Verdict: Legit — but watch out for fakes

Is Kreo Bot Safe
or a Scam?

The real KreoPoly is legit. Non-custodial, Gnosis Safe wallets, no withdrawal access. But Telegram is full of fake bots using names like "KreoBot", "KreoPolymarket", "KreoPoly2" — those are scams.

The only official bot is @KreoPolyBot. Full stop.

⚠️

There are fake Kreo bots on Telegram. Don't use them.

Scammers create bots with names almost identical to KreoPoly. They look real. Some even copy the exact interface. They will take your deposit and disappear.

The only official bot:
@KreoPolyBot ✓ Official
Known fake names to avoid:
@KreoBot @KreoPolymarket @KreoPoly2 @KreoCopyBot @KreoPolyBot2 @KreoTradeBot @TheKreoBot Any name with "Kreo" that is NOT @KreoPolyBot

How to verify you're using the real bot

  1. 1
    Only open links from kreopoly.app

    Every link on this website goes directly to t.me/KreoPolyBot. If you found a bot link somewhere else, don't use it before checking the username exactly.

  2. 2
    Check the exact username in Telegram

    Open the bot's profile in Telegram. The username must be exactly @KreoPolyBot — no extra letters, numbers, or underscores. One character difference means it's fake.

  3. 3
    Never send funds to a wallet someone gave you

    The real KreoPoly generates your wallet inside the bot automatically. If anyone tells you to send USDC to a specific address they provide — that's a scam.

  4. 4
    Admins will never DM you first

    KreoPoly team members never send unsolicited private messages asking for funds, seed phrases, or "account verification." If someone DMs you claiming to be Kreo support — it's a scammer.

Security model

Why your funds are protected

Four reasons KreoPoly is safe to use — not marketing claims, actual technical architecture.

🔒

Non-custodial by design

KreoPoly never holds your funds. Your USDC sits in a smart contract wallet that you own. The bot is a delegate — it can place trades, but it cannot send money out of your wallet to any external address.

🛡️

Gnosis Safe wallets

Your wallet is a Gnosis Safe — the most battle-tested smart contract wallet in crypto. It holds over $100 billion across the industry. KreoPoly gives the bot limited trading permissions only. Withdrawals require your direct action.

🔑

Keys in secure enclaves via Privy

Private keys are generated and stored inside hardware-level secure enclaves, powered by Privy. They're never stored in plaintext. Not on KreoPoly servers. Not on Privy servers. Not anywhere readable.

🌐

Funds survive if Kreo shuts down

Everything is on-chain. If KreoPoly stopped existing tomorrow, your USDC would still be sitting in your wallet on Polygon. You can always access it directly through any compatible wallet interface.

⚙️

You set the risk limits

Daily spend caps, max spend per market, stop losses, take profits — you control what the bot does and how much it can spend per trade or per day. Nothing happens outside the limits you set.

👁️

Every trade is on-chain and visible

All trades go through Polymarket's smart contracts on Polygon. You can verify every transaction on Polygonscan. There's no black box — every copy trade, every position, every withdrawal is publicly auditable.

How it works

The actual security architecture

If you want to understand what "non-custodial" and "Gnosis Safe" actually mean in practice, read this.

Gnosis Safe

What is a Gnosis Safe wallet?

Gnosis Safe (rebranded to Safe) is a smart contract wallet. Instead of a regular wallet controlled by one private key, it's a contract on Polygon that can have multiple authorized signers and delegates with different permission levels.

KreoPoly gets added as a "module" with specific trading permissions — it can interact with Polymarket contracts to buy and sell prediction shares. That's it. The contract doesn't give KreoPoly the right to transfer USDC to an arbitrary address.

This is the same architecture used by DAOs, protocols, and funds managing hundreds of millions of dollars. It's not a new concept — Gnosis Safe has been audited dozens of times since 2018.

Privy

What does Privy do with your keys?

When you start the bot, Privy generates a private key for you inside a secure enclave — a hardware-isolated memory region that even the operating system can't read. The key never leaves that enclave in plaintext.

Privy is used by apps like Blackbird, Nifty Island, and dozens of other consumer crypto products. It's not a random startup — it has publicly audited security infrastructure.

The practical result: even if KreoPoly's servers were compromised, an attacker wouldn't get access to raw private keys. The keys are in hardware they can't reach.

Withdrawals

How do withdrawals work?

You initiate withdrawals inside the bot via /wallets. You choose the destination address and the amount. KreoPoly processes it from your Gnosis Safe wallet to wherever you point it.

The bot cannot auto-withdraw. There's no "drain wallet" function accessible to KreoPoly. The withdrawal flow requires your active input every time.

What if Kreo disappears?

Your funds don't depend on KreoPoly

This is the key property of a non-custodial setup. If KreoPoly shut down, got hacked, or just went offline, your USDC.e on Polygon is still yours. It's sitting in a Gnosis Safe contract that exists independently of KreoPoly's servers.

You can access it using Safe's own interface at app.safe.global, or any other tool that supports Gnosis Safe wallets on Polygon. No support ticket needed. No waiting period.

Permissions

What the bot can and cannot do

Concrete list. No ambiguity.

What it CAN do

  • Buy prediction shares on Polymarket
  • Sell prediction shares on Polymarket
  • Trade on Kalshi markets
  • Place limit orders at set prices
  • Execute stop losses and take profits you configured
  • Show your positions and P&L
  • Track wallets you added to the tracker
  • Send you notifications about trades

What it CANNOT do

  • Withdraw USDC to an external address without your action
  • Access your Telegram account or messages
  • Read or export your private key
  • Trade above your daily spend cap
  • Change your wallet's ownership
  • Transfer funds to another KreoPoly user
  • Spend more than the limits you set per task
  • Access funds if KreoPoly's servers go offline
FAQ

Security questions answered

The real KreoPoly (@KreoPolyBot) is not a scam. It's been running since 2024, has processed millions in trades on Polymarket and Kalshi, and uses Gnosis Safe wallets — meaning the bot genuinely cannot steal your funds. What IS a scam problem is fake bots. Telegram has dozens of impersonator bots copying the KreoPoly name. Always verify you're talking to @KreoPolyBot exactly before depositing anything.

Check the Telegram username exactly. It must be @KreoPolyBot — no extra letters, no numbers at the end, no underscores. Open the bot's profile in Telegram and confirm. The safest way is to only use links from this website (kreopoly.app), which all point directly to the verified bot.

No. The bot's permissions are limited to trading on Polymarket and Kalshi. It cannot call a transfer function on your USDC to an arbitrary address. Gnosis Safe's architecture enforces this at the smart contract level — it's not just a policy, it's code.

No. KreoPoly generates a brand new wallet for you when you start the bot. You never import an existing wallet. Never share a seed phrase. The new wallet is yours, generated in a Privy secure enclave.

A server breach would not expose private keys — they're stored in Privy's secure enclaves, not on KreoPoly's servers. An attacker who compromised KreoPoly's backend would not have the ability to drain wallets. The worst realistic outcome in such a scenario would be unauthorized trades, not fund theft.

Polymarket runs on audited smart contracts on Polygon. It has processed billions in trading volume since 2020. Like any DeFi protocol, smart contract risk exists — but Polymarket is one of the most audited prediction market systems in existence. Kalshi is a CFTC-regulated exchange operating in the US.

The minimum trade size is $1. There's no minimum deposit — you can fund it with $5 or $10 to get a feel for how it works before committing larger amounts. KreoPoly itself recommends only depositing amounts you are comfortable with, given that prediction market trading carries real financial risk.

Open /wallets in the bot, press Withdraw, enter your destination address on Polygon (or another chain via the built-in bridge), choose your amount, and confirm. Withdrawals process to whatever wallet you specify. No approval needed from KreoPoly's team.

No. Telegram bots only receive messages sent directly to them. KreoPoly cannot read your other chats, group conversations, or private messages with other people. It only sees what you send to @KreoPolyBot specifically.

Legit proof

What the real KreoPoly actually does

A scam doesn't build this. Here's the full feature set of the official bot — documented directly from the platform.

📋

Copy Trading with full control

Pick any Polymarket or Kalshi wallet to copy. Set your own buy size — fixed amount, exact mirror, percentage-based, or portfolio-weighted. Add stop losses and take profits per trade. The bot copies buys, sells, or you can counter-trade and invert direction.

Auto Trade on 5m and 15m markets

Automated strategies on crypto price prediction markets. Five presets including "Close Sweep 35s" (activates 35 seconds before close at 70–92¢ odds) and "Safe Close." Needs $5 USDC minimum. Higher risk — suited for experienced traders.

📊

Positions and P&L tracking

See all open, closed, and redeemable positions in one place. Displays shares, current price, initial investment, live profit/loss, and expiry date. Sort by profit, size, or expiration. Filter by wallet or status.

👁️

Wallet Tracker

Track any Polymarket or Kalshi wallet in real time. Get alerts the moment a tracked wallet buys or sells — so you can decide whether to follow manually. Add wallets by address or username, name them, or mass import a list.

🎯

Limit Orders

Set buy or sell orders that only trigger at your chosen price. Useful for entries, take-profits, and stop-losses while you're offline. Set expiration by duration (1h, 24h) or exact Unix timestamp. Cancel single orders or all at once.

💰

Rewards and referral system

Earn 15% of net fees when others copy your trades. Referral commissions across 3 levels: 30–35% on direct referrals, 3% on their referrals, 2% on the level below that. Cashback on your own fees from 5% to 25% depending on tier.

🔗

Multi-chain deposits and withdrawals

Deposit from Polygon, Ethereum, Base, Arbitrum, Solana, or Bitcoin via the built-in bridge. Minimum $1 for trades, $2 for bridging from most chains, $7 from Ethereum and Bitcoin. Withdraw to any chain at any time.

🛡️

Risk management built in

Daily spend cap, max spend per market (tracked separately for YES and NO), stop loss and take profit per execution, price range filters (e.g. only copy trades at 10¢–90¢), slippage control, and one-entry-per-market toggle.

Copy Trading details

Four ways to size your copy trades

This level of customization doesn't exist in scam bots. It takes real engineering.

01

Fixed Buy Amount

Spend the same dollar amount on every trade regardless of what the leader spends. Simple, predictable.

02

Exact Mirror

Copy the leader's exact size. If they put in $50, you put in $50. Good if you trust their conviction fully.

03

Percentage-Based

Buy a fixed % of whatever the leader spends. Set 20% and if they bet $100, you bet $20. Scales with their activity.

04

Portfolio Weighted

Allocates your funds in the same proportions as the trader's portfolio — with a custom multiplier you set.

Satisfied with the answer?
Try it with $5.

Non-custodial. No KYC. Withdraw any time. Start with whatever you're comfortable risking.

Open @KreoPolyBot — Free

Prediction markets carry risk. This is not financial advice. Use at your own risk.