The Arrest Was the Appetizer. This Is the Main Course.

Readers already know the basics: Google security engineer Farhana Rahman was arrested for using internal search data to win $1.2 million on Polymarket. Case closed on that chapter.

But her arrest revealed something much bigger. And the mainstream media — even after wall-to-wall coverage of the insider trading angle — has largely overlooked it.

The Legal Loophole Nobody Wants to Close

Polymarket and its main competitor Kalshi are not regulated as gambling sites. They're regulated as financial exchanges — specifically, CFTC-regulated prediction markets. That single legal distinction lets them set their minimum age at 18, according to CNN's reporting by Marshall Cohen and Elisabeth Buchwald, published May 28, 2026.

Most legalized gambling in the U.S. requires users to be 21. That three-year window — 18 to 21 — is not a technicality. It's a business model.

High school seniors who turned 18 last month can legally use Kalshi or Polymarket and start betting on NBA outcomes, election results, or whether Jesus Christ returns before 2027. Not joking. That's a real market on the platform, per reporting from The Toronto Star.

The Data

New academic research analyzing 588 million trades on Polymarket found that profits were concentrated among a tiny slice of top traders. The other 69% of users lost money, according to The Toronto Star's coverage of the AP report by Kaitlyn Huamani.

Nearly seven out of ten people who use this platform walk away with less money than they started with.

The Marketing Is Deliberate — and It's Working

When Rory McIlroy won the Masters, Kalshi posted on Instagram: "Wait he's goated." When NBA star Damian Lillard injury footage went viral, Polymarket posted: "The league is cooked."

This is not accidental language. According to AP reporting republished by The Washington Post, these companies are running systematic social media campaigns designed to speak the language of people under 25. The memes are the funnel. The platform is the conversion point.

Once users are in, the apps keep them hooked through gamification — the same psychological toolkit used by slot machines and mobile games. CNN documented one 18-year-old named Andrew (last name withheld) who took a $500 credit card cash advance to bet on tennis matches at a Starbucks for six hours. He turned it into $2,200. Then he lost it all trying to withdraw at 3 a.m. when the system threw an error, and he kept betting instead.

"I didn't know what to do. I started spiraling," Andrew told CNN. "In the moment, you're just going, going, going. It's like tunnel vision."

What the Experts Are Saying

Dr. Timothy Fong, addiction psychiatrist and co-director of the UCLA Gambling Studies Program, told AP that the "velocity of gambling" combined with "frictionless" access is a dangerous combination — especially for users under 21, whose brains are still developing impulse control.

"The adults in the room are not taking the fact this is meant to be an adult activity seriously," Fong said. "So when adults don't take it seriously, why would the kids?"

Kalshi says it has safeguards for vulnerable users and complies with all applicable laws, per CNN. What those safeguards actually are? Not specified in detail.

What the NYT Got Right — and What Everyone Is Still Missing

The New York Times correctly noted that the Rahman insider trading arrest "raised concerns that the issue may dent momentum in the fast-growing sector." Fair enough.

But most coverage — left AND right — treats the Google case as the scandal and the age loophole as a sidebar. One engineer allegedly cheating the market is a crime story. Seventeen million Americans potentially being funneled into an unregulated gambling product through a CFTC classification trick is a policy issue that deserves more attention.

The CFTC, which regulates these platforms as financial exchanges, has shown little urgency on the age issue. Congress has shown little urgency. The platforms are expanding.

The Bottom Line

If it looks like gambling, functions like gambling, creates addiction like gambling, and ruins finances like gambling — calling it a "prediction market" doesn't change what it is.

The industry's argument is that these are legitimate financial instruments involving skill and research. Fine. So explain why 69% of users lose money and why the marketing strategy is Instagram memes targeting people who still live with their parents.

Parents should know this is happening. Regulators should take notice. And Congress should close the loophole — not because prediction markets are inherently evil, but because letting 18-year-olds bet their credit card cash advances on NBA games while calling it "investing" is difficult to justify when it costs real people real money.