Is Polymarket legit? The documented record for both Polymarket venues
There are two Polymarkets: a US-regulated venue and the original global platform, which US accounts cannot use. Much of what is written about "Polymarket" mixes them up. This page keeps them apart and documents each — regulation, custody, disputes, enforcement — with a source on every line, so you can judge.
As of 2026-09-07. Bracketed numbers link the source for each line.
Polymarket US
| Legal entity and regulatory registration | Exchange: QCX LLC d/b/a Polymarket US, designated by the CFTC as a Designated Contract Market on July 9, 2025 (filing address 7251 W. Palmetto Park Road, Suite 102, Boca Raton, FL 33433). Clearing: QC Clearing LLC d/b/a Polymarket Clearing, a CFTC-registered Derivatives Clearing Organization. Polymarket acquired the QCEX holding company (QCX LLC + QC Clearing LLC) for $112 million, announced July 21, 2025. The CFTC's Amended Order of Designation (petition submissions Aug 14-Nov 24, 2025; announced Nov 25, 2025) removed the ban on futures commission merchants carrying customer accounts, allowing intermediated access. CFTC staff Letters 25-28 (Sept 2, 2025) and 25-48 (Dec 11, 2025) grant no-action relief on swap-reporting rules for fully collateralized 'QCEX Contracts'. Polymarket's global site states: 'Polymarket US is operated by QCX LLC d/b/a Polymarket US, a CFTC-regulated Designated Contract Market.' Note: The App Store seller for the US app is Blockratize Inc (the entity named in the 2022 CFTC order), not QCX LLC. |
|---|---|
| Where customer funds are held and how they are protected | Polymarket US documentation: 'Your funds are kept in a dedicated customer account that is separate from Polymarket US's operating funds' and 'Polymarket US cannot access or use your money.' Polymarket Clearing (the DCO) states it clears only fully collateralized positions and does not set margin or maintain a financial-resource package. The rulebook (Aug 28, 2026) defines a 'Settlement Bank' as a depository approved by the company for holding participant funds and requires FCM customer accounts to follow segregation requirements. Note: Bank names and FDIC pass-through insurance: Not published in the loaded pages (searched the Polymarket US docs index, polymarketexchange.com and the rulebook for 'FDIC'). |
| Ownership and funding | Owned by Polymarket (founder/CEO Shayne Coplan) via the July 2025 QCEX acquisition; QCEX founder Sergei Dobrovolskii said the DCM and DCO licences took over four years to obtain. Polymarket group funding: Intercontinental Exchange (NYSE owner) invested up to $2 billion at about $8B pre-money / $9B post-money (announced Oct 7, 2025) and became a global distributor of Polymarket data; a $1 billion round led by 1789 Capital at a $21 billion valuation was reported Sept 1, 2026 (prior valuation $15B). Note: The intermediate $15B valuation (April 2026) and a $600M ICE follow-on appear in search snippets from Bloomberg/PYMNTS that were not loaded. Which Polymarket parent entity legally owns QCX LLC is not stated in the loaded sources. |
| Track record of paying out / withdrawal timelines | Venue-published rules: debit card and ACH withdrawals '3-4 business days', wire '1 business day'; all withdrawals must return to the same payment method used to deposit; deposits are 'funds in flight' and cannot be withdrawn until cleared; withdrawals are processed first-in-first-out; withdrawals are free. App Store (US app 'Polymarket: Trade Live Sports', seller Blockratize Inc): 4.6/5 from about 54,000 ratings, age rating 18+ (as of Sept 7, 2026). Public rollout: the iOS app opened to US users without a waitlist on May 12, 2026 after an invite-only period from November 2025; no Android app at that time. Note: No separate BBB or Trustpilot profile for Polymarket US was found (BBB search returned no Polymarket listing; the polymarket.com Trustpilot page mixes US-app and global complaints). |
| Notable disputes and how they were handled | Not found: no publicly reported settlement dispute specific to the CFTC-regulated Polymarket US exchange was located in searches for 'Polymarket US' with outcome review, voided or settlement-controversy terms; all reported Polymarket resolution disputes (Zelensky suit, Ukraine minerals, Strategy Bitcoin) concern the global UMA-resolved platform. Polymarket US's rulebook provides an in-house 'Contract Outcome Review Process' (Rule 10.4) and 'Modification' authority to address ambiguities, rather than the UMA oracle. Note: The Strategy-Bitcoin lawsuit (July 2026) names Adventure One QSS Inc. and Blockratize Inc., not QCX LLC. |
| Enforcement actions and lawsuits against the venue | QCX LLC is a named defendant in Diego v. Blockratize Inc. et al., No. 1:26-cv-00973 (D.N.J., filed Feb 4, 2026), a class action alleging Polymarket runs unlicensed sports betting disguised as a prediction market; QCX LLC and QC Clearing LLC are also named in National Association of Consumer Advocates v. Blockratize Inc. et al., No. 2026-CAB-004388 (D.C. Superior Court, filed June 26, 2026), alleging staged influencer 'wins' of about $1.9M in 1,105 promotional videos and undisclosed payments. On June 25, 2026 Senators John Curtis and Adam Schiff asked the CFTC to investigate; reporting on July 8, 2026 described an ongoing CFTC investigation covering marketing, consumer protection, age verification and compliance practices. No CFTC enforcement order against QCX LLC or QC Clearing LLC was found on cftc.gov. Note: Whether the reported CFTC investigation targets the US DCM, the global platform, or the group is not specified in the loaded reports. State sports-betting actions (Nevada, Massachusetts) referenced in coverage were not verified against Polymarket-US-specific court records; DeFi Rate reported the US app was blocked in Nevada by state court order as of March 2026. |
| Age, identity verification, and responsible-use policies | Rulebook: individual participants must be 'at least 18 years of age' and have reached the age of majority in their state/country. KYC is mandatory before depositing or trading ('required to comply with federal identity and anti-money-laundering (AML) rules'); most verifications complete instantly, manual review up to 3-5 business days, with government-issued ID and selfie check when requested. Trading-restrictions guidance covers employees of financial firms and persons with material non-public information. Note: Self-exclusion or deposit-limit tools: Not found in the loaded Polymarket US documentation index; the July 2026 CFTC-investigation coverage lists 'age verification and responsible gaming tools' among areas under review. |
| Volume/scale as publicly reported | DeFi Rate's tracking database reported Polymarket US notional volume of $255.9 million in March 2026 (weekly peak $88.8M for the week of March 30), with the market catalogue growing from 1,372 to over 4,100 markets that month. Covers reported about $50 million average daily volume in the week before the May 12, 2026 public launch and a reported waitlist of over 1.4 million. Note: Polymarket does not publish an official US-only volume or user count; figures above are third-party estimates or press reports. User counts: Not published. |
| Known scam vectors that use the venue's name | Polymarket US documentation warns users to 'avoid fake Google or Apple login screens', to avoid fake applications, to sign in only through the official app, to enable 2FA, and: 'Do not share Polymarket verification codes with anyone, including support.' Support is via in-app chat or support@polymarket.us. Note: Phishing campaigns documented against Polymarket users (fake 'member access invitation' emails tied to the US rollout, comment-section links) are covered under the global venue; several used US-launch hype as the lure. |
| Public complaint channels and regulator complaint routes | Venue: in-app chat and support@polymarket.us. Rulebook: Rule 2.14 establishes a Regulatory Services Agreement with the NFA; Chapter 9 provides arbitration of disputes among participants (9.1) and of claims against the exchange (9.2); FCM participants must follow NFA customer-complaint rules. Regulator: CFTC Reparations Program for complaints against CFTC-registered professionals (2-year deadline). Note: NFA BASIC was not queried for QCX LLC / QC Clearing LLC. |
Polymarket (global)
| Legal entity and regulatory registration | The global site's footer identifies the operator as Adventure One QSS Inc. and states: 'Polymarket operates globally through separate legal entities... This international platform is not regulated by the CFTC and operates independently.' The original operator, Blockratize, Inc. d/b/a Polymarket (Delaware, New York City), was ordered by the CFTC on January 3, 2022 to pay a $1.4 million civil penalty for operating an unregistered facility for event-based binary options from about June 2020 (900+ markets), to wind down non-compliant markets and to cease and desist. Trading is geoblocked for the United States: the help center lists the U.S. among 39 fully blocked countries, prohibits VPN use as a Terms of Service violation (Section 2.1.4), and lists 'close-only' jurisdictions where existing positions can be exited but no new ones opened. Note: The Terms of Service body is rendered by JavaScript and could not be extracted; the Panama incorporation of Adventure One QSS Inc. and the exact US-persons clause were reported by NPR/Sportico (not loadable) and appear only in search snippets. No non-US regulator licence for the global platform was found. |
|---|---|
| Where customer funds are held and how they are protected | Non-custodial: 'Polymarket is non-custodial, so you're in control of your funds' and 'we never take possession of your USDC'; assets sit in the user's wallet on Polygon secured by the user's private key, which can be exported. Collateral is pUSD (Polymarket USD), 'a standard ERC-20 backed by USDC, with backing enforced onchain by the smart contract'. Security 'depends on how securely you handle your private key and passwords'. Polymarket states it is not the counterparty: 'All trades happen peer-to-peer'. Note: No deposit insurance, clearinghouse guarantee or FDIC coverage is mentioned in the loaded pages; a December 24, 2025 incident drained 'a small number' of accounts through a third-party login provider vulnerability (see scam row). |
| Ownership and funding | Founded in 2020 by Shayne Coplan (CEO); the November 2024 FBI search took place at Coplan's penthouse in Soho, New York. Intercontinental Exchange announced an investment of up to $2 billion on Oct 7, 2025 (about $8B pre-money, $9B post-money) with ICE becoming global distributor of Polymarket data. A $1 billion round led by 1789 Capital at a $21 billion valuation was reported Sept 1, 2026, up from $15 billion. Note: Formal headquarters: the operating entity is described in search snippets as Panama-incorporated while staff are New York-based (NPR, May 5, 2026, not loadable). Earlier rounds (Founders Fund $150M at $1.2B; Blockchain Capital $55M) appear only in search snippets. |
| Track record of paying out / withdrawal timelines | Withdrawals are on-chain: from Portfolio, click Withdraw, enter a recipient address, choose token, amount and network, confirm; 'after the withdrawal is processed, your funds will be sent to the specified address' (no time estimate or fee stated in the help article). Disputed markets add delay: a 2-hour challenge window, then a 24-48 hour debate period and about 48 hours of UMA token-holder voting. Trustpilot (Sept 7, 2026): TrustScore 1.4/5 from 619 reviews, 90% 1-star, 8% 5-star, profile claimed July 2024; themes are slow/blocked withdrawals, outages, disputed payouts and support response. No BBB profile found. Note: The Trustpilot page covers polymarket.com generally and, since the US app launch, mixes complaints about both platforms. App-store ratings for the international app were not separately located; the App Store listing found (4.6/5, ~54K ratings) is the US-storefront app. |
| Notable disputes and how they were handled | Ukraine minerals deal (March 2025, ~$7M): resolved Yes before any signed deal after a holder of about 5 million UMA tokens across three accounts cast roughly 25% of the vote; Polymarket said 'because this wasn't a market failure, we are not able to issue refunds' and promised system changes. Zelensky suit (market window March 22-June 30, 2025, $237M): after a NATO appearance on June 24 in a jacket-and-trouser outfit widely described as a suit, the initial Yes proposal was disputed and UMA finalized No on July 1, 2025 citing no 'credible reporting consensus'; Polymarket did not revisit the outcome and states 'once finalized by UMA, outcomes are immutable'. Strategy Bitcoin sale (question: sells any Bitcoin by May 31, 2026; ~$60M-$301M volume reported): Strategy's June 1 8-K disclosed selling 32 BTC on May 26-31, but the market resolved No because 'confirmation achieved outside of the market's timeframe does not qualify'; two traders sued in New York state court on July 3, 2026 alleging rules were changed after the fact. Note: Volume conflict on the Strategy market: The Defiant reported $60M, Cryptopolitan $301M (likely different market/aggregation scopes). Resolution is by UMA token-holder vote, not by Polymarket staff, with a $750 proposer/disputer bond. |
| Enforcement actions and lawsuits against the venue | CFTC order, January 3, 2022: $1.4M penalty, wind-down of non-compliant markets, cease-and-desist (Blockratize, Inc. d/b/a Polymarket). DOJ/CFTC investigation into whether Polymarket kept serving US users (FBI search of the CEO's New York home, November 2024) closed in July 2025 with no charges. Class actions: Diego v. Blockratize Inc. et al. (D.N.J. 1:26-cv-00973, Feb 4, 2026) and a Southern District of New York suit (February 2026, plaintiff Lorenzo Miro) alleging unlicensed sports betting; NACA v. Blockratize Inc. et al. (D.C. Superior Court 2026-CAB-004388, June 26, 2026) alleging staged influencer wins and undisclosed payments (about $350,000 via a personal PayPal account, per the complaint); Wood and Bush v. Adventure One QSS Inc. et al. (N.Y. Supreme Court, July 3, 2026) over the Strategy-Bitcoin resolution. Senators Curtis and Schiff requested a CFTC investigation on June 25, 2026; a CFTC probe covering marketing and consumer-protection practices was reported in July 2026. Note: Allegations in the class actions are unproven; no judgments were found. State cease-and-desist orders (Nevada, Tennessee, Connecticut, Illinois) are referenced in coverage but were not verified against state sources. |
| Age, identity verification, and responsible-use policies | Access is controlled by geoblocking (39 fully blocked countries including the U.S.; VPN use prohibited under ToS Section 2.1.4; close-only mode for some jurisdictions). The loaded help-center pages do not describe an identity-verification (KYC) requirement or self-exclusion tools; the money-safety page describes a non-custodial wallet model in which the user controls the private key. Note: Minimum age: Not found in the loaded official pages (the ToS body did not render); third-party guides and search snippets state 18+. KYC: third-party guides report no ID check for non-US users except under AML thresholds; not confirmed on an official page. |
| Volume/scale as publicly reported | TRM Labs (Mar 27, 2026): prediction-market monthly volume grew from about $1.2B in early 2025 to over $20B in January 2026; Polymarket set a single-day record of $425M on Feb 28, 2026; roughly 840,000 unique wallets were active monthly across Polymarket and three smaller venues in February 2026. Pew/The Block: combined Kalshi + Polymarket monthly volume about $24B in April 2026. DeFi Rate (taker notional): $3.47B in August 2026, down 59.5% from July. A record 688,000 monthly active users was reported on Feb 17, 2026 (via CoinDesk). Note: DeFi Rate cites a Columbia University study estimating about 25% of historical Polymarket volume was wash trading. Search snippets cite a $10.57B March 2026 monthly record (BitKE) and $10.8B in June 2026, neither loadable. The Block's active-trader chart did not render. |
| Known scam vectors that use the venue's name | Documented vectors: a phishing campaign in market comment sections (losses over $500,000 reported), a September 2024 Google-login breach, and a December 2025 incident in which 'a vulnerability introduced by a third-party authentication provider' (reported to be an email-login service) let attackers drain 'a small number' of accounts; Polymarket said it was resolved and it would contact affected users but did not disclose amounts. Fake 'member access invitation' emails and clone websites promoting fake POLY rewards are reported by security vendors. Official channels are limited to the site chat widget and support@polymarket.com / support@polymarket.us. Note: No Polymarket-published scam-warning article was found in the help-center collections (Getting Started, Markets, Trading, FAQs, Troubleshooting); the contact-support article does not warn about impersonation. |
| Public complaint channels and regulator complaint routes | Venue: website chat widget and support@polymarket.com; market outcomes are disputed through the UMA oracle (2-hour challenge window, $750 bond, token-holder vote) and are 'immutable' once finalized, so Polymarket does not reverse them. Regulator: the CFTC does not regulate the international platform (per Polymarket's own footer), so the CFTC Reparations Program's registrant requirement does not apply; the 2022 CFTC order shows the CFTC can still act against the operator for serving US persons. Private litigation has been used (New York state court, D.N.J., S.D.N.Y., D.C. Superior Court). Note: No consumer-protection regulator in Panama or elsewhere with published jurisdiction over Adventure One QSS Inc. was found. |
Related
- Legal status by state
- Kalshi vs Polymarket, side by side
- Disputes where the same event paid differently
Questions people ask
Is Polymarket legit?
There are two Polymarkets. Polymarket US (QCX LLC) has been a CFTC-designated contract market since July 9, 2025 with a CFTC-registered clearinghouse and mandatory KYC. The international platform (Adventure One QSS Inc.) states it is not regulated by the CFTC, blocks US users, holds no customer funds (self-custody on Polygon), resolves disputes by UMA token vote, paid a $1.4M CFTC penalty in 2022, and faces 2026 class actions and a reported CFTC investigation over marketing practices.
Is Polymarket safe?
On the international platform funds never leave the user's own wallet, so safety depends on private-key handling; there is no deposit insurance or clearinghouse guarantee, and incidents in 2024-2025 (a login-provider vulnerability and comment-section phishing) drained some accounts. Market outcomes are decided by UMA token holders and cannot be reversed, which produced the disputed Ukraine-minerals, Zelensky-suit and Strategy-Bitcoin resolutions; Trustpilot shows 1.4/5 from 619 reviews.
Is Polymarket US the same as Polymarket?
No. Polymarket's own site says it 'operates globally through separate legal entities': Polymarket US is QCX LLC, a CFTC-regulated exchange launched to the public on May 12, 2026, using bank deposits, segregated customer accounts, KYC and an in-house outcome-review process; the international polymarket.com platform is run by Adventure One QSS Inc., uses on-chain USDC/pUSD, UMA oracle resolution, and is geoblocked for the United States.