From the journal

CFTC Charges Google Engineer with Insider Trading in Prediction Market Event Contracts, May 2026

The U.S. Commodity Futures Trading Commission filed a civil complaint against a Google software engineer, charging him with misappropriating confidential nonpublic data about Google's Year in Search list for 2025 to trade event contracts on Polymarket, a decentralised finance prediction market on the Polygon blockchain, in violation of the Commodity Exchange Act.

2 min read

The U.S. Commodity Futures Trading Commission (CFTC) filed a civil complaint in the U.S. District Court for the Southern District of New York against Spagnuolo, a Google software engineer, charging him with misappropriating material nonpublic information to trade event contracts in violation of the Commodity Exchange Act (CEA). The action is at the civil enforcement stage; no criminal charges have been reported as of the filing date of 27 May 2026.

The CEA, 7 U.S.C. § 1 et seq., prohibits fraud and manipulation in connection with commodity interests, including event contracts. The CFTC's complaint applies a misappropriation theory: as a Google employee, Spagnuolo owed Google a duty of trust and confidence to keep confidential the results of Google's official Year in Search list for 2025. The complaint alleges he breached that duty by using that nonpublic data to trade event contracts on Polymarket.com, predicting which search terms would appear on the list. Polymarket operates on the Polygon blockchain as a regulated designated contract market under the CEA. The CFTC Enforcement Division issued an advisory in February 2026 on enforcement authority over event contracts, putting prediction market participants on notice that CEA antifraud provisions apply.

Prediction market operators, DeFi protocol developers, and individual participants trading event contracts on Polymarket and similar platforms face direct implications. The CFTC asserts jurisdiction over event contracts traded on decentralised platforms regardless of their blockchain architecture. Market participants who obtain material nonpublic information through employment or contractual relationships and use it to trade event contracts face enforcement exposure under the CEA's misappropriation theory.

The case raises open questions about the scope of CEA misappropriation liability in DeFi settings, where no traditional broker-dealer relationship exists between the trader and the platform. The complaint does not allege any compliance failure by Polymarket or the Polygon network. No parallel SEC action has been reported. The outcome of the civil proceeding will determine whether the misappropriation theory applies to blockchain-based event contract trading without a conventional intermediary.

Licentium advises on CFTC compliance and digital asset regulatory strategy and may assist with matters relating to this enforcement area. Work we undertake includes event contract compliance reviews, DeFi regulatory analysis, CFTC enforcement response support, insider trading policy design, and prediction market legal structuring.

Source: CFTC Press Release 9237-26: CFTC Charges Google Employee with Insider Trading in Search Result-Related Event Contracts, 27 May 2026

Prediction Markets

More from the journal

See all

Illinois signs Artificial Intelligence Safety Measures Act into law, effective January 2027

Governor JB Pritzker signed the Illinois Artificial Intelligence Safety Measures Act on 6 July 2026, making Illinois the first US state to require mandatory annual third-party audits of frontier AI model developers. The Act applies to large frontier developers operating or deploying models in Illinois, requires transparency reports before each new or substantially modified frontier model deployment, and establishes civil penalties. Core obligations take effect 1 January 2027.

UK consults on modernising payment services regulation covering stablecoins and AI agents, 2026

HM Treasury launched a consultation on modernising the UK payment services regulatory regime, with responses due by 6 October 2026. The consultation addresses how to adapt regulation for tokenised payments including qualifying stablecoins, Open Banking expansion, and agentic AI systems authorised to conduct payments. It follows the February 2026 Payments Forward Plan and the government's decision to transfer Payment Systems Regulator functions to the Financial Conduct Authority.

Hong Kong SFC mandates phishing-resistant authentication for internet brokers and VATPs, July 2026

The Hong Kong Securities and Futures Commission issued a circular on 9 July 2026 requiring licensed corporations engaged in electronic trading and SFC-licensed virtual asset trading platform operators to replace one-time passwords with phishing-resistant authentication methods. Covered firms must implement passkeys or bound-device recognition for client login and device binding. Large internet brokers must act immediately. All other in-scope firms have up to 12 months to comply.