Ireland fines Coinbase unit €3.25 million over safeguarding failures

The Central Bank of Ireland has fined Coinbase Ireland €3.25 million for failing to keep customer funds properly safeguarded and oversee outsourced controls, exposing a gap between the protections it promised and the arrangements it operated. The breaches covered 1 November 2020 to 19 August 2025, and the sanction will take effect only if confirmed by the High Court, according to the Central Bank’s enforcement announcement.

The regulator set the penalty at €4.65 million before applying a 30% settlement discount, bringing it to €3,252,618. Coinbase Ireland admitted the contraventions and agreed to a reprimand as well as the monetary penalty. The case concerns the Irish company’s electronic money services: customers hold fiat balances issued by Coinbase Ireland and use them to buy crypto through the wider Coinbase platform.

How large were the safeguarding shortfalls?

The settlement notice says errors in Coinbase Ireland’s systems and processes meant it failed to calculate accurately how much it needed to place in its designated safeguarding account. That account is intended to separate customer money from the firm’s operational funds, so customers can recover it if the electronic money institution becomes insolvent.

The Central Bank says the account was underfunded on a daily basis for at least 18 months. The maximum daily shortfall was €3.4 million in 2023 and €5.2 million in 2024; against average safeguarding obligations of €323 million and €470 million in those years, respectively, the average daily shortfall was 0.54%. The regulator said the failures could have made it harder for customers to recover funds promptly and in full in an insolvency or wind-down.

The mechanism also mattered. The regulator says roughly 30 institutional customers were directed to deposit dollars into a US bank account held by Coinbase Inc., a Coinbase Group company, before the money moved to the Irish safeguarding account. The Irish entity’s banking partner would not accept USD deposits directly into its EEA safeguarding account. Coinbase Ireland also relied on manual steps despite having described automated processes during authorisation.

What did outsourcing change about accountability?

Coinbase Ireland had outsourced the critical safeguarding function to a US group company for more than four years, but the regulator found it lacked enough local expertise and governance to oversee that work. In the Central Bank’s settlement notice, the regulator said it had raised governance concerns with the firm in July 2022 and March 2023, and those concerns were not adequately addressed until the Irish unit appointed a safeguarding lead in December 2024.

Outsourcing can give a local firm access to group-wide systems and expertise, but it does not transfer the regulated entity’s responsibility for customer funds. Here, weaknesses in local oversight compounded errors in daily calculations and delayed escalation of material changes to the regulator. The case therefore tests the substance behind cross-border operating models: whether a locally authorised company can understand and control the functions it relies on elsewhere in its group.

How does this compare with Coinbase’s earlier Irish fine?

This penalty follows a separate €21.5 million fine against Coinbase Europe in November 2025 over transaction-monitoring failures, as The Block reported. That case concerned monitoring more than 30 million transactions; this one concerns fiat customer funds, safeguarding accounts and oversight of outsourced controls. The distinct penalties involve different Irish entities and regulatory duties, so they should not be read as one combined finding.

Coinbase has said the issues were resolved and no customers lost money or lost access to funds. That addresses reported outcomes, while the Central Bank’s findings concern the controls and protections required even when no loss occurs. The next signals are the High Court’s confirmation of the sanction and whether Coinbase Ireland’s strengthened processes maintain accurate daily reconciliations, adequate local oversight and timely reporting of changes.

Source material

• Central Bank’s enforcement announcement — centralbank.ie
• Central Bank’s settlement notice — centralbank.ie
• The Block reported — theblock.co