The Central Bank of Ireland fined Coinbase's Irish subsidiary EUR3.25 million (about $3.6 million) on October 22, 2026, for failing to properly ring-fence customer funds and for leaning too heavily on its US parent to run those controls. The penalty, reported by Bloomberg and confirmed across industry coverage, closes a settlement that Coinbase Ireland agreed to on October 21, admitting the breaches and accepting a formal reprimand.
The fine lands on the legal entity that anchors much of Coinbase's European business. Coinbase Ireland is the group's hub for the bloc, and the regulator's findings reach back nearly five years, covering November 2020 through August 2025.
The safeguarding gap the regulator found
Under Ireland's Electronic Money Regulations, a firm holding customer money must keep it segregated and fully backed, so balances are protected if the company itself runs into trouble. The Central Bank found that Coinbase Ireland fell short of that standard in two ways.
Coding errors left a safeguarding account underfunded by an average of 0.54% during 2023 and the first half of 2024, according to Coinbase's own disclosure. In plain terms, the pool meant to cover customer balances held slightly less than it should have for an extended stretch. Coinbase said it has fully resolved the issues and that no customers lost money or lost access to their funds at any point.
The second failing was structural. The regulator said Coinbase Ireland lacked an adequate outsourcing governance framework and placed excessive reliance on the US-based Coinbase Group to implement safeguarding processes on its behalf. The Irish entity held the license and the legal obligation, but the actual machinery sat with the American parent, and the local oversight to catch a 0.54% shortfall was not there.
A discounted settlement
The headline number could have been larger. The Central Bank set the penalty at EUR4.65 million before applying a 30% discount for early settlement, bringing it down to EUR3.25 million. That mechanism is standard in Irish enforcement: firms that admit the breaches and settle rather than contest them receive a fixed reduction.
Coinbase's decision to admit and settle on October 21 fits that pattern. The company accepted the reprimand alongside the fine, which typically signals a firm wants the matter closed quickly rather than drawn into a contested process that keeps the finding in the headlines for months.
Second European penalty in a tightening climate
This is not the first time Coinbase has drawn a fine in Ireland, and it arrives while European regulators are sharpening their focus on how crypto firms handle customer money. The timing matters because Ireland is where a large share of crypto platforms have based their EU operations, which makes the Central Bank's enforcement posture a bellwether for the rest of the bloc.
The core issue here is not exotic. Segregation of customer funds is the oldest rule in financial safeguarding, and the finding that a licensed entity outsourced that function to an offshore parent without adequate controls is the kind of governance gap regulators across jurisdictions are now actively probing. For users, the episode is a reminder that leaving balances on an exchange means trusting that firm's internal controls, not just its brand. That counterparty exposure is the practical argument behind spending from your own wallet rather than a custodial balance, where safeguarding depends on a third party's bookkeeping holding up.
The broader regulatory squeeze in Ireland and across Europe is unlikely to ease. As more consumer money flows through exchanges and card programs, the gap between holding a license and actually operating its obligations is exactly where supervisors are now looking.
Overview
The Central Bank of Ireland fined Coinbase Ireland EUR3.25 million ($3.6 million) for safeguarding and outsourcing breaches spanning November 2020 to August 2025, including a customer-protection account underfunded by an average of 0.54% in 2023 and early 2024. Coinbase admitted the breaches on October 21, accepted a reprimand, and said the problems are resolved with no customer losses. The penalty was cut from EUR4.65 million under a 30% early-settlement discount. It is a reminder that custodial balances rest on a firm's internal controls, and that European regulators are tightening scrutiny of how crypto platforms safeguard customer money.
