XRP Escrow Explained: Time-Locked And Conditional Payments

XRP escrow is a feature built into the XRP Ledger that locks XRP or tokens until a set time passes, a secret condition is met, or both. When the escrow is ready, a finish sends the funds to the named recipient; if it expires first, a cancel sends them back to the sender, and no company or person sits in the middle.

Most holders first hear about escrow through Ripple, which locked 55 billion XRP in escrow in 2017. That makes it easy to assume escrow is a Ripple product. It isn’t. It’s a ledger feature open to any account, and knowing how it works helps you read escrow headlines, and any escrow contract someone shows you, with clear eyes.

What is an escrow on the XRP Ledger?

An escrow on the XRP Ledger is a lock the ledger itself enforces. In the traditional sense, escrow means a lawyer, bank or escrow company holds money until a deal is done. The XRP Ledger documentation says its version replaces “the third party with an automated system built into the ledger.”

The same page says: “An escrow locks up XRP or fungible tokens, which can’t be used or destroyed until conditions are met.” So when XRP is “in escrow,” the ledger is holding it under fixed rules.

You create one with a transaction called EscrowCreate. It works like a form with a few boxes:

• Destination: the “address to receive escrowed funds.”
• Amount: the XRP or tokens “to deduct from the sender’s balance and escrow.”
• FinishAfter: the earliest time the funds can be released.
• CancelAfter: the time the escrow expires.
• Condition: an optional secret lock.

What types of XRP escrow are there?

The XRP Ledger supports three types of escrow: time-based, conditional and a combination of the two.

Type	What opens it	Simple example
Time-based	A date passes (FinishAfter)	Funds unlock on a set day next year
Conditional	A secret “fulfillment” matches the lock (Condition)	A buyer hands over the secret when a job is done
Combination	A date passes, then the secret is still needed	Funds stay locked until a date, then need the secret

For a time-based escrow, the docs say “funds only become available after a certain amount of time passes.” The FinishAfter date is immutable, which means it can’t be changed after the escrow is created.

For a conditional escrow, the docs say “the condition serves as a lock on the funds and won’t release until the correct fulfillment key is provided.” The condition is visible on the ledger. The fulfillment stays secret until someone uses it. The only supported condition type is called PREIMAGE-SHA-256.

How does an XRP escrow finish or get cancelled?

An XRP escrow ends in one of two ways: a finish sends the funds forward to the recipient, or a cancel sends them back to the sender. The docs describe four stages:

1. Held: the escrow exists and its finish-after time hasn’t passed.
2. Ready: the finish-after time has passed. The docs say “anyone can finish it.”
3. Conditionally Ready: a finish needs the fulfillment. For a combination escrow this starts once the finish-after time passes; for a purely conditional one it starts right away.
4. Expired: the cancel-after time has passed. The escrow “cannot be finished, and anyone can cancel it.”

“Anyone can finish it” does not mean anyone gets the money. The EscrowFinish docs say it delivers funds “from an escrow to the recipient.” A stranger could submit the finish, and the funds would still go to the destination set at the start.

A worked example: Account A locks XRP for Account B with a finish date one year out and a cancel date two years out. For the first year, neither A nor B can touch it. In year two, anyone can finish it, and the XRP goes to B. If nobody finishes it by the cancel date, anyone can cancel it, and the XRP goes back to A.

What happens if an escrow has no cancel date?

If an escrow has no cancel-after time, it can never go back to the sender. The EscrowCancel docs say that if the original EscrowCreate “did not specify a CancelAfter time, the EscrowCancel transaction fails.” The only exit is forward, to the recipient.

That’s why the dates matter so much. Both are set once, at creation, and can’t be edited later. The ledger adds some guard rails: an escrow without a finish-after time must have an expiration time, and token escrows must always have one.

Escrow also has a cost. The docs say “while the escrow is incomplete, the sender is responsible for the reserve requirement of the Escrow object.” Escrow takes two transactions, one to create and one to finish or cancel, and the docs note that “the costs can make it infeasible for small amounts.” A finish that includes a fulfillment also has a higher minimum transaction cost.

How does Ripple use XRP escrow?

Ripple uses the same time-based escrow that any account can create. In a post dated December 8, 2017, Ripple said it used escrow “to establish 55 contracts of 1 billion XRP each that will expire on the first day of every month.” It added: “As each contract expires, the XRP will become available for Ripple’s use.”

Ripple also said it would “return whatever is unused at the end of each month to the back of the escrow rotation.” The post’s title gives its stated reason: supply predictability.

Our articles on who controls the monthly escrow unlock and how to read Ripple’s monthly release cover the Ripple side in detail. Because ledger escrows are public, anyone can look them up on an XRP Ledger explorer.

What can’t XRP escrow do?

XRP escrow can’t change its mind, release early, judge a deal or grow the funds. Before the finish-after time, the docs say the funds “can’t be accessed.” The destination and dates are fixed at creation.

Escrow also can’t tell whether a deal was done well. In a conditional escrow, the ledger only checks whether the right secret was provided. And an escrow pays no interest. It returns exactly what went in.

There are a few more limits. You can’t create an escrow with dates in the past. Release times follow ledger close times, so they can drift by a few seconds. And a holder whose token trust line is deep frozen can’t finish an escrow to receive those tokens. Our guide to XRP trust lines explains how token freezes work.

Is the “no middleman” idea ever wrong?

The “no middleman” idea has one real exception: a conditional escrow depends on whoever holds the secret. If that person loses it or refuses to hand it over, the escrow can’t be finished. The only exit is then the cancel date, if one was set.

A time-based escrow runs on its own, but it’s only as good as what was typed in at the start. A wrong destination or a wrong date can’t be fixed later. Escrow removes the middleman, not the need to check the setup.

Four questions to ask about any escrow

Run these four questions on any escrow you see in the news or in a contract:

1. Where does it go? Which address is the destination?
2. When can it finish? What is the finish-after time?
3. Is there a cancel date? If not, the only exit is forward.
4. Is there a condition? If so, who holds the secret that opens it?

If you can’t answer one of the four, ask more questions before relying on the escrow.

What to check next

When escrow shows up in a headline, look for the destination, the dates and any condition before drawing conclusions. For Ripple’s escrow, the monthly release pattern is public on the ledger, so you can check it yourself rather than relying on screenshots.

Sources

• XRP Ledger docs: Escrow
• XRP Ledger docs: EscrowCreate
• XRP Ledger docs: EscrowCancel
• Ripple: Ripple Escrows 55 Billion XRP for Supply Predictability (Dec 8, 2017)