The DOJ argues the Commodity Futures Trading Commission has exclusive jurisdiction over event contracts under the Commodity Exchange Act, making Utah's criminal statute preempted the moment it reaches a CFTC-designated contract market. Because Kalshi has held DCM status since 2020 — the same regulatory tier as CME or ICE — the federal government is asking a federal court to enjoin the state prosecution outright rather than letting Kalshi fight preemption alone.
Utah's position is that a contract paying out on 'will the Jazz beat the Nuggets?' is gambling by any plain reading of the statute, and Utah's total ban — no lottery, no tribal casinos, no pari-mutuel — leaves no carve-out for wrapping a wager in a derivatives label. They escalated by charging Mansour and Lopes Lara personally as third-degree felonies, signaling that CFTC registration does not immunize the humans running the operation inside Utah's borders.
The editorial flags two anomalies: the federal government almost never sues a state to block a criminal prosecution of a private company — it normally files amicus briefs and lets the defendant carry the preemption fight — and Utah's charges reach past the LLC to name the human co-founders. Together these make the case a bellwether for whether federal financial-markets regulation can be criminally overridden by individual states, with implications for every builder operating a CFTC-registered pl
On October 29, 2026, Utah state prosecutors filed third-degree felony charges against Kalshi, CEO Tarek Mansour, and co-founder Luana Lopes Lara for running an unlicensed gambling operation inside the state. Utah bans all gambling — no lottery, no tribal casinos, no pari-mutuel betting, nothing — and the state's position is that Kalshi's sports event contracts ("will the Jazz beat the Nuggets?") are gambling by any plain reading of the statute. Third-degree felonies in Utah carry up to five years per count.
Four days later, the U.S. Department of Justice sued the state of Utah in federal court, asking for an injunction to block the prosecution. The DOJ's argument is that the Commodity Futures Trading Commission has exclusive jurisdiction over event contracts under the Commodity Exchange Act, and Utah's criminal statute is preempted the moment it tries to reach a CFTC-designated contract market. Kalshi is a CFTC Designated Contract Market — the same regulatory status as CME or ICE — and has been since 2020.
The filing is unusual on two fronts. First, the federal government rarely intervenes directly to block a state criminal prosecution of a private company; it usually files amicus briefs and lets the defendant litigate preemption on their own dime. Second, the charges name the co-founders personally. Mansour and Lopes Lara are not accused of touching the contracts themselves — they're charged as principals of the corporate entity. Utah is explicitly going after the humans, not just the LLC.
The surface story is a gambling law fight. The real story is whether federal financial-markets regulation can be criminally overridden by individual states, and what that means for every builder operating a CFTC-registered platform.
Kalshi has been winning this argument in civil court for two years. In 2024 it beat the CFTC itself in *KalshiEX v. CFTC* when a federal judge ruled the agency couldn't block Kalshi's election contracts. In 2025 it won preliminary injunctions against Nevada, New Jersey, and Massachusetts gaming regulators who tried to issue cease-and-desist letters. The pattern is consistent: when the question is framed as federal preemption of state civil gaming authority, Kalshi wins. Utah's innovation is to skip the civil regulator entirely and go straight to the criminal docket, where preemption doctrine is murkier and the personal stakes are much higher.
The stakes ripple outward. Polymarket re-entered the U.S. market in July 2025 after acquiring QCX, a small CFTC-registered exchange, specifically to get under the federal umbrella. Robinhood's prediction market, launched in March 2025, runs on Kalshi's rails. DraftKings and FanDuel have been quietly building event-contract products on the theory that CFTC licensure is a get-out-of-state-gaming-law card. If Utah's criminal theory holds, that entire architecture collapses — not because the products become illegal everywhere, but because operating them becomes a personal felony risk in any state that chooses to criminalize them.
The technical mechanism matters here. Kalshi contracts settle in cash against observable outcomes — exactly the same structure as a CME futures contract on wheat or oil. The legal question isn't whether a sports contract feels like gambling to a Utah prosecutor; it's whether the Commodity Exchange Act's language — "exclusive jurisdiction" over "accounts, agreements... and transactions involving swaps or contracts of sale of a commodity for future delivery" — swallows event contracts by design. Kalshi's position, backed now by the DOJ, is that Congress made this call in 2010 when it rewrote the CEA post-Dodd-Frank, and Utah doesn't get to unmake it with a state statute.
Community reaction on Hacker News split along predictable lines. The libertarian-leaning thread argued states shouldn't be able to criminalize federally-licensed activity — the same preemption logic that protects nationally-chartered banks from state usury law. The counter-thread pointed out that gambling has always been a core state police power, going back to the 10th Amendment, and that letting the CFTC paper over state criminal law via a licensing decision would hand federal agencies a de facto veto over state criminal codes. Both sides are correct that this is the actual legal question, which is why it will almost certainly reach the Supreme Court.
If you're building on top of a prediction market API — and a surprising number of fintech and sportsbook-adjacent startups now are — you need to know three things.
First, the geofencing question just got real. Kalshi, Polymarket, and Robinhood currently block Utah IPs as a defensive measure, but the Utah complaint alleges contracts settled for Utah residents regardless. If you're integrating event contracts into a consumer product, your KYC pipeline needs to verify state of residence at *account* level, not just IP at *trade* level. VPN detection is table stakes; address verification against a known-state-of-residence list is not optional anymore.
Second, personal liability is on the table. The Utah filing against Mansour and Lopes Lara is the template. If you're a founder or officer at a company touching CFTC event contracts, assume at least one state will try to charge you personally within 18 months, and get D&O coverage that explicitly covers criminal defense costs before you need it. Most standard D&O policies exclude intentional violations of criminal statutes, and the carriers will fight the trigger. Negotiate the carve-out now.
Third, if you're on the API consumer side, read your terms of service for indemnification clauses. Kalshi and Polymarket's developer agreements both pass legal risk downstream — if your app lets a Utah resident trade and the state comes after the chain, you may be on the hook. The incumbents can afford this fight. You cannot.
The federal court in Utah will rule on the DOJ's injunction request within 60 days, and whichever way it goes, the losing side appeals to the Tenth Circuit. A circuit split is nearly guaranteed — Nevada and Massachusetts are watching, and both have signaled they'd follow Utah's criminal theory if it survives review. The Supreme Court will almost certainly hear this inside two years, and the answer will define the regulatory map for prediction markets, synthetic sports products, and arguably any CFTC-licensed activity that looks like gambling to a state attorney general. For builders in the space, the short version is: your product is legal, your federal license is real, and a Utah prosecutor can still indict you by name. Plan accordingly.
I'm not sure specifically about the moral crusade against Kalshi and Polymarket, but I am glad to see that at least one state is serious about its sovereignty and is willing to go to the mat with criminal charges. Utah 100% has a right to enforce this and I hope they are successful. And taking
Wonder how proxies/VPNs play into this, since Utah was recently in the news about an age verification law that basically said you're liable if anyone physically in Utah accesses a restricted site.
This is outrageous! They're tech founders! Penny-ante things like "the law" don't apply to them!Somebody needs to tell Utah it needs to change its laws to adapt to their business plan, ASAP.
kalshi and polymarket are quite obvious gambling sites. any pedantic arguments to the contrary are strictly financial chaff to enhance their operating margins until the regulations finally catch up.they were never an innovating marketing play... it was the culmination of a gambling company committin
Top 10 dev stories every morning at 8am UTC. AI-curated. Retro terminal HTML email.
Kalshi ran a series of Youtube videos last year that were deepfakes of athletes saying really outrageous stuff. It was hilarious. It was also deeply provocative and exploitative. It showed exactly who they are... people who will test the edge of decency.