Coinbase Ireland has accepted a €3.25 million penalty following an investigation into failures in safeguarding customer funds and overseeing outsourced operations.
The Central Bank of Ireland announced the settlement on 22 October, covering breaches between November 2020 and August 2025. The sanctions comprise a reprimand and financial penalty, both subject to High Court confirmation before taking effect. centralbank.ie
Coinbase said the historical issues have been resolved and that no customer suffered financial loss or lost access to funds. coinbase.com
Key Takeaways
- Coinbase Ireland accepted a penalty of €3,252,618.
- The findings concern its electronic-money activities.
- Failures involved safeguarding systems, outsourcing oversight and regulatory reporting.
- Coinbase says customers experienced no financial loss.
- The sanctions require High Court confirmation.
What the Regulator Found
In its enforcement announcement, the Central Bank identified excessive reliance on US-based Coinbase Group operations and insufficient local expertise to oversee customer-fund protection.
It also found inadequate system design and control testing, leaving the designated safeguarding account underfunded for lengthy periods. Governance and escalation weaknesses affected the identification and reporting of material changes.
Coinbase Ireland admitted the contraventions. A 30% settlement discount reduced the proposed penalty from approximately €4.65 million to €3.25 million. centralbank.ie
Coinbase’s Explanation
In its response to the settlement, Coinbase described several problems affecting how customer money was received, allocated and reconciled.
During the 2023 US banking crisis, some Coinbase Ireland customers were directed to deposit into an account holding funds for customers of another Coinbase entity. Although daily rebalancing subsequently transferred funds into the Irish safeguarding account, the initial mixing breached requirements.
Coinbase also disclosed coding errors in its safeguarding dashboard. These resulted in average underfunding of approximately 0.54% of its safeguarding obligation during 2023 and the first half of 2024.
The company said it strengthened technical controls, redesigned calculations and introduced additional safeguarding measures. coinbase.com
Why This Is an E-Money Safeguarding Case
Coinbase Ireland issues and redeems electronic money in exchange for conventional currency. Customers use that electronic money to purchase crypto assets through the wider group’s platform. centralbank.ie
The case therefore concerns protection of customer fiat balances within that arrangement. It should not be described as a blockchain exploit or theft of cryptocurrency.
This distinction matters when assessing a payment service. A customer may encounter bank deposits, electronic-money balances and cryptocurrency within one interface, while different entities and protections apply beneath it.
Understanding different cryptocurrency wallet arrangements helps users identify who controls their digital assets, but that assessment must also account for how conventional money is held.
What Payment Businesses Can Learn
The findings illustrate why account segregation, accurate calculations and oversight of service providers require ongoing attention.
Outsourcing a function does not remove the need to understand and supervise it. Businesses selecting a crypto wallet for business should examine both the technology and the responsibilities of the entities involved.
The same applies to cross-border payment arrangements, where several providers may handle different stages of a transfer.
Conclusion
The settlement highlights operational weaknesses that can affect customer protection even when no loss occurs. Coinbase says the issues are resolved; the accepted sanctions remain subject to the High Court confirmation process described by the regulator.
