Prediction Market Scams Give Russian-Language Traffer Teams a Scalable Affiliate Model
Prediction-market scams are giving established fraud crews a ready-made way to sell urgency and apparent market activity to victims. Insikt Group says three Russian-language traffer teams—AtlasCore, PolyFucked and Magnetic Team—have adapted affiliate-fraud operations to imitate platforms such as Polymarket and Kalshi. Their services bundle the websites, payment systems and victim-management tools affiliates need to launch campaigns, while the teams retain control over how deposits and withdrawals work.
The model’s appeal is operational. Affiliates don’t need to build a trading interface or assemble cryptocurrency infrastructure themselves. They can use prepared sites and administrative panels, then draw on technical support and promotional guidance. When public interest shifts to a new event or product, a mature fraud operation can change its pitch without developing an entirely new scheme.
Scam platforms built to control the outcome
The sites mimic prediction-market features, but the apparent trading environment is controlled by the operators. Insikt Group found mechanisms for fabricating market activity, setting victims up to win or lose, and blocking withdrawals with artificial restrictions or fees. The campaigns can also collect sensitive identity and payment details.
Magnetic Team advertises more than 3,000 simulated traders across over 5,000 markets. Its code includes configurable withdrawal-blocking explanations, forced-loss controls and pools containing as many as 20,000 deposit wallets per blockchain. AtlasCore’s administrative settings likewise allow operators to force wins or losses and apply withdrawal restrictions to individual victims.
The teams’ affiliate terms show how they distribute the proceeds. AtlasCore advertises affiliates a 70% to 80% share of net profits. PolyFucked offers at least a 60% revenue share, while Magnetic Team advertises a base share of 70% of victim deposits.
Reported figures point to scale, with limits
AtlasCore’s Telegram posts claimed about $10.97 million in deposits across its scam offerings from May 2 through September 18, 2026, with most attributed to prediction markets. PolyFucked advertises roughly $2.4 million in quarterly turnover. These numbers come from the operators’ own reporting and have not been independently verified, so they indicate what the teams claim rather than confirmed proceeds.
Insikt Group identified more than 100 unique domains and subdomains linked to the three operations. The set includes administrative infrastructure and scam websites that the teams or their affiliates likely operate. That breadth fits an affiliate model in which a central service supplies tools while separate operators run individual campaigns.
AI shortens the path from idea to campaign
Insikt Group observed AI supporting several parts of these operations, including platform development, content production, social engineering and communication with victims. AtlasCore and PolyFucked provide guidance for AI-generated promotional material, including synthetic influencers and branding. All three advertise or provide AI-assisted victim support. Magnetic Team’s source code also contains signs of likely AI-assisted development, though Insikt Group has not confirmed that assessment.
The prediction-market theme is useful to fraud crews because it brings together cryptocurrency, speculative activity, fast-moving news and social discussion. A convincing imitation can borrow those familiar signals to appear credible and press users to act quickly. Here’s the practical takeaway: fraud teams can reuse established infrastructure, adapt the presentation to a rising trend and automate parts of the work. As these operations gain visibility, Insikt Group expects other traffer teams may test the same theme or repurpose the tools for related scams.
AtlasCore’s affiliate pitch
Insikt Group found AtlasCore’s affiliate program advertised on cybercriminal forums in May 2026. The team’s forum thread, posted under the name “AtlasCore,” first appeared on May 15; a user called “AtlasCorp” advertised the program on a top-tier forum on May 28. Its offers include prediction-market scams alongside more familiar cryptocurrency exchange and casino schemes.
