Ireland Fines Coinbase €3,252,618 Over Customer Funds Safeguarding Failures
Key Facts
The Central Bank of Ireland announced a settlement with Coinbase Ireland on October 22, 2026, over failures to safeguard customer funds, imposing a penalty of €3,252,618 after a settlement discount. The breaches, the bank said, ran from November 1, 2020, to August 19, 2025, and the parties reached the settlement on October 21, 2026. The case concerns arrangements to safeguard funds deposited by customers with the Irish entity, not the safety of crypto-asset trading itself. The bank said the company failed to safeguard customer funds adequately because of shortcomings in systems design and insufficient testing of controls. The sanctions will take effect only after approval by the Irish High Court.
The Central Bank said Coinbase Ireland relied excessively on the US-based Coinbase group as an outsourced service provider. It said the Irish unit lacked sufficient local expertise to oversee customer funds safeguarding arrangements. The shortcomings included weak governance, oversight, escalation and reporting of material changes, according to the bank's statement. The bank described the safeguarding failures as stemming from shortcomings in systems design and control testing, as well as oversight and management. Customers of the Irish entity use electronic money issued by that entity to buy crypto assets through the group's trading platform.
The penalty was €4,646,597 before a settlement discount, then reduced by 30% to €3,252,618. The discount reflects the settlement mechanism agreed by the parties, while the announced penalty remains subject to High Court approval. The Central Bank's director of enforcement said payment and e-money firms are required to safeguard customer funds in full. He added: "We have no tolerance for weaknesses in safeguarding arrangements." The case is the bank's 164th enforcement outcome and brought the total fines it has imposed to more than €432 million. It is also the fifth settlement under administrative sanctions procedures since changes introduced by the Individual Accountability Framework Act 2023.
Coinbase said the safeguarding issues did not cause customers financial losses or deny them access to their funds. The company added that Coinbase Ireland had self-reported a number of matters to the Central Bank in January 2024. According to the company's account, errors in the account ledger left the safeguarding account underfunded by an average of approximately 0.54% of total safeguarding liabilities during 2023 and the first half of 2024. It said designated safeguarding accounts must remain separate from the funds of the group's customers in other jurisdictions and from the company's own funds. These requirements explain why the case focused on the segregation, funding and oversight of fiat money held by the Irish entity.
In a separate incident related to the 2023 US banking crisis, Coinbase said 30 customers were directed to deposit their funds in an account belonging to another group entity at another US bank. The company said the measure was intended to maintain banking services and protect deposits from the bank's failure. This resulted in those customers' funds being commingled with funds of that entity's customers before being transferred daily to the Irish safeguarding account. The incident illustrates the effect of reliance on cross-border group arrangements in managing customer funds. The bank, in turn, says responsibility for safeguarding the funds of the Irish entity's customers rests with the firms it supervises.
Coinbase said a new safeguarding process had undergone two independent third-party assessments since January 2025, with no outstanding issues identified. It added that it had provided a €25 million guarantee bond. The next legal step depends on the High Court's review and confirmation of the sanctions; only then will they take effect, according to the Central Bank. The case follows a separate fine imposed by the bank the previous year on Coinbase Europe over breaches in monitoring transactions for anti-money laundering and counter-terrorist financing. That case involved more than 30 million transactions that were not fully and properly monitored, and the High Court confirmed its sanctions on January 12, 2026.