ROCKR PREUVES BBVA CASE STUDY · BBVA

Exhibit 1 · Overview

Spain's second-largest bank: its fraud defence, its artificial-intelligence alliance, its promise of 106 million people supported — and the €25-billion district it owns. What this study is, and is not. Two minutes of reading to place the whole before the detail.

Mathematically Verified Participation — why it is a core foundation for a bank's biggest promises

Two futures for
BBVA
— proving the four theorems, so the bank's promises succeed on their own terms

BBVA (Banco Bilbao Vizcaya Argentaria) is examined here twice, the way we examined Lloyds Banking Group in the United Kingdom: its fraud defence, its digital and artificial-intelligence transformation, and its people-and-places promise — €594 million invested and 106 million people reached, plus three-quarters ownership of Madrid Nuevo Norte, Europe's largest urban regeneration — delivered as they stand, and then delivered on infrastructure whose guarantees are formally proved. Tap any pillar to open the ledger.

Everything BBVA does against fraud happens at the channel and at the payment — the verified message, the verified call, and then the last moment, when the scam is mature and a victim is already at the keyboard. Everything it is building — the OpenAI alliance, the intelligent agents that will act on its customers' behalf — rests on rails that still cannot prove who is human. What remains untouched is the entitlement: the ticket, the place, the verified fact of a real person holding a real right and walking through a real door. That is the half the ROCKR research proves. The two halves are not competitors; they are the two legs of the same transaction — and the bank itself has already named the first half of the join, one channel at a time: the verified counterparty. Theorems 1 to 4 generalise it to the verified person in every transfer, every issuance and every entry.

Exemplar Use-Case Study · Asso ROCKR Preuves · ROCKR Proof Labs Ltd · August 2026 Sources: BBVA · Fundación BBVA · Ministerio del Interior · European Parliament · ROCKRCOIN Whitepaper v8.1

What we mean by an Exemplar Use-Case Study

A working document addressed to the people responsible for this institution, and to those following its progress. It is built on the public record — every date, figure and quotation sourced — and on the published ROCKR architecture, with the two kinds of claim visually separated throughout. Its heart is a set of interactive comparisons: for each pillar of the bank's promise, the future without verified participation beside the future with it, on concrete metrics. This is not a sales document: it is written to be corrected and improved by the people who know the institution best, in the open, with anyone welcome to follow. ROCKR is independent of BBVA and has no affiliation with the bank, its foundations or its investees; the "With ROCKR" scenarios are our proposal, built on the published ROCKR architecture, and nothing here should be read as implying the bank's engagement or endorsement. It is the companion to our study of Madrid Nuevo Norte, the district BBVA majority-owns — the same pairing of an institution and a place that our Lloyds and Manchester studies form in the United Kingdom.

Exhibit 2 · Story

From a state bank's 1993 concession to an artificial-intelligence alliance in 2025 and a leadership renewal in 2026: every step dated and sourced, so the reader can check the sequence rather than take our word for it.

The story so far

From Argentaria's promise to the age of artificial intelligence

Every date below is from the public record. The window that matters is open right now: the bank has just renewed its leadership for a new strategic cycle, and its district goes to market before the year ends.

1993

The bank takes on a district

The state bank Argentaria — one of BBVA's two predecessor institutions — wins the concession to redevelop the railway land north of Madrid's Chamartín station, on condition that the bank keeps at least 75% of the developer. When Banco Bilbao Vizcaya and Argentaria merge in 1999 to form BBVA, the promise comes with it. The bank has carried Madrid Nuevo Norte, through fifteen years of expropriation litigation and three decades of planning, ever since.1,2

2021

The bank makes a people promise

BBVA announces its Community Commitment: €550 million for social programmes between 2021 and 2025, reaching 100 million people, structured around education, reduced inequalities and entrepreneurship, and culture and research. Within it sits a Global Financial Education Plan to train one million people — a target the bank's chairman, Carlos Torres Vila, personally doubles to two million in 2022.3,4

2024 – 2025

The promise is exceeded — and the bank is tested

By the end of 2024 the Community Commitment is met a year early: €594 million invested and nearly 106 million people reached. In the same period the bank pursues, and ultimately fails to complete, a takeover of Banco Sabadell — and responds in December 2025 with a record share buyback of nearly €4 billion. In 2025 alone it adds a further €191.5 million in social investment, benefiting 7.7 million people, 68% of it in education.5,6,7

FEB – DEC 2025

The bank bets its next cycle on artificial intelligence

The 2025–2029 strategic plan, presented in February under the slogan "Go Further", puts a "Radical Client Perspective" first — excellence in every interaction, personalised service, and engagement built on data and AI (artificial intelligence). In December, Torres Vila and Sam Altman announce a strategic alliance between BBVA and OpenAI (the maker of ChatGPT) — described as an unprecedented level of collaboration in the financial industry, with joint teams, joint investments and preferential access to OpenAI's most advanced capabilities. More than 100,000 BBVA employees already use AI in their daily work.8,9,10,11

JAN – JUL 2026

The fraud defence goes public, and the leadership renews

In January BBVA becomes one of the first banks anywhere to move all customer messages off SMS (Short Message Service — ordinary text messages, which anyone can fake) onto verified RCS (Rich Communication Services — a newer standard in which the sender's identity is certified), so that an impersonator's message is forced into the old, logo-less thread, which itself becomes the warning. In April it adds verified calls: while the phone rings, the bank's app confirms in real time that the call is genuine. In May it creates a global executive area, AI Transformation, to industrialise the deployment of intelligent agents across the bank. In July it renews its leadership team for the new era, with eight senior executives stepping down.12,13,14,15

AUG – DEC 2026 Open now

All three strands meet in one window

The EU (European Union) Payment Services Regulation — final texts published 23 April 2026 — will make the bank refund victims of impersonation fraud in full once it applies, 21 months after publication in the Official Journal. The bank's district, Madrid Nuevo Norte, places its first land on the market before 31 December 2026, and the bank, advised by Rothschild, is choosing a strategic partner for part of its 75.54% stake. And the new leadership of the new strategic cycle is being appointed now. The terms on which all three of the bank's biggest promises will be delivered — and could be proved — are being set in this window.16,17,18

Exhibit 3 · Trust

The underlying problem: a bank whose two proudest promises — "106 million people supported" and "your money is safe from fraud" — both rest on records that only the bank itself can audit, just as the law makes it the payer of last resort for every impersonation. It is the proof that is missing — not the ambition.

Why this is a story now

A trust problem meets a liability cliff

PROBLEM 1

"106 million people reached" is the bank's own count

The Community Commitment's headline — €594 million invested, nearly 106 million people reached — is genuine, generous, and self-reported. "Reached" aggregates everything from a ten-year scholarship with mentoring to a video viewed once, and no outside party can decompose it. The same holds for the two million people trained in financial education, and for the 600,000 scholarships awarded over 24 years by the bank's Mexican foundation. None of this is improper — it is standard for the sector, Lloyds included. But a bank that asks society to trust its social arithmetic, while owning the district whose 348,064-job promise is likewise a model rather than a count, has doubled the same exposure: in 2040 there will be no independent way to verify that either promise was kept.5,7,19,20

PROBLEM 2

The law is making the bank the payer of last resort for fraud

Spain recorded 429,677 computer frauds in 2025 — nearly nine in ten of all cybercrimes — and Bizum, the mobile-payment service the banks jointly own, is the most impersonated payment channel in the country. Under the EU's Payment Services Regulation (PSR), agreed in April 2026, the bank of a customer tricked by an impersonator must refund the loss in full, with no upper limit; online platforms become liable to the bank only if they ignore fraud they have been told about. BBVA's answer — verified RCS messaging, verified in-app calls, biometric verification through its Veridas joint venture, and a reported 40% cut in fraud losses since 2019 — is the strongest customer-facing defence in Spain. But it defends the perimeter of an identity system in which a payment still cannot prove that a real, unique human stands at either end. The bank pays for every gap.12,13,16,21,22,23

THIS STUDY'S ANSWER

What "with ROCKR" means: Lloyds promises people and places; BBVA owns a place and funds people — and neither can currently prove delivery

The hardest question about BBVA's three strands is a fair one: how would anyone — a regulator, a shareholder, a neighbour of Chamartín — ever independently know? The "with" answer is a chain. First, credibility: the four theorems — machine-verified mathematical guarantees, an asset never sold to the public, no speculative path, a single issuance tap — are what distinguish this digital utility asset in a crypto landscape that has earned no one's trust, least of all a bank's; and a bank fluent enough to partner with OpenAI is precisely the audience that can check them. Then, liquidity: equal weekly auction credits for every verified participant, and grants issued only against authenticated presence, would let the bank's social programmes — the scholarships, the training mornings, the financial-education sessions — fund verified attendance rather than reported reach. Finally, proof: the same verification makes every delivered outcome auditable, year after year, by the regulator, the shareholder and the neighbourhood alike — the Community Commitment counted at the door, the district's jobs counted at the gate, and fraud made pointless and detectable rather than refunded after the fact. Deliver the promise, and prove it delivered. (WP 8.1 — the ROCKR-ROCKRCOIN Whitepaper, §6.5, §7.1.2 · The £150 Ticket Storyboard — TBTL · annex "Why a Coin at All?")

Exhibit 4 · Pillars

The heart of the study. Six pillars — Fraud defence, Digital & AI innovation, Education & youth, Culture & knowledge, Places, and Financial health — and for each a register comparing, metric by metric, the future without verified participation and the future with it. Tap a card to open its register; highlighted terms explain themselves in one tap.

The full spectrum

Six pillars, two futures

RED · FRAUD DEFENCE

Fraud — the strongest shield in Spain, paying for every gap

Verified messages, verified calls, biometrics — and a law that makes the bank refund every impersonation it fails to stop.

GREEN · DIGITAL & AI INNOVATION

Innovation — an OpenAI alliance in search of a trust layer

A bank that intends to lead banking in the age of artificial intelligence — on rails that cannot yet prove who is human.

INDIGO · EDUCATION & YOUTH

Education — 600,000 scholarships, two million trained

A youth machine larger than Lloyds' — measured, so far, only by the bank's own reports.

VIOLET · CULTURE & KNOWLEDGE

Culture — €180 million for knowledge, 25 million people

The Fundación BBVA's research, arts and science programmes — reach reported, participation unproved.

ORANGE · PLACES

Places — the bank that owns a €25-billion district

Lloyds has a Places office; BBVA has Madrid Nuevo Norte. No other European bank majority-owns its places promise.

BLUE · FINANCIAL HEALTH

Financial health — two million trained to decide better

Financial education and inclusion, from Madrid to Mexico — the promise closest to each individual customer.

Exhibit 5 · People

Who decides, and when: the people responsible, ordered by the package each one holds, the window now open, and what we ask. Nothing that assumes a technology risk.

Who holds the promises, the technology, the foundation and the district

The people responsible

Note: BBVA renewed its leadership team in July 2026, with eight senior executives stepping down. Function-holders below chair and chief executive level are therefore described by function; names will be verified against the post-renewal organisation before any approach.15

NameRoleRelevant comments / actions
Carlos Torres VilaChairman, BBVAAll three strands converge on his desk: he announced the OpenAI alliance with Sam Altman, personally doubled the financial-education pledge from one million to two million people, chairs the bank through the 75.54% Madrid Nuevo Norte stake decision, and has said BBVA "will lead banking in the age of artificial intelligence". Both halves of this study — and both halves of our Madrid study — are his.4,9,17,24
Onur GençChief Executive Officer, BBVAAnnounced the July 2026 leadership renewal "to make decisive progress on our strategic priorities in an environment shaped by the profound impact of artificial intelligence, while always keeping the customer at the center."15
To be verified post-renewalHead, AI Transformation (global area created May 2026)The area exists "to systematize and industrialize the creation, deployment and management of intelligent agents" across the bank — the natural counterpart for the innovation strand of this study.14
To be verified post-renewalResponsible Business / Fundación BBVA leadershipCustodians of the Community Commitment record (€594m, 106 million people) and of the culture-and-knowledge programmes (≈€180m, 25 million people) — the natural counterpart for the people strand.5,19
Sofía IzeDirector, Fundación BBVA MéxicoLeads the largest single youth programme in the group: 600,000 scholarships in 24 years, 54,000 current scholars accompanied for ten years each, 95% school continuity, 93% of graduates into a first job.20,25
Álvaro Aresti / José Ignacio MoralesChairman / Chief Executive, Crea Madrid Nuevo NorteHold the places strand in physical form: first land sales before 31 December 2026 fix the terms on which the district's promises are delivered. Examined in full in the companion study.17,18

The door that is open right now

Three clocks are running at once. The leadership of the 2025–2029 strategic cycle is being appointed now, which fixes who owns each strand for the rest of the decade. The Payment Services Regulation's 21-month application clock starts on publication in the EU's Official Journal, so the bank's fraud defence will be specified under the new full-refund liability regime, not the old one. And the bank's district places its first land on the market before 31 December 2026. Anyone who wants verified participation on the record of any of the three strands — including ROCKR Preuves — can put it there through the bank's innovation, responsible-business or district channels before those terms are set.15,16,17

The timing — and the ask

Nothing in this study asks BBVA to take a technology risk. The Payment Services Regulation applies from roughly 2028; the district's first homes are due in 2029 and its tracks are covered from 2033; ROCKR's grant-funded TestNet and MainNet programme will be complete, launched and publicly tested years before any of those dates — and no partner will ever be invited to adopt anything that has not already demonstrably worked, RUIPA (the weekly participation credit, explained in the glossary) included. The dependency runs the other way: the gold column above exists in 2033 only if the four theorems are proven now, inside the current research window. That is the one thing the people in the table can influence today, and it costs no money, no procurement and no commitment to adopt. We offer three observation seats, each free: Tracking & Assimilation (follow the proofs as they land), Tracking & Destruction (try to break them — hard questions improve the work), and Proof of Authority Platform Research Membership (help shape what is proved next). Expressions of interest to david@rockrpreuves.fr. Nothing has been awarded; nothing is payable by anyone unless it is.

Exhibit 6 · Sources

Provenance: every date, figure and quotation in the study, referenced one by one. Hard questions improve the work.

Provenance

Sources

  1. Argentaria concession (1993), ≥75% condition, 1999 BBV–Argentaria merger, expropriation litigation — The Objective, "Las sombras de Madrid Nuevo Norte" (21 Jan 2026); idealista/news (14 Jan 2026); Wikipedia, "Madrid Nuevo Norte".
  2. BBVA 75.54% shareholding in Crea Madrid Nuevo Norte; Merlin Properties 14.46%; Grupo San José 10% — El Economista; idealista/news; eldiario.es Somos Madrid (14 Feb 2025).
  3. Community Commitment 2021–2025: €550m, 100 million people, three focal areas (education; reduced inequalities and entrepreneurship; culture and research) — bbva.com press release (Oct 2021).
  4. Financial-education pledge doubled from one million to two million people by Carlos Torres Vila, Edufin Summit — bbva.com (Sept 2022).
  5. Commitment met a year early: €594m invested, nearly 106 million people reached by 31 Dec 2024 — bbva.com, "BBVA channeled nearly €600 million into social initiatives…" (May 2025).
  6. Failed Banco Sabadell takeover; record share buyback of nearly €4 billion announced Dec 2025 — Reuters; Dow Jones; BBVA press releases (Dec 2025).
  7. 2025 social investment: €191.5m (+7.6%), 7.7 million beneficiaries, 68% education — bbva.com (Jun 2026).
  8. 2025–2029 Strategic Plan, "Go Further", Radical Client Perspective (excellence in execution; personalised value proposition; engagement based on data and AI) — bbva.com, internal strategy event report (2025); BBVA Form 6-K, Q3 2025 and FY 2025 (SEC filings).
  9. BBVA–OpenAI strategic alliance: announced by Carlos Torres Vila and Sam Altman; joint teams, joint investments, preferential access — bbva.com (16 Dec 2025).
  10. More than 100,000 employees using AI daily; three-line AI agenda — Carlos Torres Vila at the 7th Expansión International Forum, bbva.com (May 2026).
  11. BBVA Spark: 1,700 customers, more than €750m channelled, over €900m invested in technology funds — Carlos Torres Vila at BBVA Spark Summit 2025, bbva.com (Nov 2025).
  12. Verified RCS (Rich Communication Services) messaging replacing SMS for all Spanish customers, rollout January 2026; impersonators forced into the old unverified thread — bbva.com (Jan 2026); Xataka (15 Jan 2026); noticiasbancarias.com (19 Jan 2026).
  13. Verified in-app calls, deployed from April 2026: real-time push notification and in-app confirmation "Llamada verificada" — bbva.com (22 Apr 2026); Bolsamanía (3 May 2026).
  14. AI Transformation global area created to industrialise intelligent agents — bbva.com (May 2026).
  15. Leadership renewal, July 2026: eight senior executives stepping down; Onur Genç quotation — bbva.com, "BBVA Renews Its Leadership Team to Drive Transformation in This New Era" (Jul 2026).
  16. PSD3 / PSR (Third Payment Services Directive / Payment Services Regulation): provisional agreement 27 Nov 2025; final texts 23 Apr 2026 (Council documents 8221/26, 8222/26); full refund for impersonation fraud with no upper cap; platform liability; application 21 months after Official Journal publication — European Parliament press release (27 Nov 2025); Freshfields (4 May 2026); Morrison Foerster (30 Apr 2026); Binar (Apr 2026).
  17. First Madrid Nuevo Norte land sales of €300–400m before end-2026; Rothschild mandate for a strategic partner — Crónica Norte (24 Jun 2026); EjePrime (3 Mar 2026); idealista/news; eldiario.es (14 Feb 2025).
  18. Crea Madrid Nuevo Norte governance and timetable — see the companion study, "Two futures for Madrid Nuevo Norte", sources 1–17.
  19. Culture and knowledge line: ≈€180m facilitating access to knowledge, research and culture to 25 million people, principally through the Fundación BBVA (Frontiers of Knowledge awards; five research areas) — bbva.com (Oct 2021); becas.com, "Información Becas Fundación BBVA".
  20. Fundación BBVA México: more than 600,000 scholarships in 24 years ('Chavos que Inspiran'); 54,000 current scholars; 95% school continuity; 93% of graduates in a first job, 80% formal; ten-year accompaniment — bbva.com (Apr 2026, Dec 2025); fundacionbbva.mx; Fundación BBVA México Informe Anual 2025.
  21. Cybercrime 2025: 488,426 offences, 429,677 computer frauds (nearly nine in ten), 383,285 victims (+9.3%) — Ministerio del Interior / La Moncloa, "Informe sobre la Cibercriminalidad en España 2025" (10 Jul 2026).
  22. Bizum: 27.6 million users; bank ownership (CaixaBank, Santander, BBVA among shareholders); most impersonated payment rail — Wikipedia "Bizum"; Banco de España, "Estafas por Bizum"; ECC-Spain (2026).
  23. BBVA fraud-prevention record (≈75% of attempted fraud prevented; ≈40% lower losses since 2019) — bbva.com (Jan 2023); Veridas joint venture — bbva.com (Mar 2025). Figures carried from the bank's own 2023 communication; not independently verified.
  24. "We were pioneers in the digital transformation… we are going to lead banking in the age of artificial intelligence" — Carlos Torres Vila, BBVA Annual General Meeting, Bilbao — bbva.com (Mar 2026).
  25. Sofía Ize quotation and Informe Anual 2025 figures (1.9 million people impacted; 8,000 volunteers; 15,300 mentoring hours) — bbva.com (May 2026).
  26. All gold-marked specifications — The ROCKR-ROCKRCOIN Whitepaper v8.1 (Aug 2026): §4.2 transaction modes, §4.2.1 anti-theft, §4.3 spare capacity, §5 identity architecture, §5.6 holder binding, §6.5 auditability, §7.1 monetary policy & RUIPA, §7.1.2 event classes, §8 Electoral College governance.
  27. ROCKR / ROCKRCOIN, "The £150 Ticket Storyboard — TBTL" and the annex "Why a Coin at All?" (working documents, 5 August 2026) — the fee-free model, the forfeitable gate bond, and the monetary mechanism (RUIPA; seed/circulate/grow; a single issuance tap) are detailed there. Unpublished; available on request.

Exhibit 7 · Philosophy

Optional altitude: the philosophical case for proofs — a five-move story from a black hole to a turnstile, honest about which moves are physics and which are hypothesis.

The foundation

From black holes to ROCKR

It begins at a black holePenrose, 1965 — the point where physics stops

In 1965 Roger Penrose proved that when a massive star collapses, it must form a singularity — a point where gravity becomes infinite and the laws of physics simply stop working. The work earned him the 2020 Nobel Prize in Physics, and it left a question that shaped the rest of his career: what kind of theory could describe reality where our best equations fail? His answer, pursued over decades, was geometric — beneath space and time there is structure, and understanding it would take more than computation.

The mind that steps outside the rulesGödel's theorem — and a proposal Penrose himself marks as speculative

Kurt Gödel proved that any sufficiently rich mathematical system contains truths that cannot be proven by following that system's own rules. Yet human mathematicians can step outside the rules and simply see that those statements are true. Penrose drew a bold conclusion: human understanding is not, at bottom, rule-following — not a computation.

His proposed physical mechanism for this sits at the speculative edge of physics, is contested, and he says so. What matters for this story is the door it opens: if minds can grasp truths no algorithm reaches, where do those truths live?

Platonic truths — the incorruptible kindWhat cannot be propagandised

Euler's identity — eiπ + 1 = 0 — cannot be reinterpreted by a demagogue or twisted to justify a war. Its meaning is contained entirely within itself: sealed against misinterpretation. Plato held that such truths — and perhaps beauty, perhaps goodness — exist independently of us: the mind does not invent them, it discovers them.

Penrose takes that view seriously all the way down into the geometry of the universe. The moral extension is a hypothesis, not a result — but the mathematical core is plain fact: some truths cannot be hijacked.

Why every -ism can be hijackedThe translation problem

Democracy, capitalism, socialism, religion, science: none is intrinsically good or bad. They are built from language, and language is porous — a regime can imprison dissidents in the name of "protecting democracy", and no fundamental constant of the universe exists to expose the misuse. When we try to carry an absolute — justice, equity, meaning — into institutions, something is lost in translation: the ideal arrives as an "-ism", a vessel that saints and tyrants can pick up alike.

No system will save us by existing. Every system needs vigilant, ethical operators — and citizens with the disposition to look for what is true. As Plato taught, all anyone can do is inculcate the disposition to discover truth.

Where ROCKR stands in this storyMove the load-bearing parts out of language

ROCKR exists to create an environment where inculcating that disposition — the disposition to discover what is true — is independently possible, for every individual and every community. We cannot make an ideology intrinsically good; nobody can. What we can do is make two moves at once: move a system's load-bearing promises out of hijackable language and into mathematics, the one medium where truth survives translation — and move the system itself out of distant institutions and into the living spaces of the local community. The four theorems are the first move made real: the guarantees people must rely on — real people, real presence, erasure without expropriation, a supply that cannot lie — stated as machine-checkable mathematics rather than terms of service (WP 8.1, Background).

And the philosophy sets the purpose as well as the method: a community that curates its own live experiences — every kind, every genre, chosen bottom up — is an environment where the disposition to discover what is true can grow. RUIPA grants make that environment open to everyone; the theorems make the liquidity behind it incorruptible.

We do not claim ROCKR is intrinsically good; nothing built by people is. We claim its guarantees are written in the one language that cannot be hijacked — and that everything else stays, as it must, in the hands of the individual and the community.
Glossary

Understanding the Ledgers

ROCKR's stated scope is "the full spectrum of human-centric activity: Education, The Arts, Community, Sport, High Street Retail and Health" — which maps, pillar for pillar, onto the three strands of the bank's own promise: its fraud defence, its digital and AI (artificial intelligence) transformation, and its people-and-places commitments. Each card opens a ledger comparing the two futures against concrete metrics.

Published fact (bank, foundations, government, EU institutions) ROCKR design specification (Whitepaper v8.1) — a target, not yet a measured outcome

Six terms carry the weight of every comparison — in plain words:

DID (decentralised identifier) — a digital identity the person owns and carries, verified once and reusable everywhere: like a passport number that lives in your phone, proves you are a real, unique human, and never reveals your name to the system.

Proof of Activity (PoA) — the verified, anonymous record created automatically every time an identity attends or hosts something. It is how the district accumulates evidence of participation as a by-product of simply operating.

Smart Market Clearing — the auction at the heart of ROCKR: an event is only confirmed once enough committed, escrowed demand meets the offer, so everything that goes ahead is already funded.

Settlement — payment that is final in under half a second, wallet to wallet, at near-zero cost. Being paid, not being promised.

RUIPA — a small weekly credit every verified participant receives which can only be spent on taking part in an experience, and expires if unused: participation income that cannot be hoarded.

The four theorems — the protocol's published, machine-checked mathematical guarantees, among them no fake people (every participant is a verified, unique human) and no money from nowhere (every unit of value is fully accounted for). Once proven, they hold for every transaction, permanently — which is why proving them now is the whole game.
Fraud defence

The strongest shield in Spain — paying for every gap

BBVA's fraud defence works by verifying the bank's side of every contact: verified RCS (Rich Communication Services) messages, verified in-app calls, biometric identity checks through its Veridas joint venture. What no bank can yet verify is the human side — that a real, unique person stands behind each account and each payee. The EU (European Union) Payment Services Regulation makes that gap the bank's own cost: full refund for impersonation fraud, no upper limit. ROCKR closes the gap from the other end, giving every participant a verified digital identity (a — Decentralised Identifier) so that fraud becomes pointless and detectable rather than refunded after the fact.

Without ROCKRWith ROCKR
Verified messages The bank's identity is certifiedSince January 2026 every BBVA message arrives in a verified RCS thread with the bank's logo; a fraudster's message is forced into the old SMS (Short Message Service) thread — the customer must still notice the difference. Both identities are certifiedSender and recipient are each a verified ; a message from an unverified party is not merely unbadged, it has no channel to arrive on (WP 8.1, §5, §5.6).
Verified calls Real-time app confirmationSince April 2026 the app shows "verified call" while the phone rings — but BBVA itself notes some calls (insurance, some branch managers) are not yet covered, and the burden of checking stays with the customer. No burden to shiftWhere every counterparty is verified, the customer never carries the check; an unverified caller simply cannot present as a counterparty inside the system (WP 8.1, §5.6).
Refund exposure (PSR — Payment Services Regulation) Full refund, no capOnce the PSR applies (~2028), the bank refunds every successful impersonation in full; with 429,677 computer frauds recorded in Spain in 2025, the perimeter defence is also the profit-and-loss account. No anonymous payee to impersonateEvery payee is a verified human or a verified organisation; a "safe account" scam has no destination that is not permanently tied to a verified identity (WP 8.1, §4.2, §4.2.1).
Mule accounts Detected by behaviour, after onboardingKYC (Know Your Customer) checks verify a document at account opening; a rented or coerced account passes and is caught, if at all, by pattern analysis later. Structurally impossibleAn account is a wallet bound to a living identity attestation of one unique human; there is no second account to rent out and no anonymous wallet to launder into (WP 8.1, §5, §5.6).
The record of defence The bank's own figures"≈40% lower fraud losses since 2019" is the bank's own 2023 communication — plausible, but not independently auditable. Public, aggregate, continuousRefused transfers and verified-identity coverage are non-personal aggregates on a public ledger — a defence record anyone can audit (WP 8.1, §6.5, §8).
Digital & AI innovation

An OpenAI alliance in search of a trust layer

BBVA intends to lead banking in the age of AI (artificial intelligence): a strategic alliance with OpenAI (the maker of ChatGPT), a global AI Transformation area industrialising intelligent agents, more than 100,000 employees using AI daily, and BBVA Spark banking the startup economy. Every one of those systems will act on behalf of, or upon, a customer — and none of them can yet prove that the entity at the other end is a real, unique human rather than another machine. ROCKR is that missing layer: a verified-human substrate the bank's AI can rely on, with guarantees written as machine-checked mathematics — the one form of assurance an AI-fluent institution can verify for itself. Which transaction types that covers, and which it does not, is set out on the ROCKR Proof Labs homepage, "Where the four theorems reach".

Without ROCKRWith ROCKR
Who the AI is serving An account, presumed humanThe Radical Client Perspective personalises for the account holder of record; synthetic identities, shared credentials and agent-driven fraud all present as customers. A verified, unique humanEvery profile the bank's AI personalises for is anchored to a live identity attestation; "no fake people" is a proved property, not an assumption (WP 8.1, §5; Theorem — no fake people).
Agent-to-agent payments The coming frontier, unguardedAs intelligent agents begin to transact, nothing in today's rails distinguishes a customer's agent from a fraudster's; liability rules written for humans stretch to breaking. Agents act for identitiesAn agent transacts only as the delegate of a verified ; its authority is an attestation, revocable and auditable (WP 8.1, §5, §5.6).
Trust in the asset "Crypto" earned distrustA bank cannot build on an asset class defined by speculation, anonymous holders and supply games — the very reasons banks have kept their distance. The negation, by theoremA digital utility asset issued only against authenticated activity, held only by verified humans, supply invariants machine-checked, never sold to the public, no speculative path, a single issuance tap (WP 8.1, §7.1).
Verifying the claims Terms of service and auditsEvery platform promise the bank relies on is a document plus a periodic audit — language, which can drift. Machine-checked mathematicsThe four theorems are stated in a form a machine — and therefore the bank's own engineers — can check independently, permanently (WP 8.1, §6.5).
The innovation record First-mover, again exposedBeing first into digital, then AI, means being first to meet each technology's fraud surface with no industry playbook. First onto proved groundThe bank that pioneered digital adoption is the natural first examiner of infrastructure whose guarantees are proofs — at zero cost, through the observation seats below (WP 8.1, §8).
Education & youth

600,000 scholarships, two million trained — reported, not counted

BBVA's youth machine is larger than the Lloyds pledge this study mirrors: 600,000 scholarships in 24 years through 'Chavos que Inspiran' in Mexico, 54,000 current scholars accompanied for ten years each, a financial-education pledge doubled to two million people, open-education platforms and digital-divide programmes in Spain. The outcomes the foundation reports — 95% school continuity, 93% into a first job — are impressive and self-measured. ROCKR would let every session, mentoring hour and completion be an authenticated event: the promise counted at the door, by infrastructure no one — including the bank — can quietly adjust.

Without ROCKRWith ROCKR
Attendance & mentoring Programme records8,000 volunteers and 15,300 mentoring hours in 2025 — recorded by the foundation, invisible to any outside auditor. (PoA)Each verified scholar's attendance at each session is an on-chain event; the ten-year accompaniment becomes a ten-year public record — with no personal data exposed (WP 8.1, §4.2, §5.6, §6.5).
"Two million trained" A reach figureFinancial-education training aggregates course completions and content views; the pledge's fulfilment is the bank's own tally. A count of verified humansOne , one person, one completion — duplicates and drop-outs are structurally distinguishable from graduates (WP 8.1, §5, §8).
First-job outcomes Twice-yearly surveyThe foundation surveys graduates on employment and salary; response rates and self-reporting shape the 93% figure. Attested, privatelyA graduate's employment attestation can be verified without a survey and without exposing the employer or wage — proof without a database of lives (WP 8.1, §5.6).
Funding the next cohort Donation campaigns"Levanta la mano por la educación" asks donors to trust the reported record. Issuance against presenceGrants issued only against authenticated attendance mean every donated euro maps to a verified session that demonstrably happened (WP 8.1, §7.1).
Culture & knowledge

€180 million for knowledge — reach reported, participation unproved

Through the Fundación BBVA, the bank funds research, science and culture at a scale few institutions match: roughly €180 million to bring knowledge, research and culture to 25 million people, the Frontiers of Knowledge awards, five research areas from biomedicine to the environment. It is the strand of the Community Commitment where "people reached" is hardest to pin down — a lecture livestream, an exhibition visit and a funded researcher all count as one. ROCKR treats each as what it is: a verified attendance, a verified contribution, a verified event.

Without ROCKRWith ROCKR
"25 million people" Views + visits + audiences, summedThe figure honestly mixes deep engagement with a single click; no one can decompose it. Attendance, distinguishable by kindA verified presence at a lecture and a verified stream view are different event classes, separately countable, all anonymous in aggregate (WP 8.1, §7.1.2, §8).
Programming culture Curated top-downWhich exhibitions, which cities, which nights — decided by committee, attendance discovered afterwards. Cleared by verified demandThe confirms an event only when committed, escrowed demand from verified attendees meets the offer — everything that goes ahead is already funded (WP 8.1, §7.1.2).
Paying creators & researchers Grants and prizes, discretionaryGenerous, prestigious — and dependent on the foundation's continued choices. Issuance against authenticated activityQualifying + authenticated = issuance, always: the settlement is policy, the issuance is a theorem (WP 8.1, §4.3, §7.1).
Audience privacy Registration listsCultural marketing accumulates databases of attendees. Proof without a listIdentity surfaces only at the moment of a bid; a participant can be erased from the platform with their wallet intact — the right to be forgotten without expropriation (WP 8.1, §5.6; Theorem 3).
Places

The bank that owns a €25-billion district

Lloyds Banking Group speaks of "places" through an office and a strategy. BBVA owns one: 75.54% of Crea Madrid Nuevo Norte, carrier of the Chamartín promise since 1993 — €25.2 billion, 10,500 homes, a claimed 348,064 jobs, a 14-hectare park over the tracks. No other European bank majority-owns its places promise. That is a strength and a doubled exposure: the bank's social arithmetic and its district's job arithmetic are both models only the promoter can audit. This pillar summarises; the companion study, Two futures for Madrid Nuevo Norte, examines the district in full.

Without ROCKRWith ROCKR
The jobs promise 348,064 — a model, not a countAn input–output projection commissioned by the promoter; nothing will ever be counted at a gate. Counted at the gateVerified attendance at training, work and events turns the promise into a public, running total (WP 8.1, §4.2, §6.5).
The bank's dual role Owner and refereeThe bank funds the district, reports its progress, and will one day declare its promises kept — with the land title itself under live challenge from the heirs of the expropriated. A referee neither side controlsDelivery recorded on infrastructure whose guarantees are theorems is credible precisely because the owner cannot adjust it (WP 8.1, §6.5, §8).
Exit without erasure A partner sale changes the custodianRothschild is seeking a strategic partner for part of the stake; the district's records follow the corporate structure. The record outlives the ownerAttested transfers and aggregate participation live on a public ledger, whoever holds the shares (WP 8.1, §4.2; Theorem 1).
People and places, joined Two separate reportsThe Community Commitment and the district report to different audiences on different bases. One verification, both promisesThe same identity that proves a scholarship session proves a district event; the bank's people strand and places strand finally share an evidence base (WP 8.1, §5, §8).
Financial health

Two million trained to decide better

The promise closest to each customer: financial health. BBVA's Global Financial Education Plan — the pledge Torres Vila doubled to two million people trained — plus microfinance for millions of vulnerable entrepreneurs through the Fundación Microfinanzas BBVA, and digital-skills programmes for millions more. The bank frames its purpose as helping people make better financial decisions; the strand's evidence, like the others', is the bank's own reporting. ROCKR adds the missing property: participation that proves itself, and a weekly participation credit — RUIPA — that turns inclusion from a programme into an income.

Without ROCKRWith ROCKR
Training completions Platform statisticsCourse completions and workshop sign-ins, tallied by the bank. (PoA)One verified person, one completion, on a ledger the bank reports from but cannot edit (WP 8.1, §4.2, §6.5).
Reaching the excluded Microcredit + branch outreachMillions of vulnerable entrepreneurs financed — each provider re-verifying each person, each time. One identity, every doorA person verified once carries their (Decentralised Identifier) to every programme, lender and employer — inclusion that compounds (WP 8.1, §5).
Incentive to participate Goodwill and marketingFree courses reach those already inclined to come. credits, expiring weeklyA small weekly credit every verified participant receives, spendable only on taking part, expiring if unused — participation income that cannot be hoarded (WP 8.1, §7.1, §7.1.2).
Privacy of the vulnerable Programme databasesHelping someone means filing them. Erasure with asset preservationA person can leave the platform, be forgotten, and keep everything they earned — by theorem, not by policy (WP 8.1, §5.6; Theorem 3).