Irish Central Bank Fines Coinbase Unit €3.25 Million Over Fund Safeguarding

The Central Bank of Ireland has fined Coinbase Ireland Limited €3.25 million ($3.65 million) for failing to safeguard customer funds and for delegating compliance functions to its US parent that it was legally required to control itself. The regulator announced the penalty on Thursday, one day after reaching a settlement with the Coinbase subsidiary, and the fine now awaits confirmation from Ireland's High Court along with a formal reprimand.

The breaches span nearly five years, from November 2020 to August 2025, under Ireland's Electronic Money Regulations. Coinbase Ireland operates as an e-money institution: it issues the euro and dollar balances European customers use to buy bitcoin and other crypto assets on the Coinbase platform. Irish law requires those balances to sit in dedicated safeguarding accounts, walled off from corporate money and from the customers of other Coinbase entities.

What did the Central Bank find?

The regulator identified three failures. First, Coinbase Ireland placed what the Central Bank called "excessive reliance" on its US-based group to design and run its safeguarding controls, and it lacked the local expertise needed to oversee that work. Second, the safeguarding account was underfunded "for lengthy periods of time" because of poor system design and weak control testing. Third, the firm had no adequate process to flag material changes in its safeguarding practices to the regulator.

That last point drew the sharpest language. Karen O'Leary, the Central Bank's director of enforcement, noted that Coinbase Ireland had promised "robust and automated safeguards" when it sought authorisation in 2019, and that its practices drifted from those commitments without notice.

"Failing to adhere to the assurances made during the authorisation process or to inform us of material changes as happened in this case is completely unacceptable," O'Leary said. "Payment and e-money firms have a fundamental obligation to fully safeguard customers' funds. The Central Bank has made its supervisory expectations in this regard clear: we have no tolerance for weaknesses in safeguarding arrangements."

The Central Bank set the base penalty at €4.65 million and applied a 30 percent discount for settling early. The outcome is the regulator's 164th enforcement action, and it pushes lifetime fines past €432 million — an average of roughly €2.6 million per outcome over the regulator's enforcement history.

What does Coinbase admit?

In a blog post, Coinbase said it self-reported "many of the items described in the settlement" in January 2024 and fixed most of the underlying control issues that same year. The company stressed that no customer lost money or lost access to funds.

The exchange laid out five problem areas of its own:

• During the March 2023 US banking crisis, as Silvergate Bank neared collapse, Coinbase Ireland directed 30 customers to deposit dollars into a Coinbase, Inc. account at another US bank, mixing their funds with those of a separate Coinbase entity.
• After Brexit forced the migration of European customers from the UK affiliate, some kept sending deposits to old UK accounts.
• Euro withdrawals for US and UK customers of other Coinbase units were at times paid out of the Irish safeguarding account for liquidity reasons.
• Coding errors in an internal dashboard left the safeguarding account underfunded by an average of roughly 0.54 percent of its total obligation through 2023 and the first half of 2024.
• The firm did not tell the Central Bank about changes to its practices.

A daily "Treasury Rebalancing Process" moved funds back into the correct account each day, the exchange said, but that did not prevent the initial commingling. "These issues largely arose in the context of Coinbase taking steps to protect customers during periods of significant disruption," a company spokesperson told Reuters.

Coinbase said it has since redesigned its safeguarding calculation, passed two third-party validations with no open findings, posted a €25 million guaranty bond — nearly eight times the fine itself — and hired a dedicated head of safeguarding.

What does this change for Coinbase's European operations?

This is the second Irish penalty in under a year. The Central Bank fined Coinbase Europe €21.5 million in November 2025 for failing to monitor more than 30 million transactions for money laundering and terrorist financing risk. That unit's Irish registration lapsed at the end of 2025 as the exchange moved its European headquarters to Luxembourg under a MiCA license from the country's financial regulator.

The reputational stakes extend beyond Ireland. Coinbase is the largest US crypto exchange and the world's biggest custodian of bitcoin, holding coins for most US spot bitcoin ETFs. For compliance teams at other e-money and payment firms with Irish authorisations, the message from O'Leary's enforcement division is direct: authorisation-phase commitments will be measured against operational reality, and settlement discounts will not soften the reprimand. The final confirmation of the fine and reprimand by the High Court remains the last formal step in the process.