Polymarket US platform targeted in $10 million fraud scheme due to relaxed AML controls

This incident highlights vulnerabilities in financial platforms that can affect user trust and regulatory scrutiny.

• Fraudsters exploited weaknesses: In February 2026, fraudsters linked stolen debit cards to thousands of accounts on Polymarket, attempting to withdraw $10 million in fraudulent funds.
• Compliance measures relaxed: The platform's leadership loosened anti-money laundering controls to prioritize rapid growth, removing same-source withdrawal requirements.
• High fraud detection rates: Payment processor Checkout.com flagged over 80% of deposits as fraudulent, significantly higher than the industry average of about 1%.

• Rapid expansion: Polymarket expanded its U.S. platform post-2024 elections, onboarding users from a waitlist under CFTC oversight, raising compliance concerns.
• Leadership decisions: Executives prioritized growth over compliance, leading to the removal of critical safeguards despite internal warnings about potential fraud risks.
• Ongoing investigations: The CFTC is investigating the incident, and Polymarket has since tightened its controls to mitigate future risks.

In February 2026, Polymarket, a prediction market platform regulated by the CFTC, faced a significant fraud attempt amounting to $10 million. This incident unfolded against a backdrop of rapid user onboarding and relaxed compliance measures. Following the 2024 U.S. election cycle, Polymarket sought to expand its user base by allowing access to a waitlist, which inadvertently opened the door for fraudsters.

Fraudsters took advantage of the platform's loosened anti-money laundering (AML) controls by creating thousands of accounts using stolen debit cards. They deposited funds, placed wagers, and attempted to withdraw the proceeds to accounts they controlled. The decision to remove the same-source withdrawal requirement, a critical safeguard against fraud, was made despite warnings from compliance staff about the elevated risks. This decision was driven by a leadership directive to prioritize growth over immediate remediation of compliance issues.

As a result, Checkout.com, the payment processor for Polymarket, flagged over 80% of deposits as suspicious, a stark contrast to the industry norm of approximately 1%. This high rate of flagged transactions indicated a systemic issue within the platform's operational framework. The elevated fraud rates persisted for months, prompting the eventual implementation of stricter controls, including card limits and the engagement of external antifraud services.

The fallout from this incident led to significant leadership changes, with key executives, including CCO Andrew Clifford and U.S. CEO Justin Hertzberg, departing the company. The CFTC's investigation into the matter has also resulted in orders for document preservation, indicating the seriousness of the regulatory scrutiny Polymarket now faces.

By May 2026, Polymarket managed to normalize its fraud rates back to approximately 1%, but the damage to its reputation and user trust had already been done. The incident serves as a cautionary tale for other platforms in the financial sector, illustrating the delicate balance between growth ambitions and the necessity of robust compliance measures.

• Investors: Users of Polymarket may experience reduced trust in the platform and potential financial losses.
• Regulators: Increased scrutiny from the CFTC and other regulatory bodies could lead to stricter compliance requirements across the industry.
• Competitors: Other prediction market platforms may face heightened expectations for compliance, impacting their operational strategies.

• Regulatory changes: Watch for new compliance regulations from the CFTC that may arise from this incident, impacting how prediction markets operate.
• User trust metrics: Monitor user engagement and trust levels on Polymarket and similar platforms to gauge the long-term effects of this fraud incident.
• Leadership stability: Keep an eye on executive changes within Polymarket and how these shifts affect company strategy and compliance practices.