Polymarket is facing renewed regulatory scrutiny in the United States after a reported $10 million fraud attempt exposed weaknesses in the prediction-market operator's compliance and fraud controls during a period of rapid expansion. The development adds to a series of compliance-related issues for the company this year.

Polymarket operates a prediction-market platform that allows users to trade event contracts on outcomes ranging from elections and sports to other real-world events.

A Wall Street Journal investigation reported that, in February 2026, fraudsters used stolen debit cards to fund thousands of Polymarket U.S. accounts, place wagers, and attempt to withdraw funds. At one point, Checkout.com, a global payments processor, rejected more than 80% of the deposits it handled for Polymarket as fraudulent, compared with an industry rate of about 1%, according to people familiar with the matter cited by the Journal. Most of the attempted deposits failed, and the report did not establish how much money was ultimately stolen.

The episode has raised questions about whether Polymarket's compliance infrastructure kept pace with the platform's expansion. It has also drawn attention to how prediction-market operators screen payments and monitor account activity as they scale. Payment processors such as.com sit between cardholders and the platforms they serve, screening card transactions before deposits are completed.

According to the Journal, employees raised concerns about the company's fraud response, while executives later removed a safeguard requiring withdrawals to be made to the same payment source used for deposits. Such a rule is commonly used by financial institutions to limit money laundering and fraud, although it was not a specific regulatory requirement for prediction markets.

The reported problems extended beyond the February 2026 incident. Polymarket's U.S. chief compliance officer, Andrew Clifford, resigned in April 2026 after submitting a report to executives detailing fraud concerns, while the company's U.S. chief executive and senior regulatory and anti-money-laundering personnel also departed, the Journal reported. In a separate July 2026 incident, the accounts of nearly 500 users were reportedly exposed through an apparent flaw involving stolen personal information.

Why the CFTC Scrutiny Matters

The compliance concerns come as the Commodity Futures Trading Commission (CFTC) examines Polymarket, adding a regulatory dimension that goes beyond ordinary payment fraud. The CFTC, the federal agency responsible for overseeing U.S. derivatives markets, has neither confirmed nor denied an investigation into Polymarket, but employees have reportedly been instructed to preserve records relating to the fraud incident and other matters. Record-preservation requests are a routine step in corporate and legal matters and do not, on their own, establish that a formal investigation has been opened.

The regulator's interest is significant because Polymarket's U.S. business operates within the federal derivatives framework, where issues including market integrity, fraud, manipulation, and insider trading fall under CFTC oversight. Prediction markets have drawn growing regulatory attention as the sector's platforms and user bases expand rapidly.

The agency has already demonstrated that it is willing to pursue conduct involving Polymarket contracts. In April 2026, the CFTC charged a U.S. service member with allegedly using classified information to trade a Polymarket contract tied to the capture of former Venezuelan President Nicolás Maduro. The agency alleged that the trader generated more than $404,000 in profits. The case was an early example of U.S. enforcement tied to alleged insider trading on prediction-market contracts.

The broader regulatory environment is also becoming more demanding. In June 2026, the CFTC proposed rules for prediction markets as regulators and policymakers grappled with the rapid growth of platforms offering event contracts covering politics, sports, and other outcomes.

Polymarket's regulatory challenge therefore extends beyond whether its contracts are permitted. The company must also demonstrate that its controls can prevent fraud, protect customer funds, monitor trading activity, and address potential market-abuse risks as its U.S. operation scales. How the CFTC's proposed rulemaking proceeds, and whether the agency confirms an investigation into Polymarket, remain open questions for the company and the wider prediction-market sector.

Polymarket's Response

Polymarket said it has strengthened its infrastructure and leadership since the incidents. An internal investigation by law firm Sullivan & Cromwell concluded that the company had complied with regulations, according to people familiar with the findings cited by the Journal. The company has also added risk-management personnel and improved compliance procedures and product testing.

The episode highlights a central challenge for prediction markets as they move deeper into U.S. financial markets: regulatory approval of a product does not eliminate the need for financial-market-grade controls around customers, funds, and trading activity.