Two U.S. senators have asked the Commodity Futures Trading Commission to investigate Polymarket, the world's best-known prediction market, over allegations that the platform's marketing campaign used influencers to stage fake bets. The request, reported by The Block, landed in the same week that a separate security breach drained close to $3 million from Polymarket users — two unrelated problems converging on one company.
What Polymarket is, and who regulates it
A prediction market is a venue where people buy and sell contracts tied to real-world events — an election result, a sports score, an economic data point. Each contract pays $1 if the event happens and nothing if it does not, so the price doubles as the market's implied probability. Polymarket, valued at roughly $15 billion, runs on blockchain technology and bars U.S. residents.
The CFTC is the federal agency that oversees derivatives and event contracts, which gives it a clear hook here. Polymarket already settled with the CFTC in 2022 for $1.4 million over offering unregistered event-based options, and agreed at the time to block U.S. users.
The allegation: bets that weren't real
Sen. Adam Schiff, a California Democrat, and Sen. John Curtis, a Utah Republican, wrote to CFTC Chair Michael Selig calling the conduct "deeply troubling" and demanding "immediate scrutiny." Their letter draws on a Wall Street Journal investigation that reviewed 1,105 videos from about 10 social-media creators between December 2025 and mid-May. Roughly 70% of the videos showed bets being placed — but, according to the Journal's findings cited by the senators, around $1.9 million in wagers depicted were not real, with creators allegedly using mock-ups of Polymarket's interface to simulate winning trades. Influencers including the boxer and YouTuber Logan Paul were named among those who promoted the platform.
These are allegations, not findings. The core concern is disclosure: under U.S. advertising rules, paid promoters must clearly label sponsored content, and the senators argue the campaign blurred the line between genuine trading and scripted advertising for a young audience. The lawmakers also questioned whether the CFTC is equipped to act as what they called a "federal gambling regulator." Decrypt reported the senators set a July 10 deadline for the agency to respond.
Polymarket said it is "conducting a comprehensive audit of active promotional content" to ensure compliance with disclosure rules, and has not disputed the Journal's central findings. The CFTC, following standard practice, declined to confirm or deny any investigation.
A separate problem: $2.9 million stolen
Unrelated to the marketing dispute, Polymarket was hit by a security breach the same week. A compromised third-party vendor injected malicious code into Polymarket's website, which a blockchain analyst said "appeared to facilitate a phishing attack" against users. The incident drained an estimated $2.94 million from at least 11 user wallets, according to Cointelegraph.
Polymarket said it identified the breach, contained it and removed the affected component, and pledged that affected users "would be fully refunded." It did not name the vendor.
Two pressures at once
The timing is coincidence, not connection: one matter is an allegation of misleading marketing, the other a criminal breach by outside actors. But together they sharpen the regulatory spotlight on a platform that has grown rapidly while operating at the edges of U.S. oversight. Whether the conciliatory response — audits and refunds — satisfies senators pushing for a formal CFTC probe will become clearer after the agency's reply is due.
