Irish Central Bank Agrees 3,252,618 Euro Fine With Coinbase Over Safeguarding Failures
Key Facts
The Central Bank of Ireland announced an agreement with Coinbase Ireland Limited on a fine of 3,252,618 euros for breaches relating to the safeguarding of customer funds and outsourcing. The bank said the settlement was reached on 21 October 2026 and covered failures in safeguarding arrangements and oversight of work outsourced to the U.S. group. The breaches span 1 November 2020 to 19 August 2025, according to the regulator's statement. The settlement document revealed that the account designated to safeguard customer funds had a daily funding shortfall for at least 18 months. The maximum daily shortfall reached 3.4 million euros in 2023, then rose to 5.2 million euros in 2024. These amounts relate to underfunding of the safeguarding account, while Coinbase told Reuters the failures had not caused customers financial losses or prevented them from accessing their funds.
The central bank linked the failures to the Irish entity's reliance on the U.S.-based Coinbase group to carry out outsourced safeguarding work. It described that reliance as "excessive" in its findings on the outsourcing arrangements examined by the regulator. It also found insufficient local expertise at the Irish company, alongside shortcomings in system design and testing. The breaches included the company's failure to notify the regulator of material changes to its arrangements for safeguarding customer funds. Coinbase attributed the underfunding to software errors and said it averaged about 0.54% of its total safeguarding liabilities during 2023 and the first half of 2024. The company added that it had voluntarily reported many of these issues to the central bank in January 2024.
In its response, Coinbase provided details of deposit channels that led to customer funds being commingled with funds belonging to customers of other group entities. It said it directed 30 customers to a bank account belonging to a related U.S. entity when Silvergate Bank was at risk of collapse. It explained that those customers' deposits were commingled in that account with funds belonging to customers of another Coinbase entity. It also acknowledged "initial commingling of funds" under other arrangements, including deposits that continued to be sent to old UK accounts after Britain's departure from the European Union. The company made daily transfers to Irish safeguarding accounts, but acknowledged that these transfers did not prevent commingling at the point of initial deposit. As part of the remedial measures disclosed alongside the settlement, Coinbase said it had introduced a guarantee bond worth 25 million euros as an additional safeguarding mechanism.
The safeguarding settlement follows a separate regulatory case announced by the Central Bank of Ireland on 6 November 2025 against Coinbase Europe Limited. The fine in that case was 21,464,734 euros, according to the bank's statement on the enforcement action at the time. The breaches concerned failures in transaction monitoring for anti-money laundering and counter-terrorist financing purposes. The company subject to that decision was Coinbase Europe, while the current safeguarding and outsourcing settlement was reached with Coinbase Ireland. The earlier case covered transaction monitoring, while the findings in the current settlement addressed funding of the safeguarding account, outsourcing arrangements and associated systems. The announced regulatory actions therefore cover two group entities and breaches of different kinds.
Under the current settlement, Coinbase Ireland admitted the breaches and accepted a reprimand and financial penalty, according to the central bank's document. The document set the fine before the settlement discount at 4,646,597 euros. The agreed amount includes a 30% discount under the regulator's settlement scheme. The sanctions, however, remain subject to High Court confirmation of the agreement between the bank and the company before taking effect. The settlement document states that the sanctions do not take effect "unless confirmed by the High Court", a judicial condition that remains outstanding following the agreement of 21 October 2026.