Ireland fines Coinbase unit $3.6Mn over outsourcing oversight
- The Central Bank of Ireland fined Coinbase Ireland €3,252,618 ($3.6Mn) on Oct. 22.
- Coinbase Ireland relied excessively on the U.S.-based Coinbase Group as an outsourced service provider.
- The breaches ran from Nov. 1, 2020, to Aug. 19, 2025.
- The maximum daily safeguarding shortfall was €5.2 million ($5.8Mn) in 2024.
DUBLIN, IRELAND — Coinbase Ireland has been fined €3,252,618 ($3.6Mn) after relying too heavily on its U.S. parent group to protect customer funds. The crypto group’s e-money unit lacked the local skill and expertise to oversee the safeguarding work it had handed to the group, and its safeguarding account was underfunded for long periods.
An outsourced core function
The Central Bank of Ireland said in a press release on Oct. 22 that Coinbase Ireland breached its safeguarding and outsourcing obligations under the Electronic Money Regulations 2011 between Nov. 1, 2020, and Aug. 19, 2025. Coinbase Ireland admitted the breaches, and the fine follows a settlement reached on Oct. 21.
Coinbase Ireland issues and redeems e-money in exchange for fiat currency, which customers use to buy crypto assets on Coinbase Group’s trading platform. The regulator found it placed excessive reliance on the U.S.-based Coinbase Group as an outsourced service provider to implement safeguarding processes and controls.
The settlement notice lists the functions outsourced to Coinbase Inc., including daily reconciliation of the designated safeguarding account and calculation of the unit’s safeguarding obligations. The people overseeing that work were employees of other Coinbase Group entities and were based outside Ireland.
Underfunded for at least 18 months
Errors in those systems left the designated safeguarding account underfunded on a daily basis for at least 18 months. The maximum daily shortfall was €3.4 million ($3.8Mn) in 2023 and €5.2 million ($5.8Mn) in 2024.
The central bank set the penalty at €4,646,597 ($5.2Mn) before a 30% settlement discount. The sanctions, which include a reprimand, are subject to confirmation by the High Court.
“While outsourcing presents many benefits to industry, when not effectively managed, it can threaten the operational resilience of firms,” said Karen O’Leary, the Central Bank’s director of enforcement. “Firms in Ireland must have the appropriate culture and expertise to comply with the rules, respond to risks and to protect customer interests.”
Oversight of the outsourcing arrangements remained substantially unchanged until December 2024, when Coinbase Ireland appointed a safeguarding directly responsible individual. That followed a central bank on-site inspection that began in May 2024.
Accountability stays in-house
The case is the Central Bank’s 164th enforcement outcome, taking its total fines past €432 million ($484Mn). The settlement notice cites the bank’s outsourcing guidance: “boards and senior management cannot outsource their responsibilities.”
For regulated firms that send back office or finance and accounting outsourcing work to a group entity or a third party, the case shows the function can move but the oversight has to stay local. Firms setting up those arrangements can start with OA’s ultimate guide to outsourcing.
Related news
- EBA widens bank vendor rules beyond outsourcing: Deloitte · 30 Sep 2026
- UK ends ‘outsourcing by default’ for government IT · 30 Jun 2026
- Banks boost cloud outsourcing to cut costs, meet new rules: report · 26 Sep 2025
Disclosure: Outsource Accelerator uses AI tools in the backend of its editorial workflow. Every article is reviewed and verified by a human editor before publication.
Stay ahead of the outsourcing industry. Join thousands of business leaders who rely on Outsource Accelerator for the news, trends, and expert insights that matter. Subscribe to our free newsletter and never miss an update.
