> ## Content Index
> Fetch the complete content index at: https://bullquill.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Coinbase Ireland fined €3.25 million over safeguarding failures
- URL: https://bullquill.com/central-bank-ireland-fines-coinbase-safeguarding/
- Published: 2026-10-22T23:15:13.000Z
- Updated: 2026-10-23T11:29:09.000Z
- Description: The regulator found three breaches between 1 November 2020 and 19 August 2025, including an underfunded safeguarding account. Coinbase Ireland admitted them in a settlement; Coinbase says no customer lost money or access to funds.
- Author: Rowan Ashby
- Tags: Crypto, Trending, Coinbase, Central Bank of Ireland, MiCA, Ireland, #lang-en, #tr-central-bank-ireland-fines-coinbase-safeguarding

## Key takeaways

- The Central Bank of Ireland fined Coinbase Ireland Limited €3,252,618 (about $3.6 million) and reprimanded it on 22 October 2026 over failures to safeguard customer funds.
- The regulator found three breaches of Ireland's Electronic Money Regulations 2011 between 1 November 2020 and 19 August 2025: weak oversight of work outsourced to the US parent, an underfunded safeguarding account, and poor escalation of safeguarding problems.
- Coinbase Ireland admitted the breaches in a settlement. The base penalty of €4,646,597 was cut by the standard 30% settlement discount. The sanction takes effect only after the High Court confirms it.
- Coinbase says no customer lost money or lost access to funds, and that it reported several of the issues itself in January 2024.
- This is the second Irish enforcement action against a Coinbase entity in under a year. In November 2025 Coinbase Europe Limited was fined €21,464,734 for anti-money-laundering monitoring failures.

## What did the Central Bank of Ireland fine Coinbase Ireland for?

The Coinbase Ireland fine is €3,252,618\. The [Central Bank of Ireland](https://www.centralbank.ie/news/article/press-release-central-bank-takes-enforcement-action-against-coinbase-ireland-22-october-2026?ref=bullquill.com) also reprimanded Coinbase Ireland Limited on 22 October 2026 for failing to safeguard customer funds, citing weak oversight of work outsourced to its US parent and an underfunded safeguarding account.

E-money firms must keep customer money separate from their own funds and protected if the firm fails. This is known as safeguarding. The central bank said Coinbase Ireland fell short of these duties, and of related outsourcing rules, for almost five years.

The regulator set out three findings:

1. **Outsourcing governance.** Coinbase Ireland relied too heavily on the US-based Coinbase group to run its safeguarding processes and controls, and did not have enough local skills and expertise to oversee them.
2. **Safeguarding.** Inadequate system design and insufficient testing of controls left the designated safeguarding account underfunded for lengthy periods.
3. **Internal controls.** The firm lacked adequate escalation procedures and governance to identify material changes to its safeguarding arrangements and report them to the central bank.

Karen O'Leary, the central bank's Director of Enforcement, said payment and e-money firms have "a fundamental obligation to fully safeguard customers' funds". She added that the regulator has "no tolerance for weaknesses in safeguarding arrangements". [RTÉ reported](https://www.rte.ie/news/business/2026/1022/1596435-central-bank-fines-crypto-exchange-coinbase-3-25m/?ref=bullquill.com) that she also called a failure to honour assurances given during authorisation "completely unacceptable".

## How the penalty was calculated

The case was settled under the central bank's Administrative Sanctions Procedure. Coinbase Ireland admitted the contraventions and agreed a statement of undisputed facts on 21 October 2026\. The regulator said this was its fifth settlement of that kind since the Individual Accountability Framework Act 2023 took effect.

| Item                | Detail                                                                       | Source                                             |
| ------------------- | ---------------------------------------------------------------------------- | -------------------------------------------------- |
| Entity              | Coinbase Ireland Limited (e-money institution)                               | Central Bank of Ireland                            |
| Base penalty        | €4,646,597 plus a reprimand                                                  | Central Bank of Ireland                            |
| Settlement discount | 30%                                                                          | Central Bank of Ireland                            |
| Final fine          | €3,252,618 (about $3.6 million)                                              | Central Bank of Ireland; CoinDesk (USD conversion) |
| Breach period       | 1 Nov. 2020 to 19 Aug. 2025                                                  | Central Bank of Ireland                            |
| Rules breached      | Safeguarding and outsourcing requirements, Electronic Money Regulations 2011 | Central Bank of Ireland                            |
| Settlement agreed   | 21 Oct. 2026                                                                 | Central Bank of Ireland                            |
| Status              | Awaiting High Court confirmation                                             | Central Bank of Ireland                            |

Under Irish law, the High Court confirms such sanctions unless it finds them manifestly disproportionate. The central bank said the case is its 164th enforcement outcome, taking its total fines past €432 million.

## What Coinbase said about the safeguarding failures

Coinbase said no customer suffered any financial loss and no customer was ever unable to access their funds, [CoinDesk reported](https://www.coindesk.com/policy/2026/10/22/irish-central-bank-fines-coinbase-ireland-usd3-6-million-over-fund-safeguarding-failures?ref=bullquill.com). The company said it has strengthened its safeguarding controls, redesigned its calculation processes and added dedicated staff expertise, according to RTÉ.

Coinbase's account links much of the problem to disruption it says it was managing at the time:

- **The 2023 US banking crisis.** According to CoinDesk, when Silvergate Bank was close to collapse, Coinbase told 30 customers to send deposits to a Coinbase account at another US bank. That money sat alongside funds belonging to customers of a different Coinbase entity, which broke the segregation rules.
- **Brexit.** RTÉ reported that some customers kept depositing into legacy UK bank accounts that did not meet safeguarding requirements.
- **Cross-entity payouts and coding errors.** Coinbase said euro withdrawals by some US- or UK-based customers were paid from Coinbase Ireland's safeguarding account. It also said coding errors left that account underfunded by an average of 0.54% in 2023 and the first half of 2024, CoinDesk reported.

Coinbase said it identified several of the issues itself and reported them to the central bank in January 2024, and that most control problems were fixed that year. The central bank's release does not mention self-reporting. Instead, it criticises the firm for failing to report material safeguarding changes.

## A second Irish penalty in under a year

The fine follows the central bank's action against Coinbase Europe Limited, a separate group company, announced on 6 November 2025\. That case found failures in transaction monitoring under Ireland's anti-money-laundering and counter-terrorist-financing laws between April 2021 and March 2025\. The base penalty was €30,663,906, reduced by 30% to €21,464,734 under settlement, [The Block](https://www.theblock.co/post/377909/central-bank-of-ireland-fines-coinbase-europe?ref=bullquill.com) and [Crowdfund Insider](https://www.crowdfundinsider.com/2025/11/255367-central-bank-of-ireland-announces-enforcement-action-against-coinbase-europe-for-aml-failures/?ref=bullquill.com) reported. Coinbase attributed those failures to coding errors in five of the 21 scenarios in its transaction monitoring system.

| Case                            | Coinbase Europe (Nov. 2025)    | Coinbase Ireland (Oct. 2026) |
| ------------------------------- | ------------------------------ | ---------------------------- |
| Subject                         | AML/CFT transaction monitoring | Safeguarding and outsourcing |
| Breach period                   | Apr. 2021 to Mar. 2025         | Nov. 2020 to Aug. 2025       |
| Base penalty                    | €30,663,906                    | €4,646,597                   |
| Final fine (after 30% discount) | €21,464,734                    | €3,252,618                   |

Ireland was once meant to be Coinbase's main EU base. In June 2025 the company won its licence under the EU's Markets in Crypto-Assets Regulation (MiCA) from Luxembourg's regulator, the CSSF, and named Luxembourg its European crypto hub. [CNBC reported](https://www.nbcnewyork.com/news/business/money-report/coinbase-secures-eu-crypto-license-swaps-ireland-for-luxembourg-as-main-hub/6309852/?ref=bullquill.com) that this reversed an earlier choice of Ireland. The Irish e-money unit remains the regulated entity behind the fiat side of the business covered by this case.

## What EU safeguarding rules require

This case was brought under e-money rules, not MiCA, but both frameworks share the same basic idea: customer money must be ring-fenced from the firm's own balance sheet.

- **E-money institutions.** Article 7 of the [Electronic Money Directive (2009/110/EC)](https://eur-lex.europa.eu/eli/dir/2009/110/oj?ref=bullquill.com), which Ireland applies through the Electronic Money Regulations 2011, requires funds received for e-money to be safeguarded no later than five business days after issuance. Firms can segregate the money in a separate account at a credit institution or in secure, low-risk assets. Or they can cover it with an insurance policy or a comparable guarantee from a firm outside their group.
- **Crypto-asset service providers.** [Article 70 of MiCA](https://www.esma.europa.eu/publications-and-data/interactive-single-rulebook/mica/article-70-safekeeping-clients-crypto-assets?ref=bullquill.com) requires providers to protect clients' ownership of crypto assets and to place client funds with a credit institution or central bank by the end of the business day after receipt. Those cash rules do not apply to providers that are themselves e-money, payment or credit institutions, which remain subject to their own safeguarding regimes.

Outsourcing is the second theme. Regulators allow group companies to share systems, but the authorised firm keeps legal responsibility. The central bank's finding that Coinbase Ireland lacked local expertise to oversee work done in the US goes to the heart of that rule.

## What it means

The fine is small next to Coinbase's size, but the message is wider. Irish supervisors are testing whether the local entity in a global group can show, on its own, that customer money is fully covered every day. Average shortfalls below 1% still counted as a breach, and so did depending on a parent company's systems without enough local oversight.

For customers, the central bank did not report any losses, and Coinbase says none occurred. For other crypto and fintech firms that run EU entities on shared group systems, the case is a reminder that safeguarding reconciliations, control testing and prompt reporting to the regulator are all assessed separately. The next formal step is High Court confirmation of the sanction.

For more on how European and US rules are reshaping crypto firms, see our coverage of the [UK FCA's DeFi consultations](https://bullquill.com/fca-defi-guidance-consultations-explained/), the [OCC's final GENIUS Act rule on stablecoin rewards](https://bullquill.com/occ-final-genius-rule-stablecoin-rewards/), [Fireblocks' denial of Visa takeover talks](https://bullquill.com/fireblocks-denies-visa-acquisition-talks/) and our guide on [how to secure a crypto wallet seed phrase](https://bullquill.com/how-to-secure-crypto-wallet-seed-phrase/).

## Frequently asked questions

### Why was Coinbase Ireland fined?

The Central Bank of Ireland found that Coinbase Ireland breached the safeguarding and outsourcing requirements of the Electronic Money Regulations 2011 between November 2020 and August 2025\. It relied too heavily on its US parent, its customer safeguarding account was underfunded for long periods, and it did not properly report material safeguarding changes to the regulator.

### How much was the Coinbase Ireland fine?

The fine is €3,252,618, about $3.6 million, plus a reprimand. It is the €4,646,597 base penalty reduced by a 30% settlement discount. The sanction takes effect once the High Court confirms it.

### Did Coinbase customers lose money?

Coinbase says no customer suffered any financial loss or was unable to access their funds. The central bank's announcement does not report customer losses.

### Is this the same as the €21.4 million Coinbase fine?

No. In November 2025 the Central Bank of Ireland fined a separate entity, Coinbase Europe Limited, €21,464,734 for anti-money-laundering transaction monitoring failures. The October 2026 case concerns Coinbase Ireland Limited's safeguarding of customer funds.

## Sources

- [Central Bank of Ireland: The Central Bank takes enforcement action against Coinbase Ireland (22 Oct. 2026)](https://www.centralbank.ie/news/article/press-release-central-bank-takes-enforcement-action-against-coinbase-ireland-22-october-2026?ref=bullquill.com)
- [RTÉ: Central Bank fines crypto exchange Coinbase €3.25m](https://www.rte.ie/news/business/2026/1022/1596435-central-bank-fines-crypto-exchange-coinbase-3-25m/?ref=bullquill.com)
- [CoinDesk: Irish central bank fines Coinbase Ireland $3.6 million over fund safeguarding failures](https://www.coindesk.com/policy/2026/10/22/irish-central-bank-fines-coinbase-ireland-usd3-6-million-over-fund-safeguarding-failures?ref=bullquill.com)
- [The Block: Central Bank of Ireland fines Coinbase Europe for AML monitoring breaches (Nov. 2025)](https://www.theblock.co/post/377909/central-bank-of-ireland-fines-coinbase-europe?ref=bullquill.com)
- [Crowdfund Insider: Central Bank of Ireland announces enforcement action against Coinbase Europe](https://www.crowdfundinsider.com/2025/11/255367-central-bank-of-ireland-announces-enforcement-action-against-coinbase-europe-for-aml-failures/?ref=bullquill.com)
- [CNBC: Coinbase secures EU crypto license, swaps Ireland for Luxembourg as main hub](https://www.nbcnewyork.com/news/business/money-report/coinbase-secures-eu-crypto-license-swaps-ireland-for-luxembourg-as-main-hub/6309852/?ref=bullquill.com)
- [EUR-Lex: Directive 2009/110/EC (Electronic Money Directive)](https://eur-lex.europa.eu/eli/dir/2009/110/oj?ref=bullquill.com)
- [ESMA Interactive Single Rulebook: MiCA Article 70](https://www.esma.europa.eu/publications-and-data/interactive-single-rulebook/mica/article-70-safekeeping-clients-crypto-assets?ref=bullquill.com)

This article is for information only and is not investment advice.