CFTC opens three insider-trading inquiries into Polymarket

The authorization came from inside the agency. Three separate insider-trading investigations into Polymarket, each requiring CFTC sign-off before they could proceed, are now active — which tells you something the platforms would prefer you not to think about too carefully: the CFTC's posture toward prediction markets is not purely permissive.

The regulatory consensus has settled around a comfortable story. Kalshi won its federal preemption argument at the appellate level, at least provisionally. The CFTC designated event contracts as a legitimate product class. The industry reads this as a green light with some yellow paint still drying at the edges. Three authorized investigations suggest the green light has more conditions attached than the marketing materials acknowledge.

Insider trading in a prediction market works differently from insider trading in an equity. There is no issuer, no earnings call, no SEC disclosure regime. The information asymmetry that regulators care about is positional — someone who knows an outcome before the market does and trades on it. The CFTC's market manipulation authority under the Commodity Exchange Act covers this, but the enforcement history is thin. Three simultaneous investigations into a single platform is not a normal investigative posture. It is a signal that the agency has identified a pattern, or believes it has.

I have seen this sequencing before. A regulator that has extended legitimacy to a market structure does not immediately revoke that legitimacy when it finds misconduct. It investigates quietly, builds the record, and then uses enforcement to define the conduct rules it never wrote explicitly. The CFTC is doing the work that rulemaking would have required it to do in public. This is slower, messier, and gives the industry less notice — but it produces binding precedent without going through notice-and-comment.

The consensus reading of the CFTC's position is that it views prediction markets favorably and will defend that position in federal court. I think that reading is correct but incomplete. An agency that authorizes three insider-trading investigations into its own designated market is simultaneously defending the product class and policing the participants within it. Those are not contradictory positions. They are how a regulator establishes that legitimacy was conditional all along.

For Polymarket specifically, the ESMA risk report adds a separate pressure. The EU regulator has been explicit that platforms lack authorization to serve EU users and that existing binary-options bans may apply where contracts qualify as financial instruments. Polymarket's restricted jurisdiction list does not cover all EU member states, and ESMA has noted the gap. The VPN enforcement question is, in practical terms, unanswerable — platforms cannot reliably verify location against a determined user. That is not a compliance gap that can be closed with better technology. It is a structural exposure that only market exit or full EU authorization resolves.

The two investigations are legally distinct but commercially convergent. A platform managing active CFTC insider-trading inquiries while simultaneously facing EU authorization risk across its largest non-US user base is running a more complicated compliance operation than the prediction market bull case prices in.