Part 05 · Web3 and digital assets
Digital assets and CBDCsالأصول الرقمية والعملات الرقمية CBDC
Three different things that get mixed up constantly. Knowing the difference is most of what a beginner needs here.
8 minute read
Digital assets are things owned and moved on a shared ledger rather than in a database a bank owns. There are three kinds, which one news story will happily blend, and what separates them is who stands behind the value.
The categories are crypto assets, stablecoins and central bank digital currencies.
They are not interchangeable names for one thing on a blockchain. Bitcoin is a crypto asset (الأصل المشفّر) with no issuer promising a riyal at redemption. A private company may issue a stable token against reserves. A central bank issues a CBDC (العملة الرقمية للبنك المركزي) itself. All three represent value digitally, but the promise, risk and rules come from different places.
Loading diagram…
They are all digital currencies, so what is the difference?
This is the confusion that blocks understanding of the whole field. Bitcoin, a stablecoin and a central bank digital currency are all numbers on a screen moving across networks. So why separate them?
Do not ask about the technology. Ask one question: who is promising you anything?
With Bitcoin, nobody promises you anything at all. No company issues it, no institution undertakes to give you anything for it, and its value comes purely from what buyers want. If everyone decided tomorrow that it is worth nothing, there is nobody to make a claim against.
With a stablecoin, the issuer promises it is worth a dollar and holds reserves to meet that promise. Here there is a responsible party, and the value rests on their ability to deliver. Which is why the question about a stablecoin is not its price, but its reserves and who audits them.
With a central bank digital currency, the state is the one promising. It is official money in digital form, not a startup project, and in terms of obligation it is no different from the note in your pocket.
The ladder is clear: no promise, then a company's promise, then a state's promise. That ordering is what determines your risk, who you can claim from when things go wrong, and which regulator cares about you.
A crypto asset without a redemption promise
A crypto asset such as Bitcoin can be held and transferred over a distributed network. Its price does not come from a contractual right to exchange it for a fixed number of dollars or riyals with an issuer. It comes from supply, demand, confidence in the network's rules and the ability to transfer the asset.
Calling it currency does not make it official money. A shop may agree to accept Bitcoin, just as it might accept gold or reward points, but private acceptance does not give it the status of the riyal. Its price can rise 20 per cent and fall just as quickly. Buyers therefore face a volatile asset rather than a stable unit for quoting your salary or rent.
Bitcoin also illustrates what it means to have no issuer. Its rules set an eventual ceiling near 21 million units, and no company holds a dollar behind each one. If the market price collapses, there is no redemption desk obliged to pay face value. That is fundamentally different from a product claiming every token is backed by stored assets.
Stability is a claim that must be tested
A stablecoin (العملة المستقرة) tries to hold a value against a reference, often one US dollar. A customer might deposit 100 dollars, receive 100 tokens, and later return the tokens to redeem the dollars. The model sounds simple. Its quality depends on what the word "backed" actually means.
First identify the reserve. Is it bank cash, short-term government bills, longer bonds or other crypto assets? Then identify who examines it and how often. Finally ask whether the token holder has a direct legal right to redeem, with what fees and on what timetable.
Reserves can be full while redemption remains weak. If only large institutional customers can redeem above a high threshold, a small user must sell in the market. During stress, a token promising one dollar may trade at 97 cents. Reserves support the promise, while an enforceable redemption mechanism puts it to a real test.
Read reserve reporting carefully. A full financial audit covers more than a narrow attestation at one point in time. A monthly report may establish what existed on the measurement day without covering every movement between reports. Confidence comes from liquid assets, segregated custody (الحفظ), independent review and an enforceable right to redeem.
Digital central bank money
A CBDC is a liability of a central bank, not a token company's liability. It is a digital form of central bank money designed for retail use or settlement among institutions. It might run on distributed ledger technology or a central database. The technology does not define it. The issuer and legal claim do.
A bank account does not become a CBDC merely because its balance appears on a screen. Your ordinary deposit is a commercial bank's liability. Physical currency is a central bank liability. CBDC projects explore a digital version of the second kind under a design chosen by each country.
Saudi Arabia and the United Arab Emirates tested Project Aber in 2020 for cross-border settlement among their central banks and participating commercial banks. The experiment was institutional. It was not a speculative token distributed to shops. The example shows why "digital" does not necessarily mean an open asset bought by individuals on an exchange.
Custody is more than a password
Control of many crypto assets turns on a private key. This mathematical secret signs a transfer from an address. Whoever controls it can usually move the asset, and losing it can mean losing access permanently. There is not always a "forgot password" process that restores control.
That is why custody matters. You can hold your own keys in a device or wallet, gaining control while accepting responsibility for secure backups and theft prevention. An exchange can hold them for you, making account recovery possible while exposing you to the exchange's security and solvency. Both routes show a number on a screen, but they place risk somewhere different.
Consider two unlike cases. A delivery driver writes a recovery phrase on paper and loses it while moving home, leaving the network unable to recognise the previous owner. A large bank protects customer keys through multiple controls, but a technology provider is breached. In both cases, a custody failure can separate economic ownership from the practical power to transfer.
"Is the asset safe?" is too broad. Ask where the key sits, who can use it, how a transfer is approved, and what happens after death, device loss or custodian insolvency. Those are legal and operational questions, not technical details to postpone.
Inside the product engine
Loading diagram…
The system of record depends on the custody model. With self-custody, the key is control. With platform custody, the account ledger shows what you hold against the firm while assets may sit in platform addresses. Engineers must separate the transfer request from the screening result from execution state. If the customer retries after a drop, the same identifier must not debit twice.
This maps to messaging and compliance you already met. A transfer is a signed message. Sanctions and identity screening are decisions before movement. Reconciliation catches when the app says balance left while the asset remained at the address, or the reverse.
Identity travels with a transfer
An open network does not mean regulated businesses can deal with unknown addresses without controls. The Financial Action Task Force applies the Travel Rule to virtual asset service providers where its standards and local rules require it. Information about the originator and beneficiary must travel or be made available with qualifying transfers between providers.
Your identity is not necessarily written directly onto every public chain. The platform checks who you are, associates your account with relevant addresses, and screens counterparties and sources of funds. It may stop a transfer to an address linked to theft or sanctions. It may request more information when assets move to a self-hosted wallet.
This separates what a network can technically do from what a lawful product may offer. Software may be capable of sending a token in minutes, while a regulated platform blocks the movement until identity checks are complete. Compliance is not a stage after launch. It helps decide whether the product can launch at all, and in which market.
The product name does not choose the regulator
In Saudi Arabia, describing a product as digital or blockchain-based is not enough to identify the authority. If a token performs a payment or stored-value function, the Saudi Central Bank enters the analysis. If it gives an investment interest or a right resembling a security, the is the starting point. If it represents protection against a risk, the becomes relevant.
The local market does not treat retail crypto trading like acceptance or equity brokerage. Many open internet offers are not locally licensed products you can classify as a card rail or a fund. Focus on policy work such as CBDC experiments, sandboxes, and supervisory requirements rather than naming unlicensed apps as if they were ready Saudi products.
One product may combine several functions. A stablecoin used for payment and then placed in a yield programme can raise both payments and investment questions. A platform that holds and transfers the asset adds custody and transfer risk on top of the token's own risk. Compliance teams therefore start from functions, rights and the path of funds, not the marketing label.
Before launch, define the countries, customers, assets, custodian and partners. Then assess licensing, anti-money laundering, sanctions, data protection, advertising and redemption rights. The code may work in twenty countries while the legal offer works in only two.
Those questions separate the field. Bitcoin is a volatile asset with no issuer's redemption promise. A stablecoin is a claim that needs reserves, review and an enforceable exit. A CBDC is a sovereign liability built under an official design. Their interfaces may look alike. Their risks and regulatory treatment come from what sits behind them.
New words here
- Crypto assetالأصل المشفّر
- A digital token issued privately, with no company obliged to give you anything for it.
- Stablecoinالعملة المستقرة
- A token that promises to stay worth one unit of a currency. Only as good as the reserves behind it.
- CBDCالعملة الرقمية للبنك المركزي
- Central bank digital currency. Government-issued money in digital form.
- Custodyالحفظ
- Looking after the private keys. Whoever holds the key holds the asset, and losing it is permanent.
The short version
- Crypto, stablecoin, and CBDC answer three different questions about who promises what.
- Screening sits between a signed transfer message and execution. Retry must not debit twice.
- In Saudi Arabia, treat retail crypto apps cautiously. Policy experiments and licences matter more than brand names.
- Custody is the hard engineering problem: whoever holds the private key holds the asset, and there is no undo.
Check your understanding
Answer before reading the explanation. Getting one wrong here is worth more to you than a lucky guess.
This is a learning guide built from field experience. It is not legal, regulatory or investment advice, and it does not replace qualified professional counsel. FinTech rules change quickly and vary by country, so check the primary source before you make a decision that matters.