Coinbase Ireland settlement exposes gaps in customer cash safeguards

Coinbase Ireland agreed to a €3.25 million penalty after its regulator identified weaknesses in customer fund protection and outsourced controls. The case centres on account segregation and local oversight, while Coinbase says customers suffered no losses and the sanctions still require High Court approval.

Irish settlement targets safeguarding and outsourced oversight

Ireland’s central bank announced enforcement action against Coinbase Ireland over failures in protecting customer money and supervising outsourced services. According to Cointelegraph, the subsidiary accepted the breaches and agreed to the underlying facts, with the sanctions awaiting approval from Ireland’s High Court.

Bitcoin Magazine places the breaches between November 2020 and August 2025 and reports that the settlement preceded the announcement. The action concerns Coinbase Ireland’s responsibilities as an electronic money institution, rather than a finding about the custody of customers’ crypto assets.

The distinction matters for understanding the case. The balances at issue were euro and dollar funds used by European customers to purchase crypto on Coinbase, according to Bitcoin Magazine. Safeguarding those balances required controls at the Irish entity even when another group company performed the operational work.

Banking disruption exposed account segregation problems

The clearest operational example concerns the banking turmoil around Silvergate in 2023. CoinDesk reported that Coinbase instructed 30 customers to send money to an account at another US bank, where their deposits were held with funds belonging to customers of a different Coinbase entity.

Bitcoin Magazine adds that some European customers continued depositing into older UK accounts after their migration from Coinbase’s UK affiliate. It also reports Coinbase’s explanation that euro withdrawals for customers of US and UK entities sometimes came out of the Irish safeguarding account to meet liquidity needs.

These arrangements illustrate why segregation involves more than keeping money somewhere within a corporate group. Dedicated accounts must correspond to the obligations of the entity responsible for the customers. Bitcoin Magazine reports that Coinbase’s daily rebalancing process returned money to the appropriate account, but did not stop the initial mixing.

The penalty and shortfall figures measure different things

Bitcoin Magazine reports a €3.25 million settlement penalty, following a 30% reduction from a €4.65 million base amount. It also says the reprimand and fine remain subject to High Court confirmation, an important qualification to headlines describing the penalty as already imposed.

CoinDesk reports that coding errors left the safeguarding account short by an average of 0.54% during 2023 and the first half of 2024. Bitcoin Magazine describes roughly the same average and attributes the problem to an internal dashboard. That percentage measures a safeguarding deficit, not a reported customer loss.

Coinbase told CoinDesk that customers neither lost money nor lost access to their funds because of these issues. The company’s account of customer outcomes sits alongside the regulator’s findings about deficient protection. An absence of realised losses does not establish that the required safeguards operated correctly.

Reports align on the failures but differ on some amounts

The outlets converge on inadequate safeguarding and excessive dependence on the US group. The Block’s summary highlights underfunding and customer money being mixed with group accounts. CoinDesk adds the banking episode and Coinbase’s response, while Cointelegraph emphasises admitted breaches and the court approval requirement.

Bitcoin Magazine gives the fullest operational account, including deposits reaching legacy accounts, regulatory notification failures and claimed remediation. Its dollar equivalent for the current penalty is $3.65 million, whereas CoinDesk and Cointelegraph report $3.6 million. CoinDesk and Bitcoin Magazine agree on the €3.25 million amount.

The reports also differ on an earlier enforcement penalty involving Coinbase Europe. CoinDesk gives €21.4 million, while Bitcoin Magazine gives €21.5 million. That separate anti-money-laundering case should not be conflated with the safeguarding settlement involving Coinbase Ireland.

Group support did not replace the Irish entity’s duties

The regulatory concern extended beyond account movements. CoinDesk reports that Coinbase Ireland lacked an adequate framework for governing outsourced services. Bitcoin Magazine adds that the subsidiary did not have sufficient local expertise to supervise the safeguarding work performed by its US group.

Bitcoin Magazine also reports a failure to notify the central bank about material changes to safeguarding practices. The regulator contrasted those practices with commitments made during authorisation. The issue was therefore both how the controls operated and whether the regulator was told when arrangements changed.

For crypto businesses using affiliated companies to handle customer cash, the case illustrates the distinction between performing a function and retaining responsibility for it. Outsourcing can centralise operations, but the findings here concern the Irish entity’s ability to supervise those operations, test controls and maintain the required account separation.

Court confirmation and remediation remain the next checkpoints

High Court confirmation is the next formal step identified by Cointelegraph and Bitcoin Magazine. Separately, Bitcoin Magazine reports Coinbase’s statement that it disclosed many issues itself in January 2024 and resolved most underlying control problems during that year.

Coinbase also said it revised its safeguarding calculation, obtained third-party validations without outstanding findings, put a €25 million guaranty bond in place and appointed a safeguarding lead, according to Bitcoin Magazine. These are company-reported remedial measures, distinct from the regulator’s findings about the earlier failures.

The remaining operational question is whether those changes address the mechanisms described in the settlement: incorrect account routing, calculation errors, weak outsourced oversight and failures to report material changes. Court confirmation and evidence of sustained control effectiveness are separate matters to follow.

Market snapshot

Asset	Price	24h	7d	Market cap
Bitcoin (BTC)	$81,659	-0.7%	-0.4%	$1.64 trillion

CoinGecko data as of 2026-10-23 (UTC).

FAQ

Did Coinbase Ireland customers lose money?

Coinbase said customers experienced no financial losses or interruption in access because of these matters, according to CoinDesk. The regulator nevertheless identified safeguarding failures involving underfunding, account segregation and oversight.

Is Coinbase Ireland’s €3.25 million penalty final?

Coinbase Ireland agreed to the settlement, but Cointelegraph and Bitcoin Magazine report that the sanctions require High Court approval. Bitcoin Magazine says the settlement includes a reprimand.

What caused the Coinbase Ireland safeguarding shortfall?

CoinDesk reports that coding errors contributed to average underfunding of 0.54% during 2023 and the first half of 2024. The wider case also involved account mixing and inadequate supervision of outsourced safeguarding controls.

Sources

• Cointelegraph: Irish cenbank fines Coinbase arm $3.6M for oversight, safeguard failures (2026-10-22)
• CoinDesk: Irish central bank fines Coinbase Ireland $3.6 million over fund safeguarding failures (2026-10-22)
• The Block: Coinbase Ireland fined $3.6 million over customer fund segregation, oversight failures (2026-10-22)
• Bitcoin Magazine: Central Bank of Ireland Fines Coinbase Unit €3.25 Million Over Customer Fund Safeguarding Failures (2026-10-22)
• CoinGecko (market data)