Coinbase subsidiary fined £3.5m for onboarding high-risk customers

CB Payments Limited (CBPL), part of cryptoasset trading platform Coinbase Group, has been fined over £3.5 million by the Financial Conduct Authority (FCA) after breaching its rules regarding high-risk customers.

CBPL, which is not currently registered to carry out cryptoasset activities in the UK, does not undertake cryptoasset transactions for customers but instead acts as a gateway for customers to trade cryptoassets via other entities within the Coinbase Group.

The regulator said that despite entering a voluntary requirement nearly four years ago which prevented the company from taking on new high-risk customers while it addressed issues with its financial crime control framework, the business has since onboarded or provided e-money services to more than 13,000 high-risk customers.

Roughly 31 per cent of these customers deposited around USD $24.9 million, with the funds being used to make withdrawals and execute multiple cryptoasset transactions via other Coinbase Group entities, totalling approximately USD $226 million.

The regulator's action was taken under the Electronic Money Regulations 2011, the first time it has taken enforcement action using these powers.

Therese Chambers, joint executive director of enforcement and market oversight at the FCA said that the breaches increased the risk that criminals could use CBPL to launder the proceeds of crime.

"We will not tolerate such laxity, which jeopardises the integrity of our markets," continued Chambers.

The FCA described CBPL's breaches as the result of the company's "lack of due skill, care and diligence" in the design, testing, implementation and monitoring of the controls put in place to ensure that the voluntary requirement was effective.

The UK watchdog went on to say that this included failing to consider all of the various ways in which customers might be onboarded when designing the controls.

Because of inadequacies in the initial monitoring of compliance with the requirement, repeated and material breaches went undiscovered for nearly two years.

CBPL qualified for a 30 per cent discount on its fine after agreeing to resolve the matter.



Share Story:

Recent Stories


Sanctions evasion in an era of conflict: Optimising KYC and monitoring to tackle crime
The ongoing war in Ukraine and resulting sanctions on Russia, and the continuing geopolitical tensions have resulted in an unprecedented increase in parties added to sanctions lists.

Achieving operational resilience in the financial sector: Navigating DORA with confidence
Operational resilience has become crucial for financial institutions navigating today's digital landscape riddled with cyber risks and challenges. The EU's Digital Operational Resilience Act (DORA) provides a harmonised framework to address these complexities, but there are key factors that financial institutions must ensure they consider.

Legacy isn’t the enemy: what FSIs can do to keep their systems up and running
In this webinar we will examine some of the steps FSIs have already taken to rigorously monitor and test systems – both manually and with AI-powered automation – while satisfying the concerns of regulators and customers.

Optimising digital banking: Unifying communications for seamless CX
In the digital age, financial institutions risk falling behind their rivals if they fail to unite fragmented communications ecosystems to deliver seamless, personalised customer experiences.

This FStech webinar sponsored by Precisely explores vital strategies to optimise cross-channel messaging through omnichannel orchestration and real-time customer data access.