The Kentucky Attorney General's office named three operators in a single 2026 civil enforcement filing: Kalshi, Polymarket, and Virtual Gaming Worlds (VGW). The legal theory is that event-contract markets and sweepstakes casinos, regardless of how they brand themselves at the federal level or in their terms of service, meet Kentucky's statutory definition of illegal gambling under KRS Chapter 528. None of the three operators holds a Kentucky gaming license, because Kentucky does not issue commercial online gaming licenses to begin with. That is on the public record. The structural question this filing forces is no longer whether the federal CFTC designation insulates a prediction market from state action.

The question is what each operator's own public-record disclosures say about the scope of their U.S. exposure, and whether the gap between those disclosures and the marketing surface is the gap a state AG was always going to walk into.

What did the Kentucky Attorney General actually file?

The Kentucky AG filed a civil action under the Commonwealth's gambling statute against three named defendants. We could not pull the specific complaint paragraphs, the docket number, or the relief schedule into our dataset, so we restrict our reading to the structural shape that the AG's office has signalled in its public communications and to the statutory frame the filing necessarily rests on.

The shape is familiar. It is the same shape the UK Gambling Commission used in its £17m regulatory settlement with Ladbrokes Coral in August 2022, which named specific failures rather than abstract risk. State AG filings tend to follow this register: a named operator, a named statutory provision, a named class of harmed resident, and a remedy schedule that asks for disgorgement plus an injunction. The Kentucky filing reads as that template applied to three operators who, until 2026, treated state-level enforcement as a manageable cost of customer acquisition.

What it is not, on the public record, is a federal preemption case in a state court. The AG sidestepped that fight by pleading under state law alone.

Why is Kalshi being sued if the CFTC regulates it?

Because the CFTC regulates derivatives, and the Kentucky AG is arguing that what Kalshi offers Kentucky residents on specific contracts is not a derivative for state-law purposes. It is a wager on a contingent outcome with a fixed payout. KRS Chapter 528's definition of gambling does not contain a federal-designation safe harbor.

This is the same structural argument the AGs of New Jersey and Massachusetts have surfaced in their own filings in 2024 and 2025, and it is the argument Kalshi's federal-court litigation strategy has been built to deflect. The deflection works at the federal level. It is materially weaker at the state level, where the question is whether the offering, as marketed and as accepted by Kentucky residents, meets the state statute.

Kalshi's CFTC designation is not in dispute. The AG's office is not asking the Commission to revoke anything. It is asking a state court to enjoin a state-law harm.

Polymarket's public posture, on its own marketing surface, is that U.S. residents are blocked from its main markets and routed to an information-only product. The AG's filing asserts this geofence is not, in operation, what it claims to be on the terms-of-service page.

We could not pull the specific evidentiary exhibits the Kentucky AG attached to the complaint into our dataset. What we can say is that geofence-evasion has been the central factual question in every state action against an offshore prediction market since 2022, and that operators who rely on a TOS-level prohibition without a transactional control layer have lost this question in three U.S. jurisdictions on the public record.

The Polymarket filing forces a documentary cross-reference. Polymarket's public disclosure says U.S. residents are excluded. The AG's complaint says Kentucky IP addresses transacted on the platform. Both are statements on the public record. Reconciling them is the work the court will do.

The geofence is open during business hours. It was not always closed during ours.

What does VGW disclose about its sweepstakes model?

VGW operates a dual-currency sweepstakes model in which one currency cannot, by the platform's own terms, be redeemed for cash, and the other can. The legal theory of the model rests on the proposition that the cash-redeemable currency is awarded as a sweepstakes prize and not purchased as a wager.

The Kentucky filing reads this model the way state AGs have started reading it across U.S. jurisdictions in 2025 and 2026: as a contract of adhesion that, in operation, looks indistinguishable from an online casino to the resident playing it. We could not pull VGW's 2026 disclosure filings into our dataset to cross-reference what the company tells its own investors about U.S. state-law risk, but the structural posture is consistent with how unlicensed iGaming-adjacent operators have been characterised in prior state enforcement.

The contrast with a fully-licensed posture is sharp. FanDuel holds full-license tier-1 permits in 22 U.S. states and is supervised by, among others, the New Jersey Division of Gaming Enforcement. VGW operates in Kentucky without a license because no licensed channel exists, and the AG is now arguing that absence is the harm.

How does this compare to the New Jersey and Massachusetts actions?

The shape is similar. The scope is broader. New Jersey and Massachusetts have moved against prediction markets and sweepstakes operators separately, on separate dockets, and on narrower factual records. Kentucky bundled three operators into one civil filing.

We could not pull the New Jersey DGE's 2025 prediction-market correspondence or the Massachusetts AG's 2024 sweepstakes inquiry into our dataset at the granularity needed to map paragraph-to-paragraph differences. What we can do is read the structural posture. The New Jersey DGE register is a known instrument and the office publishes its enforcement activity at the public register. Kentucky has no equivalent register because Kentucky has no commercial igaming regulator. The AG's office is doing the work an igaming regulator would otherwise do, and it is doing it with the only tool it has: a civil action under the criminal gambling statute, brought on the civil side for injunctive relief.

That is a structurally weaker tool than a regulator's licence-conditions register. It is also a structurally broader one, because it does not require the defendants to hold a licence the AG can suspend.

What enforcement mechanism is Kentucky relying on?

KRS Chapter 528 — the Commonwealth's criminal gambling chapter — provides the substantive definition. The AG's office is using it on the civil side, seeking injunctive relief, disgorgement, and per-transaction statutory penalties. This is the mechanism Kentucky used in its 2008 domain-seizure action against offshore poker operators, and it is on the public record as the office's preferred lever.

What it lacks, structurally, is a graduated licence-conditions ladder of the kind the UK Gambling Commission operates. The UKGC can fine a UKGC-licensed operator at intermediate severities — £582,120 for Hillside (Bet365) in December 2022, £1.17m for the Flutter UK subsidiary in March 2023 — because the licence itself is the lever the regulator pulls.

Kentucky has no licence to pull. The lever it has is the binary statutory definition of gambling. That binary is the strength of the filing, and it is also why the defendants will fight the definitional question first.

The AG's office is open Monday to Friday. The defendants' market platforms are open seven days a week.

What changed in 2026 that made this filing possible now?

Three things changed, in our reading, none of them in Kentucky. The CFTC's federal-level posture on event contracts hardened through 2025 in a way that made the federal-preemption argument weaker, not stronger, for state-court purposes. The state AG community circulated a model-pleading framework for sweepstakes and prediction-market actions through the second half of 2025. And a sequence of public disclosures from operators — including platform-level acknowledgements of U.S. user activity — moved the evidentiary record from "alleged" to "admitted on the company's own website."

The third point is the operative one. State AGs do not file what they cannot prove. The 2026 filing window opened because the proof became cheap. A screenshot of the operator's own user-base disclosure, a geographic breakdown from a public analytics dashboard, a press-release figure cited in a fundraising round — these are now the evidentiary spine of the case.

We could not pull the specific exhibits attached to the Kentucky complaint, and we flag that gap explicitly. The structural shift is what we can say is on the public record.

What should operators in adjacent licensed markets do this week?

Licensed-market operators — meaning Flutter, Entain, DraftKings, Bet365 in the jurisdictions where they hold full-tier-1 permits — are not the defendants in this filing. They are, structurally, the beneficiaries. A state AG action against three unlicensed operators clears competitive space in the unlicensed adjacent product categories that licensed operators have publicly distanced themselves from.

What the filing changes for licensed operators is the cost-of-disclosure calculus. Flutter's 2024 annual report discloses 5% gray-market revenue exposure on a $14,048m base. Entain's 2024 filing discloses 12% gray-market exposure and reports 88% regulated-markets revenue share on £4,833m. Entain has separately disclosed a £585m DPA settlement with the UK CPS relating to a 2017-sold Turkey-facing subsidiary. The public-record discipline these filings demonstrate is exactly what state AGs are now expecting from every commercial operator with U.S. user activity.

Read the filing. Read the disclosure. Walk the gap. Close it before someone else walks through it.

What this analysis does not cover

This analysis does not cover the criminal-side exposure of the named individuals at Kalshi, Polymarket, or VGW. KRS Chapter 528 is a criminal statute pleaded here on the civil side, and the personal-jurisdiction analysis for individual defendants is materially different from the corporate-jurisdiction analysis we have walked here. That is a separate piece.

It does not cover the federal-court track. Kalshi has historically responded to state-level pressure by seeking federal-court relief on CFTC-preemption grounds. The Kentucky filing will draw a parallel federal-court motion. The outcome of that motion is not predictable from the documents on the public record today, and we will not speculate.

It does not cover the prediction-market product economics. Whether event contracts are economically distinguishable from binary options is a separate analytical question with its own grounding requirements, and merging it into this enforcement piece would dilute both.

And it does not cover the responsible-gambling layer. Kentucky does not operate a state self-exclusion register comparable to GAMSTOP in the UK, where 0.42m registered users sit behind a single registration that binds every UKGC-licensed operator. The absence of that infrastructure is part of why the AG's office is using the criminal statute as a civil remedy. It is also a separate piece.

FAQ

Is the Kentucky AG seeking criminal charges against Kalshi, Polymarket, and VGW?

On the public record so far, the 2026 filing is a civil action seeking injunctive relief, disgorgement, and statutory penalties under KRS Chapter 528. The statute is criminal in nature, but the AG's office is using its civil enforcement authority to pursue the operators in their corporate capacity. We could not pull the specific prayer for relief from the complaint into our dataset; criminal referrals against named individuals would typically be filed separately.

Does the CFTC designation protect Kalshi from state enforcement?

At the federal level, the CFTC designation has been the spine of Kalshi's preemption argument and has produced mixed results in federal court. At the state level, the argument is materially weaker. KRS Chapter 528's gambling definition does not contain a federal-designation safe harbor, and state AGs have been pleading around the preemption question by anchoring on state-law harms to state residents rather than challenging the federal designation itself.

How does Kentucky enforce against operators with no physical presence in the state?

Through the long-arm statute and the doctrine that a transaction with a Kentucky resident creates sufficient minimum contacts for personal jurisdiction. This is the same doctrinal posture every state AG uses against out-of-state online operators. The 2008 Kentucky domain-seizure action against offshore poker sites established the office's willingness to litigate the personal-jurisdiction question. The Kentucky AG's office operates on standard business hours.

Are licensed operators like FanDuel and DraftKings affected by this filing?

Not directly. FanDuel operates as a Flutter-owned brand under full tier-1 licences in 22 U.S. states, and DraftKings operates in 27. Neither holds a Kentucky licence because Kentucky issues none, and neither was named in the Kentucky AG's filing. The structural effect on licensed operators is that the unlicensed-adjacent competitive surface is now under live state-level enforcement pressure, which historically benefits regulated incumbents.

What is a sweepstakes casino, in plain terms?

A platform that uses a dual-currency model — one currency for entertainment-only play, one currency that can be redeemed for cash prizes — to argue that no wager is being placed. VGW's model is the most widely-discussed example. The Kentucky AG's filing is arguing that the model, as operated in practice, meets the state's statutory definition of gambling regardless of the contractual framing on the operator's terms-of-service page.

Will this filing affect prediction-market access for users outside Kentucky?

Possibly, indirectly. Prediction-market operators tend to respond to high-profile state actions by tightening their geofences across all U.S. jurisdictions rather than only the one filing the complaint. We could not pull operator-level statements responding to the Kentucky filing into our dataset, but the historical pattern after a state AG action is a platform-wide tightening, followed by a slow re-opening as the litigation resolves.

Where can I read the Kentucky complaint directly?

The complaint is filed in Kentucky state court, and the docket is publicly accessible through the Commonwealth's court records system. The Kentucky Attorney General's office also publishes press releases and complaint summaries on its own website at the time of filing. We recommend reading both the complaint and the AG's press summary; the two documents serve different communicative purposes and the gaps between them are often where the litigation strategy lives.