Central Bank of Ireland Fines Coinbase Ireland €3.25M Over Safeguarding
The Central Bank of Ireland fined Coinbase Ireland €3.25 million for commingling customer funds and poorly overseen outsourcing to its US parent, leaving safeguarding shortfalls as high as €5.2 million in 2024. The sanction needs High Court confirmation.
For nearly five years, the account meant to hold Coinbase Ireland's customer money was not always holding enough of it. On Oct. 22, 2026, the Central Bank of Ireland fined the firm €3.25 million ($3.65 million) for those safeguarding failures. The penalty and an accompanying reprimand still need confirmation from Ireland's High Court before they take effect.
The breaches span November 2020 to August 2025 and involve safeguarding and outsourcing rules under Ireland's Electronic Money Regulations 2011. Coinbase Ireland is an authorized electronic money institution offering crypto asset and wallet services.
Put simply, safeguarding rules require a firm to keep customer money in a ring-fenced account, the way a solicitor keeps client funds apart from the firm's own operating cash. The regulator found Coinbase Ireland did not do that reliably. It commingled customer funds with money that should have been held separately, and it outsourced safeguarding functions to its US parent without adequate oversight. Systemic deficiencies produced daily shortfalls in the designated safeguarding account.
Those gaps were not trivial. The maximum daily shortfall reached €3.4 million in 2023 and €5.2 million in 2024. Reports differ on duration: one says the account was short for at least 18 months, another says more than a year.
"no tolerance for weaknesses in safeguarding arrangements"
Karen O'Leary, director of enforcement, Central Bank of Ireland
The penalty began at €4.65 million. Coinbase received a 30% settlement discount after admitting the contraventions, which brought the figure to €3.25 million.
Coinbase Ireland says it self-reported the violations to regulators, improved its controls and resolved the issues, and that no customers lost money or access to their funds. Even so, the regulator's case describes a control failure that ran for years before it was fixed.
The fine arrives less than a year after an earlier Irish action against a different Coinbase subsidiary over a different obligation. In November 2025 the Central Bank fined Coinbase Europe €21.46 million for failing to monitor crypto transactions for suspicious activity, a case covering more than 30 million transactions worth over €176 billion. Together the two cases total nearly €25 million.
The contrast between them is instructive. The earlier case concerned anti-money-laundering surveillance; this one goes to the basic custody promise that customer money stays customer money. And the outsourcing finding carries a structural lesson: handing safeguarding work to a parent company did not move the responsibility for it, which stayed with the Irish entity. That matters as Coinbase layers new products, such as the stablecoin enterprise payment cards built with Marqeta, on top of the same compliance plumbing.
