Fuel
cell system (3), comprising: a fuel
cell (20); an on / off valve (46) which is configured to be able to reduce the pressure of a
fuel gas, wherein the on / off valve (46) regulates a quantity state of the
fuel gas supplied to the fuel
cell (20); a
fuel gas supply channel (42) with a first channel (42C) extending between the fuel cell (20) and the on / off valve (46), and a second channel extending from the on / off valve (46) via a shut-off valve (44) to a fuel
gas supply source (41); a first
pressure sensor (P1) that detects the pressure of the fuel gas in the first channel (42C); has a second
pressure sensor (P3, P4) that detects the pressure of the fuel gas in the second channel; a circulation channel (43) that returns fuel
exhaust gas that has been discharged from the fuel cell (20) to the first channel (42C); a drain valve (72) for draining a liquid from the circulation channel (43) in the circulation channel (43); and a controller (60) connected to the on / off valve (46), the shut-off valve (44), the first
pressure sensor (P1) and the drain valve (72), characterized in that the fuel
cell system (3) further comprises a gas outlet mechanism (49) that releases the fuel gas in the first channel (42C) from the first channel (42C) when the pressure of the fuel gas in the first channel (42C) exceeds a threshold value, wherein: If a pressure value detected by the first pressure sensor (P1) is abnormal, the controller (60) closes the shut-off valve (44) and the drain valve (72); and Then, if the pressure value detected by the first pressure sensor (P1) has decreased, the controller (60) determines that the on / off valve (46) has failed, whereas if the pressure value detected by the first pressure sensor (P1) has not decreased, the controller (60) determines that the first pressure sensor (P1) has failed, wherein: the controller (60) stops the power generation of the fuel cell (20) after it has closed the shut-off valve (44) and before it determines whether the pressure value detected by the first pressure sensor (P1) has decreased; the controller (60), after closing the shut-off valve (44), causes the second pressure sensor (P3, P4) to monitor a
pressure reduction in the second channel; and, As a result of the monitoring, if a
pressure reduction is observed in the second channel, the controller (60) determines whether the pressure value detected by the first pressure sensor (P1) has decreased, whereas if a
pressure reduction is not observed in the second channel, the controller (60) determines that the first pressure sensor (P1) has failed.