Polymarket’s latest controversy now rests on two different tracks. On 2026/09/24, New York Attorney General Letitia James filed a petition against QCX LLC d/b/a Polymarket US, alleging illegal, unlicensed gambling in New York. Separately, The Wall Street Journal reported an attempted stolen-card scheme involving at least $10 million and attributed a growth-first response to CEO Shayne Coplan. Polymarket also carries a confirmed federal enforcement history: the Commodity Futures Trading Commission fined Blockratize, Inc. d/b/a Polymarket.com $1.4 million in 2022.

New York’s case and the CFTC record are official

The clearest documented actions against Polymarket are New York’s 2026 petition and the earlier 2022 CFTC settlement. New York’s filing names the respondent specifically as QCX LLC d/b/a Polymarket US and alleges that it operated an illegal, unlicensed gambling business in the state. The petition seeks to stop that activity and pursue fines, forfeiture of illegal gains, and other relief.

The earlier federal case was different in both entity and legal theory. The CFTC said on 2022/01/03 that Blockratize, Inc. d/b/a Polymarket.com offered off-exchange event-based binary options contracts without the required registration as a designated contract market or swap execution facility. That order, identified in CFTC Docket No. 22-09 and later cited by the agency’s whistleblower notice, required a $1.4 million civil monetary penalty, a wind-down of non-compliant markets, and a cease-and-desist obligation.

That distinction matters because the state gambling case should not be treated as proof of the later fraud allegations, and the 2022 derivatives case should not be read as if it resolved today’s operational questions. Once those are separated, the real dispute becomes narrower: what exactly is established about the reported fraud episode itself?

The reported $10 million fraud episode remains a media allegation

The fraud controversy is best described as a reported attempted payment-control failure, not a confirmed regulator finding or a proven $10 million loss. The Wall Street Journal said fraudsters linked stolen debit cards to Polymarket US accounts, used them to place wagers, and then tried to withdraw funds to cards or accounts they controlled. The report described the scheme as involving at least $10 million in attempted theft.

That framing is more precise than saying $10 million was lost. Attempted transaction volume, successful withdrawals, and realized losses are different measures, and only the first is supported in the reporting cited here. The same caution applies to the widely repeated more-than-80% figure: it refers to deposits handled by a payment processor at one point, not all Polymarket activity and not a number certified in a regulator order.

The allegation that CEO Shayne Coplan told staff to prioritize growth and deal with fines later is also still in the category of reported employee accounts, not a court finding or authenticated enforcement statement. That keeps the controversy serious but unresolved. The practical takeaway is that the mechanism described by the reporting is clear enough to raise governance concerns, while the legal record on that incident has not yet caught up in the same way New York’s gambling case has.

New York is the clearest next legal milestone

The most trackable next step is the New York case, not a publicly defined new federal enforcement stage. New York has already filed its petition against Polymarket US in state court, which means the state proceeding offers the clearest path for future filings, responses, and scheduling developments. By contrast, broader claims that the CFTC is examining Polymarket may still matter, but they do not come with a publicly identified charging document, hearing date, or settlement timetable here.

That difference shapes how the controversy should be read. New York’s action is an active, visible legal process tied to alleged gambling-law violations. The reported stolen-card incident and the alleged growth-first internal posture may still influence regulators or litigation strategy, but they remain distinct from a documented new federal case stage. In short, Polymarket’s immediate pressure point is a formal state petition, while its broader federal exposure is still defined more by prior settlement history and media scrutiny than by a newly confirmed public enforcement docket.