Ireland Fines Coinbase's E-Money Firm €3.25 Million for Leaving Customer Money Underprotected

Analysis

The Central Bank of Ireland says Coinbase Ireland Limited let its safeguarding account for customer funds run short for long periods between 2020 and 2025, with a peak daily shortfall of €5.2 million. The firm admitted the breaches; the fine needs High Court confirmation.

The Central Bank of Ireland announced on October 22 a reprimand and a fine of €3,252,618 against Coinbase Ireland Limited, an electronic-money institution in the Coinbase group. An e-money institution holds customers' fiat money so they can pay and transfer; on a crypto platform, it is the part that handles the ordinary money that goes in and out, not the crypto itself.

What the regulator found

From the press release and the settlement notice (OBSERVED as the regulator's findings, admitted by the firm):

The breach: safeguarding and outsourcing failures under the Electronic Money Regulations 2011, from November 1, 2020 to August 19, 2025. The firm "allowed its designated safeguarding account to be underfunded for lengthy periods of time."

The size: the maximum daily shortfall was €3.4 million in 2023 and €5.2 million in 2024. The average daily shortfall was about 0.54% of a safeguarding obligation that averaged €323 million in 2023 and €470 million in 2024.

The cause, per the regulator: over-reliance on the US-based group and too little expertise in Ireland. Some customers could still deposit into a Coinbase UK account.

Discovery and repair: the firm notified the regulator of the UK-account issue on January 17, 2024. A separate timing-mismatch error, which left the safeguarding account short, was made good in late June 2024 and fixed at its root in October 2024. On the UK account, the last 33 customers who could still deposit into it were blocked on August 19, 2025.

The fine started from 7% of average annual gross turnover of €63,219,000, giving €4,425,330, plus 5% because the firm did not adequately complete two earlier risk-mitigation programmes the regulator had set, giving €4,646,597. A 30% settlement discount brings it to €3,252,618. "The sanctions are subject to confirmation by the High Court and will take effect once confirmed."

Why safeguarding is the rule that matters

Safeguarding separates money received for e-money from the firm's own resources. Regulation 29 of the Electronic Money Regulations 2011 provides two routes: segregation, including a separate bank account or regulator-accepted secure, low-risk assets when funds remain held past the specified deadline; or qualifying insurance or a guarantee from outside the firm's group.

The purpose is to protect customer funds from the firm's other creditors if it fails; it does not guarantee immediate repayment. A shortfall means part of what customers were owed sat outside the safeguarded account. The shortfall was a small fraction of the total; the breach lies in the gap itself, and in how long it lasted.

In its October 22 response , Coinbase said customers suffered neither financial losses nor interrupted access to funds. That company claim has not been independently verified by AA.

Worth knowing: this is not the first Irish action against the group. In November 2025 the Central Bank fined a different company, Coinbase Europe Limited , €21,464,734 for failing to fully and properly monitor 30,442,437 transactions under anti-money-laundering law.

The causal chain

The regulator attributed the failures to inadequate oversight, system design and controls. Outsourcing itself is not prohibited; the local firm remains responsible.

Our assessment: this is a warning about local oversight of outsourced safeguarding. This enforcement action does not establish whether any crypto asset held on the platform is safe, nor does it establish an effect on token prices.

What we're watching

High Court confirmation of the sanction, and whether the Central Bank brings further safeguarding cases against payment and e-money firms that outsource to group companies.

Sources

The Central Bank takes enforcement action against Coinbase Ireland , Central Bank of Ireland, October 22, 2026.

Settlement notice, Coinbase Ireland Limited (pending High Court approval) , Central Bank of Ireland.

European Communities (Electronic Money) Regulations 2011, S.I. No. 183 of 2011 , Irish Statute Book.

Enforcement action against Coinbase Europe Limited , Central Bank of Ireland, November 6, 2025.

Coinbase statement on its settlement with the Central Bank of Ireland , Coinbase, October 22, 2026 (company statement).