Skip to content
Blockchain Posts

regulation

Central Bank of Ireland fines Coinbase Ireland €3.25M for safeguarding breaches

The CBI's first crypto enforcement action lands on Coinbase Ireland for commingling customer funds and failing to compute daily safeguarding obligations under the Electronic Money Regulations.

by 3 min read
regulationirelandcoinbasemica

The Central Bank of Ireland has fined Coinbase Ireland Limited €3.25M and reprimanded the firm for breaches of customer-fund safeguarding and outsourcing rules under the Electronic Money Regulations. The settlement is public via the CBI press release and the settlement notice PDF, and The Block summarises the Quick Take figures.

Coinbase admitted the violations on October 21, 2026. Sanctions take effect only after High Court confirmation.

What the CBI found

Three distinct safeguarding failures, per the CBI notice:

  • Commingled institutional deposits. From March 2023 through October 2024, approximately 30 institutional clients of Coinbase Ireland sent US dollar deposits to accounts held by Coinbase Inc. in the US rather than to the Irish entity's safeguarding account.
  • UK legacy segregation. Customer funds that migrated from Coinbase UK remained in the UK entity's safeguarding account until August 19, 2025, well after the Irish entity became the counterparty of record.
  • Daily safeguarding shortfalls. Shortfalls reached up to €5.2M at peak in 2024. The firm "could not accurately calculate its daily safeguarding obligation," which the CBI called a "fundamental failure" against wind-down expectations.

The CBI also cited outsourcing deficiencies: heavy reliance on the US parent's infrastructure without sufficient local expertise, despite the regulator raising governance concerns in letters dated July 2022 and March 2023.

The numbers

  • Base penalty: €4,646,597.
  • Settlement discount: 30%.
  • Final fine: €3,252,618 (reported as €3.25M).
  • Period of violations: March 2023 – October 2024.
  • Peak daily shortfall: €5.2M (2024).
  • Remediation: shortfall covered in June 2024; data fix implemented October 2024; a safeguarding officer appointed December 2024.

Why it matters

This is the CBI's first enforcement action against a crypto-asset firm, and it predates by months the point at which Coinbase Ireland becomes the EU hub for MiCA-licensed services across the bloc. The violations are not MiCA-era — the Electronic Money Regulations ground the breach — but the CBI is signalling the standard it expects a MiCA passport-holder to meet.

The commingling pattern — US customer funds routed to a US parent account instead of the EU-regulated entity's segregated account — is the exact scenario MiCA Articles 70–75 are designed to prevent for CASPs holding client crypto and fiat. CBI letters flagging governance deficiencies as early as 2022 give the record a long tail.

What to watch

  1. High Court confirmation. Sanctions become effective only on approval. No date is scheduled in the CBI release.
  2. MiCA passport reviews across the bloc. Coinbase Ireland holds the MiCA licence under which the group services other EU member states. Peer regulators (BaFin, AMF, CNMV) will likely cross-reference the Irish file in their own supervisory reviews.
  3. Other MiCA-licensed US exchanges. Kraken (Ireland), Gemini (Malta), Binance (France, exited) have broadly similar group structures. The CBI's choice to publish the full breach pattern raises the floor on what EU regulators will tolerate from US parents.

Context

The CBI's action lands the same week the Boerse Stuttgart Seturion exchange cleared BaFin as the first full EU DLT TSS licence, and days after Ascendex drew AMF scrutiny over MiCA-era withdrawals. Three EU regulators showing their hand on crypto conduct in a single week is not coincidence — it's the MiCA supervisory era settling into pattern.

Related stories