis. Commercial banks and wallet providers manage deposit and withdrawal, user services, payments, and wallet operations. The details are jurisdiction-specific, but the split is recognizably two-tier.

Key Benefits of Two-Tier CBDC Architecture

• Continuity with the existing financial system: Banks and PSPs keep their role in customer relationships, payments, and compliance.
• Lower operational burden for central banks: The central bank focuses on issuance, settlement, and oversight.
• Competition at the service layer: Multiple providers can build better wallets, merchant tools, and APIs.
• Better compliance coverage: Regulated intermediaries already have AML, KYC, sanctions, and monitoring teams.
• Resilience options: Hybrid designs allow central banks to reconstruct retail balances if an intermediary fails.

Risks and Design Trade-Offs

Two-tier CBDC architecture is not risk-free. It shifts major responsibilities to intermediaries, which creates third-party risk. A weak wallet provider can become a national payment vulnerability. Poor API standards can fragment the market. Overly strict wallet limits may reduce usefulness, while loose limits may accelerate deposit outflows from banks during stress.

Privacy is another hard problem. Central banks want financial crime controls. Citizens want payment privacy. Intermediaries need enough data to comply with law, but not unlimited visibility into every transaction. The right answer is likely tiered access, privacy-by-design controls, and strict audit rules. Blanket surveillance would damage trust. Full anonymity at scale is unlikely to pass regulatory scrutiny.

What This Means for Professionals and Developers

If you work in banking, fintech, compliance, or blockchain infrastructure, two-tier CBDC systems will create demand for practical skills in payment architecture, wallet security, identity verification, API design, transaction monitoring, and settlement integration.

Developers should understand both traditional payment messaging and digital asset design. ISO 20022 concepts, ledger reconciliation, hardware security modules, secure key storage, and wallet recovery flows matter as much as smart contracts. If your goal is to build regulated digital asset systems, Blockchain Council's Certified Blockchain Developer™ and Certified Blockchain Architect™ are natural learning paths. For policy, business, and implementation roles, Certified Blockchain Expert™ can help connect CBDC design with broader digital asset infrastructure.

The Practical Future of CBDC Will Be Two-Tier

The most credible retail CBDC plans are not trying to remove banks and PSPs. They are trying to define a cleaner division of labor. Central banks issue trusted digital money and run the settlement foundation. Licensed intermediaries compete on access, service, compliance, and user experience.

If you want to prepare for this shift, start by mapping the full CBDC payment flow: onboarding, wallet creation, funding, transaction authorization, settlement, reconciliation, fraud monitoring, and recovery. Then study one live architecture, such as Project Aurum or the digital euro experiments, and compare it with your current payment stack. That exercise will teach you more than any abstract CBDC debate.