The Central Bank of Ireland has fined Coinbase Ireland Limited €3,252,618 for historic failures in safeguarding customer funds and overseeing outsourced operations. The regulator announced the action on October 22 after reaching a settlement with the company one day earlier. The breaches ran from November 1, 2020, to August 19, 2025, and arose under Ireland's Electronic Money Regulations 2011. Coinbase Ireland admitted the contraventions and agreed to the undisputed facts, although the sanctions still require confirmation by Ireland's High Court before taking effect.

What the regulator found

According to the Central Bank, Coinbase Ireland relied excessively on the U.S.-based Coinbase Group to implement safeguards required under Irish and European rules. The local entity also lacked sufficient expertise to oversee the management of customer funds. The regulator said inadequate system design and insufficient testing allowed a designated safeguarding account to remain underfunded for lengthy periods. It also identified weak internal controls, escalation procedures and governance for reporting material changes in safeguarding arrangements.

Related reporting: ESMA Sets Three-Month Limit for Non-MiCA Stablecoin Services

How the penalty was calculated

The Central Bank determined that a reprimand and monetary penalty of €4,646,597 were warranted. A 30% settlement discount reduced the payment to €3,252,618. The authority described safeguarding as a fundamental obligation for payment and electronic-money firms because it separates customer money from a company's own funds and supports access if the firm encounters trouble. The case is the regulator's 164th enforcement outcome, bringing its cumulative fines to more than €432 million.

Coinbase's response

Coinbase said several issues were self-reported to the regulator in January 2024 and that the underlying control problems have been resolved. The company said no customer suffered a financial loss or lost access to funds. It attributed some of the historic complications to actions taken during the 2023 U.S. banking disruption and to customer deposits that continued flowing to legacy accounts after the post-Brexit migration of European users. Coinbase said certain withdrawals for customers of other group entities were also paid from the Irish unit's safeguarding account before daily rebalancing restored the required amount. The company disclosed that technical errors left the account underfunded by an average of about 0.54% of its obligation during 2023 and the first half of 2024.

Safeguarding changes since the breaches

The exchange said it redesigned the calculation of its safeguarding obligation, added technical controls and strengthened reporting. Two third-party reviews of the new process have found no remaining issues since January 2025, according to Coinbase. The company also introduced a €25 million guaranty bond and appointed a dedicated head of safeguarding. Those assertions describe Coinbase's remediation; the Central Bank's enforcement action remains subject to court confirmation.

Why the case matters

Coinbase Ireland is an electronic-money institution that issues and redeems e-money used by customers on the wider Coinbase trading platform. That structure places the entity inside established payment rules even when the ultimate transaction involves crypto assets. The action shows how European regulators are examining the operational plumbing behind digital-asset services, including local governance, outsourced systems and the segregation of customer money. It also underscores that remediation does not automatically erase liability for earlier control failures. The case is separate from the €21.5 million penalty imposed last year on Coinbase Europe over anti-money-laundering transaction monitoring.

Sources

AI-generated editorial image; not a photograph of the reported event. Prepared with AI assistance and source verification.