“Safeguarding” sounds like a formality until you read what happens without it. On October 22, 2026, the Central Bank of Ireland fined Coinbase Ireland Limited €3,252,618 for failures in how it protected customers’ euro balances — including a safeguarding account that was underfunded for extended periods over almost five years.
The regulator doesn’t allege that any money went missing. But the case shows how much of a custodial platform’s promise rests on back-office processes users never see.
Key facts
- The Central Bank of Ireland fined Coinbase Ireland Limited €3,252,618, announced on October 22, 2026, a day after a settlement.
- The fine was set at €4,646,597 and reduced by a 30% settlement discount.
- The breaches cover November 1, 2020 to August 19, 2025, under the Electronic Money Regulations 2011.
- Findings: weak governance of outsourcing to the US Coinbase group, inadequate safeguarding of client funds, and missing procedures to identify and report material changes.
- The safeguarding account was underfunded for extended periods; the regulator makes no allegation that money went missing.
- In November 2025, the same regulator fined Coinbase Europe €21,464,734 over transaction monitoring failures.
Why was Coinbase Ireland fined?
The Central Bank found three failings: Coinbase Ireland didn’t properly govern the work it outsourced to the US Coinbase group, didn’t adequately safeguard client funds, and lacked procedures to identify and report material changes. Its safeguarding account was underfunded for extended periods, and it lacked enough in-house expertise to oversee how client funds were administered.
According to the Central Bank’s announcement, Coinbase Ireland admitted the findings and accepted the sanctions. Karen O’Leary, Director of Enforcement, said: “Payment and e-money firms have a fundamental obligation to fully safeguard customers’ funds.” She added that the regulator has “no tolerance for weaknesses in safeguarding arrangements.”
What Coinbase Ireland actually does
Coinbase Ireland is the e-money institution responsible for customers’ euro balances. A separate entity, Coinbase Europe Limited, provides crypto asset and wallet services. The fine concerns how euro balances were protected, not the crypto itself.
A custodian’s promise is only as strong as its least-watched spreadsheet.
Are e-money balances on crypto exchanges protected?
Not by deposit insurance. E-money balances are not covered by the statutory deposit guarantee of up to €100,000 per customer and institution that applies to bank accounts. Instead, e-money firms must safeguard client money — keep it separate and fully covered — so it can be returned if the firm fails. That is exactly the process the Irish regulator found wanting.
The sanctions take effect only once the Irish High Court confirms them, which it does unless it considers them manifestly disproportionate. This is the fifth settlement under the procedure introduced by the Central Bank (Individual Accountability Framework) Act 2023, and the Central Bank’s 164th enforcement outcome, bringing its total fines to more than €432 million.
Is this the first time Coinbase has been fined in Ireland?
No. On November 6, 2025, the Central Bank fined Coinbase Europe Limited €21,464,734 for transaction monitoring breaches between April 2021 and March 2025. In that case, more than 30 million transactions worth over €176 billion — about 31% of Coinbase Europe’s transactions in the period — went unmonitored over twelve months, and the review took almost three years.
What this means for self-custody and swap users
No one is suggesting Coinbase customers lost money. The point is structural: when you leave funds on a platform, your protection depends on processes — safeguarding, reconciliation, outsourcing oversight — that you can’t inspect. Sometimes they fail quietly for years.
Self-custody replaces that trust with keys you control. If you only need to convert one asset to another, a non-custodial swap through SwapZilla moves coins from your wallet to your wallet, with the provider never holding a long-lived balance on your behalf. Our comparison of DEX, CEX and swap aggregators lays out where each model puts the custody risk, and our analysis of CEX risk in 2026 looks at the broader pattern.
Final thoughts
A €3.25 million fine is small for a company Coinbase’s size. The finding behind it isn’t: for almost five years, the buffer meant to protect customers’ euros wasn’t always full. That is the kind of risk custodial users carry without knowing it — and the kind self-custody is designed to remove.