Regulation

    CFTC Opens Extensive Probe Into Polymarket as Senate Pressure, $3M Hack, and Consumer Lawsuit Pile Up

    The CFTC is conducting an ongoing, extensive investigation into Polymarket, sources say. The probe lands the same week as a $3 million frontend hack, a consumer protection lawsuit, and a bipartisan Senate letter demanding answers by July 10.

    By Prediction Markets US News DeskSaturday, June 27, 20267 min read
    CFTC Opens Extensive Probe Into Polymarket as Senate Pressure, $3M Hack, and Consumer Lawsuit Pile Up

    Polymarket's most turbulent week since its U.S. relaunch came to a head on Friday when two separate reports confirmed the Commodity Futures Trading Commission had opened an extensive investigation into the platform—the same day a consumer protection group filed a lawsuit and days after a $3 million hack exposed vulnerabilities in the company's frontend systems.

    For traders who access U.S. sports markets through QCX LLC, Polymarket's CFTC-regulated domestic arm, the immediate practical impact is limited: those markets continue operating normally. But the convergence of regulatory, legal, and security pressure in a single week represents a significant inflection point for a platform that only received federal clearance to operate in the United States six months ago.

    The CFTC Investigation: What We Know

    The probe's existence was first reported Friday by The Wall Street Journal, then confirmed by Politico citing sources familiar with the matter. A CFTC spokesperson declined to publicly acknowledge the investigation, citing the agency's standard policy of neither confirming nor denying open inquiries.

    According to Politico, the investigation predates this week's Senate letter (described below) and may not be specifically limited to Polymarket's advertising practices—though the exact scope has not been disclosed publicly.

    If the investigation results in enforcement action, it would be the first high-profile case brought against a prediction market operator under CFTC Chair Michael Selig. Since taking office in May 2026, Selig has been an aggressive champion of prediction markets, filing a series of lawsuits defending CFTC jurisdiction against opposing states and proposing new rules broadly welcomed by the industry. An enforcement action against Polymarket would mark an abrupt departure from that posture.

    Polymarket did not respond to requests for comment on the investigation.

    The Bipartisan Senate Letter

    One day before the probe became public, Senators John Curtis (R-Utah) and Adam Schiff (D-Calif.) sent a joint letter to CFTC Chairman Selig requesting written answers by July 10, 2026, on six specific questions. The senators cited a Wall Street Journal investigation published June 20 that documented allegedly deceptive social media marketing by Polymarket.

    "The public-facing behavior alleged here does not resemble a sober financial market designed for hedging or price discovery," Curtis and Schiff wrote.

    The letter—published on Senator Curtis's official Senate website—asked the CFTC to answer:

    • Whether the agency is investigating the conduct described in the WSJ report
    • What steps have been taken since the 2022 CFTC enforcement action to prevent Polymarket from targeting U.S. users through offshore platforms or affiliated entities
    • Whether prediction market operators may lawfully use simulated trades or fake websites in promotional content
    • What consumer protection standards apply to prediction market advertising, influencer disclosures, age verification, and responsible-gaming safeguards
    • Whether the CFTC has the authority, resources, and expertise to replicate the consumer protections that state and tribal gaming regulators currently provide
    • Whether the CFTC intends to preserve state and tribal authority over sports betting and casino-style products offered as event contracts

    The senators are not newcomers to prediction market oversight. Curtis and Schiff have previously introduced legislation aimed at banning sports prediction markets and restricting federal officials from using nonpublic information to trade event contracts.

    What the WSJ Investigation Found

    The Wall Street Journal's June 20 investigation, which triggered the Senate letter, reviewed more than 1,100 videos posted by content creators promoting Polymarket. The WSJ found that 70 percent of the videos depicted fake bets—content filmed on simulated websites designed to resemble Polymarket's interface but not connected to real trading activity. The staged transactions implied inflated winnings that did not represent actual market outcomes. Reviewers found that none of the creators disclosed they were being compensated for the promotional work.

    Separately, Politico had reported earlier this month that Polymarket's Chief Marketing Officer, Matthew Modabber, used a personal PayPal account to transfer money to prominent content creators—a practice that could raise questions about disclosure obligations and the arm's-length nature of the promotional relationships.

    Polymarket, after the WSJ report published, said it would conduct a comprehensive audit of its promotional materials and review its marketing practices. A company spokesperson later stated: "We are applying those learnings to our U.S. platform, where our focus is on intuitive market experiences, institutional-grade liquidity, and a consumer experience that sets the standard for the category."

    $3 Million Frontend Hack

    On Thursday June 26—the day before the CFTC probe became public—Polymarket disclosed that a third-party vendor had injected a malicious script into the platform's frontend. On-chain analytics firm Bubblemaps estimated that the attacker drained approximately $3 million from fewer than 15 wallets. Stolen USDC was swapped into Ethereum and consolidated into a single address, a pattern consistent with rapid asset laundering.

    Polymarket said it contained the breach and pledged to refund affected users in full. The company said the compromise was limited to its frontend interface and did not affect the underlying smart contracts governing its markets.

    The hack is unrelated to the CFTC investigation, but its timing—disclosed the same week as the Senate letter and one day before the probe went public—intensified scrutiny of the platform's security and operational controls.

    Consumer Protection Lawsuit Filed Friday

    Also on Friday, a consumer advocacy group filed a civil lawsuit against Polymarket, CEO Shayne Coplan, and CMO Matthew Modabber, alleging the company used "many layers of manipulation" to aim deceptive advertisements at college students. The complaint alleges the promotional campaigns misled consumers about the nature and profitability of prediction market trading.

    The lawsuit adds a private-action component to what had previously been a government-oversight story. Even if the CFTC investigation does not produce immediate enforcement, civil litigation can independently impose discovery obligations, reputational costs, and potential liability.

    A Pattern of Regulatory Friction

    Polymarket is no stranger to CFTC scrutiny. In 2022, the agency ordered the company to pay a $1.4 million civil monetary penalty for illegally operating an unregistered binary options market in violation of the Commodity Exchange Act. As part of the settlement, Polymarket agreed to wind down noncompliant markets and cease further violations.

    In November 2024, FBI agents raided the Manhattan apartment of Polymarket CEO Shayne Coplan, seizing his phone and electronics as part of a criminal investigation into whether the company had allowed U.S. users to trade in breach of its 2022 settlement. Coplan characterized the raid at the time as a politically motivated action by the outgoing Biden administration.

    In July 2025, the CFTC and the Justice Department jointly dropped that investigation without filing charges. Polymarket received regulatory clearance to begin U.S. operations, and its domestic platform—operated through QCX LLC, a CFTC-designated contract market—launched later that year.

    Since the U.S. relaunch, Polymarket has reported rapid growth. The company recently reached an annualized revenue run rate of $1 billion, a milestone IBTimes UK cited in reporting on the Senate letter and probe.

    What This Means for U.S. Traders

    Polymarket's U.S. sports markets, operated through QCX LLC, remain available in 48 states and the District of Columbia. QCX LLC holds CFTC designation as a contract market and is a separate legal entity from the international Polymarket platform at polymarket.com, which is not accessible to U.S. users.

    The CFTC investigation, Senate letter, and consumer lawsuit do not directly restrict trading access in the near term. However, if the CFTC investigation results in a formal enforcement action, it could impose operational restrictions, financial penalties, or market-category limitations—outcomes that could affect traders depending on which markets they use.

    The distinction between QCX LLC's CFTC-regulated U.S. sports markets and global Polymarket's broader product suite matters here. U.S. traders using QCX LLC are interacting with federally regulated event contracts. The advertising and marketing allegations primarily concern promotional activity surrounding Polymarket's global platform, which was being marketed to U.S. audiences during a period when U.S. users could not legally access it.

    Kalshi, the other major U.S.-regulated prediction market operator, is not named in any of this week's actions and continues to operate its CFTC-registered platform across 42 states.

    FAQ

    Is Polymarket still legal to use in the United States? Yes. QCX LLC, the CFTC-regulated U.S. entity operating Polymarket's domestic sports markets, continues to operate normally. The investigation and lawsuits have not resulted in any suspension or restriction of trading access as of June 27, 2026.

    What is QCX LLC? QCX LLC d/b/a Polymarket US is the CFTC-designated contract market through which Polymarket operates its U.S. platform. It offers sports event contracts in 48 states and Washington, D.C. It is legally separate from Polymarket's international platform at polymarket.com.

    What is the CFTC allegedly investigating? The scope of the investigation has not been publicly disclosed. Reports indicate it is "ongoing" and "extensive," but whether it focuses on advertising practices, compliance with the 2022 settlement, or broader issues remains unclear.

    Could the probe result in Polymarket being shut down in the United States? Possible but not the likely near-term outcome based on available information. The 2022 settlement resulted in a fine and operational changes, not a full shutdown. CFTC Chair Selig has been broadly supportive of the prediction market industry. Any enforcement action outcome would depend on findings the agency has not yet disclosed.

    What happened in the 2022 CFTC settlement? Polymarket agreed to pay a $1.4 million civil monetary penalty after the CFTC found the company had operated an unregistered binary options exchange in violation of the Commodity Exchange Act. As part of the settlement, Polymarket was required to shut down noncompliant markets and cease further violations.

    What to Watch

    The CFTC has until July 10 to respond to the Curtis-Schiff letter—or at least to acknowledge receipt and communicate its intended timeline. If the agency confirms an active investigation or announces enforcement, that will be a pivotal moment for the prediction market industry's regulatory trajectory under the Selig-led commission.

    For now, the week's events draw a sharp contrast between Polymarket's mounting domestic legal exposure and Kalshi's comparatively clean regulatory standing, even as both platforms navigate the broader state-versus-federal jurisdictional battle playing out in courts across the country.

    Follow PredictionMarkets.US for updates on this story as the CFTC's July 10 deadline approaches.

    Sources & Verification

    Back to Articles