# How to Check a Co-Founder or Investor Is Real and Avoid Startup Scams

Trust & safety guide by RUV Labs · Updated October 5, 2026 · https://ruvlabs.com/guides/verify-cofounder-investor-scams

> To check that a co-founder or investor is real, confirm their identity through a channel you find yourself, verify each specific claim with evidence, and share information in stages. Legitimate investors do not charge founders to review a deal, so any request for an upfront fee, your passwords or a rushed signature is a reason to stop.

Founders are attractive targets for fraud: they are often short on time, eager for capital, and used to sharing information with strangers. Most startup scams follow a small number of patterns, and almost all of them fall apart when you verify identity independently and refuse to pay or rush. This guide covers the common schemes, how to check people out, and what to do if something has already gone wrong.

## Key takeaways
- Real investors do not charge founders to review, diligence or close a deal; it is a widely held norm in early-stage investing that investors pay their own costs.
- Verify identity through a channel you find yourself, such as a firm's official website or a mutual contact, never through links or numbers the person sent you.
- Check specific claims, such as past investments, employers or revenue, with evidence and with people the claimant did not hand-pick.
- Share information in stages, and never send money, passwords, one-time codes or photos of your ID to an individual you met online.
- Urgency, secrecy and pressure to move to a private channel quickly are the most consistent signs that something is wrong.
- If you are targeted, stop engaging, keep the evidence, report it, and contact your bank right away if any money moved.

## What are the most common scams targeting founders?
The most common scams aimed at founders are fake investors who charge fees, impersonators posing as real investors or firms, fake co-founders who harvest ideas or free work, and phishing for documents and account access. They look different on the surface, but each one depends on you skipping a verification step.

| Scam | How it usually looks | The tell |
|---|---|---|
| Fee-charging "investor" | Quick enthusiasm, a term sheet, then a request for a fee | Money flows to them before any flows to you |
| Advance-fee "due diligence" | Pay for a valuation, legal review or escrow setup by a provider they choose | Unknown provider, fixed fee, tight deadline |
| Impersonation | A real investor's name and photo on a new account or lookalike email domain | The channel does not match the firm's own website |
| Fake co-founder | A "perfect fit" who wants your plan, code or customer list early, then disappears | Many questions about your assets, few verifiable facts about them |
| Document phishing | A link to upload your deck and ID, or to sign in to view a file | The link asks for a password or login code |
| Paid "guaranteed" access | Investor introductions or funding promised for an upfront fee | A promised outcome in exchange for money now |

Advance-fee fraud is one of the oldest patterns: the opportunity feels real, often with a polished term sheet, then a small "necessary" cost appears, then another, and the investment never closes. Idea and work harvesting is quieter: someone poses as a partner, collects your plans or weeks of unpaid work, then goes silent or launches something similar.

## Do real investors ever charge founders a fee?
No. It is a widely held norm in early-stage investing that real investors do not charge founders to review a pitch, perform due diligence or close an investment. Investors pay for their own analysis because evaluating deals is their job.

One nuance: in some priced rounds, the company agrees to cover a capped amount of the lead investor's legal costs. That is written into the negotiated terms, paid at closing out of the money raised and handled by lawyers. It is never a payment you send up front so that an investor will consider you.

Paying for a service you chose, such as your own lawyer, an accountant or a clearly priced feedback service, is also different, as long as it is not presented as a step toward the seller investing in you. The test is simple: is this person asking me to pay so that they will give me money? If yes, walk away.

## How do you verify that an investor is real?
Verify an investor by confirming their identity through a channel you find yourself, then checking their specific claims with evidence and with founders they did not hand-pick. Work through these steps before you share anything sensitive.

1. **Find the contact route yourself.** Type the firm's website address yourself and check that the person and their email address appear there. Do not rely on links, numbers or invitations they sent.
2. **Check the email domain carefully.** Lookalike domains use an extra letter, a swapped character or a different ending. Compare it character by character.
3. **Ask plain process questions.** What is your typical check size? Which instrument do you use? Who else decides, and how long does it take? Real investors answer easily; vague or shifting answers are a signal.
4. **Talk to founders they have backed.** Ask for two or three, then find one more yourself. Ask how the investor behaved when things got hard.
5. **Get on a live video call.** Keep cameras on and confirm the person matches their official photos. Repeated refusal to appear on video is a warning sign.
6. **Check what has actually been verified.** On RUV Labs, an Investor badge means a person reviewed documents showing investor status on the review date; see [what each badge covers](https://ruvlabs.com/verified).
7. **Slow down when pushed.** Real deals survive a few days of checking. Pressure to sign or pay "today" is designed to stop you from doing these steps.

## How do you verify that a potential co-founder is real?
Verify a potential co-founder by confirming their identity, checking their work history with evidence and references, and working together on something small before you share sensitive assets.

- **Confirm identity first.** Prefer people verified through a trusted process, and check that the name on their profile matches what they tell you.
- **Check background claims.** Look for document-verified Employment or Education credentials, ask for references, and find at least one former colleague yourself.
- **See real work.** Walk through a portfolio, past projects or code together, and ask what they personally did versus the team.
- **Work together before committing.** A short, scoped project with a clear end date shows how someone communicates and handles disagreement.
- **Put terms in writing early.** Before anyone contributes meaningful work or intellectual property, agree on who owns what in a written [co-founder agreement](https://ruvlabs.com/guides/cofounder-agreement).

A raw idea is rarely the valuable part of a startup; the code, data, customers and relationships you build are. Share the story freely, but gate the assets.

## What are the red flags of a startup scam?
The clearest red flags are requests for money, pressure to act fast, secrecy, and contact details that do not match official sources. Treat any one of these as a reason to pause and verify, and two or more as a reason to stop.

- They ask for any upfront fee, deposit, "refundable" payment, gift card or cryptocurrency.
- They insist on a lawyer, escrow agent or valuation firm you cannot find independently.
- The email domain, phone number or profile does not match the official one.
- They avoid live video calls or always have a reason the camera is off.
- They push urgency: "the offer expires tonight."
- They want to move to a private messaging app immediately.
- Their story changes, or they cannot name past investments or employers you can confirm.
- They ask for source code, customer lists or bank access early.
- The offer is unusually generous, with a high valuation and almost no questions.
- They ask you to keep the conversation from your co-founders, advisors or lawyer.

## What should you never send before trust is established?
Never send money, passwords, one-time login codes or photos of your ID to an individual you met online, no matter how legitimate the opportunity looks. Beyond that, share information in stages that match how far the relationship has progressed.

**Never send, at any stage:**
- Upfront fees or deposits to anyone promising investment
- Passwords, one-time codes or recovery codes for any account
- Photos of your passport or other ID over chat or email
- Online banking logins or card details
- Signatures on documents you have not read and had reviewed

**Share in stages:**
1. **First contact:** a short description, your public profile and a brief deck summary.
2. **After you have verified the person:** the full deck, key metrics and a product demo.
3. **After serious mutual interest, such as a term sheet:** the cap table, contracts and detailed financials, ideally in a data room where you can revoke access.

Legitimate deals do include identity checks, but through official channels such as a verification provider, a bank or the lawyers handling the closing, not a photo sent to someone's personal account.

## What should you do if you think you are being targeted?
If you think you are being targeted, stop engaging, send nothing more, save the evidence, and report it to the platform and, if money or identity documents are involved, to your bank and the relevant authorities. Acting quickly limits the damage.

1. **Stop and do not pay.** You do not owe an explanation; a short "I am not proceeding" is enough.
2. **Save everything.** Keep messages, email headers, profile links and payment details, and take screenshots before accounts disappear.
3. **Report and block on the platform** where you met the person, so others are protected.
4. **Call your bank immediately if you paid.** A transfer can sometimes be stopped or reversed, but only if you move fast.
5. **Secure your accounts.** Change any password or code you shared, turn on two-factor authentication, and revoke shared access to drives, code or tools.
6. **Watch for identity misuse.** If you sent ID documents, monitor your accounts and follow your government's guidance on identity theft.
7. **Report to authorities and warn the real person.** File a report with the police or your national fraud reporting agency, and tell any impersonated investor or firm through their official contact page.

This is general information, not legal, tax or investment advice; talk to a qualified professional about your situation.

## How RUV Labs helps
- Posting, messaging and listing a startup require identity verification. It is free and done by our partner Didit with a government ID, a liveness check and a face match, and RUV Labs does not store ID images or face data.
- Members can add free, document-verified badges (Business, Employment, Education, Investor, Revenue shown as a band, and Funded), each reviewed by a person and valid for one year. A badge means the documents showed the stated fact on the review date; it is not an endorsement or investment advice.
- Contact starts with a message request that you can accept, decline or block. Phone numbers, emails and messenger handles are blocked in first requests, so you decide when to share contact details.
- In the [Deal Room](https://ruvlabs.com/deal-room), RUV Labs does not handle funds and charges no success fees. Read the [community guidelines](https://ruvlabs.com/legal/community) for what is not allowed, and see [how to build a profile people trust](https://ruvlabs.com/guides/founder-profile-that-builds-trust).

## Frequently asked questions

### Is a verified badge a guarantee that someone is trustworthy?
No. A verified identity confirms that a person is who they say they are, and a document-verified badge confirms that specific documents showed a specific fact on the review date. Neither tells you whether someone is honest, competent or a good fit, so keep checking references and judging behavior over time.

### Should I ask investors to sign an NDA before I share my deck?
Many early-stage investors decline to sign NDAs for first meetings because they see many similar companies, and that alone is not a red flag. Instead of relying on an NDA, share in stages: keep the first deck high level and save sensitive details for later, once you have verified the person and interest is mutual.

### Is it ever legitimate to pay for feedback on a pitch?
Yes, when it is a clearly described service you chose, priced up front, with no implied promise of investment. The warning sign is a fee presented as a condition for someone to consider, approve or close an investment in your company.

### What should I do if someone is impersonating me or my startup?
Collect links and screenshots, report the fake profiles to each platform where they appear, and warn your investors, customers and team. Listing your official contact channels on your website and verified profiles makes impersonation easier for others to spot.

### Can a scammer be a real person with a real company?
Yes. Some bad actors use their real name and a real company, which is why confirming identity is only the first step. Check their track record with people who have worked with them, and apply the same rule regardless of credentials: never pay to be considered for investment.

This guide is general information, not legal, tax or investment advice.