The Central Bank of Ireland fined Coinbase Ireland €3.25 million ($3.6 million) after the crypto exchange admitted to severe failures in customer fund safeguarding and outsourcing governance between 2020 and 2025. Coding errors and improper fund-mixing during banking disruptions caused daily shortfalls reaching €5.2 million in 2024. Coinbase emphasized that no clients suffered financial loss, noting it self-reported issues in early 2024 and has since fully remediated its controls.
Financial penalty and settlement terms
- ▪Coinbase Ireland agreed to the undisputed facts on October 21, 2026, receiving a 30% discount from an original €4.65 million penalty, subject to High Court approval.
- ▪The Central Bank of Ireland fined Coinbase Ireland €3.25 million ($3.6 million) for breaching customer fund safeguarding and outsourcing rules between November 2020 and August 2025.
Safeguarding and oversight failures
- ▪The Central Bank of Ireland found that Coinbase Ireland relied excessively on its U.S.-based parent group for safeguarding processes without maintaining adequate local oversight framework or expertise.
- ▪Coding errors in calculation systems left Coinbase Ireland's safeguarding account underfunded for 18 months, with daily shortfalls reaching up to €5.2 million in 2024.
- ▪Coinbase Ireland allowed customer funds to be mixed with money belonging to other Coinbase entities, including directing 30 institutional clients to deposit funds into a U.S. Coinbase Inc. account during the 2023 Silvergate banking disruption.
Regulator's position and insolvency warnings
- ▪The Central Bank of Ireland noted that if Coinbase Ireland had become insolvent during the breach period, customers might not have been able to regain their funds promptly.
- ▪Central Bank of Ireland Director of Enforcement Karen O'Leary stated that payment and e-money firms have a fundamental obligation to fully safeguard customers' funds and that the regulator has no tolerance for safeguarding weaknesses.
Coinbase's response and technical remediation
- ▪Coinbase self-reported several safeguarding issues to the Central Bank of Ireland in January 2024 and fully resolved the underlying technical controls by October 2024.
- ▪Coinbase stated that no customers suffered financial loss or were unable to access their funds as a result of the safeguarding issues.
Governance and safeguarding oversight
- ▪Coinbase Ireland appointed a dedicated safeguarding officer in December 2024 and added a €25 million guarantee bond to strengthen its oversight controls.
- ▪The Central Bank of Ireland had raised governance and oversight concerns with Coinbase Ireland in supervisory letters issued in July 2022 and March 2023.
Coinbase Europe AML breaches
- ▪The November 2025 enforcement action against Coinbase Europe involved over 30 million unmonitored transactions worth over €176 billion, resulting in 2,708 late suspicious transaction reports.
- ▪In November 2025, the Central Bank of Ireland fined another unit, Coinbase Europe, €21.5 million for anti-money laundering and transaction-monitoring failures.
European licensing and operations
- ▪Coinbase officially opened its European crypto hub in Luxembourg on June 25, 2026, to provide crypto-asset services across the European Economic Area.
- ▪Coinbase secured an e-money license in Ireland in 2019 and later obtained a MiCA license in Luxembourg in June 2025 to serve customers across the European Union.
Story comments
Loading comments…