Ireland's central bank has fined Coinbase Ireland Limited €3.25 million over inadequate measures to keep customer funds safe and failures in the oversight of outsourced operations. The Central Bank of Ireland announced the enforcement action in a press release published on October 22, 2026.

The breaches took place between November 2020 and August 2025 and related to the rules governing electronic money institutions, a category of regulated firm whose authorizations can provide access to the broader EU market — a form of cross-border reach the Central Bank ties directly to the commitments a firm makes when it is authorized and how it upholds them afterward.

Coinbase Ireland Failed to Fully Safeguard Customer Funds

Coinbase Ireland Limited is an electronic money institution within the Coinbase Group. Safeguarding controls are an important aspect of the company's regulated activities, as the Irish division offers users e-money that can be used to buy or sell crypto assets on Coinbase's trading platform. Safeguarding requirements are a core consumer protection in the e-money framework, designed to ensure that customer money remains secure.

The Central Bank found that Coinbase Ireland's systems and controls testing were not strong enough to ensure customer funds were fully protected. According to the regulator, the company deposited funds into a designated safeguarding account that remained insufficient over an extended period. Because that account is the mechanism the framework relies on to keep customer money secure, the shortfall struck at the core of the protections the firm's authorization is meant to guarantee.

The enforcement action also identified weaknesses in the firm's internal escalation and governance processes. Coinbase Ireland did not have adequate processes in place to identify and report material safeguarding changes to the regulator.

Heavy Reliance on US Parent Group Raised Oversight Concerns

Outsourcing emerged as one of the central issues in the case. The Irish unit was heavily reliant on the US-based Coinbase Group for the safeguarding of processes and controls required under Irish and EU rules.

The Central Bank, however, did not believe that Coinbase Ireland had the necessary local skills and expertise to adequately manage those functions, noting that the Irish entity's reliance on its US parent left it without sufficient in-house oversight capability. The regulator stressed that outsourcing does not remove a licensed firm's responsibility for protecting its customers.

Penalty Cut From €4.65 Million to €3.25 Million Under Settlement

The Central Bank initially decided that a reprimand and a financial penalty of €4,646,597 were warranted. The settlement framework allows for a discount of up to 30% where a firm cooperates with the regulator and accepts its findings. The Central Bank acknowledged the regulatory flaws but accepted the undisputed facts of the case, entitling the company to the maximum discount available. That reduced the final fine to €3,252,618.

The sanctions will take effect from a designated date that has yet to be set. They must still be confirmed by Ireland's High Court, which will uphold the penalty under the country's administrative sanctions system unless it considers the sanction to be manifestly disproportionate. That confirmation step leaves the case not yet fully closed, with the timeline for when the sanctions take effect to be settled only once the court signs off.

Irish Regulator Maintains Focus on Crypto-Linked Financial Firms

The case illustrates the importance of traditional financial protections at companies that provide infrastructure for cryptocurrency trading.

"Companies doing business in Ireland need to have the skills, governance and internal controls to safeguard customers' interests," Central Bank Enforcement Director Karen O'Leary said.

She added that special attention was given to obligations undertaken during the authorization process, including commitments that remain in effect after authorization, particularly where they provide access to the EU's broader market.

The Coinbase resolution marks the Central Bank's 164th enforcement outcome, bringing the total value of fines imposed through its enforcement actions to more than €432 million to date.

Source: Crypto Ninjas