The Central Bank of Ireland has fined Coinbase Ireland €3.25 million for customer-fund safeguarding and outsourcing failures that the regulator said could have delayed or prevented customers from recovering money if the company had entered insolvency.
The penalty, which remains subject to confirmation by Ireland’s High Court, follows Coinbase Ireland’s admission of the breaches on Oct. 21 and its acceptance of a reprimand. The sanction includes a 30% settlement discount from an initial penalty of €4,646,597, according to the central bank’s settlement notice.
The case centres on whether Coinbase Ireland could accurately identify, segregate and protect the money it owed to customers. Electronic money firms are required to safeguard customer funds separately from corporate assets so that those funds remain available if the business fails.
The regulator found that Coinbase Ireland could not reliably calculate its daily safeguarding obligation for a prolonged period. In 2024, daily shortfalls in safeguarded customer funds reached as much as €5.2 million, while the firm was required to safeguard an average balance of about €470 million, the settlement notice said.
Customer money entered group accounts
The Central Bank of Ireland said customer funds were, in certain cases, paid into bank accounts held by other Coinbase group companies rather than into accounts in the name of Coinbase Ireland.
For roughly 19 months between March 2023 and October 2024, about 30 institutional customers deposited U.S. dollars into accounts held by Coinbase Inc., the U.S.-based parent company. The central bank said that arrangement exposed customer funds to risks that safeguarding rules are designed to limit.
A separate issue affected customers who had migrated from Coinbase’s UK business. Funds connected with some of those customers continued to be placed in the UK entity’s safeguarding account until Aug. 19, 2025, according to the notice.
The findings do not allege that customers lost money. They focus instead on the protections that would have been available if Coinbase Ireland had failed while the weaknesses remained unresolved. When customer balances cannot be accurately measured and held in appropriate safeguarded accounts, an insolvency practitioner may face delays in identifying ownership and returning funds.
The regulator also said the company’s wind-down planning did not meet required standards while the safeguarding breaches were continuing. A wind-down plan is intended to ensure that an e-money firm can cease operations without placing customer money at risk or disrupting the return of balances.
Data controls left safeguarding obligations unclear
Coinbase Ireland’s difficulties were linked partly to data and systems problems that prevented it from accurately determining the amount of money that required safeguarding each day.
The settlement notice said the Irish business relied heavily on infrastructure provided by its wider U.S. parent group, without maintaining enough local expertise to oversee its safeguarding obligations effectively. That structure placed responsibility for a regulated Irish entity’s customer-fund controls alongside systems and operational arrangements run elsewhere in the group.
The central bank had raised governance concerns with Coinbase Ireland in letters sent in July 2022 and March 2023. According to the notice, the concerns were not adequately addressed before the safeguarding failures emerged.
Coinbase Ireland appointed a safeguarding officer in December 2024. The company remediated the immediate safeguarding shortfall in June 2024, while the underlying data issue was fixed in October 2024, the regulator said.
The timeline shows the practical challenge created by cross-border operating models. A regulated subsidiary may hold its own licence and legal duties, yet depend on group-level technology, bank-account structures and specialist teams. If those systems do not clearly distinguish between entities and customer populations, the local firm can struggle to demonstrate compliance even where the group has substantial resources.
Fine adds to European compliance record
Coinbase established its Irish subsidiary in Dublin in July 2018 and received an electronic money institution licence in 2019. It later obtained registration as a virtual asset service provider in Ireland in 2022, giving it a central role in the company’s European operations.
The €3.25 million sanction comes after another Irish enforcement action involving a Coinbase group company. In November 2025, the Central Bank of Ireland fined Coinbase Europe €21.5 million over failures in transaction monitoring that resulted in 2,708 late suspicious transaction reports.
In that case, the regulator said more than 30 million transactions, with a total value of €176 billion, were not monitored under the company’s anti-money-laundering systems because of coding errors. The safeguarding case addresses a different regulatory obligation, but both actions point to the scrutiny applied to control functions that depend on large-scale data systems and group-wide operations.
The latest penalty also puts electronic-money safeguards under sharper focus than standard exchange risk disclosures. Customers using a platform may see a single global brand, while the legal entity handling their money, the account receiving that money and the systems calculating the safeguarded balance can sit across different jurisdictions.
Ireland’s action does not determine the safety of digital assets held in self-custody or on other platforms. It does reinforce that cash balances and electronic-money services offered alongside cryptocurrency trading must meet financial-services rules designed to protect customers during a corporate failure.
High Court approval is required before the settlement becomes effective.
Concerned about exchange safeguards? Learn how Toobit’s risk control system protects user funds and strengthens platform security.
Disclaimer: The content on this page is provided for general informational purposes only and does not represent the views or financial advice of Toobit. We make no guarantees regarding the accuracy or completeness of this information and shall not be held liable for any errors, omissions, or outcomes resulting from its use. Investing in digital assets involves risk; users should independently evaluate their financial situation and the risks involved. For further details, please consult our Terms of Service and Risk Disclosure.
