Coinbase Ireland accepts €3.25m fine for safeguarding failures

Customers using Coinbase Ireland’s e-money services should know the Irish regulator found gaps in how their fiat funds were separated and checked; the agreed sanctions still need court approval before taking effect.

The findings concern the safeguards around cash used to buy crypto, and the risk customers could have faced if the Irish entity became insolvent.

The Central Bank of Ireland announced on 22 October that Coinbase Ireland admitted breaches of safeguarding and outsourcing rules covering 1 November 2020 to 19 August 2025. The settlement includes a reprimand and a €3,252,618 penalty, reduced from €4,646,597 under a settlement discount, according to the Central Bank’s enforcement announcement. The High Court must confirm the sanctions before they take effect.

How were customer funds handled?

Coinbase Ireland issues e-money that customers can use on the group’s trading platform. Safeguarding rules require an e-money firm to separate those customer funds from other money and keep them available for redemption. The Central Bank’s settlement notice says faulty systems and controls led to daily shortfalls in Coinbase Ireland’s designated safeguarding account for at least 18 months.

The maximum daily shortfall was €3.4 million in 2023 and €5.2 million in 2024, while the average daily shortfall was 0.54% of the firm’s safeguarding obligations during that period. The regulator also found that customer funds were mixed with money belonging to other Coinbase entities. About 30 institutional customers were directed to deposit dollars into a US bank account held by Coinbase Inc. before the funds were transferred to the Irish entity’s safeguarding account.

What did the regulator find about oversight?

Coinbase Ireland outsourced safeguarding to a US Coinbase group company for more than four years, but the Central Bank said the Irish entity lacked the local expertise and governance to oversee that critical work. It also found that material changes to safeguarding arrangements were not reported promptly, or at all. These failures mattered because the Irish entity remained responsible for meeting its obligations even when group companies handled the work.

If Coinbase Ireland had become insolvent while the breaches were ongoing, customers might not have been able to recover their funds promptly and in full, the regulator said. That is a risk described by the regulator, not a report that customers lost money.

Does the fine require action from customers?

The announcement does not direct customers to change how they use Coinbase, and the penalty is not yet in force pending High Court confirmation. The findings apply to Coinbase Ireland’s e-money and fiat services, which support customers using the group’s crypto trading platform; they do not describe a failure to segregate crypto assets. For customers, the practical point is to distinguish those fiat balances from crypto holdings and to understand that the regulator’s findings relate to how the Irish entity held and monitored customer money.

Source material

• Central Bank’s enforcement announcement — centralbank.ie
• settlement notice — centralbank.ie