The Central Bank of Ireland has imposed a financial penalty of €3.25 million (equivalent to approximately $3.65 million) on Coinbase Ireland Limited, the entity responsible for electronic money issuance and fiat balance management for Coinbase exchange users across Europe. According to an official announcement on October 22, 2026, the supervisory authority found that the firm committed serious breaches of customer fund safeguarding requirements and relied excessively on its U.S. parent company’s infrastructure over a five-year period.

Three core vulnerabilities in safeguarding mechanisms

The enforcement decision followed a settlement agreement in which the original penalty of €4.65 million was reduced by 30% under the regulatory settlement scheme. The violations spanned from November 2020 to August 2025 under Ireland’s European Communities (Electronic Money) Regulations 2011. This statutory framework mandates that all euro and USD balances used for cryptocurrency transactions must be held in segregated trust accounts, entirely distinct from the company’s own capital and the assets of other entities within the group.

The inspection identified three critical compliance failures:

  • Commingling customer fund flows: During the U.S. banking crisis in March 2023, as Silvergate Bank teetered on collapse, the Irish entity directed 30 clients to deposit funds into the U.S. parent company’s account. In addition, euro withdrawals by U.S. and UK customers were periodically paid directly from the Irish safeguarding account for liquidity rebalancing purposes.

  • Technical errors in internal dashboards: Coding flaws in reconciliation software caused the safeguarding account to suffer an average shortfall of approximately 0.54% of reserve obligations throughout 2023 and the first half of 2024.

  • Lack of independent oversight capacity: The Irish branch relied entirely on control workflows administered remotely from the United States, lacked qualified local personnel to oversee operations, and failed to notify regulators when significant operational changes occurred.

Karen O’Leary, Director of Enforcement at the Central Bank of Ireland, emphasized that the regulator would not tolerate a firm committing to establish a robust, automated safeguarding system during its 2019 authorization process only to permit operational processes to deviate from those commitments without disclosure.

Exchange response and remediation measures

In an official statement, a Coinbase representative stated that the company independently identified and reported several of the issues to the regulatory authority in January 2024. The exchange maintained that no customers suffered financial losses or experienced interruptions in accessing their funds during the relevant periods.

The company explained that these operational issues stemmed primarily from efforts to safeguard clients during periods of extreme volatility in the broader financial landscape, such as post-Brexit account migrations and cascading failures among U.S. banking partners. To achieve full compliance, Coinbase Ireland re-engineered its entire safeguarding calculation architecture, completed two independent audits showing zero outstanding findings, posted a €25 million guarantee, and appointed a dedicated local leader overseeing asset safeguarding.

Regulatory compliance pressure across Europe

This action represents the second financial penalty imposed by the Irish regulator on the exchange’s corporate ecosystem within the past year. Previously, in November 2025, Coinbase Europe was fined €21.5 million over deficiencies in transaction monitoring systems covering more than 30 million transactions for anti-money laundering compliance. After transitioning its European operational headquarters to Luxembourg to prepare for the MiCA framework, the firm’s legacy Irish authorization lapsed at the end of 2025.

The enforcement case underscores that financial regulators worldwide are progressively tightening requirements for client fund segregation and local governance capabilities at multinational exchanges. Even as companies continue expanding commercial offerings, such as how Coinbase expands its payment network or adapts to new regulations under the GENIUS Act, fundamental standards regarding client deposit safety remain a non-negotiable red line that cannot be compromised for internal liquidity management.