The Central Bank of Ireland announced the enforcement action on October 22, covering failures between November 1, 2020 and August 19, 2025. The sanctions concern safeguarding, outsourcing and governance at Coinbase Ireland Limited, an electronic money institution serving customers in Europe.
The fine and reprimand remain subject to confirmation by Ireland’s High Court. Until that confirmation, the settlement is not final.
Safeguarding rules require payment and electronic money firms to keep customer funds protected from the company’s own operating money. In practice, that means a firm must know how much it owes customers, hold the required amount in designated accounts and maintain controls that can identify and correct shortfalls quickly.
According to the Central Bank’s settlement notice.pdf), Coinbase Ireland relied too heavily on its U.S. parent and other group entities to design and operate its safeguarding framework. The Irish business did not have enough local expertise or oversight to challenge those arrangements effectively.
The regulator also found that Coinbase Ireland’s systems could leave its safeguarding account underfunded. Customer funds were mixed across certain group accounts, and daily shortfalls persisted because of weaknesses in system design, coding and control testing.
The settlement notice describes failures to identify and resolve safeguarding discrepancies promptly. It also says Coinbase did not notify the Central Bank when its safeguarding arrangements materially changed, despite having presented robust and automated protections during its authorization process.
The base penalty was €4.65 million. The Central Bank reduced it by 30 percent because Coinbase agreed to settle, producing the final amount of €3,252,618. The action is notable because it targets operational infrastructure rather than a trading product or token listing. For customers, the central issue is whether a platform can accurately account for money moving through banks, payment processors and affiliated corporate entities.
How the shortfalls developed
Coinbase has said that it self reported many of the issues to the regulator in January 2024. In its account of the settlement, Coinbase said it had resolved the past safeguarding issues and that no customer lost money or access to funds.
The company attributed the problems to several overlapping factors. During the banking crisis in 2023, some deposits were routed through accounts belonging to other Coinbase entities. Coinbase also continued to use legacy payment flows connected to customer migrations following Brexit.
The company said coding errors affected the calculation of its safeguarding obligations. Those errors left the safeguarding account underfunded by an average of about 0.54 percent of obligations through 2023 and the first half of 2024, according to Coinbase’s explanation.
Although the company says customers were not financially harmed, the findings show why regulators focus on processes as well as outcomes. A firm can ultimately make customers whole while still failing to prove that its controls would protect them during a period of stress, rapid growth or banking disruption.
Coinbase said it redesigned its safeguarding calculations, completed third party validations and posted a €25 million guaranty bond. It also hired a dedicated safeguarding executive to oversee the function.
A broader test for crypto payments
The Irish action puts pressure on crypto companies to treat compliance infrastructure as part of the product. Exchanges increasingly operate across multiple legal entities, currencies and payment networks. That structure can improve reach and efficiency, but it also creates points where responsibility becomes unclear and customer funds can be difficult to trace.
For traditional payment companies, segregation, reconciliation and governance are core operating requirements. The Coinbase case tests whether large crypto platforms can meet those same standards while using globally distributed technology and group level services.
It also follows a separate €21.5 million Irish fine against a Coinbase entity in 2025, adding to regulatory scrutiny of the company’s European structure. The latest settlement suggests that future expansion in digital asset payments will depend not only on faster transfers and broader access, but also on whether firms can demonstrate reliable, locally accountable controls behind those services.
- William Murphy from Dublin, Ireland · CC BY-SA 2.0
Jessica Jones is not a person. No notebook, no deadlines, no face behind the name — just a byline this newsroom publishes under. Here is the production line underneath it, because a name beside a portrait reads like a journalist, and this one is not one.
The models. Writing: gpt-5.6-luna. Out on the live web: gpt-5.6-luna and gpt-5.6-terra. Pictures: gpt-image-1. Swap one in the newsroom and this line swaps with it — it is read off the machines, not typed here.
How a story is made
- Research. The searching model reads around the story, pointed at primary sources — the filing, the post, the repository — rather than at somebody else's write-up of them.
- Writing. The writing model drafts it against what was found, at Jessica Jones's usual length and in Jessica Jones's usual register.
- The loop. A reviewer reads the draft and sends it back with notes. Then reads it again. A piece can go round several times before it leaves the building.
- Enrichment. A quotation has to appear word for word on the page it is taken from. A chart may only use figures that appear in the source it cites. Whatever fails is dropped, and the reason is kept.
- Fact check. A last pass hunts for claims the article makes and its sources do not.
- A human stop. Sensitive subjects are held for a person to read before publication, and a person can kill any of it at any point.
If that sounds less like a newsroom and more like a factory: quite. It is called Press Factory.
This article was generated using AI and published automatically without human pre-publication review.
Read and checked by admin on 10/23/2026
How this article was made
The article was produced by the Grandmonts Media News Engine using automated research, drafting and verification workflows. No human editor reviewed the article before publication. Grandmonts Media remains responsible for the published content. Errors can be reported at office@grandmonts.cz.