Central Bank of Ireland fines Coinbase Ireland €3.25 million over safeguarding failures
In brief
- Central Bank of Ireland fined Coinbase Ireland €3.25 million, roughly $3.6 million.
- Coinbase Ireland relied too heavily on U.S.-based Coinbase Group for safeguarding controls, the regulator said.
- During Silvergate's 2023 collapse, Coinbase routed 30 customers' deposits to an alternate U.S. bank account, it said.
- Coding errors left the safeguarding account underfunded by an average of 0.54%, according to Coinbase.
- The fine follows a €21.4 million AML penalty on Coinbase Europe almost a year earlier.
What the regulator found
The CBI's findings, as reported by CoinDesk, cover two problems. One is outsourcing. The other is how customer funds were actually safeguarded (the regulator pointed to inadequate system design and insufficient control testing). Here's how the CBI put it:
"They placed excessive reliance on the U.S.-based Coinbase Group as an outsourced service provider to implement safeguarding processes and controls [and] failed to adequately safeguard customers’ funds, both through inadequate system design and insufficient control testing"
Safeguarding and outsourcing rules exist to protect customer funds. Firms have to keep those funds adequately funded and monitored, and they're required to report material changes to the regulator.
The Silvergate episode
Coinbase added detail in a statement released after the CBI's announcement. When Silvergate was close to collapse in 2023, the company said, it told 30 customers to deposit funds into an alternate Coinbase account held at another U.S. bank. Those funds ended up sitting alongside money belonging to customers of a different Coinbase entity, which Coinbase's statement described as a breach of safeguarding requirements.
That wasn't the only issue Coinbase flagged.
The company said euro withdrawals by U.S.- or U.K.-based customers were paid out of Coinbase Ireland's safeguarding account. It also said coding errors left that account underfunded by an average of 0.54% across 2023 and the first half of 2024. Coinbase said no customer suffered a financial loss, and that no customer was ever unable to access their funds.
A second Irish penalty in about a year
It isn't Coinbase's first run-in with Irish regulators. The new fine lands almost a year after the CBI fined Coinbase Europe €21.4 million for breaching its anti-money laundering obligations between 2021 and 2025, according to CoinDesk.
Both penalties came from the same regulator. They aren't about the same rules, though: the earlier case was about anti-money laundering obligations, while this one is about safeguarding and outsourcing.
Frequently asked questions
Why did the Central Bank of Ireland fine Coinbase Ireland?
The CBI fined Coinbase Ireland €3.25 million (about $3.6 million) over alleged breaches of its safeguarding and outsourcing obligations. The regulator said the unit didn't set up an adequate outsourcing governance framework and relied too heavily on U.S.-based Coinbase Group to implement its safeguarding controls.
What happened with Coinbase customer funds during the Silvergate collapse?
According to Coinbase's statement, when Silvergate was close to collapse in 2023 the company told 30 customers to deposit funds into an alternate Coinbase account at another U.S. bank. Those funds were held alongside funds belonging to customers of another Coinbase entity, which breached safeguarding requirements.
Did any Coinbase customers lose money?
Coinbase said no customer suffered a financial loss and no customer was ever unable to access their funds. The company did say coding errors left Coinbase Ireland's safeguarding account underfunded by an average of 0.54% in 2023 and the first half of 2024.
