Polymarket chief executive Shayne Coplan told compliance staff to prioritize growth and treat any regulatory penalties as a problem to deal with later, even as a stolen debit card fraud scheme attempted to pull at least $10 million through the prediction market, according to a Wall Street Journal report surfaced by Cointelegraph on September 20, 2026.
The account describes a specific decision: rather than freeze or aggressively unwind the activity, Coplan reportedly instructed staff to keep the platform expanding and accept the possibility of fines down the road. That framing, growth first and compliance costs as a line item, sits at the center of the story.
A governance choice, not a technical failure
Card fraud reaching a crypto platform is not itself unusual. Stolen card numbers get tested and cashed out across payment systems constantly, and any venue that lets users fund accounts with debit cards becomes a target. What makes this report notable is the reported response from the top. The alleged instruction was not "patch the hole faster." It was to keep growing and absorb the regulatory consequences.
For a company whose entire value proposition rests on being a trusted place to route money, that posture carries weight. Prediction markets hold user balances, settle contracts, and move funds in and out through payment rails. The willingness to treat fraud controls as negotiable against growth targets is the kind of detail regulators read closely.
Polymarket has spent the past year working to re-enter the United States after previously settling with the Commodity Futures Trading Commission and blocking US users. A report that its leadership sidelined compliance during a live fraud event lands at an awkward moment for any firm trying to convince American regulators it can be trusted with retail funds.
The debit card is the entry point
The mechanics here run through a familiar weak spot. Debit cards are a fast, low-friction way to fund an account, which is exactly why fraud rings favor them. A stolen card can be loaded, spent, and cashed out before the legitimate holder notices, and chargebacks then land on the platform.
This is one reason serious payment operators lean on layered fraud screening, velocity limits, and hard holds rather than treating detection as optional. When a platform relaxes those controls to speed up onboarding and deposits, it moves risk onto itself and onto the real cardholders whose numbers were stolen. The reported $10 million attempt is a measure of how much a single scheme can try to extract when the guardrails are treated as flexible.
The same tension shows up across consumer crypto payments. Providers that issue their own debit and prepaid cards constantly balance frictionless signups against fraud exposure, and the ones that cut corners on verification tend to pay for it later. It is a reminder that minimal-verification onboarding is a convenience with a cost attached, and that cost usually surfaces during exactly this kind of event.
Timing against a US comeback
The report arrives while Polymarket is one of the most-watched names in crypto, buoyed by heavy election-cycle volume and a push toward regulated US access. Coplan has been the public face of that comeback. A WSJ story alleging he personally downplayed a fraud scheme to protect growth cuts against the compliance-forward image the company needs to project.
None of the underlying facts here have been independently confirmed beyond the WSJ reporting relayed through Cointelegraph, and Polymarket has not publicly addressed the specifics as of this writing. Coplan's alleged remarks are characterized secondhand rather than quoted from a document. Readers should treat this as reporting on an internal decision, not a settled regulatory finding.
Still, the direction of the story is clear. A platform that wants US approval is being described as one that, at least in this instance, chose expansion over fraud control. If regulators or counterparties take the account seriously, it complicates the relaunch narrative regardless of how the specific $10 million episode resolved.
Overview
The Wall Street Journal reports that Polymarket CEO Shayne Coplan told compliance staff to prioritize growth and defer fines while a stolen debit card scheme tried to take at least $10 million, per coverage relayed by Cointelegraph on September 20, 2026. The reported decision matters more than the fraud attempt itself, because it speaks to how the company weighs compliance against expansion at a moment when it is seeking US access. The claims rest on a single report and remain unconfirmed by Polymarket.
