By The Central Bank of Ireland has imposed a €3.25 million ($3.65 million) penalty on Coinbase Ireland Limited after finding that failures in customer-fund safeguarding, outsourcing oversight and internal controls left its designated safeguarding accounts underfunded for at least 18 months.
The October 22 enforcement announcement covers breaches between November 1, 2020, and August 19, 2025. The regulator’s settlement documents show that daily safeguarding shortfalls reached €3.4 million in 2023 and €5.2 million in 2024, exposing customers to potential losses if the electronic money institution had become insolvent.
Coinbase Ireland admitted the regulatory breaches and agreed to a reprimand and €3,252,618 fine, reduced from €4,646,597 through a 30% settlement discount. The sanctions remain subject to confirmation by Ireland’s High Court.
Coinbase said it had self-reported the issues and that no customers suffered financial losses or lost access to their funds. The company attributed much of the problem to measures taken to protect customers during periods of significant disruption.
How Did Coinbase’s Safeguarding Accounts Become Underfunded?
The regulator identified material errors in the systems used to calculate Coinbase Ireland’s daily safeguarding obligations and rebalance customer funds, beginning in July 2022.
Those errors resulted in daily funding shortfalls for at least 18 months. The average shortfall represented 0.54% of safeguarding obligations, which averaged €323 million in 2023 and €470 million in 2024.
Coinbase Ireland also failed to maintain proper segregation of customer funds for more than four years, allowing funds belonging to its customers to be mixed with funds belonging to customers of other Coinbase entities.
The distinction is important. The enforcement findings do not establish that customers actually lost money, but they identify weaknesses in arrangements intended to protect funds if a regulated institution fails.
As an authorised electronic money institution, Coinbase Ireland issues and redeems electronic money used by customers to access Coinbase’s cryptocurrency trading services. Its safeguarding obligations are governed by Ireland’s Electronic Money Regulations 2011.
Unlike a conventional bank deposit, electronic money relies on prescribed safeguarding arrangements rather than ordinary deposit insurance to protect customers against an issuer’s insolvency.
Investor Takeaway
The €5.2 million peak shortfall was a safeguarding deficiency, not a confirmed customer loss. However, the prolonged nature of the underfunding raises questions about the reliability of daily reconciliation systems and the additional controls required to prevent similar failures.
Why Did the Central Bank Criticise Coinbase’s Outsourcing Model?
The Central Bank found that Coinbase Ireland relied excessively on a US-based Coinbase Group company to perform critical safeguarding functions without maintaining sufficient local expertise and oversight.
Despite supervisory warnings in 2022 and 2023, outsourcing governance weaknesses remained substantially unchanged until December 2024, when Coinbase Ireland appointed an individual directly responsible for safeguarding following a regulatory inspection.
The settlement also identified material changes to banking arrangements that were not adequately communicated to the regulator.
Because a safeguarding banking partner would not accept direct US dollar deposits into the designated European account, some funds passed through US bank accounts before being transferred through Coinbase’s treasury-rebalancing process.
Approximately 30 institutional customers were also redirected to a Coinbase Inc. bank account after previously using arrangements involving Silvergate Bank, Signature Bank and Cross River Bank.
These arrangements differed from the safeguarding model described when Coinbase Ireland obtained its authorisation.
Central Bank Director of Enforcement Karen O’Leary said the regulator had “no tolerance for weaknesses in safeguarding arrangements.”
The findings illustrate a particular challenge for internationally operating financial groups: shared global infrastructure can reduce costs, but locally authorised subsidiaries remain responsible for meeting domestic regulatory requirements.
Investor Takeaway
Greater local oversight, control testing and safeguarding infrastructure may increase compliance costs for multinational crypto businesses. Shared technology does not eliminate the legal responsibilities of individual regulated subsidiaries.
How Does the Penalty Compare With Coinbase’s Previous Irish Settlement?
The action follows a separate €21.46 million penalty imposed on Coinbase Europe Limited in November 2025 for failures in anti-money laundering and counter-terrorist financing transaction monitoring.
That earlier case, previously covered by FinanceFeeds, involved more than 30 million transactions worth over €176 billion that were not properly monitored. The Irish High Court confirmed that sanction in January 2026.
Although both enforcement actions involve Coinbase subsidiaries, they concern different legal entities and regulatory obligations. The earlier case addressed financial-crime monitoring, while the latest concerns protection of electronic-money customer funds and governance of outsourced services.
The latest settlement also arrives after Coinbase changed its European regulatory strategy. As FinanceFeeds reported in June 2025, Coinbase secured authorisation under the EU’s Markets in Crypto-Assets Regulation through Luxembourg, replacing Ireland as its principal European crypto regulatory hub.
That transition does not remove Coinbase Ireland’s separate electronic-money obligations or responsibility for historic regulatory breaches.
What Are the Implications for Coinbase and Its Customers?
The immediate financial cost is relatively limited for Coinbase Global, but the enforcement findings carry broader operational implications.
Regulators are increasingly examining whether crypto companies have effective local governance, reliable customer-fund reconciliations and sufficient oversight of outsourced infrastructure.
Those obligations are especially relevant to firms serving customers across multiple jurisdictions through interconnected entities and payment arrangements.
Coinbase’s European expansion originally relied heavily on its Irish presence. FinanceFeeds previously examined the company’s decision to establish Ireland as its planned EU regulatory hub in 2023, before its subsequent move toward Luxembourg.
For customers, the latest action does not establish that funds have been lost or that withdrawals are currently impaired. The concern identified by the regulator was the potential difficulty of returning money promptly and fully if insolvency had occurred while safeguarding deficiencies existed.
The next formal milestone is High Court confirmation of the settlement. Investors will also have reason to assess whether Coinbase has completed remediation of the control weaknesses and whether further supervisory measures are required.
Investor Takeaway
The penalty alone is unlikely to materially affect Coinbase’s group finances. The more consequential issue is whether repeated compliance failures across European subsidiaries lead to additional remediation expenses, heightened supervisory scrutiny or constraints on future product expansion.