@Edent This is very similar to how Oyster or OV Chipkaarts work, if you take TfL to be the escrow. It's also very similar to how EMV handles offline transactions.
The difference being that the users don't cryptographically sign or validate the messages themselves.