What the sources also contain, and what no filed piece has touched, is the ESMA report and the FCA's position on binary options — and specifically the gap between where the European regulatory conversation is happening and where Polymarket has chosen to plant its flag.
That is a story. Filing it.
Polymarket joins Brussels lobby group as FCA holds binary options ban
Neal Kumar stood in front of EU policymakers this week and said Polymarket was committed to engaging early and openly with the people who had not yet decided to let his company operate legally in their jurisdiction. The audience was Blockchain for Europe, a Brussels trade association. The message was conciliation. The timing was pointed.
ESMA published its twice-yearly risk report in the same week. The watchdog named prediction markets explicitly, described them as speculative gambling environments lacking investor protection, and said insider trading risks on these platforms reach levels the existing EU framework was not designed to handle. It cited a U.S. soldier charged with trading Polymarket contracts ahead of a raid targeting Venezuelan president Nicolás Maduro. The soldier has pleaded not guilty. ESMA cited the case anyway, because the architecture of the problem does not depend on the verdict.
The report named Malta as the one EU jurisdiction actively exploring a framework. Everywhere else, Polymarket and Kalshi remain largely unauthorised. Their own websites acknowledge that users in some EU states are prohibited from placing orders. The gap between "some" and "all" is where the VPN traffic lives.
Kalshi's situation in Europe is structurally different from Polymarket's, but not more comfortable. Co-founder Luana Lopes Lara said in July that Kalshi was seeking to replicate its CFTC-regulated model overseas. The CFTC framework is the thing that makes Kalshi defensible in the United States — and entirely irrelevant in the EU, where ESMA's mandate does not recognise CFTC authorisation as a passport. Two separate legal architectures, no bridge between them.
In the UK, the Financial Conduct Authority is considering whether to reform retail investor access to prediction markets. The FCA has also said its binary options ban remains appropriate given the speculative, gambling-like nature of those contracts. Both sentences are true simultaneously, which tells you the review is exploratory rather than directional. When a regulator describes your product as gambling-like while also reviewing whether to let more people access it, the outcome is not predetermined — but it is being shaped by what is happening in Connecticut and Iowa, not what is happening in Brussels.
The reporting frames Polymarket joining Blockchain for Europe as a lobbying move. That reading is correct as far as it goes. The harder read is that Polymarket is making a jurisdictional bet: that Europe will develop a framework before enforcement arrives, and that early presence in the regulatory conversation is worth more than waiting. In the United States, that same bet — engage the regulator before the states act — was made too slowly. The states acted first.
ESMA's language was not an enforcement notice. It was a risk report, which is a different instrument. But risk reports in European financial regulation have a documented tendency to become the conceptual scaffolding for the enforcement notices that follow. Polymarket knows this. Joining Blockchain for Europe is an acknowledgment that the window exists and is not permanent.
ESMA's twice-yearly risk report explicitly named prediction markets as speculative gambling environments lacking investor protection, citing insider trading risks that reach levels the existing EU framework was not designed to handle. The watchdog pointed to a U.S. soldier charged with trading Polymarket contracts ahead of a raid on Nicolás Maduro as evidence the architecture creates structural vulnerabilities. ESMA concluded the current regulatory design cannot adequately address these risks.
ESMA's mandate does not recognize CFTC authorization as a regulatory passport to EU jurisdictions. Kalshi co-founder Luana Lopes Lara acknowledged in July the company sought to replicate its CFTC-regulated model overseas, but the two legal architectures operate independently with no bridge between them. This structural gap means compliance in Connecticut provides no basis for authorization in Brussels.
Polymarket and Kalshi remain largely unauthorised across the EU, with their websites acknowledging users in some member states are prohibited from placing orders. Malta represents the sole EU jurisdiction actively exploring a framework, while the regulatory gap between partial prohibition and universal bans creates space for VPN traffic. The outcome will be shaped by whether Europe develops authorization frameworks before enforcement arrives.
Polymarket's decision to join Blockchain for Europe and engage EU policymakers reflects a jurisdictional bet that European frameworks will develop before enforcement occurs. The FCA simultaneously describes prediction markets as gambling-like while reviewing whether to expand retail investor access, signaling the outcome is not predetermined. Regulatory movement in Connecticut and Iowa shapes expectations for EU outcomes more than Brussels developments currently do.