Fiat is escrowed and insured in the Plutus bank account(s). Funds from here are then released directly to the debit card balance once the trade is confirmed on the blockchain.
Plutus does not hold any digital currencies. Instead, they are transferred to users directly. This is by design and makes Plutus resistant to attacks.