Fraudsters Launch AI‑Powered Prediction‑Market Scams, Offering Affiliate‑Ready Platforms
What Happened — Since spring 2026, the Insikt Group has tracked several Russian‑language traffer teams—AtlasCore, PolyFucked, and Magnetic Team—who have built turnkey “prediction‑market” fraud services. The actors provide fully functional market‑style websites, admin panels, crypto‑payment gateways, victim‑management tools, and promotional guidance to affiliates. By mimicking legitimate platforms such as PolyMarket and Kalshi, they lure victims into depositing cryptocurrency, then manipulate outcomes, impose artificial withdrawal fees, and harvest personal and payment data. AI is used to accelerate platform development, generate convincing content, and automate social‑engineering outreach. Reported deposit claims exceed $13 million across the three groups, though the figures are self‑reported by the threat actors.
Why It Matters for Trust & Control Assurance — The ecosystem demonstrates a supply‑chain style fraud model that bypasses traditional vendor vetting. Organizations that partner with affiliates, payment processors, or crypto‑enabled services must treat these “as‑a‑service” fraud kits as third‑party risk and apply continuous monitoring to maintain a defensible control posture.
Who Is Affected — Financial‑services firms, cryptocurrency exchanges, affiliate‑marketing networks, and any platform that enables user‑driven speculative trading.
Recommended Actions
- Perform enhanced due‑diligence on any affiliate‑oriented payment gateway or marketing partner.
- Deploy transaction‑monitoring rules that flag rapid deposits followed by withdrawal restrictions or unusually high fees.
- Incorporate AI‑driven anomaly detection to surface synthetic market activity.
- Document third‑party oversight evidence for audit readiness. Source: Recorded Future
Technical Notes – The threat actors leverage AI for rapid code generation, content creation, and social‑engineering scripts. No specific software vulnerability is disclosed; the risk stems from the business model and the use of cryptocurrency payment infrastructure. Source: Recorded Future