Polymarket Faces Fallout After $10 Million Fraud Attack Amid Weakened Compliance Controls

Polymarket, a prediction market platform that gained popularity during the 2024 US election cycle, experienced a significant fraud attack in February 2026, resulting in losses of $10 million. The incident was linked to a decision by the company's leadership to relax anti-money-laundering safeguards in favor of growth, as reported by a Wall Street Journal investigation. This decision allowed fraudsters to create thousands of accounts using stolen debit cards, attempting to process substantial wagers before withdrawing the funds to accounts they controlled.

The attack exploited vulnerabilities created by the removal of a standard industry safeguard known as the 'same-source' withdrawal requirement. This rule typically ensures that funds can only be withdrawn to the same account from which they were deposited. Despite warnings from the internal compliance team about the increased risks of money laundering, CEO Shayne Coplan instructed staff to prioritize growth, leading to the scrapping of this crucial rule. As a result, fraudsters were able to launder stolen funds through bets placed on the platform.

In response to the fraud, Polymarket implemented stricter controls by May 2026, including limits on the number of debit cards linked to a single account and the engagement of Riskified, a fraud detection firm. Several senior compliance executives, including the US Chief Compliance Officer and the US CEO, departed during this period. An internal review conducted by the law firm Sullivan & Cromwell concluded that the company had remained compliant with applicable regulations, despite the significant fraud incident.

Polymarket operates under the oversight of the Commodity Futures Trading Commission (CFTC) and is subject to anti-money-laundering obligations under the Bank Secrecy Act. The platform's unique acceptance of fiat deposits via debit cards differentiates it from other international crypto-based services. As the company prepares for potential growth initiatives, including a possible initial public offering (IPO), regulators are closely monitoring its compliance practices, especially given the staggering 80% rejection rate of transactions flagged as suspicious by its payment processor, Checkout.com.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News