Polymarket Faces WSJ Report on $10M Stolen-Card Fraud Attempt
United States

Marco Bello/Reuters
Source Analysis
What Happened
What Happened
Where Sources Agree
- arrows_inputFebruary Stolen-Card Fraud Scheme: Most outlets report that fraudsters attempted to steal at least $10 million using stolen debit cards in February, a campaign that caused payment processor Checkout.com to reject 80% of deposits, according to a Wall Street Journal investigation.
- arrows_inputJuly Account Security Breach: Most reporting highlights an engineering weakness that allowed unauthorized access to nearly 500 user accounts in July, resulting in approximately $3.1 million in funds being drained and converted to USDC.e, according to a Wall Street Journal report.
- arrows_inputDeceptive Marketing Lawsuit: Most coverage confirms that Polymarket faces a consumer protection lawsuit for deceptive marketing, with reports alleging the company paid online content creators to produce videos falsely depicting $900,000 in winnings, according to legal filings and media investigations.
Where Sources Disagree
- arrows_outputBreach Method Attribution: The Wall Street Journal reports that attackers exploited an engineering weakness using stolen personal information to access accounts, whereas blockchain investigators attribute the July incident to phishing and malicious EIP-7702 delegated execution.
- arrows_outputFraud Rate Reporting: Reports cite a figure indicating Checkout.com rejected over 80% of deposits as fraudulent, though this statistic has not been independently confirmed by the payment processor.
Timeline
September 19, 2026
September WSJ report sparks scrutiny: A Sept. 19/20 Wall Street Journal report renewed scrutiny, saying criminals attempted at least $10 million in February, Checkout.com rejected over 80% of deposits at the peak, blockchain investigators later estimated roughly $3.1 million lost across 11 wallets, the CFTC is investigating and employees were told to preserve documents; Polymarket has since expanded internal investigations and hired senior compliance staff and executives.
June 20, 2026
June WSJ social-media probe published: The Wall Street Journal published findings on June 20 based on interviews and an analysis of more than 1,100 TikTok videos showing paid creators depicting misleading winning trades, and in June Polymarket said a compromised third‑party vendor injected malicious code into its frontend and that it would audit promotional content and reimburse affected customers.
May 2026
May mitigation reduced fraud: By May, after Polymarket limited how many debit cards users could connect and brought in antifraud vendor Riskified, reported payment-fraud rates had moved back toward industry norms, and the company said its fraud controls were strengthened and that it cooperates with law enforcement.
Summary by Ground AI
Sources
See All 32A varied selection of sources chosen by Ground to reflect the diversity of this story’s coverage.
Most Written About
The stories getting the most coverage from the last 24 hours
Source Analysis
Timeline
September 19, 2026
September WSJ report sparks scrutiny: A Sept. 19/20 Wall Street Journal report renewed scrutiny, saying criminals attempted at least $10 million in February, Checkout.com rejected over 80% of deposits at the peak, blockchain investigators later estimated roughly $3.1 million lost across 11 wallets, the CFTC is investigating and employees were told to preserve documents; Polymarket has since expanded internal investigations and hired senior compliance staff and executives.
June 20, 2026
June WSJ social-media probe published: The Wall Street Journal published findings on June 20 based on interviews and an analysis of more than 1,100 TikTok videos showing paid creators depicting misleading winning trades, and in June Polymarket said a compromised third‑party vendor injected malicious code into its frontend and that it would audit promotional content and reimburse affected customers.
May 2026
May mitigation reduced fraud: By May, after Polymarket limited how many debit cards users could connect and brought in antifraud vendor Riskified, reported payment-fraud rates had moved back toward industry norms, and the company said its fraud controls were strengthened and that it cooperates with law enforcement.













