The Central Bank of Ireland has penalized Coinbase Ireland in the amount of €3.25 million for infractions related to customer asset protection and outsourcing guidelines under Electronic Money Regulations, as stated by the financial authority in a statement on Thursday.
As per the announcement, the trading platform acknowledged the infractions on October 21 and agreed to both a formal reprimand and the financial penalty, which was scaled down from €4.65 million following a 30% settlement reduction. These penalties require final approval from the High Court before they become official.
Coinbase stated that it has fully addressed the concerns and that no users suffered financial losses or experienced issues accessing their balances. The firm noted that it proactively disclosed several of these matters to the central bank in January 2024 and has since upgraded its protective measures.
Coinbase established its Irish subsidiary in Dublin during July 2018. The company obtained an electronic money authorization from the central bank nearly a year afterward in 2019 and acquired virtual asset service provider registration from the authority in 2022.
Customer funds
The settlement notice released by the central bank indicated that Coinbase’s management of user capital, which involved daily safeguarding deficits, peaked at €5.2 million ($5.8 million) in 2024.
The financial watchdog noted that the platform permitted customer funds to be intermingled with capital controlled by other Coinbase affiliates. Across approximately 19 months, spanning from March 2023 to October 2024, roughly 30 institutional users transferred dollar deposits into financial accounts maintained by Coinbase Inc. rather than designated accounts under the Irish entity’s title. Furthermore, capital belonging to specific users who transitioned from Coinbase UK was routed into the UK branch’s protection account up until August 19, 2025.
"CBIE could not demonstrate adequate internal control mechanisms to validate that Users’ Funds were properly segregated and safeguarded because it was unable to accurately calculate how much it was obligated to safeguard on a daily basis," the document stated.
The authority pointed out that these shortcomings might have also complicated the retrieval of user balances had Coinbase Ireland entered insolvency proceedings.
"Had CBIE become insolvent when the above referenced breaches of their safeguarding obligations were in being, then Users may not have been able to promptly and fully regain their funds," the document noted. This signifies a fundamental failure to satisfy the Central Bank’s expectations regarding wind-down protocols.
Overeliance on outsourcing
According to the document, Coinbase Ireland additionally depended excessively on the operational infrastructure of its American parent organization without maintaining sufficient domestic expertise to supervise asset protection. The central bank previously voiced governance anxieties through correspondence sent in July 2022 and March 2023, though it indicated that those matters were never properly resolved.
"CBIE also committed serious outsourcing breaches, demonstrating a lack of appropriate skills and experience to oversee the activities of safeguarding undertaken by the OSP, which ultimately had a material impact on its ability to safeguard, further compounding the issues arising," the regulator expressed.
The exchange designated a safeguarding manager in December 2024. The authority’s filing mentioned that the enterprise fixed the identified deficit back in June 2024 and deployed a solution for the underlying data problem in October 2024.
This recent penalty trails a prior €21.5 million fine issued against Coinbase Europe in November 2025 following an incident where over 30 million transactions went unchecked, leading to 2,708 delayed suspicious transaction filings.
Originally published at https://www.theblock.co/news/regulation/2026-10-22-coinbase-ireland-fined-3-6-million-over-customer-fund-segregation-oversight-failures-421943.
