Coinbase Ireland sanctioned: €3.25 million fine for inadequate protection of client funds

The Irish sanction imposed on Coinbase

On October 22, 2026, the Central Bank of Ireland announced that it was imposing a sanction of 3.25 million euros on Coinbase Ireland. The fine follows an agreement that was reached the day before and that also includes an official reprimand of the company. The decision is still subject to validation by the Irish High Court, although the company has already accepted the terms set out in the agreement.

This action forms part of increased supervision of electronic money services, in which the authorities require client funds to be kept strictly separate in order to prevent any risk of financial contagion.

Coinbase Ireland has acknowledged the shortcomings identified by the regulator and states that it has corrected the problems since January 2024. The company specifies that its clients have not suffered any financial loss and that their access to their funds has never been compromised. Despite these assurances, the regulator stressed that the absence of losses, on its own, is not enough to demonstrate compliance with the requirements for protecting funds. This explains the need for a financial sanction intended to encourage lasting improvements in the company's internal controls.

Shortcomings in the protection of client funds

The investigation brought to light several significant weaknesses in the governance of Coinbase Ireland. The regulator pointed to excessive reliance on services provided by the American group, a lack of local expertise for supervising operations, and internal controls that were considered insufficient. Flaws in the design of verification systems resulted in the safeguarding account being underfunded for prolonged periods, which allowed client holdings to be mixed with other funds belonging to the group.

The principle of segregation, which means keeping clients' funds separate from the assets belonging to the company, lies at the heart of European regulation of payment services. The regulator found that, despite the commitments made when it obtained authorization in 2019, Coinbase Ireland had allowed client holdings to mingle with funds held in other parts of the group. This practice breaches safeguarding requirements and exposes users to greater risk in the event that a related entity fails.

Governance issues and the lessons to be drawn

The case underlines how important it is for cryptoasset platforms to retain sufficient local expertise when outsourcing critical functions. Although outsourcing does not release the authorized entity from its responsibility, it requires robust oversight mechanisms to ensure that safeguarding requirements are met. European regulators, including the Central Bank of Ireland, are consequently increasing their scrutiny of hybrid operating models that combine internal services with external providers.

For users, the sanction serves as a reminder that the security of funds depends above all on the exchange's ability to separate client assets clearly from its own internal resources. The lessons drawn from this case encourage industry participants to review their governance processes, invest in competent local teams and strengthen their compliance audits. At the same time, the authorities continue to monitor the practices of Coinbase Europe, which was already fined €21.5 million in 2025 for shortcomings relating to anti-money laundering.