Coinbase Ireland Fined €3.25 Million Over Customer-Fund Failures

Coinbase Ireland has been fined €3,252,618 (roughly $3.6 million) by the Central Bank of Ireland for breaching safeguarding and outsourcing rules under the country's Electronic Money Regulations between November 2020 and August 2025, the regulator said on Thursday, October 22, 2026. The penalty reflects a 30% discount off a €4,646,597 fine for settling, which Coinbase Ireland reached with the regulator on October 21, and still requires confirmation by Ireland's High Court before taking effect. Coinbase Ireland admitted the breaches. It is the second enforcement action against Coinbase's European operations in less than a year, following a €21.5 million fine against Coinbase Europe in May over anti-money-laundering failures.

Background

Coinbase has leaned on Ireland as its EU hub, securing an e-money license there ahead of Brexit and later obtaining a MiCA license to passport its services across the bloc, according to Decrypt. Coinbase Ireland is an e-money institution within the broader Coinbase Group, issuing the digital money customers use to buy crypto on the platform. The Central Bank of Ireland found that the company leaned too heavily on its U.S.-based parent to handle safeguarding processes required under Irish and EU rules, lacked enough local expertise to oversee the protection of customer funds, and allowed its designated safeguarding account to be underfunded for lengthy periods. It also faulted the firm's internal controls and its failure to flag material safeguarding changes to the regulator. CoinDesk adds that the CBI said Coinbase Ireland failed to establish an adequate outsourcing governance framework, and that safeguarding and outsourcing requirements underpin the protection of customer funds, obliging companies to keep them adequately funded and monitored and to set up procedures to report material changes to the regulator. The action lands even as Coinbase expands its European footprint, having recently rolled out crypto futures for traders in the region, Decrypt notes. It also underscores how the exchange's reliance on a single jurisdiction for EU access carries regulatory risk, with Irish authorities signaling they intend to hold firms to the commitments they made to win market entry.

What happened

The Central Bank of Ireland announced the penalty on Thursday, October 22, 2026, according to both Decrypt and CoinDesk. Decrypt reports the regulator penalized Coinbase Ireland €3,252,618 for breaching safeguarding and outsourcing rules under the country's Electronic Money Regulations between November 2020 and August 2025, and that the figure reflects a 30% discount off a €4,646,597 penalty for settling, which Coinbase Ireland reached with the regulator on October 21. The sanction still requires confirmation by Ireland's High Court before taking effect. Decrypt lists three main failures found by the Central Bank: the company leaned too heavily on its U.S.-based parent to handle safeguarding processes required under Irish and EU rules; it lacked enough local expertise to oversee the protection of customer funds; and it allowed its designated safeguarding account to be underfunded for lengthy periods. The regulator also faulted the firm's internal controls and its failure to flag material safeguarding changes to the regulator. Coinbase Ireland admitted the breaches. CoinDesk reports the CBI said Coinbase Ireland failed to establish an adequate outsourcing governance framework, and quotes the regulator saying the firm placed excessive reliance on the U.S.-based Coinbase Group as an outsourced service provider to implement safeguarding processes and controls and failed to adequately safeguard customers' funds, both through inadequate system design and insufficient control testing. CoinDesk adds that when crypto-friendly bank Silvergate was on the verge of collapse in 2023, Coinbase instructed 30 customers to deposit funds into an alternate account held by Coinbase at another U.S. bank, so the funds were held alongside those belonging to customers of another Coinbase entity, a breach of safeguarding requirements. Coinbase also referred to euro withdrawals from U.S. or U.K.-based customers being paid from Coinbase Ireland's safeguarding account, and coding errors leading to the account being underfunded by an average of 0.54% in 2023 and the first half of 2024, per CoinDesk. Coinbase said no customer suffered any financial loss as a result of these matters, and no customer was ever unable to access their funds. Karen O'Leary, the Central Bank's director of enforcement, said payment and e-money firms have a fundamental obligation to fully safeguard customers' funds and that the regulator has no tolerance for weaknesses in safeguarding arrangements, adding that failing to honor assurances made during authorization, or to report material changes, was completely unacceptable, according to Decrypt.

Market impact

The sources provide limited market data. CoinDesk notes Coinbase Global's ticker COIN was at $164.44 with the market closed at the time of its report. The fine itself is €3,252,618, or roughly $3.6 million, reflecting a 30% settlement discount off a €4,646,597 penalty, per Decrypt. CoinDesk reports the underfunding of the safeguarding account averaged 0.54% in 2023 and the first half of 2024 due to coding errors, and that 30 customers were instructed to deposit funds into an alternate account during the 2023 Silvergate episode. The prior enforcement action cited by both sources was a €21.5 million fine against Coinbase Europe in May over anti-money-laundering failures; CoinDesk gives the figure as 21.4 million euros for breaches between 2021 and 2025. Decrypt notes Coinbase has recently rolled out crypto futures for traders in the region. No customer fund losses, outflows, or price reactions beyond the COIN quote are reported in the sources.

Why it matters

The sources frame the penalty as the second Irish enforcement action against Coinbase's European business in less than a year, following the May fine against Coinbase Europe, and as a signal that Irish authorities intend to hold firms to the commitments they made to win market entry, according to Decrypt. Because Coinbase uses Ireland as its EU hub, with an e-money license secured ahead of Brexit and a MiCA license to passport services across the bloc, the action underscores how reliance on a single jurisdiction for EU access carries regulatory risk, Decrypt says. The Central Bank's enforcement director, Karen O'Leary, said payment and e-money firms have a fundamental obligation to fully safeguard customers' funds and that the regulator has no tolerance for weaknesses in safeguarding arrangements, adding that failing to honor assurances made during authorization, or to report material changes, was completely unacceptable. Coinbase said no customer suffered any financial loss and no customer was ever unable to access their funds. The sanction still requires confirmation by Ireland's High Court before taking effect, per Decrypt.