Polymarket US Faces $10 Million Fraud Attempt Linked to Stolen Debit Cards

This incident highlights vulnerabilities in digital financial platforms, raising concerns about user security and regulatory compliance.

• Polymarket US faced a fraud attempt exceeding $10 million in February 2026, linked to stolen debit cards.
• Checkout.com, the payment processor, flagged over 80% of deposits as fraudulent, significantly above the industry norm of 1%.
• CEO Shayne Coplan prioritized growth over immediate fraud remediation, leading to elevated fraud rates for months.

• Polymarket US began expanding user access in late 2025, relaxing anti-money laundering controls to accelerate growth.
• Fraudsters exploited these relaxed controls by creating new accounts with stolen debit cards, placing bets, and attempting withdrawals.
• CFTC initiated an investigation into the incident, prompting Polymarket to enhance its compliance measures and controls.

In February 2026, Polymarket US, a prediction market platform regulated by the CFTC, experienced a significant fraud attempt that exploited its recently loosened anti-money laundering (AML) controls. The platform had begun admitting users from its waitlist in late 2025, aiming to accelerate growth and user onboarding. To facilitate this, Polymarket relaxed certain safeguards, including the requirement to return funds to the original deposit method. This decision was made amid a broader push for regulatory compliance in the prediction market sector.

Fraudsters took advantage of these relaxed controls by linking compromised debit cards to thousands of new accounts. They funded wagers and attempted to withdraw winnings to accounts they controlled, resulting in an attempted fraud volume of at least $10 million. Payment processor Checkout.com flagged over 80% of deposits as fraudulent during peak periods, a stark contrast to the industry standard of around 1%. This alarming rate of flagged transactions raised immediate compliance concerns.

Despite these red flags, CEO Shayne Coplan reportedly directed staff to prioritize growth over immediate remediation of the fraud issue. This decision led to elevated fraud rates persisting for several months before the platform implemented stronger controls. The situation escalated to the point where several compliance and risk executives, including the Chief Compliance Officer, departed from the company.

By May 2026, Polymarket had introduced additional measures, such as card linking limits and third-party fraud detection tools, which helped normalize fraud rates. However, the damage had already been done, prompting the CFTC to open an investigation and issue a document preservation order. The incident not only raised questions about Polymarket's internal controls but also highlighted the broader risks associated with digital financial platforms that prioritize rapid growth over stringent compliance measures.

As a result of this incident, Polymarket has since engaged external fraud prevention services and implemented stricter debit card controls. The company continues to pursue fundraising activities, including a reported $1 billion raise at a $21 billion valuation, while expanding its compliance staffing to prevent future incidents.

• Investors in prediction markets may face increased scrutiny and regulatory changes affecting their trading activities.
• Users of Polymarket and similar platforms could experience heightened security measures and potential delays in transactions.
• Compliance professionals in the fintech sector may see a shift in job demands as companies prioritize stronger fraud prevention strategies.

• CFTC investigation outcomes: The results could lead to stricter regulations for prediction markets, impacting user access and operational protocols.
• Polymarket's compliance enhancements: Monitoring how effectively the platform implements new controls will indicate its commitment to user security.
• Market response: Watch for shifts in user trust and engagement levels on Polymarket and similar platforms as they navigate these challenges.