Coinbase Ireland faces €3.25M fine over customer fund safeguards

Coinbase Ireland has agreed to a €3.25 million fine over failures to protect customer funds and oversee outsourced controls, with the sanctions awaiting High Court approval.

The Central Bank of Ireland announced the settlement on Oct. 22, covering breaches of the Electronic Money Regulations 2011 between Nov. 1, 2020, and Aug. 19, 2025. Coinbase Ireland accepted a reprimand and admitted the contraventions, the regulator said.

Following an agreement reached on Oct. 21, the bank reduced a €4,646,597 penalty by 30% to €3,252,618. The regulator said the sanctions will take effect once the High Court confirms them.

Coinbase Ireland’s failures left customer safeguards short

FinanceFeeds reported that errors in the systems used to calculate daily safeguarding requirements and rebalance funds began in July 2022. Citing the settlement documents, it said the account had daily funding shortfalls for at least 18 months.

The largest daily gap reached €3.4 million in 2023 and €5.2 million in 2024, according to that report. FinanceFeeds said average safeguarding obligations were €323 million in 2023 and €470 million in 2024.

Bitcoin.com separately reported the same peak shortfalls and duration, describing calculation errors and customer money being mixed with funds held by other Coinbase businesses. Those reported shortfalls concern money that should have been set aside, not an established loss suffered by customers.

Coinbase told Reuters that no customers lost money or access to their funds. A spokesperson said the problems largely arose while the company was taking steps to protect customers during periods of disruption.

The central bank’s announcement identified excessive reliance on the US-based Coinbase Group and insufficient Irish expertise to oversee safeguarding. It attributed prolonged underfunding to weak system design and control testing, and found failures in reporting material changes.

“Payment and e-money firms have a fundamental obligation to fully safeguard customers’ funds,” enforcement director Karen O’Leary said.

Coinbase links mixed deposits to US banking disruption

Coinbase’s own account identifies several routes through which money crossed between group entities. During the 2023 US banking crisis, the company said it redirected 30 customers from its Silvergate account to a Coinbase Inc. account at another US bank.

The exchange acknowledged that this mixed Irish customers’ money with other customers’ funds. Daily transfers to the Irish safeguarding account did not prevent the initial mixing, according to its statement.

After Brexit, some European customers continued paying into old UK accounts despite receiving new Irish deposit details, Coinbase said. The company said it later blocked misdirected deposits.

Coinbase described another practice in which certain euro withdrawals for US and UK customers were paid from the Irish safeguarding account. It acknowledged that the arrangement did not meet regulatory requirements.

The company said it reported several issues in January 2024 and fixed most underlying controls that year. Its Oct. 22 statement says the historical problems are now fully resolved, including changes to technical controls and safeguarding calculations.

Ireland’s e-money unit remains separate from Luxembourg crypto services

Coinbase’s customer guidance assigns e-money services to Coinbase Ireland while placing crypto-asset services with Coinbase Luxembourg. The company says Irish law governs e-money services and Luxembourg law governs crypto services.

The exchange secured its Luxembourg MiCA license in June 2025, allowing services across the EU, as crypto.news previously reported. Coinbase described the authorization as a route to serve customers across all 27 member states.

A June 25, 2026 office opening confirmed Luxembourg as the company’s European crypto hub. Coinbase said its Luxembourg entity would provide crypto-asset services across the European Economic Area through passporting.

Coinbase’s migration guidance lists phased changes to customer agreements, beginning with Hungary, Iceland, Liechtenstein and Malta on Aug. 18, 2025. Italy and the Netherlands followed on Sep. 15, while Ireland was among the countries assigned an Oct. 23 effective date.

The guidance says customers receive notice before their terms change. Customers who reject the updates have 30 days from the specified effective date to withdraw assets and close their accounts, according to Coinbase.

The updated terms require customers to consent to Luxembourg’s execution of trades outside EU trading venues, including on Coinbase Exchange, Coinbase says. Its guidance tells affected customers to confirm that consent when they next sign in after their effective date.

Coinbase Europe faced a separate transaction-monitoring penalty

In November 2025, Coinbase Europe accepted a separate €21.5 million settlement over anti-money laundering and counter-terrorist financing monitoring failures.

The earlier enforcement findings concerned more than 30 million transactions worth over €176 billion that were not properly screened during a 12-month period. The bank said completing retrospective checks took nearly three years.

Delayed monitoring led to 2,708 suspicious transaction reports to Ireland’s Financial Intelligence Unit, according to the earlier account of the findings. Coinbase Europe admitted failures in its policies and controls, including required additional monitoring on nearly 185,000 transactions.

The earlier settlement used an undisputed-facts process and included a 30% discount. Coinbase Europe accepted a penalty reduced from roughly €30.6 million to €21.5 million.

In describing the earlier case, the bank said the monitoring system’s configuration had prevented it from screening the affected transactions. The admissions covered transaction monitoring and internal procedures intended to prevent and detect money laundering and terrorist financing, according to the settlement account.