EU watchdog tightens rules on prediction market insider trading

ESMA insider trading report puts prediction markets in a tighter EU corner

Three episodes. That is how many ESMA needed to give prediction markets their own chapter in a risk monitor.

The first: new wallets made $1.2 million hours before February's strike on Iran, and by May, Bubblemaps had traced nine linked accounts to $2.4 million in Iran bets that won at a 98% rate. The second: a U.S. Army master sergeant charged over $400,000 in Polymarket profits tied to the capture of Nicolás Maduro. The third: suspected tampering with the weather sensors used to settle Polymarket contracts, which prompted Météo-France to file a police complaint with French authorities.

ESMA's word for the platforms' responses is "largely reactive" — meaning the intervention begins after the profits are gone. Polymarket's chief legal officer Neal Kumar offered a different reading of the Maduro case: the sergeant was identified, therefore the system works. That is a reasonable argument about deterrence. It is a less convincing argument about prevention, which is what a regulator asked to protect retail investors actually cares about.

Here is where I part from the consensus read of this report. Most of the commentary landing this week treats the ESMA document as a warning shot aimed at Kalshi and Polymarket's European ambitions. I don't think that's where this lands. The EU retail barrier — event contracts qualifying as derivatives under MiFID II, national rules mirroring ESMA's binary options intervention — was already in place before any of these episodes. ESMA is not building a case for new rules. It is building a public record that explains why the existing rules stay.

The practical consequence is narrower than it sounds, but more durable. Kalshi and Polymarket restrict users in some EU member states but not all, and ESMA has noted it cannot explain the inconsistency. Both platforms ban VPNs; ESMA questions whether those bans do anything. Malta is the only jurisdiction drafting a framework that might bring event contracts inside a regulated structure rather than outside all of them.

ESMA's volume data stops in January 2026 for Polymarket and November 2025 for Kalshi — before the World Cup surge that pushed combined monthly volume to the figures reported in June. The regulator is writing about a market that has already moved past its own dataset. That gap matters because the three insider trading episodes it cites occurred at lower volume. A market five times larger is not five times more surveilled.

The Wall Street Journal finding that ESMA cites — 67% of Polymarket gains flowing to 0.1% of accounts — is the number that will travel furthest in Brussels. European regulators do not need to prove manipulation to restrict retail access. They need only demonstrate retail harm, and that figure does the work without requiring a single criminal charge.

Washington's argument is structurally different: not whether to allow event contracts, but which ones. The CFTC's proposed bar on war and assassination contracts and CME's Terry Duffy clashing with Kalshi's Luana Lopes Lara over manipulation at a public hearing are disputes about the perimeter of an accepted market. Brussels is not having that argument. It settled the prior question — whether retail access should exist at all — and the ESMA report is the documentation that the answer remains no.