US charges Google security engineer with Polymarket insider trading

Insider Trading Case Ties Google Security Engineer to Polymarket Winnings

OverviewA high-profile insider-trading case has linked a Google security engineer to millions in profits earned through the Polymarket decentralized prediction market. The allegations center on the use of confidential internal data to inform bets on whether specific individuals would appear on Google’s Year in Search lists. The case has been pursued in parallel by federal prosecutors and the Commodity Futures Trading Commission, highlighting how corporate secrets can be exploited in high-risk crypto markets.

Who Is Involved

• The Suspect: Michele Spagnuolo, 36, an Italian citizen residing in Switzerland, employed by Google since 2014.
• The Platform: Polymarket, a cryptocurrency-based prediction market that settles outcomes in stablecoins.
• The Agencies: United States Attorney for the Southern District of New York and the Commodity Futures Trading Commission (CFTC).

What Happened

• Source of Information: Spagnuolo allegedly accessed Google’s internal data tool containing “Year in Search” rankings, flagged as Google Confidential.
• The Scheme: Beginning in October 2025, he used a Polymarket account under the alias AlphaRaccoon to place wagers on whether certain people would appear on Google’s top-trending lists.
• The Data Used: Confidential internal data combined with public Year in Search results, enabling the bettor to predict outcomes with unusually high accuracy across about 25 unlikely events.
• Financial Exposure: The activity involved approximately $2.75 million at risk in total wagers.
• Winnings: After Google released its Year in Search results on December 4, 2025, AlphaRaccoon amassed about $1.2 million in USDC.e winnings.

Financial Flows and Forensic Trail

• On the timeline from December 4 to December 10, 2025, the software reportedly released roughly 3,914,362 USDC.e to the AlphaRaccoon Polymarket account as the markets resolved.
• By December 10, 2025, about 5.045 million USDC.e were sent from the Polymarket account to the wallet address Wallet-0xAf6.
• Forensic tracing linked the AlphaRaccoon account to a payment processor account registered in Spagnuolo’s name and connected to an Italian government identification card.
• After speculation about AlphaRaccoon on Discord and X, the username was removed, leaving a wallet address as the identifying trail.
• Prosecutors say the illicit proceeds moved through multiple cryptocurrency-exchange routes, including services that anonymize or obscure wallet addresses on the blockchain.

Legal Proceedings and Potential Consequences

• The Prosecution: The case is being pursued by federal authorities in New York, with parallel civil action by the CFTC seeking restitution, disgorgement, civil penalties, and trading and registration bans.
• Public Commentary: Officials stylized the case as a warning that corporate insiders cannot monetize confidential information.
• Penalties: Spagnuolo faces a potential maximum of 10 years in prison on a commodities fraud count and 20 years on each of the wire fraud and money laundering counts.

Context and Implications

• By leveraging confidential internal tools in combination with a crypto-markets platform, the case illustrates the dual risk posed by insider information and automated trading ecosystems.
• The handling of proceeds through payment processors and privacy-preserving crypto services underscores ongoing challenges for regulators attempting to unwind cross-border financial crimes in the digital asset space.
• The dual-track legal approach—criminal charges paired with civil enforcement—reflects a broader enforcement pattern aimed at both punishment and deterrence for misuse of privileged information.

Timeline of Key Events

• October 2025: Alleged start of using internal data and the AlphaRaccoon alias to place bets on Polymarket.
• December 4, 2025: Google publicly releases its Year in Search results; initial windfall begins to materialize.
• December 4–10, 2025: Substantial liquidity movements occur as the markets settle.
• December 10, 2025: A notable transfer of funds is executed from the Polymarket account to a designated wallet.
• Post-December 2025: Investigative actions by FBI and prosecutors, with parallel civil actions by the CFTC.

Notes on the Case Narrative

• The central allegation is that confidential, company-specific data was used to inform trading decisions with the aim of securing profits on a market that settled based on the same data.
• The investigation traces the flow of funds and identifies an apparatus for moving illicit gains through the crypto ecosystem, including steps to disguise wallet origins.
• The public record reflects both criminal charges and civil actions as authorities seek remedy and accountability for insider-driven profits in a high-stakes, cross-border context.

Closing ContextThis case sits at the intersection of corporate confidentiality, predictive markets, and cryptocurrency-based finance. It demonstrates how insider information, when combined with modern trading venues, can generate significant profits but also trigger substantial legal risk and regulatory scrutiny. The outcome of the proceedings will likely influence how enterprises guard sensitive data and how regulators monitor hybrid financial ecosystems that blend traditional information advantages with decentralized platforms.