# Polymarket regulatory and security scrutiny

> Live situation record from CLSTR: https://clstr.news/situations/polymarket-regulatory-and-security-scrutiny
> Updated: 2026-09-20T14:59:27.000Z. Sources: 19. Developments: 2.

The prediction market platform Polymarket has come under significant regulatory and security scrutiny. In mid-2026, the U.S. Commodity Futures Trading Commission (CFTC) launched at least three investigations into trading activity on the platform. These inquiries, authorized in May and July 2026, focus on specific markets such as potential presidential pardons, geopolitical tensions in Iran, and Google’s ‘2025 Year in Search’.

Parallel to these regulatory probes, the platform has faced major security and compliance challenges. Reports indicate a $10 million fraud attempt involving stolen debit cards, during which the payment processor Checkout.com flagged over 80% of deposits as fraudulent. Internal issues surfaced regarding the prioritization of business growth over compliance, including the removal of anti-money-laundering rules. These developments coincided with the departure of high-level executives, including the US Chief Compliance Officer and the US CEO. Additionally, an engineering flaw in July exposed approximately 500 user accounts to unauthorized access via stolen personal information. In response to these incidents, Polymarket has engaged the fraud prevention firm Riskified and implemented stricter controls on linked debit cards.

## Claims

- Fraudsters attempted to move at least $10 million through Polymarket's US platform using stolen debit cards. (corroborated by 14 sources)
- The payment processor Checkout.com reported that at one point, over 80% of deposits were flagged as fraudulent, significantly exceeding the 1% industry average. (corroborated by 11 sources)
- CEO Shayne Coplan reportedly instructed compliance staff to prioritize growth and address potential regulatory fines later. (corroborated by 9 sources)
- An engineering vulnerability in late July allowed attackers to access approximately 500 user accounts using stolen personal information like Social Security numbers. (corroborated by 6 sources)
- Polymarket implemented new security measures, including limiting the number of debit cards per account and hiring the fraud prevention firm Riskified. (corroborated by 4 sources)
- Polymarket stated it has mechanisms to identify suspicious activity and is cooperating with law enforcement and regulators. (corroborated by 4 sources)
- Polymarket's US Chief Compliance Officer, Andrew Clifford, resigned in April following the submission of a fraud report. (corroborated by 4 sources)
- The Commodity Futures Trading Commission (CFTC) is investigating Polymarket's practices. (corroborated by 4 sources)

## Timeline

### 2026-09-20: Polymarket faces $10M fraud attempt and security scrutiny

Polymarket faces investigation by the CFTC following a $10 million fraud attempt using stolen debit cards and a July security flaw that compromised 500 user accounts. CEO Shayne Coplan reportedly prioritized-

16 sources. https://clstr.news/cluster/polymarket-faces-multiple-fraud-schemes-and-security-vulnerabilities

### 2026-09-12: CFTC launches three investigations into Polymarket trading activity

The CFTC has opened three previously unreported investigations into Polymarket regarding potential insider trading involving Biden pardons, Iran-related contracts, and Google search data.

3 sources. https://clstr.news/cluster/cftc-launches-three-investigations-into-polymarket-trading-activity

---
Cite as: Polymarket regulatory and security scrutiny. CLSTR, https://clstr.news/situations/polymarket-regulatory-and-security-scrutiny