Key Takeaways
Polymarket confronted a $10 million stolen debit card assault in February 2026 as executives prioritized development over danger.Cost processor Checkout.com rejected over 80% of deposits, exposing compliance flaws throughout prediction markets.The CFTC is probing the platform because it hires former FBI and Amazon leaders to pursue a $1 billion funding spherical.
Excessive Rejection Charges Set off Cost Processor Crackdown
Prediction-market startup Polymarket faces accusations of prioritizing consumer growth and aggressive development over compliance safeguards when dangerous actors focused its U.S. platform in an try and siphon off at the least $10 million utilizing stolen debit playing cards.
Attackers linked stolen cost playing cards to accounts, positioned bets, and tried to withdraw money to wash accounts or separate playing cards beneath their management. In a single occasion, a single consumer account made roughly 4,000 separate deposit makes an attempt.
The surge in illicit exercise prompted automated intervention by cost processor Checkout.com, which started rejecting deposits. On the peak of the disaster, Checkout.com rejected greater than 80% of Polymarket’s processed deposits as fraudulent, far exceeding customary business fraud ranges of roughly 1%.
In response to a Wall Avenue Journal report, Polymarket staff raised pressing pink flags with CEO Shayne Coplan because the cost rejections mounted. Slightly than slowing operations to shore up anti-money laundering controls, Coplan reportedly instructed compliance employees to deal with development, suggesting the agency may merely pay a effective if regulators ever intervened.
Executives then eliminated an ordinary fraud-prevention coverage requiring withdrawals to be returned to the identical cost supply used for deposits. Regardless of employees warnings that dropping the restriction invited cash laundering, the rule change proceeded.
The incident triggered the departure of the platform’s senior danger management, together with U.S. Chief Compliance Officer Andrew Clifford, who resigned in April after submitting a proper memo outlining compliance deficiencies. Justin Hertzberg, CEO of Polymarket US, was terminated, whereas the heads of U.S. regulation and anti-money laundering additionally left the corporate.
Safety Flaws and Investigations
The February debit card assault was accompanied by extra safety lapses later within the yr. In June, hackers exploited a third-party vendor to inject malicious code into Polymarket’s web site, straight compromising sure consumer balances. A month later, a flaw in account registration allowed attackers armed with stolen private knowledge to breach practically 500 current accounts with out login passwords. Polymarket later agreed to reimburse affected customers.
Federal authorities are growing stress on the platform. The Commodity Futures Buying and selling Fee (CFTC) has launched an investigation, instructing staff to protect data tied to the fraud assaults and inside compliance dealing with. Polymarket additionally faces inquiries into its advertising practices from the New York Metropolis Council, alongside lawsuits in additional than a dozen states alleging it operates as an unlicensed playing enterprise.
Polymarket maintained that its inside controls ultimately contained the issue. By Might, after capping the variety of debit playing cards a single consumer may connect to an account, the corporate introduced fraud charges all the way down to business averages. A subsequent investigation by regulation agency Sullivan & Cromwell concluded the corporate complied with relevant guidelines.
In a public assertion, a Polymarket spokesperson defended the platform’s protocols: “Our market integrity framework consists of processes to detect, overview, and reply to suspicious exercise. Polymarket stays dedicated to sustaining correct, truthful, and clear markets whereas cooperating totally with regulators and regulation enforcement.”
To bolster inside governance, Polymarket employed former FBI agent Shauna Batista to guide its investigative arm, introduced on former Amazon CFO Warren Jenson, and appointed former Uber govt Travis Vanderzanden as chief development officer.
The regulatory scrutiny comes as Polymarket seeks to lift $1 billion in funding at a $21 billion valuation, led partially by a $300 million dedication from Donald Trump Jr.’s 1789 Capital, because it lays the groundwork for a possible preliminary public providing.
