The Central Bank takes enforcement action against Coinbase Ireland
22 October 2026
Press Release
Central Bank of Ireland has fined Coinbase Ireland Limited €3,252,618 for breaching its safeguarding and outsourcing obligations under the Electronic Money Regulations 2011 (the EMR 2011) between 01 November 2020 and 19 August 2025. Today’s announcement follows the settlement reached between the Central Bank and Coinbase Ireland on 21 October 2026.
Coinbase Ireland is an e-money institution and is part of the global Coinbase Group, which operates one of the world’s largest crypto asset-trading platforms which allows for the buying, selling, transferring, and storing of crypto assets. As an e-money institution Coinbase Ireland issues and redeems e-money in exchange for fiat currency. Customers use the e-money Coinbase Ireland has issued to buy crypto assets on Coinbase Group’s online trading platform.
Coinbase Ireland is subject to the safeguarding and outsourcing requirements set out in the EMR 2011 (as amended). These requirements are fundamental to the protection of customer funds and to maintaining public confidence in the financial system. Coinbase Ireland did not meet these requirements in the following respects:
a.Coinbase Ireland failed to have in place an adequate outsourcing governance framework, in particular:
- They placed excessive reliance on the US-based Coinbase Group as an outsourced service provider to implement safeguarding processes and controls to meet Irish / EU regulatory compliance requirements; and
- Failed to have sufficient local skill and expertise available within Coinbase Ireland to appropriately oversee the core function and responsibility of managing and safeguarding customer funds at all times.
b. Coinbase Ireland failed to adequately safeguard customers’ funds, both through inadequate system design and insufficient control testing. As a result, they allowed its designated safeguarding account to be underfunded for lengthy periods of time.
c.Coinbase Ireland failed to have adequate internal control and escalation procedures and sufficient governance processes to identify and report material changes concerning safeguarding to the Central Bank.
Coinbase Ireland has admitted the prescribed contraventions and has agreed to the undisputed facts as set out in the Settlement Notice (PDF 492.33KB). As part of the settlement agreement reached between the Central Bank and Coinbase Ireland, the Central Bank has determined that sanctions comprising a reprimand and monetary penalty in the amount of €4,646,597 are warranted. The application of a 30% settlement scheme discount brings the amount to €3,252,618. The sanctions have been accepted by Coinbase Ireland. The sanctions are subject to confirmation by the High Court and will take effect once confirmed.
Central Bank Director of Enforcement, Karen O'Leary said:
“Firms in Ireland must have the appropriate culture and expertise to comply with the rules, respond to risks and to protect customer interests. While outsourcing presents many benefits to industry, when not effectively managed, it can threaten the operational resilience of firms.
Payment and e-money firms have a fundamental obligation to fully safeguard customers' funds. The Central Bank has made its supervisory expectations in this regard clear: we have no tolerance for weaknesses in safeguarding arrangements.
This case also highlights the importance of the authorisation process and the rigour with which we expect firms to approach authorisation to do business here thereby gaining - through authorisation - access the wider EU market. Details and commitments given by firms during the authorisation process are critical to the Central Bank's assessment of whether or not to authorize a firm. Failing to adhere to the assurances made during the authorisation process or to inform us of material changes as happened in this case is completely unacceptable.
This action against Coinbase Ireland underlines the Central Bank's focus on ensuring that customers are at all times protected and that the integrity of the financial system is maintained.”
Notes to Editor
- This is the Central Bank’s 164th enforcement outcome to date, bringing the total fines imposed by the Central Bank to over €432 million.
- Undisputed Facts Settlement: This is the fifth settlement under the Administrative Sanctions Procedure (ASP) following the changes introduced by the enactment of the Central Bank (Individual Accountability Framework) Act, 2023. The ASP guidelines, which the Central Bank published in December 2023, outline the various settlement processes now provided for under the ASP.
Central Bank concluded this ASP by way of settlement under the undisputed facts settlement process. The Central Bank may enter into the undisputed facts settlement process with a Subject where there are undisputed facts that render an investigation and/or the continuation of an investigation unnecessary. A Subject who enters into a settlement under the undisputed facts settlement process may, at the sole discretion of the Central Bank, and subject to the timing of the settlement, be offered a potential discount to any monetary penalty proposed up to a maximum of 30% under the settlement scheme. Sanctions imposed by way of the undisputed facts settlement process will be subject to confirmation by the High Court. - High Court Confirmation Application: As soon as practicable after such a settlement process has been concluded, the Central Bank will apply to the High Court for confirmation of the sanction imposed. The High Court will confirm the decision to impose a sanction unless it is satisfied that any sanction imposed is manifestly disproportionate. If the High Court does not confirm a sanction agreed as part of a settlement agreement concluded under the Undisputed Facts Settlement Process, it will remit the matter for reconsideration by the Central Bank and the Subject along with any recommendation the High Court has in respect of the matters to be reconsidered.
- Settlement Notice (PDF 492.33KB)