Security

Polymarket WSJ Report: What It Shows About Centralized Platform Risk

A WSJ report says Polymarket's CEO told compliance staff to let stolen card money flow. What it alleges, what's disputed, and what it means for exchange users.

Video: Polymarket WSJ Report: What It Shows About Centralized Platform Risk

Key takeaways

  • According to the video, a Wall Street Journal report says Polymarket's US platform let stolen debit card money flow through after an anti-money laundering safeguard was switched off.
  • The video says Polymarket's payment processor flagged over 80% of deposits as fraudulent, against an industry norm of around 1%.
  • An outside law firm hired by Polymarket concluded the company complied with regulations, so the allegations remain disputed.
  • On any centralized platform, the rules are set and enforced by the company, and safeguards can be changed by the people running it.
  • Knowing who holds your funds, and under what terms, matters more than a platform's reputation or valuation.

A Wall Street Journal report, as described in a Bullrunners video, alleges that Polymarket’s US prediction market let roughly $10 million in stolen debit card money pass through its platform after an anti-money laundering safeguard was removed, and that CEO Shayne Coplan told his compliance team in writing to keep growing and pay the fine later.

Polymarket is not a crypto exchange in the usual sense, but the video uses the story to make a broader point for anyone holding coins on Coinbase, Binance, Kraken or similar services: on a centralized platform, the rules are whatever the people in charge decide, and safeguards can be switched off. That is worth understanding regardless of what you think of the video’s wider framing.

What did the WSJ report say about Polymarket?

The WSJ report, according to the video, says Polymarket US was used to launder stolen card money shortly after it opened to US users in February. Fraudsters would deposit funds from a stolen debit card, then withdraw the money onto a different card in their own name. The result was cash that came out looking clean.

The video says the safeguard that would have blocked this was a withdrawal rule requiring money to leave on the same card it arrived on. Per the report as summarized in the video, Polymarket’s anti-money laundering program was taken down while the attack was under way. When compliance staff escalated the problem, the CEO’s written reply was, in the video’s words, “keep growing and pay the fine later.”

The video also says WSJ reporters found that much of Polymarket US’s early volume, which made the platform look like it was booming, came from fraud rings recycling stolen funds.

How bad were the fraud numbers?

According to the video, Checkout.com, Polymarket’s payment processor, flagged over 80% of incoming deposits as fraudulent. The video puts the industry norm at around 1%, meaning Polymarket’s flagged rate was roughly 80 times higher than typical.

The video describes what happened inside the company afterward:

  • The chief compliance officer resigned in protest after her escalation report was ignored.
  • The US CEO was fired.
  • The head of US regulation left.
  • The head of anti-money laundering left.

The video also cites a WSJ reporter’s claim of a security flaw: that someone could enter a user’s Social Security number and get into their linked bank accounts and debit cards without a username, password or other authentication.

The video contrasts all this with an earlier 60 Minutes interview in which Coplan called Polymarket “the most accurate thing we have as mankind right now.”

What investigations does Polymarket face?

The video says the CFTC, the US regulator for commodities and prediction markets, confirmed three previously unreported investigations three days before the debit card story broke. One is an insider trading case against a Google software engineer, who ABC News reported was charged with commodities fraud, wire fraud and money laundering. The video says the engineer allegedly used inside knowledge of Google search trends to make roughly a million dollars on Polymarket.

The other two probes, per the video, relate to markets on Biden pardons and an Iran war, with no names attached yet. The video also mentions:

  1. An existing CFTC probe into a fake influencer campaign the WSJ reported in June, in which Polymarket allegedly paid college students $2,000 to $3,000 a month to film about 1,100 fake winning videos on a clone site.
  2. An FBI raid on the CEO’s Manhattan apartment in November 2024.

These are investigations and allegations, not findings of guilt.

What does Polymarket say?

The video notes that an outside law firm Polymarket hired concluded the company complied with regulations. The host includes this for fairness, while arguing that a clean report from a firm the company paid, alongside a wave of senior resignations, illustrates the problem rather than resolving it.

According to the video, Polymarket is valued at about $9 billion after the parent company of the New York Stock Exchange invested $2 billion in October. The video says Peter Thiel and Vitalik Buterin are investors, Donald Trump Jr. sits on the advisory board and his fund invested around $10 million, and the company is targeting an IPO by the end of 2027.

Why does this matter for crypto on centralized exchanges?

The video’s central argument is that any centralized platform depends on people making the right calls, and those people can choose not to. It compares the Polymarket pattern to FTX before Sam Bankman-Fried’s trial and Celsius before it froze withdrawals.

For holders, the practical lesson is about where your coins sit. On an exchange, you typically hold a balance in the company’s records, not coins under your own control. Bullrunners has covered who actually owns your XRP on an exchange, in an ETF or in your own wallet, including how the Celsius terms of use decided who owned customer funds. If you want to know what happens when a platform locks you out, see what happens when a crypto exchange freezes your account.

Audits and regulation help, but they have limits. The video argues that regulators, payment processors and outside lawyers all failed to stop what happened at Polymarket. Tools such as proof of reserves can show some things about an exchange, but not everything.

Smart contracts vs companies: the video’s wider claim

The video contrasts Polymarket US, run by a company, with Polymarket’s on-chain version, which runs as a smart contract: code that executes automatically on a blockchain. In the host’s view, a smart contract has no CEO who can tell staff to ignore fraud and no safeguard that can be quietly switched off.

The video goes further, quoting the line “if it’s not on chain, you can’t trust it” and linking the story to what it calls a Great Reset plan by central banks. It argues that trust lost by centralized platforms will move to payment rails such as ISO 20022 systems, Ripple, Stellar and DTCC integration work, and names XRP, XLM, XDC and ALGO. The host says he does not endorse every word of the commentator he quotes. These are opinions and speculation, not documented outcomes, and the video offers no evidence that the Polymarket story affects any of those networks.

What to watch next

If you follow this story or hold funds on any centralized platform, these are the points worth checking:

  1. Whether the CFTC investigations lead to charges, settlements or public findings against Polymarket itself.
  2. Whether Polymarket responds in detail to the WSJ’s specific claims about the removed withdrawal rule and the CEO’s messages.
  3. Any changes to Polymarket’s IPO timeline for 2027.
  4. For your own holdings: list every platform where you keep crypto, note who holds the keys, and read the terms on custody and withdrawals. Bullrunners’ guide to protecting coins before an exchange closes covers the steps in more detail.

Frequently asked questions

What did the Wall Street Journal report about Polymarket?

According to the video, the WSJ reported that fraudsters used stolen debit cards to deposit money on Polymarket US and withdraw it to different cards, and that the CEO told compliance staff in writing to keep growing and pay the fine later. The video says roughly $10 million moved through this way.

Did Polymarket break the law?

That has not been established. The video notes that an outside law firm Polymarket hired said the company complied with regulations, while the CFTC has open investigations involving the platform.

What CFTC investigations involve Polymarket?

The video says the CFTC confirmed three previously unreported investigations, including an insider trading case against a Google software engineer, plus probes linked to Biden pardons and an Iran war market. It also mentions an existing CFTC probe into a fake influencer campaign the WSJ reported in June.

Why does the Polymarket story matter to crypto exchange users?

The video argues it shows how safeguards on any centralized platform depend on decisions by the people running it. It compares the pattern to FTX and Celsius, where customer funds were affected after internal problems surfaced.

Education and commentary only, not financial advice. Crypto is volatile and you can lose money. Do your own research and speak to a qualified advisor before making investment decisions. Figures and quotes are as reported in the video on October 15, 2026 and may have changed since.