Coinbase Ireland Reaches €3.25 Million Regulatory Settlement
Coinbase Ireland Limited (CBIE), the company's Irish electronic money institution, has agreed to a €3.25 million financial penalty following a settlement with the Central Bank of Ireland (CBI) over historical shortcomings in its customer-fund safeguarding arrangements.
The settlement, reached on October 21, 2026, addresses breaches of safeguarding and outsourcing obligations under Ireland's Electronic Money Regulations 2011. The regulator's investigation examined how Coinbase Ireland calculated the amount of customer money it needed to protect, held funds in designated accounts and managed outsourced safeguarding operations between November 1, 2020, and August 19, 2025.
The Central Bank of Ireland's enforcement announcement states that the company admitted the prescribed contraventions and accepted the undisputed facts. The regulator determined that a reprimand and an initial monetary penalty of €4,646,597 were warranted. A 30% settlement discount reduced the amount to €3,252,618.
The sanctions remain subject to confirmation by Ireland's High Court and will take effect once confirmed.
Why the Regulator Investigated Coinbase's Safeguarding Practices
Coinbase Ireland provides electronic money services that allow European customers to use fiat currency on the Coinbase platform. As a licensed electronic money institution, the company must keep customer funds in designated safeguarding accounts, separate from corporate money and customer funds belonging to other Coinbase entities.
The Central Bank identified weaknesses in Coinbase Ireland's outsourcing governance, internal expertise, system design, control testing and procedures for reporting material changes to safeguarding arrangements. It also found that the company relied excessively on its US-based Coinbase group for safeguarding processes without sufficient local expertise to oversee those responsibilities.
The regulator said these shortcomings allowed designated safeguarding accounts to remain underfunded for extended periods. It also identified deficiencies in internal escalation and governance processes that should have helped the company detect and report material changes to its safeguarding practices.
Five Historical Issues Behind the Settlement
Coinbase's explanation identifies five areas in which its historical safeguarding arrangements fell short of regulatory requirements.
1. Deposits during the 2023 US banking crisis
Before the banking crisis, Coinbase Ireland customers deposited US dollars into the company's account at Silvergate Bank. When Silvergate faced the risk of failure, CBIE directed 30 customers to deposit funds into a Coinbase Inc. account held for the benefit of customers at another US bank.
The arrangement was intended to maintain banking access and protect deposits from the bank's potential failure. However, it meant that Coinbase Ireland customer funds were initially held alongside money belonging to customers of another Coinbase entity. Daily treasury rebalancing subsequently transferred the funds into a CBIE safeguarding account, but did not prevent the initial mixing of funds.
2. Deposits following Brexit
Following Brexit, customers in the European Economic Area who had previously been served by Coinbase's UK affiliate were migrated to Coinbase Ireland. They received new bank account details for future deposits, but some continued using their former UK deposit accounts.
This resulted in the initial mixing of Coinbase Ireland customer funds with UK customer deposits. Coinbase later introduced system-level restrictions to reject further deposits sent to the wrong accounts.
3. Withdrawals for customers of other Coinbase entities
Some euro withdrawals by US- or UK-based customers of other Coinbase entities were paid from Coinbase Ireland's safeguarding account for liquidity reasons.
Although the treasury rebalancing process restored the funds each day to cover Coinbase Ireland's safeguarding obligations, the practice did not comply with the applicable regulatory requirements.
4. Errors in safeguarding calculations
Coinbase Ireland used a technical dashboard to calculate how much customer money it needed to maintain in safeguarding accounts. Inadvertent coding errors caused the accounts to be underfunded by an average of approximately 0.54% of the company's total safeguarding obligation during 2023 and the first half of 2024.
Coinbase said it corrected the error within days of discovering it in 2024 and subsequently strengthened its technical controls.
5. Incomplete regulatory notifications
Coinbase Ireland's safeguarding practices changed after the company applied for its electronic money institution licence, but it did not notify the Central Bank of every change. The company says it has since strengthened its reporting procedures to ensure that changes to safeguarding arrangements are communicated promptly.
Coinbase Says Customer Funds Were Not Lost
Coinbase maintains that the historical issues did not cause customer financial losses or prevent customers from accessing their funds. The company said it identified several of the problems itself and reported them to the Central Bank in January 2024. Most of the underlying control issues were addressed during that year, with the company stating that all the historical issues have now been resolved.
Since January 2025, the company's updated safeguarding process has undergone two third-party validations, which Coinbase says identified no remaining issues. It has also redesigned how safeguarding obligations are calculated to make data errors easier to detect and introduced additional technical controls.
The company further disclosed that Coinbase Ireland established a €25 million guarantee bond as an additional safeguarding measure and appointed a dedicated Head of Safeguarding. These measures are intended to strengthen oversight and reduce the risk of similar problems recurring.
What the Fine Means for Coinbase's European Operations
The settlement highlights the regulatory importance of protecting customer money at licensed financial institutions, including companies operating within the cryptocurrency industry. Safeguarding requirements are designed to keep customer funds separate from other money and ensure that institutions maintain adequate controls over those assets.
The Central Bank's enforcement action also emphasizes that outsourcing does not remove a regulated firm's responsibility for meeting its obligations. Firms must maintain sufficient expertise, oversight and internal controls to manage outsourced services and respond appropriately when their operating arrangements change.
Coinbase has since moved its European headquarters to Luxembourg. The company says European Economic Area customers will continue receiving services without interruption.
The settlement therefore closes a historical compliance issue from Coinbase Ireland's perspective, but the sanctions still require High Court confirmation before taking effect. The case also underscores the importance of reliable safeguarding calculations, clear account separation and effective regulatory reporting for crypto-related financial services operating under electronic money rules.
