Coinbase Ireland faces €3,252,618 penalty over client funds
Coinbase Ireland Limited agreed to a reprimand and €3,252,618 penalty for safeguarding and governance breaches, the Central Bank of Ireland said on October 22, 2026. The sanctions require High Court confirmation before taking effect.
Client money left inadequately protected
Coinbase Ireland admitted four contraventions spanning November 1, 2020 to August 19, 2025: deficient outsourcing oversight, mixing customer funds, inadequate safeguarding and failure to notify material changes.
It outsourced safeguarding to Coinbase Inc. without adequate local expertise until December 16, 2024.
Funds of 30 institutional customers passed through Coinbase Inc. accounts; migrated customers continued depositing into Coinbase UK accounts.
Reconciliation errors caused daily shortfalls for at least 18 months.
Maximum shortfalls reached €3.4 million in 2023 and €5.2 million in 2024.
The average daily shortfall was 0.54 percent against average safeguarding obligations of €323 million and €470 million, respectively.
Recklessness raises the sanction
The regulator classified outsourcing failures as reckless and the other three contraventions as negligent.
Applying 7 percent to average annual gross turnover of €63,219,000 produced a €4,425,330 base penalty.
Failure to adequately address remediation programmes issued in July 2022 and March 2023 added 5 percent, or €221,267, taking it to €4,646,597. A 30 percent settlement discount reduced this to €3,252,618, below the applicable €10 million maximum.
The notice is dated October 21, 2026; Coinbase Ireland accepted the facts and sanctions and waived an inquiry.
No loss does not erase exposure
The regulator found no evidence of actual consumer detriment, but identified risks to full and timely repayment in insolvency.
Group outsourcing did not remove Coinbase Ireland's responsibility for customer funds.
External assurance preceded closure of the latest remediation programme in June 2026.