Guide • September 6, 2026 • 12 min read

Is Polymarket Legal?

In most of the world, yes. In the United States the answer splits in two: Polymarket restricts US users itself, while a separate CFTC-designated venue called Polymarket US serves them with mandatory KYC. In the EU, a September 2026 regulator report says the largest prediction market platforms do not hold the authorisation their event contracts would require.

The Short Answer

Polymarket has operated since 2020. It blocks users in 39 countries and territories according to its own help pages; everyone else can trade today with a wallet and USDC, with no KYC for basic trading.

If you are in the United States, the main exchange is off-limits. US customers are limited to Polymarket US, the separately regulated venue with mandatory KYC, and nothing in the CFTC's public registry suggests that is about to change.

Why US Traders Are Blocked

On January 3, 2022, the CFTC ordered Blockratize, Inc., which does business as Polymarket.com, to pay a civil monetary penalty of exactly $1,400,000. Docket No. 22-09 charged two violations: offering off-exchange commodity options to US customers under Section 4c(b) of the Commodity Exchange Act, and failing to obtain designation as a contract market or registration as a swap execution facility under Section 5h(a)(1). The order required Polymarket to stop offering access to trading in non-compliant markets by January 14, 2022. It settled without an admission of wrongdoing.

The order never uses the word “geoblock.” The restriction US traders hit today comes from Polymarket's own policy, not from a regulator's instruction. The company's help pages list the United States among 39 fully restricted countries and territories, state that permissions are based on physical location rather than residency, and prohibit VPN use to bypass the restriction. That page contradicts itself, listing 40 entries under a heading that says 39, and it gives no legal reason for any individual country's inclusion.

Enforcement has teeth. In April 2026 the SDNY and the CFTC charged a US Army soldier who used a VPN and classified information to trade on the international exchange, making over $400,000. The case is the clearest statement of the CFTC's working theory: insider trading rules apply on prediction markets even when the exchange sits offshore.

Key Dates

  1. January 3, 2022: The CFTC orders Blockratize, Inc. to pay $1,400,000 and stop offering access to non-compliant markets.
  2. July 9, 2025: The CFTC designates QCX LLC, doing business as Polymarket US, as a contract market.
  3. March 2026: Polymarket publishes market integrity rules covering both venues, including Chainalysis forensics.
  4. April 28, 2026: Polymarket files with the CFTC to reopen the main exchange to US traders.
  5. June 2026: The CFTC opens a new probe into Polymarket.
  6. July 2026: Polymarket applies for a margin trading license.

Polymarket US: The Regulated Venue

Polymarket US runs under QCX LLC as a designated contract market, which means the CFTC supervises it directly.

  • KYC is mandatory and runs through Socure, Polymarket US's identity verification provider. Social Security Number is a required field for US persons.
  • The market catalog is narrower and more conservatively vetted than the international exchange.
  • Every contract is fully collateralized. There is no margin and no leverage.

Volume on Polymarket US passed $3.5 billion in June 2026, small next to the international exchange but enough to make it the regulated alternative to Kalshi.

What Would Have to Change

Nothing in the CFTC's public registry suggests the international exchange is reopening to US traders. The agency's contract market filings list QCX LLC exactly once, dated July 9, 2025, and its status has not changed since.

Reporting through 2026 has described an application asking the CFTC to allow US users back onto the main exchange, and separately described an investigation into the company's marketing. Neither has produced a document the CFTC has published, and the agency does not confirm pending investigations. Treat both as reported rather than established. For a walkthrough of how the underlying markets work, see our guide to prediction markets.

The EU Picture Changed in September 2026

On September 10, 2026 the European Securities and Markets Authority published its second Trends, Risks and Vulnerabilities report of the year, including a chapter on prediction markets. Its finding: the marketing and sale of event contracts in the EU generally requires an EU authorisation, “which the largest prediction market platforms currently do not hold.”

The report notes that Polymarket and Kalshi each restrict users in some but not all EU countries, that it is unclear why every member state is not covered, and that geographic restrictions do not prevent EU users from reaching the platforms through VPNs. It separately flags market manipulation and insider trading risk on platforms that operate with limited identity verification.

That report is a risk-monitoring publication, not an enforcement action, and its press release names neither platform. France moved first on enforcement. On July 16, 2026 the Autorité Nationale des Jeux ordered French internet providers to block access to Polymarket, citing promotion of an illegal gambling offering and 578,751 visits in June. The order names ADVENTURE ONE QSS INC. as the operator.

Is Polymarket Legit?

The platform has processed roughly $55.6 billion in trailing 12-month volume. Every trade settles on-chain in USDC. In March 2026 Polymarket published market integrity rules covering both venues: surveillance partnerships, anomaly detection, and blockchain forensics through Chainalysis, with violations punishable by suspension, bans, or referral to law enforcement.

Scrutiny cuts both ways. House Oversight opened an investigation into insider trading on Polymarket and Kalshi in May 2026, and lawmakers demanded details on KYC enforcement and suspicious-trade detection. That is pressure, and it also tells you the platform is big enough for Congress to care about. Legitimacy is not the same thing as safety.

Is Polymarket Safe?

Your funds and positions live in a wallet you control, not an exchange account. The company can block your account on the frontend, but your positions remain in your wallet, and settlement runs through smart contracts, so a winning position pays out whether or not the company wants to pay. The contracts are audited, but no code is risk-free.

The bigger risks are market risk and account friction. Shares go to zero when you are wrong. Account friction grew in 2026: Polymarket expanded KYC checks on the international venue, blocked suspicious accounts, and cracked down on VPN use under AML and sanctions pressure. If you trade anonymously and your account gets flagged, expect to verify your identity or lose access.

Is Polymarket Gambling?

Legally, no, not in the way a sportsbook is. The CFTC regulates event contracts as derivatives, and Polymarket's US venue holds a derivatives license. In January 2026 the CFTC withdrew a proposed rule that would have banned political and sports event contracts entirely, leaving regulated platforms free to list them.

State gaming regulators disagree in some places. Several states have issued cease-and-desist orders against prediction markets, and at least one state enacted a ban in 2026 that is now in court. The CFTC has sued states asserting exclusive jurisdiction, and CFTC Chairman Selig has said the conflict may reach the Supreme Court.

Practically, trading event contracts is speculation with real money. If your state treats prediction markets as gambling, that is the law you are under. Check before you deposit.

Does Polymarket Require KYC or an SSN?

In the United States, yes. Polymarket US requires full KYC from every customer, and a Social Security Number is a required field for US persons. The international exchange does not require KYC for basic trading, though identity checks there tightened in 2026.

The two venues answer differently. The international exchange historically asked for nothing beyond a wallet. In 2026 that changed: Polymarket began pushing KYC on flagged accounts, and in May 2026 The Information reported the company blocking suspicious accounts and tightening geoblock enforcement under sanctions and AML pressure.

If you are a US person, the SSN request comes from Polymarket US, where full KYC is mandatory because CFTC-regulated exchanges must verify customer identity under federal rules. It is the same requirement you would meet at any US derivatives venue, and it is the price of the license.

Do Payouts Actually Happen?

Yes. When a market resolves, the UMA oracle submits the outcome and the smart contract pays winners $1.00 per share in USDC. Nothing waits for manual approval. Contested outcomes can delay resolution while the oracle dispute process runs, but a correct position on a resolved market settles on-chain regardless of what the company thinks. Billions of dollars in positions have settled this way since 2020.

The State-Level Battles

The legal fights have moved to the states. Some state gaming regulators have issued cease-and-desist orders against prediction markets, and one state ban enacted in 2026 is under court challenge. The CFTC has sued states asserting exclusive jurisdiction, and in May 2026 President Trump posted that prediction markets fall under CFTC authority. Until courts settle it: federal law governs the venue, your state's attitude governs you.

Where BlockRotate Fits

BlockRotate is copy-trading software that mirrors a leader's Polymarket positions into your own wallet. It does not change any of the answers on this page: if Polymarket is restricted where you live, a bot does not make it legal. You remain responsible for your jurisdiction's rules. For the mechanics of automated trading, see our Polymarket copy trading guide.

Ready to Trade Prediction Markets?

Start with Polymarket copy trading and automatically mirror proven traders. No research required. Set your parameters and let the bot execute.