In the summer of 2021, JPMorgan Chase paid $175 million for a startup called Frank, whose founder told the bank it had 4.25 million customers. It had fewer than 300,000. When the bank’s due-diligence team asked to see the user list, Charlie Javice paid a mathematics professor to manufacture one: millions of synthetic names with plausible email addresses, invented on deadline for about $18,000.1 The fraud surfaced only after the acquisition closed, when a marketing campaign to the “customer base” bounced. In September 2025 she was sentenced to 85 months in federal prison, with restitution set at $287.5 million.2
Two years after the Frank deal, the U.S. Securities and Exchange Commission described an even purer specimen of the genre. Tingo Group, a fintech with Nigerian operating subsidiaries, had reported $461.7 million of cash in its accounts. The SEC’s complaint put the actual combined balance at less than fifty dollars, and described “a brazen scheme using phony records and fictitious entities” to make the companies “appear highly profitable.”3
The direct answer to the question this piece exists to answer: self-reported traction is no longer a credible basis for investment decisions, and the fix is a two-layer one: cryptographic attestation that makes a founder’s documents tamper-proof, plus confirmation from the human counterparty who signed them. Neither layer works alone. Together they convert traction from a claim into an asset.
Key takeaways
- Founders fabricated the exact metric their category rewards: users (Frank, IRL), revenue (HeadSpin), cash (Tingo). Standard diligence caught none of them before money moved.
- In Sub-Saharan Africa the verification gap is structural: credit bureaus cover 11 percent of adults versus 66.7 percent in high-income economies, and the IFC ties much of a $331 billion regional MSME financing gap to missing verifiable records.
- Verification pays a measurable premium wherever it is installed: roughly half a percentage point off borrowing costs for audited firms, 8.1 percent price premiums for verified sellers, a ~150-fold collapse in onboarding costs in India.
- Cryptography alone cannot close the gap. By the W3C’s own standard, “verifiability of a credential does not imply the truth of claims encoded therein.” The truth layer is human.
Why doesn’t due diligence catch fabricated traction?
The uncomfortable answer is that diligence is artisanal, and artisanal does not scale. The canonical study of venture practice, Gompers, Gornall, Kaplan, and Strebulaev’s survey of nearly nine hundred institutional VCs, found that investors spend an average of 118 hours on due diligence and call ten references for each deal they close.4 That cost structure was built for large checks in information-rich markets. Spread it over a $50,000 angel check in Kampala and the arithmetic stops working entirely; for most early-stage deals in emerging markets, the verification actually applied to a founder’s numbers is a fraction of those hours, or none.
And the failure rate at the top of the market shows what happens even when the hours are available. JPMorgan, a bank with effectively unlimited diligence resources, bought Frank. SoftBank led a $170 million round into the social app IRL on the strength of 12 million claimed users; a board investigation later concluded 95 percent of them were bots.5 HeadSpin’s founder reported $80 million of annual recurring revenue that was actually about $10 million, supported by invoices he fabricated himself; the board cut the company’s valuation from $1.1 billion to $300 million.6 These were not unsophisticated victims. They were sophisticated victims of an information architecture in which the only source for a startup’s numbers is the startup.
Africa’s ecosystem has lived its own version. Ghana’s Dash raised a record $32.8 million seed and claimed, within months, to have processed $1 billion in transaction volume; internal examinations later found inflated user numbers and roughly $25 million unaccounted for, and the company shut down.7 The response from the region’s investors was telling. “Enhanced both qualitative and quantitative due diligence will need to be done even at the earlier stages,” Norrsken22’s Lexi Novitske told TechCrunch7. It is a sentence that concedes the current system verifies too little, too late. PwC’s global economic crime survey suggests the base rate the system is up against: 41 percent of executives report fraud at their own companies within the past twenty-four months.8
The pattern across every case is structurally identical. The founder did not lie about something peripheral. Each fabricated the specific metric their category rewards: users for a consumer app, ARR for enterprise software, cash for a fintech. Self-reported traction fails precisely where it matters most, because that is where the incentive to inflate is strongest.
What happens to founders when nothing can be verified?
Here is where the story stops being about fraud and becomes about infrastructure, because the founders who pay the highest price for unverifiable claims are the honest ones.
Verification in rich markets rides on rails most participants never notice: near-universal legal identity, deep credit bureaus, searchable registries, audited-statement norms half a century old. Those rails are thin to absent across Sub-Saharan Africa and South Asia. The World Bank estimates that more than 800 million people still lack official identification, concentrated in exactly those regions.9 FounderWise operates in Sub-Saharan markets where private credit bureau coverage stands at 11 percent of adults, against 66.7 percent in high-income OECD economies.10 A founder in Frankfurt inherits a credibility apparatus at birth. A founder in Kampala must build one by hand, deal by deal.
The cost of that missing layer has a number. The IFC puts the financing gap for formal micro, small, and medium enterprises at $5.2 trillion globally, with roughly $331 billion of it in Sub-Saharan Africa. Its diagnosis is informational, not moral: financial institutions consider these businesses too costly to serve because they “generally lack the financial records, business plans, and assets required for traditional credit assessments.”11
Economics has known the mechanism for four decades. Stiglitz and Weiss showed in 1981 that when lenders cannot distinguish good borrowers from bad, they do not simply charge everyone more. Beyond a point, raising the price selects for worse risks, so they ration instead.12 The result is the cruelest feature of low-information markets, and every East African founder has felt it: unverifiable claims do not get worse terms. They get silence. The deal that dies without feedback, the investor who stops replying, the “we’ll circle back next quarter”: these are not judgments about the business. Often they are the rational response of capital that has no affordable way to check whether the business is what it says it is. The financing gap, seen this way, is not primarily a capital shortage. It is a verification shortage. (We mapped the six structural gaps behind this in The Six Gaps Holding Back Founders in Developing Countries.)
What is verified traction actually worth?
If verification is the missing input, installing it should show up in prices. It does, everywhere researchers have looked.
Start with the oldest verification product in commerce: the audit, which is nothing more than paid third-party confirmation of self-reported numbers. Michael Minnis’s landmark study of private U.S. firms found that lenders charge audited firms significantly less and “place more weight on audited financial information in setting the interest rate.”13 Follow-on work quantifies the discount at roughly 0.47 percentage points on the cost of debt.14 Verification is not compliance overhead. It is a discount rate.
Marketplaces tell the same story in cleaner laboratory conditions. In a controlled field experiment on eBay, Paul Resnick and colleagues sold identical goods from a high-reputation verified identity and from new accounts; buyers paid 8.1 percent more to the verified seller.15 On Airbnb, the Superhost badge, a platform-issued verification of past performance, carries a documented price premium.16 Same asset, same description; the verified version is worth more.
Then there is the country-scale natural experiment. India’s Aadhaar-based eKYC cut the cost of verifying a bank customer from roughly $23 to $0.15,17 infrastructure the Bank for International Settlements describes as a deliberate strategy of providing “digital financial infrastructure as a public good.”18 On top of those rails, India’s Account Aggregator framework, consented sharing of verified financial data, had moved roughly ₹42,300 crore (about $5 billion) in loans by March 2024.19 When verification gets cheap, credit markets reorganize around it. That is the precedent East Africa’s capital markets have not yet had, and the one platforms are now racing to build. (On why such platforms matter disproportionately here, see Why Capital Platforms Are Critical for Developing Economies.)
What can cryptography prove, and what can it not?
Cryptography can prove that a document existed, that it has not been altered, and which key sealed it. It cannot prove that the document is true. That limit defines this entire category.
The technology for portable, tamper-proof claims went mainstream while nobody in venture was watching. The signature scheme FounderWise uses to seal documents, Ed25519, is not exotic cryptography; it is the workhorse standardized by the internet’s engineering body in RFC 8032,20 the default key type securing SSH connections to most of the world’s servers,21 and the machinery behind the signed software provenance that npm now publishes for packages downloaded hundreds of millions of times.22 In May 2025 the W3C made Verifiable Credentials 2.0 a full web standard (a common envelope for digitally signed claims23), and the European Union has legally obligated every member state to issue digital identity wallets to its citizens by the end of 2026.24 Identity, software, media, money: every high-stakes domain of digital life has converged on the same architecture. Sign the claim. Log the signature. Let anyone verify.
Founder traction documents (the LOIs, purchase orders, invoices, and contracts that anchor every emerging-market pitch) are among the last high-stakes claims still circulating as unsigned PDF attachments. Applying the standard architecture to them is overdue. But here the argument must slow down and say something most explainers in this category will not.
Cryptography has a hard limit, and the standards bodies state it themselves. The W3C’s specification says, in normative text: “Verifiability of a credential does not imply the truth of claims encoded therein.”23 The Ethereum Attestation Service, infrastructure that has processed over nine million signed attestations, concedes in its own documentation that “the value of an attestation comes from the relative reputation of the entity making the claim.”25 Blockchain engineers call the general form the oracle problem: a system can guarantee the integrity of what is inside it, never the veracity of what came in from the world.26
Call this the Truth Gap. A cryptographic hash of a purchase order proves three things perfectly: this exact document existed at this moment; it has not been altered since; this key attested to it. It proves nothing about whether the purchase order is real. A forged LPO hashes as immutably as a genuine one. Garbage in, cryptographically immortalized garbage out. Any platform that stops at the hash has built a faster pipe for unverified claims. That is why the interesting question was never how do we sign founder documents but who can truthfully confirm them.
How do you close the Truth Gap?
You close it with the oldest fix in finance, made portable: a human confirmation wrapped in a tamper-evident process. Every mature verification institution humanity has built is, at its core, exactly that. The notary is a witness whose seal makes the witnessing portable. The audit is a person checking claims against source records; as Minnis showed, lenders literally pay for that human layer.13 The back-channel reference check (calling “the people you find entirely on your own,” as one guide to venture practice puts it27) is how investors already verify founders, ten phone calls and 118 hours at a time.4 The gold standard has always been the counterparty’s word. The problem was only ever cost and portability: a diligence phone call expires the moment it ends, and no one else can reuse it.
This is the gap the Proof Vault and its TRUST Line close, and it is worth being precise about the design. A founder uploads the document (the LPO from a distributor, the supply contract, the signed MOU) and it is sealed with an Ed25519 attestation hash. That is layer one: from that moment, the document cannot be quietly altered, backdated, or swapped. Then the system contacts the human who actually signed it (the customer who issued the purchase order, the partner who countersigned the agreement) through a signed, expiring link, without exposing their contact details to anyone. The signer confirms, in writing: yes, this is real, I stand behind it. That is layer two. The confirmation binds cryptographically to the exact hashed artifact, so what an investor later sees is not a founder’s claim but a counterparty’s confirmation of a tamper-proof document: a back-channel reference call that no longer expires, executed at near-zero marginal cost instead of billable hours. In effect, it is an API for counterparty confirmation in markets where the revenue systems have no API. (Fintech underwriters like Pipe and Capchase already verify revenue by reading it from live billing systems28, but a Kampala distributor’s purchase order flows through no such rail. For those documents, the only oracle is the human who signed.)
FounderWise ranks confirmed proofs by the credibility hierarchy investors actually price: from pre-product signals through soft commitments up to hard commercial evidence. Founders learn, by using the vault, which proofs move capital. FounderWise’s $39 Investor-Readiness System teaches founders where each piece of evidence sits on the credibility hierarchy and what converts it to the next rung. Verification stops being a compliance cost and becomes a fundraising curriculum.
Honesty requires naming what this does not solve. A colluding counterparty can confirm a fake document; signer confirmation raises the cost of fraud from “edit a PDF” to “recruit a co-conspirator willing to put their name to it in writing”. That is a large improvement, not an infinite one. Confirmation also depends on the identity layer beneath it, which is exactly why the maturing of African ID rails (Nigeria’s 130 million digital ID enrollments, Ghana’s single-card KYC mandate, Kenya’s Maisha Namba29) matters to this design: each strengthens the answer to who is this signer, on which is this claim true ultimately rests. No verification system abolishes fraud. The realistic goal is the one audit economics demonstrated: shift the cost of lying high enough, and the price of honesty low enough, that verified claims become the market default.
What should founders, investors, and development partners do now?
Each seat has one move: founders build the verified evidence file before the raise, investors start diligence from counterparty-confirmed claims, and development partners fund the record rails that turn identity investment into credit flow.
Your traction documents are an unpriced asset. An LPO sitting in your inbox earns you nothing; the same LPO, sealed and confirmed by the customer who signed it, is diligence-grade evidence that compounds. Start building the verified file now (before the raise, not during it) and climb the hierarchy deliberately: convert soft commitments into signed commercial documents, then get each one confirmed while the relationship is warm. FounderWise’s free Traction Audit runs 12 questions across 4 categories in about 3 minutes and returns a score out of 100 with your 3 biggest gaps named. Use it to find where your file is thin before an investor does. The audit literature’s half-point discount and eBay’s 8.1 percent premium are the same lesson at different scales: verified parties get better prices. In a market that rations rather than reprices, being checkable is what gets you a price at all.
The 118-hour diligence model neither scales down to seed checks nor reliably catches fabrication, as JPMorgan and SoftBank demonstrated at the top of the market. Document-level counterparty confirmation inverts the workflow: instead of sampling a founder’s claims by phone, you start from the subset of claims a real counterparty has already confirmed against a tamper-proof artifact, and spend your hours on judgment, not verification. For small-check emerging-market investing, where information costs are the binding constraint on portfolio construction, that inversion is the difference between a market you can underwrite and one you must pattern-match, with all the documented bias that pattern-matching carries.
The region’s identity rails are arriving; the record rails are not. Nigeria’s NIN, Ghana’s Card, and Kenya’s Maisha Namba answer who is this person at national scale, but the IFC’s $331 billion gap persists because nothing yet answers is this business’s traction real cheaply enough for capital to act on. India’s sequence (identity rail, then eKYC, then verified-data sharing, then $5 billion in data-driven lending) is the playbook: each layer multiplied the one beneath it. Programs and DFIs allocating toward Uganda and East Africa should treat claim-verification infrastructure as the complement that turns ID investments into credit flow, and weight platforms accordingly.
You are carrying the old model if your data room is a folder of PDFs only you have touched. You are ahead of it if a third party can verify your three strongest commercial claims without calling you.
FAQ
What is verified traction?
Traction evidence (purchase orders, contracts, invoices, LOIs) that has been (1) cryptographically sealed so it cannot be altered and (2) confirmed in writing by the counterparty who signed it, so an investor can rely on it without running independent diligence on each document.
Doesn’t a cryptographic hash already prove a document is real?
No. A hash proves the document hasn’t changed since it was sealed and who sealed it, never whether its contents are true. The W3C’s own standard states that verifiability does not imply truth. Truth requires the counterparty’s confirmation; that is why the human layer exists.
Can’t a founder just get a friend to confirm a fake document?
Collusion remains possible, but it converts solo fraud into a conspiracy requiring a named, identity-verified co-signer, which is a categorically higher legal risk than editing a PDF. Verification raises the cost of lying; it does not abolish it.
Why does this matter more in Africa than in developed markets?
Because the substitutes are missing. Where credit bureaus cover 11 percent of adults and registries are thin, investors ration rather than reprice: honest founders get silence, not tougher terms. Verified documents substitute for the institutional record trail founders elsewhere inherit for free.
Investors stopped believing founder-reported numbers somewhere between Frank and Tingo; the market simply hasn’t finished replacing belief with infrastructure. The founders who win the next decade in East Africa will not be the ones who pitch best. They will be the ones whose claims check out without a phone call, because in a capital market starved of verification, proof is the scarcest asset a founder can own, and the only one that gets cheaper to hold the earlier you start. The decision in front of you fits in a week: pick your three strongest commercial claims, seal them, and ask the people who signed them to confirm them in writing.
FounderWise’s Proof Vault seals your traction documents and routes them to the people who signed them for confirmation: founderwise.io.
Sources & Notes
- U.S. Department of Justice, SDNY, “Former Start-Up CEO Charged In $175 Million Fraud,” justice.gov, April 2023. justice.govPrimary federal charging document; the 4.25M vs under-300K user figures.
- U.S. Department of Justice, SDNY, “Startup CEO Charlie Javice Sentenced To 85 Months In Prison,” justice.gov, September 2025. justice.govPrimary sentencing record; corroborated by CNN Business, 30 September 2025.
- U.S. Securities and Exchange Commission, Press Release 2023-254, “SEC Charges Tingo Mobile Founder, Three Companies with Massive Fraud,” sec.gov, December 2023. sec.govPrimary regulator source; the $461.7M-vs-under-$50 figures quoted verbatim.
- Gompers, Gornall, Kaplan & Strebulaev, “How Do Venture Capitalists Make Decisions?”, Journal of Financial Economics 135(1), 2020; summarized in NBER WP 27824. nber.orgPeer-reviewed survey of 885 institutional VCs; the 118-hours and ten-references benchmarks.
- TechCrunch, “Founder behind social media app IRL charged with fraud,” July 2024. techcrunch.comReports the SEC complaint; 12M claimed users, 95% bots.
- CFO Dive, “HeadSpin founder Lachwani sentenced to 18 months in prison for fraud,” April 2024. cfodive.comReports DOJ/SEC records; $80M-vs-$10M ARR and the valuation cut.
- TechCrunch, “In the wake of Dash’s closure due to fraud, 5 investors talk due diligence in Africa,” October 2023. techcrunch.comIndustry reporting with named-investor quotes; Dash figures come from cited internal examinations, not court findings.
- PwC, Global Economic Crime Survey 2024. pwc.comSurvey of ~2,500 companies in 63 territories.
- World Bank ID4D, “850 million people globally don’t have ID,” February 2023; updated data 2025 shows 800M+. worldbank.orgOfficial development-data source.
- World Bank, Doing Business 2020, Getting Credit indicator (regional averages), 2019. worldbank.orgOfficial statistics; SSA 11.0% vs OECD high-income 66.7% private-bureau coverage.
- IFC, “MSME Finance” and “MSME Banking in the Digital Era” handbook, 2025. ifc.orgPrimary DFI estimates: $5.2T global gap, ~$331B SSA; records-based diagnosis quoted from the 2025 handbook.
- Stiglitz & Weiss, “Credit Rationing in Markets with Imperfect Information,” American Economic Review 71(3), 1981. repec.orgFoundational peer-reviewed theory.
- Minnis, “The Value of Financial Statement Verification in Debt Financing: Evidence from Private U.S. Firms,” Journal of Accounting Research 49(2), 2011. repec.orgPeer-reviewed; the canonical audit-verification study.
- “Do audited firms have a lower cost of debt?”, International Journal of Disclosure and Governance, 2021. springer.comPeer-reviewed; the 0.47pp estimate. At least one study finds voluntary audits raising debt costs in some contexts. Treat 0.47 as a central estimate, not a law.
- Resnick, Zeckhauser, Swanson & Lockwood, “The value of reputation on eBay: A controlled experiment,” Experimental Economics 9(2), 2006. repec.orgRandomized field experiment; the 8.1% premium.
- Liang et al., “Be a Superhost: The importance of badge systems for peer-to-peer rental accommodations,” Tourism Management, 2017. sciencedirect.comPeer-reviewed marketplace-badge evidence.
- IndiaStack.org, official timeline (eKYC, 2012). indiastack.orgOfficial platform source for the ~$23→~$0.15 figure; secondary sources circulate $12→$0.50 variants.
- D’Silva et al., “The design of digital financial infrastructure: lessons from India,” BIS Papers No 106, December 2019. bis.orgCentral-bank research; primary institutional analysis.
- Business Standard, “AA framework facilitates Rs 42,300 crore in loans since launch” (Sahamati data), September 2024. business-standard.comIndustry-body data via national business press.
- IETF, RFC 8032: Edwards-Curve Digital Signature Algorithm (EdDSA), January 2017. ietf.orgThe primary technical standard.
- OpenSSH, Release Notes 9.5, October 2023. openssh.orgPrimary source: Ed25519 as the default key type.
- Sigstore Blog, “npm’s Sigstore-powered provenance goes GA,” October 2023. sigstore.devPrimary project source; 500M+ provenance-enabled downloads during beta.
- W3C, Verifiable Credentials Data Model v2.0, W3C Recommendation, 15 May 2025. w3.orgNormative standard; the “verifiability does not imply truth” sentence quoted verbatim.
- European Commission, “The European Digital Identity Regulation,” 2024. europa.euOfficial regulator source; wallets mandated within 24 months of the 2024 implementing acts.
- Ethereum Attestation Service, Documentation FAQs, 2024; adoption statistics at attest.org, 2026. attest.orgPrimary project documentation; adoption figures are the project’s own.
- Chainlink Education Hub, “The Blockchain Oracle Problem,” 2024. chain.linkIndustry explainer of a well-established computer-science limitation.
- Signature Block, “How to do founder reference checks,” 2024. signatureblock.coPractitioner source on venture back-channel norms.
- Pipe (pipe.com, 2026) and Founderpath, “Capchase Review,” 2025. pipe.comVendor and industry sources for source-system revenue underwriting.
- Biometric Update, “Nigeria digital ID passes 130 million,” June 2026; Citi Newsroom, “Ghana Card mandatory for banking — BoG,” January 2026; MobileID World, “Kenya’s Maisha Namba,” 2025. biometricupdate.comTrade-press coverage of official national ID programs.
Certainty caveat: enrollment counts, adoption statistics, and the India eKYC cost figure vary by source and date; load-bearing figures are dated in-line and drawn from the most primary source available. Proof Vault / TRUST Line mechanics describe FounderWise’s product design.