We had similar problem (banking service). Instead of "moving" directly to destination we include a safe account in the middle.
A > safe > B
Safe account is called this way because we don't risk the misuse of money in case of rollback.
A > safe > B
Safe account is called this way because we don't risk the misuse of money in case of rollback.
Why did you decide to go with an escrow model in your use case?