Coinbase Ireland’s $3.6M wake-up call: customer-fund safeguards can’t fly solo

The Central Bank of Ireland has announced a €3,252,618 penalty, roughly $3.6 million, against Coinbase Ireland for breaching customer-fund safeguarding and outsourcing rules under the country’s Electronic Money Regulations between November 2020 and August 2025. Coinbase Ireland reached a settlement with the regulator on Oct. 21, securing a 30% discount from a €4,646,597 penalty, but the sanction requires confirmation by Ireland’s High Court before taking effect.

In a Thursday notice, the Central Bank said Coinbase Ireland had violated rules on oversight and customer-fund safeguarding by improperly relying on its U.S.-based parent for processes required under Irish and EU rules. The company lacked sufficient local expertise to oversee those protections, its designated safeguarding account was underfunded for lengthy periods, and its internal controls and reporting of material safeguarding changes were inadequate.

Coinbase Ireland “admitted the prescribed contraventions and has agreed to the undisputed facts,” the Central Bank said. Karen O’Leary, the Central Bank’s enforcement director, said firms operating in Ireland “must have the appropriate culture and expertise to comply with the rules, respond to risks and to protect customer interests.” She said payment and e-money firms have a “fundamental obligation to fully safeguard customers’ funds” and that the regulator has “no tolerance for weaknesses in safeguarding arrangements.” O’Leary called failures to honor assurances made during authorization, or to report material changes, “completely unacceptable.” She added: “This action against Coinbase Ireland underlines the Central Bank’s focus on ensuring that customers are at all times protected and that the integrity of the financial system is maintained.”

Coinbase Ireland’s user agreement currently states: “We use a variety of service providers (some belonging to the Coinbase Group and some not) in the context of outsourcing arrangements to help us provide the Coinbase Services in an efficient and qualitative manner.” Coinbase launched its operations in Ireland in 2018, received an e-money license from the Central Bank in 2019 and secured registration as a virtual asset service provider in 2022. It later obtained a MiCA license to passport its services across the bloc. Coinbase Ireland is an e-money institution within the broader Coinbase Group, issuing the digital money customers use to buy crypto on the platform.

The penalty is the second Irish enforcement action against Coinbase’s European operations in less than a year. In May, the Central Bank of Ireland fined a separate Coinbase entity, Coinbase Europe, €21.5 million ($24.8 million) for breaching anti-money laundering and counter-terrorist financing obligations, marking Ireland’s first enforcement action against a cryptocurrency company. “To be effective in combating financial crime, law enforcement agencies rely on regulated financial institutions to have systems in place to monitor transactions and report suspicions,” said Colm Kincaid, the Central Bank’s deputy governor. The latest action comes as Coinbase expands its European footprint and has recently rolled out crypto futures for traders in the region.