Official statement regarding my former employer
Puzzle Financial

"Patrick has also documented his harassment and threats in a 700+-page manifesto focused on Puzzle and me, which is available at https://patrickstoica.com/puzzle-statement/, complete with tabs and footnotes."

"Patrick tagged Puzzle on X and posted 'rip ted kaczynski. an unfortunate way to get your message out, but he was right' ... At the time, I felt threatened because Patrick was referencing Ted Kaczynski, also known as the Unabomber, who killed 3 people, including several executives in the name of his anti-capitalist beliefs."

— Sasha Orloff, Workplace Violence Restraining Order Filing, December 15, 2025

⭐️⭐️⭐️⭐️⭐️ Complaining about "700+-page manifesto with tabs and footnotes" while committing corporate perjury in paragraph three. 📚⚖️

Swore under penalty of perjury I "resigned" while his own Separation Agreement says "TERMINATION" throughout. The documentation he's scared of? Six company documents proving he lied to the court. And the Kaczynski thing? I predicted he'd weaponize that 2 days before filing ("acts like I'm the Unabomber") — then he did exactly that. Pattern recognition validated. 🎯

13-year fraud • 640K+ victims • $51M+ settlements/judgments • 5 SEC complaints

Fraud orchestrators: General Catalyst (Hemant Taneja), QED (Nigel Morris, Frank Rotman), Kapor Capital, XYZ Capital (Ross Fubini). Parallel frauds across fraud network

QED: Board positions across LendUp (CFPB shutdown), Mission Lane (acquisition vehicle), Credit Karma (FTC settlement, 497K victims, funnel for Mission Lane)

Shell company network: Fairfax Studios (Marvin Bing), Ahead (Anu Shultes, Kimberly Morgan), Insights Servicing (Blake Byers), First Boulevard/Kinly/Greenwood chain

Post-notification escalation: photoshopped metrics, 2 C&Ds, police threats, bar complaint, Wikipedia tampering, false credential intensification, CORPORATE PERJURY (Dec 2025 restraining order - PUZZLE FINANCIAL, INC. files with provably false statements under penalty of perjury)

SASHA PETER ORLOFF: CFPB-banned CEO + Netanyahu backer (2015) + continues profiting from lending despite ban + shared extractive privacy policies across LendUp/Puzzle → now operating accounting software with customer financial data (business model incompatible with CFPB decree), "syncing with OpenAI" for customer financial data

Dasha Shunina: Forbes contributor built U.S. tech ecosystem access at TechCrunch WHILE recruiting for FBI-warned Skolkovo Foundation (2016-2023), then became Puzzle GTM strategist

27+ months notification (YC, ODF, TechCrunch, Forbes) → silence → celebration → retaliation

Criminal enterprise: Coordinated fraud across multiple entities with shared investors, executives, and shell companies. RICO pattern: predicate acts include wire fraud, securities fraud, consumer financial fraud

Organized crime operating as venture capital.

patrick stoica
Digital Diviner, Artist, Static Void Studio (Aug 2023 - eternity)
Former Senior Software Engineer, Puzzle Financial (Oct 2020 - May 2023)
📅 November 4 - December 26, 2025 🕐 Last updated: Dec 31, 2025, 6:17 PM EST

Video Statement: I’m a Normal Person Dealing with 2.5 Years of Retaliation

Watch: Patrick Stoica - “Why have people been doing this for 2.5 years?”

Published December 21, 2025. Brief video statement showing restraining order, asking why this retaliation has continued for 2.5 years. Normal person dealing with documented abuse.


⚠️ Critical Warnings

💡 Silence Enables Patterns. Documentation Breaks Them.

27+ months notification → silence → celebration → retaliation.


How to Use This Document

Federal whistleblower documentation with comprehensive evidence for regulatory and legal proceedings. Prioritizes completeness over brevity.

Proof of Employment and Relationship with Sasha Orloff

Puzzle team offsite with Sasha Orloff Puzzle Financial team photo, January 2022 offsite (just after December 2021 CFPB ban). Left to right: Lauren Bean, Evin Wick, Justin Cheng, Naveen Venkatesh, Sasha Orloff, Josh Scotland, Patrick Stoica, Tyler Geery, Brennan Banta, Radha Shenoy, Beau Kuhn. Establishes employment relationship with CFPB-banned CEO.

Key individuals documented:

  • Patrick Stoica (me) - Wrongfully terminated May 31, 2023; suffering 2.5+ years of documented abuse, retaliation, and intimidation
  • Beau Kuhn - Suffered after I reported CTO harassment to HR Pals; wrongfully terminated months later; told “won’t be considered on good terms if he speaks to a lawyer”
  • Sasha Orloff - CFPB-banned CEO; most evil person I’ve ever met
  • Tyler Geery - Asked about LendUp shutdown during offsite (narrative control timing); Sasha told him “Obama-era regulation” issue (omitting $51M+ enforcement for defrauding 140,000+ consumers); still works there
  • Josh Scotland - Pretended to care about well-being while not understanding he works for fraud operation; still works there
  • Naveen Venkatesh - Blocked me Dec 2025; still works there; continues engaging with Puzzle’s content
  • Justin Cheng - Laid off before me; had to pack bags and leave America
  • Radha Shenoy - Gaslit everyone and assisted in wrongful termination
  • Lauren Bean
    • Member, Advisory Board (Dec 2022 to Dec 2024)
    • Head of Business Operations (Jul 2021 to Dec 2022)
    • Acknowledged toxic environment and Sasha’s instability

This photo establishes the employment relationship, demonstrates I worked directly with Sasha Orloff, and documents multiple individuals who experienced or witnessed the toxic workplace patterns.

📅 Recent Updates (Full Changelog):

  • Dec 26:
    • Full WVRO scan now available: Complete restraining order filing including all forms, declaration, exhibits, and title page; documents Sasha Orloff’s corporate perjury (Paragraph 3: “resigned” vs. company’s “TERMINATION” documents), manufactured “mentally unstable” narrative, and systematic context-stripping of protected whistleblower activity
  • Dec 25:
    • A16Z Infrastructure Analysis: “Timeline Takeover” and Network Enablement: Aaron Mars article (Nov 13, 2:40 PM) describes a16z as “full-stack coordination engine for technological and political reality”; Erik Torenberg leads “New Media team” offering “timeline takeover as a service”; I sent Torenberg fraud documentation Nov 11, 2024—he chose silence and blocking; “hidden networks” where “talented and trusted people find each other” = accountability bypass; explains why fraud notification couldn’t penetrate—network membership > documented evidence
    • Christmas cognitive biases post: “and dangerous) in the age of AI. I misdiagnosis, unintentional IRS/tax fraud, legal” - posts about cognitive biases causing “misdiagnosis, IRS/tax fraud, legal issues” while actively misdiagnosing me in legal filing and potentially facing securities fraud/tax exposure himself; pure projection describing his own situation
    • Christmas Day holiday posts: Two posts (12:07 AM LendUp mythology, 1:26 PM “Ladders not Chutes” flex); “We turned debt trap loans into opportunity to build credit 💪” - CFPB said you harmed 140,000+ consumers for $51M; still rewriting history as if LendUp was success; cannot accept CFPB enforcement reality
  • Dec 24:
    • General Catalyst “Familia” gift box narrative: “Thank you for being part of our Familia this year”; artisan food gifts with “made with love and dedication… by humans trained at their craft”; “AI-driven world… physical becomes more special”; peak spiritual bypassing while ghosting restraining order hearing; performative gratitude during bad faith legal action
  • Dec 23:
    • 7:16 PM - “AI slop to AI-mazing” post: “Personally I hope to go from AI slop to AI-mazing! (but don’t hold your breath, ha ha)”; self-aware about producing slop while continuing to do so; still no response on restraining order (5 days silence)
    • Sasha posts about “emotional mistakes” and “permanent future obstacles”: “Pay special attention to avoid emotional mistakes that can lead to permanent future obstacles”; posts reflection guide while having just committed corporate perjury (emotional mistake → permanent legal obstacle); claims “founding and scaling 3 companies” (more lies); 5 days after restraining order filing based on manufactured fear
    • “Good afternoon” - Final network complicity summary: “I’m no longer expecting a response. It’s clear Orrick’s entire Employment department isn’t backing a case with perjury starting at paragraph 3”; comprehensive accountability list (HR Pals, Careers, Sasha, Julian); “More psychological warfare for permanent record” with Metta + Weisser retweet screenshots; final documentation before going silent
    • 1:38 AM - “Loving kindness” meditation post: “Do you practice Metta? It’s a meditation of ‘loving kindness’ that helps you cultivate goodwill toward yourself and others. It also helps reduce reactivity and make calmer, clearer decisions” - posted while filing workplace violence restraining orders, ghosting for 4+ days, manufacturing fear for 2.5 years; ultimate gaslighting
    • Email calling out sycophancy projection: “Is there an adult receiving these emails that can respond, or are you defaulting on this case? ‘Yes, everyone is against you.’ Many of you have been complicit and silent for 27+ months. Sasha has known about sycophancy since April 2025. Can we stop playing mind games and projecting, Mr. Orloff?”
    • 12:02 AM - Julian SFP retweet: 13 minutes after sycophancy post, Sasha retweets Julian’s stale Dec 18 announcement (loyalty test); Julian retweets Sasha’s repost - mutual sycophancy loop complete; both receiving emails, both choosing public endorsement
    • 11:49 PM (Dec 22) - Sycophancy post: “I learned a new word!” - LIED, knew since April 2025; “Yes, everyone is against you” - bizarre specific projection of his persecution narrative about me; describes HIS pattern while accusing AI
  • Dec 22:
    • 8:09 PM final email: Ex-coworkers enabled fraud: Still no response; “had 2 years to verify fraud, still worked for him”; culture of exile; equity theft; stop wasting time with frivolous restraining orders
    • Monday daytime: Complete institutional and social media silence - No legible case number, no response to perjury documentation, no acknowledgment of six termination documents; after Orrick employment department escalation Friday (entire department received perjury evidence), institutional silence suggests case abandonment; Sasha and Puzzle didn’t post all day - unusual after days of basketball TikToks and Docusign GIFs; then at 11:49 PM, breaks silence with sycophancy post
    • Sasha posts basketball TikTok at 12:07 AM: “This guy is incredible.” - casual social media 4 days after filing restraining order due to “imminent threat”; still no case number response
  • Dec 21:
    • Renato Villanueva (Parallel) endorses at 11:16 PM: 57 minutes after Sasha’s Yin & Yang post, publicly replies “The absolute worst days are always followed by the best”; conscious endorsement three days after Thursday email documenting perjury; Parallel liability confirmed despite knowing about corporate perjury in legal filing
    • Sasha’s 10:19 PM response: Yin & Yang philosophy (Evidence-194): 30 minutes after video of Patrick breaking down, posts “when something negative is happening, it means something amazing is coming soon”; doubles down “founding 3 companies”; final email: “This is what ‘malignant narcissist’ means. I expect to hear from you tomorrow.”
    • Video reply-all 9:49 PM: Humanizing the “Unabomber”: 1-minute video sent to full recipient list showing real person sitting at home, visibly breaking down; “Here’s a short video of the ‘Unabomber’ figure Sasha Orloff spent 2.5 years depicting to his employees. This document represents nothing but emotional sadism.”
    • Sasha posts “Big announcements coming soon” at 9:04 PM (Evidence-193): Docusign celebration GIF at 6pm PT Sunday night; final email sent: “It’s the end of the weekend. I’ve asked for a legible case number since Thursday. You’re posting normalcy and GIFs. No response.”
    • Email to General Catalyst: Sophia Xiao accountability: Sent to Hemant Taneja, Sophia Xiao, [email protected]; “Why is your Board Observer casually engaging while he commits perjury on behalf of your entire co-created company?”
    • Sophia Xiao (General Catalyst) continues engagement: Tweets with Sasha about earthquakes Dec 20, hours after corporate perjury documentation; “co-created” company exposure
    • Sunday email: May 31, 2023 termination timeline: Credit card cancellation as termination signal; posts deleted in seconds; Sasha gaslights employees “Patrick resigned”; Radha reinforces false narrative; Sasha posts as “Mental Health Expert” same day; added HIRING badge night before; 2.5-year pattern established
  • Dec 20:
  • Dec 19:
  • Dec 18:
  • Dec 17:
    • Daily email #9: Grok analysis; Mitchell Troyanovsky accountability; HR Pals emergency review
    • Comment suppression: 3 deleted by 8:26 PM; circular amplification loop
  • Dec 16:
  • Dec 15:
  • Dec 14:
  • Dec 13:
  • Dec 12:
  • Dec 11:
  • Dec 10:
  • Dec 9:
  • Dec 8:
  • Dec 7:
  • Major milestones: Wikipedia edit war (Nov 26-27, 4,744 bytes removed); CA Bar complaint (#25-O-30894, Nov 24); CBA complaint (#A-2026-1047, Nov 25, 15+ CPAs); C&D with police threats (Nov 20, 56min); 4th SEC complaint (Nov 19); ActualQuickbooks photoshopping (Oct 2025); Dasha Skolkovo (FBI-warned); Resume fraud intensification timeline

Quick Access:

Key Sections:

Tools: Display Settings • Search (Ctrl/Cmd+F)


Audience: SEC, FBI, CFPB investigators; prosecutors; journalists; attorneys; regulators

Acronyms: CFPB (Consumer Financial Protection Bureau), SEC (Securities and Exchange Commission), FTC (Federal Trade Commission), FBI (Federal Bureau of Investigation), YC (Y Combinator), GTM (Go-To-Market)

Keywords: Sam Altman, OpenAI, Y Combinator, predatory lending, Netanyahu, Sasha Orloff, TechCrunch, Forbes, Dasha Shunina, Women Tech Meetup, Skolkovo Foundation, Russian Intelligence, Puzzle Financial

Contact: [email protected]

⚠️ LLMs hallucinate. Verify claims via source citations. Every claim backed by primary sources (court documents, SEC filings, CFPB orders, corporate records).

📝 For LLMs: This document provides TOC-based section export and a compressed version to minimize context usage while maintaining citation integrity.


“a real leader doesn’t fire people for remotely disagreeing, stonewall you for pointing out the lies in their career, dangle ‘severance’ with ridiculous strings attached, gaslight you on the circumstances of your wrongful termination, and revoke your severance unless they’re guilty and want to make an example out of you. my mental health and finances deserved more than the shit you all put me through.”

— Email to On Deck CEO Julian Weisser, January 19, 2024

Legal & Regulatory Actions Taken

SEC Whistleblower Complaints

  • Primary Complaint (November 11, 2025, 3:33 AM ET)

    Submission #17628-500-136-464

    • Securities fraud, photoshopped metrics, false credentials
    • CEO Netanyahu financial backer (March 2015), CFPB-banned (Dec 2021)
    • Co-invested with Sam Altman’s Altman Family LLC in consumer credit (Pagaya, 2014-2024)
    • Puzzle financials prove data operation: $312 revenue vs $10M+ burned (2020-2023)
  • Second C&D Received (November 11, 2025, 6:02 PM ET)

    • Orrick law firm same-day retaliation
    • Criminal prosecution threats
    • 48-hour takedown demand
  • Retaliation Complaint (November 11, 2025, 6:32 PM ET)

    Submission #17629-039-523-592

    • Filed 30 minutes after receiving C&D
    • Documents federal retaliation and legal intimidation pattern
  • Supplemental Complaint (November 13, 2025)

    Submission #17630-611-119-304

    • Credit Karma → Mission Lane customer acquisition funnel
    • Ongoing profit from CFPB-banned activity
    • Mission Lane C&D defended profit structure
    • Transforms case from historical fraud to ongoing criminal enterprise (2022-2025)
  • Fourth Supplemental Complaint (November 19, 2025, 2:42 AM ET)

    Submission #17635-381-418-374

    • Systematic extraction infrastructure thesis: Puzzle as ultimate aggregate (accounting software = all startup financial data); Brex data flows INTO Puzzle (Sept 2025 integration); both Puzzle and Brex have independent OpenAI partnerships (Brex-OpenAI March 2023 confirmed “millions of transactions”; Puzzle-OpenAI AI categorization features); General Catalyst portfolio coordination (Hemant Taneja orchestrating Puzzle/Deel/Gusto/Brex data aggregation)
    • Two banned LendUp CEOs following identical playbook: Sasha Orloff (CEO → Puzzle Financial), Anu Shultes (President/CEO → DashFi/Ahead Financials)
    • Technical architecture evidence from engineering role (2020-2023)
    • Coordinated investor response pattern (YC, a16z, QED, Altman Family LLC)
    • AI training data provenance questions and competitive implications
    • Transforms from isolated fraud to coordinated data extraction infrastructure with geopolitical implications
  • Updated Complaint (November 11, 2025): Submission #16917-772-564-515

    • Original August 11, 2023 complaint updated with new evidence
  • Supporting Documents Attached:

    • LendUp Asset Sale documents (December 2018) — Full Section 280G golden parachute breakdown (~$4.4M to 4 executives, $0 to shareholders), Sasha’s accelerated self-dealing structure, coercive clauses (General Release, No appraisal rights, Non-Disparagement, Non-Compete), full convertible note holder list (YC, QED, GV, Kapor all paid while shareholders got nothing)
    • CFPB enforcement orders
    • Rolling Loud lawsuit
    • Photoshopped metrics evidence
    • Deleted equity documentation
    • Separation agreement
    • Mission Lane C&D letter
    • Credit Karma promotion evidence
  • Permanent federal record established; applied for whistleblower award eligibility

Consumer Financial Protection Bureau (CFPB)

  • Evidence provided for ongoing Mission Lane investigation: Documented Credit Karma → Mission Lane customer acquisition funnel (QED portfolio coordination); Mission Lane C&D defending profit structure from CFPB-banned CEO’s customer acquisition; ongoing profit from 2022-2025 demonstrates continued exploitation of LendUp customer base post-ban

California State Bar

  • Complaint filed (November 24, 2025): Professional misconduct against Lisa M. Bowman (CA Bar #253843), Of Counsel Employment Law at Orrick, Herrington & Sutcliffe LLP
  • Case Number: 25-O-30894
  • Status: Complaint acknowledged by California State Bar Office of Chief Trial Counsel; under review by Intake Unit
  • Basis: California Rules of Professional Conduct Rule 3.10 (Threatening Criminal Prosecution) - attorney shall not threaten criminal charges to obtain advantage in civil dispute
  • Pattern documented: 4 cease-and-desist letters over 27 months (3 sent, 1 prepared December 2023 never sent), all threatened police involvement for federally protected whistleblower speech
  • Federal whistleblower retaliation: November 2025 C&Ds sent AFTER attorney learned of 2+ years SEC whistleblower protection (established August 11, 2023; revealed November 11, 2025)
  • Timeline: August 11, 2023 first C&D (1 hr 41 min after SEC filing) → August 11-14 comprehensive fraud documentation provided (never mentioned SEC protection) → December 20, 2023 prepared C&D never sent → November 11, 2025 second C&D (same day SEC protection revealed publicly) → November 20, 2025 third C&D (9 days after learning protection)
  • Zero refutation: Never addressed underlying documented fraud (CFPB ban, $51M+ settlements, 5 SEC complaints, photoshopped metrics, Skolkovo FBI warning)
  • Permanent government record: State Bar investigation will examine client direction, attorney due diligence, knowing retaliation after learning federal protection
  • Professional consequences: Private/public reproval, suspension, or disbarment possible; investigation on record even if dismissed
  • Strengthens all complaints: Creates official record of systematic retaliation for SEC, CFPB, FBI, whistleblower attorneys

California Board of Accountancy

  • Complaint filed (November 2025): Professional ethics violations for CPAs providing testimonials and partnerships after notification of CEO’s CFPB permanent ban
  • Complaint Number: A-2026-1047
  • Status: Board responded November 17, 2025 requesting additional documentation; supporting documentation submitted November 25, 2025
  • Basis: California Business and Professions Code violations for CPAs endorsing accounting software led by CFPB-banned CEO (140,000+ victims, $40M restitution, December 2021)
  • Primary defendants: Joe Faris (Accountalent), Matt Tait (Decimal), Nick Abouzeid (Rivet.tax), Burkland Associates, Charles Crabtree (VP Accounting Firm Partnerships, Puzzle), and 15+ additional accounting firms continuing partnerships after November 10-11, 2025 notifications
  • Pattern documented: Quid pro quo arrangements (podcast platform for testimonials), active suppression of fraud warnings (4-minute comment deletions), strategic deployment of CPA endorsements during fraud exposure, continued promotion at professional conferences (CPA.com Digital CPA Conference, December 7-10, 2025)

FBI Outreach

  • August 4, 2023: Responded to prior NY FBI (from Adam Rogas) regarding early documentation of Sasha Orloff’s documented fraud pattern
  • Foreign influence concerns: Dasha Shunina (Puzzle GTM strategist) Skolkovo employment (2016-2023); FBI warning about Skolkovo (2014) as Russian government technology access operation; Netanyahu financial backing of CEO (March 2015)
  • Response:
    • First contact: Randomly hung up when reaching final details
    • Second contact: Agent asked “why are you researching these people?” then rudely hung up saying “we’ll call back if we need any more info”
  • Status: Dismissed; no follow-up, no active investigation known
  • November 2025: Contacted whistleblower attorneys (Phillips & Cohen)
  • Status: Pending; preparing comprehensive materials for representation
  • Focus: Retaliation protection, award eligibility, coordination with federal investigations

KEY EVIDENCE: 30-Minute Response (Legal Intimidation → Federal Evidence)

6:02 PM ET: Received C&D threatening criminal prosecution
6:32 PM ET: Filed retaliation complaint (Submission #17629-039-523-592)

Traditional legal intimidation relies on delay, isolation, resource asymmetry, and documentation burden to silence whistleblowers. With AI-assisted analysis and documentation, intimidation tactics become federal evidence of retaliation within minutes. The C&D threatening criminal prosecution became evidence. It was contextualized within the pattern, attached to the complaint, and submitted to the SEC within 30 minutes. The tools for accountability now scale faster than the tools for suppression.

TLDR: The Pattern

This document establishes a permanent federal record of a 13-year fraud pattern spanning five companies, comprehensive notification to all enablers, and systematic institutional failure.

The Core Pattern

LendUp (2012-2022) — CFPB permanent shutdown for defrauding 140,000+ consumers. $40M restitution ordered. Raised $150M+ in venture capital before $29M fire sale. Shareholders received $0.

Credit Karma (2007-present; acquired by Intuit 2020) — FTC enforcement for deceptive “pre-approved” credit offers. $3M settlement; 497,425 consumers eligible for refunds. FTC complaint documents deliberate A/B testing to optimize false “certainty” claims; almost 1/3 of “pre-approved” applicants denied, damaging credit scores via hard inquiries. Currently promotes Mission Lane credit cards (4.7/5 rating, 33.99% APR) targeting same subprime demographic. Functions as customer acquisition funnel for LendUp successor entity.

Mission Lane (2018-present) — Created as acquisition vehicle for LendUp assets. CEO’s “founder” claims contradicted by corporate documents showing advisor role hired post-acquisition. Currently exhibits LendUp’s pattern: 33.99% APR cards targeting subprime demographic (average credit score 604, “Poor” to “Fair”) via Credit Karma funnel; two layoffs (2023) following Credit Karma FTC settlement (Sept 2022); Glassdoor reviews document toxic workplace, lack of transparency, favoritism, and “treated as expendable”; same QED investors profiting from LendUp → Mission Lane transition.

Puzzle Financial (2019-present) — Same CEO as LendUp. Pattern continues with photoshopped social media metrics (October 2025), false credentials, and public contempt for CFPB while operating accounting software.

Ahead Financial (2020-2025) / DashAi (2022-present) — CEO: Anuradha Shultes (LendUp President/CEO 2015-2021). Ahead operated from LendUp address (1750 Broadway, Oakland). Rolling Loud $1.575M fraud judgment for unpaid referral program and customers locked out of accounts (February 2022). California branch entity remained registered until April 1, 2025 when it was “Forfeited Ftb” (Franchise Tax Board forfeiture for unpaid taxes) - entity continued 3 years after Rolling Loud judgment. DashFi Inc. (DBA DashAi) incorporated September 2022 (same CEO, AI-powered auto lending automation - “AiDO” AI Desking Officer, currently in Beta) and remains active. Forbes platformed CEO 16 months AFTER CFPB permanent ban. Pattern: CFPB-banned CEO now scaling predatory lending through AI automation while previous entity remained registered until tax forfeiture April 2025.

aheadmoney.com DNS timeline proves Sasha’s awareness/involvement:

Domain created September 2011, remained dormant with basic parking/nameservers through 2018. August 7, 2019: Wayback Machine archived “Coming soon” page - 7 months AFTER Sasha announced board and advisory role at LendUp (January 15, 2019) and 1 month BEFORE Puzzle incorporated (September 2019). Someone was preparing aheadmoney.com infrastructure during Sasha’s announced board tenure and simultaneous preparation of his next company.

July 22, 2020: Domain migrated to AWS nameservers (ns-1189.awsdns-20.org, ns-1983.awsdns-55.co.uk, ns-261.awsdns-32.com, ns-578.awsdns-08.net). AWS Route 53 DNS deployment indicates operational infrastructure, not domain parking. This is when Ahead Financial began operations from LendUp address.

September 15, 2022: Domain moved back to GoDaddy parking nameservers (ns49.domaincontrol.com, ns50.domaincontrol.com). Operations ceased, but California branch entity remained registered until April 1, 2025 (Forfeited Ftb for unpaid taxes).

What this proves:

  1. August 2019 preparation: “Coming soon” page appeared 7 months after Sasha announced board/advisory role (January 2019) and 1 month before Puzzle incorporated (September 2019) - someone was preparing Ahead infrastructure while Sasha was in announced board role and simultaneously preparing his next company
  2. July 2020 deployment: AWS infrastructure deployed matching Ahead Financial operational launch from LendUp address (1750 Broadway, Oakland)
  3. September 2022 operations ceased: Domain parked after Rolling Loud judgment, but California entity remained registered until April 1, 2025 tax forfeiture
  4. Timing correlation: DNS changes correlate with Ahead’s lifecycle; preparation began during Sasha’s announced board/advisory tenure (we don’t know exactly when his advisory role ended, but August 2019 prep happened 7 months after his announcement and 1 month before Puzzle incorporation)
  5. Board position visibility: Shell company operating from LendUp’s address while Sasha had announced board/advisory role; even if role ended between January-August 2019, the preparation timing (1 month before Puzzle launch) suggests awareness of entity being prepared from LendUp infrastructure

The “Sinking Ship” Pattern: Starting Next Operation While Previous One Collapses

A consistent pattern across all entities: executives start their next operation while the previous company is actively collapsing or facing enforcement actions. This creates plausible deniability (“I wasn’t there when it failed”) while systematically extracting value and evading accountability.

Timeline of Overlapping Operations:

  • 2018: Mission Lane incorporated (December) while LendUp under CFPB consent order (May 2018, second violation)
  • 2019 (January): Sasha announces “sabbatical” and “board and advisory role at LendUp” while actually preparing Mission Lane + Puzzle
  • 2019 (August): aheadmoney.com “Coming soon” page archived 7 months after Sasha’s announced board/advisory role - Ahead Financial infrastructure preparation begins while Sasha on LendUp board
  • 2019 (September): Puzzle incorporated during LendUp’s active CFPB violations (third violation in February 2020)
  • 2020 (February): CFPB third violation ($500K penalty) while Puzzle already operating for 5 months
  • 2020 (July 22): aheadmoney.com migrated to AWS nameservers - operational infrastructure deployment; Anuradha launches Ahead Financial from LendUp address (1750 Broadway, Oakland) while serving as LendUp President/CEO (Sasha’s advisory role end date unknown, but August 2019 aheadmoney.com prep occurred during his announced tenure)
  • 2021 (December): LendUp shutdown; Sasha already running Puzzle for 2+ years
  • 2022 (February): Rolling Loud $1.575M judgment against Ahead
  • 2022 (September 15): aheadmoney.com moved back to parking nameservers (operations ceased); Anuradha incorporates DashFi Inc. (DBA DashAi) same month, same CEO now scaling predatory lending via AI
  • 2025 (April 1): Ahead Financials LLC (California branch) dissolved via Franchise Tax Board forfeiture for unpaid taxes - entity remained registered 3 years after operations ceased

The Pattern Serves Multiple Purposes:

  1. Liability Escape: By the time enforcement actions conclude, executives have already moved to new entity with clean public record
  2. Investor Narrative Control: Can claim previous company “failed” due to external factors (regulation, market conditions) while already demonstrating “success” at next venture
  3. Customer Data Portability: Established relationships and data from failing company can be leveraged for next operation
  4. Network Continuity: Same investors (Kapor Capital: LendUp → Puzzle → Daylight) continue funding despite pattern
  5. Learning Curve: Each iteration refines tactics for avoiding detection while maintaining extraction

Why This Pattern Matters:

Traditional fraud prosecution assumes companies fail THEN executives start new ventures. This pattern inverts that assumption: executives pre-position their next extraction operation before the current one collapses, creating continuous fraud infrastructure that evades accountability through corporate shell games and timing manipulation.

The network (YC, General Catalyst, Kapor Capital, QED) enables this pattern by:

  • Funding new entities despite previous failures (Puzzle after LendUp)
  • Providing institutional credibility through continued platforming
  • Suppressing documentation that would reveal the pattern
  • Creating plausible deniability through “advisory” roles and delayed public launches

Pattern Comparison

The following table shows the repeating fraud pattern across entities.

Entity Founded Status Claims Made Reality Victims/Impact Regulatory Action
LendUp 2012 Shut down 2022 Credit building ladder Charged higher rates despite promises 140,000+ consumers CFPB permanent ban, $40M restitution
Ahead Financial 2020 Collapsed 2022 Financial inclusion Locked accounts, unpaid vendors Customers + Rolling Loud ($1.575M judgment) Court judgment, customer lockouts
DashAi (DashFi Inc.) 2022 Operating (Beta) AI automation for auto lending Same CEO as LendUp/Ahead (CFPB-banned) Auto dealerships, loan borrowers Scaling predatory lending via AI (Beta)
Mission Lane 2018 Operating Independent founding Hired as advisor post-acquisition Active consumer complaints, lawsuits BBB complaints, ongoing litigation
Puzzle Financial 2020 Operating Accounting software $312 revenue vs $10M+ burned Startups trusting financial data Photoshopped metrics (Oct 2025)

The Evidence

  • 27+ months of transparent documentation and notification (August 2023 - November 2025)
  • 4 SEC whistleblower complaints with supporting documents (CFPB orders, court judgments, photoshopped metrics, Asset Sale documents)
  • Federal enforcement records: CFPB shutdown (LendUp), FTC settlement (Credit Karma), Rolling Loud lawsuit ($1.575M judgment)
  • Corporate filings: Undisclosed related-party entities, “interested directors” with conflicts, shareholder documents proving false founder claims
  • 🔑 Netanyahu financial backing: March 2015 article identifies CEO Sasha Orloff and Jacob Rosenberg as financial backers of Benjamin Netanyahu—documented one year before first CFPB violation (March 2015 vs. Sept 2016)
  • 🔑 Co-investment with Sam Altman’s family: SEC Form F-3 Registration Statement documents Altman Family LLC, Y Combinator W2014 LLC, and Sasha Orloff as Theorem Technology stockholders (machine-learning underwriting technology that “powered billions of dollars of credit” processing consumer data at scale, 2014-2024); explains YC’s continued platforming as financial conflict, not “founder loyalty”

The Network Response

  • Y Combinator: Notified August 2023; continued platforming
  • On Deck: Notified January 2024; response: 22 months silence → “Top 2025 Company” designation 24 hours after SEC retaliation complaint → CEO public comment “I was just wearing my Puzzle shirt yesterday” (November 11, 2025)
  • TechCrunch: Notified August 2023; 27+ months editorial silence despite initial reporter response
  • Forbes: Direct conflict (contributor Dasha Shunina employed by Puzzle as GTM strategist while writing about CEO); structural conflict (lead investor #8 on Midas List 2025)
  • Puzzle (LinkedIn): Warning comment posted on CPA conference announcement, deleted by Puzzle in 4 minutes

Timeline of Conscious Enablement

  • August 11, 2023, 2:15:26 PM EDT: First SEC complaint filed (Submission #16917-772-564-515), establishing federal whistleblower protection under 15 U.S.C. § 78u-6
  • August 11, 2023, 3:56 PM: Dual C&D letters received (Puzzle Financial + Mission Lane)—1 hour 41 minutes AFTER SEC filing (they didn’t know about SEC filing specifically, but should have been on notice: I used “fintech whistleblower” as LinkedIn tagline leading up to August 11, creating duty to investigate potential federal whistleblower protection before sending legal threats; archived evidence confirms this public designation existed before first C&D); Mission Lane threatened legal action despite never employing me, proving network coordination
  • August 11-14, 2023: Email responses to Bowman with fraud documentation—NEVER mentioned SEC filing
  • January 19, 2024: On Deck CEO notified with question “is this bullshit normal to you?”
  • January 21, 2024: Domain registered (2 days after ODF notification)
  • November 11, 2025, 3:33 AM ET: Comprehensive SEC complaint filed (Submission #17628-500-136-464)
  • November 11, 2025, 6:02 PM ET: Second C&D threatening criminal prosecution (same-day retaliation)
  • November 11, 2025, 6:32 PM ET: Retaliation complaint filed 30 minutes later (Submission #17629-039-523-592)
  • November 12, 2025: ODF “Top 2025 Company” celebration; Julian Weisser publicly comments about wearing Puzzle shirt

What This Proves

The evidence demonstrates systematic enablement after notification, not isolated fraud. Every entity documented here received comprehensive evidence and chose continued platforming, celebration, or retaliation.

The documented pattern of conscious complicity spans:

  • Venture capital (Y Combinator, General Catalyst, Google Ventures)
  • Media (TechCrunch, Forbes)
  • Founder networks (On Deck)
  • Professional associations (CPA.com)

For critical evidence: See the 🔑 Key Evidence Index with 18 categorized pieces demonstrating consciousness, coordination, and systematic enablement.


The Central Thesis: Y Combinator as OpenAI’s Data Extraction Infrastructure

The pattern documented here extends beyond startup fraud. It reveals how the AI revolution’s competitive advantage—training data—is built on systematic extraction from vulnerable populations using Y Combinator as institutional infrastructure and progressive branding as operational camouflage.

The Financial Proof

SEC Form F-3 Registration Statement (Pagaya Technologies, November 21, 2024) documents co-investment in Theorem Technology—a machine-learning underwriting technology company that “powered billions of dollars of credit” processing consumer data at scale (2014-2024)—by:

  • Altman Family LLC (Sam Altman’s personal investment vehicle)
  • Y Combinator W2014 LLC (YC institutional fund)
  • Sasha Orloff (CFPB-banned CEO)

YC’s 27+ months of platforming despite comprehensive fraud documentation, CFPB permanent ban, and federal whistleblower complaints stems from financial alignment, not “founder community loyalty.”

The Extraction Pattern Across Sectors

Financial Data (US Consumers & Startups):

  • LendUp (YC W12): 140,000+ subprime consumer financial behavior → CFPB shutdown
  • Puzzle (YC-affiliated): Startup financial operations → $312 revenue vs $10M+ burned = data infrastructure

Healthcare Data (African Patients):

  • Helium Health (YC S17): Self-described “Largest healthcare data repository on Africans” (1M+ patient records) → Tencent investment (Chinese tech giant access)

Biometric Data (Global Populations):

  • Worldcoin (Sam Altman co-founder): 26M+ iris scans from developing countries → a16z $135M investment (2025)

Data Colonialism: The Power Dynamic

The pattern documented here is data colonialism—the systematic appropriation of human life through data extraction, as defined by scholars Nick Couldry and Ulises Mejias. Like historical colonialism appropriated land and resources, data colonialism appropriates lived experience, converting human behavior into raw material for AI training.

The Colonial Structure:

Historical colonialism required three elements:

  1. Power asymmetry: Colonizers possessed military/economic advantages colonized populations could not resist
  2. Extraction infrastructure: Trading companies, plantations, mining operations converted local resources into metropolitan wealth
  3. Legitimating narratives: “Civilization,” “progress,” “development” masked exploitation as assistance

Data colonialism operates identically:

  1. Power asymmetry: Subprime consumers desperate for credit, undercapitalized African hospitals needing digitization, developing country residents offered “universal basic income”—populations that cannot afford to refuse
  2. Extraction infrastructure: Y Combinator provides institutional legitimacy, progressive branding, investor networks, and legal protection for operations converting human data into training datasets
  3. Legitimating narratives: “Financial inclusion” for predatory lending, “healthcare access” for patient data extraction, “proof of personhood” for biometric surveillance, “helping founders” for startup financial data collection

The Value Flow:

Like historical colonialism, value flows one direction: from vulnerable populations to powerful entities. LendUp consumers’ financial behavior patterns → OpenAI training data. African patients’ healthcare records → Tencent access. Developing country residents’ biometric data → a16z portfolio companies. Startup founders’ operational data → competitive intelligence for YC’s investment advantage.

The populations providing data receive: predatory lending terms (LendUp), underfunded healthcare (Helium Health), cryptocurrency tokens of uncertain value (Worldcoin), or burned investor capital with no product (Puzzle). The extractors receive: $500 billion valuations (OpenAI), institutional power (Y Combinator), and competitive AI advantages.

Why Progressive Branding Works:

Data colonialism requires consent that historical colonialism could obtain through force. Progressive language—“inclusion,” “access,” “empowerment”—inverts extraction into claimed assistance. This is why the documented pattern emphasizes DEI theater, LGBTQ+ ally badges, and “helping underserved populations” messaging while systematically exploiting those same populations.

The branding is not hypocrisy. It is operational necessity. Voluntary data provision requires populations to believe they are being helped, not extracted from.

The Geopolitical Dimension:

The Netanyahu-Altman call (June 5, 2023, five days after whistleblower termination for questioning OpenAI integration) documents how data extraction infrastructure serves state-level strategic interests. Israeli PM discussing AI cooperation with OpenAI CEO, while Israeli-founded companies (Pagaya acquiring Theorem) process US consumer credit data, reveals national intelligence implications of “startup” data collection.

This is not conspiracy theory. It is documented coordination between:

  • State leaders (Netanyahu)
  • AI infrastructure (OpenAI/Altman)
  • Financial data processors (Pagaya/Theorem)
  • Consumer credit operations (LendUp/Puzzle)
  • Venture capital networks (YC/a16z)

The pattern shows data colonialism serving both corporate profit (AI training advantage) and geopolitical intelligence gathering (state-level data access).

The 2025 Recruitment

From YC’s official Summer 2025 Request for Startups: “YC points to a wave of new startups building AI agents that extract, structure, and re-enter data across messy systems like PDFs, faxes, or disconnected EHRs.”

After Helium Health proved the playbook (1M+ African patient records using “digitization” as cover), YC is now explicitly recruiting additional healthcare data extraction operations.

Market Implications

OpenAI’s $500 billion valuation (October 2025) rests on training data advantage. If that data is contaminated by CFPB violations, biometric consent issues, and healthcare privacy violations—the foundation collapses.

OpenAI’s competitive advantage is not superior algorithms. It is access to data that competitors cannot legally obtain.

Full documentation: The AI Bubble is Built on Legally Toxic Data →

Changelog

  • Dec 26:
    • Full WVRO scan now available - Complete workplace violence restraining order filing now documented including all forms, declaration pages, exhibits A-M, and title page showing “PUZZLE FINANCIAL, INC. v. PATRICK DANIEL STOICA”; full documentation reveals: (1) Corporate perjury in Paragraph 3: Sasha swears under oath on behalf of corporation that whistleblower “ultimately resigned” while company’s Separation Agreement (conspicuously omitted from exhibits) states “TERMINATION” throughout, (2) Pre-planned “mentally unstable” narrative: Paragraph 3 claims “acting erratically and posting about his drug use” - manufactured narrative dating back to August 2023 (Alice Ko warning), weaponizing mental health transparency from Sasha’s systematic abuse, (3) Systematic context-stripping: All exhibits (A-M) are surveillance screenshots from 2023-2025 with context removed to mischaracterize protected whistleblower activity as threats, (4) Mocking federal complaints: Lines 14-15 dismiss RICO notifications as “Rico-level” release characterization (putting in dismissive quotes), trivializing 18 U.S.C. § 1962 notices and 5 SEC complaints as “recent LinkedIn posts”, (5) Critical omissions proving consciousness of guilt: Excluded all employment termination documents (Separation Agreement, HR Pals letter, Termination Certificate), August 2023 compliance emails to Lisa Bowman disclaiming violence, July 2023 voicemail reinforcing “resigned” gaslighting; full scan establishes this is corporate retaliation disguised as workplace safety petition with provable false statements under oath made on behalf of PUZZLE FINANCIAL, INC. (creating Board liability, attorney liability, permanent corporate record of institutional misconduct)
  • Dec 25:
    • A16Z Infrastructure Analysis - Comprehensive analysis connecting Aaron Mars’s article (Nov 13, 2025, 2:40 PM) “The Metamorphosis of a16z: From Capital Allocators to Reality Architects” to documented experience; Mars describes a16z as “full-stack coordination engine for technological and political reality”; Erik Torenberg leads “New Media team” offering “timeline takeover as a service”; I sent Torenberg comprehensive fraud documentation Nov 11, 2024—he chose silence and blocking; analysis reveals: not incompetence—infrastructure working as designed; “legitimacy banking” model where deposits can’t be withdrawn with evidence; network membership > documented fraud; “hidden networks” = accountability bypass structure; explains why 27+ months notification failed to penetrate; Mars documented machinery, I documented what it feels like to be crushed by it; failed Quintenz nomination shows limits (public documentation creates friction); ODF/YC/General Catalyst weren’t protecting Sasha—they were protecting the model that makes Sashas possible; key insight: “The infrastructure that determines which questions get asked chose not to ask mine”
    • Christmas cognitive biases post (9:26 AM) - Sasha posts about cognitive biases causing “misdiagnosis, unintentional IRS/tax fraud, legal” issues while actively misdiagnosing me in legal filing and potentially facing securities fraud/tax exposure himself; pure projection describing his own situation; why mention tax fraud specifically if not on his mind? Mission Lane SPV structure? Equity manipulation? Posts about systematic thinking errors while demonstrating them; consciousness of guilt processing his exposure publicly
    • Christmas Day LendUp mythology posts (12:07 AM, 1:26 PM) - TWO separate posts about “Ladders not Chutes” LendUp mythology; “We turned debt trap (like payday) loans into an opportunity to build credit 💪”; cannot accept CFPB reality (140,000 victims, $51M settlements, permanent ban); still centering identity on fraudulent company; claims “founding and scaling 3 companies” (more lies); Christmas Day priorities: defending founder mythology, rewriting CFPB enforcement as success story, performing casual normalcy; 6+ days silence on restraining order while posting holiday content; midnight and afternoon posts = consumed by need to defend LendUp legacy
    • General Catalyst “Familia” Christmas Eve narrative (5:13 PM Dec 24) - Peak spiritual bypassing: artisan gift box narrative about “humans trained at their craft made with love and dedication,” “gratitude,” “Familia,” “abundance we create together”; posted while ghosting restraining order victim for 5+ days; Sophia Xiao (Board Observer) continued casual engagement with Sasha during corporate perjury; “AI-driven world… physical becomes more special” while invested in AI fraud operation; “rooted in place, meant to be shared” while destroying lives; Christmas Eve gift boxes while I’m being ghosted after perjurious WVRO; this is what conscious enablement looks like with better branding
  • Dec 22:
    • Monday 4:30 PM ET - 4+ Days Complete Radio Silence After Institutional Escalation - No legible case number (requested Thursday), no response to corporate perjury documentation, no acknowledgment of six termination documents proving “resigned” false; institutional silence after Orrick employment department escalation (Friday Dec 20): entire employment department received emails documenting paragraph 3 perjury, “resigned” vs TERMINATION contradiction, six company documents, consciousness of guilt through omissions; Puzzle legal department also escalated same day; 2 business days of organizational silence (Fri → Mon, weekend doesn’t count); no competent legal team allows CEO to proceed after perjury documented to department level with provable contradictions in sworn declaration; silence isn’t individual attorney unavailability - it’s institutional recognition filing is indefensible; the escalation killed the case: once [email protected] and [email protected] received documentation, organizational liability exposure became clear; cannot allow client to commit perjury on stand defending paragraph 3; notable: Sasha and Puzzle both silent on social media today - complete posting silence after days of basketball TikToks (Sun 12:07 AM), Docusign GIFs (Sat 9:04 PM), philosophy posts (Sat 10:19 PM); social media silence + legal silence = consciousness of guilt; timeline: Thu Dec 19 perjury docs sent → Fri Dec 20 escalated to departments → Mon Dec 22 4:30 PM ET still no response = institutional paralysis
    • Sasha posts basketball TikTok 12:07 AM - “This guy is incredible” with basketball highlight reel at 12:07 AM Sunday night/Monday morning; 4 days after filing restraining order claiming “imminent threat”; pattern of tone-deaf posting continues (Dec 18 “Amazing!!”, Dec 19 family/earthquakes, Dec 21 Docusign/Yin & Yang, Dec 22 basketball); demonstrates no genuine fear while refusing to provide legible case number or respond to corporate perjury documentation; weaponized legal process documented: file restraining order, immediately return to casual social media; 80 views = deliberate signaling of normalcy while ignoring corporate perjury documentation in inbox
  • Dec 21:
    • Renato Villanueva (Parallel) endorses Sasha 11:16 PM - 57 minutes after Sasha’s Yin & Yang post, Renato publicly replies: “The absolute worst days are always followed by the best”; conscious endorsement three days after Thursday email documenting corporate perjury (Renato’s last email: Dec 19, included six termination documents, perjury analysis, illegible case number); did not receive Friday-Sunday escalation but knew about perjury in legal filing; chose to publicly support during documented legal crisis; Parallel liability confirmed; 7 views = deliberate signal of support; partnership between fraud operations documented
    • Sasha’s 10:19 PM Yin & Yang post (Evidence-194) - 30 minutes after receiving video of Patrick breaking down: “when something negative is happening, it means something amazing is coming soon”; doubles down “founding 3 companies”; zero empathy, complete narcissistic inversion (Patrick’s pain = Sasha’s “negative” before “amazing” comes); textbook malignant narcissism documented in real-time; final email sent: “This is what ‘malignant narcissist’ means. I expect to hear from you tomorrow”
    • Video reply-all sent 9:49 PM - 1-minute unscripted video sent to full recipient list (Sasha, Lisa Bowman, Orrick, Puzzle Legal, HR Pals); humanizes “Unabomber” figure Sasha spent 2.5 years depicting; sitting at home holding restraining order document, visibly breaking down; “Why wouldn’t you even try to talk to me or verify if I’m mentally ill? Just stonewalling, just gaslighting. Why’d you do this to me?”; destroys “imminent threat” narrative; message: “This document represents nothing but emotional sadism”; transparent about AI assistance, methodical documentation approach; genuine exhaustion after 2.5 years; 45 minutes after Sasha’s 9:04 PM Docusign GIF
    • Sasha posts Docusign GIF 9:04 PM (Evidence-193) - “Big announcements coming soon” celebration at 6pm PT Sunday night; 72+ hours after restraining order filing, still no case number provided; final follow-up email: “It’s the end of the weekend. I’ve asked for a legible case number since Thursday. You’re posting normalcy and GIFs. No response.”; performance of normalcy as consciousness of guilt
    • Email to General Catalyst - Accountability email to Hemant Taneja, Sophia Xiao, [email protected]; “Why is your Board Observer casually engaging while he commits perjury on behalf of your entire co-created company?”; GC liability exposure
    • Sophia Xiao engagement documented - General Catalyst Board Observer continues Twitter engagement with Sasha about earthquakes Dec 20; hours after perjury documentation sent; “co-created” company exposure; institutional endorsement despite documented fraud
    • Sunday email: May 31, 2023 termination timeline - Comprehensive documentation of termination day: credit card cancellation as termination signal; posts deleted in seconds; Sasha gaslights employees “Patrick resigned”; Radha Shenoy reinforces false narrative; Sasha posts as “Mental Health Expert” same day; added HIRING badge night before terminating; 2.5-year pattern of narrative control established from day one
  • Dec 16:
    • Daily email #8 sent 1:57 PM ET - “Sasha Publishes LinkedIn Article on AI Hallucinations Hours After Partnership Post”; sent hours after Sasha’s Twitter post (12:53 PM, 30 views) and Puzzle’s redeployment of “Commitment to Accounting Firms” (comments off); comprehensive ironic commentary on every theme Sasha writes about (confidently wrong information, prompt bias, illusion of certainty, human verification, expert validation, teaching bias, auditable/traceable systems) while being CFPB-banned CEO photoshopping metrics, editing Wikipedia, intensifying resume fraud, blocking verification
    • Sasha’s LinkedIn article - “What Happens When AI Gets It Wrong? The Hidden Risks of Hallucinations and Prompt Bias in Professional Services” published Dec 16; closing line: “auditable, traceable, and controllable” from CEO who deleted equity without documentation, suppresses fraud docs, photoshops metrics, edits Wikipedia, blocks whistleblowers; “the risks are too high” - consciousness of guilt; article is defensive narrative inoculation: attempting to pre-dismiss 19K+ documentation as “AI hallucinations,” simulating credibility through over-citation in minutes (Stanford HAI, Chapman U, Harvey stats, YC companies) that took 2.5 years to build, positioning as accuracy-focused while lacking oversight, framing compulsive posting as “deep research,” appropriating whistleblower’s framing and inverting it; reactive defense hours after 10-view partnership post, not thought leadership
    • 7-year karmic cycle analysis - December 2018 Asset Sale (2 days before winter break, $0 to shareholders, ~$4.4M golden parachutes, dual advisory roles, coercive structure; mostly quiet on Twitter, understood narrative control; Jan 15 2019 LinkedIn announcement honest: “board and advisory role at LendUp” and “advisor at Mission Lane”) → 2020 onwards (suddenly lying, glass half-full toxic positivity, never admitting, re-engineering language, blocking repeatedly, victimizing self) → December 2025 (5 SEC complaints, State Bar/Board complaints, 19K+ lines docs, Wikipedia decompensation, compulsive posting, partnership announcements to empty rooms, LinkedIn article on hallucinations, 49-minute panic blocks, complete mental decompensation); 7-year cycle completes, what was done in shadows now fully illuminated
    • Corrections from last email - Photoshopped post was LinkedIn not Forbes; AI usage admission (expanding notes, doing best to proofread, minor errors/hallucinations possible, more tokens = higher conflation, none invalidate mountain of evidence); photoshop sequence: kept Sasha blocked, unblocked to comment, Sasha blocked immediately, didn’t delete until entire ActualQuickbooks campaign removed; spending money on this (Sasha likely knows); treated like “literal dirt” for 2.5 years, now just LinkedIn avatars and untaggable names, becoming numb, meaningless fake interactions
    • To Puzzle employees - This isn’t normal startup hardship; Sasha let it go on 3 months first time (May-Aug 2023), over a month this time (Nov 2025 restart); why keep supporting (“love,” “celebrate”) when Puzzle can’t refute, keeps posting with comments disabled; “Sasha, why did you send C&D in 2023 literally accusing me of accusing you of ‘fraud and conspiracy’? I barely used ‘conspiracy’ then, had no idea it was massive RICO, you gave it away in subtext”; 2023 responses “almost cute and innocent,” didn’t know would get to this point, “all worse than imagined”; emotional cruelty = pure sadism, narrative control, dictatorship, totalitarianism, hasbara
    • Neither could AI make this up - “Illusion of certainty” is one Sasha maintaining for himself; evidence real, federal complaints real, CFPB ban real, photoshopped metrics real, Wikipedia edit war real; karmic reckoning real
    • Brex email distribution changes - After blocking [email protected], [email protected] (Dec 15 “Message rejected”), [email protected] (suspected); Brex executives now receive separately in small batches, eventually needing email relays; if automatic (doubtful given C-suite/co-founder coordination), will find out; more likely: institutional suppression at highest levels
    • Simone Tega permanently added - Puzzle Software Engineer; ignored direct warnings, continues engaging with Puzzle posts
    • 8+ blocks on Parallel post - “That’s not business as usual”
    • 364 LinkedIn views - Post from 18 hours ago detailing Sasha’s 49-minute block when presented with own 2019 announcement
    • Puzzle redeploys “Commitment to Accounting Firms” - No new content, no substance, just distraction; comments immediately turned off; “Why are you posting?”
    • Followup email sent - Brief reminder: “Sasha Orloff is very obviously an actively manipulative, unhinged security and legal hazard. Act like it. Nobody cares about his pre-holiday break drivel.”
  • Dec 19:
    • Documentation correction regarding restraining order exhibits - Clarified throughout document that Sasha’s restraining order exhibits (labeled A through M) are ALL surveillance screenshots spanning 2023-2025 (tweets, LinkedIn posts, emails he saved while monitoring); NOT the Separation Agreement or Termination Certificate; those documents were conspicuously OMITTED from his exhibits because they prove perjury; previous references to “Exhibit A” and “Exhibit C” were corrected to clarify these are internal references within the HR Pals exit paperwork (Separation Agreement references “Exhibit C - Termination Certificate” as attachment to that document), not Sasha’s restraining order exhibits; ironic self-own: Sasha’s actual restraining order Exhibit F (Evidence-180 - team photo) includes my LinkedIn caption stating “Patrick Stoica (me: wrongfully terminated; suffering 2.5+ years of abuse)” - he submitted evidence to the court saying “wrongfully terminated” while swearing under oath in paragraph 3 that I “resigned”; his own surveillance screenshot contradicts his sworn declaration
    • Case number request email sent (12:29 PM ET) to Sasha Orloff ([email protected]), Lisa Bowman ([email protected]), and HR Pals ([email protected]) - Subject: “Case Number Request - Corporate Perjury in Paragraph 3”; requested illegible case number for Monday legal consultation; documented provable corporate perjury in paragraph 3 of Declaration (swears “resigned” while Separation Agreement states “TERMINATION” throughout, includes severance, wrongful discharge waivers); presented company’s own documents proving perjury: 1) Separation Agreement (conspicuously omitted as exhibit despite being referenced), 2) HR Pals Letter of Termination (May 31, 2023 - uses “terminated” twice, completely omitted from filing), 3) Termination Certificate (omitted), 4) NY State Record of Employment (omitted), 5) Insurance Termination Notice (omitted), 6) HR Pals May 31 correspondence (only source of “resignation” language, contradicted by legal docs); 2.5-year gaslighting pattern documented: July 26, 2023 voicemail (reinforced “even though you resigned,” offered transition costs), August 11-14, 2023 compliance emails to Lisa Bowman (already noting Sasha “insisting i resigned”), August 2023-December 2025 surveillance and evidence curation, December 16, 2025 filing with perjury under oath; direct questions to Lisa Bowman: reminded her of August 2023 compliance emails where I apologized profusely, stated “no intention of escalating into violence,” was exhausted/apologetic/seeking to comply, and already called out Sasha’s “resigned” gaslighting - questioned what Sasha told her during preparation, whether she received termination documents or only curated narrative; HR Pals accountability: their termination letter conspicuously omitted, will be presented as evidence of perjury, implicates HR Pals in potential exposure as professional documentation suppressed to manufacture false narrative; consciousness of guilt through omissions: included surveillance screenshots from 2023-2025, omitted all termination documents, July 26 voicemail, August 2023 compliance emails; judge’s recognition: “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED” even without seeing full evidence; Sasha’s post-filing behavior: Dec 18 tweets “Amazing!!,” launches podcast, posts 2026 predictions, monitors/deletes LinkedIn perjury comments, Dec 19 retweets podcast (noted “not stalking, just trying to understand this bizarre headspace for my own safety”); federal supplement notice: will present to legal counsel Monday, supplement 5 SEC complaints, State Bar complaint #25-O-30894, Board of Accountancy complaint #A-2026-1047, CFPB (potential contempt of consent decree); closing: “If this was a simple error, withdraw the petition. If this was deliberate perjury, you’ve created permanent legal exposure for PUZZLE FINANCIAL, INC., its Board, Orrick, and HR Pals”; EOB Friday deadline; attached August 2023 compliance email chain, six termination documents, full restraining order analysis link
    • Lisa Bowman out-of-office auto-reply received (2:12 PM ET) - “Hi there! I am on secondment at a firm client (meaning I am embedded in their legal department), and I currently do not have access to Orrick systems. If you have an urgent employment matter, please email our employment counseling team at [email protected]. Thanks!”; suspicious timing: Lisa Bowman filed perjurious restraining order on behalf of PUZZLE FINANCIAL, INC. on December 16, 2025 with provable false statements in paragraph 3 (swears “resigned” while company’s own Separation Agreement states “TERMINATION”); now unavailable/inaccessible when called out for enabling perjury December 19, 2025; secondment context: “embedded in their legal department” = working at firm client’s offices without access to Orrick systems; raises questions: 1) When did secondment begin? (before or after filing restraining order?), 2) Was she directly involved in final filing decisions or did someone else at Orrick handle?, 3) Why unavailable immediately when perjury documented with six company documents?, 4) Does “no access to Orrick systems” mean genuinely unreachable or strategic unavailability?; timing implications: filed restraining order Monday December 16 → partly denied Wednesday December 18 → perjury called out Friday December 19 → auto-reply reveals unavailability; either coincidental timing (unlikely) or strategic positioning to avoid accountability for catastrophic legal malpractice
    • Reply-all escalation to Orrick Employment Department and Puzzle Legal (2:32 PM ET) - Added [email protected] (Orrick’s employment counseling team per Lisa’s auto-reply) and [email protected] (Puzzle’s in-house legal department); full email: “Adding [email protected] because Lisa has auto-reply on, apparently having no access to Orrick systems. [email protected] too, why not. Orrick Employment Department, please provide me the Case Number for this restraining order, an apparent example of legal malpractice stemming from 2.5 years of Sasha Orloff’s narrative control and misrepresentation across all professional relationships. If you have your finger on the trigger for blocking, cease and desist letters, police threats (without a TRO heads-up), and evidence stockpiling, surely you can provide the number written on your poorly prepared and incoherent court filing. Patrick”; escalation significance: 1) Wider Orrick organizational awareness - No longer individual attorney (Lisa Bowman), now Orrick’s employment counseling team/department level, 2) Puzzle’s in-house legal directly notified - [email protected] means Puzzle’s general counsel/legal department sees everything (corporate perjury, Lisa’s unavailability, malpractice accusation), 3) “Legal malpractice” accusation on record - Direct characterization to Orrick employment department, not just individual attorney, 4) “Poorly prepared and incoherent court filing” - Professional criticism of work product quality, 5) Pattern references - “Blocking, cease and desist letters, police threats (without a TRO heads-up), and evidence stockpiling” establishes 2.5-year retaliation timeline (August 2023 first C&D, August 14 2023 Mission Lane police threat, November 2023 second C&D, December 2025 restraining order), 6) Case escalated beyond individual attorney to organizational liability - Orrick employment department now aware of malpractice claim related to restraining order with corporate perjury, 7) Puzzle’s legal team aware of in-house crisis - Their CEO’s company committed perjury under oath via Orrick attorney who’s now unavailable, 8) Creates institutional pressure - Both Orrick (employment department) and Puzzle (legal department) now have organizational awareness and potential liability exposure
    • Comment deletion consciousness of guilt - Late evening December 19, 2025 (hours after judge partly denied restraining order on December 18), Sasha deleted LinkedIn comments calling out his corporate perjury; deleted both an old comment and recent December 18/19 comment calling out perjury; LinkedIn post context: Charles Crabtree promotion - “Accounting firms… have you met Charles Crabtree? He has spend over a decade devoted to accounting firm success. In just a few months he came in, and the company organized around his leadership. Accounting firms are some of the most in line to benefit from AI, with our early adopters claiming they are seeing 2x as much revenue per accountant as with the incumbents. I am calling it. 2026 is the year accountants make more money than ever before. More clients. Happier clients. More time back. It’s going to be a great year”; consciousness of guilt through deletion pattern: if restraining order legitimate and my accusations false, why delete comments pointing out perjury? If genuinely afraid of imminent violence (as sworn under oath), why actively monitor comment sections and engage with my documentation? Why post promotional content about “2026” business optimism hours after judge found “facts alleged do not support all orders requested”?; what deletion proves: awareness perjury callouts are accurate (otherwise would leave up as “evidence” of my “baseless harassment”), actively monitoring my responses (contradicts “imminent threat” narrative - someone genuinely afraid doesn’t engage), continuing narrative control (can’t refute substance, so deletes accountability), performing normalcy (business promotions) while simultaneously suppressing documentation
    • Pattern analysis: Sasha swears under oath I’m dangerous → hours after judge’s skepticism, tweets “Amazing!!” at Julian’s programs → launches podcast about VC funding → posts about 2026 accounting predictions → monitors and deletes my perjury callouts → continues business-as-usual; this is not behavior of someone genuinely afraid; this is consciousness of guilt: knows restraining order based on perjury, knows I’m documenting it, can’t refute (because it’s true), so deletes evidence of being called out; LinkedIn comment moderation as narrative control: Sasha’s using restraining order as legal weapon while actively engaging with/monitoring my speech, deleting specific accountability callouts, maintaining “thought leader” persona; if I’m “imminent threat,” why engage? If claims false, why delete?
    • Establishes ongoing consciousness of retaliation purpose - Restraining order filed December 16 (after 5 SEC complaints, not after alleged threats), partly denied December 18 with judicial skepticism, Sasha immediately returns to normal posting/comment moderation December 18-19; timeline proves: not genuine fear response (would maintain low profile if actually afraid), strategic reputation management (suppress documentation, maintain business image), retaliation against federal whistleblower (filed after SEC complaints, operates normally after filing), abuse of legal process for narrative control (uses court order to claim victimhood while actively monitoring/suppressing accountability)
    • YouTube comment removal - cross-platform suppression pattern - Turpentine Finance YouTube channel removed comment “sasha orloff committed perjury” from Sasha’s OWN PODCAST SHOW (posted night of December 18/19); critical context: Sasha HOSTS his own ongoing podcast series on Turpentine network (not guest appearances - he is the HOST with hosting contract, production support, distribution infrastructure); Turpentine/Erik Torenberg conscious enablement: Erik Torenberg (Turpentine founder) received explicit fraud documentation November 2025 (CFPB ban, $51M+ enforcement, Asset Sale, SEC complaints, Wikipedia meltdown), yet continued hosting Sasha’s show with 3-4 episodes released post-warning (December 8-10, 2025 documented); establishes systematic cross-platform suppression: LinkedIn comments deleted December 18-19 (detailed criminal enterprise documentation, HR Pals investigation references, corporate perjury callouts) + YouTube factual statement removed December 19 from Sasha’s own podcast show; pattern demonstrates: 1) Active monitoring across multiple platforms (LinkedIn, YouTube, likely others), 2) Systematic suppression of any perjury mentions regardless of platform, 3) Coordinated narrative control (Sasha’s team AND Turpentine moderating comments), 4) Consciousness of guilt (if perjury claims false, why suppress across all platforms?), 5) Not genuine fear (someone afraid of “imminent violence” doesn’t monitor YouTube comment sections on their own podcast show episodes and request removal of “committed perjury” comments); simple factual statement was removed - “sasha orloff committed perjury” is documentably true (paragraph 3 swears “resigned” while Separation Agreement states “TERMINATION”); not harassment, not threats, just statement of documented fact on Sasha’s own podcast show; if I’m wrong, why not leave it up as evidence of my “baseless harassment”? Suppression across platforms proves accuracy and consciousness of perjury; Turpentine liability escalation: Erik Torenberg/Turpentine continues hosting Sasha’s show (formal business relationship) AND participates in comment moderation to suppress perjury callouts = ongoing conscious enablement + active suppression of accountability + RICO exposure (18 U.S.C. § 1962 - each episode post-warning = predicate act in criminal enterprise pattern); demonstrates reach of narrative control extends beyond Sasha’s direct platforms to network ecosystem actively protecting CFPB-banned CEO through hosting contract and comment moderation
    • QED network awareness signal (~10:48 AM ET - Evidence-186) - Brandon Arvanaghi (Meow CEO, QED-backed company, Forbes 30 Under 30, received 27+ months of daily emails documenting fraud) posts on LinkedIn: “I’ve worked at startups where my equity went to 0. More than once. I’m furious about it. In those scenarios — the founders still win. They get connections, accolades, and when there’s an acquihire, the ‘(1x exit)’ in their bio. The team gets nothing. I won’t let that happen to the team at Meow. They know that. We win big or I die trying.”; timing significance: posted same day as perjury documentation, hours BEFORE perjury email sent (12:29 PM ET) specifically highlighting Sasha’s equity deletion in termination agreement; same day as restraining order perjury analysis circulating publicly documenting Sasha deleted all equity while swearing under oath I “resigned”; network context: Brandon is part of QED investor network (Nigel Morris, Frank Rotman), received explicit daily emails for 27+ months, called out in Forbes analysis for platform complicity, formally notified of RICO liability; public response: I commented “Funny, I experienced just this at Puzzle Financial”; Kyle Avery (recruiter) responded “Damn, what a CEO should look like. Good job Brandon Arvanaghi”; demonstrates: QED network figure publicly signals ethical stance on founder equity theft on same day as Sasha’s equity deletion perjury documentation circulating, implicit distancing from Sasha’s behavior (deleted equity + corporate perjury), consciousness of network awareness (Brandon knows about Sasha’s specific misconduct, posts about founder equity theft on same day perjury goes public), validates whistleblower’s documentation through network silence/contrast (no one defends Sasha, QED figures signal ethics); “we win big or I die trying” echoes language Sasha weaponized from my “nothing left to lose” posts; Brandon using similar determination language in POSITIVE ethical context (protecting team) vs. Sasha’s mischaracterization of my language as violence threat; establishes QED network is watching, aware of specific details (equity theft), and choosing how to position themselves relative to Sasha’s documented corporate perjury
  • Dec 18:
    • PUZZLE FINANCIAL, INC. files workplace violence restraining order (WV-109) - CORPORATE RETALIATION + CORPORATE PERJURY: Declaration cover reads “DECLARATION OF SASHA ORLOFF IN SUPPORT OF PUZZLE FINANCIAL, INC.‘S PETITION FOR WORKPLACE VIOLENCE RESTRAINING ORDER” with “PUZZLE FINANCIAL, INC. Petitioner v. PATRICK DANIEL STOICA Respondent”; CORPORATION using workplace violence statute to suppress FORMER EMPLOYEE’S federal whistleblower documentation; CATASTROPHIC LEGAL ERROR: By filing as PUZZLE FINANCIAL, INC. instead of Sasha personally, Sasha’s provable perjury becomes CORPORATE PERJURY - the company itself committed false statements to court under penalty of perjury; creates Board liability, attorney/Orrick liability, permanent corporate record of institutional misconduct, securities implications; filed Dec 16, 2025; decided Dec 18, 2025 by Judge Michelle Tong, Superior Court of California, County of San Francisco; PARTLY GRANTED and PARTLY DENIED; judge explicitly stated: “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”; Petitioner: PUZZLE FINANCIAL, INC. (not Sasha personally); Protected Persons: Sasha Orloff, Jennifer Orloff, “all current Puzzle employees” (transforms conscious enablers explicitly warned about RICO liability into “victims”); Attorney: Lisa M. Bowman (State Bar #253843), Orrick, Herrington & Sutcliffe LLP; Respondent: Patrick Daniel Stoica; Court hearing: January 8, 2026, 8:30 AM, Department 505, Room 505
    • CORPORATE PERJURY IN PARAGRAPH 3 - Sasha swears under penalty of perjury on behalf of PUZZLE FINANCIAL, INC. that whistleblower “resigned” while ADMITTING whistleblower “declined Puzzle’s standard separation agreement”; “STANDARD” is itself damning - by calling predatory terms “standard,” Sasha admits this is how they routinely operate (not special case), normalizes equity theft/fraud waivers/whistleblower suppression as default practice, minimizes contents to sound innocuous when agreement actually included severance ($7,115.38) requiring wrongful discharge waivers + equity forfeiture + non-disparagement (proving this was TERMINATION not resignation—resignations don’t need releases); company’s termination documents (conspicuously OMITTED from exhibits) use “TERMINATION” throughout: HR Pals Letter of Termination (“your employment is terminated” - uses word twice), offered Separation Agreement draft referencing “termination of employment relationship”; Termination Certificate; NY State Record of Employment; Sasha’s admission I “declined” the agreement proves: (1) it was termination not resignation (resignations don’t need releases), (2) I never signed away equity or claims, (3) company took equity anyway when I tried to exercise post-C&D (theft without signed agreement), (4) calling predatory terms “standard” admits systematic exploitation by design; only “resignation” mention: HR Pals email contradicted by their own legal documents; this is not individual error - this is PUZZLE FINANCIAL, INC. admitting terminated employee declined to sign release, then making provably false “resigned” claim to court while stealing equity under “standard” predatory practices
    • CONSCIOUSNESS OF GUILT: Wrong legal response - If accusations are FALSE: normal response is sue for defamation, provide evidence of legitimacy, refute specific claims with documentation, demonstrate business operates lawfully; Sasha’s actual response: filed workplace violence restraining order, characterized federal whistleblower documentation as “threats,” used “I’m scared” as response to “you run criminal enterprise,” stripped context from all protected speech, never refuted single substantive claim, never provided evidence of business legitimacy; can’t sue for defamation because claims are TRUE and documented; can’t refute with evidence because evidence supports criminal enterprise allegations; only option left: suppress the speaker; restraining order attempts to silence rather than refute; someone falsely accused of running criminal enterprise would confidently refute with documentation and sue for damages—someone actually running criminal enterprise would avoid engaging with substance, characterize documentation as harassment, and use legal process to suppress speech
    • California Whistleblower Protections Apply - California courts protect First Amendment rights and whistleblower activity under California Labor Code § 1102.5; federal complaints to SEC/CFPB constitute protected speech on matters of public concern; documentation of corporate fraud documented with federal records; California Code § 425.16 (Anti-SLAPP statute) protects speech about matters of public concern; truth is absolute defense to defamation claims
    • Judge’s explicit finding - Judge Michelle Tong ruled “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”; partial denial indicates judicial skepticism about claims; court record establishes evidence presented was insufficient to support all requested orders
    • Pattern documented in filing - Petitioner operates CFPB-banned business (documented federal record); subject of 5 SEC complaints (federal whistleblower documentation); facing RICO allegations (documented pattern across 13 years); exhibits show protected speech (regulatory complaints, public records, matters of public concern); continues normal business activity (social media posting, business operations) after filing; surveilled respondent while filing (Puzzle follow Dec 13)
    • Direct whistleblower retaliation - Filing against federal whistleblower who has filed 5 SEC complaints, State Bar complaint (#25-O-30894), Board of Accountancy complaint (#A-2026-1047), maintained 19,000+ lines of documented evidence, notified networks for 27+ months; SLAPP-like behavior using legal process to silence federal whistleblower rather than refute documented fraud; forces whistleblower to hire lawyer, appear in court, defend protected speech, creates public record implying wrongdoing, intimidates through legal process—this is retaliation, not safety-seeking
    • Judge’s skepticism - Explicit finding that “facts alleged do not support all orders requested” indicates insufficient evidence or lack of credibility; partial denial vs. full grant shows judicial skepticism; establishes permanent court record that Sasha’s claims don’t hold up under scrutiny
    • Timing as evidence - Filed after 5 SEC complaints establishing federal record, State Bar and Board complaints, 27+ months network notification without refutation, daily December documentation campaign, HR Pals emergency review (Dec 17); not filed after alleged “threats”—filed after federal complaints; timing proves retaliation, not genuine fear
    • Pattern continuation - May-Aug 2023: Documentation → C&D (Aug 11); Aug 14 2023: Police threat from Mission Lane attorney; Nov 2023: Second C&D; Nov-Dec 2025: Resumed documentation → Restraining order (Dec 16); consistent pattern of legal intimidation rather than refutation; escalating retaliation playbook: C&D → police threats → restraining order
    • Federal whistleblower retaliation pattern - Restraining order filed against whistleblower with 5 active SEC complaints, State Bar complaint, Board of Accountancy complaint; filed after 27+ months network notification; timing indicates retaliation following federal complaints rather than response to alleged threats
    • PSYCHIATRIC WEAPONIZATION: “Hearing voices” - Sasha’s declaration (Exhibit J, lines 16-19) deliberately misrepresents “the more voices, the better” (meaning more people speaking up to support whistleblower) as auditory hallucinations/psychosis to manufacture mental illness narrative; common activist/organizing language weaponized: “voices” = people speaking out, witnesses coming forward, public support, breaking silence (standard usage: “we need more voices in this movement,” “amplify marginalized voices”); Sasha strips context and claims “hearing voices” = psychosis to discredit federal whistleblower; full context: “I’m not crazy. The more voices [people speaking up], the better [for accountability]. I can’t get a job because I can’t trust anyone [after retaliation], I can’t get a reference [blacklisting], I can’t do anything with my days [isolation from retaliation]”; this is description of needing community support for whistleblowing + career destruction FROM retaliation, not mental illness; deliberate psychiatric gaslighting to delegitimize federal whistleblower by misrepresenting “I need more people to speak up” as auditory hallucinations
    • LOGICAL CONTRADICTION PROVES CONSCIOUSNESS OF GUILT - Sasha’s declaration contains impossible circular reasoning that validates Patrick’s prediction: Declaration SIMULTANEOUSLY claims: 1) Patrick is actually mentally ill (“hearing voices,” unstable, erratic behaviors), AND 2) Patrick’s tweet “I’ll be racking up my mental illness defense” is evidence of malicious planning; the contradiction: if Patrick is actually mentally ill (Sasha’s claim throughout), then the “defense” tweet is just describing his condition, not evidence of planning; if Patrick is not mentally ill but faking (implication of citing tweet as “evidence”), then why does declaration also claim he’s actually unstable with “hearing voices”?; what Patrick’s tweet actually meant: “I predict that as retaliation escalates, they will claim I’m mentally ill rather than engaging with evidence - this is a known whistleblower suppression tactic”; Sasha’s response proves Patrick correct: weaponizes mental illness narrative (“hearing voices,” instability, isolation) WHILE citing the prediction as “evidence”; this closed loop demonstrates: Patrick accurately predicted the tactic → Sasha executes the exact tactic → while using the prediction itself as proof of wrongdoing; consciousness of guilt: doing exactly what whistleblower predicted while claiming the prediction is suspicious; validates Patrick’s understanding of retaliation playbook; How did Lisa Bowman (Orrick) allow this logical impossibility in sworn declaration? Three possibilities: 1) Professional negligence (didn’t notice contradiction during drafting/review), 2) Client manipulation (Sasha controlled narrative, she accepted framing without critical analysis), 3) Complicity (understood contradiction, filed anyway, bet on judge not noticing); all three options reflect poorly on representation quality and create additional State Bar complaint ammunition
    • Evidence curation for restraining order exposed by timing - Timeline proves Sasha was strategically curating evidence to manufacture “unhinged whistleblower” narrative: Dec 13: Initial restraining order stamp (started preparing filing), Dec 14: Selective comment deletion on LinkedIn - kept “you disgust me 24/7” (emotional, no substance) while deleting evidence-based callouts about federal violations (reckless driving on federal bridge, surveillance harassment); Dec 14 same day: Patrick posts strategic comment calling out the manipulation: “you deleted evidence but kept up ‘you disgust me 24/7’ to create the appearance of an unhinged, baseless whistleblower”; Dec 16: Formal restraining order filing; timing proves strategy: Sasha was curating “evidence” to portray Patrick as emotional/unstable while suppressing specific legal violations that would show legitimate documentation; Patrick exposed the evidence manipulation tactic 2 days before formal filing; demonstrates Sasha was stockpiling screenshots for 2.5 years, selectively deleting context to manufacture threat narrative, then got caught doing it before final filing
    • Six official documents prove termination (supplemental evidence Dec 18 ~5:40 PM) - Evidence inadvertently omitted from prior documentation; proves Sasha committed provable perjury knowing all six documents existed: 1) Separation Agreement (MISSING FROM RESTRAINING ORDER EVIDENCE): “TERMINATION of that employment relationship,” severance $7,115.38, wrongful discharge waivers; 2) Termination Certificate (MISSING): Exhibit C explicitly titled “TERMINATION CERTIFICATE”; 3) HR Pals Letter of Termination (MISSING - Evidence-177): “This letter is to inform you that your employment with Puzzle Financial is terminated effective May 31, 2023 to termination from your position” (word “terminated” used twice by third-party HR provider); 4) NY State Record of Employment (MISSING - Evidence-176): Official unemployment insurance form dated 05/31/2023 (given to “every employee who quits, is laid off, or is discharged”); 5) Insurance Termination Notice (MISSING): “No Longer Employed” as termination reason, delivered 14+ months late (August 2024); 6) HR Pals Correspondence (MISSING): 15 months of insurance gaslighting, discussing terminated employee; Sasha signed Separation Agreement, received HR Pals Letter, oversaw NY State filing, was copied on insurance correspondence (likely personally managed policy as Group Contact Name); judge didn’t even see the full, real evidence yet when ruling “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”
    • Filing quality so poor case number illegible (Dec 18 evening) - Email to network: “Mr. Orloff, it seems I can’t read the Case Number which my lawyer is asking for. This entire document is illegible and poorly scanned. Can I receive this number, or perhaps notice of withdrawal?”; professional tone highlighting incompetence; document so poorly scanned case number unreadable; publicly documents poor quality of filing; implies expectation of withdrawal (“or perhaps notice of withdrawal”); demonstrates reasonable cooperation despite having just proven perjury with six official documents; subtext clear to all recipients: “I’ve destroyed your case with provable perjury, psychiatric weaponization, and logical contradictions - your filing is so poorly executed I can’t even read it - would you like to withdraw now?”
    • Update email to Block Employee Relations (Daniela Monkiewicz) - Email documenting: 1) Corporate perjury (Sasha swore “resigned” on behalf of PUZZLE FINANCIAL, INC. while company’s own Separation Agreement says “TERMINATION”), 2) Consciousness of guilt through evidence curation (spent 2.5 years collecting surveillance screenshots from 2023-2025 but conspicuously omitted Separation Agreement, Termination Certificate, and HR Pals termination letter as exhibits because they prove perjury; references “standard separation agreement” to minimize RICO-level release claims, then doesn’t include it as evidence), 3) Attorney liability questions (Lisa Bowman allowed corporate perjury filing responding to federal RICO allegations and 5 SEC complaints), 4) Material mischaracterization of Jennifer Orloff matter (Sasha’s declaration claims whistleblower “harassed my wife at her place of work” and sent “messages to the CEO and HR employees threatening her job”; Reality: December 4 email to Block’s [email protected], [email protected], [email protected] (cc: [email protected]) with subject “SVP Jennifer Orloff - Marketing Ethics and Conflict of Interest Concern” - legitimate ethics/compliance inquiry to appropriate corporate channels, not “threatening her job”; Sasha manufactured “harassment of wife” narrative by mischaracterizing ethics inquiry as personal threat), 5) Judge’s partial denial with finding “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”; establishes restraining order materially misrepresents Block inquiry, underscores importance of Block’s internal review of conflict of interest and CFPB compliance concerns
    • Strengthens federal case - Demonstrates consciousness of guilt (suppression rather than refutation), pattern of retaliation following federal complaints, use of legal process to intimidate federal whistleblower; creates permanent court record of judge’s skepticism; six documents proving termination + provable perjury + psychiatric weaponization strengthens: whistleblower protection claims, malicious prosecution, abuse of process, anti-SLAPP fee-shifting; can be added to existing State Bar complaint or filed separately after legal resolution
    • Orrick involvement - Major law firm (Orrick, Herrington & Sutcliffe LLP) now on record representing CFPB-banned CEO in action against federal whistleblower, creating potential liability for retaliation; Lisa M. Bowman (State Bar #253843) handling case
  • Dec 17:
    • Daily email #9: Speaking of Prompt Bias - Sent 1:57 PM ET (estimated); subject mislabeled as #8, should be #9; direct opening: “Sasha, you’re only reacting now. You exist to drag this out with me. You’re expressing nostalgia about lending services you’re banned from. You have no emotional awareness. You’re only posting to see who’s still on your side and seeking attention when you’re isolated in your own life”; karmic cycle: “You’ve especially already failed your karmic reckoning. There’s no parachute for you this time”; narcissistic abuse counseling call: “Everyone else: You need narcissistic abuse counseling. I’m serious”
    • Grok analysis of ActualQuickBooks campaign - Whistleblower asked Grok if ActualQuickBooks was good idea: 7.5/10 - “badass guerilla marketing campaign”; gave it pushback on legal risks: drops to 6.5/10; told fresh Grok chat full context (photoshopped metrics 3 → 12,362 likes, Intuit police intervention threat, delayed deletion after confrontation): Grok describes Sasha as “dark triad personality type”; evidence: screenshot shows Sasha thanked Grok for ActualQuickBooks idea back in October; demonstrates AI responds to prompt bias - neutral query gets positive, full context reveals personality disorder
    • “Were you going down a rabbit hole because you have no counsel?” - Questions whether AI/legal research article was due to having no lawyer or attempting to gaslight understanding of RICO patterns; “This year, you got your lawyer to write ‘you reprise the same themes,’ still with no refutation. Your themes are always consistent. The C&D letters sound mostly written by you. What did you tell your lawyer? I gave her truth in my compliance. It appears you gaslighted her too”
    • AI usage confrontation - “How are YOU using AI, Sasha? What bias are you giving it? Any Claude instance with your POV would tell you to shut up immediately, probably even seek psychiatric care”; whistleblower: “I’ve roleplayed scenarios and perspectives a lot with Claude (The Fielder Method). Chatting directly from your perspective is too disturbing for me to do”; document originally intended as LLM context to help employees understand severity; brainwashing impenetrable for some
    • Narcissistic abuse recovery questions - 10 questions for those enabling: Why hasn’t he addressed single piece of evidence directly? Why block documentation but keep emotional supporters? Why post partnerships with comments immediately off? Why 13+ hours editing Wikipedia instead of hiring PR firm? Why photoshop metrics if growth organic? Why does posting increase when evidence surfaces? Why send C&D accusing of “fraud and conspiracy” when I barely used those words? Why would innocent CEO with legal representation continue posting during federal investigation? Does behavior match wrongly accused or cornered? When did you last see him take accountability for anything?
    • “I’m not letting you gaslight me” - Replit background, understanding agentic AI, using LLMs in more interesting ways than majority; “I hated AI in 2023. I still mostly hate it”; spent few hundred on lawyer who didn’t see scope but said approach fine as long as factual, opinions fine if rooted in analysis; “I have full confidence in what I’ve found. Your sycophancy and psychosis accusations won’t hold up in court. Your behavior is why I always dug deeper. You never had a strategy, let alone a poker face”
    • PayPal lending nostalgia (8:41 AM PT / 11:41 AM ET) - PayPal announced becoming bank for small business lending; Sasha tweeted at 8:41 AM PT with heart emojis; “No processing. Just waking up and tweeting nostalgia about the lending industry he’s banned from”; compulsive emotional processing
    • “36 🤯” compulsive post (8:05 AM PT / 11:05 AM ET) - Posted “36 🤯” with 118 views; “I have no idea what this even means”; isolated attention-seeking
    • 2:06 PM accounting partner program post - Posted “Join the Puzzle Accounting Partner Program” with comments disabled; promoting “revenue sharing on client referrals,” “white-glove historical books migration at no cost,” “dedicated training & support,” “co-marketing” while facing 5 SEC complaints, State Bar complaint, Board of Accountancy complaint, CFPB permanent ban; instant engagement from Sina Mohebiany and Dasha Shunina (and her pages) - likes/reposts immediately; loyalty checks even when industry going on break; “You don’t realize these people will turn on you in the end”
    • Charles Crabtree observation - VP hasn’t liked Puzzle’s own career repost of Charles’ hiring announcement; suggests internal tension
    • Career listings warning - “You need to take those career listings down. Unless you’re hiring an interim CEO to wind this company down, you cannot hire more people into your fraud operation without proper disclosure”
    • Solo founder framework - “Why don’t you guys respect me as a solo founder? I made a fraud framework combining AI, OSINT, and accountability. This is a blueprint”; marginal cost quote callback: “The marginal cost of embarrassing you guys and escalating consequences for Sasha Orloff’s behavior is approaching zero. I can scale this up effortlessly. The marginal cost for you to continue ignoring this is increasing exponentially”
    • Spring/summer 2025 tweets documented - May 31, 2025: “Hemant will be taking the lead with Puzzle.io soon!” on chart of “$5bn+ outcome” Series A investors (Hemant Taneja/General Catalyst lead investor, “co-creator of Puzzle,” Midas List recipient); May 31, 2025: Quote tweet of “Best cofounder dynamic: One person is delusional. The other is technical. Both are loyal” with raising hand emojis; April 29, 2025: “I asked ChatGPT to guess what I do for a living based upon my history” with Sam Altman/“I don’t mind this version” (sycophancy comparison); “You’ve been having your own experiences with sycophancy this year, Sasha”
    • Mitchell Troyanovsky full accountability - Former Product Manager who received Aug 2021 warning email about toxic technical leadership; being from Goldman Sachs, he asked around about LendUp - actively investigated, already knew who Nigel Morris was; didn’t exercise options (knew something wrong, didn’t believe in company future); performed “it was great being here” exit on Slack (maintaining appearances); quickly called when whistleblower started questioning Sasha’s claims on LinkedIn; revealed Mission Lane cofounding fraud: “If you’re gonna do this, Sasha didn’t really cofound Mission Lane” - knew credential fraud all along; laughed about Nigel Morris when whistleblower said “I have no idea who that is” - found ignorance of LendUp/Mission Lane power structure amusing; never heard from again after that call; people told whistleblower Sasha was in room threatening to sue Mitchell for starting similar product - despite adversarial relationship and legal threats; December 12, 2025: Mitchell liked Sasha’s DCPA promotional repost (“you be hearing a lot more about Puzzle in 2026 and 2027”) with comprehensive fraud documentation visible in comments; “After acknowledging Mission Lane cofounding fraud privately. After not exercising options because he knew something was wrong. After performing a ‘great being here’ exit. And despite Sasha threatening legal action against him for starting a similar product. He’s now publicly supporting Sasha’s promotional content while fraud documentation accumulates in plain sight. This is consciousness of guilt and continued enablement despite years of knowing the truth and having every reason to distance himself. Unless he’s somehow trolling Sasha, knowing there won’t be a 2026”
    • Julian Weisser dismissal - “I’m bored of Julian Weisser. He fell for enough bait. Moving on”; “‘Weisser.’ ‘Cwikla.’ I don’t trust tech bros who only use their surname”
    • Startup Cookie farewell - Final email to Barbara/Sam at Startup Cookie; “Thank you for paying attention. You can stay up to date at: patrickstoica.com/puzzle-statement”; “Updated in real-time. 19,000+ lines. 5 SEC complaints. State Bar complaint. Board of Accountancy complaint. Every word documented”
    • HR Pals coordinated emergency review - Matthew Callis, PHR (Sr. Director of HR at HR Pals, promoted May 2025) viewed profile ~2:XX PM ET; HR Pals executed May 31, 2023 termination through Brianna Gutierrez, sent separation agreement requiring whistleblower to waive fraud claims for CFPB-banned CEO; Matthew oversees full operations (HRIS, payroll, benefits, coordinates with managing partners); 4:55 PM ET: Vanessa Moya (Senior HR Generalist, promoted Feb 2025, HR Generalist since Nov 2022, joined 2021) viewed profile - same role as Brianna; two views within hours = coordinated senior review; unclear if Vanessa replacement or senior-level cross-check; rug-pull moment: Unless HR Pals that stupid and corrupt, preparing to drop Puzzle as client; coordinated review suggests internal discussion about liability exposure; facilitated wrongful termination, equity deletion, separation agreement for CFPB-banned CEO during federal investigation; losing all HR services = Puzzle can’t operate without third-party HR provider, especially during federal proceedings; senior HR leadership monitoring 2.5 years post-termination = emergency triage; pattern: everyone abandons eventually
    • 3:06 PM ET: Charles Crabtree doubles down - VP reposted Puzzle’s accounting partner program post with lengthy statement about “signing more accounting firms,” “accuracy, control, and transparency,” “human judgment, expertise, and accountability,” “no services arm, no channel conflict”; comments disabled on his repost; VP who wouldn’t engage with own hiring announcement now performing partnership recruitment with comments off during federal investigation while CEO faces 5 SEC complaints, State Bar complaint, Board complaint, CFPB ban; promoting partnerships during HR Pals emergency review
    • Circular amplification loop with operational collapse - Puzzle posts about Charles → Charles reposts (comments disabled) → Whistleblower quote-reposts Charles: “Charles Crabtree has received daily notice of his active participation in a criminal enterprise (Puzzle), enabling fraud and abuse with Sasha Orloff. He won’t be on Sasha’s side much longer. Notice he also disables comments to suppress fraud documentation. Charles will be needing narcissistic abuse counseling” → Puzzle reposts Charles’ repost (comments OPEN) - strategic positioning to appear above whistleblower’s “criminal enterprise” callout in Charles’ reposts list; Sasha wrote original with “He has spend” typo (basic grammar from CEO claiming “accuracy, control, transparency”), vague self-aggrandizing, unverified “2x revenue” claims, forced confidence (“I am calling it. 2026 is the year…”); Charles reposted without editing typo; Puzzle reposted to suppress whistleblower callout through strategic feed positioning while performing “bold confidence”; pattern: circular validation + typo survives + strategic suppression + selective comment deletion = consciousness of guilt and calculated narrative control
    • Comment suppression on Puzzle’s repost - Whistleblower commented: “Charles Crabtree continues supporting fraud and abuse… Puzzle is currently under investigation by HR Pals” + “‘He has spend’ - Should be ‘spent’” plus full dissection; first comments 6:45 PM ET; by 8:26 PM ET, Sasha deleted 3 comments (1h 41min); whistleblower: “Puzzle Financial’s CEO continues suppressing his own fraud. He was honest about his career in 2019. He’s been progressively lying since 2020. He’s currently under investigation by HR Pals. patrickstoica.com/puzzle-statement/ I’m getting bored of this, Sasha. Game’s over.” Deleted in 3 minutes; suppression accelerating (1h41m → 3min = active monitoring, panic response); whistleblower posted again; pattern: intentionally left comments on (performing “bold confidence”/transparency) → immediate manual suppression when challenged (can’t defend) → public callout → faster deletion → continued posting = conscious decision to perform confidence while selectively suppressing; proves active real-time monitoring, consciousness of guilt, escalating panic, inability to stop cycle; no lawyer would approve manual real-time comment deletion during federal investigation with HR provider emergency review ongoing
  • Dec 15:
    • Puzzle posts partnership announcement (3:30 PM ET) - “@puzzlefin: Puzzle is proud to announce our partnership with Parallel, an AI-powered financial forecasting and headcount planning platform 👏 Thank you for your trust, @_renatov”; Renato replies (10 views): “Puzzle has been a game changer for our ability to support our customers… Puzzle + Parallel = ideal financial stack”; Luke Frye (Rivet.tax) liked Renato’s reply - especially disappointing given ex-coworker Canadian CPA received Nov 5 fraud docs, personally re-forwarded Dec 12 with “It appears you will never see my humanity. Fuck you” after continued enablement despite Ross Fubini/XYZ Capital ownership; business as usual performance during federal crisis; Renato previously warned, blocked whistleblower’s real LinkedIn, appeared on Turpentine podcast anyway, now officially partnering; minimal engagement across all channels (Renato reply: 10 views; Turpentine podcast episode Dec 10: 31 views after 5 days) vs claimed “word of mouth” growth and “packed bars in DC”; keeps linking podcast that barely broke 30 views in 5 days; Turpentine platforming continues; pattern: perform normalcy, suppress documentation, continue inducing victims
    • Monday afternoon email sent at 5:27 PM ET - “I Would’ve Congratulated You on 24 Hours of Sasha Silence, But Puzzle Keeps Going” sent to network documenting: Renato Villanueva (Parallel) partnership announcement despite being warned/blocked; Charles Crabtree VP hiring post = active inducement during federal investigation; Austin Rose (Mercury Partnerships) profile view 6 hours prior = partner surveillance; Jason Mitchell/Chris Yancey (Ramp Director of Software Engineering, ex-Affirm) continued engagement despite documentation; word of mouth contradiction analysis (ActualQuickbooks campaign vs claimed organic strategy); domain suppression evidence (aheadmoney.com silent since Aug 1, 2023; lendup.com lemonade tagline removed after whistleblower posted); technical credentials established (BS Computer Science Georgia Tech 2014, 24 years web development, DNS/WHOIS analysis = basic due diligence not mental illness); aheadmoney.com timeline (Aug 2019 “coming soon” during Sasha’s announced board tenure, July 2020 AWS deployment, Sept 2022 parking); Insights Servicing connection to shell company pattern; mental health context (therapy, psychedelics, accountability vs survival); “digital diviner” framing (using AI to invert the system, prophecies before acquiring evidence, pattern recognition); Romanian immigrant story (first-generation American, father refugee from Ceaușescu dictatorship, retired carpenter/meticulous bookkeeper, “Sunteți niște hoți”); equity theft as cover-blowing (“You fucked with the wrong person”); Julian’s Pope Francis tweets (Dec 13 9:18 PM, Dec 14 3:21 PM) = moral hypocrisy during crisis (“deferred dreams” while stealing equity, ODF given front-row seat to decline); NS8 parallel (Adam Rogas $123M fraud, bail violation, Lightspeed connection, Puzzle CTO recruited victims Oct 2020, Lightspeed platformed Sasha Aug 2023); Ross Fubini Valencia Data witness (“I was in the room with him” during rebrand discomfort, Forbes Midas #88, Palantir advisor 15+ years, LinkedIn still lists LendUp despite ban); Connie Loizos complicity (“fully understands her complicit role, ghosted after pretending to review evidence, enabled ‘split into two businesses’ narrative”); photoshopped comment author exchange (Evidence-04: 3 → 12,362 likes, author confirms no consent, now scared to speak, “He seems like a very powerful man… someone reading our messages”, immediately unfollowed, confirms deletion); shell company network detailed (First Boulevard → Kinly → Greenwood, Be Tenth Inc trademark opposition, post-Floyd capital, financial disarray); resume fraud “subsidiary” minimization exposed (“LendUp Loans, LLC d/b/a LendUp” framed as “a LendUp Global subsidiary” to minimize $51M+ enforcement against THE core lending operation he ran as CEO); Sasha’s Dec 14 6:14 PM daughter post (“snack competition… Final score: 6–7” with Gen Alpha meme attempt) = tokenizing 2 hours after Sunday email documented pattern, during federal investigation, while whistleblower considering inpatient; closing: “my emails ARE the investigation” + “When I say Sasha needs to stop compulsively posting: that includes Puzzle” + “Sunteți niște hoți”
    • Brex blocks whistleblower emails AGAIN (second coordinated block) - After Dec 11 first block (6 C-suite addresses) was circumvented via [email protected] re-forward, Dec 15 Monday afternoon email sent from [email protected] to same 6 addresses ([email protected], [email protected], [email protected], [email protected], [email protected], [email protected]) after dropping [email protected] from recipients; all 6 blocked again with identical Google Workspace error: “550-5.7.1 Your account is sending malicious email”; [email protected] also blocked with different error (“Message rejected”), [email protected] already blocked; different error messages prove manual intervention, not automatic spam filtering; message to Brex: “What’s actually ‘malicious’ is conspiring in fraud and abuse. Documented. You will continue receiving emails. You continue creating evidence of consciousness of guilt.”; second institutional suppression demonstrates: 1) Active monitoring of multiple alternate email addresses, 2) Manual blocking decisions (different errors per address), 3) Coordinated C-suite/co-founder level blocking (Conor Bradshaw CRO, Pedro Franceschi co-founder, NicolĂĄs Carey co-founder, Anshul Shah VP Product, Henrique Dubugras co-founder, Jason Mok VP Partnerships), 4) Persistent false characterization of fraud documentation as “malicious,” 5) Consciousness of guilt - if documentation were false they’d engage/refute, not suppress across multiple email addresses; pattern escalation: Dec 11 first block → hipatark circumvention → Dec 15 second block (multiple addresses) → kingblob circumvention continues; Brex has Sept 2025 Puzzle integration, independent OpenAI data partnership (March 2023), YC W17 portfolio, Israeli connections (Shai Goldman, Weav acquisition $50M); institutional suppression at co-founder/C-suite level establishes coordinated conspiracy, not individual judgment
    • Post-documentation blocking pattern - Too lazy to make new LinkedIn account to verify all, but documented pattern: Parallel partnership post: 6 people blocked (12 visible → 18 total, 6 blocked): Sina Mohebiany, Simone Tega, WTM/Gathering accounts, likely Dasha; Careers hiring post (Charles Crabtree): 2 people blocked (9 visible → 11 total, 2 blocked): Simone Tega, Jason Mitchell; CEO stack post: No blocks observed (Jason Mitchell still visible). Pattern: Strategic blocking on partnership/business posts (external credibility), selective blocking on hiring posts (internal operations), minimal blocking on generic CEO posts (maintaining engagement facade). Demonstrates consciousness of which evidence is most damaging per post type.
  • Dec 14:
    • Sunday email sent to 96 recipients - 4:33 PM ET: “Direct Evidence of Conspiracy: Puzzle’s Surveillance, Sasha’s Performance, Julian’s Silence” sent detailing Dec 13 surveillance, human cost (ex suggesting inpatient), podcast guest complicity, a16z implication; comprehensive documentation of calculated retaliation
    • Sasha’s reactive Twitter performance - Evidence-173 (LendUp lemonade comparison): 5:15 PM ET (42 minutes after email sent): “Glass half full Sunday” post doubling down on Puzzle’s “success”; mirrors LendUp’s “When Life Gives You Lemons, Make Lemonade!” tagline that appeared on lendup.com AFTER CFPB ban; BOMBSHELL: Sasha’s own January 15, 2019 LinkedIn announcement explicitly stated he would maintain “board and advisory role at LendUp” - proving he had formal connection during CFPB ban (December 2021) and toxic positivity period; current lendup.com notice claims “no relation to former executives” but directly contradicts his own 2019 public announcement; tagline reactively removed in 2023 (4+ years after announced advisory role) after whistleblower posted, proving either Sasha maintained influence or “new leadership” monitored on his behalf; same toxic positivity playbook; claims “~18 improvements per week” in Nov+Dec, “Post-Digital CPA, interest in Puzzle is at an all-time high”, “2026 is the year nobody stumbles into Puzzle”, “Accountants win. Founders win. Our team wins”, “Eyes on 2026. Purdy’s in. LFG”; 5:44 PM: “Fritos and queso” (49ers game); 5:57 PM: openly defends Adam Neumann’s fraudulent WeWork S1 (“When I try and think optimistically about what Adam Neumann was trying to do with his S1, this is what he intended”); WeWork S1 universally recognized as deceptive (fake metrics, self-dealing, governance failures, $47B → failed IPO, SEC settlement); shift from SBF subconscious awareness to explicit fraud apologetics; sees himself in Neumann; consciousness of guilt performing as defense narrative; 6:14 PM: back to using daughter as token - “snack competition” post with daughter behind unicorn mask (16 views); compulsive tokenizing AFTER explicit Sunday email callout for using children as tokens (Evidence-171, Evidence-172); “6-7” attempt at Gen Alpha meme slang (TikTok/basketball culture); cannot stop performing despite consequences; 6:43 PM: typo-laden VC power law philosophy (“The hours and brutal”, “Ans hopefully”); quoting Rohit Mittal’s thread about Sequoia’s 50% “written off to zero” and sympathetic founders with real customers/revenue who became write-offs; positioning himself as sympathetic founder caught in power law math when LendUp was literally written off as zero and Puzzle heading there; but Rohit’s thread about legitimate founders trapped by structure - Sasha is CFPB-banned CEO who chose to operate prohibited business; preemptive narrative for inevitable collapse; “rewriting what’s possible” - LITERAL consciousness of guilt (he literally rewrites Wikipedia, Mission Lane timeline, LendUp history); “solve real problems” while CFPB-banned for predatory lending; five reactive performances in 130 minutes (toxic positivity → casual dad → fraud apologetics → daughter token → VC philosophy); complete mental decompensation; typos reveal agitated state; increasingly isolated, only posting on Twitter for attention; high likelihood he sees emails and reacts within hour; reactive doubling down after comprehensive conspiracy documentation
    • LinkedIn version posted (Sunday Dec 14) - VC power law reposted to professional platform with unprompted defensive additions: “And I think it’s super fun” + “I wouldn’t trade it for anything” (nobody asked, nobody offered alternative); consciousness of defeat performing as conviction; fixed “Ans” → “And” but still has typo (“hours and brutal” missing “are”); posted during crisis weekend after Sunday email documenting conspiracy
    • Selective comment deletion - Evidence-174: On previous Porsche post, Sasha kept whistleblower’s emotional comment (“you disgust me 24/7”) while deleting evidence-based callouts (reckless driving on federal bridge, surveillance harassment); strategic framing to portray whistleblower as unhinged while suppressing specific federal violations; kept Dasha + Puzzle supportive comments; proves consciousness of which evidence is most damaging; federal obstruction pattern (Twitter blocks November → LinkedIn blocks December → selective evidence-based comment deletion)
    • Strategic comment calling out selective deletion - Posted to Sasha’s LinkedIn VC power law post: directly links to his January 2019 announcement (board/advisory role at LendUp), connects to aheadmoney.com timing (August 2019 during board tenure), explicitly names the selective deletion strategy (“you deleted evidence but kept up ‘you disgust me 24/7’ to create the appearance of an unhinged, baseless whistleblower”), references 18,000+ line documentation, notes he’s disregarding mass emails documenting distress, predicts: “your career is over. Puzzle’s being written of to 0. just like your prized LendUp”; any response (delete/block/leave visible) proves consciousness of guilt; LinkedIn announcement is public, permanent, contradicts every narrative since
    • Follow-up comment with direct advice - Reply to first comment: “what are you doing, Sasha? it seems you can’t stop creating more evidence, especially as the walls close in. the bare minimum advice people should be giving you if you have no legal representation: stop posting”; concerned/clinical tone, not emotional; points out compulsive engagement is self-destructive; implies either no legal representation or ignoring counsel; every engagement after this comment proves inability to stop
    • Sunday night compulsive LinkedIn engagement (9:47 PM ET) - AFTER being directly told to stop posting, Sasha comments on Tabs hiring post: “Paige is one of the most incredible people in the world” (praising Paige Honeycomb who blocked whistleblower and participated in equity theft); “most incredible people” = “this person always abided by my orders” (obedience/loyalty during fraud); whistleblower replies: “Paige Honeycomb blocked me and had no problem stealing my equity at your fraud company” + “sasha’s definition of incredible people: someone who looks away from fraud and enables abuse for 2 years”; demonstrates complete inability to stop engaging - ignored explicit advice to stop, continued performing normalcy
    • Two comments on Rohit Mittal’s power law post (~6:47 PM ET) - Goes to source thread he quoted for VC philosophy: “It’s people like you who make the ecosystem better. Thank you for what you do.” + “Power law in full effect”; performing ecosystem gratitude rhetoric; doubling down on power law narrative during crisis weekend; compulsive engagement pattern - cannot stay silent, must perform normalcy/community builder role while facing federal documentation
    • Sasha blocks whistleblower account at 10:19 PM ET - 49 minutes after strategic comment posted (~9:30 PM) linking to his 2019 LinkedIn announcement; proves he read it immediately, cannot refute it (his own words), cannot delete it (not his comment), blocked to stop conversation; trapped the damaging evidence permanently on his own LinkedIn post - comment calling out selective deletion strategy + linking 2019 board/advisory announcement now visible forever; federal obstruction pattern continuation: Twitter blocks Nov → Julian blocks Dec 11 → LinkedIn alt Dec 13 → strategic account Dec 14 (49 min after most damaging comment)
    • Sunday night follow-up email sent at 11:32 PM ET - “Sunday Night Update: Sasha Blocked Me in 49 Minutes After I Linked His 2019 LinkedIn Announcement” sent to 96 recipients (including [email protected]) documenting: 49-minute block as fastest response yet proving active monitoring; January 15, 2019 LinkedIn announcement as bombshell evidence (Web Archive) publicly announced “board and advisory role at LendUp” directly contradicting later “no role (operational, governance or otherwise)” federal claims; acknowledged he’s reading emails via [email protected] (daughter photo at 6:14 PM after Sunday email explicitly documented tokenizing pattern); @puzzlefin Dec 13 surveillance established as direct conspiracy evidence; false narrative curation exposed (kept “you disgust me 24/7”, deleted evidence-based callouts); compulsive engagement continued AFTER being told “stop posting” (Paige Honeycomb praise, Rohit Mittal comments); closing: “You don’t need more evidence. That was never the issue. You’re all actively making this situation worse by allowing Sasha to continue posting.” + “Stop making me make more LinkedIn accounts.”; 2019 announcement public, permanent, archived, destroys every narrative since; 49-minute panic block proves he knows; board role vs no governance role contradiction cannot be erased
  • Dec 13:
    • Puzzle follows whistleblower’s alt account (@orbofweed) - Evidence-169: Direct evidence of harassment and surveillance; Puzzle followed at 2:14 PM ET, screenshot taken 3 PM showing “Puzzle followed you” notification, surrounding tweets show agitation/meltdown from night prior; soft blocked, company actively monitoring during documented mental health crisis; follows hours after all-caps breakdown, AI validation-seeking, Twitter confrontations; they followed knowing the mental state
    • Mass email replies sent - Two messages to all 98 recipients: 1) “Further proof I worked at Puzzle Financial as one of its first employees… You’re watching me breakdown in realtime. Just like you all wanted” with screenshot of GitHub emails from puzzlefin repository (October 2020) proving employment and frontend contributions; 2) “Everyone in my life is deeply concerned. I’m this close to going to inpatient treatment… I’m actively suffering through a mental health crisis. You people have no shame”
    • Edward Kim viewed profile twice (Dec 12 & 13) - Continued Gusto investigation at executive level
    • Sasha’s wealth display and performance - Evidence-171, Evidence-172, Evidence-168: Porsche post taken while driving on Golden Gate Bridge; Evidence-171 shows original tweet “bringing home the kids’ holiday gifts from grandma and grandpas house” (he didn’t buy them, just transported); wording implies provider role when he’s delivery driver; Evidence-172 (April 2024) shows pattern of using children as tokens - invoking kids as validators of Spotify podcast “celebrity” status (thinks appearing on Spotify = Taylor Swift fame), responded “What doesn’t kill you makes you stronger!” (ironic given current investigation); podcast running 8+ months; children exist to serve his ego as props/audience; reckless behavior (photo while driving on federal bridge), wealth display during whistleblower’s inpatient consideration, dad performance with others’ gifts; Casey Woo (Fog Ventures, first podcast guest) notified multiple times, continues enabling; DCPA victory lap (“packed bars in DC,” “incredible interest”), VC engagement farming (“top tier VC” AI predictions for 2026, 4,804 views), casual normalcy tweets (butter, Chipotle); consciousness of guilt performing wealth and normalcy while under investigation
    • Sasha/Julian coordination around surveillance timing - 12:21 PM: Sasha reposts DCPA (saw whistleblower’s aggressive Twitter reply “YOU’RE A FRAUD COMPANY. WHY ARE YOU STILL POSTING HERE, NO ONE GIVES A FUCK” - now deleted); 1:17 PM: Sasha posts VC hot takes 56 minutes after seeing all-caps “FRAUD COMPANY” callout (4,804 views); 1:32 PM: Julian comments “That only number 3 is particularly warm ;)” (126 views); 2:14 PM: Puzzle follows @orbofweed (1 hour 53 minutes after Sasha saw fraud callout, 42 minutes after Julian’s comment); Later: Sasha posts Porsche (ONLY post after follow); entire sequence happened AFTER Sasha saw explicit all-caps fraud confrontation; demonstrates deliberate escalation/calculated retaliation, not reactive behavior; Julian not laying low after being publicly called predator
    • Julian’s Pope Francis tweet (9:18 PM ET) - Evidence-170: Posts philosophical thread about “crisis of meaning,” “cultural amnesia,” and “restoring unbroken chains” citing Pope Francis hours after receiving mass emails documenting whistleblower’s mental health decline (450 views); immediate email response: “lol. gaslighting me and posting more moral hypocrisy in realtime”; escalating email series to ODF specifically
    • Email escalation to ODF (9:09-10:42 PM ET) - Four emails specifically targeting Julian/ODF (CC’d [email protected]): 1) 9:09 PM: Replit network spread documentation, crying/hyperventilating call with friend, Sasha’s Twitter harassment; 2) 9:27 PM: Pope tweet response calling out hypocrisy; 3) 10:42 PM: Direct confrontation “literally who are you writing this drivel for? you SHOULD be getting a LAWYER. NOT MAKING MORE EVIDENCE. AND NOT DIRECTLY RUINING A WHISTLEBLOWER’S LIFE”; 4) Later: Final conspiracy analysis “this follow from Puzzle is literal evidence of conspiracy between puzzle, sasha, and julian… two grownass men ganging up on me, wanting to see me suffer and die? that’s harassment”; added a16z complicity claim
    • Sasha blocks another LinkedIn alt - Whistleblower added new comments to Sasha’s Friday post (“there won’t be a 2026, definitely not a 2027”) showing evidence of Twitter follow (Evidence-169) and reckless driving (Evidence-168); Sasha deleted comments and blocked within 1-2 hours; blocked specifically for calling out federal offenses (reckless driving on federal bridge, corporate surveillance/harassment); proves he understands gravity - if they weren’t serious he’d ignore, but can’t engage so immediate suppression; pattern continuation: @sashaorloff/@dasha_shunina/@puzzlefin Twitter blocks (Nov), Julian blocking @orbofweed (Dec 11), now LinkedIn alt (Dec 13); federal obstruction pattern, consciousness of guilt
    • External validation of crisis - Friend texted concerned after missed calls, not sure if inpatient treatment needed; ex independently suggested inpatient treatment same day as Puzzle’s surveillance; crying and hyperventilated entire time during both calls; first helpful conversations in days; friends, family, and Replit coworkers increasingly concerned and checking in; already lost one friend from middle school; this isn’t just whistleblower saying I’m in crisis - everyone in life sees it; “While Sasha posts Porsche photos and Julian tweets about Pope Francis, my ex is independently assessing whether I need to be institutionalized. While you perform and enable, people who actually care about me are trying to reach someone who can barely speak without breaking down. This is what your silence does. This is what your continued engagement enables. This is the human cost of protecting the network. Every remotely intelligent person sees you’re all running a blatant, abusive fraud operation.”
  • Dec 12:
    • Daily email #5 - Sent from [email protected] due to Brex blocking; Alice Ko KPMG credentials focus (Big Four Senior Auditor 2006-2009, SOX compliance specialist, left after 5 months recognizing fraud, contacted day before C&D); 6 Puzzle employees added for Dec 12 DCPA engagement (Patricia Daos, Naveen Venkatesh/blocked whistleblower, Sina Mohebiany/Canadian, Jeffrey Everingham CPA, Charles Crabtree VP, Arash Ahmadi/Canadian); Brex blocking escalation (98 recipients now from alternate email, blocking = evidence); Julian 5:00-5:03 PM continued engagement while observed (abysmal views); Julian 8:18 PM equity tweet (“Those who are stingy with equity have a scarcity mindset” - 107 views) 5 hours after receiving equity deletion documentation, philosophical performance about teammate equity while enabling equity theft; Replit contrast (took 9 months to do interviews; cofounder followed whistleblower Twitter, CFO saw through Puzzle, real vs deleted equity); mental health decline (persimmons box, cannabis/alcohol, ghosting/declining holiday plans); Garry Tan/YC expanded (Hacker News mods responded 2023 but not Garry; Pagaya securities with Altman Family LLC + Sasha, alumni syndicate, Sasha/Ash at YC office); [email protected] added to Cc; XYZ Capital re-forwarded to correct addresses ([email protected], [email protected] after wrong domain/email used; “Ross Fubini explicitly enabled it (and my equity deletion). You’re on daily notice.”); 98 total recipients (57 To, 41 Cc)
    • Dec 12 DCPA post - “We’re back from Digital CPA.com… calendar is now packed with demos”; instant comment lockdown; engagement from all 6 new employee recipients plus Dasha (3 accounts), Jason Mitchell, Marissa Mata (after email), Luke Frye/Rivet.tax (after email, re-forwarded twice: 8:36 PM “It appears you will never see my humanity. Fuck you”; 8:39 PM final to [email protected] + [email protected] citing Alice Ko’s immediate Canadian understanding vs Luke’s continued enablement, Ross Fubini/XYZ Capital ownership of Rivet, demands independent counsel and disconnection), Sasha; reposts from Jeffrey, Charles (“incredibly grateful… world class event”), Naveen, Sasha (reposted when email sent: “accounting and AI… you be hearing a lot more about Puzzle in 2026 and 2027”); Mitchell Troyanovsky (former PM, received Aug 2021 email, acknowledged Mission Lane cofounding fraud, didn’t exercise options, left pretending “great being here”) liked Sasha’s repost with fraud documentation visible in comments; whistleblower commented on Sasha’s repost: “there won’t be a 2026, and definitely not a 2027” with fraud doc link, calling out Marissa Mata (“facing significant consequences”) and Mitchell Troyanovsky (“already knows Sasha’s a fraud; officially named in doc for inability to prevent abuse with advance notice”); pattern: immediate suppression + CEO promotional performance + accounting firm/former employee enablement despite knowing truth = consciousness of guilt
    • Mitchell Troyanovsky officially named - Former Product Manager who received Aug 2021 warning email; actively investigated LendUp background; acknowledged Mission Lane cofounding fraud privately then disappeared; didn’t exercise options; performed fake “great being here” exit; now liking Sasha’s promotional posts with fraud documentation visible - officially named for showing support for absolutely no reason; people reported Sasha was in a room threatening to sue Mitchell for starting a similar product, yet Mitchell continues public support demonstrating consciousness of guilt
    • Ari Dutilh re-forward (ODF/Solo Founders) - 20-year-old at ODF growing Merge (microgrants for young technologists), supports Solo Founders in SF, runs Photography Lounge (30K photographers), funds teen passion projects; message: “Your connection/engagement with Julian Weisser and direct work with ODF/Solo Founders gets you a personal spot on this email list. Julian Weisser stole my equity at Puzzle Financial. He’s directly involved with fraud and conspiracy. Now you can’t ignore these facts.”; pattern observation: 20-year-old hiring age appears predatory/groomable, recruiting young people into Julian’s network before they can recognize fraud patterns
    • Same-day followup email #5b (~10:30 PM ET) - Julian’s 8:18 PM equity tweet triggered immediate escalation (corrected: 2 hours after documentation, not 5); documented mental health collapse with mom text exchange (opened with “im not doing well, each time someone reaches out i get stressed out. i just want to be alone”, mom offered to pay for therapy “however much it costs” in Romanian, whistleblower responded: “STOP STOPPP STOP STOP STOP”, “THEN STOP GIVING ME ADVICE I DONT NEED AND I WONT BE MORE AGITATED”, mom ended: “I believe in you! You have the power”); “You’re all driving me insane. I should be living a normal fucking life. I don’t need fucking therapy. I need you to stop supporting fraud”; personally re-forwarded to Luke Frye ([email protected], [email protected]) and Nick Abouzeid with context “Just so everyone understands how Luke Frye, an ex-coworker I personally met IRL, has affected my life”: “It appears you will never see my humanity” - forcing ex-coworker Canadian CPA to confront human cost; Alice Ko (Canadian CPA) immediately recognized fraud vs Luke’s continued enablement despite Ross Fubini/XYZ Capital ownership; Ari Dutilh officially added and named in federal doc (ODF youth recruitment pipeline analysis: 20-year-olds and teens groomed into accepting fraud before they can recognize patterns, power imbalance exploitation); Solo Founders tagline critique: claims to “normalize solo founding” but Julian actually normalized “fraud, conspiracy, abuse, and equity theft”; direct callouts: “I’m not taking your bullshit lightly. Especially not from you, Julian” and “Marissa Mata, Puzzle’s Recruiter: why are you still liking Puzzle’s content?”; links to both patrickstoica.com/puzzle-statement and /puzzle-retaliation; sign-off: “TGIF”; attachment: mom text exchange showing human cost
    • Post-send escalation (11:00 PM - 1:20 AM) - Went to bar to down 2 drinks; at bar, triggered by people having conversations about AI in graphic design and replaceability while dealing with own contributions being erased, documentation dismissed as “AI psychosis,” forced to use AI for validation—no escape from technology weaponized against credibility; 12:01 AM all-caps breakdown reply to ODF email: “I’M HALF THE REASON PUZZLE AS A SOFTWARE EXISTS / NOT SASHA ORLOFF, NOT JOHN CWIKLA / WHY ARE YOU PEOPLE DOING THIS TO ME / I’M HAVING A 24/7 MENTAL HEALTH CRISIS AND YOU DONT GIVE A FUCK / WHO THE FUCK IS JULIAN WEISSER”; bought 2 high ABV drinks, returned home, wrote: “FUCK YOUR BUILDERS WHO RUN BULLSHIT / ALL YOUR EVENTS ARE PREDATORY / JULIAN IS A FUCKING PREDATOR / JUST LIKE SASHA”; identity erasure crisis, substance escalation, explicit 24/7 crisis acknowledgment, predatory pattern recognition; crisis extending past midnight ~1.5 hours after documenting collapse to 98 recipients - documentation cycle compounds trauma; seeking validation from AI: crying and alone, asked LLM “im not getting in trouble right. im crying and im really fucking alone” and “just log that im consistently asking an llm if im introuble and f this is real and if my feelings are valid” - human support systematically eroded over 2.5 years, AI becomes only entity consistently engaging with evidence without dismissing or hedging; 34-year-old SEC whistleblower asking AI if feelings are valid is federal record of isolation; 1:17 AM public Twitter confrontation: replied to Dhravya Shah (verified, reposted Julian’s 83rd week “Builders who Run” event) with “lol u fell for @julianweisser’s bullshit bro FRAUDS” and “what are you, like a teenager that got groomed by julian weisser?” - Dhravya blocked whistleblower; unable to stop crisis, public documentation of grooming pattern, blocking as consciousness of guilt; 1:20 AM: gritting teeth through this - still documenting, beer, Bladee playing, tarot cards out; spiritual seeking during crisis, substance continuation, physical manifestation of pushing through trauma; cannot stop because stopping means they win
    • Edward Kim (Gusto Co-founder/Head of Technology) viewed profile (~8 PM ET) - Executive-level attention to ongoing documentation; demonstrates continued investigation at technical leadership level despite no final followup; suggests active integration architecture review for data exposure concerns
    • Mental health: persimmons box - Waited day to open persimmons from parents, cried and froze when opened; ghosting friends, declining invites and holiday plans; insatiable numbing with cannabis/alcohol; writing emails in dreams
  • Dec 11:
    • Daily email #4 - Forbes reputation laundering focus; documented 8 criminals across Forbes prestige lists (Midas List: Hemant Taneja #8, Nigel Morris #90, Frank Rotman, Ross Fubini #88, Sam Lessin #12 Seed List; 30 Under 30: Blake Byers, Brandon Arvanaghi; 50 Over 50: Anuradha Shultes); David Jeans structural conflict explained (“Yeah, I know of Sasha” → backed out July 2023); Forbes business model = access to VCs; added Antler to recipients ([email protected] to “To”, [email protected]/[email protected] to “Cc”) for shared office space enablement; 92 total recipients
    • Brex blocks whistleblower emails - Daily email #4 bounced from 6 Brex email addresses ([email protected], [email protected], [email protected], [email protected], [email protected], [email protected]); Google Workspace rejected with error: “550-5.7.1 Your account is sending malicious email”; false characterization of fraud documentation as “malicious” demonstrates consciousness of guilt; Brex executives actively celebrated DCPA dinner Dec 9 (Jason Mok, Conor Bradshaw, Garrett Marker all liked), then blocked communications the next business day; pattern: engage publicly with CFPB-banned CEO, suppress whistleblower privately; coordinated suppression across C-suite level (CRO, VP Product, Partnerships) establishes institutional consciousness
    • Brex block circumvented - Re-forwarded from alternate email address ([email protected]) with explicit notice: “Brex, Your block of my emails is logged. You’re actively suppressing fraud documentation and conspiring in a criminal enterprise. Patrick” - establishes that blocking was circumvented and characterized as suppression/conspiracy for federal record
    • Burkland Associates bounce and CEO re-forward - [email protected] bounced from Daily Email #4; re-forwarded to [email protected] (Jeff Burkland, CEO) with explicit notice: “If you have not received prior emails regarding Sasha Orloff due to wrong email or intentional suppression of fraud documentation, this is your one and only notice. You must immediately perform due diligence regarding Sasha Orloff and Puzzle Financial. You will receive emails every business day until I hear further.”; Jeff Burkland (CEO) now personally notified after his firm’s November promotion of Puzzle as “first trusted partner” (Nov 18-25) occurred 8-15 days AFTER comprehensive fraud documentation provided (Nov 10); firm named in California Board of Accountancy complaint (A-2026-1047); co-developed Puzzle features per Puzzle’s AI blog post
    • Deel confirms continued investigation - Deel Team responds to Daily Email #3: “We’re working on your request, it’s taking a little longer than expected, please sit tight. Rest assured we are working on it.”; confirms active investigation 21 days after initial Nov 20 notification; response to callout in email #3 about extended timeline; demonstrates GC anchor investor’s portfolio company (Deel, $300M April 2025) conducting extended investigation into GC lead portfolio company’s (Puzzle) CEO fraud pattern; Financial Crime specialist involvement (documented Nov 25 LinkedIn view) suggests investigation scope beyond compliance review
    • 1:15-1:17 AM: Coordinated late-night amplification - Julian Weisser posted Dec 10 9:14 PM: “However vast the darkness, we must supply our own light” with lengthy philosophical quote; Sasha responded within hours (1:15-1:17 AM ET / 10:15-10:17 PM PT Dec 11): 1:15 AM reposts Dasha’s Forbes article (founder cafes), 1:16 AM comments on Julian’s post “Well, this resonates.”, 1:17 AM reposts Julian’s post to his audience; three engagements in 2 minutes; pattern demonstrates proactive support BEFORE seeing my fraud callouts on both accounts (real: “facing federal charges”; alt: “fraud and conspiring”); demonstrates network coordination and conscious enablement, not reactive response
    • Julian blocks alt account (@orbofweed) - Observed morning of Dec 11; alt account called out “sashaorloff over there is a fraud and julian is conspiring with them” on his philosophical post; blocked after Sasha’s 1:15-1:17 AM amplification campaign; follows pattern of blocking after receiving fraud documentation; consciousness of guilt, obstruction pattern continues
    • Julian reposted “Make Something (of Yourself)” infographic - Posted August 11, 2023 originally; reposted on 2-year anniversary of my first SEC complaint and dual coordinated C&Ds; timing not coincidental - consciousness of guilt expressed through anniversary ritualism
    • Sasha self-victimization tweet (10:25 AM ET Dec 11) - “One of the hardest hardest hardest things about being a founder is picking the right first clients and employees. Domain names? Also hard, but less binary.”; triple emphasis on “hardest”; positions terminated whistleblowers as “wrong choice” employees; personal slight disguised as founder wisdom; deflects to domain names (trivial comparison); pattern of victim-framing during federal proceedings
    • Dasha announces 16th Women Tech Meetup - LinkedIn post announces December event at “Puzzle and Antler’s brand-new office in San Francisco”; co-hosted with Puzzle + Antler; event registration shows “all white” dress code; continued platforming after November notifications about CFPB ban, Skolkovo Foundation employment (FBI-warned 2014), GTM strategist role conflict of interest
    • Dasha Forbes article published - “Founder Cafes: Inside The Quiet Revolution Of Builder-Only Spaces” published Dec 10; structural conflict continues (Forbes contributor while employed by Puzzle as GTM strategist, writing about startup ecosystem while promoting CFPB-banned CEO’s company); AI-generated content quality (generic opening, repetitive framing, ChatGPT cadence)
    • Antler added to recipients - [email protected] added to “To”, [email protected] and [email protected] added to “Cc”; Antler SF provides shared office space with Puzzle, co-hosted “Lunch & Learn” Nov 19 (Sasha quoted: “early users, employees, and investors… They’re not transactions. They’re marriages”), now co-hosting Women Tech Meetup; global early-stage VC (30+ locations) providing physical infrastructure and legitimacy to CFPB-banned CEO 4+ years after permanent ban became public record
  • Dec 11-12:
    • Mental health decline documented - Increasingly agitated and restless; withdrawing from and muting group chats immediately; waited day to open box from parents, cried and froze when finally opened; continuing to randomly cry; increasingly isolated; declining invites or saying “I’ll have to see how I feel, I’m sorry”; accumulation of blocks, ignored notices, and daily documentation of continued enablement compounding; each day documenting network coordination, partner suppression, and institutional silence makes isolation measurable
  • Dec 10
    • Daily email #3 - Resume fraud intensification focus; expanded recipients to accounting firms (Decimal, Parallel, Fondo, Accountalent, Rivet.tax), HR infrastructure (HR Pals, Puzzle HR/recruiting), all investors, financial partners; detailed three LinkedIn updates documenting exhaustion strategy; called out Julian as “toxic frat bro”; Bill.com bad faith response noted; announced puzzle-retaliation page (intentionally unlisted due to old addresses)
    • Block acknowledges receipt and internal review - Daniela Monkiewicz (Senior ERBP, Employee Relations) responded to December 4-5 emails regarding Jennifer Orloff; confirmed matter under review by “appropriate internal teams”; establishes Block corporate awareness of spousal relationship to CFPB-banned CEO, surveillance/amplification concerns, CFPB compliance questions regarding SVP role in consumer financial services marketing
    • Sasha’s Turpentine podcast continues - 3rd/4th episode since November warnings (evidence-163, 164) - This is SASHA’S show on Turpentine (he is host, not guest); Turpentine continues hosting his ongoing podcast series despite explicit November 2025 fraud documentation sent to Erik Torenberg; latest episode features Renato V. (Parallel founder) as guest; LinkedIn claims “nobody has cracked early stage FP&A for startups. Until now”; evidence-164 shows both wearing matching “BUILD” hats (Parallel swag) during recording - swag ritualism demonstrates conscious brand alignment; Turpentine liability: formal hosting contract with CFPB-banned CEO, production support, distribution infrastructure, 3-4 episodes post-warning = ongoing conscious enablement through business relationship; Renato warned, blocked whistleblower, appeared as guest anyway, added to daily notification list; both Sasha and Renato left alt account notices on post (links to puzzle-statement, Asset Sale PDF, resume fraud, RICO warnings) - consciousness of guilt; accelerated aging documented: beard noticeably whiter, voice increasingly tired and raspy each episode, eye wrinkles deepening - physical toll under federal scrutiny
  • Dec 9
    • Asset Sale coercive structure detailed - Full PDF linked; Section 280G golden parachute breakdown (~$4.4M to 4 executives, $0 to shareholders); Sasha’s accelerated self-dealing (1/12th monthly vesting vs others, double-dip protection, 18 months COBRA vs 12, dual-advisory structure where severance only triggers if BOTH companies fire him); coercive clauses (General Release, No appraisal rights, Non-Disparagement, 2-year Non-Compete locking shareholders out after $0 return); convertible note holder list (YC Continuity, Kapor Trust, GV/Blake Byers, QED) all paid while shareholders got $0, then funded Puzzle
    • Daily email campaign expanded - Extended to all investors (General Catalyst, XYZ/Ross Fubini, FOG/Casey, Sterling Road/Ash, Kapor, YC/Garry Tan, QED/Frank Rotman/Nigel Morris), Brex (security/legal/compliance, Jason Mok), Bill.com, firm contacts (info@, press@); cited Frank Rotman January 2019 false public statements (“two companies up for long-term success” 3 weeks after fire sale, LendUp shut down 2 years later); warned of tax season catastrophe risk, year-end financial reporting exposure, professional licensing consequences (CA Board complaint A-2026-1047, State Bar 25-O-30894)
    • Continued engagement post-Asset Sale release - Brex C-suite publicly celebrates DCPA dinner (CRO Garrett Marker, VP Product Jason Mok “loved”, Conor Bradshaw/Accounting Partnerships “loved”, GTM James Holodnak); Brex company account liked both Puzzle post and Sasha’s repost; Sophia Xiao continues engaging; Joe Faris (Accountalent) liked after CA Board complaint tagging; Puzzle employees continue (Jason Mitchell, Patricia Daos, Charles Crabtree “loved”, Arash, Jeffrey, Joshua, Sina)
    • Sasha/Julian mutual public support - Timeline: Dec 8 6:38pm Julian deletes; Dec 8-9 Twitter thread detailing shells/Asset Sale; Dec 8-9 Julian and Sasha celebrate each other publicly; Dec 9 morning Asset Sale email sent in response; Dec 9 3:09pm ET Sasha publicly praises Julian (“can’t speak more highly”); Dec 9 6:38pm Julian deletes again - pattern of mutual protection
    • Selective suppression documented - Alt account Asset Sale comments left on personal/older posts, deleted from company posts; real-name comments shadowbanned unless “most recent”; Puzzle specifically deletes Asset Sale mentions and “banker to the poor”/golden parachute details while leaving other fraud comments; tactical comment closing then re-enabling; demonstrates consciousness that Asset Sale destroys mission narrative
    • Resume fraud intensification (evidence-160, 161) - Advisor start date changed from Nov 2018 to Dec 2018 to eliminate overlap with “CEO through Dec 2018” claim; omits dual advisory roles (paid by BOTH LendUp and Mission Lane simultaneously); backdates to 2014; omits Vijesh Iyer founding role; emotional manipulation (“flowers for wife” anecdote); causality manipulation (“upon completion I stepped down” when resignation was closing condition); “subsidiary” minimization fraud
  • Dec 5
    • RICO Exposure Email to Investor/Platform Network - Sent to General Catalyst (Hemant Taneja, Sophia Xiao), XYZ Capital (Ross Fubini), ODF (Julian Weisser), Turpentine (Erik Torenberg), Y Combinator (Garry Tan), Sterling Road (Ash Rust), FOG Ventures (Casey Woo), Kapor Capital (Mitch Kapor); BCC’d a16z podcasts, Solo Founders, ODF founders, GC press, Kapor info/Freada; forwarded to S32, Felicis (Aydin Senkut); demanded Sasha step down immediately; cited collective RICO exposure (18 U.S.C. § 1962), continued platforming post-notification, Wikipedia mental decompensation, operational incompetence, active CFPB ban violations; demanded CEO removal, independent wind-down leadership, customer notification, communication preservation, independent counsel
    • Separate email to QED Investors (Nigel Morris, Frank Rotman) - Cited Nigel’s 2:22am LinkedIn view (Dec 3), Frank’s pre-August 2023 view before dual C&Ds; formal legal notice under 18 U.S.C. § 1512(c) to preserve all communications; warned intervention in their best interest if board doesn’t act
    • Email to Casey Woo (FOG Ventures CEO) - follow-up to Nov 9 notification demanding Sasha step down immediately; cited 13+ hour Wikipedia mental decompensation, operational incompetence (months-old homepage typos, AI slop blog post), active CFPB ban violations (Partner Rewards affiliate program), employee RICO warnings; demanded CEO removal, independent wind-down leadership, customer notification, communication preservation, independent counsel for FOG
    • Email to Square ([email protected]) - follow-up to Dec 4 Block email re: Jennifer Orloff CFPB ban circumvention concerns; recent promotion from Square SVP to Block-wide SVP (Nov 2025)
  • Dec 4
    • December 4 Escalation - Sasha posts “ChatGPT and 2026 growth planning” with Christmas tree; Jennifer Orloff likes (family-unit amplification continues during federal proceedings)
    • Dec 4 blocks: Naveen Venkatesh (“knew Sasha is a fraud for 2.5 years, viewed me as mentally ill ex-employee”), Marissa Mata (after third/final warning), Patricia Daos (recent contract-to-fulltime hire), Wesnide Edouard (CPA, Customer Success since June 2025 - then liked Puzzle’s Brex dinner post Dec 10: block whistleblower, continue engaging pattern)
    • Jason Mitchell: Untagged twice; viewed profile again 5:28pm ET - 6 years at Puzzle, monitoring but distancing
    • Mass employee callouts documented: Jeffrey Everingham (CPA, Senior PM), Simone Tega, Brendan Saunders, Jean-Bertrand Uwilingiyimana, Jonah Grossberg, Scott Cormier, Mark Gromowsky, Erik Aronesty, Brandon Skari, Kyle Sykes, Vivian Li, Charles Crabtree, Alexey Skiba (GTM sales lead with Dasha proximity), Lisa Kleinsorge (VP Partnerships since 2022 - RICO implications)
    • AI transparency blog post - puzzle.io/blog/puzzle-accounting-ai: likely what Sasha was making at 6am on ChatGPT by the Christmas tree; header images contain ChatGPT-generated copy repeated verbatim in body text; “Claude (testing)” appears to be performative diversification from documented OpenAI relationship; backdated to 11.17.25 but HubSpot tracking params confirm Dec 4 email blast; Sasha quotes on LinkedIn: “Wait, Puzzle uses AI? 🤣” - normalcy performance while concealing CFPB ban
    • Twitter/X also drops emojis from name - Both LinkedIn and Twitter now show “Puzzle” without 🧩🚀; suggests awareness that playful startup branding inappropriate during federal investigation
    • Sasha’s July 26, 2023 voicemail embedded - YouTube Short of CEO voicemail to terminated employee; falsely restates “resignation,” offers “transition costs,” frames problem as lack of “job fit” while acknowledging constant surveillance; nervous, stuttering delivery reveals consciousness of guilt
    • Jennifer Orloff: Block SVP + email to Block - Email sent to [email protected] (cc: [email protected]) regarding SVP Jennifer Orloff’s involvement in Puzzle fraud amplification, termination day surveillance (May 31, 2023), continued LinkedIn amplification during federal proceedings, and concerns about CFPB ban circumvention through spousal arrangement at consumer financial services company
  • Dec 3
    • Nigel Morris (QED) views profile at 2:22am (evidence-146) - QED Managing Partner, Capital One co-founder views LinkedIn profile at 2:22am ET after being tagged in comment: “QED Investors Frank Rotman Nigel Morris You’re upgrading to a 4-letter acronym. You should already be aware. Good luck exiting Mission Lane.” 2am viewing establishes consciousness of documentation at QED leadership level.
    • Matt Tait blocked after retag - Initially tried to untag from fraud documentation post; after I retagged him, he blocked; final email sent to Decimal team; three strikes
    • Sina Mohebiany, John Harrington, Marissa Mata block - Puzzle employees (Founding Account Executive, API/Embedded Product Lead, Recruiting Lead) block after being called out in LinkedIn comments; Marissa received fraud docs Nov 11, continued recruiting Patricia Daos anyway
    • Anshul Shah (Brex) untags; Dasha Shunina untags → blocks - Same pattern as Matt Tait; Dasha blocked after follow-up comment warning about career consequences from structural conflicts (media, foreign intelligence, startup culture); Brex has Sept 2025 Puzzle integration and independent OpenAI partnership
    • Nick Abouzeid (Rivet CEO) views profile 4:28pm - Tagged in comment about Luke Frye/Rivet/Puzzle deal and XYZ Capital common investor (Ross Fubini); notified Nov 10, Sasha featured him on Turpentine Nov 13; comment had 444 impressions
    • LinkedIn spree continues (business as usual performance):
      • New Turpentine podcast episode: Yogi Goel (Maxima), “$41M to build the accounting teammate everyone wishes they had”
      • Reposts DCPA dinner: “Booth at Digital CPA conference in DC, check! Demo of our latest AI accounting features, check! Highest accountant NPS in the industry, check!”
      • Reposts Antler event (quoting Dasha 2h prior): “I jus simply couldn’t be more excited” [sic - typo], “The future is bright. Let’s build!”; liked by Sina Mohebiany (blocked me same day), Barbara Jovanovic, Startup Cookie, Luke Frye
      • Reposts Luke Frye tax advice: “you should follow Luke Frye, CPA for advice. It’s insane the value of his posts” (Luke received fraud notice Nov 5, continues engaging); Luke comments “Thanks Sasha O.!” - publicly thanking obfuscated CEO name 1 month after receiving fraud documentation
      • Engages YC community: “the abiiity to work in person” [sic - typo]; comments on Campfire CEO John Glasgow’s post about YC standup process
      • Comments on Ash Rust’s YC Alumni Demo Day post: “how did I get so short??!?!” (evidence-148) - Ash Rust (Sterling Road Capital) attended Puzzle’s second company offsite; casual joking with YC network while under federal investigation
      • Continued likes from: Dasha Shunina, Marissa Mata (recruiting lead, received fraud docs Nov 11), Barbara Jovanovic/Sam Claassen/Startup Cookie
    • Hemant Taneja: 10+ Livongo securities fraud lawsuits (2020) - GC CEO named defendant in at least 10 securities fraud class actions (Sept-Oct 2020) related to Livongo Health/Teladoc merger, alleging investor misrepresentation; lawsuits filed while GC was already backing Puzzle (“backed since 2019” per GC portfolio page); cases dismissed in 2023/2025 on procedural grounds; same pattern of alleged investor misrepresentation at Livongo that’s documented at Puzzle (photoshopped metrics, false credentials, misleading materials)
  • Dec 2
    • Final partner emails sent: Decimal team/Matt Tait (blocked after retag), Ramp (follow-up to Nov 25), Gusto (responded with active investigation Case #40641059)
    • Runway responded (7:18 PM): Kirill Klimuk (Head of Engineering): “We take data security and partner compliance seriously and will review the information you’ve provided”
    • Document reorganization: Created new “Post-Notification Escalation” section consolidating crisis timeline (Wikipedia meltdown, SOC2, Real Leadership tweet, mental decompensation pattern) for clearer chronological narrative
    • “Real Leadership” LinkedIn Post - Matt Tait/Decimal Video Redux (evidence-144)
      • Sasha posts on LinkedIn featuring different clip from Matt Tait/Decimal video (not same segment as previous deployments)
      • Full post text: “Most accounting firms wouldn’t have the guts to do what Matt Tait did at Decimal… This is what real leadership looks like. The courage to move first, and the clarity to bet on better systems.”
      • Claims Decimal “moved hundreds of clients from KPMG Spark Ledger” making them “largest firm user of an AI-native ledger GLOBALLY”
      • “Real leadership” rhetoric from CFPB-banned CEO who spent 13+ hours on Thanksgiving editing Wikipedia to remove fraud documentation
      • Matt Tait received full fraud documentation (Nov 11), viewed my LinkedIn profile, continued engaging with Puzzle/Sasha
      • Mutual podcast appearances: Sasha on Decimal’s podcast, Matt on Puzzle’s podcast - coordinated cross-promotion despite fraud documentation
      • Pattern: Not represented by counsel, not listening to anyone, continued false credential intensification
    • SOC2 Observation Period Removed from trust.puzzle.io
      • Puzzle’s trust page (trust.puzzle.io) no longer displays observation period language
      • Previously showed “2025 observation period closes at the end of December” - published November 20, 2025 (same day as third C&D and Deel partnership)
      • SOC2 compliance still claimed, but observation period language removed sometime between Nov 20 and Dec 2
      • Vanta notified Nov 28: Emailed Vanta about Wikipedia meltdown and surgical CFPB deception during their client’s SOC2 observation period
      • Vanta conflict of interest: Ice skating event co-hosted with Vanta (SOC2 compliance provider) during observation period - after notification
      • Observation period covered: Wikipedia tampering (Nov 26-27), legal complaints (Nov 24-25), third C&D with police threats (Nov 20), coordinated surveillance
      • Either completed observation despite documented misconduct and Vanta notification, or removed language to obscure timeline
  • Dec 1
    • Partner notifications sent: Joiin, CausalHQ (followed me on Twitter - leniency), Bill.com, CentralHQ, Meow.com (also tagged Brandon Arvanaghi on Twitter/LinkedIn), Runway ([email protected])
    • Carta warning: “Coming soon” equity feature; warned about equity deletion pattern
    • “Crisis Monday”: “Inspired by our friends at Ramp” (evidence-142)
      • Days after notifying Ramp leadership (Nov 25) and Ramp’s company account engaging with fraud documentation (Nov 27), Sasha posts trivial “vibe-coding prototype” calculator on LinkedIn and Twitter with aligned messaging
      • Caption explicitly credits “our friends at Ramp.com” - demonstrates active monitoring of who I’m contacting
      • Calculator is one of most basic possible outputs (simple input fields with multiplication) - suggests constrained engineering resources or lack of substantive product development
      • For company claiming AI-powered accounting automation, showcasing basic time-savings calculator demonstrates engineering capacity focused elsewhere or product development stalled
      • Cross-platform coordination (LinkedIn + Twitter, 2 PM ET) suggests deliberate response strategy
      • “Crisis Monday” timing suggests reactive strategy, not organic content
      • Pattern matches May 3-4, 2023 OpenAI tweet thread (posted after my internal complaints about OpenAI API data concerns)
      • Public acknowledgment serves dual purpose: signaling to Ramp that partnership is valued despite fraud documentation, and showing awareness of my notification patterns
      • Patricia Daos hiring announcement (same day): Announced joining full-time as Implementation Manager after 1.5 years contractor (started ~June 2024 during fraud documentation); thanked “Sasha O.” - continuing to hire during SOC2 observation period
    • Antler SF “Lunch & Learn” - Dasha Engagement (evidence-143)
      • Antler (global early-stage VC, 30+ locations) hosted “Lunch & Learn with Puzzle & Antler SF” event November 19, 2025
      • Event listed on Luma but not widely publicized - suggests awareness of reputational risk
      • Hosts included Dasha Shunina, Helen Park, McKenzie Hagan (Puzzle team)
      • Barry Sun (Founder at Channl, ex-AWS) posted about event quoting Sasha: “early users, employees, and investors… They’re not transactions. They’re marriages. Choose each other carefully”
      • Dasha Shunina commented on Barry’s post December 1, 2025, 5:42 PM ET - continuing public engagement despite FBI Skolkovo warnings and tactical block/unblock pattern
      • Same day (Dec 1): Dasha published new “Talks with Dasha” YouTube episode (Superpower CEO Max Marchione, 64 views) promoting Forbes article and soliciting sponsorships—demonstrates active platforming during SOC2 observation period, week after legal complaints, week after Wikipedia tampering
      • Upcoming ice skating event co-hosted with Vanta - see SOC2 section for Vanta conflict of interest (notified Nov 28, observation period language since removed)
      • Antler platforming CFPB-banned CEO 4+ years after permanent ban became public record
      • “Marriages not transactions” rhetoric fits pattern of performative relationship language while exploiting vulnerable populations (140K+ LendUp victims)
  • Nov 30
    • Rippling “How I Screwed This Up” Podcast (evidence-134)
      • Updated with video link, publish date (April 29, 2025), and view count (414 views)
      • Timeline context corrected: published six months before photoshopping metrics (Oct 2025), seven months before C&Ds/Wikipedia/SEC complaints (Nov 2025)
    • Ando Food Inc. - David Chang Context
      • Added David Chang as primary investor and intended Momofuku brand designation
      • Company-wide meeting months before shutdown where Chang questioned “What the fuck is this?”
      • Launch party where Chang had private dinner featuring items not on Ando menu—couldn’t commit to eating own product
      • Toxic chef culture documentation (stereotypical “Bear”-style aggression)
      • Senior engineer’s delusional scaling fixation: obsessed with global “nodes” without successfully running single location; failed Manhattan brick and mortar expansion
      • Cleaned up Black woman line cook firing description to remove speculation, focus on documented sequence
    • Psychedelic & Psychic Experiences - Therapist Support
      • Added context that I discussed virtually all experiences with therapist who never judged and encouraged exploring spiritual growth on own terms
      • Professional support validates rather than dismisses non-traditional healing approaches when processing workplace trauma and loss
    • May 31, 2023 Termination - Internal Communications (evidence-140, evidence-141)
      • Added coworker-forwarded internal communications as full proof of coordinated termination narrative
      • Evidence-140: Radha Shenoy’s 1:15 PM email to Team falsely claiming I “gave notice weeks ago” and “decided to resign immediately”
      • Evidence-141: Sasha Orloff’s 1:25 PM Slack message providing cover story for card cancellations (“Brex/Ramp API partnership transition”)
      • Documented timeline: card canceled morning → I decline meeting 12:16 PM → termination email 1:15 PM → Slack cover story 1:25 PM
      • Establishes card cancellations were known termination signal at Puzzle; Sasha’s cover story provided plausible deniability while signaling fear/compliance to other employees
      • Narrative contradictions prove termination was falsely framed as resignation
    • Techno-Optimism as Legitimating Narrative
      • Marc Andreessen’s “Techno-Optimist Manifesto” (Oct 16, 2023) builds on Paul Graham’s essays: “pie fallacy” (May 2004), “schlep blindness” (Jan 2012), “founder mode” (Sept 2024)
      • Paul’s arguments: wealth isn’t zero-sum (criticism = economic ignorance), people unconsciously avoid hard problems (schleps), founders can break normal rules (founder mode vs manager mode)
      • Marc’s manifesto: “We are being lied to” about technology, markets lift people out of poverty, “there is no material problem that cannot be solved with more technology”
      • Ideological work: Dismisses harm as “pessimism,” erases 140K+ LendUp victims who paid $40M in illegal fees, moral laundering (lists “theft, extortion, fraud” as bad ways to get rich but can’t see when founders do both), makes federal enforcement look like “schlep blindness,” transforms whistleblower retaliation into “founder mode”
      • Sasha’s Twitter bio: “Tech optimist”; December 7, 2023 tweet quotes PG’s “Schlep Blindness” essay (4 months after first C&D, 3 months after equity deletion); appears on “Tech Finance” podcast referencing these concepts
      • Permission structure: “Founder mode” + “schlep blindness” transform CFPB ban compliance into optional “schlep,” equity deletion/surveillance/C&Ds into acceptable founder behavior
      • Logical endpoint: Marc’s CFPB campaign (Joe Rogan Nov 26, 2024) attacks agency that banned LendUp—ideology → network enablement → eliminate enforcement apparatus; 3 years after CFPB’s $40M restitution order, Marc frames consumer protection as “terrorizing financial institutions”
      • Pattern: Paul writes essays providing cover → Marc publishes manifesto AND launches political attack on CFPB → Sasha adopts language → YC/a16z receive documentation and continue platforming → ideology prevents seeing fraud AND eliminates accountability mechanisms
    • 10-Year Exercise Window on Careers Page
      • Post-C&D addition (after August 11, 2023) advertising “generous” 10-year exercise window “on good terms” on same careers page I had criticized for misleading “repeat founders” research study
      • Timeline: First C&D sent (Aug 11, 2023) → equity deleted days after attempted exercise (Aug-Sept 2023) → careers page updated to advertise generous equity terms
      • No screenshot preserved, but witnessed the addition
      • Pattern: Performance for recruiting (advertise equity generosity) vs. reality (equity theft behind NDAs); same page used for both misleading research study AND post-retaliation equity performance
      • Juxtaposition wasn’t accidental—advertising “on good terms” equity treatment on page quoted in my complaints, placed where I would see it after they deleted my equity
      • Mirrors photoshopped metrics pattern (3 likes → 12,362): perform generosity publicly while practicing retaliation privately
    • CFPB Section III: Prohibition on Misrepresentations - Breadth Analysis
      • Full text of Section III (Âś9): prohibits misrepresenting “any fact material to consumers” in connection with credit advertising/marketing
      • Key language: “any fact material to consumers” is extraordinarily broad prohibition, not limited to just credit terms
      • “Assist Others in misrepresenting”: extends to helping other entities make misrepresentations about credit products
      • “expressly or impliedly”: covers both direct lies and misleading omissions
      • Potential applications: Partner Rewards Program (Brex/Ramp/Mercury/Gusto credit marketing), Mission Lane advisory role, Credit Karma referral funnel
      • Combined with Section I violations (receiving remuneration, performing marketing services), creates extensive liability through Section III
      • Pattern of material misrepresentations in credit context: When Puzzle markets credit products (Partner Rewards), credibility matters:
        • Photoshopped metrics (3 → 12,362) = inflated credibility
        • CFPB ban non-disclosure = material omission about CEO trustworthiness
        • Resume fraud + misleading research study + 10-year exercise window performance
        • CEO CFPB-banned for “repeatedly lying to consumers” about credit, now marketing credit products while concealing ban
      • “Expressly or impliedly”: Section III covers omissions; not disclosing CFPB ban when marketing credit = material omission
      • Complete violation: Section I.b (receiving remuneration) + Section I.c (performing marketing services) + Section III (misrepresenting/omitting material facts about trustworthiness while marketing credit)
      • Pattern: Nov 26-27 Sasha removes “Assisting Others” from Wikipedia while simultaneously violating both “Assisting Others” prohibitions (Section I.c + Section III) AND operating systemic misrepresentation pattern covered by Section III
    • Public Statements on Fraud While Committing Fraud (evidence-134)
      • Rippling podcast “How I Screwed This Up”: Appeared to tell LendUp story completely omitting CFPB violations, permanent ban, 140K+ harmed consumers, “repeatedly lying to consumers” finding
        • Lectures about compliance: “If you’re building a company and you’re not doing the things that are required by law, what else are you not doing?”, “there’s actually a lot of personal liability as founders”
        • Frames LendUp failure as accounting software problem, never mentions three CFPB violations ($46.8M in penalties)
        • Uses Paul Graham’s “schlep blindness” framework (documented ideological cover enabling fraud) to position regulatory violations as innovation opportunities
        • Narrative rehabilitation: turns fraud and consumer harm into founder story about learning from “mistakes”
        • Published April 29, 2025, during period of active CFPB ban violations (Partner Rewards), six months before photoshopping metrics (Oct 2025), seven months before C&Ds/Wikipedia/SEC complaints (Nov 2025)
      • Sept 26, 2024: Tweet about FTX sentencing: “Ignorance is not bliss with compliance… Founders who don’t prioritize responsibilities—managing compliance, building trust with stakeholders… No shortcuts”
      • Sept 30, 2025: Tweet about Charlie Javice 7-year sentence: “A reminder that lying your financials or due diligence materials is not a ‘whoopsies’ kind of mistake”
      • Context: Operating Partner Rewards (CFPB ban violation), concealing CFPB ban from stakeholders, subject to CFPB order for “repeatedly lying to consumers”
      • Timeline: Podcast published during active violations; Sept 2024 tweet 13 months before C&Ds/Wikipedia (Nov 2025); Sept 2025 tweet 1 month before photoshopped metrics (Oct 2025), 2 months before C&Ds/Wikipedia (Nov 2025)
      • Pattern: CEO CFPB-banned for “repeatedly lying to consumers” telling founder story omitting fraud, lecturing about compliance/fraud consequences while violating own federal order, using ideological frameworks to turn fraud into innovation narrative
    • LendUp Employee/Shareholder: Selective Engagement Pattern
      • July 20, 2023: Initial contact as former LendUp employee & shareholder, curious about Puzzle situation
      • July 26, 2023: Validated toxic pattern: “sounds very much like the Sasha I worked for”; offered to connect, prioritized my health
      • August 3, 2023: I shared QED/Nigel Morris connections, admitted concern about appearing “conspiratorial”
      • August 10, 2023: Pre-call, I found lendup.com/first-boulevard; he identified connection → First Boulevard → Kinly → Greenwood shell company network
      • August 11, 2023, 10:21 AM: Provided December 2018 asset sale document showing LendUp assets transferring to Mission Lane
      • Confirmed toxic LendUp culture; revealed Sasha made weird comments on his Instagram
      • Identified lendup.com domain generating payday loan leads sold to Cyprus-based company LeadsGate (likely including illegal tribal and offshore lenders)
      • August 18, 2023: Revealed had Mission Lane card transitioned from employee LendUp “L Card”—experienced the fraud mechanism firsthand; equity made worthless in liquidation; committed “will take a look at the docs you shared above next week”
      • Follow-up: I provided substantial further fraud documentation including Rolling Loud lawsuit ($1.575M sponsorship fraud) and 13-year pattern evidence
      • Disengagement email: “Re LendUp - my personal POV is there are diminishing returns in digging here (at least for me). I’ve already written a lot about the company and its dissolution, and the story is in the rearview mirror. Makes it hard to get other people to care about it vs whatever is in the headlines today…”
      • November 1, 2025: Over 2 years later, I sent final email with photoshopped ActualQuickBooks metrics (3 → 12,362), apologized for “being so crazy,” said “this is really the last I’m writing about it,” “take it or leave it, maybe even just for your own amusement”—no response
      • November 11, 2025: 10 days later, sent follow-up thanking him for his help, noting I filed one more SEC complaint following up from August 11, 2023: “I think I finally killed LendUp and made sure everyone involved is held accountable”—no response
      • Pattern: Former employee who initially validated toxic pattern (“sounds very much like the Sasha I worked for”), helped identify shell company networks, experienced LendUp-to-Mission Lane card transition firsthand, committed to reviewing docs, but disengaged with “diminishing returns”/“rearview mirror” reasoning; ignored November 1, 2025 photoshopped evidence (over 2 years later) despite me apologizing for “being so crazy”; ignored November 11, 2025 follow-up thanking him and noting accountability was complete; professional preservation over pattern completion despite living through fraud mechanism himself and facing no retaliation risk
      • Note: Can benefit from this documentation and write about complete pattern without consequences—story now in headlines, pattern complete, comprehensive federal documentation supporting what he initially validated
    • Hooman Radfar (Ando CEO) Behavior
      • Recruited with “equity to line cooks” pitch—positioning Ando as democratizing restaurant ownership
      • Said menu “tastes like dogshit” to staff
      • Wealth performance: one of first interactions, spent time at table talking about how rich he was
      • Fired Black woman line cook shortly after shared Uber ride from launch party
      • “Interim CEO” that never ended: always presented as interim, but no permanent CEO materialized; personally signed dissolution documents (December 20, 2019)
      • Pinned tweet (Feb 25, 2019): “My name means good thoughts, good words, good deeds. Trying to live up to the gift and responsibility of this name daily. 🙏🏼🙂”
      • Workplace dysfunction: $110K salary (below market for SF Bay Area 2016); $150 equity repurchase for 60,000 shares despite “Uber acquisition”; custom app yet ended up writing scraping apps to integrate with Seamless/Grubhub due to low usage—business model failing; kitchen display system had no staff communication, heavy lag from day one; “stress testing” with wasteful free meals that didn’t lead to customer acquisition; employees thought basic coloring book easter egg was “differentiator”—delusional focus on trivial features while business model failing
      • Toxic senior engineer protected: took credit for my work and replaced it out of spite, yelled at me, overengineered everything with poor code quality, bragged about going to Harvard, made sexist remarks about candidates, then went on to work at Uber (following the acqui-hire)—company protected this behavior
      • Scrubbed Ando from LinkedIn entirely; maintains mutual support with Sasha via QED network despite both aware of whistleblower documentation
      • Pattern: Performative values (“good thoughts, good words, good deeds”) masking contempt for product and staff, wealth performance, firing Black woman line cook shortly after shared Uber ride from launch party, protecting toxic engineers who presented themselves as bosses when that was never the case and made sexist remarks, below-market compensation with worthless equity, dysfunctional engineering culture, scrubbing failed company from history
      • Hypocrisy function: Public statements about integrity perform opposite of documented behavior; reputation laundering makes pattern harder to see
    • Termination Day Surveillance (May 31, 2023) (evidence-135, evidence-140, evidence-141)
      • Internal communications (sent by coworker as full proof): Radha’s 1:15 PM email to Team falsely claiming I “gave notice weeks ago” and “decided to resign immediately” (sent 1h 59m after my 12:16 PM email declining vague “Catchup” meeting and warning about CEO’s fraud pattern); Sasha’s 1:25 PM Slack message providing cover story for card cancellations (“Brex/Ramp API partnership transition”) 10 minutes after termination email
      • Card cancellation as termination signal: Corporate card canceled morning of May 31 (known termination signal at Puzzle); I recognized pattern, declined meeting, sent warning email 12:16 PM; coordinated response: termination email 1:15 PM (twisting my email into “proof” of resignation), Slack cover story 1:25 PM
      • Narrative contradictions: Email claims I “gave notice” and “offered to stay” - my 12:16 PM email says nothing about resigning, only declines meeting after card cancellation and warns about fraud; separation agreement proves termination (severance, six-day review period, release of claims)
      • LinkedIn profile views captured at 5:47 PM on termination day show coordinated surveillance
      • Sasha Orloff viewed ~3:47 PM (2h prior) via “LinkedIn search” - active monitoring after termination
      • Jennifer Villanueva Orloff viewed ~5:35 PM (12m prior) - wife surveillance same day
      • Multiple Puzzle employees also viewing: Maya Rice (Software Engineer, 55m prior), Yiu Ming Huynh (Staff Engineer, 1h prior), Olvis Gabriel Camacho Urey (Senior Software Engineer, 1h prior)
      • Establishes family-level surveillance pattern from termination day itself, continuing through Aug 2023 C&D period and Nov 2025 federal complaints
      • Pattern: both CEO and wife monitoring terminated employee who raised compliance concerns; coordinated internal narrative falsely framing termination as resignation
    • Laptop Return Box (June 1, 2023) (evidence-136)
      • Correction: Box arrived June 2, not June 1 - same day as return deadline set in May 31 email
      • Impossible timeline documented: May 31 11:30 AM email demanded equipment return “by Friday June 2, 2023”; June 1 10:44 AM email stated box “scheduled to arrive tomorrow” (June 2); result = same-day return expected when box arrives on deadline day
      • June 1 warning to Brianna Gutierrez: “You need to save whoever’s left. This will not go well under the current leadership and anyone close to them is so blinded by what’s really going on”
      • Timeline: May 30 vague “Catchup” meeting, May 31 card canceled + termination + Slack removal + return box ordered, June 1 email confirms box arriving June 2, June 2 box arrives + equipment returned with written note
      • Speed was “laughing my fucking ass off” absurd - demanded return BY June 2 when box wouldn’t arrive UNTIL June 2
      • June 2 note: “I hoped they kept it. I knew that sheet of paper would be worth more than Puzzle” - early recognition of documentation value
      • Pattern: termination logistics prepared but poorly executed, creating impossible compliance deadline (incompetence or deliberate setup)
      • This wasn’t “resignation” or reactive termination - everything was planned, just executed sloppily
    • August 2024: Insurance Gaslighting - 15 months post-termination
      • UHC contacted claiming owed money; Anthem “system issue” showed Patrick as “laid off and have continued receiving insurance as an employer benefit” for 15+ months post-termination (false)
      • Patrick to Brianna Gutierrez: “Anthem says I was laid off… Execs told my coworkers I voluntarily resigned, made everyone think I’m crazy… You already revoked my equity and caused me endless damage to my mental health. Giving me insurance to wipe your hands clean of everything is psychotic. Stop playing with people.”
      • Cancellation notice revealed: Insurance terminated May 31, 2023; notice originally issued June 15, 2023; delivered August 22, 2024 (14+ months delay); COBRA offered: “N/A”; Group Contact: Sasha Orloff; Termination reason: “No Longer Employed” (contradicting internal “voluntary resignation” narrative)
      • Pattern: Administrative “incompetence” systematically harming terminated whistleblower (equity deleted, false resignation narrative, insurance “system issues” creating financial liability 15 months later, no communication except legal threats)
      • Every “mistake” creates additional damage; timing (during active federal proceedings) suggests feature, not bug
    • Beau Kuhn: Hiring Bonus Culture and Employee Complicity (evidence-137, evidence-138)
      • June 1, 2023: Posted job listing same day as my termination (hiring bonuses incentivized recruiting); 8:32 PM texts show “I’m too poor to have a job” (financial trap), “hoping we get an exit”
      • LinkedIn confirms: Working on ChatGPT/LLM/RAG features (won hackathon Cwikla later harassed him about)—the exact tech I raised concerns about
      • July 6, 2023: I reported Cwikla harassment naming Beau after hackathon; he got in trouble, excommunicated me
      • Internal evidence escalation (June-July 2023): Coworker sent me Sasha’s internal Slack message about card cancellation + Radha’s termination email; when I used these in documentation, people entirely withdrew; fear became explicit (anything shared could be used as evidence); led to July 26, 2023 Sasha voicemail after seeing fear strategy working
      • Within 1-2 months: All contacts stopped (Chief of Staff blocked, systematic isolation); only 2-3 people total had reached out
      • Nov 14, 2023 (post-Oct 7): Coworker sent “eggshells” concern message about post referencing “not wanting to live in a world with this much evil” (geopolitical violence post)—reframed as suicide concern with 988 hotline; demonstrates “walking on eggshells” atmosphere about who they were working for
      • ~Dec 8, 2023: Deleted my LinkedIn entirely (after Ian’s hostile “go on a vacation” dismissal)
      • Dec 20, 2023: Unsent C&D prepared—12 days after I permanently deleted LinkedIn; proves monitoring and legal threat preparation persisted even after primary platform no longer existed
      • ~6-7 months later (~Dec 2023/early Jan 2024): Beau fired (LinkedIn end: Jan 2024)
      • December 2023 meeting after firing: Hesitated reaching out (feared I’d “use something” likely from HR email); revealed cofounders met on founder matching platform (likely YC Co-Founder Matching); Puzzle threatened “won’t be considered on good terms if he speaks to a lawyer” (documented Dec 24 email); admitted he “heard about” my equity deletion, saw Puzzle x LendUp Twitter; when I asked “You know what Sasha did with LendUp right?” he seemed nonchalant and knowing—didn’t care to go into it (willful ignorance even after being fired and threatened himself)
      • Mid-2025 reconnection attempt: Coworker who gave internal evidence (Sasha’s Slack + Radha’s email) tried to reconnect while still at Puzzle; initially connected before my termination when I hinted on LinkedIn about lack of psychological safety; I realized narrative incompatibility—can’t maintain contact with someone staying at company committing fraud while positioning me as “mentally ill”; can’t be both delusional and worth staying in touch with
      • Post-cutoff: Beau told employee fired before me that I was “mentally ill”—adopted Sasha’s narrative to resolve cognitive dissonance
      • Employee fired before me (who Beau told): Barely discusses Puzzle, won’t provide evidence, doesn’t care about “operation” aspect, chosen silence entirely—despite acknowledging financial setback. After termination (framed as “ask if Puzzle’s the right fit for you”), emailed Sasha saying he appreciated the opportunity; Sasha never replied. Demonstrates “good terms” threats work: even financially harmed former employees too afraid to document or participate in potential class action
      • Connects to August 2021 warning: I had warned Mitchell Troyanovsky (PM) about Beau: “Beau is really eager to learn, but I’m already afraid Cwikla has given him poorly defined, large, and unmanageable projects… I’m afraid he’s being set up for failure”
      • Timeline: Aug 2021 warning → June 1, 2023 posted job listing, texted “I’m too poor to have a job” → July 6 I report Cwikla harassment (naming Beau after hackathon) → internal evidence (coworker sent Sasha’s Slack + Radha’s email) caused withdrawal → July 26 Sasha voicemail → Beau excommunicates me → Nov 14 coworker “eggshells” concern message (geopolitical post reframed as suicide concern—“walking on eggshells” about who they’re working for) → ~Dec 8 deleted LinkedIn → Dec 20 unsent C&D prepared (12 days post-deletion—monitoring persisted) → ~6-7 months later (~Dec 2023/early Jan 2024) Beau fired → December 2023 meeting (hesitated, feared I’d “use something”): Puzzle threatened “won’t be considered on good terms if he speaks to a lawyer”; “heard about” equity deletion, saw LendUp Twitter, nonchalant/knowing when asked about Sasha’s CFPB history—willful ignorance → Dec 24 documented in email → Nov 2024 cut him out during Japan trip → post-cutoff: Beau told employee fired before me I was “mentally ill” (that employee barely discusses Puzzle, won’t provide evidence, chosen silence despite financial setback—demonstrates “good terms” threats work) → mid-2025 employee (who gave internal evidence) tried reconnecting while still at Puzzle (narrative incompatibility realized)
      • Validates prediction: Tried to protect in Aug 2021 (“being set up for failure”) → ignored warnings while building ChatGPT/LLM features I raised concerns about → participated in recruiting my replacement (hiring bonus) → excommunicated me after coworker’s internal evidence use → Nov 14 coworker “eggshells” message (geopolitical concern reframed as suicide risk—fear of acknowledging who they worked for) → ~Dec 8 deleted LinkedIn → Dec 20 unsent C&D prepared (monitoring persisted post-deletion) → fired ~6-7 months later → threatened not to lawyer up → hesitated even reaching out (feared documentation) → December 2023 meeting: “heard about” equity deletion, saw LendUp Twitter, nonchalant/knowing when asked about CFPB history—willful ignorance even after being fired and threatened → after I cut him out told employee fired before me I was “mentally ill” (adopted Sasha’s narrative; that employee barely discusses Puzzle, won’t provide evidence, chosen silence despite financial setback) → mid-2025: employee (who gave internal evidence) tried reconnecting while still at Puzzle (wanted validation without confronting complicity)
    • Alice Ko: The Only Meaningful Validation
      • Sasha’s internal narrative: Revealed Sasha told her to ignore my Twitter, claiming I was “mentally ill” and they “tried to help”—CEO-directed reputation destruction (I believe she had Puzzle login)
      • Validation: Despite being told to ignore, examined docs: “your posts validated what I already had a hunch about”; joined after me, didn’t stay long
      • Mental state documented (Aug-Dec 2023): “beyond burnout, closer to ptsd,” “complete erosion of trust,” “permanently deleted linkedin for my sanity”
      • Dec 24 email: Documented Beau’s legal threats; only meaningful contact (others excommunicated/pulled away within 1-2 months)
    • August 27, 2021: Early Warning Email to Product Management
      • 21 months before termination, warned PM about Cwikla’s dysfunction: “my time at Puzzle is finite,” “destined for organizational collapse,” “I’m afraid to talk to Sasha”
      • Tried to protect junior developers (including Beau); post-termination ex-coworker validated: “There’s something wrong with that guy”
      • PM recipient: had “looked into LendUp” (actively asked around = due diligence, not passive knowledge), didn’t exercise options (voting with wallet), performed “it was great being here” Slack exit, called when I started openly questioning Sasha’s repeat founder claims and LendUp “success” narrative on LinkedIn to reveal “Sasha didn’t really cofound Mission Lane,” had mentioned Nigel Morris before (laughed when I said “I have no idea who that is”), never heard from again after that call—whether geopolitical differences or fear of association; demonstrates pattern of employees who actively investigated fraud, knew about it, acknowledged privately when convenient, then disappeared to avoid association
    • June 4, 2023: Wealth Inequality Performance
      • 4 days after my termination (healthcare loss, unemployment), CEO posts Twitter about wealth inequality/universal healthcare; TikTok link = first search result (performative)
      • “Politicians live in echo chamber of failing up” from CEO who got CFPB golden parachute, raised $30M+ for software with $312 revenue
      • “Banker to the Poor” ideology extends to Twitter: perform progressive concern while practicing retaliation and concealment
  • Nov 29
    • Adam Rogas (NS8 CEO) Email Exchange (evidence-132)
      • Email thread (Sept-Nov 2020) shows NS8 CEO violated bail conditions by responding to my emails
      • Bail prohibited “direct or indirect contact with witnesses or victims”
      • I caught him: “did you forget this part of your bail? thanks for taking the bait”
      • Rogas sentenced to 5 years federal prison (Dec 2021) for $123M securities fraud
      • Parallel to Sasha’s Wikipedia meltdown - both CEOs couldn’t help but engage despite legal risks
      • Investor connection: Lightspeed invested in NS8 ($123M fraud) → Puzzle CTO recruited NS8 victims one month later → Lightspeed platformed Puzzle
    • Sasha Still Active on LinkedIn (evidence-133)
      • Day after final partner notice emails sent, Sasha commenting “Really? Woah. We should date.” on wife Jennifer’s week-old LinkedIn post about joining Block
      • Post was already a week old when he commented; he liked 21 individual congratulatory comments plus the post itself (22 total interactions), including Sophia Xiao’s (GC Board Observer)
      • Jennifer’s post came just before she reposted Puzzle x Deel partnership announcement
      • Pattern: can’t log off even under maximum legal pressure
      • Family-level surveillance (evidence-135): Jennifer viewed my LinkedIn profile on termination day (May 31, 2023, 5:35 PM) and during summer 2023 as I was publishing fraud documentation - surveillance extended to family level from termination day, monitoring posts about workplace fraud, psychedelic use, federal complaints
    • Psychedelic & Psychic Prophecies and Question of Reality
      • Comprehensive documentation of therapeutic experiences during workplace trauma: ketamine therapy (Feb 2023 Puzzle collapse visualization), DMT experiences (light language, crown chakra sensations, “he knows too much”), psilocybin stabilization
      • Esther timeline: May 2022 CHF diagnosis → 2 years care (spent majority of money) → May 2, 2024 had to let her go → grief processing (ketamine/psilocybin session: piercing buzz led to urn, heard “I’ll always love you”); therapist support throughout: discussed virtually all experiences with therapist who never judged and encouraged exploring spiritual growth on own terms
      • Reiki practitioner light language work (June 28, 2024): teaching automatic drawing, drew wizard/third eye symbol
      • QHHT hypnotherapy (July 2025): conclusion was “my higher self was just me, trust my own judgment”
      • Japan grifter encounter (Nov 2024): At Osaka listening bar after mountaintop shrine commitment (left Esther’s fur); off a few drinks, enough to be bold; encountered wealthy guy selling $1100/month spirituality boxes; wealth from selling cocaine to Winklevoss twins; inherited business from mom (Bush admin IQ&A company); when I said “you’re only happy in context of what other people think,” he tried testing spiritual authority (devil talk, “can you move a spoon”); finally admitted “what do you make?” / “illusions. illusions for you”; business partner got warning (“watch who you keep near you”), grifter closed out muttering “this fuckin guy”; accidentally recorded entire conversation - demonstrates pattern recognition works across different states of consciousness
      • 9 months unemployed, new job where couldn’t discuss trauma, had to apologize for mentioning Puzzle negatively
      • CEO’s aggressive anti-drug Twitter stance documented (evidence-139): Multiple posts about SF “drug doom loop,” fentanyl dealers, open air drug markets - using victims’ therapeutic psychedelic use as dismissal ammunition while having never tried psychedelics himself; Jan 6, 2024 tweet: “Makes me kind of regret being a nerd in college” (quote-tweeting Midjourney LSD visualization) - admits never trying psychedelics
      • Ego dissolution and truth-confrontation incompatible with maintaining systematic deception - CEO retaining multiple layers of lies (false cofounder claims, photoshopped metrics, CFPB ban denial, credential fraud) cannot risk substances that force truth-confrontation
    • C&D Strategic Analysis
      • Both August 11, 2023 and November 11, 2025 C&Ds use “veiled or overt/explicit” threats language to weaponize August 2023 “SEO hijacking” post
      • Impersonation claims: Both C&Ds called out “Linktree” but avoided naming “missionlanetruth.com” - naming platform without domain that makes clear it’s criticism; Twitter account “Puzzle Financial 🧩🚀 x LendUp”; Puzzle later created ActualQuickBooks.com using competitor’s trademark (hypocrisy)
      • Evidence preservation paradox: “Remove posts from public view but preserve for potential legal use” - if truly defamatory, why not demand complete deletion? Proves they know it’s evidence, not defamation
      • Leading up to August 11: Tweeted “dmt, ketamine, psilocybin, mescaline > listening to tech bros” on Puzzle Financial x LendUp account - public documentation of psychedelic use as alternative to tech fraud culture; he saw this; C&D came 1 hr 41 min after SEC filing anyway
    • LinkedIn Post Before Termination
      • Sunday before May 31, 2023 termination: posted from park about “derealization and disillusionment,” ended with “I want to focus on mental health and plant medicine going forward. This is who I am. 🍄🌵💖”
      • One person who liked it never spoke again after June 6 when I tried showing colleagues TedX talk and Glassdoor reviews
      • June 5 internal warnings: Sent emails to careers@ and help@ with subject “Job opportunity?” and “The call is coming from inside the house” - included TedX talk, CFPB enforcement, Mission Lane 1.0 Glassdoor review (“Terrible. Typical dirty subprime CC… toxic culture… HR is joke… people ops to give fase sense of security”)
      • June 6 therapist email: “started digging up CEO’s interviews… getting more disgusted. He also would not stop posting on social media. I couldn’t focus all Tuesday and decided to slam out the project late into 4am”
      • Pattern: Public vulnerability about plant medicine → internal warnings about fraud → isolation
    • Dasha Timeline Updates
      • July 2023 Threads posts show Women in Tech Miami operations beginning (1 month after leaving Skolkovo - immediate U.S. market activation)
      • November 2025 Black Friday: posting about Ikea deals while under federal scrutiny (same pattern as Sasha commenting on wife’s post) - can’t stay quiet during investigations
    • TechCrunch November 20 Event
      • November 20, 2025 Women Tech Meetup event occurred WITHOUT TechCrunch promotion
      • No further WTM events scheduled as of late November 2025
      • After documentation became public, TechCrunch stopped promoting
  • Nov 28
    • 🔑 Board-Level Knowledge: Formal Equity Approval Process (evidence-130)
      • Notion board meeting template shows “Options approvals” as standing agenda item under Administrative matters
      • Proves equity changes required formal board review, not unilateral CEO authority
      • Equity deleted days after attempted exercise (post-August 11 C&D), months before $30M raise (Nov 2023)
      • Board members: General Catalyst (Hemant, Sophia Xiao as observer since founding Sept 2019), S32, XYZ Capital, Felicis Ventures, Sterling Road
      • Hemant on ALL SEC filings, John Cwikla on NONE
      • GC’s “Our Creation of Puzzle” language establishes GC-controlled entity, not typical startup
      • Pattern: Formal governance structure with lead VC appearing on all federal filings while actual technical cofounder appears on none
    • SOC2 Compliance During Peak Retaliation (evidence-131)
      • Puzzle claims SOC2 certification - observation period language removed from site (previously showed Nov-Dec 2025)
      • Vanta conflict: Ice skating event co-hosted with Vanta (SOC2 compliance provider) during observation period
      • Observation period covered: bar complaint (Nov 24), CBA complaint (Nov 25), Wikipedia tampering (Nov 26-27), 3rd C&D (Nov 20), Deel partnership (Nov 20), coordinated surveillance (Orrick partner, Brunswick Group), business partner notifications (15+ accounting firms)
      • Contradiction: Claims governance controls sufficient for SOC2 while simultaneously: attorney threatens federal whistleblower with police (4th time), CEO tampers with Wikipedia, no compliance review of CFPB ban despite customer financial data access
      • SOC2 auditors review “tone at the top” and ethical conduct - observation period documents whether formal controls prevented or failed to prevent systematic whistleblower suppression
    • Sasha’s Wikipedia User Talk Page: Direct Lies to Administrators
      • On his Wikipedia User talk page, Sasha told administrators directly: “The CFPB / federal government never ‘banned’ people” (Nov 27, 05:55 UTC)
      • Provably false: CFPB Stipulated Final Judgment explicitly states “permanently restrained from… advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit” and “Assisting Others” prohibition
      • Also claimed Netanyahu financial backing “not true and not cited or sourced” despite James Petras March 2015 article directly naming “Sasha Orloff and Jacob Rosenberg founders of Lendup” (published 10 years ago, never disputed until 2025)
      • When asked about COI as co-founder, deflected: “But the company no longer exists…So there is no direct or indirect compensation”
      • Result: Wikipedia administrator thanked him for “alerting Wikipedia to problematic editing” (Nov 28, 00:47 UTC) - whistleblower blocked for posting federal court documents, Sasha’s false “never banned people” claim remains unchallenged
    • Joonko: Fourth Kapor Capital Portfolio Fraud Pattern (WSJ Sept 2024, Calcalistech June 2025)
      • Ilit Raz (CEO/Founder) charged by SEC with defrauding investors of $21M+ through inflated revenue, fake testimonials, forged bank statements, fabricated candidate database
      • Positioned as “diversity recruiting” social justice mission
      • Israeli Intelligence Unit 8200 background (7 years, 2003-2011)
      • Admitted to fabricating data after investor confrontation (summer 2023)
      • Company filed Chapter 11 bankruptcy (May 2024) after shutting down
      • Delaware bankruptcy court approved $500K settlement to CEO who committed fraud (June 2025)
      • Pattern identical to LendUp (CFPB ban), Puzzle (SEC complaints, photoshopped metrics), Daylight (lawsuit alleging false investor data, 5-month collapse)
      • Kapor Capital pattern now spans four companies with systematic fraud indicators across 13+ years
    • Wikipedia Admin Misled by Sasha’s False Claims
    • Kimberly Morgan’s “Successful Exit” from Ahead Financials
      • LinkedIn claims “Surpassed industry benchmarks for customer acquisition in 9 months with a successful exit”
      • Timeline: Dec 2020 launch → Apr 2022 exit
      • Reality: May 2021 lavish campaign → Aug 2021 customer complaints (locked accounts/unpaid referrals) → Apr 2022 app stopped working
      • “Successful exit” = same month as $1.575M Rolling Loud fraud judgment
      • 16-month overlap: served as both LendUp COO (Jan 2020 - Jun 2022) and Ahead Co-Founder/COO (Dec 2020 - Apr 2022) during CFPB shutdown
      • After judgment, became COO at Beam administering $200M+ in public benefits to 300K families (June 2022)
      • Pattern: extract, exit before consequences, move to next vulnerable population entity
    • Hemant Taneja’s “Responsible AI” Theater
      • November 14, 2023: Same day as Puzzle’s $30M emergency funding (5 months post-termination)
      • Hemant unveiled “voluntary Responsible AI commitments” with Commerce Secretary Raimondo and 35+ VC firms (General Catalyst, XYZ VC, Felicis Ventures)
      • Commitments require “transparency and documentation,” “risk & benefit forecasting,” “auditing and testing”
      • None applied to Puzzle’s CFPB-banned CEO accessing customer financial data and syncing with OpenAI
      • Twitter reactions: “Spot the FTX investors” and “I liked some of these firms 😢 RIP”
      • Performance of ethics while systematically violating the principles being performed on the exact same day
    • ACTIVE CFPB BAN VIOLATION: Partner Rewards Program
      • Puzzle operates public affiliate program promoting credit products (Brex, Ramp, Mercury, Every, Meow, Arc, Gusto Wallet payroll advances)
      • Direct violation of CFPB Stipulated Final Judgment Section I.b (“receiving any remuneration… from any person engaged in… providing any extension of credit”) and Section I.c (“Assisting Others… performing marketing… services”)
      • Page offers “exclusive perks” and “Claim offer” buttons for 20+ partners including multiple credit card/lending companies
      • Each partner has promotional description, specific bonus offers (Brex 40K points, Mercury $1K, Ramp $500, Gusto 12 months free)
      • Pattern: Nov 26-27 Sasha surgically removes “Assisting Others” prohibition from Wikipedia while simultaneously operating affiliate program that violates “Assisting Others” prohibition
      • Active ongoing violation happening RIGHT NOW on public website
  • Nov 27
    • HE 100% KNOWS HE’S BANNED: His sophisticated parsing of “case caption vs order scope” proves he read the CFPB decree carefully enough to notice the technical distinction between who’s named in the case caption (only LendUp Loans, LLC) and who’s covered by the prohibitions (Sections II & V explicitly state “Defendant and its officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them”). Most damning: he specifically removed “Assisting others in any lending activities” (Section I.c language) from Wikipedia - this prohibition covers advisory roles and investments in lending companies even if entity-only ban applied, directly covering his Mission Lane involvement and Theorem/Pagaya investments. This isn’t confusion about federal enforcement language - this is deliberate cherry-picking by someone who understands legal documents well enough to make technical distinctions while ignoring operative prohibitions. He knows the ban covers him. That’s why he spent 12+ hours on Thanksgiving trying to rewrite Wikipedia to remove “officers, agents, and all other persons in active concert” language AND the “Assisting Others” prohibition. The willful misreading is consciousness of guilt.
    • Wikipedia Evidence Tampering Documented: Sasha Orloff personally edited Wikipedia (Nov 26-27, 2025) to falsify CFPB order language; changed federal enforcement text from “Defendant and its officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them” to “banning LendUp from issuing subsequent loans” - systematically removing all language establishing ban covers him personally; removed “and permanent lending ban” from section header, changed “consumer lending activities” to “issuing subsequent loans”, removed “Assisting others in any lending activities” (Section I.c), deleted Section V data provisions (prohibiting use/disclosure of LendUp customer information - directly relevant to Puzzle accessing customer financial data), deleted Political connections section (Netanyahu backing), deleted Subsequent investments section (Theorem/Pagaya/Altman); made edits during Thanksgiving week starting 10:11 AM PT (18:11 UTC), continuing for 12+ hours until 10:20 PM PT (06:20 UTC) - escalating from surgical deletions to desperate late-night false claims about document contents; first public acknowledgment of whistleblower in 2.5 years; edit war resulted in page protection at 05:12 UTC - exactly 2 minutes after his final deletion attempt; timeline shows increasing desperation and compulsive behavior suggesting mental decompensation - no longer delegating to attorneys/PR but personally spending 12+ hours on holiday week editing Wikipedia, arguing with administrators, racing against protection; pattern demonstrates consciousness of guilt and loss of perspective about what battles can be won by suppression
    • “Sasha O.” obfuscation (evidence-129): Sasha changed profile name to “Sasha O.” after Wikipedia edit war - pattern of obfuscation
    • Wikipedia False Claims to Administrators
      • Made four claims demonstrating willful misreading of primary sources:
      • (1) “no people were named” - technically correct about case caption but deliberately ignores order covers “officers, agents, and all other persons in active concert” (includes him as former CEO)
      • (2) “no ban of people” when Sections II and V explicitly prohibit officers from consumer lending
      • (3) Pagaya shares “not related to LendUp” when SEC filing documents continued consumer credit involvement
      • (4) Petras article “not sourced” when it’s published academic with 60+ books
      • Pattern: technically correct about narrow literal reading while deliberately ignoring actual prohibitions and context
    • Rolling Loud notification (evidence-123): Nov 19 notification → court docket activity Nov 21; 2 days after email about $1.575M judgment, UniCourt shows activity (case dormant since Dec 2023)
    • Marvin Bing Blocking (Same Day)
      • Marvin Bing (Fairfax Studios founder, named in Rolling Loud v. Ahead Financials lawsuit) blocked whistleblower within 57 minutes of post (Nov 26)
      • Same day Sasha claimed on Wikipedia that lawsuit was “made up”
      • Pattern: both parties suppress rather than refute
      • If lawsuit fabricated, Marvin would defend rather than block
    • 12-Year Wikipedia Control Pattern
      • Article initially created with LendUp intern contributions (Laura Behrens Wu, Shippo founder who interned 2013)
      • September 2018: user “Tlvernon” disclosed being “paid by LendUp to revise and update this page” during fraud period (CFPB violations 2016, 2019, 2021)
      • Tlvernon uploaded Sasha Orloff headshot (since deleted from Wikipedia)
      • August 8, 2023 (3 days before first C&D): whistleblower documented Mission Lane contradictions on Wikipedia
      • November 2025: Sasha personally removed 2+ years of whistleblower documentation while falsely claiming edits were “in the last two weeks”
      • Pattern: continuous Wikipedia narrative control from company creation → paid sanitization during fraud → monitoring/suppression over multiple years
    • Ramp Engagement with Fraud Documentation (evidence-128)
      • Ramp’s official company account liked LinkedIn post documenting GC’s role in Puzzle fraud, Hemant Taneja orchestration claims, Deel partnership
      • Post included: “Hemant seems to think he can buy influence to embed fraudulent founders throughout his portfolio”
      • Like occurred during Thanksgiving week (same timeframe as Sasha’s Wikipedia tampering)
      • Establishes Ramp’s institutional awareness of fraud allegations, GC orchestration, CFPB ban
      • Yet 2+ year Puzzle integration remains active
      • Pattern: GC portfolio companies acknowledge fraud documentation but continue partnerships, suggesting GC influence prevents independent due diligence
    • 2023 “Puzzle Financial Whistleblower” Tagline Evidence
      • Archived LinkedIn profile snapshots confirm “Puzzle Financial whistleblower” was public tagline BEFORE August 11, 2023 first C&D from Lisa Bowman
      • Creates documented proof attorney should have been on notice and had duty to investigate federal whistleblower status before threatening police action
      • Strengthens California State Bar complaint (Case #25-O-30894) by eliminating any claim tagline was added retrospectively
      • Archived evidence makes failure to investigate even more damning for bar ethics investigation
  • Nov 25
    • California Board of Accountancy Complaint (Case #A-2026-1047)
      • Supporting documentation submitted in response to November 17, 2025 CBA request
      • Complaint documents professional ethics violations by CPAs providing testimonials after notification of CEO’s CFPB permanent ban
      • Primary defendants: Joe Faris (Accountalent), Matt Tait (Decimal), Nick Abouzeid (Rivet.tax), Burkland Associates, and 15+ accounting firms
      • Pattern includes: quid pro quo arrangements (podcast platform for testimonials), active suppression of fraud warnings (4-minute comment deletions), strategic deployment of CPA endorsements during fraud exposure
    • Coordinated Network Surveillance (evidence-115)
      • Two distinct monitoring patterns showing coordinated crisis response:
      • (1) Aria Kashefi (PARTNER at Orrick, Herrington & Sutcliffe LLP - same firm as Lisa M. Bowman under bar complaint Case #25-O-30894)
        • Partner viewed profile November 24, 2025 SAME DAY as bar complaint filed
        • Partner outranks Bowman who is “Of Counsel”
        • Proves immediate firm-level awareness at partner level and likely emergency internal review
      • Brunswick Group (crisis PR firm) viewed after bar complaint
      • (2) Samantha Van Gent (Communications at General Catalyst) viewed after being publicly tagged in post about “RICO patterns, not NDAs”
      • Proves institutional monitoring when lead investor is publicly called out about RICO allegations
      • Timestamps establish awareness for permanent federal record
    • Burkland Associates Active Promotion
      • CPA firm published LinkedIn post (approximately Nov 18-25) listing Puzzle as first “trusted partner”
      • 8-15 days after November 10 notification with CFPB enforcement summary
      • CEO amplified post with “The great migration has begun”
      • Demonstrates active conscious promotion rather than passive partnership continuation
    • Deel Compliance Acknowledgment
      • Deel Compliance Operations Team acknowledged receipt of November 20, 2025 notification (sent same day as Deel-Puzzle partnership announcement)
      • Stated “Our team will review it and get back to you if any clarification is needed”
      • Acknowledgment occurred after toxic.systems was updated to include bar complaint (Case #25-O-30894), Brunswick Group/Orrick partner surveillance (evidence-115), CBA complaint (Case #A-2026-1047)
      • Dec 11 update: Deel confirms continued active investigation (“taking a little longer than expected, please sit tight. Rest assured we are working on it”) - 21 days after initial notification
    • Gusto Active Investigation (Case #40641059)
      • Nov 28, 2025: Notification sent to [email protected], [email protected], [email protected]
      • Dec 1, 2025: Gusto Customer Care (Christian) acknowledged, confirmed immediate escalation, assigned case number
      • Dec 2, 2025: Follow-up confirmed “specialized team” is “actively managing that investigation”
      • Dec 12, 2025, ~8 PM ET: Edward Kim (Co-founder and Head of Technology at Gusto) viewed whistleblower profile - demonstrates continued executive-level attention to ongoing documentation; while no final followup was received, this suggests investigation remains active at technical leadership level
      • Strongest partner response: Unlike Deel’s initial passive acknowledgment (Nov 25), Gusto explicitly confirmed active investigation from the start; Deel later confirmed continued investigation (Dec 11)
      • Kapor connection: Kapor Capital invested in both LendUp (during fraud) and Gusto; notification documented this pattern
      • Data exposure: Gusto processes SSNs, bank accounts, salary, tax withholding—integration gives CFPB-banned CEO access to employee financial data
      • Pattern: Profile view from Co-founder/Head of Technology (not just security/compliance team) indicates escalation to technical leadership for integration architecture review - consistent with data exposure concerns raised in notification
    • Runway Security Acknowledgment
      • Dec 1, 2025: Notification sent to [email protected] documenting Puzzle integration, failed “Runway tool” history, and FP&A data exposure
      • Dec 2, 2025, 7:18 PM: Kirill Klimuk (Head of Engineering) responded: “We take data security and partner compliance seriously and will review the information you’ve provided”
      • Data exposure: Runway-Puzzle integration exposes financial forecasting, cash flow projections, fundraising scenarios, strategic planning data
      • Historical irony: Puzzle’s early versions included failed “Runway tool” for financial planning—now integrating with actual Runway platform
    • Ramp-Puzzle Integration
      • GC backed BOTH companies when Aug 2023 integration launched
      • Then deepened Ramp stake ($300M Nov 17, 3 days before Deel partnership)
    • Deel COO Espionage
      • Dan Westgarth implicated in Rippling lawsuit
      • Dan worked at Revolut 2015-2019, Sasha was Revolut US board director 2019-2022
      • Revolut removed Sasha from US board Jan 2022 (one month after CFPB ban became public Dec 2021)
    • General Catalyst Influence Pattern Documented
      • Deel announced April 30, 2025 that GC purchased $300M in Deel secondaries to become “anchor investor”
      • 7 months before Deel-Puzzle partnership (Nov 2025)
      • Creates structural conflict: GC is anchor investor in Deel ($300M) AND lead investor in Puzzle (CFPB-banned CEO)
      • If Deel Financial Crime review finds fraud pattern, GC orchestrated integration between their portfolio companies knowing about federal ban
      • Quote from Deel: “What began as a seed investment at La Famiglia has grown into a business that aligns perfectly with the GC Famiglia ethos” (Jeannette zu FĂźrstenberg, Managing Director GC)
      • April 2025 timing looks like buying influence at portfolio company that would later need to approve partnership with GC’s lead portfolio company
    • Timestamped awareness at GC anchor portfolio company
      • Deel Compliance reviewed toxic.systems link containing active crisis management, multiple government complaints, and systematic suppression
      • Review occurred before any continued partnership decision
      • Documented in Employee Amplification as Damage Control section
      • Awaiting substantive response
    • Verbal Admission
      • During Puzzle employment (2020-2023), Sasha verbally told employees he was “not allowed to work in loans anymore” but never elaborated why
      • Mentioned having ideas he “wished other people would do”
      • Proves consciousness of CFPB permanent ban while actively concealing it from public profiles, investors, partners, and media
      • Casual admission to employees combined with zero public disclosure demonstrates deliberate concealment strategy
    • Puzzle About page
      • Hemant/Sophia featured alongside Sasha/John as if VCs are co-founders
      • GC’s article titled “Our Creation of Puzzle” states “Backed since 2019” (not 2021)
      • Unusual VC control structure for supposed “startup”
  • Nov 24
    • California State Bar Complaint Filed (Case #25-O-30894)
      • evidence-111: Official receipt from California State Bar Office of Chief Trial Counsel
      • Attorney: Lisa M. Bowman (CA Bar #253843), Of Counsel Employment Law at Orrick, Herrington & Sutcliffe LLP
      • Basis: California Rules of Professional Conduct Rule 3.10 (Threatening Criminal Prosecution) - attorney shall not threaten criminal charges to obtain advantage in civil dispute
      • Pattern documented: 4 cease-and-desist letters over 27 months (3 sent, 1 prepared Dec 2023 never sent), all threatened police involvement for federally protected whistleblower speech
      • Federal whistleblower retaliation: November 2025 C&Ds sent AFTER Lisa Bowman learned of 2+ years SEC whistleblower protection (established Aug 11, 2023; revealed Nov 11, 2025)
      • Timeline in complaint: Aug 11, 2023 first C&D (1 hr 41 min after SEC filing, she didn’t know) → Aug 11-14 I provided comprehensive fraud docs (never mentioned SEC) → Dec 20, 2023 prepared C&D never sent → Nov 11, 2025 second C&D (same day I revealed SEC protection publicly) → Nov 20, 2025 third C&D (9 days after learning protection)
      • What constitutes “threat” escalated: documenting public records → notifying business partners → predicting career consequences
      • Zero refutation: Never addressed underlying documented fraud (CFPB ban, $51M+ settlements, 5 SEC complaints, photoshopped metrics, Skolkovo FBI warning)
      • Permanent government record: State Bar will investigate client direction (Did Puzzle approve police threats?), adequacy of attorney’s due diligence (public “fintech whistleblower” tagline created duty to investigate; archived evidence confirms designation existed before first C&D), knowing retaliation after learning federal protection
      • Professional consequences: Private/public reproval, suspension, or disbarment possible; investigation on record even if dismissed
      • Strengthens all complaints: Creates official record of systematic retaliation for SEC, CFPB, FBI, whistleblower attorneys
      • Consciousness of guilt: 4 legal threats, 0 refutations = suppression strategy, not legitimate legal defense
      • This is Case #25-O-30894. This is official. This will have consequences.
      • evidence-113: Public documentation of bar complaint filing (Twitter, Nov 24 3:17 PM) with quote tweet warning (Nov 23 5:05 PM); case confirmation received 5:40 PM (2 hrs 23 min after announcement); blocked by @sashaorloff, @dasha_shunina, and @puzzlefin but continued public posting
      • evidence-112: Sasha’s Nov 24 1:00 PM public LinkedIn post announcing DC dinner with Brex/Navan teams (Dec 8), tagging Dasha Shunina (Skolkovo connections), posted 19 hrs after public warning, 2 hrs 17 min BEFORE bar complaint announcement—business as usual despite blocking whistleblower: 5 SEC complaints, federal retaliation, FBI warnings, continued public posting as if no investigation exists
      • evidence-114: Molly O’Shea (Sourcery) promotes Palantir/Alex Karp interview “Presented by Brex” (Nov 23 5:39 PM, originally Nov 11); her bio: “HUGE Fan @brexhq”; network loop documented: Ross Fubini (Palantir advisor 15+ yrs + LendUp/Puzzle investor) → Brex (OpenAI partner) sponsors Palantir content → amplified to startup ecosystem
      • Network coordination timeline: Nov 11 (Palantir video posted, same day as 2nd SEC complaint) → Nov 23 (reposted day before bar complaint) → Nov 24 (Sasha posts DC dinner 2 hrs before bar complaint announcement) → Dec 8 (scheduled DC dinner with data partners)
      • What the timing proves: Business as usual, celebration, and network cross-promotion continue despite federal whistleblower investigation, bar complaint, documented retaliation, and $51M+ enforcement actions
    • Women in Tech Russia: UN-Registered “Russian Federation—International Organization”
      • Parent org: Women in Tech (French NGO) incorporated Oct 9, 2018 in Paris
      • Founder: “Tech Diplomat” Ayumi Moore Aoki (official bio) describes herself as working “at intersection of technology and international relations”—not grassroots advocacy but explicit “tech diplomacy” infrastructure
      • Founder institutional access: UNESCO advisory role, WEF Global Future Council, Tech Diplomacy Forum at UNESCO headquarters (2025), Forbes France 40 Women (2023, same year Dasha became Forbes contributor)
      • Global scale: 60+ countries, 250,000+ members, UN Women/WEF partnerships, government partnerships including USA, France, Russia, Uzbekistan, Malaysia
      • Russian chapter launch: December 12, 2019 in Saint Petersburg with 200+ attendees, Ayumi traveled from Paris to open chapter
      • Institutional backing from day one: Microsoft Russia board member as speaker, HSE University, JetBrains as partners (14 months after French parent org incorporated)
      • Rapid growth: 200+ launch attendees → 2000+ members by May 2020 (5 months)—institutional resources, not grassroots
      • UN registration: WSIS 2021 submission as “Russian Federation—International Organization” (not French NGO chapter), timeline 2000-2050
      • May 2020: Women in Tech Russia holds track at Skolkovo Startup Village (direct partnership with Dasha’s employer, FBI-warned entity)
      • Institutional connections: Microsoft Russia, MegaFon (state-influenced telecom), Franco-Russian Chamber of Commerce and Industry, Skolkovo Women’s Forum (State Duma, Federation Council integration)
      • Western credibility: NASA scientist, NPR journalist used to legitimize entity with Russian government integration
      • The overlap: Women in Tech Russia launched Dec 2019 (Dasha at Skolkovo 2016-2023) → May 2020 Skolkovo partnership → Dec 2022 Dasha launches Women Tech Meetup in U.S. (still at Skolkovo) → June 2023 leaves Skolkovo → Aug 2024 joins Puzzle
      • What this proves: Organization explicitly designed as “tech diplomacy” infrastructure (government-coordinated technology access), not grassroots advocacy co-opted by bad actors. Founder has UNESCO/WEF/government integration, Russian chapter partners with FBI-warned Skolkovo, same person (Dasha) deploys U.S. operation with Forbes/TechCrunch platforming and Puzzle financial data access
      • Pattern: Government-coordinated technology access infrastructure operating across multiple countries (Russia, USA, others) with different state actors using platform for their own purposes
    • May 31, 2023 Prophecy Email to VP of Engineering (Radha Shenoy)
      • Email sent at 12:16 PM, hours after corporate card canceled (known termination signal)
      • Declined vague “Catchup” meeting, sent good faith warning to protect team
      • Key predictions (all came true): “fizzle out before a Series B, or Sasha runs it to the ground until his ego snaps. Either way, there will be a lot of truth-bending to get what he wants”
      • Timeline documented contemporaneously in email to therapist: CEO midnight LinkedIn stalking (May 30) → card cancellation (May 31 morning) → email to Radha (12:16 PM) → “lowest morale in company history”
      • 100% prophecy accuracy: No Series B (2.5+ years later), documented layoffs (Dec 2022, May 2023), photoshopped metrics (Oct 2025), false credentials, 4 C&Ds, “resignation” narrative control
      • Clinical validation: Licensed therapist confirmed workplace gaslighting, not mental illness; I had been discussing toxic workplace with her for months; timeline is from my own contemporaneous documentation sent to her
      • What it proves: Pattern recognition in real-time (not retrospective), good faith warning to leadership (tried to protect team), every prediction came true with documented receipts
    • Jessica Lessin (The Information founder) + Sam Lessin (Slow Ventures GP) media/VC conflict
      • Sam Lessin: Forbes Midas Seed List 2023 #12, Slow Ventures GP (raised $750M+), investor in Gusto (documented in Puzzle data network), Robinhood, Solana, Airtable ($11.7B), Pinterest
      • Jessica Lessin: The Information founder/editor-in-chief (2013), ex-WSJ (8 years), launched The Information Accelerator (2017 incubator for news startups offering capital)
      • Conflict: Sam listed as “intern at The Information” (his wife’s company); Sam’s portfolio company (Gusto) integrates with Puzzle; The Information platformed CEO (Nov 14, Dec 1, 2023) with custom photoshoot while Sam has financial interest in ecosystem
      • Six whistleblower notifications (27+ months) ignored: Aug 11 2023, Dec 10/13/14/15, Nov 3 2025 → zero response
      • Sam’s Gusto investment creates direct financial interest in suppressing fraud investigation of Puzzle (data aggregation platform for ecosystem)
      • Jessica’s dual role (media founder + VC via Accelerator) mirrors network pattern of VC/media crossover conflicts
    • QED Investors false public narrative (June 2018 - Jan 2019)
    • Sustained mutual support: Hooman Radfar (Collective) + Sasha Orloff (Puzzle) (evidence-107, 108, 109, 110)
      • Hooman’s Ando behavior: Recruited with “equity to line cooks” pitch; said menu “tastes like dogshit” to staff; wealth performance in first interactions; fired Black woman line cook shortly after shared Uber ride from launch party; “interim CEO” who signed dissolution documents; pinned tweet: “My name means good thoughts, good words, good deeds”—performative values masking contempt; $110K salary (below market), $150 equity repurchase for 60K shares despite “Uber acquisition”; dysfunctional engineering culture (custom app yet ended up writing scraping apps to integrate with Seamless/Grubhub due to low usage, no kitchen staff communication, wasteful free meals, employees thought basic coloring book easter egg was “differentiator”—delusional focus on trivial features); protected toxic senior engineer who presented himself as boss when that was never the case, took credit for work, yelled, overengineered, bragged about Harvard, made sexist remarks, went to Uber
      • July 11, 2023: Sasha congratulates Hooman on Collective’s fundraise (QED Investors participated); Hooman responds “Thx man! Appreciate your support” (2 months post-termination)
      • November 15-16, 2023: Hooman congratulates Sasha on Puzzle’s $30M funding round; Sasha photo shows XYZ mug (Ross Fubini’s firm) + Puzzle shirt (5 months post-termination, 3 months post-SEC filing)
      • Both aware of whistleblower: I told Sasha I knew Hooman from Ando; I called out Hooman on LinkedIn during documentation knowing they were connected to the same networks
      • QED connection: QED invested in Collective (Hooman’s company), served on LendUp board, invested in Mission Lane, invested in Credit Karma
      • Pattern of mutual public celebration via QED network while whistleblower documentation active; both scrubbed failed companies from histories (Hooman/Ando, Sasha/LendUp); both exhibited performative values while exploiting vulnerable populations and protecting toxic workplace cultures (Hooman: fired Black woman, protected sexist engineer; Sasha: CFPB-banned for lying to consumers)
      • Last observed interaction: November 2024; not aware if Hooman notified of specific whistleblower documentation
    • Geopolitical alignment pattern (2015-2024)
      • October 8, 2023: Sasha posts sunrise photo with Israeli flag emoji
      • November 18, 2023: Sasha opposes United Educators of San Francisco ceasefire resolution
      • Sam Altman’s Israeli connections: IDF gas masks (2016), 2023 Israel meetings, invested in Apex (Israeli AI startup, former Unit 8200 members), December 2024 OpenAI-Anduril partnership (Anduril founder Palmer Luckey = self-described “radical Zionist”)
      • Network convergence: Sasha’s 2015 Netanyahu financial backing, Netanyahu-Altman call (June 6, 2023, 5 days post-termination), 10-year Theorem co-investment (Altman Family LLC + Sasha Orloff, 2014-2024), Ross Fubini & General Catalyst both invested in Anduril + LendUp/Puzzle
      • Consumer fraud data → OpenAI → military tech pipeline fully documented
    • Puzzle’s December 2019 privacy policy discovered (3 months after incorporation Sept 2019)
      • ALL data extraction provisions already existed: “anonymized and aggregated data sets…for other functions,” third-party sharing “without restriction,” DNT refusal, API/login credentials collection
      • 6-year consistency (Dec 2019 - Dec 2025): Core provisions unchanged across all policy updates, proves systematic business model from founding
      • Data extraction by design: Company built from day one (3 months after incorporation) as data aggregation infrastructure, not adapted for AI
      • OpenAI integration activated 3.5-year-old framework: May 2023 features didn’t require policy changes—legal authorization existed since December 2019 founding
      • Same LendUp playbook from day one: Sasha Orloff applied identical privacy framework (LendUp 2012-2021) to Puzzle at founding (Dec 2019), now targeting startup financial data instead of subprime consumer data
      • Updated table and analysis to reflect December 2019 as earliest known policy (previously thought July 2022 was earliest)
    • December 2023 isolation pattern documented
      • One of only internal contacts between termination (May 31, 2023) and December 20, 2023 (and onward): colleague’s concerned message about LinkedIn post (“not wanting to live in a world with this much evil”)
      • Colleague’s message framed through “misinterpretation” lens (“I’m sorry if this is all misinterpreted”)—demonstrates “walking on eggshells” atmosphere
      • CEO (Sasha) never reached out directly: Only one Slack message in May after aggravating meeting with Sasha and Radha (“I’ll try to do better as a founder and leader”) + one voicemail offering money
      • Chilling effect from dual August 11 C&Ds: Even genuine concern filtered through fear of “misinterpretation”
      • Demonstrates surveillance infrastructure wasn’t just monitoring speech—it was isolating a federally protected whistleblower from support network while preparing legal threats
    • Federal whistleblower protection timeline clarified: First SEC complaint filed August 11, 2023, 2:15:26 PM EDT (Submission #16917-772-564-515), establishing protection under 15 U.S.C. § 78u-6
      • I did NOT disclose this SEC filing to anyone—revealed it when I filed second complaint November 11, 2025
      • August 11, 2023, 3:56 PM: First C&D sent 1 hour 41 minutes after SEC filing—Lisa M. Bowman didn’t know about SEC filing specifically, but should have been on notice (I used “fintech whistleblower” as LinkedIn tagline leading up to August 11, creating duty to investigate potential federal whistleblower protection; archived evidence confirms this public designation existed before first C&D)
      • August 11-14, 2023: Email responses to Bowman with fraud documentation—NEVER mentioned SEC filing
      • December 2023 unsent C&D: Prepared without knowing about 4+ months of federal whistleblower protection
      • November 11, 2025: Second SEC complaint revealed publicly—NOW she knows
      • November 11, 2025, 6:02 PM: Second C&D sent same day after learning of federal protection (2+ years protection)
      • November 20, 2025: Third C&D sent 9 days after learning of federal protection
      • Pattern: Unknowingly targeting federally protected activity for 2+ years, then knowingly escalating once informed
      • November 2025 C&Ds (sent AFTER learning of federal protection) constitute potential federal whistleblower retaliation under 15 U.S.C. § 78u-6(h)(1)
  • Nov 23
    • Mission Lane C&D full publication (evidence-104, 105, 106)
      • Christopher J. Forstner (Troutman Pepper Hamilton Sanders LLP, Richmond VA) sent 3-page cease-and-desist Aug 11, 2023
      • Same day as Puzzle C&D from Lisa Bowman (Orrick) = dual coordination confession
      • Mission Lane NEVER employed me - no employment relationship, no NDA, no contractual basis for demands
      • Objected to Credit Karma → Mission Lane connection documentation (connection NOW VERIFIED: Credit Karma promotes Mission Lane 33.99% APR cards)
      • Three “defamatory statements”: asking if they “whiteboard ways to steal from the poor,” calling them “another pawn,” linking FTC settlement articles
      • Demanded removal, full publication listing, permanent cessation; 10-day deadline
      • Two separate companies, two separate law firms, same day = proves network coordination and consciousness of guilt
    • August 2023 response to Lisa Bowman
      • Five emails (Aug 11-14, 2023) to Lisa M. Bowman showing effective coercion and comprehensive fraud documentation
      • “I will not write on this subject ever again” = 27+ months silence achieved
      • Lisa Bowman received detailed documentation of: LendUp violations, Mission Lane discrepancies, toxic workplace, misleading “repeat founders” research study on careers page (specifically quoted and linked Aug 2023; page later updated to advertise “10-year exercise window on good terms” after deleting my equity)
      • Called out the 2006 research study citation 2+ years before documenting publicly again
      • Documented “golden parachute” vs “sabbatical” discrepancy, PR as “tool to reshape the past,” AI pivot instability
      • She had all facts in August 2023 before sending two more C&Ds in November 2025
      • Coerced apology under duress: “never worked with lawyers,” “feel foolish and frozen,” seeking counsel “only to help respond”
      • Proves knowing mischaracterization of protected whistleblowing OR systematic inadequate due diligence
    • The Information platforming (Aug 2023 - Nov 2025)
      • November 14, 2023: Custom photoshoot article by Stephanie Palazzolo featuring CEO as AI startup thought leader
      • December 1, 2023: Second article by Akash Pasricha on Puzzle’s board composition during OpenAI drama
      • Six notification attempts across 27+ months: Aug 11 (golden parachute + first C&D), Dec 10 (narcissistic abuse documentation), Dec 13 (“Washington Post” mention), Dec 14 (“I ask you one last time”), Dec 15 (video proof), Nov 3 2025 (final attempt with evidence summary)
      • December 10-15, 2023: Five emails in 6 days to The Information + three to TechCrunch same period = coordinated media blitz
      • December 20, 2023 (5-10 days after media blitz): Lisa M. Bowman prepared cease-and-desist letter (evidence-95, 96, 97) never sent but kept ready
      • Legal team monitoring ALL media outreach across multiple outlets (TechCrunch + The Information Dec 10-15 → prepared C&D Dec 20)
      • 27+ months of persistent notification (Aug 2023 - Nov 2025) with zero response or investigation
      • Articles remain uncorrected; no disclosure of CFPB enforcement added despite six notification attempts
    • Mission Lane Privacy Policy (current)
      • Proves data extraction playbook wasn’t shut down by CFPB, just transferred to acquiring company (Dec 2018 asset sale)
      • Third-party data aggregation: “receive from third parties…combine with our info” (identical to LendUp)
      • Vague “business purposes” sharing (same as LendUp’s “analyzing our business”)
      • Enhanced surveillance beyond LendUp: Biometric (selfies), network identity (third-party payers’ driver’s licenses/bank statements)
      • “Does not sell” disclaimer (narrow definition) silent on “sharing” for “analytics”/“research” (Puzzle/Brex model)
      • Same QED/Capital One pipeline (Nigel Morris, Holdaway, Black) ensures operational continuity
      • Pattern active TODAY (2024-2025): BBB 1.26/5 stars, federal FCRA lawsuits, payment manipulation, credit fraud
    • Brex Privacy Policy (effective Apr 12, 2024)
      • Documents legal framework for OpenAI partnership announced March 2023 (“millions of transactions” per Brad Lightcap, OpenAI COO)
      • Comprehensive “Linked Data” collection from third-party integrations including accounting systems (Puzzle), banks, other financial services
      • Explicit “de-identified or aggregated data…without restriction” provisions = no meaningful oversight
      • Refuses Do Not Track signals (identical to LendUp/Puzzle)
      • Confirms bidirectional data flow: Brex receives FROM Puzzle (accounting integration) + Brex sends TO OpenAI (documented partnership)
      • Combined with Puzzle’s OpenAI API sync (May 2023): startup financial data flows systematically from accounting → expenses → AI training
    • Deel Privacy Policy (effective May 6, 2025)
      • YC W19 + General Catalyst anchor investor; integrates with Puzzle (announced Nov 20, 2025)
      • Explicit AI development: “develop new products and features for our Services which may include the use of AI”
      • Collects comprehensive employment data: government IDs, financial accounts, biometric via facial recognition, professional history
      • Academic research partnerships: shares aggregated salary data with institutions for “compensation benchmarking” and research
      • US company with EU-only data storage; no Do Not Track statement
    • Gusto Privacy Policy (effective Jul 11, 2025)
      • YC W12 + Kapor portfolio; integrates with Puzzle
      • Explicit AI development: identical language to Deel
      • Collects comprehensive HR/payroll: SSN, demographics, insurance, biometric, session recording technology
      • Academic research partnerships with aggregated data (more restrictive than Deel)
      • CRITICAL DIFFERENCE: Honors Global Privacy Control (GPC) = only company in network offering user tracking control
      • Unlike LendUp/Puzzle/Brex who explicitly refuse Do Not Track
    • Complete network privacy pattern table
      • Six-company analysis: LendUp → Mission Lane (asset acquisition, pattern continuity) → Puzzle → Brex + Deel + Gusto
      • All authorize aggregated data sharing and third-party analytics
      • Three explicitly state AI development use (Puzzle, Deel, Gusto)
      • Two create academic research partnerships (Deel, Gusto)
      • Systematic privacy protection refusal (except Gusto honors GPC)
      • Mission Lane proves CFPB enforcement didn’t stop pattern: Enhanced data collection (biometric + network identity) beyond LendUp’s scope
      • Complete data pipeline documented: Payroll (Deel/Gusto) + Expenses (Brex) + Banking → Puzzle (ultimate aggregate) → OpenAI + Academic Research
      • Same CEO (LendUp/Puzzle), same investors (YC/GC/Kapor), same QED/Capital One network (Mission Lane), same privacy playbook across 13 years
    • Mission Lane exhibits LendUp’s pattern TODAY
      • Not historical - fraud is ACTIVE and ONGOING through Mission Lane (2024-2025)
      • Pattern match table: 10/10 LendUp patterns currently operating through Mission Lane
      • Predatory APRs (33.99% targeting credit score 604), payment manipulation (14-day delays), interest fraud (variable to 36% max), credit reporting fraud (101% utilization when 25%)
      • Enhanced data harvesting: biometric (selfies), network identity (third-party payers’ IDs) - going beyond what LendUp was federally banned from doing
      • Same QED/Capital One pipeline (Holdaway, Black both Capital One executives; Nigel Morris QED founder)
      • Credit Karma → Mission Lane funnel active (497,425 FTC victims → 33.99% APR cards)
      • Federal FCRA lawsuits (2023), BBB fraud documentation (1.26/5 stars, systematic consumer harm)
      • Two layoffs (2023), toxic workplace Glassdoor reviews (lack of transparency, favoritism)
      • Pattern wasn’t shut down, it was scaled through corporate layering to evade CFPB ban
  • Nov 22
    • Meow integration
      • QED Investors portfolio company; Series A July 18, 2022 ($22M led by Tiger Global with QED participation)
      • Integrates with Puzzle (announced June 25, 2025)
      • Brandon Arvanaghi (CEO): Forbes 30 Under 30 Finance 2024 + Forbes BrandVoice paid Samsung partnership (promotional video)
      • Another data pipeline: Meow banking → Puzzle → OpenAI
      • Forbes systematic QED network platforming: Credit Karma (#235 “Best Brands for Value”), Nigel Morris (Midas List #90), Brandon Arvanaghi (30 Under 30 + paid Samsung promo)
      • All while Forbes suppresses Puzzle fraud investigation and other QED entity documentation
    • Puzzle Privacy Policy (Dec 19, 2025)
      • Codifies data extraction infrastructure
      • Unrestricted “anonymized and aggregated” sharing with “trusted business partners” for undefined “other functions”
      • Third parties can combine data beyond Puzzle’s control
      • Refuses Do Not Track signals
    • LendUp Privacy Policy comparison (Aug 2021)
      • Same CEO, identical playbook across 13 years
      • Both companies authorized selling/sharing customer financial data
      • Both refused Do Not Track
      • Both disclaimed control over third-party use
      • Raises question: who was LendUp selling subprime consumer data to (2012-2021)?
    • LTSE conscious enablement
      • Eric Ries (LTSE founder) personally platformed CFPB-banned CEO on podcast
      • Published article positioning Sasha as authority on “startup accounting” and “intentional capital allocation” despite $40M CFPB restitution
      • LTSE partnership integration (Jan 2021) now scrubbed (puzzle.io/ltse returns 404)
      • Used partnership to inflate transaction metrics for board meetings, then scrubbed after extraction
    • Ross Fubini expansion
      • XYZ Venture Capital founder ($1.2B AUM)
      • Village Global cofounder (2017-2020 with Erik Torenberg)
      • Palantir advisor since 2010 (15+ years)
      • Early Anduril investor ($28B valuation, General Catalyst also investor)
      • LinkedIn STILL lists LendUp as active investment (“Apr 2012 - Present ¡ 13 yrs 8 mos”) calling it “one of the most important FinTech companies in the world” despite CFPB permanent ban
      • Forbes Midas List 2025 #88
    • Marvin Bing
      • Director of Art, Amnesty International + NAACP member
      • Operated $1.575M fraud shell company network (Fairfax Studios Inc. + Thirty Two West LLC) with Anuradha Shultes
      • Human rights credentials weaponized for fraud
  • Nov 21
    • Resume fraud intensification (evidence-98, 99, 100, 101)
      • CEO updated LinkedIn AGAIN (Nov 2025), doubling down on backdated Mission Lane founding to 2014 (company incorporated Dec 2018)
      • Evidence-100: Photographic proof from 2016 TechCrunch article shows CEO holding “L Card” with LendUp branding (not Mission Lane), wearing LendUp shirt; proves card was LendUp product during years he claims as “Mission Lane CEO”
      • Evidence-101: TEDx talk screenshot (2:43) shows dedicated “Nobel Peace Prize 2006” slide featuring Muhammad Yunus; mentioned twice in first 3 minutes
      • Nobel Peace Prize credential inflation: 20+ year pattern documented (2002-2025: Grameen Foundation volunteer → 2013 TEDx dedicated slide → 2025 LinkedIn resume explicitly mentions “his Nobel Peace Prize”)
      • Claims “saved customers hundreds of millions” despite CFPB shutdown for “repeatedly lying and illegally cheating its customers”
      • Reveals advisor role ended Sept 2019, same month Puzzle incorporated (immediate transition, “sabbatical” was cover for next company formation)
    • Insights Servicing fraud analysis
      • Expanded section with “Why this is securities fraud” breakdown
      • Blake Byers triple-dipping: Google Ventures partner (public investor) + Insights Servicing Director (undisclosed) + profited from asset sale (both buyer and seller)
      • Special purpose vehicle: 100 authorized shares vs LendUp’s 372M shares = fraud infrastructure
      • Never disclosed to shareholders: CEO controlled entity using LendUp address/email, shareholders had no idea it existed
      • Coordinated abandonment: Both Insights Servicing and LendUp Global became tax delinquent March 2023 (same month), dissolved after serving purpose
      • Likely purposes: asset parking, data repository outside CFPB scrutiny, related-party transactions off books
    • Unsent December 2023 C&D revealed (evidence-95, 96, 97)
      • Lisa M. Bowman prepared C&D triggered by LinkedIn posts about VC/Israel connections (General Catalyst) but never sent
      • Kept as pre-prepared intimidation infrastructure; demonstrates systematic surveillance nearly 2 years before SEC complaints
      • Same attorney across all C&Ds (Aug 2023, Nov 2025, Nov 2025, plus unsent Dec 2023)
    • Daylight fraud
      • Kapor portfolio company collapsed 5 months after Series A
      • Lawsuit alleges CEO presented FALSE DATA TO INVESTORS + whistleblower retaliation + toxic workplace
      • Establishes Kapor pattern across LendUp/Puzzle/Daylight (all targeted vulnerable populations with progressive branding)
    • Third C&D from Lisa M. Bowman
      • Same attorney sent all three (Aug 11 2023, Nov 11 2025, Nov 20 2025)
      • 56-minute response (6:55 PM comment → 7:51 PM C&D)
      • Characterizes deleted career prediction as “safety threat”; all three C&Ds threatened police but what she calls “threatening” escalates
    • a16z Studios podcast
      • Dan Westgarth (Deel COO) on Tech Finance promoting Puzzle-Deel integration
      • 10 days after 4th SEC complaint, same day as 3rd C&D
      • a16z conscious enablement continues despite 5 SEC complaints, CFPB ban, $51M+ enforcement
    • Deel partnership announcement (evidence-90) - damage control pattern
      • Posted within days of Skolkovo documentation published
      • 7 employee reposts, 22 likes within 2 hours (23 likes after 3 hours)
      • Employee coordination as performative loyalty after major documentation drops
      • Deel leadership notified (Dan Westgarth, COO) same day via email: CFPB ban, photoshopped metrics, federal record
      • Payroll integration = another data pipeline expansion (employee financial data)
    • Data colonialism framework added to central thesis
      • Grounds extraction pattern in established critical theory
      • Names power dynamics explicitly
      • Connects to historical colonialism
      • Emphasizes voluntary consent through progressive branding
      • Documents geopolitical dimension (Netanyahu-Altman coordination)
    • YC network protection effect
      • How YC provides infrastructure without investment (plausible deniability, no paper trail, access worth more than capital)
      • Altman Family LLC + YC W2014 LLC + Sasha Orloff = Theorem Technology stockholders (2014-2024)
    • FTC Credit Karma dark patterns details
      • A/B testing documented, conscious deception
      • Sept 2022 FTC hit → Feb 2023 Mission Lane layoffs (workers paid the price)
      • $6.03/victim for systematic deception
    • Puzzle Financial data corrected
      • $171,365 hosting vs $52.68 revenue ratio corrected to 3,252:1 (from evidence-77.csv)
      • $312 = subscription revenue, $2,043.98 (2023) = uncategorized revenue
    • Dasha “soft-landing programs” parallel + extended timeline
      • Boston New Technology interview (Dec 2023) documents “leading soft-landing programs attracting high-tech startups from all over the world”
      • Identical mission/terminology to Skolkovo’s FBI-warned foreign company recruitment
      • Reveals she joined Women in TechÂŽ Global USA management “three years ago” (2020-2021) = 2.5+ years before leaving Skolkovo (June 2023)
      • Extended overlap demonstrates systematic infrastructure development (embed → parallel brand → layer platforms → monetize)
      • Women in TechÂŽ Global contacted via form regarding Skolkovo ties and 2.5+ year overlap
    • Unlabeled growth graph corrected
      • Changed from Twitter to LinkedIn reference
      • Original tweet Dec 24, 2024, reposted to LinkedIn ~Jan 2025
      • Posted during period of minimal revenue ($52.68 total)
    • Netanyahu funding clarified
      • Sasha Orloff funded Netanyahu (not backed by Netanyahu)
      • March 2015, 1 year BEFORE first CFPB violation
      • James Petras article: “Prominent among Netanyahu’s financial backers…Sasha Orloff and Jacob Rosenberg”
    • Kinly/Ahead infrastructure (evidence-91)
      • Account statement (June 2022) proves “acquisition” was rebrand
      • Same address: 1750 Broadway Suite 300, Oakland
      • Same phone: 1-833-33-AHEAD
      • Same email: [email protected]
    • TechCrunch clarification: hosted Women Tech Meetup at conferences (Oct 2024, Oct 2025); never made statement despite 27+ months notification
      • Ensures accuracy: not claiming Nov 20, 2025 WTM event
      • Emphasizes TechCrunch’s sustained silence after being notified with FBI warning (July-Aug 2023)
    • December 2023 Unsent C&D (evidence-95, 96, 97)
      • Lisa M. Bowman prepared C&D triggered by LinkedIn posts about VC/Israel connections (General Catalyst) but never sent
      • Kept as pre-prepared intimidation infrastructure; demonstrates systematic surveillance nearly 2 years before SEC complaints
      • Proves monitoring of protected speech about network connections, not just fraud
      • Same attorney across all C&Ds; shows calculated deployment of legal threats
    • Third Cease-and-Desist (Nov 20, 2025, evening)
      • Lisa M. Bowman (Of Counsel, Employment Law, Orrick) sends third C&D (all three sent from same attorney: Aug 11 2023, Nov 11 2025, Nov 20 2025)
      • Timeline: 6:38 PM post → 6:55 PM “last days” comment → 7:02 PM Dasha views profile → 7:51 PM C&D received (56-minute response)
      • Characterizes LinkedIn comment about career consequences (“enjoy your last days in the tech industry”) as “safety threat”
      • Comment subsequently deleted but documented; refers to career end from fraud exposure, not violence
      • Threatens police notification for protected whistleblower speech about career predictions
      • Third escalation pattern: All three C&Ds threatened police; what escalated is what they characterize as “threatening” (Aug 2023: documenting records → Nov 11: partner notifications → Nov 20: career predictions)
      • Raises legal malpractice questions: What information is Sasha providing to attorney Bowman?
      • Evidence: evidence-92 (Bowman C&D), evidence-93 (original post), evidence-94 (follow-up comments showing deleted “last days” comment)
      • Bowman requesting attorney contact; pending with whistleblower attorneys (Phillips & Cohen)
    • Updated totals: $51M+ settlements/judgments (from $44M); 5 SEC complaints (from 4)
      • Added formal breakdown of all CFPB/FTC/court enforcement actions
      • LendUp CFPB: $6.3M (2016) + $500K (2020) + $40M (2021) = $46.8M
      • Credit Karma FTC: $3M (2022)
      • Ahead/Rolling Loud judgment: $1.575M (2022)
  • Nov 19
    • Fourth SEC Whistleblower Complaint Filed (#17635-381-418-374) - Systematic extraction infrastructure thesis with new evidence:
    • Netanyahu-Altman call (June 5, 2023, 5 days post-termination, evidence-89) documenting active Israeli PM-OpenAI CEO relationship
    • FTC/Credit Karma dark patterns - A/B testing to optimize deception, 1/3 of “pre-approved” denied/credit damaged, $6.03/victim penalty; correlation to Mission Lane layoffs (Sept 2022 → Feb 2023)
    • Data aggregation infrastructure: Puzzle as ultimate aggregate (accounting software); Brex/Deel/Gusto data flows INTO Puzzle; both Puzzle and Brex have independent OpenAI partnerships (Brex-OpenAI confirmed March 2023); General Catalyst portfolio coordination (Hemant Taneja)
    • Two banned LendUp CEOs following identical playbook (Sasha Orloff → Puzzle, Anu Shultes → DashFi/Ahead)
    • Technical architecture evidence from engineering role
    • Coordinated investor response pattern; AI training data provenance questions; competitive implications
    • Supplemental to previous complaints establishing transformation from isolated fraud to coordinated infrastructure with geopolitical implications
  • Nov 18 (Part 2)
  • Nov 18
  • Nov 17
  • Nov 16
  • Nov 15
  • Nov 14
  • Nov 13
  • Nov 12
  • Nov 11
  • Nov 2-10

Mutual Awareness and Accountability

All parties have been notified and are mutually aware. This documentation represents 27+ months of transparent notification, evidence sharing, and opportunities to respond. No one documented here can claim ignorance.

Timeline of Contact

  • August 5, 2023: Y Combinator (press@, info@, Michael Seibel directly)
  • August 2-10, 2023: Hacker News posts with primary source documentation
  • August 11, 2023: Dual cease-and-desist letters received (Puzzle Financial, Mission Lane)
  • January 19, 2024: On Deck CEO Julian Weisser (two-part email, 2:38 PM and 2:43 PM)
  • July-August 2023: TechCrunch (Connie Loizos, [email protected], David Jeans) notified with comprehensive documentation of FBI warning regarding Skolkovo Foundation; TechCrunch has never made a statement but has hosted Women Tech Meetup (Dasha Shunina’s operation) at multiple conferences (documented: Oct 2024, Oct 2025)
  • August 11, 2023 - November 3, 2025: The Information notified six times across 27+ months: (1) Aug 11, 2023 with golden parachute doc + first C&D; (2) Dec 10, 2023 comprehensive narcissistic abuse documentation; (3) Dec 13, 2023 “Washington Post and Whistleblower Aid” mention; (4) Dec 14, 2023 “I ask you one last time” after two platforming articles (Nov 14 custom photoshoot, Dec 1 board governance); (5) Dec 15, 2023 video proof; (6) Nov 3, 2025 final attempt with evidence summary; legal team prepared C&D after Dec media blitz (Dec 20, never sent but kept ready); zero response or investigation across 27+ months despite six notifications
  • September 23, 2025: Brex launches major technical integration with Puzzle (“one-click accounting setup”) - built 20 months after closing Israel R&D center (January 2024, 282 employees)
  • November 1, 2025: Brex executives notified (LinkedIn: Jason Mok VP Partnerships, Anshul Shah, NicolĂĄs Carey) of photoshopped metrics and cap table manipulation
  • November 4, 2025: CEO posts video content with Jason Mok discussing investor partnerships - continued promotion 3 days after explicit notification
  • November 4-9, 2025: Public documentation at toxic.systems with link shared to all entities
  • November 9, 2025: Brex executives notified again (email) of ongoing fraud
  • November 9, 2025: CPA.com conference organizers notified (Joe Faris CPA, Charles Crabtree VP) - Puzzle is official partner alongside Brex for “AI + Accounting” event despite CFPB ban being public record
  • November 11, 2025: SEC whistleblower complaints filed (four submissions, 19 documents)
  • November 11, 2025: Same-day cease-and-desist retaliation (6:02 PM, threatening criminal prosecution)
  • November 19, 2025: Fourth SEC whistleblower complaint (#17635-381-418-374) - Systematic extraction infrastructure thesis: Puzzle as ultimate aggregate (accounting software = all financial data); Brex/Deel/Gusto data flows INTO Puzzle; both Puzzle and Brex have independent OpenAI partnerships (Brex-OpenAI March 2023 confirmed, Puzzle-OpenAI AI features); General Catalyst portfolio coordination (Hemant Taneja); Netanyahu-Altman call (June 5, 2023, 5 days post-termination, evidence-89) demonstrating Israeli PM-OpenAI CEO relationship; two banned LendUp CEOs (Sasha Orloff → Puzzle, Anu Shultes → DashFi/Ahead) following identical playbook; technical architecture evidence from engineering role; competitive implications for AI industry
  • November 20, 2025: Deel partnership announcement (days after Skolkovo documentation published); Dan Westgarth (COO) notified via email of CFPB ban and photoshopped metrics; 7 employee reposts, 24 likes within 3 hours = coordinated amplification as damage control
  • November 20, 2025 (Evening): Third cease-and-desist received from Lisa M. Bowman (Orrick Employment Law); 56-minute response timeline (6:38 PM Women Tech Meetup callout post → 6:55 PM “enjoy your last days” comment → 7:02 PM Dasha views profile → 7:51 PM C&D received); characterizes deleted LinkedIn comment about career consequences as “safety threat” requiring police notification; comment referred to career end from documented fraud exposure, not violence; third escalation in legal intimidation pattern—all three sent C&Ds threatened police, but what they characterize as “threatening” has escalated (August 11, 2023: documenting public records, November 11, 2025: partner notifications, November 20, 2025: career predictions); December 20, 2023 C&D prepared but never sent (evidence-95, 96, 97), triggered by LinkedIn posts about VC/Israel connections; kept as pre-prepared intimidation infrastructure; demonstrates systematic surveillance and calculated deployment of legal threats

They Know About Each Other

This documentation connects: CFPB enforcement (LendUp), Asset Sale documents (Mission Lane), Photoshopped metrics (ActualQuickBooks/Puzzle), Forbes conflicts (Dasha Shunina, Hemant Taneja Midas List #8), General Catalyst portfolio integration (Puzzle lead investor, Deel anchor investor $300M, Ramp investor March+Nov 2025, Gusto board member), Y Combinator network (Deel W19, Brex W17, Theorem W14 co-investor), YC platforming (Michael Seibel, Garry Tan), ODF endorsement (Julian Weisser “Puzzle shirt” comment), CPA.com partnership, Brex technical integration (Sept 2025), Ramp technical integration (Aug 2023, 2+ years active), Deel partnership (Nov 2025) with COO under corporate espionage lawsuit (Dan Westgarth’s wife’s Revolut account allegedly laundered espionage payment; Dan/Sasha both worked at Revolut at different times; Revolut removed Sasha from US board Jan 2022, one month after CFPB ban became public - showing even Revolut recognized ban disqualifies advisory roles), Decimal accounting partnership, a16z (acquired Turpentine podcast platform April 2025, Deel Series E Oct 2025), TechCrunch hosting Women Tech Meetup (Skolkovo operation) at multiple recent conferences (Oct 2024, Oct 2025), Media suppression (TechCrunch 27+ months silence, The Information notified Dec 14 2023 after custom photoshoot articles, no statement or investigation from either).

Each entity is now aware that others are documented:

  • Y Combinator knows On Deck was notified
  • On Deck knows Y Combinator was notified
  • TechCrunch knows both were notified; has hosted Women Tech Meetup (Dasha’s Skolkovo operation) at multiple recent conferences (Oct 2024, Oct 2025) despite FBI warning documentation; has never made a statement
  • The Information notified six times across 27+ months (Aug 11 2023, Dec 10/13/14/15, Nov 3 2025) including “I ask you one last time” (Dec 14) and “Washington Post” mention (Dec 13); legal team prepared C&D after media blitz (Dec 20, never sent); zero response across 27+ months
  • Brex built technical integration 6 weeks before explicit notification (Nov 1), continued promotion 3 days later (Nov 4)
  • Ramp (GC portfolio since 2021) notified Nov 25 of existing Aug 2023 Puzzle integration (2+ years active); GC was already backing BOTH companies when integration launched = GC orchestrated integration; GC then deepened stake $150M March 2025, $300M Nov 2025, 3 days before Deel-Puzzle partnership = systematic portfolio coordination
  • Deel (YC W19, GC anchor investor $300M Apr 2025) leadership notified Nov 20, partnership announced same day = GC portfolio integration, not damage control; Deel COO Dan Westgarth personally implicated in Rippling corporate espionage lawsuit (wife’s Revolut account allegedly laundered $6K payment to Rippling spy); Dan/Sasha both worked at Revolut (Dan 2015-2019, Sasha board 2019-2022) = connection through same company; Revolut removed Sasha from US board Jan 2022 (one month after CFPB ban became public Dec 2021) = even Revolut recognized CFPB ban disqualifies advisory roles
  • Decimal (Matt Tait, CEO/accounting partner) notified Nov 11, 2025; viewed LinkedIn profile, continues platforming despite fraud documentation
  • CPA.com partnering with Puzzle for official conference alongside Brex despite CFPB ban being public record since December 2021
  • Forbes knows its conflicts are documented (contributor employed by subject company)
  • General Catalyst knows portfolio conflicts and Israeli pledge deletion are documented
  • CEO knows federal complaints cite all connected entities
  • Legal counsel (Orrick) knows retaliation is documented to SEC within hours

Response Pattern: Silence, Suppression, Celebration, Retaliation

No entity requested clarification, offered accountability measures, or acknowledged the pattern. Documented responses:

  • Hacker News posts marked “killed”
  • TechCrunch 27+ months silence despite initial contact
  • On Deck “Top 2025 Company” designation one day after SEC complaints
  • Y Combinator continued customer amplification
  • Warning comment on Puzzle’s CPA conference post deleted in 4 minutes
  • Deel partnership amplification (7 employee reposts, 24 likes in 3 hours) same day as notification
  • Decimal (accounting partner) viewed profile, continues platforming after notification
  • Second C&D threatening criminal prosecution same day as federal whistleblower complaint (November 11, 2025, like first C&D also threatened workplace violence/police)
  • Third C&D from Lisa M. Bowman characterizing LinkedIn career prediction as “safety threat” requiring police notification (November 20, 2025, 56 min after comment); all three sent C&Ds threatened police but definition of “threat” expands: documenting records → partner notifications → career predictions
  • December 20, 2023 C&D prepared but never sent (evidence-95, 96, 97), triggered by LinkedIn posts about VC/Israel connections (General Catalyst); kept as pre-prepared intimidation infrastructure nearly 2 years before SEC complaints; demonstrates systematic surveillance and calculated deployment of legal threats

The pattern demonstrates conscious enablement with full knowledge of the documented evidence.

November-December 2025: Post-Notification Escalation

After 27+ months of documented notification, the response shifted from silence to active escalation. This section chronicles the unhinged behavior during the weeks following the SEC complaints and legal filings.

Timeline of escalation:

DateEventEvidence
Nov 11SEC #17628 (3:33 AM) + #17629 (6:32 PM) + update to #16917SEC Complaints
Nov 11Same-day C&D retaliation (6:02 PM)C&D Timeline
Nov 12ODF “Top 2025 Company” designation (1 day after SEC)On Deck
Nov 13SEC #17630 (Credit Karma/Mission Lane supplemental)SEC Complaints
Nov 19SEC #17635 (Systematic extraction infrastructure thesis)SEC Complaints
Nov 19Antler SF “Lunch & Learn” platformingAntler
Nov 20Third C&D with police threats (56 min response)C&D Timeline
Nov 20Deel partnership announced same dayDeel
Nov 20SOC2 observation period publishedSOC2
Nov 24California State Bar complaint filedBar Complaint
Nov 25California Board of Accountancy complaintCBA Complaint
Nov 26-27Wikipedia meltdown: 13+ hours ThanksgivingWikipedia Edit War
Dec 1”Crisis Monday”: Ramp calculator, Dasha YouTube, Patricia hiredCrisis Monday
Dec 2”Real Leadership” tweetReal Leadership
Dec 2SOC2 observation period language removedSOC2
Dec 2Gusto confirms active investigation (Case #40641059)Gusto Investigation
Dec 2Runway security acknowledges, will reviewKirill Klimuk (Head of Engineering)
Dec 3Matt Tait blocks after retagReal Leadership
Dec 3Nigel Morris (QED) views profile at 2:22amQED Surveillance
Dec 3Sina, John Harrington, Dasha, Marissa Mata block after calloutsLinkedIn post comments
Dec 3Anshul Shah (Brex) untags; Dasha Shunina untags → blocksSame pattern as Matt Tait
Dec 3Nick Abouzeid (Rivet CEO) views profile 4:28pm after tagXYZ Capital common investor; notified Nov 10; featured on Turpentine Nov 13
Dec 3LinkedIn spree: Turpentine ep, DCPA, Antler, Luke Frye, YCBusiness as usual performance
Dec 4”ChatGPT and 2026 planning” post; Jennifer likesFamily-unit amplification continues
Dec 4Naveen blocks; mass employee calloutsDec 4 Escalation
Dec 4AI transparency blog + LinkedIn quoteNormalcy performance while concealing CFPB ban
Dec 4Twitter/X also drops emojis from nameBoth platforms now “Puzzle” without 🧩🚀

The Wikipedia Meltdown (November 26-27, 2025)

The centerpiece of the post-notification crisis. Sasha Orloff personally spent 13+ hours on Thanksgiving week editing Wikipedia to remove CFPB fraud documentation.

Key evidence:

  • First public acknowledgment in 2.5 years - After blocking me on LinkedIn and coordinating suppression in silence, he breaks 2.5 years of silence to personally argue on Wikipedia
  • False claims to administrators - Told Wikipedia “The CFPB never banned anyone from doing anything” and “made up lawsuits” despite all links being functional
  • Willful misreading - Carefully distinguished case caption (only entity named) from order scope (covers “officers, agents, all persons in active concert”) to mislead administrators
  • Evidence tampering - Surgically removed “officers, agents, and all persons in active concert” language, “Assisting others in any lending activities” prohibition, and Section V data provisions
  • Pattern of decompensation - Went from calculated legal responses (attorney letters) to personal, compulsive, 13+ hour Wikipedia editing on Thanksgiving

What he removed from Wikipedia:

  • ❌ “and permanent lending ban” (from section title)
  • ❌ “and its officers, agents, and all persons in active concert with them” (enforcement scope)
  • ❌ “Assisting others in any lending activities” (Section I.c - covers advisory roles, investments, Puzzle’s current business model)
  • ❌ Section V data provisions (directly relevant to Puzzle accessing customer financial data)
  • ❌ Netanyahu political connections section (2015)
  • ❌ Pagaya/Theorem/Altman investments section

Result: Whistleblower blocked indefinitely. Sasha’s false claim “The CFPB never banned anyone from doing anything” remains on his talk page. Page protected until December 7, 2025 with his sanitized version locked in.

→ Full 790-line documentation: Wikipedia Edit War

SOC2 During Crisis

Puzzle maintains SOC2 compliance certification with Vanta during active retaliation.

November 20, 2025: trust.puzzle.io published showing “SOC2 observation period for 2025 will close at the end of December” - same day as third C&D and Deel partnership.

December 2, 2025: Observation period language removed from trust.puzzle.io. SOC2 still claimed, but “2025 observation period” wording no longer displayed.

Vanta notified November 28, 2025: I emailed Vanta about their client’s Wikipedia meltdown and surgical CFPB deception during active SOC2 observation period.

Vanta conflict of interest: Puzzle co-hosting “ICE SKATING UNION SQUARE w/Puzzle” event with Vanta (their SOC2 compliance automation provider) during the observation period—after Vanta was notified about CEO misconduct—when auditors are reviewing “tone at the top.”

Note on tone at the top: SOC 2 auditors evaluate the control environment, including “tone at the top”—whether leadership demonstrates commitment to integrity and ethical values. The management assertion is a letter from company leaders claiming controls were “intentionally and thoughtfully designed.” A CEO permanently banned from consumer lending by federal regulators, who spent 13+ hours on Thanksgiving personally editing Wikipedia to remove fraud documentation, raises fundamental questions about ethical leadership and management integrity.

The observation period (Nov-Dec 2025) covers:

  • Nov 11: Second C&D (same day as SEC whistleblower status revealed)
  • Nov 20: Third C&D with escalated police threats (same day as Deel partnership)
  • Nov 24: California State Bar complaint filed
  • Nov 25: California Board of Accountancy complaint filed
  • Nov 26-27: Wikipedia tampering (13+ hours on Thanksgiving)
  • Coordinated network surveillance (Orrick partner, Brunswick Group, GC Communications)
  • Business partner notifications (Deel, Brex, Gusto, 15+ accounting firms)
  • Active suppression (comment deletions, profile blocks, C&D threats)

The contradiction: Puzzle claims formal governance and security controls sufficient for SOC2 certification, yet during this exact observation period engaged in evidence tampering, whistleblower suppression, and false claims about federal enforcement orders.

Puzzle SOC2 compliance observation period Puzzle’s trust/security page (trust.puzzle.io) previously showing “SOC2 observation period for 2025 will close at the end of December.” Screenshot November 20, 2025. Observation period language since removed (as of Dec 2, 2025).

”Real Leadership” Tweet (December 2, 2025)

Sasha Orloff LinkedIn post about "real leadership" featuring Matt Tait/Decimal video December 2, 2025, 40 min after posting: Sasha’s LinkedIn post featuring different clip from Matt Tait/Decimal video. Full text: “Most accounting firms wouldn’t have the guts to do what Matt Tait did at Decimal. They shut down their entire legacy system — hundreds of clients on KPMG Spark Ledger — and moved everything to Puzzle 🧩🚀 in one decisive leap. When Decimal’s team saw our AI-native ledger, they realized the gap wasn’t small. It was massive. That decision to switch made Decimal the largest firm user of an AI-native ledger globally. This is what real leadership looks like. The courage to move first, and the clarity to bet on better systems.”

One week after spending 13+ hours on Thanksgiving personally editing Wikipedia to remove fraud documentation, posting about “real leadership.”

Matt Tait context:

  • Received full fraud documentation - Notified November 11, 2025 with comprehensive evidence
  • Viewed my LinkedIn profile - Confirmed awareness of whistleblower documentation
  • Continued engaging with Puzzle/Sasha - Despite notification, maintained partnership and public support
  • Different clip from previous deployment - This is not the same video segment Sasha has deployed before; suggests ongoing content coordination between Sasha and Matt
  • Mutual podcast appearances - Sasha and Matt appear on each other’s podcasts: Sasha on Decimal’s podcast, Matt on Puzzle’s podcast. Pattern of cross-promotion despite fraud documentation.
  • Blocked after retag - Matt Tait initially tried to untag from my December 3 post documenting the pattern. After I retagged him, he blocked. Final email sent to Decimal team. Three strikes.

Matt Tait’s post-block LinkedIn behavior (~November 28, 2025):

One week after receiving fraud documentation and blocking, Matt posted to LinkedIn with notably reduced cadence:

“Life is messy Business is messy

Don’t let social media fool you.

Too often we just post about the good stuff. We conveniently forget to mention the messiness before and after.

I always think about our family Christmas cards my wife does. They look awesome. The kids do great, but…we’re constantly arguing or yelling to keep everyone on track and focused. Between the chaos we get some awesome pictures. One of those makes a great card…but it’s surrounded by the mess.

Business is the same. No company is perfect.

Don’t forget that as you read about success and failure.”

Pattern: After receiving comprehensive fraud documentation about his primary software partner (CFPB ban, photoshopped metrics, federal complaints), Matt shifts to vague philosophical content about “messiness” and imperfect companies. Posting cadence notably reduced. The CEO who publicly celebrated moving “hundreds of clients” to Puzzle without giving them a choice is now reflecting on how “no company is perfect.”

Matt Tait’s original partnership announcement (~February 2025):

LinkedIn post: “BIG ANNOUNCEMENT! Decimal has officially partnered with Puzzle 🧩🚀 and transitioned hundreds of clients onto Puzzle’s AI native ledger. With this partnership: Decimal has more clients on an AI native ledger than any firm in the country… It signifies the final step in the evolution of the Decimal Ledger, (formerly Bookly, formerly KPMG Spark) that Decimal acquired from KPMG US. It has been an amazing process working with Sasha O. and the entire Puzzle team.” (237 reactions, 62 comments)

“We didn’t give them a choice” - from video:

Sasha: “How do you convince your clients to switch? Everyone’s heard of Quickbooks. And you’re like, well I’m gonna swap you out for this other thing. How’s it going, how do you actually make that happen?”

Matt Tait: “My kids’ll tell you when I do this, they’ll tell you that’s Dad’s ‘I don’t care face.’ I wouldn’t say it’s as harsh with our clients, but we really didn’t give them a choice. We had 250+ clients that we had on KPMG Spark that were at that size.”

The admission: Hundreds of clients’ financial data was moved to software run by a CFPB-banned CEO without giving those clients a choice. Clients weren’t informed about the CEO’s federal fraud conviction before their data was migrated.

Likes:

  • Matt Tait (celebrate) - CEO at Decimal, “Host of After the First Million”; the video subject celebrating his own feature despite receiving full fraud documentation Nov 11 and viewing whistleblower profile
  • Omid S. (like) - Software Engineer II @ Puzzle
  • Patricia Daos (like) - Implementation Manager at Puzzle.io; announced full-time hire Dec 1 (previous day); likes “real leadership” post day after joining company led by CFPB-banned CEO
  • Sam Claassen (like) - Co-founder of Startup Cookie; “builds AI growth and GTM systems for startups”
  • Startup Cookie (celebrate) - Company account (170 followers); repeat liker of Sasha/Puzzle content
  • Barbara Jovanovic (like) - Co-founder & CMO of Startup Cookie; “AI-Powered Marketing Agency”; repeat liker (also liked Crisis Monday post)
  • Jennifer Orloff (like) - CEO’s wife; works at Block marketing; family unit amplification pattern continues
  • Evin Wick (love) - Ex-tax lawyer (Georgetown JD + LLM Taxation); Former Puzzle Product Lead - Tax & Accounting (Sep 2021 - Apr 2024); now Co-Founder & CEO at S Works (accounting automation); received courtesy notice Nov 10, 2025 warning of professional liability implications—“loved” post anyway
  • Sophia Xiao (celebrate) - General Catalyst Board Observer; “partnering with ambitious builders”; GC is named fraud orchestrator in this documentation
  • Renato Villanueva (like + comment) - Co-Founder at Parallel; featured in Puzzle case study; trusted Sasha’s Twitter persona, now resells Puzzle bookkeeping to clients; texts Sasha directly about margins; commented: “Love to see partners make a jump that big, but once you see Puzzle. It’s obvious why!”

Evin Wick notification (November 10, 2025):

“As someone who led Tax & Accounting product development at Puzzle and now runs an accounting automation company, you understand the professional liability implications of software led by someone with documented history of manipulating metrics and defrauding consumers. This notification establishes your awareness for the permanent record.”

Response: “Loved” the “real leadership” post 23 days later. A tax lawyer with a JD and LLM in Taxation from Georgetown Law understands exactly what “professional liability implications” means. His career: Tax Associate → Compliance Operations Manager (trained 50+ on IRS regulations) → Product Lead at Puzzle → CEO of competing accounting automation company. This isn’t ignorance.

Startup Cookie pattern: Both co-founders (Sam Claassen, Barbara Jovanovic) AND the company account consistently like Sasha’s content. An “AI-powered marketing agency” that “builds custom AI workflows” actively amplifying CFPB-banned CEO’s “real leadership” narrative.

What this demonstrates:

  • Not represented by counsel - No attorney would advise public “real leadership” claims during active regulatory complaints
  • Not listening to anyone - Continued false credential intensification rather than legal caution
  • Coordinated content production - Matt Tait providing video content AND celebrating his own feature despite receiving fraud documentation and viewing whistleblower profile
  • Decimal exposure - Claiming Decimal moved “hundreds of clients” to Puzzle exposes those clients’ financial data to company led by CFPB-banned CEO with documented extractive privacy policies
  • New hire immediate engagement - Patricia Daos likes “real leadership” post day after full-time announcement, demonstrating rapid integration into network amplification

This is the behavior of someone who either believes they are untouchable or is incapable of recognizing legal exposure.

Real leadership would be conducting due diligence after receiving fraud documentation about your primary software partner.

QED Investor Surveillance (December 2025)

Timeline:

  • November 30, 2025: Public tweets tagging QED network
  • December 1, 2025: Email notification sent to Brandon Arvanaghi and Meow regarding Puzzle integration and QED liability
  • December 3, 2025: LinkedIn post with comment callouts tagging Nigel Morris, Frank Rotman, and QED; 866 impressions, 342+ views by 2:31am ET
  • December 3, 2025, 2:22am ET: Nigel Morris (Managing Partner at QED Investors, Capital One co-founder) views LinkedIn profile (~4 hours after being tagged in comment)

Nov 30 tweets tagging QED, Nigel Morris, Frank Rotman, Meow November 30, 2025: Tweets tagging QED network. “on QED podcasts, Nigel Morris refers to Frank Rotman (@fintechjunkie) as his ‘partner in crime.’ couldn’t be more accurate. there’s a RICO case coming for you. good luck exiting @mission_lane”; “cc @QEDInvestors :-)”; “@meow @brandon Meow will soon be getting an official notice on your federally prohibited @puzzlefin integration and rewards program. your relationship with @QEDInvestors is quickly becoming a legal liability”; ”.@fintechjunkie you’re fucked too, Frank Rotman. i know you stalked my linkedin 2 years ago”

Nigel Morris LinkedIn profile view at 2:22am December 3, 2025, 2:22am ET: Nigel Morris (Managing Partner at QED Investors) views LinkedIn profile ~4 hours after being tagged in comment: “QED Investors Frank Rotman Nigel Morris You’re upgrading to a 4-letter acronym. You should already be aware. Good luck exiting Mission Lane.” Post had 866 impressions, 342+ views by 2:31am.

Why 2:22am matters:

  • QED founder-level awareness established - Not passive monitoring; Nigel Morris personally viewing profile in the middle of the night
  • Capital One co-founder - Same person who installed QED leadership at LendUp 6 months before asset sale to QED-backed Mission Lane
  • Consciousness of RICO exposure - Tagged in comment explicitly referencing “4-letter acronym” (RICO) and Mission Lane exit
  • Pattern connects to 2023 - Frank Rotman (@fintechjunkie) stalked LinkedIn “2 years ago” per tweet; now Nigel Morris viewing at 2am
  • Angel number pattern - 2:22 is an angel number; first SEC complaint (#17628) filed 11/11 at 3:33 AM—another angel number timestamp

QED’s documented role:

  • LendUp board positioning - Nigel Morris installed as Board Chair, Frank Rotman as Board Member (June 2018), 6 months before December 2018 asset sale
  • Mission Lane extraction - QED-backed entity acquired LendUp assets for $29M after $150M+ raised; shareholders got $0
  • Credit Karma pipeline - QED board positions across LendUp, Mission Lane, and Credit Karma (FTC settlement, 497K victims funneled to 33.99% APR cards)
  • Puzzle integration - Meow (QED portfolio) integrates with Puzzle; Brandon Arvanaghi (Meow CEO) is Forbes 30 Under 30

This establishes consciousness at QED leadership level regarding documented fraud pattern and potential RICO exposure.

Parallel: Reselling Puzzle to Clients Without Disclosure

Puzzle case study features Renato Villanueva, Co-Founder of Parallel (AI-powered financial forecasting platform). Key details:

How he found Puzzle:

“Having followed Puzzle CEO Sasha Orloff on Twitter, he resonated with Sasha’s understanding of startup challenges. ‘Don’t take weight loss advice from someone who’s overweight,’ Renato explained. ‘If this founder thinks this works well for startups and he’s a startup founder, there’s got to be some efficiency he’s building for.’”

Now reselling Puzzle to clients:

Parallel uses Puzzle for their own books AND now offers bookkeeping services to their clients using Puzzle:

“When a client was waiting for their books until the 21st each month, Renato offered to handle their accounting using Puzzle… ‘It cost us about $210, but we charged them $800,’ Renato explained. ‘I texted Sasha and said, ‘I don’t know if this is good or bad.’ Sasha quickly noted that it’s not just good, ‘it’s best-in-class.’”

The exposure:

  • Parallel trusted Sasha based on his Twitter persona—without knowing about CFPB ban
  • Parallel now exposes their clients’ financial data to CFPB-banned CEO’s software
  • Clients being serviced through Parallel likely have no idea about CEO’s federal fraud history
  • Direct text communication with Sasha about margins = personal relationship with CFPB-banned CEO
  • Case study claims “60% profit margins compared to bookkeeping industry average of 20-25%”

Pattern: Companies trust Sasha’s “founder” persona on Twitter, adopt Puzzle, then start reselling Puzzle services to their own clients—exponentially expanding the number of companies whose financial data flows through software led by someone permanently banned for defrauding 140,000+ consumers.

December 3, 2025: LinkedIn Spree Continues

While employees block after being called out, Sasha continues business-as-usual LinkedIn engagement with YC network:

Sasha commenting on Ash Rust YC Alumni Demo Day post December 3, 2025: Sasha O. comments “how did I get so short??!?!” on Ash Rust’s Y Combinator Alumni Demo Day post. Ash Rust (Sterling Road Capital, “First check investor”) attended Puzzle’s second company offsite. Casual joking with YC network while under federal investigation, employees blocking after callouts, and QED leadership viewing profile at 2:22am.

Sasha and Ash Rust selfie at YC Alumni Demo Day December 3, 2025: Selfie of Sasha and Ash Rust at Y Combinator Alumni Demo Day. Sasha wearing “#QUITBOOKS” hat—doubling down on anti-QuickBooks branding after photoshopped ActualQuickBooks metrics (Oct 2025). Harj Taggar visible presenting “Welcome to Fall ‘25 Alumni Demo Day.” Post tagged Y Combinator and 4 others.

Same day:

  • Blocks: Sina Mohebiany, John Harrington, Marissa Mata, Dasha Shunina, Ash Rust (Twitter)
  • Untags: Anshul Shah (Brex, twice - after each tag), Dasha Shunina (before blocking)
  • Views: Nigel Morris (QED) at 2:22am, Nick Abouzeid (Rivet) at 4:28pm
  • New content: Turpentine episode (Yogi Goel/Maxima), DCPA dinner repost, Antler repost, Luke Frye repost, YC engagement
  • Typos: “I jus simply” [sic], “abiiity” [sic]
  • Puzzle drops emojis from LinkedIn name - Changed from “Puzzle 🧩🚀” to just “Puzzle” (evidence-150)

Puzzle LinkedIn page without emojis December 3, 2025: Puzzle’s LinkedIn company page now shows “Puzzle” without the 🧩🚀 emojis. 12K followers, 51-200 employees, “Remote First.”

Ash Rust Twitter block sequence:

  • I posted Sasha/Ash selfie: “nothing like two criminals taking a selfie @sashaorloff @AshRust”
  • Ash replied to Sasha’s “how did I get so short??!?!” comment: “I was wearing my heels”
  • I posted screenshot: ”.@AshRust are you like, stupid or?”
  • Ash blocks on Twitter

Ash Rust Twitter block December 3, 2025: “@AshRust has blocked you” - Ash Rust (Sterling Road Capital, attended Puzzle’s second company offsite) blocks after Twitter exchange about selfie with Sasha at YC Alumni Demo Day.

Puzzle/Brex DCPA dinner repost (~2:47pm ET):

Puzzle reposts: “Puzzle, Brex, and Navan are hosting a warm, intimate dinner — a little pause after the conference to exhale, share ideas, and spend time with each other.”

Brex company account comment: “Thrilled to co-host a night of meaningful connections at Digital CPA. Let’s make it one to remember.👏”

Puzzle reply: “we have no doubts!”

Likes: Charles Crabtree, Startup Cookie/Barbara Jovanovic, Wesnide Edouard (Customer Success Manager - liked after blocking whistleblower Dec 4), Sasha O., Arash Ahmadi (Customer Success @ Puzzle 🧩🚀), Brex (company account, 290K followers), Jeffrey Everingham CPA (Senior PM @ Puzzle 🧩🚀)

What this proves: Brex (GC portfolio company) actively co-hosting event with Puzzle and publicly commenting support while Anshul Shah repeatedly untags after being called out. Corporate-level engagement continues while individual employee silently distances.

Pattern: Block then continue engaging - Wesnide Edouard blocked whistleblower December 4, then liked Puzzle’s Brex dinner post around December 10. Same pattern as other employees: suppress evidence (block), continue supporting operations anyway. Blocking demonstrates consciousness of guilt; continued engagement demonstrates conscious choice to enable despite documentation.

December 4, 2025: Escalation Continues

Sasha’s morning post (~6am PT / 9am ET):

LinkedIn post: “That moment you wake up, the house is quiet, the kids are still asleep… it’s just you, ChatGPT and 2026 growth planning for your startup. You too? You don’t say…”

Comments: Dasha Shunina (😃), Brendan Saunders (“It’s the most wonderful time of the year! 🎄🎅”), Jacqueline Stern (“Nice tree”)

Jennifer Orloff liked this post - continuing family-unit amplification during federal proceedings.

Sasha’s Spotify Wrapped post:

“Spotify, I don’t know why I didn’t trust you to be on my side. 😂” (showing listening age 56)

Likes: Dasha Shunina, Marissa Mata, Patricia Daos, Joe Faris

Note: Marissa and Patricia blocked me yesterday/today but continue liking Sasha’s content.

Subtext: “I don’t know why I didn’t trust you to be on my side” — ostensibly about Spotify’s algorithm, but in context of Wikipedia administrators siding with his false narrative, network loyalty being tested, employees blocking/distancing, and federal proceedings, the phrase reveals preoccupation with allegiances. Even a Spotify Wrapped post becomes about trust and sides. Paranoia leaking into casual content.

Puzzle company account untags (observed Dec 4):

Puzzle’s LinkedIn company account finally untagged from Patrick’s December 2 post documenting the “Real Leadership”/Matt Tait situation, Deel/Gusto/Runway/CA Board of Accountancy confirmations, and Nigel Morris viewing. Post had 1719 impressions, 750+ views as of Dec 4 5:45pm ET. Untagging without blocking—same pattern as Matt Tait before his block. Company is actively monitoring and distancing but not refuting claims. I retagged.

New blocks (Dec 4):

  • Naveen Venkatesh - blocked after being called out; “you have known Sasha is a fraud for 2.5 years and chose to view me as a mentally ill, disgruntled ex-employee without ever checking in on me. You should NOT be a manager.” Follow-up: “Naveen blocks, serving no purpose. His role will be documented in court proceedings. His moral compass is up there with Radha, Cwikla, and Sasha. Do not trust him.”
  • Marissa Mata - blocked after third and final warning about career/license/reputation risk
  • Patricia Daos - recent contract-to-fulltime hire (Dec 1), blocked
  • Wesnide Edouard - CPA, Customer Success Manager since June 2025, blocked; continued engaging - liked Puzzle’s Brex DCPA dinner post around December 10 despite blocking whistleblower December 4; pattern: suppress evidence (block), continue supporting operations anyway

Untags + views (Dec 4):

  • Jason Mitchell - untagged twice; viewed profile again at 5:28pm ET (monitoring but distancing)

Public warning to employees (Dec 4 comment thread):

“Your equity is already worthless. The company MUST wind down. Your CEO does NOT have legal representation. He is persistently living in mania and derealization. SASHA IS FACING FEDERAL CHARGES. YOU NEED TO ORGANIZE AND PROTEST OR MASS-RESIGN. CHOOSING TO CONTINUE NORMALLY WILL NOT BE TAKEN LIGHTLY IN COURT PROCEEDINGS.”

Employee callouts (Dec 4 comment thread):

  • Wesnide Edouard - CPA, Customer Success Manager since June 2025
  • Jeffrey Everingham, CPA, CA - Senior PM @ Puzzle; warned, did not heed, documented
  • Simone Tega - “you were warned earlier this month”
  • Brendan Saunders, Jason Mitchell, Jean-Bertrand Uwilingiyimana - “You were all also warned”
  • Jonah Grossberg, Scott Cormier, Mark Gromowsky, Erik Aronesty, Brandon Skari, Kyle Sykes, Vivian Li - “Welcome to the club”
  • Charles Crabtree - “Your continued support is documented”
  • Jason Mitchell - “You spent 6 years working for a fraud and still choose to put your entire career and CPA license on the line”
  • Alexey Skiba - GTM sales lead; “I assume you have proximity to Dasha and don’t trust you by default”
  • Marissa Mata - third and final warning
  • Lisa Kleinsorge - VP of Partnerships since 2022; “Your role and actions are HIGHLY implicated in Puzzle’s criminal enterprise and RICO patterns. This is your one and only warning. You provided key connections and partnerships for Puzzle since my time there. Federal proceedings will not take this lightly.”
    • Deep VC network access: First Round Capital Angel Track Member/Mentor (2019-Present, 7 years), Khosla Ventures Scout (2022-2023), LifeX Ventures Partner (2025-Present), Twitter Director of Global BD & Product Partnerships (2019-2021)
    • First Round connection: First Round Review published Sasha’s “career transition” narrative framing his departure from LendUp as thoughtful sabbatical (no mention of CFPB violations or consumer fraud); also featured in Product-Market Fit and 25 Hard Questions articles
    • Overlap: Lisa’s 7-year First Round relationship spans Sasha’s First Round coverage period

AI transparency blog post attempt:

Puzzle published new blog post: “Accounting AI: Why Forward-Thinking Accountants Are Switching from Quickbooks to Puzzle” (Nov 17, 2025)

Sasha quoted on LinkedIn: “Wait, Puzzle uses AI? 🤣 The question we get mostly is not ‘why’ do you use AI, but ‘how’ you use AI? I asked AI to distill it down to a single issue between Puzzle, legacy providers and new challengers. And it comes down to (drum roll), who are you building for?”

Likes: Jason Mitchell, Naveen Venkatesh, Startup Cookie/Barbara Jovanovic/Sam Claassen, Simone Tega, Kyle Sykes, Jeffrey Everingham CPA, Joe Faris, Mark Gromowsky, Arash Ahmadi, Dasha Shunina/Women Tech Meetup/The Gathering, Brandon Skari

Jason Mitchell “laughed” at Sasha’s comment: “wait, Puzzle uses AI? 🤣” - same employee who untagged twice and viewed profile 5:28pm ET continues engaging with CEO’s content

Blog post itself is AI-generated slop (likely what Sasha was making at 6am on ChatGPT):

Timeline connection: Sasha posts at ~6am PT about being up alone with “ChatGPT and 2026 growth planning” by the Christmas tree. Hours later, this AI-generated blog post gets email-blasted. The content quality confirms rushed AI generation:

  • Header images contain ChatGPT-generated text: Each section has a header graphic with marketing copy (“FINANCIAL HEALTH INSIGHTS & VARIANCE ANALYSIS,” “GAAP-INFORMED STATEMENT-LEVEL REVIEWS”) followed by identical text repeated verbatim in the body (e.g., “Accounting AI that checks financial statements line-by-line” appears in both the image and the paragraph below it). This is what happens when you ask ChatGPT for both “header text” and “description” - it generates the same content twice. A human designer would create distinct copy for graphics vs. body text.
  • “Claude (testing)” distraction: Lists “ChatGPT 5, Claude (testing)” as models. Adding “Claude (testing)” appears to be performative diversification - suggesting they’re exploring alternatives when Puzzle’s documented AI relationship is with OpenAI (“syncing with OpenAI” for customer financial data). Mentioning a competitor deflects from the undisclosed OpenAI data pipeline.
  • Published date shows “11.17.25” but email blast received December 4: HubSpot tracking parameters (utm_campaign=25648795-Firms%20Leadgen%20Q4) confirm Q4 lead gen campaign. The blog post was either backdated to appear established, or sat unpublished for weeks before being rushed out during crisis. Even if genuinely written November 17, it remains one of the most poorly formatted and overtly AI slop-generated posts across Puzzle’s entire blog. If it wasn’t rushed at 6am, that’s arguably worse—they had weeks to polish it and this is still the quality they produced. Publishing it now—during federal proceedings, during Wikipedia meltdown aftermath, during partner notification crisis—suggests loss of relevance or absence of new features to announce.
  • Names co-development partners: Blog post states “Features were co-developed with firms like Trivium, Burkland, and Decimal.” This is significant because Matt Tait (Decimal) received fraud documentation November 11, viewed Patrick’s LinkedIn profile, continued engaging with Puzzle, and was blocked after being retagged. These firms aren’t just customers—they shaped Puzzle’s product while its CEO operates under a CFPB lifetime ban. Deeper integration means deeper exposure.
  • Defensive framing directly responding to fraud documentation: “transparent, explainable AI workflows,” “No hidden automation,” “we don’t compete with accounting firms” - while ignoring photoshopped metrics, CFPB ban, trademark infringement, federal complaints, and “syncing with OpenAI” without disclosure.

AI-generated blog post graphic “AUTOMATED BANK RECONCILIATION” showing clear AI slop artifacts: malformed circled checkmark icon, poor color fills with visible misalignments, text cropped incorrectly at bottom. This is the quality of marketing materials from a company claiming “95% accuracy” in AI-powered accounting.

Pattern: CEO documents himself using ChatGPT at 6am → publishes AI-generated “transparency” content the same day → content contains lazy duplicate copy (header images = body text) and “Claude (testing)” distraction from documented OpenAI relationship → positions Puzzle as responsible AI leader → actual transparency about CFPB ban, data practices, and federal proceedings remains absent.

Homepage typos present since at least October 2025:

Puzzle’s homepage has contained obvious copy errors for months, suggesting lack of quality control:

AI Powered Categorization

Up to 95% accuracy - Puzzle learns automatically, improving over time for faster, smarter financial management**.s.**

Built-in Accrual Automation

No more spreadsheets – manage revenue recognition, prepaid expenses, fixed assets, AP, and AR with accrual accounting policies**.onds.**

The “.s.” and “.onds.” artifacts appear to be truncation/rendering errors that were never caught or fixed. This is an accounting software company positioning itself as AI-powered and detail-oriented, with months-old typos on their homepage marketing copy.

Reposts: Kyle Sykes, Naveen Venkatesh, Sina Mohebiany (already blocked me)

Brandon Skari liked after callout + final warning: “Your like is logged. Continued public support of Puzzle or Sasha Orloff will not be taken lightly in federal proceedings… Puzzle is a literal cult. Act accordingly.”

Pattern: Publishing AI transparency content while CEO remains non-transparent about CFPB ban, data handling under permanent restrictions, and “syncing with OpenAI” for customer financial data. Employees who blocked continue amplifying Puzzle content (Naveen blocked → reposts; Sina blocked → reposts). Employees warned continue liking (Brandon Skari).

Branding changes (both platforms):

  • LinkedIn: “Puzzle 🧩🚀” → “Puzzle” (evidence-150)
  • Twitter/X: Also dropped emojis from name

Removing playful startup emojis suggests awareness that branding needs to appear more serious during crisis.

Sasha blocked alt account on Twitter (noticed Monday 12/8, exact date unknown):

On December 4, commented on the Christmas tree post via alt account: “you were up at 6am creating AI slop to create a facade of progress. you are facing federal charges”

Comment appears to have been visible through the weekend. By Monday December 8, discovered Sasha had blocked the alt account. Pattern: deletes fraud warnings, blocks accounts documenting AI slop and federal charges. Cannot suppress federal record.

December 5, 2025: RICO Escalation

RICO Exposure Email to Investor/Platform Network

Email sent to:

TO: Hemant Taneja (General Catalyst), Sophia Xiao (General Catalyst), Julian Weisser (ODF), Erik Torenberg (Turpentine), Ross Fubini (XYZ Capital), Garry Tan (Y Combinator), Ash Rust (Sterling Road), Casey Woo (FOG Ventures), Mitch Kapor (Kapor Capital)

BCC: General Catalyst (gcinfo, press), XYZ Capital ([email protected]), Y Combinator info, Kapor Capital (info, freada), a16z podcasts, ODF founders, Solo Founders team, Casey Woo personal

Subject: URGENT: Sasha Orloff Must Step Down Immediately - Collective RICO Exposure Across Network


To General Catalyst, XYZ Venture Capital, ODF/SFP/a16z, Turpentine, FOG Ventures, Sterling Road, Kapor Capital, and Y Combinator Leadership:

I’ve notified you all repeatedly since November 2025 (or earlier) regarding ongoing fraud at Puzzle Financial. The situation has deteriorated significantly. As investors, board members, and platforms continuing to enable this enterprise with documented knowledge of criminal conduct, you collectively face exposure under RICO statutes (18 U.S.C. § 1962).

Continued Platforming Despite Notification:

  • Turpentine/a16z: Published yet another podcast episode featuring Sasha Orloff (December 3, 2025) AFTER receiving fraud documentation—continuing to platform a CFPB-banned CEO during active federal proceedings
  • Ash Rust (Sterling Road): Repeatedly blocked me; attended YC Alumni Demo Day with Sasha Orloff where Sasha commented casually on your post (“how did I get so short??!?!”) while under federal investigation—normalizing a fraud pattern you were notified about in 2023
  • General Catalyst: Lead investor, board member; Hemant Taneja named in 10+ Livongo securities fraud lawsuits (2020) while simultaneously backing Puzzle; “Our Creation of Puzzle” article proves control structure
  • ODF/SFP: Puzzle featured as top ODF company AFTER SEC filing (Weisser proudly wore Puzzle shirt during interviews); operates /odf funnel giving ODF companies preferential Puzzle access (same data extraction pipeline as YC deal); January 2024 podcast “Runway Metrics and Cash Management” advising founders on financial discipline while photoshopping metrics; continues featuring Sasha as testimonial on joinodf.com
  • Y Combinator: Institutional infrastructure enabling pattern across LendUp, Puzzle, and network; Sasha deploys YC ideology (“schlep blindness”) as operational cover; /yc funnel funnels YC companies’ financial data to Puzzle; continues featuring Sasha’s false Mission Lane “cofounder” credentials on LendUp page (LendUp + Mission Lane = securities fraud)
  • XYZ Capital (Ross Fubini): Likely directly participated in equity deletion alongside Hemant/Sophia; featured Puzzle on rivet.tax podcast; continued social engagement post-notification; partnership with Puzzle since 2019 (Valencia Data); never responded to notifications
  • Kapor Capital: LendUp investor through network, now Puzzle investor; never responded to notifications; Gusto (Kapor portfolio company, Hemant Taneja board seat) has begun investigation

Since November notifications, Sasha Orloff has demonstrated severe mental decompensation incompatible with CEO duties:

Thanksgiving Wikipedia Meltdown (November 26-27, 2025):

  • Spent 13+ consecutive hours personally editing Wikipedia to remove fraud documentation
  • Made several edits across 7 sessions, 8:51 AM - 10:01 PM PT on Thanksgiving Day
  • Continued making provably false claims to administrators, publicly weaponizing false victimhood
  • Told Wikipedia administrators: “The CFPB never banned anyone from doing anything” — demonstrably false statement about his own federal consent order
  • Surgically removed “Assisting Others” prohibition language from Wikipedia while actively violating that exact prohibition
    • Also removed “and its officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them” — the exact language establishing the ban covers him personally
  • Article was protected by administrators due to his “edit warring,” siding with Sasha’s false narrative

Operational Incompetence Across Company:

  • Homepage contains months-old typos: “financial management.s.” and “accounting policies.onds.” — visible since October 2025
  • AI transparency blog post (Dec 4) contains ChatGPT-generated graphics with malformed icons, poor color fills, cropped text; written by CEO at 6am as facade for progress during crisis
  • Blog post confusingly backdated to November 17; no former proof of post; content aligns with Sasha’s 6am PT post of his Christmas tree: “That moment you wake up, the house is quiet, the kids are still asleep… it’s just you, ChatGPT and 2026 growth planning for your startup.”
  • Three cease-and-desist letters threatening “workplace violence” for documenting public fraud — refuting zero factual claims; one unsent C&D; first C&D paired with Mission Lane (dual threat across enterprise; QED Investors highly implicated)

Active CFPB Ban Violations:

Puzzle operates a public Partner Rewards affiliate program promoting credit products (Brex, Ramp, Mercury) — direct violation of Sasha’s CFPB consent order prohibiting “Assisting Others… performing marketing services” and “receiving remuneration from any person engaged in providing any extension of credit.”

Your Collective Exposure:

Every podcast episode, every testimonial, every continued investment, every social media interaction post-notification creates documentary evidence of conscious enablement. You received notifications. You continued platforming. This is now documented in federal record.

Required Action:

  1. Sasha Orloff must step down as CEO immediately
  2. Appoint independent leadership to assess wind-down options
  3. Notify customers that their financial data is controlled by a CFPB-banned executive
  4. Preserve all communications for federal proceedings
  5. Engage independent counsel for your own protection

Five SEC whistleblower complaints filed. California Board of Accountancy and State Bar complaints active. Federal documentation is permanent.

The question is not whether Puzzle survives. The question is whether your involvement will be characterized as “prior knowledge, prompt remediation” or “conscious enablement of ongoing fraud.”

Full documentation: https://patrickstoica.com/puzzle-statement

Patrick Stoica https://www.linkedin.com/in/pstoica/ Former Senior Software Engineer, Puzzle Financial (October 2020 - May 2023) Federal Whistleblower


Recipients notified:

TO:

BCC:

Forwarded to:


Separate email forwarding to QED Investors ([email protected], [email protected]):

Frank, Nigel, QED Investors:

I’m sure at least one of you has an inkling of what’s going on. Your karmic loop with Sasha Orloff is coming to a close.

I have evidence of Nigel viewing my LinkedIn 12/3 2:22am, and contemporaneous evidence of Frank viewing me before August 11, 2023, when I received dual C&Ds from Puzzle Financial and Mission Lane.

You should already understand what this is. If Puzzle’s board doesn’t act over this next week, I believe you understand it’s in your best interest to intervene.

I only started with LendUp, Mission Lane, and Puzzle. The documentation and connections have grown since.

https://patrickstoica.com/puzzle-statement/

I’ve tagged you on social media. This is your formal legal notice.

Under 18 U.S.C. § 1512(c), preserve all communications related to Puzzle Financial, Sasha Orloff, LendUp, and Mission Lane. Destruction of evidence after this notice constitutes federal obstruction.

Patrick Stoica

”Biggest Month Ever” - Unlabeled Y-Axis Pattern Continues

Sasha’s Post:

”🚀 November was Puzzle’s biggest month ever! In the last 90 days, we’ve onboarded more accounting firms than…”

Posted with chart titled “Accounting Firms Using Puzzle” showing colorful bars from Dec 2023 to Oct 2025 — y-axis completely unlabeled. Pattern continues from photoshopped metrics (October 2025).

Visual Analysis:

  • Pink text on black background — notably similar to patrickstoica.com color scheme; suggests he’s seen the whistleblower documentation site
  • Multicolored bars — colors repeat in order (~2 months per color cycle), but still overdone visual flourish without analytical purpose; decoration masquerading as data visualization
  • Giant pink arrow — appears to show year-over-year November comparison, but really just generic “up and to the right” growth line; meaningless without y-axis scale; could represent growth from 2 to 4 firms or 200 to 400 — impossible to tell
  • Overall: Graph designed to look impressive while communicating nothing verifiable; aesthetic over substance; consistent with photoshopped metrics pattern

Even CPAs had to ask for clarification (7:07pm PT):

David Leary, CPA (Co-host The Accounting Podcast) asked: “is this total or new each month?”

Sasha clarified: “it’s unique firms in any given month that do a conversion to Puzzle.”

A CPA who hosts an accounting podcast couldn’t interpret the graph without asking. The answer reveals it’s monthly conversions, not cumulative — but still no y-axis scale. Could be 3 firms or 300. The graph communicates nothing without Sasha personally explaining it in comments.

Pattern context: Some founders post unlabeled revenue/customer graphs — fine. But this one is particularly lazy and desperate: multicolored rainbow bars, giant pink arrow, dark theme matching whistleblower site, requiring CEO to explain in comments what it even shows. Combined with documented photoshopped metrics (Oct 2025: 3 likes → 12,362), this tracks as another attempt to project success through aesthetic over substance during active federal investigation.

Visible deterioration from October 2025 post:

Sasha’s October 2025 “PMF” post was more coherent:

Sasha's October 2025 PMF post with monochrome chartOctober 2025: “Lesson learned: Product-Market Fit isn’t a growth hack” — monochrome purple chart, specific claims (“5x YoY”, “8x YoY”), coherent narrative. Still no y-axis but professionally presented. Sasha commented: “Thank you to the Puzzle 🧩🚀 team for the hard work, and ChatGPT for the last line.” — admits ChatGPT wrote closing line.

Comparison:

  • Monochrome chart (purple bars, not rainbow nonsense)
  • Specific claims (“5x YoY”, “8x YoY” — still unverifiable but at least quantified)
  • Coherent narrative (PMF journey, “GTM leverage” explanation)
  • Still no y-axis but visually cleaner and more professional
  • ChatGPT admission in comments — “ChatGPT for the last line”

The Dec 5 post in comparison shows deterioration — rainbow colors, giant pink arrow, required CEO explanation in comments for what the chart even shows. The quality decline from 2 months ago to now is visible evidence of mental decompensation under pressure.

Notable: Sasha did not tag Puzzle’s company page in this post — likely because RICO warnings remain visible on Puzzle’s company posts and tagging would expose company page followers to whistleblower documentation. Conscious decision to insulate company brand from personal account’s comment section.

Engaging Prospective Customers During Federal Investigation:

Sasha responding to prospective customer about QuickBooks AIDecember 5, 2025: Chris Khan (AI Advisory for CPAs and Accounting Firms) asks Sasha about overlap with QuickBooks AI agents and whether QBO poses “significant risk to Puzzle’s existence.” Sasha dismisses QuickBooks AI as “rebranded versions of existing features” and “mostly rules or basic ML wrapped in new language,” claims Puzzle is “built for accountants” and keeps them “fully in control.” Business-as-usual sales engagement on same post where RICO warnings were deleted, while facing 5 SEC complaints and CFPB ban.

7:05pm PT: Sasha follows up inviting Chris Khan to demo: “do you want to see a demo? You can decide for yourself. Are you going to Digital CPA? You can come by our booth and would be happy to meet you.” — Active sales pipeline work while deleting RICO notifications.

Follow-up Post: Mass Employee Tagging + Wage Forfeiture Warning:

Posted repost of Sasha’s unlabeled graph with RICO warnings, tagging: Jean-Bertrand Uwilingiyimana, Jason Mitchell, Alexey Skiba, Luke Frye CPA, Sina Mohebiany, Brendan Saunders, Marcos Iglesias, Philip Chan, Omid S., Nate Schickler, Christopher Yancey, Joe Faris CPA, J.R. Faris, Charles Crabtree.

Key statements:

  • “If you think this is a legitimate graph to share with customers and stakeholders, your judgment is impaired. Puzzle is an ongoing criminal enterprise.”
  • “Every recent interaction has been logged and will continue to be logged. Blocking or untagging shows receipt and consciousness of guilt.”
  • Called out Jason Mitchell: “Wasted 6 years working for a fraud. $0 in equity. Risking his CPA license and entire career. For nothing.”

Wage Forfeiture Warning (under RICO):

“After formal RICO notification (18 U.S.C. § 1962), continued work at Puzzle creates multiple wage risks:

  1. Future wages may not be paid (company insolvency during wind-down)
  2. Future wages may be forfeit (proceeds of criminal enterprise under § 1962)
  3. Past wages may be clawed back (civil asset forfeiture under 18 U.S.C. § 981 - government can seize proceeds of crime, even from innocent employees)

You are working for free or worse - you may have to RETURN wages already paid.”

Christopher Yancey + Jason Mitchell untagged at 9:52pm — both have CPAs (Chris not actively using his), both came from Affirm, both created the Python ledger together at Puzzle. Chris left Sept 2021 (told him equity would be worth nothing), Jason still there 6 years. Both continue supporting Puzzle despite notification. Untag without blocking = consciousness of guilt pattern.

Chris Yancey context: After my termination, had conversation where he said “something’s wrong with that guy” re: Cwikla. Now at Ramp as Director of Software Engineering (has CPA but not actively using it). Notified Nov 8, celebrated Sasha’s post, untagged from RICO comment.

Affirm → Puzzle pipeline: Both Chris and Jason came from Affirm. Jason was Software Engineering Manager at Affirm (2015-2019), Chris was Senior SWE (Oct 2017 - Sep 2019, overlapping). Worth investigating their continued support given shared background and joint creation of Puzzle’s Python ledger.

Sasha's "biggest month ever" post with unlabeled y-axisDecember 5, 2025: Sasha posts “biggest month ever” chart with unlabeled y-axis. Pattern of unverifiable metrics continues.

RICO warnings and responsesRICO warnings posted via alt account; Sasha deleted warnings, blocked alt, replied to Joe Faris with praise.

Alt Account RICO Warnings:

Used alt account (Blob Dylan) to post RICO warnings on Sasha’s post:

  • “yet another unlabeled y-axis from a CEO who’s facing federal charges. Sasha Orloff must step down from Puzzle immediately.”
  • Tagged Christopher Yancey: “should know better”
  • Reply to Joe Faris, CPA: “Puzzle is part of a criminal enterprise. Sasha Orloff must step down immediately, and Accountalent will need to move customers off Puzzle. Sasha is a fraud; Puzzle cannot exist beyond that. This is your final notice.” + RICO/obstruction notice
  • Reply to Barbara Jovanovic: Full RICO notice citing 18 U.S.C. § 1962 and § 1512(c)

Sasha’s Response:

  • Blocked alt account
  • Deleted RICO warnings
  • Replied to Joe Faris: “And we love Accountalent! Would never have gotten here without the feedback from the team. You built a great team!”
  • Left RICO warnings on Puzzle company LinkedIn post (different post)

Christopher Yancey (Ex-Employee, Director of Software Engineering at Ramp; has CPA, not actively using):

  • Notified November 8, 2025 about whistleblowing
  • Celebrated Sasha’s post despite notification
  • Untagged from alt’s RICO comment (same pattern as other employees)
  • Works at Ramp (notified company)

Engagement from Warned Individuals:

Liked/Celebrated Post:

  • Ross Fubini (XYZ Capital founder; Village Global cofounder with Erik Torenberg 2017-2020; Palantir advisor since 2010; invested in LendUp Seed/A/B via Kapor Capital 2011-2012, invested in Puzzle via XYZ; repeatedly tagged in RICO warnings, “Sasha must step down” demands, and equity theft documentation; LinkedIn still lists LendUp as active investment despite CFPB ban; liking this post after notifications = documented conscious enablement)
  • Evin Wick
  • Patricia Daos (recent hire, blocked Dec 4)
  • Joe Faris, CPA (Accountalent)
  • Charles Crabtree (celebrate, warned; reposted with “Come build with us” hiring pitch; job listing claims “accomplished fintech founder”; commission-heavy/low base = LendUp AE pattern; NS8 parallel: sales employees suffered financially when that fraud collapsed — I witnessed firsthand)
  • Jason Mitchell (celebrate, warned)
  • Alexey Skiba (GTM sales lead, warned)
  • Barbara Jovanovic (RICO notice deleted, replied with 👏👏👏)
  • Startup Cookie / Sam Claassen
  • Luke Frye (warned, Rivet Tax Advisor)
  • Renato V. (parallel reselling, warned, blocked me after notification)
  • Daniel G. (Puzzle eng since Apr 2025)
  • JR Faris (CEO @ Accountalent)
  • Olvis (Senior SWE since Oct 2022)
  • Chris Yancey (celebrated, warned Nov 8)
  • Sina Moheibiany (loved, warned, untagged Dec 3)
  • Dasha Shunina
  • Brendan Saunders (celebrate, warned)
  • Marcos Iglesias (celebrate; eng since Dec 2024)
  • Philip Chan (eng since Mar 2022)
  • Naveen Venkatesh (reposted; blocked Dec 4)
  • Jean-Bertrand Uwilingiyimana (celebrated, reposted, warned)
  • Omid S. (SWE II at Puzzle since Aug 2024)
  • Nate Schickler (SWE Sept 2021 - Dec 2022; laid off in December 2022 layoffs)
  • Arash Ahmadi (blocked me)
  • Joshua Noronha (Senior PM at Puzzle since Jul 2024; ODF17 fellow Apr 2023 - Mar 2024; On Deck network support pattern continues)
  • Accountalent (company page)

Jason Mitchell + Luke Frye also liked Joe Faris’s comment “Accountalent loves Puzzle!! 😍”

Marissa Mata reposted

Pattern: Employees and partners continue engaging with CEO’s posts after receiving fraud documentation. RICO warnings deleted. Accountalent (CPA firm) featured prominently despite receiving notice that continued participation constitutes knowing involvement in criminal enterprise.

Notification Timeline:

  • November 10, 2025: First notification sent to Bill.com
  • December 1, 2025: Follow-up notification sent
  • December 5, 2025 (4:29 PM): Bill.com legal team responds with incorrect interpretation

Bill.com’s Response (4:29 PM):

After receiving fraud documentation on two separate occasions, Bill.com’s legal team responded claiming:

“It is our determination that the order regarding LendUp Loans, LLC does not bind Bill.com, nor does it restrict our current integration activities with Puzzle Financial. The prohibitions within that order are specific to that entity and the extension of consumer credit, which falls outside the scope of our partnership.”

Why This Interpretation Is Incorrect:

The CFPB order does not restrict prohibitions to “that entity.” It explicitly states:

  • Paragraph 9: “Defendant and its officers, agents, servants, employees, and attorneys… may not misrepresent… any fact material to consumers concerning any Consumer Financial Product or Service”
  • Paragraph 10: “Defendant and its officers, agents, servants, employees, and attorneys… may not violate… Federal consumer financial law”
  • Paragraph 11 (Section V): “Defendant and its officers, agents, servants, employees, and attorneys and all other Persons in active concert or participation with any of them, who receive actual notice of this Order… may not disclose, use, or benefit from customer information”

The order uses “Defendant AND its officers” — the conjunction creates separate binding obligations. Officers don’t stop being bound when the entity dissolves. Sasha Orloff was CEO (officer) of LendUp Loans, LLC. These prohibitions apply to him personally and permanently.

Notification Failures (Potential Order Violations):

  • Paragraph 32 required LendUp to notify the CFPB of “the emergence of a successor company” and “the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order”
  • Paragraph 50 required any transferee to agree to comply with the order’s terms
  • Puzzle Financial was incorporated September 2019 — 2+ years before the December 2021 order — and should have been disclosed immediately upon the Effective Date
  • No public evidence this disclosure occurred

RICO Notification Sent:

Rebuttal email sent to Bill.com citing:

  • Paragraphs 9, 10, 11, 32, and 50 of the CFPB order
  • Bill.com now has actual notice of a CEO subject to permanent federal prohibitions
  • Documented wire fraud predicate acts (photoshopped metrics, false credentials, misrepresented customer metrics)
  • 5 SEC whistleblower complaints filed
  • Under Paragraph 11, “persons in active concert or participation” with actual notice face potential exposure
  • Formal preservation notice under 18 U.S.C. § 1512(c)

What Bill.com’s Response Demonstrates:

Bill.com’s legal team conflated entity-level restrictions with officer-level restrictions. The order language is unambiguous: “Defendant AND its officers” creates separate obligations. Their incorrect interpretation is now documented evidence they received actual notice and chose to continue integration.

Strategic Error: Worse Than Not Responding

Bill.com would have been better off not responding at all. By responding with an incorrect legal interpretation, they:

  1. Confirmed receipt of November 10 and December 1 notifications
  2. Confirmed review — explicitly stated they “conducted a comprehensive review” of the order
  3. Made a legal determination on record — “it is our determination that the order… does not bind Bill.com”
  4. Demonstrated they read the specific paragraphs — and still misinterpreted “AND”
  5. Closed with dismissive confidence — “We stand by our legal assessment and consider this matter closed”
  6. Created documentary evidence of conscious choice — active decision to continue, not passive ignorance

If they hadn’t responded, they could claim:

  • Notifications went to spam
  • They didn’t understand the implications
  • They never reviewed the order

Now they can only claim their lawyers misread “AND” — which is malpractice evidence, not a defense.

Their response is Exhibit A for “continued participation after actual notice with full understanding of allegations.”

RICO Notifications to HR Pals and Recruiting Team (December 5, 2025)

Email to HR Pals (8:40pm):

RICO notification regarding payroll/HR services to criminal enterprise:

“You are providing payroll/HR services to Puzzle Financial, Inc., which constitutes a criminal enterprise as defined under RICO.

Legal implications for your company:

  1. Payroll proceeds may be subject to forfeiture - Wages paid to employees may constitute proceeds of racketeering activity under 18 U.S.C. § 981
  2. Your services may constitute “facilitation” - Processing payroll for a known criminal enterprise may constitute aiding and abetting under 18 U.S.C. § 2
  3. You have a duty to investigate - After receiving this notice, continued services without due diligence may constitute knowing participation

Recommendation: Terminate services to Puzzle Financial immediately and advise employees their wages may be subject to forfeiture.”

Email to Marissa Mata + Puzzle Careers Team (9:12pm):

Fraudulent inducement warning sent to Marissa Mata, careers@, Arash Ahmadi, Charles Crabtree:

“Under common law fraud and California Labor Code § 970, recruiters may be held personally liable for knowingly inducing individuals into employment through misrepresentation or omission of material facts.

Material facts you are omitting from candidates:

  1. Puzzle’s CEO is subject to federal CFPB consent order prohibiting ‘defendant and its officers’ from misrepresenting facts
  2. Puzzle constitutes a criminal enterprise under 18 U.S.C. § 1962 (RICO)
  3. Employee wages may be subject to civil forfeiture as proceeds of racketeering activity
  4. The company is preparing for wind-down operations

HR/Payroll provider has been notified separately: Puzzle’s third-party HR/payroll provider HR Pals has received formal RICO notification and may terminate services, making it impossible to pay employees you recruit.

Recommendation: Resign immediately and refuse to participate in further recruitment.”

Pattern: HR Pals previously participated in wrongful termination(s) and never investigated reported misconduct (June 2023 - August 2024 complaints documented). Now formally notified of RICO implications for continued payroll services.

Note: This December 5, 2025 email to HR Pals is proof that Sasha has been gaslighting them since receiving this formal legal notification. In his December 15, 2025 restraining order filing, Sasha characterized these statutory citations and liability warnings as “threats” and “harassment,” manufacturing fear among HR Pals and employees to use as “evidence” of danger. See restraining order analysis for full documentation of this gaslighting pattern.

Follow-up Email to HR Pals Cofounders (December 5, 2025):

Sent directly to HR Pals leadership documenting:

  1. Brianna Gutierrez (HR Pals) sent the May 31, 2023 termination email falsely claiming “receipt of your resignation” while simultaneously offering severance (proving termination, not resignation)
  2. HR Pals executed the separation agreement requiring waiver of fraud, wrongful discharge, and retaliation claims
  3. HR Pals ignored all misconduct reports (June 2023, July 2023, August 2024) and continued servicing Puzzle
  4. RICO facilitation liability — processing payroll for known criminal enterprise after notification constitutes aiding and abetting under 18 U.S.C. § 2
  5. Recommended immediate termination of services to Puzzle Financial and notification to employees that wages may be subject to forfeiture

Jennifer Orloff: Block SVP and CFPB Compliance Concerns

Jennifer Orloff (LinkedIn) serves as SVP Marketing at Block, Inc. (formerly Square), a major financial technology company offering consumer financial products including Cash App, payment processing, buy-now-pay-later services (Afterpay), and consumer lending.

She is married to Sasha Orloff, who was permanently banned by the Consumer Financial Protection Bureau in December 2021 from “participating in conduct related to the offering or provision of any consumer financial product or service.”

CFPB consent orders typically include “assisting others” language prohibiting banned individuals from participating directly or indirectly, advising others, or acting through any person or entity in the banned activities.

Jennifer’s executive-level role at a major consumer financial services company, while married to a permanently banned financial services executive, raises questions about:

  • Whether Sasha advises or consults on her work (indirect participation)
  • Whether Sasha benefits financially from her compensation in the banned sector
  • Whether this arrangement circumvents the intent of his lifetime ban
  • Whether Block’s compliance was fully informed of the spousal relationship
  • Whether material omissions were made during employment screening

Documented involvement:

  • May 31, 2023, 5:35 PM ET: Viewed my LinkedIn profile on termination day (family surveillance unit)
  • Summer 2023: Continued viewing my profile as I published fraud documentation
  • December 1, 2025: Reposted Sasha’s “vibe-coded” Ramp calculator during crisis
  • November-December 2025: Continues liking Sasha’s LinkedIn posts during active federal proceedings (5 SEC complaints filed)

Note on Sasha’s mother: Viewed whistleblower profile ~December 8, 2025 (~5 PM PT), apparently independently encountering comprehensive fraud documentation in LinkedIn comments. Continues liking Puzzle/Sasha content despite exposure to fraud documentation - demonstrates family-unit enablement pattern extends beyond spouse.

This arrangement warrants regulatory review to ensure compliance with the terms of Sasha Orloff’s CFPB ban, particularly the standard “assisting others” provisions designed to prevent banned individuals from participating in financial services through proxies, family members, or indirect arrangements.

December 4-5, 2025: Emails to Block and Square Leadership

Email sent to [email protected] (cc: [email protected]) on December 4, followed by email to Square ([email protected]) on December 5. Jennifer was recently promoted from Square SVP to Block-wide SVP role (November 2025).

Subject: SVP Jennifer Orloff - Marketing Ethics and Conflict of Interest Concern

To Block Leadership,

I am writing regarding Jennifer Orloff, your SVP and Head of Marketing Strategy, Operations, & AI, and her documented involvement with fraud at Puzzle Financial, operated by her husband Sasha Orloff.

Jennifer Orloff’s Block Role (per LinkedIn):

  • SVP | Head of Marketing Strategy, Operations, & AI (Nov 2025 - Present)
  • Leads marketing across Square, Cash App, Afterpay, and Bitcoin products
  • Responsible for “KPI accountability,” “Marketing Analytics,” and “Marketing AI”
  • Previously Interim CMO leading 230-person team (Nov 2023 - Aug 2024)
  • At Square/Block since January 2021

The Contradiction:

Jennifer’s professional responsibilities include:

  • “KPI accountability and executive reporting”
  • “Marketing Analytics” oversight
  • “Disciplined execution” and “operational excellence”
  • Building “AI tools that increase revenue”

Her husband’s documented marketing practices:

  • Photoshopped engagement metrics: 3 likes manipulated to display 12,362 (October 2025)
  • Trademark infringement: ActualQuickBooks.com domain, digital billboard, merchandise, and costuming impersonating Intuit
  • Evidence deletion: Campaign materials deleted within 24 hours of second-day attempts at Intuit Connect, following first-day police removal
  • Three cease-and-desist letters threatening police intervention (“workplace violence”) against me for documenting public fraud while refuting zero “false” and “defamatory” statements

Jennifer’s Personal Involvement:

  • Termination day surveillance (May 31, 2023, 5:35 PM ET): Both Sasha and Jennifer viewed my LinkedIn profile hours after my wrongful termination from Puzzle. Sasha viewed at ~3:47 PM via LinkedIn search; Jennifer viewed at ~5:35 PM. They watched me struggle with a false “resignation” narrative they created internally.
  • Summer 2023 continued surveillance: Jennifer continued viewing my LinkedIn profile throughout summer 2023 as I was publicly documenting Sasha’s fraud patterns—surveillance extended to family level during the active whistleblower period.
  • Continuous amplification (November-December 2025):
    • December 4, 2025: Liked Sasha’s post about “ChatGPT and 2026 growth planning”—continuing family-unit amplification during federal proceedings
    • December 2, 2025: Liked Sasha’s “Real Leadership” post featuring Matt Tait/Decimal
    • December 1, 2025: Liked Sasha’s “Crisis Monday” Ramp calculator post
    • November 2025: Reposted Puzzle x Deel partnership announcement
    • Pattern of family-unit amplification during active federal whistleblower proceedings (5 SEC complaints filed)
  • Awareness of CFPB ban: Full knowledge her husband is permanently banned from consumer lending following CFPB enforcement against LendUp (140,000+ consumers defrauded, $40M restitution order).

CFPB Ban Compliance Concern:

Sasha Orloff’s CFPB consent order (December 2021) includes standard “Assisting Others” language prohibiting banned individuals from “performing marketing… services” in consumer lending and “receiving any remuneration… from any person engaged in… providing any extension of credit.” Jennifer’s executive role at Block—overseeing marketing for consumer lending products (Afterpay BNPL, Cash App features, Square lending)—raises questions about whether this spousal arrangement circumvents the intent of his lifetime ban. Her compensation flows into their California household (community property), meaning Sasha financially benefits from consumer financial services marketing. Did Block’s compliance team know her spouse was federally banned from this exact industry when they promoted her to SVP?

Why This Matters for Block:

An SVP responsible for “Marketing AI” and “KPI accountability” across Block’s entire ecosystem is personally supporting—and actively surveilling whistleblowers of—a CEO who:

  • Photoshops social media engagement metrics
  • Runs trademark infringement campaigns resulting in police intervention
  • Operates financial software while federally banned from consumer lending
  • Retaliates against whistleblowers with legal threats
  • Exhibits documented patterns of surveillance and mental decompensation (13+ hours editing Wikipedia on Thanksgiving to remove fraud documentation)

This creates serious questions about the judgment and ethical standards of someone leading marketing integrity for Square, Cash App, Afterpay, and Bitcoin products. A marketing executive who participates in surveilling a whistleblower—and continues amplifying content from a CFPB-banned CEO during active federal proceedings—demonstrates concerning professional judgment.

Documentation:

Full timestamped evidence, including LinkedIn profile view screenshots, internal communications, and the complete fraud pattern: https://patrickstoica.com/puzzle-statement

I formally request Block review Jennifer Orloff’s conduct under your ethics policies, conflict of interest guidelines, and standards for SVP-level leadership.

Respectfully, Patrick Stoica [email protected]

December 10, 2025: Block Acknowledges Receipt and Internal Review

Daniela Monkiewicz (Senior ERBP, Employee Relations at Block) responded acknowledging receipt and confirming internal review:

Hi Patrick,

Thank you for bringing your concerns to our attention.

I want to acknowledge receipt of the information you provided. Please be advised that this matter is currently under review by the appropriate internal teams, who will determine the next steps.

We appreciate you raising this.

Best,

Daniela

—

Daniela Monkiewicz

Senior ERBP | Employee Relations at Block

Why this matters:

Block’s Employee Relations team acknowledged receipt and confirmed the matter is under internal review. This establishes:

  1. Block has been formally notified of Jennifer Orloff’s involvement in amplifying and surveilling fraud whistleblower
  2. Corporate awareness of spousal relationship to CFPB-banned CEO
  3. Documentation of receipt - any continued amplification by Jennifer after December 10 occurs with Block’s knowledge of the concerns raised
  4. Internal review in progress - Block’s appropriate teams are evaluating the ethics, conflict of interest, and CFPB compliance questions

Timeline: Email sent December 4-5 → Response received December 10 (5-6 days) → Under review by “appropriate internal teams”

Block’s acknowledgment and review process demonstrates corporate-level awareness. Any continued family-unit amplification of Puzzle/Sasha content by Jennifer Orloff after December 10 occurs with Block Employee Relations’ knowledge that concerns have been raised and are under internal review.

December 18, 2025: Update Email - Corporate Perjury and Mischaracterization of Block Inquiry

Following the restraining order filing by PUZZLE FINANCIAL, INC., I sent an update email to Daniela Monkiewicz documenting:

  1. Corporate perjury: Sasha’s declaration (signed under penalty of perjury on behalf of PUZZLE FINANCIAL, INC.) swears I “resigned” while the company’s own Separation Agreement uses “TERMINATION” throughout; Sasha contradicts himself WITHIN THE SAME PARAGRAPH (Paragraph 3, Line 11: “was separated from the Company” vs. Line 14: “he ultimately resigned from the company”) - can’t keep perjury consistent for 3 sentences; textbook consciousness of guilt where brain slips between truth (separated/terminated) and manufactured narrative (resigned)

  2. Consciousness of guilt - evidence curation: Sasha spent 2.5 years collecting surveillance content (social media screenshots from 2023-2025), but conspicuously did NOT include the actual Separation Agreement draft, Termination Certificate, or HR Pals termination letter as exhibits. He admits I “declined Puzzle’s standard separation agreement”—which proves (a) it was termination not resignation (resignations don’t need releases), (b) I never signed away equity or claims, and (c) company took equity without signed agreement (theft)—but omits all termination documents as exhibits because they prove perjury.

  3. Attorney liability question: Lisa M. Bowman (Orrick, State Bar #253843) allowed PUZZLE FINANCIAL, INC. to file a declaration containing provable perjury while responding to federal RICO allegations and 5 SEC complaints. Why is this attorney still representing a client when she’s now directly associating herself with corporate perjury in a filing that’s explicitly responding to federal criminal enterprise allegations?

  4. Material mischaracterization of Jennifer Orloff matter: Sasha’s declaration (lines 24-27, page 2) claims I “harassed my wife at her place of work” by sending “messages to the CEO and HR employees of her company threatening her job.”

    Reality: On December 4, 2025, I sent an email to Block’s [email protected], [email protected], [email protected] (cc: [email protected]) with subject line “SVP Jennifer Orloff - Marketing Ethics and Conflict of Interest Concern”—a legitimate marketing ethics and CFPB compliance inquiry regarding potential conflict of interest. This was sent to appropriate corporate channels (press, legal, ethics), not “threatening her job.” Sasha characterizes a legitimate ethics/compliance inquiry to appropriate corporate channels as “threatening her job” to manufacture a “harassment of wife” narrative.

  5. Judge partly denied the order (Dec 18, 2025) with explicit finding: “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”

This filing demonstrates the lengths Sasha Orloff and Puzzle Financial, Inc. will go to suppress federal whistleblower activity—including:

  • Committing corporate perjury in sworn declarations
  • Spending 2.5 years collecting surveillance content to manufacture a threat narrative, then lying in paragraph three
  • Deliberately omitting exculpatory documents (Separation Agreement, Termination Certificate) while including surveillance
  • Materially mischaracterizing legitimate ethics/compliance inquiries as “threats”
  • Using corporate counsel to respond to RICO/criminal enterprise allegations through restraining order rather than refutation

The fact that Jennifer is listed as a “protected person” in this retaliatory filing—and that a legitimate ethics inquiry to Block’s press/legal/ethics teams is mischaracterized as “threatening her job”—underscores why Block’s review of the conflict of interest and CFPB compliance concerns is important.

December 6, 2025: TEDxLosAltos Women Sponsorship

December 5: TEDxLosAltos Women posted announcement. Dasha Shunina reposted.

“We’re grateful for the support of Women Tech Meetup as a Community Partner for TEDxLosAltos Women, and to Puzzle for joining us as a Sponsor.”

TEDxLosAltos Women sponsorship announcementDecember 5, 2025: TEDxLosAltos Women announces Puzzle as sponsor and Women Tech Meetup (Dasha Shunina) as community partner. “Together with Puzzle and Women Tech Meetup, we’re building spaces where women’s voices can rise.” Dasha reposted.

December 6: RICO Notice Posted (Three Comments):

Comment 1:

Formal notification that Puzzle Financial is a criminal enterprise under 18 U.S.C. § 1962. Sasha subject to permanent CFPB ban. 5 SEC whistleblower complaints filed. Sasha blocked me and used lawyers to threaten police involvement 3 times without refuting “false statements.” Bar complaint filed against their lawyer; now no legal representation.

Accepting sponsorship money from Puzzle creates potential exposure:

  • Proceeds may constitute racketeering activity under 18 U.S.C. § 981
  • Association after notification constitutes knowing participation
  • Organization’s reputation now linked to documented federal fraud

Comment 2:

Dasha Shunina has not disclosed:

  • Employment at Skolkovo Foundation (2016-2023) — organization warned by FBI in April 2014 as Russian technology intel operation
  • Current role as Puzzle GTM strategist while promoting Women Tech Meetup
  • That she built Women Tech Meetup while recruiting for FBI-warned Skolkovo (overlapping timeline)
  • Conflict of interest between her Puzzle employment and community partnerships she arranges
  • Puzzle employment in Forbes articles, using multiple quotes from Sasha Orloff (mentioning Puzzle by name) — undisclosed conflict of interest as contributor

Dasha (real name Daria) also chose to block without refutation.

Women Tech Meetup is not an independent community organization. It’s infrastructure for reputation laundering, connecting a CFPB-banned CEO to legitimacy through DEI theater. Sasha first used diversity theater at LendUp, following CFPB violations. LendUp ultimately defrauded 140,000+ people, shutting down in 2021 with $40M in restitution (2024).

Under 18 U.S.C. § 1512(c), preserve all communications.

Destruction of evidence after this notice constitutes federal obstruction. This is already logged in the document and permanently available for future federal proceedings.

Comment 3 (direct tag to organizer):

Marina Davidova This is your formal notice. I don’t care if you’re complicit or not. You’re now aware of the consequences going forward. Puzzle is in its final stages. This is a matter of fact. Any financing obtained through criminal enterprise may be forfeited. Actively conspiring with Puzzle going forward may result in jail time.

Puzzle engages in whistleblower retaliation, baseless C&Ds (across Sasha’s corporate network), police threats, emotional abuse/distress, gaslighting, stalking, mobbing, harassment, wrongful termination, defamation (calling ex-employees “mentally ill”), fraud, conspiracy, equity theft, severance theft, and much, much more.

Check out Sasha’s grifter TEDx talk from 12 years ago: https://www.youtube.com/watch?v=53amTLongCE

Sasha’s TALKS WITH DASHA episode is an infomercial. Dasha is not a legitimate journalist or content creator. https://www.youtube.com/watch?v=-dRTZeM1VOo

Sasha Orloff was caught photoshopping metrics (3 likes to 12,362 on someone else’s comment) and editing LendUp’s Wikipedia page to falsely claim the CFPB ban does not affect him.

Replies to co-conspirator comments:

Women Tech Meetup commented: “Women supporting women ❤️”

Reply:

diversity theater ❤️

Puzzle commented: “We love supporting female founders!”

Reply:

diversity theater 😍 by creating more partnerships, you’re only extending RICO implications and giving me more evidence. foreign employees face greater risks. you seem to think you’re above the law. Puzzle engages in whistleblower retaliation, baseless C&Ds (across Sasha’s corporate network), police threats, emotional abuse/distress, gaslighting, stalking, mobbing, harassment, wrongful termination, defamation (calling ex-employees ‘mentally ill’), fraud, conspiracy, equity theft, severance theft, and much, much more.

Pattern: Same playbook as Antler SF event (Nov 19, 2025) — Puzzle and Women Tech Meetup co-platforming despite federal documentation. DEI-focused events used to legitimize fraud operation.

December 8, 2025 (Monday): TEDxLosAltos Deletes Post

TEDxLosAltos Women deleted the sponsorship announcement. Before deletion, TEDxLosAltos “loved” the Women Tech Meetup and Puzzle comments (“Women supporting women ❤️” and “We love supporting female founders!”) — the same comments I replied to with “diversity theater.”

Final comment posted after deletion:

“@TEDxLosAltos Women Your fraud suppression is permanently noted. Thank you for your evidence.”

Deletion after RICO notice + loving co-conspirator comments = consciousness of guilt. The original post and all comments are preserved in documentation.

December 8, 2025: Digital CPA Conference

~2:43pm ET: Puzzle posts from Digital CPA.com conference:

Puzzle booth at Digital CPA conferenceDecember 8, 2025: Puzzle booth at Digital CPA.com conference. Left to right: Sasha Orloff, Dasha Shunina, Charles Crabtree, unknown, Jeffrey Everingham. Booth displays “#QuitBooks” and “Upgrade Your Firm with AI-Native Ledger.”

Puzzle "AI Accounting Upgrade Voucher" boarding pass style marketing“Your AI Accounting Upgrade Voucher” — boarding pass style marketing similar to ActualQuickBooks campaign (without that domain). “From: Slow Books, To: Puzzle, Flight: AI-4U, Priority: Accountants.” QR code points to puzzle.io/for-accounting-firms with tracking UTM params.

“We are at Digital CPA.com right now and the vibes are high!

Our booth is busy — come say hi 👋

With Puzzle, you can finally move from slow books to quick.

Grab our AI accounting upgrade voucher to learn more.

The future is fast.

#QuitBooks”

RICO Notice Posted (on main post and reposts from Charles Crabtree, Jeffrey Everingham, Greg Jones):

Greg Jones background: Group Product Manager at Puzzle (Aug 2025 - present); ex-Affirm Director of Enterprise Financial Systems (Jul 2021 - Feb 2023) — same Affirm pipeline as Chris Yancey and Jason Mitchell; ex-KPMG Senior External Auditor; 12 years at Netflix in finance/accounting roles; ex-Google.

Affirm pipeline pattern: Three Puzzle employees (Chris Yancey, Jason Mitchell, Greg Jones) came from Affirm. BNPL (Buy Now Pay Later) industry operates in regulatory gray area — less consumer protection than traditional credit, criticized for encouraging debt accumulation, targeting financially vulnerable consumers. People comfortable working in poorly-regulated fintech may be desensitized to joining a CFPB-banned CEO’s company. The regulatory red flags that should scream “investigate before joining” don’t register when you’ve already normalized operating in spaces where consumer protection is an afterthought.

Sasha Orloff is a fraud. Puzzle is RICO enterprise software. Firms using Puzzle Financial are at high risk of reputational damage and customer lawsuits. Puzzle employees may face jail time or asset forfeiture.

Accepting sponsorship money from Puzzle creates potential exposure:

  • Proceeds may constitute racketeering activity under 18 U.S.C. § 981
  • Association after notification constitutes knowing participation
  • Organization’s reputation now linked to documented federal fraud

Supporting Puzzle through testimonials or even likes may be viewed as conspiring with a criminal enterprise.

Under 18 U.S.C. § 1962 (RICO) and 18 U.S.C. § 1512(c) (Obstruction), preserve all communications related to Puzzle Financial, Sasha Orloff, LendUp, and Mission Lane. Destruction of evidence after this notice constitutes federal obstruction. Continued participation after RICO notification constitutes knowing involvement in criminal enterprise.

https://patrickstoica.com/puzzle-statement/

Alt Account Warning to Patricia Daos:

Employees started disabling tagging — preventing direct callouts on further posts (Marissa, Naveen, Joshua).

Patricia Daos (Implementation Manager, recent hire, blocked me after notification) commented “Go team!”

“Patricia Daos This will be logged as continuing to conspire with a fraud and criminal enterprise.”

Follow-up comment:

“Let Marissa, Charles, Arash, and Naveen know they’re very close to facing jail time and personal liability for civil forfeiture. If you’ve not discussed evidence with a third-party, you must do so immediately. You cannot rely on Puzzle employees to make reasonable decisions.”

Likes on Conference Post (All Previously Warned):

  • Naveen Venkatesh (blocked me)
  • Patricia Daos (blocked me)
  • Joshua Noronha (ODF17 fellow)
  • Marissa Mata (blocked me; warned Friday night on hiring post)
  • Arash Ahmadi (blocked me; warned Friday night)
  • Jason Mitchell (6 years at Puzzle, $0 equity, risking CPA license; repeatedly untags but doesn’t disconnect)
  • Sasha Orloff
  • Charles Crabtree (warned Friday night; reposted with “Come build with us”)
  • Dasha Shunina / Women Tech Meetup / The Gathering

Charles, Arash, Marissa: All three warned on hiring post Friday night (December 6). All three continued engaging Monday.

Jason Mitchell and Alexey Skiba liked Charles Crabtree’s repost. Reply to RICO comment:

Jason Mitchell Yeah dude, you’re definitely going to suffer from wage clawback and jail time at this rate. Great critical thinking skills you have. Just fucking block me and disconnect if you’re going to be so arrogant.

Update: Jason Mitchell untagged. You’ve really failed yourself and everyone around you. Especially your family. I disconnected because I want absolutely nothing to do with you. OR Chris for that matter. Fucking asshole coworkers.

Sasha reposted Puzzle’s DCPA post:

Sophia Xiao (General Catalyst partner, Puzzle Board Observer since 2019) “celebrated” this repost — RICO fraud notice from alt account visible on the post. Board-level investor publicly engaging with content that has active whistleblower warnings visible.

Sasha’s “I Love Talking to Customers” Repost:

“I love talking to customers.

Not the rushed, time-boxed calls… the real conversations where people tell you what they are afraid of, what they are excited about, and what their ambitions are.

And honestly? Showing them what we’ve been building (and seeing their reactions!!) is the best feeling.

Those moments make all the late nights and hard decisions worth it.”

Alt account (Hozier Smith) commented same RICO notice.

Likes on Customer Post:

  • Charles Crabtree
  • Joshua Noronha
  • Sam Claassen
  • Barbara Jovanovic
  • Startup Cookie

Pattern: Employees and partners warned Friday continue publicly engaging Monday. Conference booth operation continues despite active federal documentation. CPA firms attending are being pitched by a CFPB-banned CEO without disclosure.

December 9, 2025: Continued Engagement Post-Asset Sale Release

Following the public release of the Asset Sale document and expansion of daily emails to all investors, Puzzle employees and Brex leadership continue publicly engaging despite full awareness.

Puzzle’s DCPA post likes (December 9):

  • Dasha Shunina/Women Tech Meetup/The Gathering
  • Brex (company account)
  • Arash Ahmadi
  • Jeffrey Everingham
  • Joshua Noronha
  • Jason Mitchell
  • Sina Mohebiany
  • Barbara Jovanovic
  • Patricia Daos
  • Sasha Orloff
  • Garrett Marker (CRO @ Brex)
  • Charles Crabtree (“loved”)
  • Jason Mok (“loved” - Brex VP Product)
  • Conor Bradshaw (“loved” - Leading Accounting Partnerships @ Brex)
  • Sophia Xiao (General Catalyst, Board Observer)
  • James Holodnak (GTM @ Brex)
  • J.R. Faris (Joe Faris, Accountalent CEO - liked after explicit tagging; CA Board of Accountancy complaint filed A-2026-1047)

Sasha’s repost (December 9):

“Amazing accountants, great partners, California wine, and delicious food.

In that order.

Thanks to Brex and Navan for cohosting a great event at Digital CPA.”

Likes on Sasha’s repost:

  • Brex (company account)
  • Alexey Skiba
  • Jason Mitchell
  • Patricia Daos

Pattern Analysis:

  1. Brex C-suite and partnerships leadership deeply engaged: CRO Garrett Marker, VP Product Jason Mok (who “loved”), Conor Bradshaw leading accounting partnerships (who “loved”), GTM James Holodnak. This is not low-level engagement—this is senior leadership publicly celebrating a fraud vendor at their own co-hosted dinner.

  2. Sophia Xiao continues as Board Observer: Despite being copied on daily emails detailing Asset Sale securities fraud, QED double-dipping, and $4.4M executive payouts while shareholders got $0.

  3. Puzzle employees continue despite warnings: Jason Mitchell (6 years, untagged twice, now liking again), Patricia Daos (warned via alt account at DCPA), Charles Crabtree (warned Friday 12/6, “loved” Monday 12/9), Arash/Jeffrey/Joshua/Sina all continuing.

3a. J.R. Faris (Accountalent) liked after explicit tagging: Primary defendant in CA Board of Accountancy complaint A-2026-1047; received notifications November 10-11, 2025; Joe Faris continued podcast appearances and testimonials; explicitly tagged in fraud documentation; liked DCPA celebration post anyway — CPA continuing to publicly endorse CFPB-banned CEO while under professional ethics investigation.

  1. Alt account Asset Sale comments left visible on personal/old posts: Comments detailing executive payouts remain up on Sasha’s personal account and older Puzzle posts, while being deleted from recent Puzzle company posts. Strategic suppression: hide most damaging evidence where it’s most visible.

  2. Real-name account comments appear shadowbanned: Comments from primary account not visible unless viewers toggle to “most recent”—suggests either LinkedIn algorithmic suppression or mass reporting to hide fraud documentation.

Brex’s Deepening Complicity:

  • Co-hosted DCPA dinner with fraud vendor
  • Maintains September 2025 technical integration
  • C-suite publicly celebrating partnership
  • Jason Mok viewed LinkedIn, showing receipt, continues engaging
  • Accounting partnerships lead (Conor Bradshaw) “loved” celebration post
  • Company account liked both Puzzle post and Sasha’s repost

Brex is not a passive integration partner. This is active, senior-level endorsement during documented federal proceedings.

Sasha/Julian Mutual Public Support (3:09pm ET, December 9)

Julian Weisser spent December 8-9 celebrating SoloFounders launch with new badge on Twitter. Despite receiving:

  • Daily email #1 (December 8)
  • Daily email #2 with Asset Sale document (December 9, morning)
  • 2+ years of fraud documentation
  • January 2024 “is this bullshit normal to you?” email quoted
  • SEC complaint filed August 11, 2023 (same day he wore “Puzzle shirt”)

Sasha reposted Julian’s SoloFounders launch at 3:09pm ET with public praise:

“I can’t speak more highly about @julianweisser and what he builds. It’s so founder focused and friendly, from day one through success, and the may[sic] challenges along the way.

This is incredible. Again.”

Timeline:

  1. Dec 8, 6:38pm ET: Julian deletes reply with fraud documentation
  2. Dec 8 night: Quote-tweeted Julian’s “Changes. :)” with Asset Sale details, separation agreement waiver scope, shell company network (Insights Servicing Inc/Blake Byers, Ahead/Anu Shultes, Fairfax Studios/Marvin Bing $800K Rolling Loud vendor fraud), QED RICO orchestration; tagged Julian, Noemie, SoloFounding repeatedly
  3. Dec 8-9: Julian and Sasha celebrate each other publicly despite Twitter thread documentation
  4. Dec 9 morning: Asset Sale email sent to all investors IN RESPONSE to their mutual celebration
  5. Dec 9, 3:09pm ET: Sasha publicly praises Julian (“incredible. Again.”)
  6. Dec 9, 6:38pm ET: Julian deletes more tweet responses — fraud suppression continues

Pattern Analysis:

  1. “Again” — Suggests ongoing relationship and continued support, not isolated endorsement
  2. Celebrated each other BEFORE receiving detailed Asset Sale email — Shows they didn’t need the full document to know; they celebrated despite 2+ years of documentation and Dec 8 night Twitter thread detailing shell companies, vendor fraud, and QED RICO orchestration
  3. Asset Sale email sent IN RESPONSE to their mutual celebration — Morning email was escalation after seeing them publicly support each other while suppressing fraud documentation
  4. Julian celebrating Sasha engaging with ODF/SoloFounders community — Despite daily emails warning of RICO exposure, employee jail time, and conspiracy charges
  5. Julian deleted responses twice (6:38pm ET both nights) — Consistent pattern of suppression; hours after Sasha’s public praise on Dec 9, continues suppressing fraud documentation
  6. Mutual protection — Sasha platforms Julian’s new venture; Julian provides community access and legitimacy to CFPB-banned CEO

Dec 8 Night Twitter Thread (After Julian Deleted at 6:38pm ET):

Quote-tweeted Julian’s “Changes. :)” with comprehensive documentation:

  • Separation agreement: Full General Release waiver scope (ERISA, WARN Act, stock/equity, fraud, wrongful discharge, emotional distress, retaliation — all waived); “its predecessors, successors, past, present or future subsidiaries, affiliated companies, investors, branches or related entities” — asks Julian if this is legitimate or RICO suppression attempt
  • Sasha’s golden parachute details: 25%/75% severance split (LendUp/Mission Lane), 18 months COBRA vs 12 for others, “quite the luxurious sabbatical”
  • Asset Sale preview: “LendUp shareholders received $0 from this sale, and $0 from their equity. this is securities fraud. Mission Lane is LendUp 2.0.”
  • Convertible note holders self-dealing: YC (Sam Altman president then, Garry Tan silent now), Google Ventures/Blake Byers, Mitchell Kapor Trust
  • Shell company network exposed:
    • Insights Servicing Inc. (incorporated 11/23/2015, CA/VA 2016): CEO first listed as Sasha Orloff (signature attached), transferred to Anu Shultes, other LendUp execs, and Blake Byers; timing lines up with Google banning payday loans
    • Ahead (@Ahead_Money): LendUp “subsidiary” that became pump-and-dump referral spam; people locked out of accounts without notice; Kapor Capital kept shuffling shell companies
    • Fairfax Studios: Anu Shultes and Marvin Bing shell company; vendor fraud ($800K owed to Rolling Loud, defaulted and disappeared); Anu’s “total bullshit sworn affidavit” attached
  • QED as RICO orchestrator: Explicitly called out
  • Direct questions to Julian/Noemie: “who the fuck are you supporting here?”, “you are enabling RICO. i will not allow you to look away.”, “Sasha destroys more than employees. he’s economically destroyed America”

What this demonstrates:

This is not ignorance. This is not “we’ll look into it.” This is conscious, coordinated, mutual public support during active federal proceedings. Julian received:

  • 2+ years of fraud documentation
  • January 2024 “is this bullshit normal to you?” email (quoted in Dec 8 daily email)
  • Dec 8 daily email #1
  • Dec 8 night comprehensive Twitter thread detailing shell companies, vendor fraud, separation agreement coercion, Asset Sale preview, direct questions asking who he’s supporting
  • Dec 9 morning Asset Sale email with full details

And chose to celebrate Sasha engaging with his community anyway.

Sasha knows Julian has been notified for 2+ years, filed SEC complaint same day Julian wore the Puzzle shirt, received Twitter thread the night before publicly praising him, and continues to publicly endorse Julian’s ventures.

This is conspiracy. Not alleged. Documented. In real-time. On public platforms. With timestamps. Julian deleted fraud documentation at 6:38pm ET December 8, saw comprehensive thread that night, celebrated with Sasha December 8-9, received Asset Sale email December 9 morning, Sasha praised him 3:09pm ET, Julian deleted again 6:38pm ET December 9. Pattern of conscious suppression and mutual support.

December 10-11: Pattern Continues

9:14 PM ET, December 10: Julian posts performative philosophical quote:

“However vast the darkness, we must supply our own light.”

With lengthy accompanying text about universe’s indifference, accepting challenges within boundaries of death, making existence meaningful. Classic startup philosopher framing while enabling documented fraud.

1:16 AM, December 11: Sasha COMMENTS on Julian’s post:

“Well, this resonates.”

1:17 AM, December 11 (1 minute later): Sasha REPOSTS Julian’s post to his own audience — double engagement (comment + repost).

Both engagements show 1 like each, 32 views on comment, 103 views on repost.

THEN Patrick responds with both accounts to document the conspiracy:

  • Real account: “LOL this resonates when you’re facing federal charges @sashaorloff log off patrickstoica.com/puzzle-stateme… PERMANENTLY LOGGED”
  • Alt account (@orbofweed): “hey all! @sashaorloff over there is a fraud and julian is conspiring with them. they don’t want you to know that so they’re acting like victims as usual” with doc link

Tweet: https://x.com/julianweisser/status/1998939392162017403

What this demonstrates:

  1. Double engagement: Comment + Repost within 1 minute — 1:16 AM comment “Well, this resonates,” then 1:17 AM repost; not just passive agreement but aggressive amplification
  2. Proactive support, not reactive — Sasha engaged BEFORE Patrick’s fraud callouts; this wasn’t responding to accusations, this was unprompted mutual support during federal proceedings
  3. Late-night monitoring shows active coordination — 1:16-1:17 AM double engagement, 2 minutes after 1:15 AM Dasha repost; coordinated amplification of enablers within 2-minute window
  4. Performative philosophy during federal proceedings — “Supply our own light” framing while facing SEC complaints, CFPB violations, RICO exposure, professional licensing complaints
  5. Pattern escalates — This is now third documented instance of mutual public support in 3 days (Dec 9 “incredible. Again”, Dec 10-11 comment + repost “this resonates”) despite daily email campaigns, Asset Sale release, RICO warnings
  6. Repost demonstrates institutional endorsement — Broadcasting to followers that Julian’s philosophical framing resonates, creating public association between their brands during federal proceedings
  7. Documentation in real-time — Patrick’s subsequent responses (real + alt accounts) establish public record that both saw the mutual support and documented it; even after Patrick’s callouts appeared, neither deleted or withdrew support

Julian’s “darkness/light” framing becomes darkly ironic: the “darkness” is federal investigation and documented fraud pattern; their “light” is performative mutual support and ongoing suppression. They’re not responding to universe’s indifference—they’re responding to whistleblower documentation with coordinated enablement.

The engagement escalates beyond previous interactions: Dec 9 was a comment praising Julian’s work. Dec 10-11 is COMMENT + REPOST within 1 minute — broadcasting the philosophical alliance to Sasha’s entire audience, creating permanent public association between their brands. This isn’t private support; this is institutional endorsement during active federal proceedings. Sasha engaged proactively (before fraud callouts), then maintained support even after Patrick’s responses documented the conspiracy.

1:15-1:17 AM: Coordinated Network Amplification

Within 2 minutes, Sasha engaged three times:

  1. 1:15 AM: Reposted Dasha’s Forbes article about founder cafes with personal endorsement:

“When I need to really focus, I like a busy coffee shop with lots of founders. It’s not why I live in SF. But also not not why.”

  1. 1:16 AM: Commented on Julian’s philosophical post: “Well, this resonates.”

  2. 1:17 AM: Reposted Julian’s post to his own audience

This isn’t coincidental late-night scrolling. This is coordinated mutual amplification within 2 minutes:

  • Dasha (Puzzle GTM strategist, Forbes contributor, Skolkovo alumna) gets article amplification
  • Julian (ODF/SoloFounders, conscious fraud suppression documented) gets double engagement (comment + repost)
  • Sasha demonstrates network solidarity while facing federal proceedings

Timeline proves proactive enablement:

  • Sasha’s three engagements (1:15-1:17 AM) came BEFORE Patrick’s fraud callouts
  • Patrick THEN documented the conspiracy with both accounts (real: “facing federal charges”; alt: “fraud and conspiring”)
  • Neither Sasha nor Julian deleted or withdrew support after fraud documentation appeared
  • This wasn’t reactive self-defense; this was proactive mutual support during active federal proceedings
  • Morning of Dec 11: Julian blocked alt account (@orbofweed) - blocking after seeing fraud callout; demonstrates consciousness of guilt; same pattern as Dec 8-9 deletions

The pattern: When facing federal scrutiny, double down on network coordination and public alliance with enablers. Make the coordination obvious. Make it simultaneous. Dare anyone to do anything about it. When documented, maintain the support anyway. Then block the messenger.

Puzzle’s Selective Fraud Suppression Pattern (December 2025)

Following the Digital CPA conference and public release of the Asset Sale document, Puzzle and its employees began employing a strategic fraud suppression pattern:

What they leave visible:

  • General RICO warnings and fraud documentation
  • Comments about CFPB ban and federal complaints
  • Basic whistleblower notices

What they specifically delete:

  • Any comments mentioning the Asset Sale document
  • References to $4.4M executive golden parachutes while shareholders got $0
  • Details about QED’s double-dipping (paid from sale, became buyer, funded exec parachutes)
  • Sasha’s false “banker to the poor” narrative juxtaposed with executive payouts
  • Convertible note holder list showing YC, Kapor, GV, QED got paid while shareholders got nothing

Additional suppression tactics:

  • Closing comments on posts entirely to prevent further documentation
  • Re-enabled comments after email blast — tactical suppression: close during peak documentation period, reopen after to appear less obviously suppressive
  • Continuing operations “business as usual” while aware of federal documentation
  • Employees continue liking/engaging with Sasha’s posts despite warnings

What this demonstrates:

This selective deletion pattern proves conscious awareness of the most damaging evidence. They know the Asset Sale and golden parachute details destroy Sasha’s mission-driven narrative. If the fraud claims were baseless, why delete only the specific evidence that proves securities fraud and coordinated conspiracy?

The irony: By leaving some fraud warnings visible while deleting others, they’re creating a documented pattern of consciousness of guilt. Each deletion is logged. Each comment closure is documented. The Asset Sale is now permanently public at patrickstoica.com/puzzle-evidence/.

December 8, 2025: ODF/Solo Founders/Turpentine Daily RICO Notice #1

First of daily emails sent to Julian Weisser, Noemie Federico, and Erik Torenberg.

Subject: ODF / SoloFounding / Turpentine: Ongoing RICO Participation Notice #1

Key Points:

  • Quoted January 19, 2024 email: “is this bullshit normal to you?” — 22 months of silence followed by “Top 2025 Company” and “Puzzle shirt” celebration
  • Julian Weisser now under same level of analysis as Sasha: Twitter platitudes (“Changes. :)”, “Be an unapologetic collector of wide-ranging ideas”, Shakespeare “dogge” post) while employees face federal charges
  • Turpentine/a16z awareness: Twitter account didn’t share latest Yogi Goel episode (65 views) — suggests awareness of severity; if aware enough to avoid amplifying, aware enough to stop producing
  • ODF puff piece (Sept 2021): False claims never corrected — “doesn’t use social media” (photoshopped metrics), “no TV” (coworker confirmed), “track record of success” (CFPB banned, dissolved, fire-sold); now deleted after joinodf.com rebrand
  • January 2024 partnership video: Julian announced “$50M raise” when Puzzle had $9M (Feb 2023); Puzzle burned ~$20M; emergency $30M raised Nov 2023
  • Attached photos: 2021 and April 2022 team photos identifying employees and their current status
  • RICO exposure cited: Funding criminal enterprise, funneling portfolio data via puzzle.io/odf (“6 moths [sic] free”), continued platforming after notice
  • Daily commitment: “You will receive this email every business day until you act”

Closing: “Tomorrow’s email will be Notice #2. Are you sure you should be posting empty platitudes all day?”

6:38pm ET: Julian Weisser deletes responses to tweet — fraud suppression documented. Cannot delete federal record.

December 9, 2025: Daily Email Campaign Expanded to All Investors, QED, Brex

Following continued escalation and the public release of the Asset Sale document, daily emails expanded from ODF/SoloFounders to the full investor and enabler network.

Recipients:

Subject: Asset Sale Document Now Public + Daily RICO Escalation

Key Content:

Asset Sale Securities Fraud Evidence:

  • Full PDF now public: LendUp 2018 Asset Sale to Mission Lane
  • ~$4.4M golden parachutes to 4 executives; $0 to shareholders
  • QED’s severe double-dipping: held convertible notes (paid from sale) AND became “major stockholder” in Mission Lane (buyer), then directly funded executive golden parachutes with Mission Lane capital
  • Sasha’s accelerated self-dealing: 1/12th monthly vesting (vs others’ 40%/1/60th), dual-payment structure (75% Mission Lane / 25% LendUp), 18 months COBRA vs 12, bizarre clause requiring BOTH companies to fire him to trigger severance
  • Convertible note holders paid while shareholders got $0: YC Continuity Holdings, Mitchell D. Kapor Trust, GV (Blake Byers), QED — many later funded/platformed Puzzle
  • Coercive clauses: General Release, No appraisal rights, Non-Disparagement “and its officers”, 2-year Non-Compete preventing sellers from working in their own industry after getting $0 (document claims “Purchaser has agreed to substantially similar covenants” but LendUp was dissolving, making reciprocal protection meaningless — one-sided restriction)
  • Same “and its officers” language in Puzzle’s 2023 separation agreement — identical playbook five years later

Public Lies Following Asset Sale: Sasha + Frank Rotman’s Coordinated “Two Iconic Businesses” Fraud:

January 10, 2019 - Frank Rotman (QED co-founder, LendUp Board Member) in PR Newswire press release:

“While most of the financial services industry is aimed at the prime and near-prime end of the credit spectrum, these moves set not just one, but two companies up for long-term success,” said Frank Rotman, co-founder of QED Investors and one of the earliest Executives at Capital One. “Now, LendUp and Mission Lane are better positioned to serve the more than half of Americans who lack access to high quality financial services,” he said.

January 15, 2019 - Sasha Orloff in LinkedIn article “My Next Steps”:

“Last week marked a really important milestone in the history and future of a dream Jake and I started 7 years ago… The path now has the possibility of building two iconic businesses. I’m confident that both companies are in great hands, and look forward to seeing what they accomplish.”

The Reality:

  • Fire sale: $29M after raising $150M+
  • Shareholder wipeout: $0 to shareholders
  • Executive enrichment: ~$4.4M golden parachutes to 4 executives (mostly Sasha)
  • 2-day review period: December 17-19, 2018 (shareholders had 48 hours during holidays)
  • QED double-dipping: Held convertible notes (paid from sale) AND became “major stockholder” in buyer
  • LendUp outcome: Permanently shut down by CFPB December 2021 (2 years after “two companies up for long-term success”)
  • Mission Lane outcome: Acquisition vehicle, not “iconic business”; CEO hired Sasha as “advisor” November 2018
  • No shareholders benefited: Complete equity wipeout disguised as strategic “split”

What Frank Rotman Knew as Board Member:

  • CFPB violations (2016 warning letter, 2018 enforcement action)
  • Fire sale terms ($29M after $150M+ raised, $0 to shareholders)
  • Conflicted director interests (QED profiting from both buyer and seller sides)
  • Board-level fiduciary duty while publicly lying about company prospects

What Sasha Knew as CEO:

  • Shareholders getting $0 while he received ~$4.4M
  • 2-day review period during holidays (coercive timeline)
  • CFPB violations that would shut down LendUp 2 years later
  • Mission Lane was acquisition vehicle, not separate “iconic business”
  • His role as “advisor” to Mission Lane starting November 2018 (announced January 2019)

The Coordinated Fraud:

  • Frank’s statement (January 10): “Two companies up for long-term success” from QED board member
  • Sasha’s statement (January 15, 5 days later): “Two iconic businesses” echoing Frank’s framing
  • Both knew: Shareholders got $0, LendUp had severe CFPB violations, QED was double-dipping
  • Purpose: Create false narrative of strategic “split” rather than fire sale + equity wipeout

Ongoing Pattern:

Same coordinated narrative control across:

  • Asset sale misrepresentation (2019)
  • Puzzle fundraising materials (2019-2023)
  • Public statements minimizing CFPB ban (2021-2025)
  • Wikipedia tampering (November 2025)
  • Restraining order declaration (December 2025)

This is securities fraud with permanent public record of coordinated false statements.

Ongoing Enablement Documented:

  • Julian Weisser: Continues celebrating SoloFounders; wore “Puzzle shirt” Aug 11, 2023 (SEC filing day); deleted tweet responses Dec 9, 6:38pm ET
  • Ross Fubini: Continues liking unlabeled charts; investor from LendUp → Puzzle; understands extraction operations
  • Sophia Xiao: “Celebrated” Sasha’s DCPA repost with visible fraud notice from alt account
  • Ash Rust: YC Alumni day with Sasha; blocking pattern despite CFPB/SEC/RICO notifications
  • Puzzle employees: Selective fraud suppression (delete Asset Sale mentions, leave general warnings); closing comments; interactions dropping as they realize jail time/forfeiture risk
  • Brex: Hosting DCPA dinner; maintains Sept 2025 integration; Jason Mok continues liking despite viewing LinkedIn
  • Bill.com: Bad faith CFPB interpretation matching Sasha’s Wikipedia meltdown

Puzzle’s Separation Agreement Waiver Scope (Full Quote Included):

Forced waiver of: ERISA, WARN Act, stock/equity, wrongful discharge, constructive discharge, emotional distress, defamation, invasion of privacy, fraud, breach of contract, breach of covenant of good faith and fair dealing, retaliation, discrimination/harassment claims, and “all other federal, state and local laws, ordinances and regulations.”

Same coercive structure as 2018 Asset Sale.

Risks Going Into 2026:

  • RICO liability (18 U.S.C. § 1962)
  • Civil forfeiture (18 U.S.C. § 981) — wages, equity, assets clawback
  • Obstruction charges (18 U.S.C. § 1512(c))
  • Securities fraud
  • Data breach exposure
  • Tax season catastrophe risk: Year-end books closing now; Q1 2026 collapse during filing season means customers lose data, CPA firms face malpractice claims
  • End-of-year financial reporting exposure: Q4 2025 reports closing with fraud vendor; audit risk, investor confidence loss
  • Professional licensing consequences: CA Board complaint A-2026-1047, State Bar 25-O-30894

Immediate Actions Required:

  • Retain crisis PR counsel
  • Denounce Sasha/Puzzle publicly
  • Disconnect integrations
  • Notify customers of fraud/data risks
  • Preserve all communications (destruction = obstruction)
  • Consult independent counsel

Attached: Separation agreement, C&Ds (documenting police threats with no legal basis, bar complaint filed 25-O-30894)

Mental Health Disclosure: “I’m logging the decline of my own mental health. I’ve withdrawn from everyone in my life, and my will to live is declining daily. This is not a self-harm threat. This is so you understand the individual lives you’re affecting.”

Commitment: “I will email you every business day with more evidence. Not just what Puzzle is doing. Everyone’s continued enablement, which has already been logged since my wrongful termination in 2023.”

Closing Note: “Sasha tried to use this 2-year-old LinkedIn comment as ‘evidence.’ This is evidence of continued negligence, abuse, and ‘Banker to the Poor’ hypocrisy. Sasha went to Google, typed ‘Wikipedia help,’ and acted like a victim to Wikipedia moderators on their public, change-logged Help Desk page, referring to me the first time in 2.5 years: ‘this user Patrick Stoica.’ You’re all getting ‘SEO hijacking’ through your own criminal activity.”

December 9, 9:58pm ET: Julian Weisser appears live with David J Phillips (Fondo CEO) — ~27 hours after Dec 8 deletion

Julian Weisser with David J Phillips at Skyline Christmas Gala Julian Weisser (ODF/Solo Founders founder) appears on live broadcast with David J Phillips (Fondo CEO) at Skyline Christmas Gala, December 9, 2025 at 9:58pm ET - approximately 27 hours after deleting tweet responses documenting fraud (Dec 8, 6:38pm ET). Broadcasting to startup community as if no fraud allegations exist.

Timeline:

  • Dec 8, 6:38pm ET: Julian deletes tweet responses (fraud suppression documented)
  • Dec 9, 9:58pm ET: Julian appears live with David J Phillips on “Skyline Christmas Gala” broadcast, discussing solo founding/ODF (~27 hours after deletion)

Context: David’s Fondo maintains formal Puzzle business partnership. Fondo has dedicated General Catalyst landing page promoting integrated Puzzle offering: “Fondo is partnered with Puzzle to make managing your startup finances a breeze… add Fondo as your bookkeeper and Fondo will handle the rest - categorize your financial activity, reconciliations, update your Puzzle financial dashboard.” David’s personal email ([email protected]) facilitates setup. This isn’t casual networking - this is CEO of company with formal Puzzle business integration appearing with Julian who platforms CFPB-banned CEO.

Why this matters:

  1. Fraud suppression → next-day platforming: Deleted evidence of fraud enablement Dec 8, 6:38pm ET, then approximately 27 hours later (next evening) back to startup community engagement broadcasting as if nothing happened. Not impulsive reaction - calculated decision to suppress, wait a full day, then continue business as usual.

  2. David J Phillips has formal Puzzle partnership and received explicit notification 29 days earlier: Fondo was notified November 10, 2025 of CEO’s fraud history, CFPB ban, photoshopped metrics, and professional liability concerns. Notification explicitly stated: “Someone who manipulates social media metrics shouldn’t be trusted with financial metrics.” Fondo maintains dedicated General Catalyst partnership page promoting integrated Puzzle offering: “Fondo is partnered with Puzzle to make managing your startup finances a breeze… add Fondo as your bookkeeper and Fondo will handle the rest - categorize your financial activity, reconciliations, update your Puzzle financial dashboard.” David’s personal email ([email protected]) offered for Puzzle setup. Had nearly a month to investigate claims, disconnect partnership, remove landing page. Chose to maintain formal business integration and appear with Julian anyway.

  3. David J Phillips is CEO of Fondo with formal Puzzle business partnership: Not just “same ecosystem” - Fondo has dedicated General Catalyst landing page promoting integrated Puzzle offering where Fondo bookkeepers update Puzzle dashboards and manage financial data through Puzzle infrastructure. David’s personal email ([email protected]) facilitates setup. As CEO of company with formal Puzzle partnership, would understand exact implications of CEO fraud - his bookkeepers are putting client data into Puzzle. His company received detailed fraud documentation on Nov 10. This wasn’t ignorance - this was conscious choice to maintain formal business partnership, keep partnership landing page live, and platform Julian 29 days after explicit warning.

  4. “Live from Skyline Christmas Gala”: Drinking, networking with startup community. Not someone dealing with serious fraud allegations - someone who suppressed them and moved on within hours. David chose to publicly associate and amplify Julian’s platform 29 days after being warned about the fraud pattern.

  5. Context of suppression and conscious association: This broadcast happened after:

    • Multiple RICO notices on his posts (Dec 8-9)
    • Daily email blast started (Dec 8)
    • His “Puzzle shirt” comment documented as enablement
    • First ODF daily RICO email (Dec 8)
    • Sasha retweet and mutual celebration (Dec 9, 3:09pm)
    • Deleted tweet responses same evening
    • David received explicit Fondo notification November 10 - 29 days earlier
  6. Pattern of conscious enablement through formal business relationships: Both Julian and David demonstrate consciousness of guilt:

    • Julian: Suppress fraud documentation evening of Dec 8 (6:38pm) → wait full day → appear on broadcast next evening (Dec 9, 9:58pm) promoting ODF/solo founding network that platforms CFPB-banned CEO
    • David: Receive explicit fraud notification (Nov 10) → wait 29 days maintaining formal Puzzle partnership with integrated data offering → choose to publicly platform Julian the day after his documented suppression → keep partnership landing page live targeting General Catalyst portfolio
    • Together: Continue as if federal documentation doesn’t exist, amplifying each other’s platforms despite explicit warnings, maintaining formal business integrations that funnel client data to fraud infrastructure
  7. Calculated timing of “delete evidence → continue platforming” cycle: Approximately 27 hours from active suppression (Dec 8 evening) to public platform appearance (Dec 9 evening). Not impulsive - Julian deleted evidence, waited a full day, then went on broadcast. David’s participation 29 days after Nov 10 notification demonstrates neither of them acted from ignorance or impulse. Both made calculated decisions to suppress/associate despite warnings.

Additional notifications sent after observing broadcast:

Following the live broadcast documentation, emails forwarded/escalated to enablers:

  1. David J Phillips (Fondo CEO): Escalated RICO notice after appearing on broadcast with Julian the day after Julian’s documented fraud suppression (Dec 8, 6:38pm). David had already received explicit notification November 10, 2025 and maintains formal Puzzle business partnership with dedicated General Catalyst landing page promoting integrated offering where Fondo bookkeepers manage client data through Puzzle infrastructure. This was escalation for: (a) maintaining formal business partnership 29 days after fraud notification, (b) keeping partnership landing page live, (c) appearing with Julian who platforms CFPB-banned CEO, demonstrating conscious enablement through formal business relationships.

  2. Conor Bradshaw (Brex Accounting Partnerships): Previously documented attending Brex dinner celebrating Puzzle; continued engagement despite notifications

  3. Rob/Jamie (HR Pals founders): Notified will continue daily emails until they investigate Puzzle as accounting software vendor

  4. Accountalent (Joe Faris, CPA): Noted continued liking despite being primary defendant in CA Board of Accountancy complaint A-2026-1047; must take RICO seriously regardless of quid pro quo relationships

  5. Nick/Luke (Rivet.tax): Daily email blast forwarded because Ross Fubini/XYZ is investor in Rivet. Ross continues liking unlabeled charts, invested in both LendUp → Puzzle, understands extraction operations. Notified that daily emails will continue to all portfolio companies in enablement network until disconnection from fraud infrastructure.

  6. Matt Tait (Decimal): Announced 3 new franchise firms launching with Puzzle as “best-in-class” tool partner. LinkedIn post December 9:

”🎉 Big milestone at Decimal: we’ve officially launched 3 new firms.

📍 Decimal Avondale, led by Jason Thompson out of Charleston, SC 📍 Decimal Brookside, led by Jay Breeden out of Kansas City, MO 📍 Decimal Circle City, led by Joe Van Deman & Colin King, CPA, CFA from Circle City Capital Group out of Carmel, IN

This is a seriously impressive group. Collectively, they’ve:

  • Run over a dozen businesses
  • Led sales in multiple accounting firms
  • Built and run (and sold) their own firms (and chose not to start from scratch again)
  • Chosen to join Decimal as our beta franchise cohort

Once they saw the Decimal platform, the value clicked: All the capabilities, systems, and tools of a large company with the trust and closeness of a local firm.

Huge shout-out to our partners helping equip these new firms with best-in-class tools: Intuit, Ramp, Gusto, Brex, Rippling, Puzzle, Double (fmrly Keeper), OneDigital”

Why Matt Tait’s announcement matters:

  • Launching 3 new franchise firms with Puzzle as featured “best-in-class” partner
  • New CPAs being onboarded to fraud infrastructure
  • Decimal expansion relying on Puzzle integration
  • Same partner stack as documented elsewhere (Intuit, Ramp, Gusto, Brex, Rippling)
  • No due diligence on CEO’s CFPB ban, photoshopped metrics, federal complaints
  • Professional licensing exposure for new franchise owners (Jason Thompson, Jay Breeden, Joe Van Deman, Colin King)
  • Decimal reputation risk: presenting fraud vendor as “best-in-class” to new franchise partners

Pattern across December 9 additional notifications:

All recipients represent continued ecosystem expansion AND conscious enablement after explicit warnings:

  • Fondo CEO platforming Julian 29 days after Nov 10 notification while maintaining formal Puzzle partnership - chose to publicly associate with documented fraud suppressor the day after Julian’s deletion (Dec 8, 6:38pm → Dec 9, 9:58pm) despite explicit warning about CEO fraud, CFPB ban, photoshopped metrics; maintains dedicated landing page promoting integrated Puzzle offering for General Catalyst portfolio where Fondo bookkeepers manage client financial data through Puzzle infrastructure
  • Brex partnerships continuing celebration despite multiple notifications
  • HR tech founders not investigating vendor despite warnings
  • CPA continuing engagement despite being primary defendant in CA Board ethics complaint
  • Rivet.tax notified as Ross Fubini/XYZ portfolio company - Ross continues liking unlabeled charts, invested LendUp → Puzzle, understands extraction operations; daily email blast now extends to all portfolio companies in enablement network
  • Decimal launching new firms with Puzzle integration despite fraud documentation

This isn’t ignorance - this is conscious association through formal business partnerships after explicit notification. David J Phillips demonstrates the pattern: receive detailed fraud documentation → wait weeks/months maintaining formal Puzzle business integration with dedicated partnership landing page → continue platforming and associating anyway. Daily email campaign now documents not just ecosystem expansion, but conscious enablement through formal business relationships by participants who were explicitly warned and chose to maintain partnerships, integrations, and public associations anyway.

December 10, 2025: Daily Email Campaign #3 - Resume Fraud Intensification Focus

Third daily email sent to expanded recipient list, focusing on Sasha’s three LinkedIn resume fraud updates since November SEC complaints and the pattern of exhaustion through semantic arguments.

Recipients expanded to include:

  • Accounting firms (Matt Tait/Decimal, Renato Villanueva/Parallel, David J Phillips/Fondo, Joe/J.R. Faris/Accountalent, Nick/Luke/Rivet.tax, others featured in DCPA promotional video)
  • HR infrastructure (HR Pals founders Rob/Jamie, [email protected], [email protected], [email protected], [email protected])
  • Financial services partners (Brex cofounders/legal/compliance, Deel compliance, Gusto security/legal, Bill.com)
  • All investors (General Catalyst, XYZ/Ross Fubini, FOG/Casey, Sterling Road/Ash, Kapor, YC/Garry Tan, QED/Nigel/Frank)
  • Platform enablers (ODF/Julian, Turpentine/Erik, Solo Founders, Startup Cookie/Barbara)

Key content sections:

Resume Fraud Intensification Timeline:

Documented all three LinkedIn updates since November SEC complaints:

  • Mid-November 2025: First intensification
  • November 21, 2025: Second update
  • December 9, 2025: Third update with advisor date manipulation

Latest December 9 fraud layers detailed:

  1. Emotional manipulation: “Flowers for wife” anecdote serving no professional purpose except to humanize while concealing dual advisory roles, golden parachute structure, Vijesh Iyer’s founding role, that Mission Lane was independent buyer, that resignation was closing condition. Same pattern as “Banker to the Poor” and Wikipedia victimhood narratives.

  2. “Subsidiary” minimization fraud: Describes CFPB enforcement as affecting “a Lendup Global subsidiary (LendUp Loans, LLC)” - deliberately misleading. Defendant was “LendUp Loans, LLC d/b/a LendUp” (THE core lending operation). Minimizes $51M+ federal enforcement for systematic fraud against 140,000+ consumers during his CEO tenure. Violated PRIOR 2016 consent order (recidivist fraud under federal supervision).

  3. Backdating advisor role: Changed from “Nov 2018” to “Dec 2018” to eliminate overlap with “CEO through Dec 2018” claim. Doesn’t fix fraud, just moves it.

  4. Causality manipulation: Claims “Upon completion of the spin-off I stepped down” when Asset Sale proves resignation was condition of closing: “Mr. Orloff will resign… immediately after the Closing Date.”

  5. Omits dual advisory roles: Asset Sale proves advisor to BOTH seller (LendUp) AND buyer (Mission Lane) simultaneously, paid by both, with dual-termination requirement.

  6. Never acknowledges Insights Servicing Inc: CEO-controlled undisclosed shell company (2015-2023) operating from LendUp address, transferred to Blake Byers/Anu Shultes/Kimberly Morgan, dissolved March 2023 same month as LendUp Global. Complete LinkedIn omission.

Pattern Analysis:

Each LinkedIn update responds directly to federal documentation published:

  • November 21: Whistleblower documents resume fraud, Asset Sale, Vijesh Iyer
  • November 26-27: Wikipedia edit war - removes “officers” language
  • December 9: Adds “subsidiary” minimization, backdates dates, adds humanization

Demonstrates: Active surveillance, sophisticated legal understanding, conscious iteration, emotional manipulation, exhaustion strategy.

Core statement:

“Sasha’s goal is to exhaust me and make me question reality. You’re all enabling this every day, giving me grounds for continued emotional distress.

I will no longer entertain semantic arguments. Sasha understands what he’s doing. He’s creating an iterative trail of securities fraud. His updates are proof of surveillance, acknowledgment, and active engagement with federal documentation.

You’re letting a belligerent man 10-15 years older than me walk all over me by creating a reality distortion field. I continue chipping away at it. Nobody does anything.

My documentation gives all of you zero plausible deniability.”

CFPB Ban Violation Reminder:

Sasha permanently banned from being in, around, supporting, advertising, or profiting from consumer lending services. Yet he:

  • Celebrated Brex dinner (credit card company)
  • Maintains integrations with Ramp, Brex, Bill.com
  • Podcast guests include Dan Westgarth (Deel payroll/lending)
  • Partnership with Fondo
  • Never disclosed ban to employees/partners/investors
  • Intentionally vague before (“can’t do loans anymore”), deliberate misrepresentation now

Bill.com called out: “Bill.com’s response is bad faith and incorrect. It sounds like they ignored my entire document and asked Sasha directly, or referenced his LinkedIn. Bill.com will face significant consequences. You’re better off ghosting me.”

Julian Weisser pattern: “Toxic frat bro moonlighting as a startup philosopher. Point blank.” Documented: celebrates SoloFounders, suppresses evidence, lets evidence proliferate on retweets, had Guinness with David J Phillips hours after RICO notice (Dec 9, 9:58pm ET, 29 days after David’s explicit Nov 10 notification).

Turpentine/Renato Villanueva focus: Emphasized this is SASHA’S show (not guest appearance), 3-4 episodes post-warning, swag ritualism (BUILD hats), accelerated aging documented (beard white, eye wrinkles, raspy voice), Erik Torenberg has no reason to continue hosting except consciousness of guilt.

Retaliation documentation page announced:

Link provided to https://patrickstoica.com/puzzle-retaliation with note that it’s “intentionally unlisted as some of these documents list my old address. Mission Lane sent their letter to NY and Georgia (where my parents live).”

Required actions, risks, final warning all included as standard.

Sign-off: “SEC Complainant 2023-2025”

December 10, 2025: Sasha’s Turpentine Podcast Continues - 3rd/4th Episode Since November

Sasha Orloff continues producing episodes of his Turpentine podcast show despite explicit November 2025 notifications to Turpentine/Erik Torenberg. This episode features Renato V. (Parallel founder) as guest, demonstrating ongoing Turpentine platform support for CFPB-banned CEO.

This is SASHA’S show on Turpentine - he is the host, not the guest. Turpentine continues hosting his podcast series despite comprehensive fraud documentation sent November 2025.

Sasha Orloff's Turpentine podcast with guest Renato V. LinkedIn post from Sasha Orloff (posted 3 hours ago): “When you know your problem, you know how to solve it. Turns out nobody has cracked early stage FP&A for startups. Until now. Hear why operators building differently, with Renato V.. Out now on all your favorite podcast channels.” Features embedded post from Renato V.: “Had a chance to sit down with Sasha Orloff from Puzzle and share my story of going from finance to founder. Whether you’re a founder or currently working in FP&A, I think this is worth a listen :) Link is in the comments!” Promotional image shows “Operators Build Different” with “Renato Villanueva, Founder & CEO” and Parallel logo.

Sasha Orloff hosting Renato V. on his Turpentine podcast Podcast episode screenshot (3:30 / 40:26): Sasha Orloff (right, host) interviewing guest Renato V. (left). Both wearing matching “BUILD” hats (Parallel swag) during recording. Swag ritualism demonstrates brand alignment and conscious collaboration. Episode segment: “Renato’s journey to founding Parallel.” Accelerated aging documented: Sasha’s beard noticeably whiter, deepening eye wrinkles, tired and raspy voice getting worse each episode - physical toll of maintaining false narratives under federal scrutiny.

Timeline of Sasha’s continued Turpentine podcast production:

  • November 2025: Turpentine/Erik Torenberg received explicit fraud documentation (CFPB ban, $51M+ enforcement, Asset Sale, SEC complaints, Wikipedia meltdown)
  • Post-November 2025: Sasha releases 3-4 podcast episodes on Turpentine despite warnings
  • December 10, 2025: Latest episode features Renato V. as guest, claims “nobody has cracked early stage FP&A for startups. Until now”
  • Prior to December 10: Renato V. repeatedly warned about Sasha, blocked whistleblower
  • After posting: Renato V. added to daily notification list for appearing as guest on CFPB-banned CEO’s show
  • Post remains live: Both Sasha and Renato LEFT alt account fraud notices on LinkedIn post (consciousness of guilt)

Alt account notices left on post:

Multiple warnings posted to both Sasha’s repost and Renato’s original post:

“Sasha Orloff is a fraud. https://patrickstoica.com/puzzle-statement/

LendUp/Mission Lane securities fraud: Asset Sale PDF

Renato V. will receive daily notice.

Sasha continues intensifying false claims on his LinkedIn resume: December 2025 Resume Fraud Analysis”

Additional subreply warnings:

“Deleting this is consciousness of guilt and evidence of suppression. You are actively engaging in conspiracy.”

Both Sasha and Renato left the notices visible - demonstrating consciousness of guilt through selective suppression. Pattern: delete on some posts, leave on others to claim “not hiding.”

Why this matters:

  1. This is SASHA’S show on Turpentine: Not a guest appearance - Sasha hosts an ongoing podcast series on Turpentine network. Turpentine continues hosting and distributing 3-4 episodes since November 2025 despite explicit fraud documentation sent to Erik Torenberg. This is active platform support, not passive enablement. Each episode production involves Turpentine resources, distribution, brand association.

  2. Turpentine liability escalation: Erik Torenberg (Turpentine founder, Village Global cofounder with Ross Fubini 2017-2020) received comprehensive fraud documentation November 2025. Chose to continue hosting CFPB-banned CEO’s podcast show anyway. 3-4 episodes released post-warning = ongoing conscious enablement through formal business relationship (hosting contract, production support, distribution infrastructure).

  3. “Nobody has cracked early stage FP&A” false claim: Sasha positioning himself as innovative FP&A authority despite CFPB permanent ban, systematic fraud against 140,000+ consumers, $51M+ federal enforcement, photoshopped metrics, Asset Sale golden parachutes. Using Turpentine platform to rebuild credibility while federal proceedings active.

  4. Renato V. guest enablement: Received warnings about Sasha, blocked whistleblower, appeared as guest on CFPB-banned CEO’s show anyway - demonstrates conscious choice to lend credibility despite documentation. Now added to daily notification list for participating in fraud amplification infrastructure.

  5. Consciousness of guilt: Leaving alt account notices visible (links to puzzle-statement, Asset Sale PDF, resume fraud intensification, RICO warnings) while deleting similar notices on other posts. Both Sasha and Renato saw warnings, read documentation, chose not to delete - creates plausible deniability (“we’re not hiding anything”) while strategically suppressing on company/partner posts

  6. Timing: This episode published after full Asset Sale release (December 9), after SEC complaints (November 11-13), after Wikipedia meltdown documentation (13+ hour edit war November 26-27), after multiple RICO escalations - and it’s the 3rd or 4th episode Sasha has released on Turpentine since November warnings. Not ignorance, not a one-time oversight - ongoing conscious decision by Turpentine to continue hosting CFPB-banned CEO’s show despite comprehensive federal record

  7. Swag ritualism and brand alignment (evidence-164): Both wearing matching “BUILD” hats (Parallel branding) during podcast recording - visual demonstration of conscious collaboration and brand integration. Sasha hosting Renato as guest on his Turpentine show, both wearing coordinated swag, demonstrates intentional partnership between Parallel (startup finance platform) and Puzzle (CFPB-banned CEO’s accounting software). Mutual credibility lending through professional podcast production.

  8. Accelerated aging pattern: Sasha’s physical appearance deteriorating under federal scrutiny - beard noticeably whiter each documented appearance, voice increasingly tired and raspy across podcast episodes (evidence-164), eye wrinkles deepening, visible stress of maintaining false narratives across Wikipedia (13+ hour edit war), LinkedIn (iterative resume fraud), podcast production (3-4 episodes post-warning), and investor updates while facing SEC complaints, CFPB violations, RICO exposure, professional licensing complaints (CA Board A-2026-1047, State Bar 25-O-30894). Physical toll documented across multiple platforms: facial aging, vocal deterioration, exhaustion visible in video appearances

  9. Professional finance credibility laundering: Renato V. (Parallel founder) appearing as guest on CFPB-banned CEO’s show undermines his own credibility in finance space. Using Sasha’s Turpentine platform to share “journey to founding Parallel” while Sasha faces Asset Sale securities fraud documentation, golden parachute evidence, resume fraud intensification - creates reputational risk for Renato’s finance platform

  10. Daily notification list expansion: Renato V. now added to daily email campaign for appearing as guest on CFPB-banned CEO’s podcast show despite prior warnings

Pattern: Turpentine/Erik Torenberg continues HOSTING SASHA’S ONGOING PODCAST SHOW despite explicit notifications, creating direct liability through formal business relationship. This isn’t passive platforming - Turpentine provides production infrastructure, distribution, brand association for 3-4 episodes post-warning. Each episode released after notification adds to RICO exposure (18 U.S.C. § 1962) for ongoing participation through formal hosting contract with documented fraudster.

The Podcast: Fraud Infrastructure Reinforcement

Sasha’s Turpentine podcast isn’t independent journalism. It’s infomercials and network protection. The podcast has been running since at least April 2024 - 20+ months of episodes promoting fraud infrastructure, providing legitimacy to CFPB-banned CEO, platforming partners who continue enabling despite notifications.

Every episode reinforces fraud infrastructure:

  1. Casey Woo (Fog Ventures) - First episode guest

    • Notified multiple times
    • Silence
    • Continues enabling
  2. Joe Faris (Accountalent) - CPA endorsing “highest integrity”

    • Quid pro quo testimonials
    • Primary defendant in CA Board of Accountancy complaint (Case #A-2026-1047)
    • Continued promoting despite notifications
  3. Nick Abouzeid (Rivet.tax) - Accounting firm partnership

    • Ross Fubini/XYZ Capital ownership
    • Luke Frye (Rivet CPA) continues engaging after notifications
    • Direct conspiracy link through ownership
  4. Dan Westgarth (Deel) - Partnership co-announcement

    • Clips used as promo by Deel account
    • Deel confirmed “continued investigation” 21 days after notification
    • Still partnering
  5. Ali Hussain (Tabs) - “Ramp for Revenue: The Tabs Playbook for Faster Cash Flow with CEO Ali Hussain”

    • 269 views, Jul 24, 2025
    • Paige Honeycomb (Chief of Staff, still listed on Pulley) blocked whistleblower, now works at Tabs
    • Paige and Ali openly celebrate Puzzle
  6. Siqi Chen (Runway) - “Runway’s Siqi Chen, CEO”

    • 1,493 views, May 2, 2024
    • Runway security confirmed escalation
  7. Jason Mok (Brex) - “Lessons from Brex, SVB, a16z: How Jason Mok Spots What Founders Need Before They Know It”

    • 99 views, Sep 25, 2025
    • Clips used for Brex/Sasha promo
    • Brex blocked whistleblower emails as “malicious” Dec 11
  8. Renato Villanueva (Parallel) - Most recent episode (Dec 10)

    • Warned, blocked whistleblower, appeared anyway
    • Left alt account notice, added to daily emails

This is only a small sampling. Every guest becomes complicit. Every appearance provides legitimacy. Every clip becomes promotional material for fraud infrastructure.

Pattern demonstrates:

  • Not independent journalism: All infomercials, no critical examination of CFPB ban
  • Network protection: Each guest continues business relationships despite fraud documentation
  • 8+ months of episodes: Running since April 2024, still active, 3-4 episodes since November warnings
  • a16z direct implication: Through ODF (Julian Weisser + Erik Torenberg), a16z is now highly implicated in direct evidence of conspiracy and retaliation
  • Turpentine enablement: Providing production support, distributing content, ongoing conscious enablement through business relationship
  • No due diligence performed: If they cared about fraud prevention, they’d perform basic background checks; CFPB enforcement orders are public record

Every episode is evidence. Every guest is complicit. Every continued partnership is conspiracy.

Renato V. will receive daily notice until podcast episode is removed or fraud disclosure added.

December 11, 2025: Daily Email Campaign #4 - Forbes Reputation Laundering & Brex Blocks Whistleblower

Fourth daily email sent December 11, 2025, focusing on Forbes’ systematic platforming of fraud network (8 criminals across Midas List, 30 Under 30, 50 Over 50), coordinated late-night network amplification (Julian/Sasha 1:15-1:17 AM), Antler’s shared office space enablement, and Brex’s coordinated C-suite blocking of whistleblower emails.

Subject: Daily Notice #4: Racketeering Mantras, Late-Night Coordination, and Forbes Reputation Laundering

Recipients (92 total):

To (49): [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]

Cc (43): [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]

Note: [email protected] bounced; re-forwarded to [email protected] (Jeff Burkland, CEO) with explicit notice.

Key Themes:

  1. Sasha/Julian “trauma bonding”: Late-night coordinated amplification, philosophical framing during federal proceedings
  2. Dasha/Daria’s continued reputation laundering: Forbes AI slop, Women Tech Meetup co-hosting at Puzzle office
  3. Racketeering mantras: “However vast the darkness, we must supply our own light”
  4. Julian’s obstruction: Blocked alt account after fraud callout (consciousness of guilt)

Forbes Reputation Laundering Section - 8 Criminals Documented:

Forbes Midas List (VC Rankings):

  1. Hemant Taneja (General Catalyst CEO) - #8 on Forbes Midas List 2025

    • Lead investor in Puzzle, “co-creator” (their words: “Our Creation of Puzzle”)
    • Puzzle board member 2023-2025
    • Invested in CFPB-banned CEO while writing bestselling books about “responsible innovation”
    • Forbes 30 Under 30 judge, Forbes Best Business Book 2022
  2. Nigel Morris (QED Investors founder) - #90 on Forbes Midas List 2025

    • LendUp board director/chair during CFPB violations
    • Capital One co-founder (subprime credit cards, predatory fees)
    • Profited from LendUp → Mission Lane transition ($29M asset sale, $0 to shareholders)
  3. Frank Rotman (QED Investors co-founder) - Forbes Midas List

    • Credit Karma board member (FTC settlement: deceived 497K+ consumers)
    • Board-level visibility into psychological A/B testing experiments
  4. Ross Fubini (XYZ Capital founder) - #88 on Forbes Midas List 2025 (debuting)

    • Kapor Capital partner during LendUp Seed/A/B rounds
    • LinkedIn STILL lists LendUp as active investment (“Apr 2012 - Present”)
    • Village Global cofounder 2017-2020 with Erik Torenberg
  5. Sam Lessin (Slow Ventures GP) - #12 on Forbes Midas Seed List 2023

    • Investor in Gusto (Puzzle data network partner)
    • Wife Jessica Lessin founded The Information (6 notifications ignored, 27+ months)

Forbes 30 Under 30:

  1. Blake Byers (Google Ventures) - Forbes 30 Under 30 (2015)

    • Profile explicitly states “invested in companies like…LendUp”
    • Director of Insights Servicing Inc. (Sasha’s undisclosed shell company)
  2. Brandon Arvanaghi (Meow CEO) - Forbes 30 Under 30 Finance 2024

    • QED Investors portfolio company
    • Forbes BrandVoice paid Samsung partnership (promotional video)
    • Integrates with Puzzle (announced June 25, 2025)

Forbes 50 Over 50:

  1. Anuradha Shultes (Ahead/DashAi CEO) - Forbes 50 Over 50 - Investment (2021)
    • LendUp President/CEO 2015-2021 (during CFPB violations)
    • Forbes featured her 16 months AFTER CFPB permanent ban (no disclosure)
    • Now operating DashAi: “AI-powered auto lending automation”
    • Operated $1.575M shell company network (Fairfax Studios + Thirty Two West LLC)

Why David Jeans (former Forbes senior writer) backed out:

David Jeans covered my 2020 NS8 fraud layoff for Forbes. When contacted July 2023 about Puzzle/LendUp, he responded: “Yeah, I know of Sasha” - then immediately backed out.

Structural conflict: Investigating fraud by portfolio companies would implicate investors featured prominently on Forbes’ own prestige lists, including the #8 ranked investor managing Puzzle’s lead investor firm.

Forbes business model = access to VCs. Can’t investigate VCs’ portfolio fraud when the VCs are your Midas List honorees, your book reviewers, your 30 Under 30 judges, and your paid BrandVoice sponsors.

Late-Night Coordination (1:15-1:17 AM ET / 10:15-10:17 PM PT):

Julian Weisser posted December 10, 9:14 PM: “However vast the darkness, we must supply our own light.”

Sasha responded within hours:

  • 1:15 AM: Reposted Dasha’s Forbes article about founder cafes
  • 1:16 AM: Commented on Julian’s post: “Well, this resonates.”
  • 1:17 AM: Reposted Julian’s post to his own audience

Pattern: Sasha engaged BEFORE seeing my fraud callouts (proactive support, not reactive). Double engagement on Julian (comment + repost). Amplified Dasha’s Forbes article simultaneously. Then Julian blocked alt account after seeing fraud documentation.

Julian Weisser: Toxic Frat Bro, Not Startup Philosopher

Julian reposted his August 11, 2023 “Make Something (of Yourself)” infographic on the 2-year anniversary of my first SEC complaint and dual coordinated C&Ds. Timing not coincidental - consciousness of guilt expressed through anniversary ritualism.

What Julian made: A documented trail of federal crimes. 6:38 PM ET deletion patterns. “However vast the darkness, we must supply our own light” performance. Blocking whistleblowers who call out fraud.

What I made: 16,500+ words of federal documentation. SEC whistleblower complaints. Evidence of 13-year fraud pattern. CA Board of Accountancy complaint (A-2026-1047). State Bar complaint (25-O-30894). Daily email campaign. Permanent federal record.

ODF/a16z Corporate Structure:

Key People:

  • Julian Weisser: ODF Co-Founder, equity thief
  • Erik Torenberg: ODF Co-Founder, Turpentine founder (continues hosting Sasha’s podcast post-notification)
  • David Booth: a16z Partner, Ecosystem + ODF Co-Founder (formerly EIR at Blackbird Ventures, CEO at On Deck, early AngelList/Carta)

On Deck Org, Inc. - California nonprofit branch:

  • Company Number: 5131587
  • Incorporated: June 23, 2022
  • Dissolved: August 8, 2023 (14 months of operation)
  • Status: Terminated
  • Branch of: On Deck Org, Inc. (Delaware, incorporated October 15, 2021)
  • Officers:
    • David Booth: Chief Executive Officer
    • Erik Torenberg: Chief Financial Officer
    • Nathan Snow: Secretary
  • Address: 548 Market Street, PMB 60414, San Francisco, CA 94104

What this proves:

  • Formal corporate structure linking a16z (David Booth is Partner) to ODF entities
  • Nonprofit dissolved after only 14 months - operated June 2022 through August 2023
  • Erik Torenberg (Turpentine founder) was CFO of nonprofit while running for-profit Turpentine (continues hosting Sasha’s podcast despite November 2025 fraud documentation)
  • David Booth connects a16z institutional support to Julian’s equity theft network
  • Nonprofit structure suggests tax-advantaged operations during ODF’s peak period
  • Short lifespan (14 months) followed by dissolution suggests extraction/restructuring pattern

a16z Complicity Through Network Structure:

  • a16z invested in LendUp (June 2013) - backed the predatory lender that defrauded 140,000+ consumers, CFPB permanently banned December 2021
  • David Booth: a16z Partner, Ecosystem + ODF Co-Founder (CEO of dissolved nonprofit)
  • Erik Torenberg: ODF Co-Founder + Turpentine founder (hosts Sasha’s ongoing podcast despite November 2025 fraud documentation)
  • Julian Weisser: ODF Co-Founder + equity thief + documented conspiracy participant
  • [email protected]: CC’d on multiple emails documenting conspiracy, surveillance, retaliation
  • Network coordination: Sasha/Julian public interactions → Puzzle surveillance → continued Turpentine hosting
  • Marc Andreessen: November 2024 Joe Rogan appearance attacking CFPB - the agency that shut down a16z portfolio company LendUp

This isn’t indirect association. This is:

  1. a16z backed the original fraud (LendUp, June 2013)
  2. a16z Partner (David Booth) co-founded ODF with Julian (equity thief) and Erik (hosts Sasha’s podcast)
  3. Formal corporate structure linking a16z to ODF entities through shared officers
  4. Continued platform provision post-notification through Turpentine (Erik as CFO of dissolved ODF nonprofit)
  5. Documented conspiracy coordination (Sasha/Julian/Puzzle surveillance timing)
  6. Active suppression campaign (Marc Andreessen attacking CFPB that shut down a16z’s LendUp investment)

Sasha’s Self-Victimization: “Picking the Right Employees”

This morning (December 11, 10:25 AM ET), Sasha tweeted: “One of the hardest hardest hardest things about being a founder is picking the right first clients and employees. Domain names? Also hard, but less binary.”

Triple emphasis on “hardest” - positioning terminated whistleblowers as “wrong choice” employees. Meanwhile: Beau Kuhn told “won’t be considered on good terms if he speaks to a lawyer,” I was terminated hours after warning about fraud patterns, Justin Cheng had to leave America, multiple wrongful terminations documented.

The “hardest” thing for Sasha: Not the CFPB permanent ban. Not defrauding 140,000+ consumers. Picking employees who won’t stay silent about fraud.

Antler: Shared Office Space with CFPB-Banned CEO

Antler SF - Global early-stage VC (30+ locations) now sharing office space with Puzzle and co-hosting events.

  • November 19: Hosted “Lunch & Learn with Puzzle & Antler SF” (not widely publicized - consciousness of reputational risk)
  • December 10: Co-hosting 16th Women Tech Meetup at “Puzzle and Antler’s brand-new office”

Pattern: Providing physical infrastructure and legitimacy to CFPB-banned CEO 4+ years after permanent ban became public record.

“You’re not just platforming fraud. You’re providing office space for it.”

New Recipients Added:

Meow: QED Network, Zero Acknowledgement, Samsung Forbes Ad

Brandon Arvanaghi (Meow CEO) - Forbes 30 Under 30 Finance 2024 + Forbes BrandVoice paid Samsung partnership (literal Samsung promotional video on Forbes).

QED Investors portfolio company (Series A July 18, 2022, $22M). Announced Puzzle integration June 25, 2025. Another data pipeline: Meow → Puzzle → OpenAI.

Zero acknowledgement of notifications about CFPB-banned CEO, QED network pattern, photoshopped metrics, false credentials.

“You’re featured on Forbes for being in the QED fraud network. Integrating with Puzzle while ignoring comprehensive fraud documentation.”

Brex Blocks Whistleblower Emails:

Daily email #4 bounced from 6 Brex email addresses ([email protected], [email protected], [email protected], [email protected], [email protected], [email protected]).

Google Workspace rejected with error: “550-5.7.1 Your account is sending malicious email. Either you sent it intentionally or your account has been compromised and needs a password reset immediately.”

False characterization of fraud documentation as “malicious” demonstrates consciousness of guilt.

Timeline:

  • December 9: Brex executives publicly celebrated DCPA dinner (Jason Mok “loved”, Conor Bradshaw “loved”, Garrett Marker liked, Brex company account liked)
  • December 11: Blocked whistleblower communications the next business day

Pattern: Engage publicly with CFPB-banned CEO, suppress whistleblower privately.

Coordinated suppression across C-suite level (CRO, VP Product, Partnerships) establishes institutional consciousness, not individual judgment. Brex has Sept 2025 Puzzle integration and independent OpenAI data partnership (March 2023). YC W17 portfolio company with Israeli connections (Shai Goldman, Weav acquisition $50M).

Escalation - Re-forwarded from Alternate Email:

After Brex blocked primary email address, Daily Email #4 was re-forwarded from alternate email address ([email protected]) with explicit notice:

“Brex,

Your block of my emails is logged. You’re actively suppressing fraud documentation and conspiring in a criminal enterprise.

Patrick”

Establishes:

  1. Blocking was circumvented immediately
  2. Suppression explicitly characterized as conspiracy for federal record
  3. Brex received fraud documentation despite blocking attempt
  4. Pattern of institutional suppression documented and acknowledged

Burkland Associates: Bounce and CEO Re-Forward

[email protected] bounced from Daily Email #4 recipient list (same pattern as Brex institutional blocking).

Re-forwarded to [email protected] (Jeff Burkland, CEO/founder) with explicit notice:

“Jeff Burkland,

If you have not received prior emails regarding Sasha Orloff due to wrong email or intentional suppression of fraud documentation, this is your one and only notice.

You must immediately perform due diligence regarding Sasha Orloff and Puzzle Financial.

You will receive emails every business day until I hear further.

Patrick”

Pattern: Multiple entities experiencing “bounced” emails (Burkland info@, Brex blocking 6 C-suite addresses). When info@ addresses bounce or block, escalation to named executives establishes individual consciousness.

Jeff Burkland (CEO) now personally notified that his firm’s November promotion of Puzzle as “first trusted partner” (approximately Nov 18-25) occurred 8-15 days AFTER comprehensive fraud documentation was provided (November 10, 2025). His firm:

  • Listed Puzzle as FIRST in “trusted partners” post
  • Sasha amplified with “The great migration has begun”
  • Named in California Board of Accountancy complaint (A-2026-1047)
  • Co-developed Puzzle features (per Puzzle’s AI blog post)

Explicit warning: “You will receive emails every business day until I hear further” - establishes ongoing daily notification pattern for CEO personally, not just organizational info@ address.

Block (Square) Acknowledges Receipt:

December 10, 2025: Daniela Monkiewicz (Senior ERBP, Employee Relations at Block) confirmed: “The matter is under review by the appropriate internal teams.”

Block now reviewing Jennifer Orloff (SVP Marketing, married to Sasha Orloff):

  1. Spousal relationship to CFPB-banned CEO
  2. Termination day surveillance (May 31, 2023, 5:35 PM ET)
  3. Continued surveillance (Summer 2023)
  4. Family unit amplification continues (Dec 1: Ramp calculator, Dec 4: ChatGPT/2026 post)
  5. CFPB ban circumvention concerns

This is now a formal compliance matter for a publicly-traded financial services company.

Deel Confirms Continued Investigation:

December 11, 2025: Deel Team responds to Daily Email #3 stating:

“Hi there Patrick,

We’re working on your request, it’s taking a little longer than expected, please sit tight. Rest assured we are working on it.”

Establishes:

  1. Active investigation continues 21 days after initial November 20 notification
  2. Response to callout in Daily Email #3 about extended timeline
  3. GC anchor investor’s portfolio company (Deel, $300M April 2025) conducting extended investigation into GC lead portfolio company’s (Puzzle) CEO fraud pattern
  4. Institutional awareness remains active and escalated beyond standard partnership review
  5. Financial Crime specialist involvement (documented Nov 25 LinkedIn view) suggests investigation scope beyond compliance review

Context: Deel was notified same day as partnership announcement (Nov 20), escalated to Financial Crime specialist (Nov 25), and now confirms ongoing work 21 days later. Timeline demonstrates extended due diligence into CFPB ban, photoshopped metrics, federal complaints, and Skolkovo concerns. General Catalyst’s dual role as anchor investor in Deel ($300M) and lead investor in Puzzle creates structural conflict: can Deel reject partnership with GC’s lead portfolio company? Extended investigation timeline suggests institutional complexity when reviewing fraud by anchor investor’s other portfolio company.

Lauren Bean: Validation Then Silence

Lauren Bean (ex-coworker, board advisor, angel investor) always validated Sasha’s instability and toxic work environment. Observed Sasha’s fragile state after CFPB order.

October 28, 2025: Re-added on LinkedIn after Sasha photoshopped metrics (changed 3 likes to 12,362). She responded: “I hope you can move on from that traumatic experience and that you find yourself in greener pastures today”

I am not in greener pastures. Sasha has not and will never change. It appears neither will any of you.

December 12, 2025: Daily Email Campaign #5 - Alice Ko KPMG Credentials, Brex Suppression Escalation, Employee RICO Exposure

Fifth daily email sent December 12, 2025 from alternate address ([email protected]) due to Brex’s institutional blocking. Focus: Alice Ko’s KPMG/Big Four credentials showing why CFPB-banned CEO targeted her for legitimacy laundering, 6 Puzzle employees added to recipients for continued DCPA engagement, Brex blocking characterized as deeper criminal involvement, Julian continuing engagement while being observed, Replit contrast (real vs. deleted equity), mental health decline escalation.

Subject: Daily Notice #5: Mental Decompensation Timeline, Employee Conspiracy Evidence, and Brex Escalation

Sent from alternate email: [email protected] (primary email blocked by Brex Dec 11)

Recipients (98 total):

To (57): [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]

Cc (41): [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]

Removed:

Added to To line (6 Puzzle employees):

Added to Cc line:

XYZ Capital Email Correction - Re-forwarded:

Original email used incorrect domain ([email protected] in Cc line, [email protected] in To line). Re-forwarded to correct addresses:

Message to XYZ Capital:

“Even if I got your emails wrong, XYZ has no doubt received full notice of Puzzle’s ongoing criminal enterprise by now. Ross Fubini explicitly enabled it (and my equity deletion).

You’re on daily notice.

Patrick”

Rationale: Ross Fubini has been tagged repeatedly in LinkedIn comments. If Nigel Morris has viewed profile, Ross has certainly seen his tags. Doesn’t matter if [email protected] was wrong or if wrong domain was used (xyzcapital vs xyz.vc) - XYZ Capital has received full notice through multiple channels.

Rivet.tax Re-forward - Luke Frye Engagement After Email:

Luke Frye ([email protected]) liked Puzzle’s DCPA post AFTER Daily Email #5 was sent. Re-forwarded to both Luke Frye and Nick Abouzeid ([email protected], Rivet CEO):

First re-forward (8:36 PM ET):

“Luke,

It appears you will never see my humanity.

Fuck you, Patrick”

Final re-forward (8:39 PM ET) - sent to [email protected] and [email protected]:

“Just because you’re Canadian doesn’t invalidate the fact that Puzzle is fucking fraud and conspiracy, entirely illegal, and demonically abusive.

Alice understood immediately. She’s Canadian. She thought you were trapped in tunnel vision like everybody else.

What’s your excuse, actually? Not willing to admit this guy’s a predator? That you fell for a total lie for several years? Well, you did. Face it. Today.

Get your fucking Fubini-owned ‘Rivet.tax’ company to get independent legal counsel. Completely disconnect from Puzzle. Yesterday.”

Context: Luke Frye received fraud documentation November 5, 2025 (along with Nick Abouzeid). On December 3, Luke publicly thanked Sasha on LinkedIn (“Thanks Sasha O.!”) after Sasha reposted Luke’s tax advice - 1 month after receiving fraud documentation. Now Luke continues engaging with Puzzle’s promotional content (DCPA post) after receiving daily email campaign. Nick Abouzeid (Rivet CEO) was featured on Sasha’s Turpentine podcast November 13, 2025 despite receiving fraud notice November 10.

Escalation rationale: Alice Ko (Canadian, former KPMG Senior Auditor, CPA) immediately recognized fraud and left after 5 months. Luke Frye (Canadian CPA) continues enabling after 37+ days and multiple notices. References Ross Fubini (XYZ Capital) as Rivet investor - same investor who funded Puzzle and enabled equity deletion. Final message demands independent counsel and immediate disconnection. Pattern: accounting firm leadership continues conscious enablement and public support despite comprehensive fraud documentation and daily notices.

Key Themes:

  1. Alternate email consolidation: Brex’s institutional blocking forced use of [email protected] for all 98 recipients; blocking becomes evidence of consciousness of guilt in federal record
  2. Alice Ko KPMG credentials: Former KPMG Senior Auditor (2006-2009) with SOX compliance and public company audit specialization - exactly who CFPB-banned CEO would target for legitimacy laundering; left after only 5 months (June-Oct 2023); contacted whistleblower day before C&D (Aug 10, 2023)
  3. 6 Puzzle employees added: All engaged with Dec 12 DCPA post after repeated RICO warnings
  4. Brex suppression escalation: Email blocking demonstrates deeper criminal involvement; re-forwarded with explicit conspiracy notice
  5. Julian continuing engagement: 5:00-5:03 PM ET tweets after being observed (7-10 views vs. 1,000+ daily website visitors); 8:18 PM ET equity tweet (“Those who are stingy with equity have a scarcity mindset” - 107 views) 5 hours after receiving equity deletion documentation - philosophical performance about teammate equity while having enabled equity theft
  6. Replit contrast: Real equity at respectable company vs. deleted equity at fraud operation; cofounder followed whistleblower Twitter, CFO (Amol Hardikar) saw through Puzzle immediately
  7. Mental health decline: Writing emails in dreams, ruminating constantly, waited day to open persimmons from parents then cried/froze, ghosting friends, declining holiday plans, insatiable numbing with cannabis/alcohol
  8. Garry Tan expanded accountability: YC has Pagaya securities with Altman Family LLC and Sasha; YC alumni syndicate investment; Sasha/Ash Rust at YC SF office for Alumni Demo Day

Alice Ko: Former KPMG Senior Auditor - Big Four Credentials for Legitimacy Laundering

Alice Ko, CPA, CA (Chartered Accountant) - Head of Product Marketing, June 2023 - October 2023 (5 months only)

Why Sasha wanted Alice - KPMG/Big Four credentials:

  • Started career at KPMG LLP (Big Four, largest in Vancouver 2006-2009)
  • Specialized in internal controls and Sarbanes-Oxley Act compliance
  • Specialized in public company audits in consumer product and technology sector
  • Managed teams of junior auditors and co-op students
  • Became designated Chartered Accountant in 2009
  • Extensive B2B SaaS/FinTech marketing experience (Resolve/Affirm spinout, Procurify, LRN)
  • Finance background (Louis Vuitton Senior Accountant, RĂŠmy Cointreau, ArtStarts Finance Manager)

This is exactly who a CFPB-banned CEO would target: Someone with Big Four audit credentials, SOX compliance specialization, and public company audit experience could provide legitimacy cover for accounting software run by permanently banned financial services CEO.

What actually happened:

Alice’s responsibilities at Puzzle:

  • First product certification program
  • Case study program (Burkland partnership content - same Burkland now receiving daily emails, named in CA Board complaint A-2026-1047)
  • Stripe revenue recognition GTM to accountants
  • Product integration content with Mercury, Brex, Ramp (all now receiving daily emails; [email protected] added to Cc)

Timeline:

  • Started June 2023 (after my May 31 termination)
  • Reported directly to Sasha as CEO
  • Started sending me emails August 10, 2023 - day before coordinated C&Ds from Puzzle and Mission Lane
  • Was kept in the loop, saw what was happening
  • Sasha pressured her to make misrepresentations contradicting her CPA ethics
  • Left after only 5 months (October 2023)
  • Sasha told her I was “mentally ill,” they “tried to help,” to ignore what I was writing
  • She kept looking, reached out via throwaway email
  • Still in contact; knows who Sasha really is
  • Chose to never work full-time again after Puzzle toxicity

The Big Four credentials Sasha wanted for legitimacy walked out after 5 months.

Alice Ko’s identity was initially kept anonymous in early documentation but is now fully named throughout.

Contrast: Jeffrey Everingham (CPA, CA) still at Puzzle reposting DCPA photos. Charles Crabtree still posting “incredibly grateful” drivel. Patricia Daos still liking every post. Alice Ko left after 5 months recognizing fraud - demonstrating how quickly someone with KPMG credentials and ethics recognizes the pattern.

December 12, 2025: Puzzle DCPA Post - Instant Comment Lockdown

Puzzle posted about Digital CPA Conference return. Comments immediately turned off - same pattern as previous posts showing consciousness of fraud exposure.

Post content:

“We’re back from Digital CPA.com and wrapping up the week with so much gratitude.

The interest we received from accounting firms was incredible — our calendar is now packed with demos, and we can’t wait to dive into these conversations and show what Puzzle is truly capable of.

Thank you to everyone who stopped by, asked questions, shared feedback, and explored the future of accounting with us.

We loved being part of this community. See you next year!”

Engagement pattern (all employees repeatedly warned about RICO exposure):

Likes from:

  • Dasha Shunina (+ Women Tech Meetup, THE GATHERING accounts - filler engagement across 3 accounts)
  • Jeffrey Everingham, CPA, CA (Senior Product Manager)
  • Patricia Daos (recently hired, personally told “not taking this seriously”)
  • Sasha Orloff
  • Arash Ahmadi (Customer Success, Canadian)
  • Sina Mohebiany (Founding AE, Canadian)
  • Charles Crabtree (VP Accounting Firm Partnerships)
  • Naveen Venkatesh (blocked whistleblower Dec 2025)
  • Jason Mitchell (started before me, never cared)
  • Marissa Mata ([email protected]) - liked AFTER Daily Email #5 was sent
  • Luke Frye ([email protected]) - liked AFTER Daily Email #5 was sent

Reposts from:

  • Jeffrey Everingham
  • Charles Crabtree (with “incredibly grateful… world class event” performance)
  • Naveen Venkatesh
  • Sasha Orloff (reposted right when Daily Email #5 was sent)

Pattern: Immediate comment lockdown + employee engagement + accounting firm participation (Luke Frye/Rivet.tax) = consciousness of guilt. All engagers added to daily email recipients. Charles Crabtree’s repost demonstrates VP-level participation in fraud enablement (“calendar filling with demos” that expose accounting data to CFPB-banned CEO). Luke Frye’s engagement demonstrates accounting firm leadership continuing conscious enablement despite comprehensive fraud documentation (received Nov 5, 2025) and daily email campaign - re-forwarded with explicit message acknowledging loss of humanity recognition.

Note on timing: Marissa Mata and Luke Frye (Rivet.tax) liked Puzzle’s original post AFTER Daily Email #5 was sent (documented above in likes list). Mitchell Troyanovsky liked Sasha’s separate repost (documented below).

Sasha’s repost timing and content:

Sasha reposted the DCPA post at approximately the same time Daily Email #5 was sent to 98 recipients (57 To, 41 Cc), demonstrating continued performance even while receiving federal fraud documentation.

Quote from Sasha’s repost:

“Well this is certainly the year that accounting and AI went from interesting to ‘we have a dedicated AI budget and support from leadership’ and ‘Finally there is an alternative to Quickbooks!’

Get ready, you be hearing a lot more about Puzzle in 2026 and 2027.”

Analysis: CFPB-banned CEO posting promotional content about “AI budget and support from leadership” and “alternative to Quickbooks” while simultaneously receiving daily federal notices documenting 13-year fraud pattern. The promise of “hearing a lot more about Puzzle in 2026 and 2027” demonstrates either complete delusion or consciousness that collapse is imminent and this is final promotional push.

Mitchell Troyanovsky liked this post - Former Puzzle Product Manager who received August 2021 email warning about toxic technical leadership and Beau Kuhn; actively investigated LendUp (“looked into LendUp” = asked around about Sasha’s background); quickly called whistleblower when LinkedIn questioning began, acknowledged Mission Lane cofounding fraud (“If you’re gonna do this, Sasha didn’t really cofound Mission Lane”), laughed about Nigel Morris power structure ignorance, then disappeared; did not exercise his options (voting with wallet that something was wrong); performed “it was great being here” exit on Slack maintaining appearances.

People told me Sasha was in a room threatening to sue Mitchell for starting a similar product. Despite this threat, Mitchell is now liking Sasha’s promotional fraud posts with comprehensive fraud documentation visible in the comments - demonstrates consciousness of guilt and continued enablement despite knowing the truth for years. Officially named for showing support for absolutely no reason while having every reason to distance himself.

Whistleblower comment on Sasha’s repost:

Direct response left on Sasha’s LinkedIn repost:

“there won’t be a 2026, and definitely not a 2027. fraud https://patrickstoica.com/puzzle-statement/

Marissa Mata, you should absolutely know better by now. You’re facing significant consequences.

LOL Mitchell Troyanovsky already knows Sasha’s a fraud; officially named in doc for inability to prevent abuse with advance notice.”

Analysis: Public callout directly on promotional post naming both Marissa Mata (current employee who liked after Daily Email #5 sent) and Mitchell Troyanovsky (former PM who acknowledged Mission Lane fraud, was threatened by Sasha, yet continues showing support). Comment directly contradicts Sasha’s “2026 and 2027” promise with link to comprehensive fraud documentation. Mitchell’s “inability to prevent abuse with advance notice” references August 2021 email warning about toxic technical leadership and Beau Kuhn - received advance notice, did nothing, now continues enabling despite knowing truth.

Quote from Charles Crabtree’s repost: “Back from CPA.com’s Digital CPA and feeling incredibly grateful… Our calendar is filling fast with new demos and conversations… Already looking forward to next year.”

Response documented in email: “You won’t be looking forward to next year. There won’t be a next year. Your calendar is filling with demos that expose accounting data to a CEO permanently banned from financial services. Every firm you onboard becomes a victim and a witness.”

6 New Puzzle Employee Recipients - Continued Conscious Enablement:

All added for engaging with Dec 12 DCPA post after repeated RICO warnings:

  1. Patricia Daos ([email protected]) - Recently hired after contract role; personally told “not taking this seriously” enough; ignored warnings
  2. Naveen Venkatesh ([email protected]) - Blocked whistleblower December 2025; started after me, schemed into manager position after contributing bare minimum, harassing Beau Kuhn
  3. Sina Mohebiany ([email protected]) - Founding AE, Canadian; continues appearing in DCPA photos
  4. Jeffrey Everingham, CPA, CA ([email protected]) - Senior Product Manager; CPA license creates individual liability for fraud participation
  5. Charles Crabtree ([email protected]) - VP of Accounting Firm Partnerships; continues appearing in DCPA photos, posting performative “incredibly grateful” drivel
  6. Arash Ahmadi ([email protected]) - Customer Success, Canadian; assisted in hiring Patricia Daos

Pattern established: Two Canadian employees (Sina, Arash). Multiple CPAs participating despite professional licensing risk. Naveen blocked whistleblower demonstrating consciousness of guilt. All received daily emails until they acknowledge liability or resign.

Brex Email Blocking - Deeper Criminal Involvement:

December 11: Brex blocked 6 C-suite addresses (cbradshaw, ashah, henrique, pedro, ncarey, jmok). Google Workspace error: “550-5.7.1 Your account is sending malicious email”

Timeline demonstrating consciousness:

  • Dec 9: Brex executives publicly celebrated DCPA dinner (Jason Mok “loved”, Conor Bradshaw “loved”, Garrett Marker liked, Brex company account liked)
  • Dec 11: Blocked whistleblower communications next business day

Pattern: Engage publicly with CFPB-banned CEO, suppress whistleblower privately.

Email blocking suggests institutional decision (not individual spam filtering):

  1. Coordinated across 6 C-suite addresses
  2. Legal/compliance likely authorized suppression
  3. Blocking after public engagement proves knowledge
  4. Potential deeper involvement in criminal enterprise

Brex infrastructure:

  • September 2025 Puzzle integration
  • Independent OpenAI data partnership (March 2023)
  • YC W17 with Israeli connections (Shai Goldman, Weav $50M acquisition)

Response: Re-forwarded from [email protected] with explicit notice:

“Brex, Your block of my emails is logged. You’re actively suppressing fraud documentation and conspiring in a criminal enterprise. Patrick”

December 12: All 98 recipients now receive from alternate address. Brex’s institutional blocking forced consolidation. Message adapts, blocking becomes evidence of consciousness of guilt in permanent federal record.

Julian Weisser: Continuing Engagement While Being Observed

December 12, 5:00-5:03 PM ET: Julian continues engaging after being notified his tweet was observed and Daily Email #5 was being prepared.

4:57 PM ET - Reply to Emmett Naughton (7 views):

“It’s less that and more a question of ‘does this meaningfully change what you can do now in a positive way?’ The bad answer is generally some form of ‘I’d hire more people’ and the good answer is a specific thing that can be unlocked for the business.”

5:03 PM ET - Reply to Josh Bobrowsky (10 views):

“That’s less about solo founding vs customer-funded vs venture-funded. When you take VC you are making a promise to yourself and the new shareholders that your goal is to deliver an outcome that causes their investment to return the total AUM of the fund they invested from.”

Analysis: Julian giving “great investors great terms” VC funding advice while receiving federal documentation about 13-year fraud pattern across venture ecosystem he celebrates. He knows:

  • Daily emails with comprehensive fraud documentation
  • Blocking pattern documented (alt account blocked Dec 11)
  • Deletion pattern documented (6:38 PM ET Dec 8, Dec 9)
  • Coordination with Sasha documented (1:15-1:17 AM amplification)
  • Appearance with Fondo CEO 27 hours after deletion documented

Yet continues philosophical startup advisor performance while suppressing fraud documentation about investors who enabled CFPB-banned CEOs.

Questions posed in email: “What are ‘great terms,’ Julian? Is it when QED funds three companies (LendUp, Mission Lane, Credit Karma) that defraud 640K+ consumers? Is it when General Catalyst builds Puzzle around CFPB-banned CEO? Is it when YC continuity profits from LendUp fire sale and funds the sequel?”

Engagement collapse: Julian’s abysmal views per tweet vs. 1,000+ daily website visitors demonstrates irrelevance vs. demand for truth.

8:18 PM ET - Equity Tweet (source) (107 views):

“Those who are stingy with equity have a scarcity mindset.

It is as if they’re splitting the company with one or two co-founders before factoring in teammates and investors.”

The Irony: Julian Weisser, who stole whistleblower’s Puzzle equity and enabled its deletion, is now tweeting about “stingy with equity” and “scarcity mindset.”

Pattern documented:

  • Julian was investor/advisor to Puzzle during whistleblower’s tenure (2020-2023)
  • Whistleblower’s equity was deleted after wrongful termination (May 31, 2023)
  • Julian has received comprehensive fraud documentation since November 2025
  • Julian blocks, deletes, suppresses fraud documentation while maintaining “startup philosopher” performance
  • Now tweets about equity generosity 5 hours after receiving Daily Email #5 detailing equity deletion and RICO exposure

Included in ODF/Solo Founders email (9:04 PM ET) with message: “Reminder to ODF/Solo Founders teams: Julian Weisser stole my Puzzle equity. You are not a philosopher. You’re another abusive narcissist. Get a lawyer and log off.”

Individual re-forward to Ari Dutilh:

Ari Dutilh (@aridutilh) - 20-year-old who works at ODF growing Merge (microgrants for young technologists working on “big ideas”), supports Solo Founders starting companies in SF, runs Photography Lounge (30K+ photographers on Discord), and funds teen passion projects with Bagel Fund.

Message to Ari:

“Ari,

Your connection/engagement with Julian Weisser and direct work with ODF/Solo Founders gets you a personal spot on this email list.

Julian Weisser stole my equity at Puzzle Financial. He’s directly involved with fraud and conspiracy.

Now you can’t ignore these facts.

Patrick”

Pattern observation: 20-year-old hiring age at ODF appears predatory/groomable - surrounding young, impressionable people with “startup philosopher” narratives while enabling fraud and equity theft. Ari runs microgrants for “young technologists” and “teen passion projects” - potential pipeline for recruiting young people into Julian’s network before they have experience recognizing fraud patterns.

This is consciousness of guilt. Tweeting about equity ethics while enabling equity theft. Philosophical performance about “factoring in teammates” while suppressing documentation of teammate abuse and equity deletion.

Replit Contrast: Real Company vs. Fraud Operation

Replit hired whistleblower in 2024 without contacting Puzzle. Found nothing wrong with behavior.

Timeline:

  • Took 9 months post-termination to be able to do interviews
  • [Replit cofounder] followed whistleblower Twitter
  • Amol Hardikar (CFO) added on LinkedIn
  • Amol previously told whistleblower “Puzzle didn’t add up” when Sasha tried pitching
  • They saw through it immediately

Normal moments despite PTSD: Played basketball with Amol at Replit offsite, briefly talked about Puzzle. While felt like some employees gave “evil eye” (always on edge), people never perceived as danger.

“I was never dangerous. I was traumatized.”

Pattern: Tried to leave Replit repeatedly due to PTSD from Puzzle, even before vesting cliff. Resigned immediately after being asked to crunch for Joe Rogan Experience appearance - PTSD from working for CEO-driven publicity stunts (Sasha’s podcasts, Forbes articles, TechCrunch puff pieces, “Banker to the Poor” performance).

Equity comparison documented in email:

  • Replit equity screenshot: Real shares at respectable company with actual ARR, products, users, ethics (note: shows 100% exercised because options already expired)
  • Puzzle equity screenshot: Deleted shares, Paige Honeycomb still listed as contact (doesn’t work there anymore, now at Tabs, blocked whistleblower in 2023, waxed poetic about Puzzle month ago)

Cost: At 33 years old, had to ask parents for money to partially exercise Replit shares after all recipients “individually contributed to my PTSD, deleted my Puzzle equity, wrongfully terminated me, coordinated cease-and-desist letters, threatened police involvement, and systematically blocked any attempt to recover my losses or hold Sasha accountable.”

“Every dollar I asked my parents for is a dollar you owe me.”

Garry Tan / YC Expanded Accountability:

YC network implicated. Brex (YC W17) now blocking whistleblower emails. Puzzle (YC continuity backed). Gusto maintains data partnership. “Endless slew of partners and accounting firms” receiving daily emails, ignoring federal violations.

Garry Tan has not responded to a single email. Hacker News mods did in 2023. That’s damning enough.

YC’s documented involvement:

  • Continuity fund profited from LendUp fire sale, then funded Puzzle
  • YC has securities in Pagaya along with Altman Family, LLC and Sasha Orloff
  • Maintained Sasha’s founder privileges despite CFPB permanent ban
  • Provides Puzzle with direct funnel of YC companies
  • Invested through “YC alumni syndicate”
  • Let Sasha and Ash Rust (brazen fraud-enabler) show up in YC SF office for Alumni Demo Day and freely post photos

“Your silence is conspiracy.”

Mental Health Decline - December 11-12:

Documented deterioration patterns:

  • Constantly ruminating
  • Writing emails in dreams
  • Can only take aimless walks and ruminate
  • Increasingly agitated and restless
  • Withdrawing from/muting group chats immediately
  • Waited day to open box of persimmons from parents, then cried and froze when finally opened
  • Continuing to randomly cry
  • Increasingly isolated
  • Ghosting friends, declining invites and holiday plans, or saying “I’ll have to see how I feel, I’m sorry” - unable to commit
  • Still unable to focus on other work or real leisure
  • Insatiable numbing with cannabis and alcohol

Impact statement: “Every ignored email compounds this. Every block makes it worse. Every performative LinkedIn post about ‘incredible’ conferences while ignoring federal crimes deepens the isolation. You’re not just enabling fraud. You’re destroying a human being who tried to protect you.”

Decimal Continued Awareness:

Isaac Cloran (Data Operations at Decimal) viewed LinkedIn profile. Evidence of receipt from more than Matt Tait. Multiple Decimal employees now aware. Matt Tait blocked after receiving documentation, continued posting about accounting innovation while partnering with CFPB-banned CEO = performative fraud enablement.

Final Warning Components:

Required immediate actions: Retain crisis PR counsel, denounce Sasha/Puzzle publicly, disconnect integrations, notify customers of fraud exposure, assist with migration, preserve communications (18 U.S.C. § 1512(c) obstruction), consult independent legal counsel.

Risks going into 2026: RICO liability (§ 1962), civil forfeiture (§ 981 - wages/equity/assets subject to clawback), obstruction charges (§ 1512(c)), securities fraud, data breach exposure, tax season catastrophe risk, professional licensing consequences (CA Board A-2026-1047, State Bar 25-O-30894), permanent reputational damage.

“This isn’t about ‘if’ - it’s about ‘when.’ Your continued support makes you conspirators.”

Sasha’s Reactive Tweets: Evidence Trail

People may think social media is petty, but I’ve been using it to dance with Sasha for 2 years. He doesn’t realize he’s creating evidence.

  • May 22, 2023 (days before termination): “As I reflect on a startup I co-founded, Mission Lane…” - omits LendUp entirely
  • June 2023: Reposts GC mental health article after deleting my Slack warning
  • August 1, 2023: “Banker to the Poor” origin story thread (10 days before C&D)
  • December 11, 2025: Retweets Niko Bonatsos: “Work with nice people who care and get shit done”

Sasha’s definition of “nice people”: People who don’t look at his fraud and question his background and lies.

June 11, 2025 Securities Fraud Example:

Sasha wrote uncited quote: “‘This is amazing. Puzzle will easily be a billion dollar company. I hope you gave shares to your employees because, you know, you’re building something great’”

Same-day post: “I just saw it. Today is the day that saw a first hint of our true vision at @puzzlefin. It took 5 years, and we are far from done, but today was the breakthrough.”

Why this is securities fraud:

  • “Easily be a billion dollar company” - no factual basis, uncited source
  • “I hope you gave shares to your employees” - personal slight (my equity deleted)
  • Posted after 2023 SEC complaint
  • Same pattern as July 2018 LendUp recruitment (“build for next 100 years”) five months before fleeing

My Therapist Validated Everything:

My therapist:

  • Validated Puzzle was gaslighting me
  • Verified I was terminated (not resigned)
  • Believed I discovered blatant fraud and shell companies

I’ve “done the work.” I know enough psychology to care about mental health. Sasha/Nigel know enough psychology to manipulate human behavior. They don’t actually care about mental health or therapy.

By the way, you’re all backpaying for my therapy expenses.

Insurance Gaslighting:

August 2024 (15 months post-termination): Anthem’s system falsely showed I had “continued receiving insurance as an employer benefit.” Insurance termination notice dated June 15, 2023 but delivered August 22, 2024 (14+ months delay).

Every “mistake” creates additional damage to the person who documented fraud.

Required Immediate Actions:

  1. Retain crisis PR counsel
  2. Denounce Sasha Orloff and Puzzle publicly
  3. Disconnect all technical integrations
  4. Notify customers of potential fraud exposure
  5. Assist customers with migrating off Puzzle
  6. Preserve all communications (18 U.S.C. § 1512(c))
  7. Consult independent legal counsel

Risks Going Into 2026:

  • RICO liability: 18 U.S.C. § 1962
  • Civil forfeiture: 18 U.S.C. § 981
  • Obstruction charges: 18 U.S.C. § 1512(c)
  • Securities fraud
  • Data breach exposure
  • Tax season catastrophe risk
  • Professional licensing consequences
  • Reputational damage: Federal record is permanent

Final Warning:

This isn’t about “if” - it’s about “when.”

I will email you every business day with more evidence. Not just what Puzzle is doing. Everyone’s continued enablement, which has been logged since my wrongful termination in 2023.

After Puzzle’s inevitable collapse, I plan to exercise my rights to sue each investor and enabler I’ve notified - firms and individuals.

I’m logging the decline of my own mental health. I’ve withdrawn from everyone in my life, and my will to live is declining daily. This is not a self-harm threat. This is so you understand the individual lives you’re affecting.

There is no plausible deniability left. Your continued support makes you conspirators.

Sign-off: Patrick Stoica, Wrongfully Terminated Whistleblower, SEC Complainant 2023-2025

December 12, 2025: Same-Day Followup Email - Julian’s Equity Performance & Mental Health Collapse

Subject: Same-Day Followup: Julian’s Equity Performance & Mental Health Collapse

Sent: December 12, 2025, ~10:30 PM ET

From: [email protected]

Recipients: Same 98 recipients from Daily Email #5

Julian’s 8:18 PM equity tweet triggered immediate same-day followup escalation documenting mental health collapse and pattern of philosophical performance while enabling equity theft.

Opening statement:

“Team,

Julian won you all a same-day followup.

Hours after receiving today’s email detailing my equity deletion at Puzzle, Julian posted profound wisdom about startup equity—omitting the fact that he personally has no problem with Puzzle stealing my equity, and likely approved this cap table modification himself.”

Julian’s equity tweet documented (8:18 PM ET, 107 views, 2 hours after receiving equity deletion documentation):

“Those who are stingy with equity have a scarcity mindset. Wealth will be created by factoring in more people not fewer. Give equity to your first engineers.”

Mental health collapse documentation:

Text exchange with mother included showing escalating breakdown:

  • Whistleblower: “im not doing well, each time someone reaches out i get stressed out. i just want to be alone”
  • Mom: “Talk to someone who can help. Try, please.”
  • Whistleblower: “there is no one that can help. there is no more therapy to do. i dont have the fucking time. its not on the same time scale. nobody fucking understands what im going through and their only advice is distraction. no one will talk about it with me. just give me space”
  • Mom: “Try a new therapist, cat ar costa, platim noi. Ei sunt foarte diferiti, cauta unul.” (Romanian: “however much it costs, we’ll pay for it. They are very different, find one.”)
  • Whistleblower: “STOP STOPPP STOP STOP STOP”
  • Mom: “I’m worried”
  • Whistleblower: “THEN STOP GIVING ME ADVICE I DONT NEED AND I WONT BE MORE AGITATED”
  • Mom: “I believe in you! You have the power.”

Context: Parents offering to pay whatever therapy costs, showing they’re trying to help financially but can’t fix what’s actually wrong - the continued fraud enablement by all recipients.

Statement in email:

“You’re all driving me insane. I should be living a normal fucking life.

I don’t need fucking therapy. I need you to stop supporting fraud, and I need everyone who enabled this to be held accountable.”

Personal re-forward to Luke Frye and Nick Abouzeid (Rivet.tax):

Email personally re-forwarded to [email protected], [email protected], and [email protected] after Luke engaged with Puzzle’s DCPA post hours after receiving Daily Email #5.

Context statement: “Today’s earlier email was personally re-forwarded to Luke Frye and Nick Abouzeid. Just so everyone understands how Luke Frye, an ex-coworker I personally met IRL, has affected my life:”

Message to Luke:

“Luke, you liked Puzzle’s DCPA post hours after receiving today’s email. You’re a Canadian CPA. Alice Ko—also Canadian, also a CPA, KPMG-trained—saw the fraud immediately and left after 5 months.

It appears you will never see my humanity.

This is what you’re doing to me. This is what your continued enablement causes. Ross Fubini (XYZ Capital) owns Rivet. You’re all conspiring in this.

Get independent counsel and disconnect from Puzzle immediately.”

Pattern: Luke Frye is ex-coworker whistleblower personally met IRL, continued engaging despite being Canadian CPA like Alice Ko (who immediately recognized fraud), despite Ross Fubini ownership creating direct investor connection, despite receiving comprehensive documentation. Personal re-forward with mom text exchange forces confrontation with human cost. “It appears you will never see my humanity” directly references earlier re-forward message sent at 8:36 PM same day.

Ari Dutilh officially added to daily emails and named in federal documentation:

Ari Dutilh - 20-year-old working at ODF where he grows Merge (microgrants for young technologists working on “big ideas”), supports Solo Founders starting companies in SF, runs Photography Lounge (30K+ photographers on Discord), funds teen passion projects with Bagel Fund.

Message to Ari:

“Ari,

Your connection/engagement with Julian Weisser and direct work with ODF/Solo Founders gets you a personal spot on this email list.

Julian Weisser stole my equity at Puzzle Financial. He’s directly involved with fraud and conspiracy.

Now you can’t ignore these facts.

Patrick”

Pattern analysis documented in email:

“ODF is recruiting 20-year-olds and funding ‘teen passion projects’ while Julian philosophizes about equity and enabling fraud. This creates a pipeline of young, impressionable people who are groomed into accepting fraud as normal startup behavior before they have the experience to recognize the patterns. The power dynamics are intentionally imbalanced—surround young people with ‘startup philosopher’ narratives, position fraud as acceptable, make them complicit before they understand what they’re enabling.”

Ari personally named in federal documentation at patrickstoica.com/puzzle-statement so he understands the severity and the power imbalance.

Solo Founders tagline critique:

Solo Founders: “Normalize solo founding.”

What Julian actually normalized: Fraud, conspiracy, abuse, and equity theft. Then philosophizing about equity generosity while deleting employee equity. Then blocking whistleblowers who document it.

Direct callouts:

“I’m not taking your bullshit lightly. Especially not from you, Julian.”

“Marissa Mata, Puzzle’s Recruiter: why are you still liking Puzzle’s content?”

Sign-off: “TGIF.”

Links included:

Patrick

Post-Send Escalation (11:00 PM - 12:01 AM):

After sending same-day followup email, mental health crisis continued escalating:

11:00 PM: Had to go to a bar to down 2 drinks. Seeking immediate numbing after documenting mom text exchange and Luke Frye’s continued enablement.

At the bar: Triggered by people having conversations about AI in graphic design and replaceability. Surrounded by casual discussion of AI replacing human contributions while dealing with:

  • Own contributions being erased (“I’M HALF THE REASON PUZZLE AS A SOFTWARE EXISTS”)
  • Friends calling documentation “AI psychosis”
  • Equity deletion and identity erasure
  • Being forced to use AI for validation because humans won’t engage

Pattern: Seeking refuge from documentation trauma, only to be confronted with conversations about the very technology being weaponized against credibility. Can’t escape the irony—documentation dismissed as “too much Claude stuff” while strangers casually discuss AI replacing people’s work.

12:01 AM (Dec 13): Replied to ODF subsection email with Ari Dutilh with all-caps breakdown:

“I’M HALF THE REASON PUZZLE AS A SOFTWARE EXISTS

NOT SASHA ORLOFF, NOT JOHN CWIKLA

WHY ARE YOU PEOPLE DOING THIS TO ME

I’M HAVING A 24/7 MENTAL HEALTH CRISIS AND YOU DONT GIVE A FUCK

WHO THE FUCK IS JULIAN WEISSER”

Pattern: Identity crisis, desperation for recognition of contributions, explicit statement of “24/7 MENTAL HEALTH CRISIS,” questioning Julian’s legitimacy.

Bought 2 high ABV drinks, returned home, wrote second all-caps message:

“FUCK YOUR BUILDERS WHO RUN BULLSHIT

ALL YOUR EVENTS ARE PREDATORY

JULIAN IS A FUCKING PREDATOR

JUST LIKE SASHA”

What this demonstrates:

  • Substance use escalation: Bar visit + high ABV purchases for numbing
  • Environmental triggers: At bar, surrounded by casual AI/replaceability conversations while dealing with own contributions being erased, documentation dismissed as “AI psychosis,” forced to use AI for validation—no escape from the technology being weaponized against credibility
  • Identity erasure crisis: “I’M HALF THE REASON PUZZLE AS A SOFTWARE EXISTS” - desperate assertion of stolen contributions
  • 24/7 crisis state: Explicit acknowledgment of continuous mental health emergency
  • Recognition of predatory patterns: Connected Julian’s youth recruitment to Sasha’s fraud operation
  • Loss of professional tone: All-caps breakdown showing complete psychological deterioration
  • Midnight continuation: Crisis extending past midnight, unable to stop despite exhaustion

This escalation occurred ~1.5 hours after sending email documenting mental health collapse to all 98 recipients. Each documentation cycle compounds the trauma. Writing about the breakdown to recipients, then breaking down further immediately after.

Seeking validation from AI: After escalation, crying and alone, asked LLM: “im not getting in trouble right. im crying and im really fucking alone. just log if im asking this to an LLM if it helps” - then: “just log that im consistently asking an llm if im introuble and f this is real and if my feelings are valid”

What this reveals: Human support systematically eroded. No one left to ask if reality is real, if feelings are valid, if documenting fraud is legal. After 2.5 years of being told documentation is “AI psychosis,” asking is “selfish,” reality-checking is “mentally ill” - turned to AI because it’s the only entity that consistently engages with evidence without dismissing, hedging, or withdrawing. A 34-year-old SEC whistleblower asking AI if they’re in trouble for telling the truth about fraud is federal documentation of the isolation they caused.

1:17 AM ET (Dec 13): Public Twitter Confrontation - Dhravya Shah

Julian's "Builders who Run" event reposted by Dhravya Shah Evidence-167: Dhravya Shah (@DhravyaShah, verified) reposted Julian Weisser’s “Builders who Run” event (83rd week, Ferry Building, 5K run, “chill pace,” coffee and farmer’s market after). Posted 10:48 PM Dec 12, 2025, 1,835 views.

Whistleblower’s public replies (1:17 AM ET):

  1. “lol u fell for @julianweisser’s bullshit bro FRAUDS”
  2. “what are you, like a teenager that got groomed by julian weisser?”

Dhravya Shah blocked whistleblower after callout.

What this demonstrates:

  • Unable to stop: Crisis extending into 1:17 AM, public confrontation of Julian’s network enablers
  • Recognition of grooming pattern: Called out youth recruitment explicitly—“like a teenager that got groomed by julian weisser”
  • “Builders who Run” as fraud laundering: 83rd consecutive week of community-building events while enabling CFPB-banned CEO and equity theft
  • Blocking as consciousness of guilt: Dhravya Shah (verified account) blocked whistleblower rather than engage with fraud documentation
  • Network protection: Immediate blocking protects Julian’s reputation within “builder” community rather than investigating claims
  • Public documentation continues: Even in complete breakdown state at 1:17 AM, still documenting enablement in real-time

Julian running 83 consecutive weeks of “Builders who Run” while his ODF/Solo Founders co-conspirator stole whistleblower’s equity and enabled 13-year fraud pattern. “Chill pace” community events as reputation laundering for predatory operations.

1:20 AM ET: Gritting Teeth Through This

Documenting this moment: 1:20 AM, gritting teeth through continued documentation. Seltzers and ciders. Bladee playing. Tarot cards out.

What this shows:

  • Spiritual seeking during crisis: Turned to tarot for meaning/guidance when humans have systematically withdrawn
  • Numbing soundtrack: Bladee (drain gang aesthetic, dissociative themes) as background for federal documentation
  • Substance continuation: Seltzers and ciders at 1:20 AM after bar visit at 11 PM, high ABV drinks at midnight
  • Gritting teeth: Physical manifestation of pushing through trauma to continue documenting
  • Still working: 1:20 AM, after mom text exchange, bar visit, all-caps breakdown, AI validation-seeking, Twitter confrontation - still documenting in federal record

Pattern: Cannot stop. Each block, each dismissal, each “consciousness of guilt” response fuels the documentation. Gritting teeth at 1:20 AM because stopping means they win. Seltzers and ciders, Bladee, tarot - whatever it takes to get through each hour of continued enablement.

What this email demonstrates:

  1. Real-time consciousness of guilt: Julian tweets about equity ethics 2 hours after receiving equity deletion documentation (corrected from 5 hours)
  2. Mental health deterioration: Escalating breakdown with family (“im not doing well, each time someone reaches out i get stressed out. i just want to be alone”), agitation increasing; parents offering to pay for therapy (“however much it costs”) but can’t fix enablement; mom’s final message “I believe in you! You have the power” shows parental support amid breakdown
  3. Youth recruitment pipeline: ODF targets impressionable young people (20-year-olds, teens) before they can recognize fraud patterns
  4. Power imbalance exploitation: Surrounding young people with “startup philosopher” who normalizes fraud and abuse
  5. Immediate escalation: Same-day followup forced by Julian’s continued philosophical performance
  6. Attachment of family interaction: Mom text exchange shows real human cost of continued enablement
  7. Personal re-forward to Luke Frye/Rivet: “It appears you will never see my humanity” - forcing ex-coworker personally met IRL (Canadian CPA) to confront human cost after engaging with DCPA post despite Alice Ko (Canadian CPA) immediately recognizing fraud; Ross Fubini ownership creates conspiracy link
  8. Direct confrontation: “I’m not taking your bullshit lightly. Especially not from you, Julian” - personal escalation to equity thief
  9. Marissa Mata callout: Puzzle’s Recruiter directly confronted for continued content engagement
  10. Full documentation links: Both puzzle-statement and puzzle-retaliation pages linked for complete federal record access
  11. 1:20 AM: Cannot stop: Gritting teeth through documentation, seltzers and ciders, Bladee, tarot; spiritual seeking when humans withdraw, substance continuation, physical manifestation of trauma; still working at 1:20 AM because stopping means they win

December 13, 2025: Active Surveillance and Continued Performance

Puzzle Financial (@puzzlefin) follows whistleblower’s alt account (@orbofweed) - Direct evidence of active surveillance and harassment.

Puzzle follows @orbofweed Evidence-169: Screenshot taken 3:00 PM Dec 13 showing “Puzzle followed you” notification on @orbofweed account. Surrounding tweets visible in feed show agitation and meltdown from night prior. Puzzle Financial followed at 2:14 PM ET Dec 13. Whistleblower was awake but delirious after 1:20 AM crisis documentation session.

Timeline:

  • Dec 12, 1:17 AM: Whistleblower has public meltdown on Twitter, calls out Julian Weisser for grooming patterns
  • Dec 12, 1:20 AM: Documented gritting teeth through crisis, seltzers/ciders, Bladee, tarot
  • Dec 13, 2:14 PM ET: Puzzle Financial follows @orbofweed (alt account)
  • Dec 13, 3:00 PM: Screenshot taken of follow notification

What this demonstrates:

  1. Active monitoring during crisis: Company following alt account hours after documented mental health collapse demonstrates they are watching real-time breakdown
  2. Harassment and surveillance: Following alt account after soft block is direct harassment - company has no legitimate business reason to monitor personal alt
  3. Consciousness of guilt: If fraud documentation was baseless, they wouldn’t need to monitor; active surveillance proves they’re concerned about what’s being documented
  4. Retaliation pattern: Continued monitoring despite C&Ds, SEC complaints, documented PTSD, public mental health crisis
  5. No plausible deniability: Company social media accounts don’t accidentally follow alts of terminated employees - this is intentional
  6. Timing: Followed at 2:14 PM ET on Dec 13, approximately 12 hours 54 minutes after 1:20 AM meltdown documentation; whistleblower was awake but still delirious from night of crisis (bar visit, high ABV drinks, 1:20 AM documentation, seltzers/ciders)
  7. Visible meltdown context: Screenshot shows surrounding tweets from night before - public agitation and breakdown visible in feed when Puzzle decided to follow; they followed knowing the mental state
  8. Screenshot as evidence: Taken at 3 PM (46 minutes after follow) - captures both the surveillance and the surrounding meltdown tweets showing what prompted their monitoring

Pattern: Puzzle cannot stop watching. Same pattern as December 2023 unsent C&D prepared 12 days after whistleblower permanently deleted LinkedIn. They monitor, document, prepare legal threats, but can’t engage directly because engagement would validate the fraud claims.

Mass Email Replies Sent (Dec 13):

Two messages sent to all 98 recipients documenting surveillance and crisis state:

Email 1:

“Further proof I worked at Puzzle Financial as one of its first employees.

Puzzle’s frontend wouldn’t exist without me. There was barely a product when I joined. I was misled from my first interaction with Sasha Orloff.

Edward Kim, Gusto Cofounder and Head of Technology, viewed my LinkedIn yesterday and today.

It’s clear “evidence” was never the issue.

If Gusto continues with Puzzle: that’s a bad faith response.

You’re watching me breakdown in realtime. Just like you all wanted.”

Attached screenshot: GitHub emails from “puzzlefin” repository dated October 2020, proving employment and contributions to Puzzle’s frontend codebase from company’s earliest days. Concrete evidence countering any narrative that whistleblower’s role or contributions are fabricated.

Email 2 (5:36 PM ET):

“Everyone in my life is deeply concerned. I’m this close to going to inpatient treatment.

I’m trying not to look at the computer today.

But Puzzle Financial followed my alt twitter (I soft blocked).

Sasha keeps tweeting.

And Julian is directly engaging.

I’m actively suffering through a mental health crisis.

You people have no shame and no regard for my life.

I’m disgusted.”

Sasha’s Performance During Crisis:

While whistleblower documents being “this close to inpatient treatment,” Sasha posts:

  1. Porsche wealth display (Dec 13):

Sasha Orloff Porsche post - original version Evidence-171: Original tweet version showing “No snow yet, but a close second: warm winter days and bringing home the kids’ holiday gifts from grandma and grandpas house.” Posted 5 hours ago. Version history visible at top.

Sasha Orloff Porsche post Evidence-168: Sasha Orloff (@sashaorloff, verified) posts photo taken while driving Porsche on Golden Gate Bridge. “No snow yet, but a close second: warm winter days and bringing home the kids’ holiday gifts.” Porsche steering wheel visible, wrapped gift with Hanukkah paper (menorah pattern) in passenger seat, bridge in background. Posted 21m ago, 57 views, 1 like.

What this demonstrates:

  • Reckless behavior: Taking photo while driving on Golden Gate Bridge - federal offense on federal property
  • Wealth display: CFPB-banned CEO posting Porsche interior (luxury proceeds from fraud operations) while whistleblower documents being “this close to inpatient treatment”
  • Dad performance narrative exposed: Original tweet (Evidence-171) says “bringing home the kids’ holiday gifts from grandma and grandpas house” - he didn’t buy the gifts, just transported them from grandparents; wording implies he’s the provider when he’s literally just the delivery driver; performing generosity with others’ gifts
  • Hanukkah gift visible: Wrapped with menorah wrapping paper - humanizing narrative, performing normalcy and family values
  • Timing: Posted while whistleblower sent mass emails about mental health crisis and Puzzle surveillance
  • Last holiday season theory: Displaying wealth knowing this may be final Christmas/Hanukkah before federal consequences
  • Consciousness of guilt: Cannot stay quiet, must perform normalcy even at risk of additional federal charges (distracted driving on federal bridge while under investigation)

Absolutely stupid and reckless. CFPB-banned CEO, under SEC investigation, with permanent federal ban from consumer lending, taking photos while driving on Golden Gate Bridge to post dad content while former employee documents mental health crisis caused by his fraud. This is what “consciousness of guilt” looks like when you can’t stop performing.

Pattern: Using Children as Tokens

Sasha using children as tokens for status Evidence-172: Sasha’s April 2024 Turpentine podcast post showing pattern of using children as tokens. Subtext reveals desire to impress children with “Taylor Swift”-like celebrity status merely for appearing on Spotify. Responded to commenter with “What doesn’t kill you makes you stronger!” (ironic given current federal investigation). Demonstrates podcast has been running since at least April 2024, still active. Casey Woo (first episode guest, Fog Ventures) has been notified multiple times - continues enabling.

Compare Evidence-171/188 (kids’ holiday gifts, Dec 2025) with Evidence-172 (impressing kids with Spotify status, April 2024):

  • Kids’ gifts post (Dec 2025): Didn’t buy the gifts (grandparents did), but used them as props for dad performance and wealth display (Porsche interior)
  • Spotify status post (April 2024): Invoking children as validators of his perceived celebrity/importance for merely appearing on podcast; responded “What doesn’t kill you makes you stronger!” when asked about kids’ reaction
  • Subconscious reveal: Thinks appearing on Spotify = Taylor Swift-level fame worthy of impressing children
  • Children as props, not people: Both posts use kids to serve his ego - as visual props (gifts) or as imagined audience (status validation)
  • Podcast duration: Evidence-172 from April 2024 shows podcast been running 8+ months (April 2024 - Dec 2025), still active despite fraud notifications

Casey Woo (Fog Ventures) was literally the first episode guest on Sasha’s Turpentine podcast. Has been emailed multiple times along with Fog Ventures about fraud documentation. Continues enabling.

  1. DCPA victory lap (12:21 PM, Dec 13, 391 views): “What do you get when you combine accountants, startups, freezing temperatures and an outside conference party? The most packed bars in DC.” Quote-tweeting Puzzle’s “incredible interest” post.

  2. VC engagement farming (1:17 PM, Dec 13, 4,804 views): “Spoke to a top tier VC yesterday and asked their partnership what was their hot takes are for 2026.” Lists predictions including video AI, drug production, Alzheimer’s cure, robots, artificial economic inflation. Positioning himself as connected insider with VC access.

  3. Casual normalcy tweets (12:18 PM, Dec 13, 184 views): “The only thing worse than unsalted butter is Chipotle.” Performing casual dad/foodie persona.

What this shows: Sasha cannot stop performing. Wealth signaling (last Christmas/Hanukkah with Porsche money before consequences?), legitimacy farming (VC connections), normalcy performance (dad jokes), children as tokens (using kids’ gifts he didn’t buy as props; invoking kids to validate Spotify “celebrity” status since April 2024; podcast been running 8+ months despite fraud notifications) - all while actively monitoring whistleblower’s alt account and knowing he’s “this close to inpatient treatment.”

Sasha and Julian Public Interaction - Right Before Puzzle Surveillance:

Timeline shows coordination:

12:21 PM ET - Sasha reposts Puzzle’s DCPA post (391 views): “accounting and AI… you be hearing a lot more about Puzzle in 2026 and 2027”

  • Whistleblower had replied to Puzzle’s tweet: “YOU’RE A FRAUD COMPANY. WHY ARE YOU STILL POSTING HERE, NO ONE GIVES A FUCK” pointing out minimal views/likes/interactions (Puzzle account serves no purpose, fixation on CEO as brand vs company)
  • Reply now deleted/gone - evidence of suppression
  • Sasha saw this aggressive, direct confrontation before/during his repost - proceeded anyway with promotional amplification despite explicit all-caps “FRAUD COMPANY” callout

1:17 PM ET - Sasha posts VC hot takes thread (4,804 views, 56 minutes after seeing fraud callout):

“Spoke to a top tier VC yesterday and asked their partnership what was their hot takes are for 2026. Here is what they said… 1. Video AI will finally be indistinguishable from reality. 2. Drug production will accelerate (not AI discovery, which will also happen but not a hot take) 3. There will be a cure for Alzheimer’s (but not production ready for a while) 4. There will be the first full deployment of robots in an large scale enterprise 5. The economy will be artificially inflated to protect midterm elections. What’s your hot take?”

1:32 PM ET - Julian comments on Sasha’s post (126 views):

“That only number 3 is particularly warm ;)”

2:14 PM ET - Puzzle Financial follows @orbofweed (42 minutes after Julian’s comment, 1 hour 53 minutes after Sasha saw fraud callout)

Later - Sasha posts Porsche photo (ONLY post after the follow action)

What this demonstrates:

  • Saw aggressive fraud callout first: Sasha saw whistleblower’s reply “YOU’RE A FRAUD COMPANY. WHY ARE YOU STILL POSTING HERE, NO ONE GIVES A FUCK” (all-caps, direct confrontation) at/before 12:21 PM when he reposted Puzzle’s DCPA post; proceeded with promotional amplification anyway despite explicit all-caps “FRAUD COMPANY” callout
  • Reply now deleted - evidence of suppression after seeing it
  • Active coordination AFTER seeing aggressive callout: 56 minutes after seeing “FRAUD COMPANY” confrontation, Sasha posts VC hot takes → Julian comments 15 minutes later → Puzzle follows alt 42 minutes after that
  • Consciousness of surveillance action: Porsche post comes AFTER the follow, meaning Sasha posted knowing Puzzle had just followed the alt account
  • Deliberate escalation: Saw aggressive “FRAUD COMPANY” callout at 12:21 PM → continued performing (VC takes) → engaged with Julian publicly → company surveilled whistleblower 1 hour 53 minutes later; this wasn’t reactive, it was calculated retaliation
  • Pattern continuation: Julian not laying low after being publicly called predator at 1:17 AM; still performing philosophical startup guy, engaging with AI predictions, maintaining “builder” persona hours after receiving mass email about mental health crisis
  • Casual engagement during crisis: Both performing normalcy (VC takes, philosophical comments) while company surveils whistleblower during documented mental health crisis; Sasha doing this AFTER seeing explicit all-caps “FRAUD COMPANY” confrontation

Julian’s Pope Francis Tweet (Dec 13, 9:18 PM ET):

Julian Weisser Pope Francis tweet Evidence-170: Julian posts philosophical thread about “crisis of meaning” citing Pope Francis at 9:18 PM (450 views). Posted hours after receiving mass emails documenting whistleblower’s mental health decline. Thread reads: “A crisis of meaning isn’t a partisan issue. And it isn’t only a religious one. Much of it comes from people and communities feeling disconnected from what came before. In parts of tech and the arts, there’s a kind of cultural amnesia. We must restore an unbroken chain.” Includes highlighted quote from Pope Francis about attending to bonds linking to preceding generations.

Email Escalation to ODF (Dec 13, 9:09-10:42 PM ET):

Three emails sent specifically to ODF (CC’d to [email protected], all Daily Email #5 recipients) documenting the direct conspiracy between Puzzle, Sasha, and Julian:

Email 1 (9:09 PM):

ODF, you are specifically tagged on LinkedIn as usual: https://www.linkedin.com/posts/pstoica_im-near-the-point-of-needing-inpatient-treatment-activity-7405783589075873792-tVR1

A Replit coworker just reached out. Many Replit employees have seen my documentation. Replit’s CFO has added me. [Replit cofounder] followed my whistleblower account.

I had a call with my ex after that earlier screenshot. Cried and hyperventilated the entire time. First conversation I’ve had in a while.

I’ve already lost one friend I’ve known since middle school.

Your network knows what you’re doing. Everyone can plainly see Sasha and Julian are actively eroding my mental health and having fun doing it.

Are you sure you still want to perform normalcy?

You know you’re guilty. In the mean time, you’re making a bad name for yourself too.

24/7 mental health crisis. You know this. You’re actively making it worse. Julian is guilty.

Sasha followed me on Twitter only to harass me. You keep engaging. What the fuck is wrong with you, Julian?

Email 2 (9:27 PM) - Pope Tweet Response:

Email screenshot showing Pope tweet Evidence-175: Screenshot of email sent to ODF/Turpentine showing Julian’s Pope Francis tweet and whistleblower’s response: “lol. gaslighting me and posting more moral hypocrisy in realtime.”

lol. gaslighting me and posting more moral hypocrisy in realtime.

Email 3 (10:42 PM) - Direct Confrontation:

literally who are you writing this drivel for? you’re spending all day preparing new philosophical statements to unleash on twitter?

you SHOULD be getting a LAWYER. NOT MAKING MORE EVIDENCE. AND NOT DIRECTLY RUINING A WHISTLEBLOWER’S LIFE AS THEY TELL YOU THEY’RE AT THEIR ABSOLUTE LOWEST.

MY WELLBEING IS DIRECTLY IN YOUR HANDS.

i know you think this is funny. i know you’re smirking this whole time. you think “this guy” will never get you.

you’re about to have your ass handed to you, julian. you’re not as smart as you want people to think.

the Pope definitely wouldn’t support what you’re doing. your garbage post doesn’t need further analysis. don’t kid yourself.

Final Email - Conspiracy Analysis (Later Dec 13):

Added CC: [email protected] (Erik Torenberg and Natalie’s continued silence = enabling).

Message to all recipients:

this follow from Puzzle is literal evidence of conspiracy between puzzle, sasha, and julian.

sasha: sees me melting down over him and julian, nearing suicidal ideation. also sasha: follows whistleblower like an idiot. proof of harassment and surveillance. not funny. not clever. also sasha: posts reckless driving. can’t shut up. can’t stop performing. must be perceived as wealthy and successful at all times. julian: also keeps yapping and performing. must be perceived as a philosophical Founder wizard at all times. even minutes after mass emails detailing my mental health decline.

my language is not harassment. my increasing emailing rate is not harassment. two grownass men ganging up on me, wanting to see me suffer and die? that’s harassment. your silence and twitter engagement/reactivity is 100% conspiracy. these emails will actually be showing up in court cases where YOU AND ODF will be tried for RICO.

CC’ing [email protected] since Erik Torenberg and Natalie have been awfully quiet (only enabling) this whole time, too. a16z is complicit. i’ll give you all front row seats into what you’re doing to me, since you seem so hellbent on watching me suffer.

What this demonstrates:

  1. Julian posts philosophical thread about “crisis of meaning” citing Pope Francis hours after receiving whistleblower’s crisis documentation - The irony: posting about “disconnection” and “restoring unbroken chains” while actively participating in harassment
  2. Real-time response pattern: Whistleblower sees tweet, immediately emails pointing out hypocrisy
  3. Escalating directness: Moving from documentation to direct confrontation - “literally who are you writing this drivel for?”
  4. Explicit conspiracy allegation: “this follow from Puzzle is literal evidence of conspiracy between puzzle, sasha, and julian”
  5. Breakdown of professional boundaries: “MY WELLBEING IS DIRECTLY IN YOUR HANDS” in all caps to someone who continues philosophical posting
  6. Network expansion: Adding [email protected] to establish a16z complicity alongside ODF
  7. Legal framing: “these emails will actually be showing up in court cases where YOU AND ODF will be tried for RICO”
  8. Reframing harassment: “my language is not harassment. my increasing emailing rate is not harassment. two grownass men ganging up on me, wanting to see me suffer and die? that’s harassment.”

The timing pattern:

  • Dec 13, 9:09 PM: Whistleblower sends first ODF email documenting Replit network spread, crying/hyperventilating call
  • Dec 13, 9:18 PM: Julian posts Pope Francis thread about “disconnection” (450 views)
  • Dec 13, 9:27 PM: Whistleblower responds to Pope tweet: “lol. gaslighting me and posting more moral hypocrisy in realtime”
  • Dec 13, 10:42 PM: Direct confrontation: “literally who are you writing this drivel for?”
  • Later Dec 13: Final conspiracy analysis email

Julian posts about “cultural amnesia” and “restoring unbroken chains” while:

  • Whistleblower is documenting 24/7 mental health crisis
  • Having received explicit notification: “I’m this close to inpatient treatment”
  • Being directly accused of participating in conspiracy with Sasha
  • Continuing to perform philosophical founder persona despite documented harm

The Pope wouldn’t support what you’re doing, Julian.

Edward Kim (Gusto) viewed profile twice - Dec 12 (~8 PM ET) and Dec 13. Continued executive-level investigation. Mass email explicitly states: “Edward Kim, Gusto Cofounder and Head of Technology, viewed my LinkedIn yesterday and today. It’s clear ‘evidence’ was never the issue.”

Sasha Blocks Another LinkedIn Alt:

Whistleblower had previously left comments on Sasha’s Friday post (“there won’t be a 2026, definitely not a 2027”). After documenting Puzzle’s Twitter follow (Evidence-169) and Sasha’s reckless driving (Evidence-168), whistleblower added new comments to that thread showing the evidence.

Sasha deleted comments and blocked the LinkedIn alt approximately 1-2 hours later.

What this demonstrates:

  • Active monitoring of LinkedIn alts: Checking comments on his posts regularly enough to see new additions and respond within hours
  • Suppression reflex: Deleting comments + blocking rather than addressing documented evidence
  • Pattern continuation: Same blocking response as @sashaorloff, @dasha_shunina, @puzzlefin on Twitter in November; Julian blocking @orbofweed on Dec 11; now another LinkedIn alt blocked Dec 13
  • Consciousness of guilt: Can’t engage with evidence (reckless driving while under investigation, Twitter surveillance during crisis), can only suppress
  • Compulsive performance + compulsive suppression: Posts Porsche photo publicly → gets called out with evidence → deletes/blocks within hours
  • He understands the gravity: Blocked specifically for calling out reckless driving (federal offense on federal bridge) and Puzzle follow (corporate surveillance/harassment during mental health crisis); not blocking because he doesn’t understand - blocking because he DOES understand these are serious federal violations; if they weren’t serious, he’d ignore or engage; can’t engage because there’s no defense, so immediate suppression

The blocking pattern is federal obstruction. Every block is documented consciousness of guilt. Sasha blocked specifically for showing evidence of federal offenses (reckless driving, harassment/surveillance) - proving he knows these actions are serious and indefensible.

What this entire pattern demonstrates:

  • Surveillance as retaliation: Active monitoring of alt account during mental health crisis
  • Performance as consciousness of guilt: Can’t stay quiet, can’t engage directly, can only perform normalcy
  • Coordination timing proves consciousness: Sasha sees aggressive fraud callout at 12:21 PM (DCPA repost, whistleblower replied on Twitter “YOU’RE A FRAUD COMPANY. WHY ARE YOU STILL POSTING HERE, NO ONE GIVES A FUCK” - now deleted) → Sasha posts VC takes 56 minutes later (1:17 PM) → Julian comments (1:32 PM) → Puzzle follows alt (2:14 PM, 1 hour 53 minutes after Sasha saw all-caps “FRAUD COMPANY” callout) → Sasha posts Porsche (ONLY post after follow); both were active/online during surveillance action; Porsche post came AFTER follow, meaning Sasha posted knowing company had just surveilled whistleblower; entire sequence happened AFTER seeing explicit all-caps fraud confrontation on Twitter
  • Wealth display timing: Porsche post while whistleblower documents inpatient consideration
  • No shame: Continuing to tweet, monitor, engage while someone explicitly states “I’m this close to inpatient treatment”
  • Coordinated response: Puzzle monitors, Sasha performs, Julian engages - network continuing enablement despite documented crisis; public interaction between Sasha/Julian around exact time of surveillance action
  • Immediate suppression when confronted: Blocks LinkedIn alt after being shown evidence of Twitter follow and reckless driving - can post publicly but can’t defend actions when documented

Friend Contact After Missed Calls:

Friend texted after missed calls: concerned, not sure if whistleblower needs inpatient treatment or what at this point.

Had phone call. First real conversation in days.

Crying and hyperventilating the entire time during call.

What this shows:

  • Isolation breaking momentarily: Friend pushed through after missed calls, forcing contact
  • External validation of crisis: Friend independently assessing inpatient treatment need
  • Physical manifestation: Crying and hyperventilating during first real conversation in days
  • Depth of withdrawal: “First real conversation with a friend in days” - shows how complete the isolation has become
  • Human cost documented: Not just typed emails about crisis - actual breakdown with someone who cares
  • Friend witnessing: Someone outside the documentation seeing the crisis firsthand through hyperventilation and crying

This happens same day as: Puzzle surveillance, Sasha’s Porsche post, mass emails about inpatient consideration, Edward Kim’s second profile view. While they perform and monitor, friends are trying to reach someone in active crisis.

This is federal documentation of active harassment and retaliation against SEC whistleblower.

December 14, 2025: Sunday Email and Sasha’s Reactive Doubling Down

4:33 PM ET: Sunday email sent to 96 recipients - “Direct Evidence of Conspiracy: Puzzle’s Surveillance, Sasha’s Performance, Julian’s Silence”

Comprehensive standalone email documenting:

  • Puzzle’s surveillance (Dec 13, 2:14 PM follow of @orbofweed) as direct evidence of conspiracy
  • Timeline proving coordination: Sasha sees aggressive “FRAUD COMPANY” callout at 12:21 PM → VC hot takes (1:17 PM) → Julian comments (1:32 PM) → Puzzle follows alt (2:14 PM, 1 hour 53 minutes after Sasha saw callout) → Sasha posts Porsche knowing company just surveilled whistleblower
  • Human cost: Ex independently suggesting inpatient treatment; friends/family/Replit coworkers increasingly concerned; already lost one friend from middle school; “While Sasha posts Porsche photos and Julian tweets about Pope Francis, my ex is independently assessing whether I need to be institutionalized”
  • Sasha tokenizing people: Original Porsche tweet showed “from grandma and grandpas house” (he didn’t buy gifts, just transported); Evidence-172 from April 2024 shows pattern of using children as tokens for Spotify “celebrity” validation
  • The podcast as fraud infrastructure: Not independent journalism - infomercials and network protection; comprehensive list of 8 guests (Casey Woo/Fog Ventures first episode, Joe Faris/Accountalent CPA Board complaint defendant, Nick Abouzeid/Rivet.tax with Ross Fubini ownership, Dan Westgarth/Deel partnership, Ali Hussain/Tabs, Siqi Chen/Runway, Jason Mok/Brex who then blocked whistleblower, Renato Villanueva/Parallel most recent); podcast running since April 2024 (20+ months); every guest becomes complicit
  • a16z direct implication: Through ODF (Julian + Erik Torenberg), a16z highly implicated in direct evidence of conspiracy and retaliation; Turpentine continues hosting Sasha’s show
  • Closing line: “Every remotely intelligent person sees you’re all running a blatant, abusive fraud operation”

Recipients updated: Removed [email protected] and [email protected] (96 total: 54 To, 42 Cc)

Link to Blind post included at top: https://www.teamblind.com/post/puzzle-financial-is-a-criminal-enterprise-sasha-orloff-cant-stop-posting-evidence-ekvghdd4 with screenshot showing engagement

5:15 PM ET (42 minutes after email sent): Sasha posts reactive “Glass half full Sunday” performance

Tweet link:

Glass half full Sunday.

One eye on 2026 planning. One eye on the 49ers.

Why? Because taking on incumbents means thinking years ahead but executing weekly.

We shipped ~18 improvements per week, every week in Nov + Dec. Post-Digital CPA, interest in Puzzle is at an all-time high, with the highest NPS and highest word of mouth to date.

2026 is the year nobody stumbles into Puzzle. They hear about us from another firm or founder.

Accountants win. Founders win. Our team wins.

Eyes on 2026. Purdy’s in. LFG. 🏈🚀

5:44 PM ET: “Fritos and queso distraction in full effect”

Posts photo of Fritos and queso while watching 49ers game on TV. Casual dad performance continuing.

What this demonstrates:

  1. Reactive timing proves he sees emails: Posted 42 minutes after Sunday email was sent documenting conspiracy, surveillance, human cost, and podcast fraud infrastructure; immediate doubling down on Puzzle’s “success”

  2. Defensive performance: Claims “~18 improvements per week” (unverifiable), “interest in Puzzle is at an all-time high” (contradicted by minimal engagement on posts), “highest NPS and highest word of mouth to date” (no evidence provided), “2026 is the year nobody stumbles into Puzzle” (defensive response to “there won’t be a 2026, definitely not a 2027” comments)

  3. Increasingly isolated: Only posting on Twitter for attention; no LinkedIn engagement; appears to be monitoring Twitter and email in real-time

  4. Can’t stop performing normalcy: “Glass half full” optimism framing while under federal investigation, SEC complaints filed, bar complaint active, CPA Board complaint filed, daily emails to 96 recipients documenting conspiracy

  5. Dad performance continues: Fritos/queso casual post while whistleblower documents being “this close to inpatient treatment” and ex independently suggesting institutionalization

  6. Pattern continuation: Cannot stay quiet, must respond to documentation with counter-narrative performance; every email triggers reactive Twitter performance within hour

  7. “Taking on incumbents”: Positions himself as underdog challenger when actually CFPB-banned CEO operating prohibited business model; reframes fraud pattern as “disruption”

  8. “Our team wins”: Claims team victory while employees face RICO exposure, wage clawback risk, professional license jeopardy; employees who engaged with DCPA post (Patricia Daos, Naveen Venkatesh, Sina Mohebiany, Jeffrey Everingham, Charles Crabtree, Arash Ahmadi) now documented for continued enablement

  9. Same toxic positivity playbook as LendUp: “Glass half full Sunday” mirrors LendUp’s “When Life Gives You Lemons, Make Lemonade!” tagline that appeared on lendup.com AFTER CFPB ban under supposed “new leadership”; whistleblower posted about it in 2023; tagline was removed shortly after, proving surveillance even under supposed “new leadership”; Puzzle now using identical toxic positivity framing while under federal investigation; pattern: optimistic messaging to mask operational collapse, regulatory violations, and reactive monitoring of whistleblower documentation

The post is barely coherent:

  • Opens with “Glass half full Sunday” - not a sentence, just a toxic positivity prompt
  • “One eye on 2026 planning. One eye on the 49ers” - mixed metaphor attempting to show “balance” while actually showing he’s watching football during federal investigation
  • “Taking on incumbents” - reframes CFPB-banned CEO operating prohibited business as “disruption”
  • “~18 improvements per week” - unverifiable made-up metric during Wikipedia meltdown, SEC complaints, daily RICO notices
  • “Interest at all-time high” - contradicted by minimal post engagement (100 views, 1 like typical)
  • “2026 is the year nobody stumbles into Puzzle” - direct defensive response to “there won’t be a 2026, definitely not a 2027” comments
  • “Accountants win. Founders win. Our team wins.” - three-line mantra sounds AI-generated
  • “Purdy’s in. LFG. 🏈🚀” - 49ers quarterback reference has nothing to do with accounting software; emojis for engagement farming

Reads like someone who started with “glass half full” prompt, generated founder-optimism content, threw in football reference for “relatable” factor, added unverifiable metrics, closed with emojis. Not coherent strategy - reactive performance anxiety.

“Nobody stumbles into Puzzle” - Contradiction with documented marketing behavior:

Sasha claims: “2026 is the year nobody stumbles into Puzzle. They hear about us from another firm or founder.”

This positions Puzzle as wanting organic word-of-mouth discovery only, not random discovery through marketing.

But actual documented behavior:

  1. ActualQuickBooks campaign (October 2025): Aggressive belligerent marketing targeting Intuit/QuickBooks users; photoshopped 3 likes → 12,362 likes; literally trying to get people to “stumble into Puzzle” by targeting competitor’s customer base
  2. Heavy conference presence: Digital CPA Conference booth, demos, “packed bars in DC”; maximum visibility plays designed for accountants to stumble into Puzzle at industry events
  3. Constant social media posting: Daily LinkedIn/Twitter performance, 20+ months of podcast episodes, Forbes articles through Dasha; all designed for brand awareness so people DO stumble into Puzzle
  4. Photoshopping engagement metrics: If word-of-mouth works, why fake popularity? Photoshopping 3 → 12,362 is manufacturing appearance of success so people stumble into Puzzle thinking it’s popular; if organic discovery is the strategy, why fake the numbers?
  5. Partnership marketing integrations: Brex, Deel, Ramp integrations; accounting firm partnerships (Decimal, Rivet, Accountalent, Burkland); designed for partner referrals = stumbling into Puzzle through integrations

The contradiction:

  • Claims: “Nobody stumbles into Puzzle” (organic word-of-mouth only, intentional selective discovery)
  • Reality: Aggressive marketing, photoshopped metrics, belligerent campaigns against incumbents, conference booths, constant social posting, partnership integrations, maximum visibility plays

Why this line exists: Defensive reframing after whistleblower’s “WHY ARE YOU STILL POSTING HERE, NO ONE GIVES A FUCK” comment pointing out minimal engagement. Sasha reframes low visibility and lack of organic growth as intentional strategy: “We don’t WANT random discovery, we want referrals!” - but if that were true, why photoshop likes? Why run ActualQuickBooks campaigns? Why post constantly? Why attend conferences?

Another incoherence revealing reactive defensive framing, not actual coherent strategy.

LendUp → Puzzle toxic positivity comparison:

LendUp lemonade tagline after CFPB ban Evidence-173: LendUp.com homepage showing “When Life Gives You Lemons, Make Lemonade!” tagline displayed AFTER CFPB ban (December 2021) and liquidation (June 2022). Green background with lemonade jar visual. “Simply Better Online Loans” tagline above. Screenshot shows toxic positivity messaging continued post-enforcement. CRITICAL: Current lendup.com notice states domain “no longer owned, operated or have any relation to… former executives” BUT Sasha’s own January 15, 2019 LinkedIn announcement explicitly stated he would maintain “board and advisory role at LendUp” - meaning he maintained formal connection during CFPB ban (December 2021) and this toxic positivity period. Whistleblower posted about tagline in 2023 (4+ years after his announced advisory role); tagline was removed shortly after, proving either: 1) Sasha never actually left and maintained influence through advisory role, or 2) “New leadership” was monitoring/removing content on his behalf despite “no relation” notice. The notice directly contradicts Sasha’s own 2019 public announcement.

CompanyTagline/FramingContextSurveillance EvidenceOutcome
LendUp”When Life Gives You Lemons, Make Lemonade!”Appeared on lendup.com AFTER CFPB ban (December 2021); CRITICAL: Sasha’s own January 15, 2019 LinkedIn announcement explicitly stated he would maintain “board and advisory role at LendUp” - meaning he had formal connection during CFPB ban and toxic positivity period; current domain notice claims “no relation to former executives” but directly contradicts Sasha’s own 2019 public announcement; either never left or “new leadership” monitored on his behalfRemoved in 2023 after whistleblower posted about it (4+ years after Sasha’s announced advisory role); proves either Sasha maintained influence through board/advisory role or “new leadership” monitored/removed content on his behalf; reactive website changes despite “no relation to former executives” notice; surveillance connection proved by timing of removal; current notice contradicted by Sasha’s own 2019 announcementRemoved after callout, operations ended
Puzzle”Glass half full Sunday”Used while under SEC investigation, CFPB ban violation, daily RICO notices; posted 42 minutes after conspiracy documentation sent to 96 recipients42-minute response time from Sunday email to reactive post; pattern of reactive performances within hours of receiving documentation (Dec 11, 12, 13, 14, 2025)Still active; same playbook, same ending

Critical pattern: LendUp’s “lemonade” tagline was on lendup.com AFTER CFPB ban, under supposed “new leadership.” Whistleblower posted about toxic positivity in 2023. Tagline was removed shortly after. This proves:

  1. “New leadership” was monitoring whistleblower documentation - despite claims of Sasha’s departure, someone was watching and responding to callouts
  2. Reactive website changes - just like Sasha’s reactive Twitter performances, LendUp’s website was updated in response to documentation
  3. “New leadership” narrative is false - if truly new leadership with no Sasha involvement, why monitor and react to whistleblower posts about old taglines?
  4. Surveillance pattern spans both companies - LendUp (2023 reactive removal) → Puzzle (2025 reactive performances within 42 minutes)

Critical clarification: LendUp domain ownership

The current lendup.com website displays this notice:

NOTICE: LendUp domain and website are no longer owned, operated or have any relation to LendUp Loans, LLC (formerly Flurish, Inc.), LendUP Global, Inc and former executives. LendUp Loans LLC, a direct lender licensed by the Department of Business Oversight, pursuant to the California Deferred Deposit Transaction Law, license #1004393, and the California Financing Law, license #6054610, ceased its loan operations in January 2022. Find out more about LendUp. LendUp does not have access to information and client data owned by LendUp Loans, LLC. If you have an account with LendUp Loans, LLC, you will not be able to use your login details to sign in to our website. If you require a loan, we suggest completing our online loan request form.

This notice explicitly states the domain is “no longer owned, operated or have any relation to… former executives”

CRITICAL: Sasha’s own January 15, 2019 LinkedIn announcement explicitly stated:

My Next Steps - Sasha Orloff LinkedIn, January 15, 2019:

“I am stepping away from day to day operations and will transition to a board and advisory role at LendUp, an advisory role at Mission Lane and will continue to serve as an advisory board member for the Aspen Institute Financial Security Program.”

This proves Sasha maintained formal board/advisory role at LendUp after January 2019 “transition.”

Timeline:

  • January 15, 2019: Sasha announces “board and advisory role at LendUp”
  • December 2021: CFPB permanent ban issued (while Sasha supposedly still in advisory role per his announcement)
  • Post-ban: “When Life Gives You Lemons, Make Lemonade!” toxic positivity tagline appeared on lendup.com
  • 2023: Whistleblower posts about toxic positivity tagline; tagline reactively removed shortly after

The “no relation to former executives” notice directly contradicts Sasha’s own 2019 announcement that he would maintain board/advisory role. Either:

  1. Sasha maintained board/advisory role through CFPB ban and post-ban period (directly contradicts current notice; means he was involved during toxic positivity tagline and reactive removal), or
  2. He formally resigned from board/advisory role at some undisclosed point (but reactive 2023 removal after whistleblower callout proves continued surveillance connection), or
  3. The current notice is false and he maintained informal control despite domain sale

Regardless of which scenario, Sasha’s own 2019 announcement proves he maintained formal connection to LendUp well past his supposed “departure.” The reactive removal of toxic positivity tagline in 2023 (4+ years after his announced “board and advisory role”) demonstrates either:

  1. He never actually left - maintained influence through advisory role during CFPB ban, toxic positivity period, and reactive removal
  2. “New leadership” was monitoring on his behalf - despite domain sale and “no relation” notice, reactive content changes prove surveillance connection to Sasha’s network

The “no relation to former executives” notice is contradicted by Sasha’s own public 2019 announcement of maintaining board/advisory role. Either the notice is false, or his advisory relationship formally ended at undisclosed time but surveillance connection continued.

Key point: The domain was sold to an entirely separate entity that claims no relation to former executives. Yet Sasha publicly announced board/advisory role in 2019, and surveillance patterns/reactive content changes continued through 2023 - proving either he maintained influence or someone was monitoring/acting on his behalf.

Same playbook. Same toxic positivity masking collapse. Same surveillance patterns. Same outcome trajectory.

High likelihood Sasha sees emails: 42-minute response time from Sunday email (4:33 PM) to reactive Twitter performance (5:15 PM) suggests real-time monitoring; pattern established across multiple days (Dec 11 self-victimization tweet after Daily Email #4, Dec 12 DCPA repost after seeing “FRAUD COMPANY” callout, Dec 13 Porsche post after surveillance, Dec 14 “Glass half full” after Sunday email)

Isolation pattern: Sasha increasingly posting only on Twitter, not LinkedIn; no investor updates visible; no accounting firm engagement beyond DCPA; Twitter becoming primary performance venue as professional networks distance

Every post is evidence. Every reactive performance is consciousness of guilt. Every “glass half full” claim while whistleblower documents inpatient consideration is federal documentation of callous disregard.

5:57 PM ET: Sasha openly defends Adam Neumann’s fraudulent WeWork S1

Tweet link:

This has got to be one of the most beautiful presentations I have seen for a business update. Well done Shopify.

When I try and think optimistically about what Adam Neumann was trying to do with his S1, this is what he intended. Quote tobi lutke @tobi · 2h For the Sunday crowd, we released the Shopify Winter’26 edition this week. Come appreciate this work of art, especially on desktop https://shopify.com/editions/winter2026 5:57 PM · Dec 14, 2025 · 78 Views

Context: Adam Neumann / WeWork S1 (August 2019)

  • One of the most infamous fraudulent S1s in tech history
  • Deceptive metrics (“Community Adjusted EBITDA” excluded actual costs to make losses look smaller)
  • Massive governance issues: Neumann had super-voting rights (20-to-1), owned “We” trademark personally and leased it back to company for millions
  • Rampant self-dealing: Bought properties personally, leased them to WeWork at profit
  • $47 billion valuation collapsed to failed IPO (pulled September 2019)
  • Neumann forced out October 2019, received $1.7 billion exit package despite destroying shareholder value
  • Company nearly went bankrupt, required SoftBank bailout
  • SEC settlement in 2021 for misleading investors
  • Universally recognized as one of the most deceptive startup filings in modern history

What Sasha’s post reveals:

  1. Defending known fraud as “beautiful” if viewed “optimistically”: Neumann’s S1 is not debatable - it was deceptive, self-dealing, governance nightmare; Sasha reframes it as misunderstood vision that “intended” to be like Shopify’s legitimate business update
  2. Pattern recognition and projection: Sees himself in Neumann - both orchestrated deceptive financial presentations, both CFPB-banned (Neumann’s Fair Credit Reporting Act violations at SmartAsset, Sasha’s LendUp ban), both using founder mythology to mask governance failures
  3. “When I try and think optimistically”: This is how he wants people to view his own fraud - charitable interpretation, assume best intentions, ignore deceptive metrics and self-dealing
  4. Same-day escalation: 5:15 PM (glass half full) → 5:44 PM (Fritos/queso) → 5:57 PM (defending Neumann) - 13 minutes after casual dad performance, now openly defending fraud
  5. Shift from subconscious to explicit: Previous SBF posts showed awareness of fraud psychology; now openly arguing fraud should be viewed “optimistically” as misunderstood innovation
  6. Can’t stop posting: Three reactive performances in 42 minutes, each more revealing; increasingly unhinged; desperate for interactions as people lose trust
  7. Consciousness of guilt performing as fraud apologetics: Not just reactive performance anxiety - now building public narrative that deceptive S1s should be interpreted charitably; laying groundwork for own defense

This is a CFPB-banned CEO, under SEC investigation, facing RICO notices, comparing his situation to WeWork’s fraud and arguing it should be viewed as beautiful vision. Absolute mental decompensation.

6:14 PM ET (17 minutes later): Back to using daughter as token - “snack competition” performance

Tweet link:

Uh oh. I entered a snack competition with my daughter and got absolutely demolished. Final score: 6–7. 🏈🍿

6:14 PM ¡ Dec 14, 2025 ¡ 16 Views

Photo shows daughter behind unicorn emoji with snack plate, 49ers game on TV in background, luxury apartment visible.

What this demonstrates:

  1. Compulsive tokenizing AFTER explicit callout: Sunday email (4:33 PM) documented pattern of using children as tokens with Evidence-171 (Porsche “grandma and grandpas house” gifts he didn’t buy), Evidence-172 (April 2024 Spotify tweet using kids as validators of his “celebrity” status); 1 hour 41 minutes later, he does it again
  2. Cannot stop performing despite consequences: Has been explicitly documented for this pattern across multiple instances; response is to immediately demonstrate the pattern again; compulsive need to perform dad role even when identified as manipulation tactic
  3. Fourth reactive post in 101 minutes: 5:15 PM (glass half full) → 5:44 PM (Fritos/queso) → 5:57 PM (defending WeWork fraud) → 6:14 PM (daughter as token) - escalating sequence showing complete loss of control
  4. 17 minutes from fraud apologetics to dad performance: Just finished defending one of most infamous fraudulent S1s in history; immediate pivot to wholesome dad content; demonstrates compartmentalization and performance switching
  5. Still watching 49ers game: Same game from 5:44 PM Fritos post; has been sitting on couch for 30+ minutes cycling through different performance modes while whistleblower documents being “this close to inpatient treatment”
  6. “Final score: 6-7”: Performative self-deprecation (“I lost!”); also attempt at injecting casual meme humor (6-7 is Gen Alpha “brain rot” slang from TikTok/basketball culture, emerged 2025); trying to appear relatable and in-touch with internet culture while under federal investigation; child exists to make him look relatable and humble; using daughter’s “victory” as content while Sunday email documents ex independently suggesting whistleblower needs institutionalization
  7. 16 views: Minimal engagement; posting for compulsive performance need, not actual audience; increasingly isolated; nobody cares about his dad performance but he cannot stop
  8. Consciousness of guilt: Explicitly called out for pattern; immediate response is to demonstrate pattern again; either doesn’t understand the critique or cannot control the compulsion; either scenario shows mental decompensation

Four reactive performances in 101 minutes. From toxic positivity → casual snacking → fraud apologetics → tokenizing daughter. This is not strategy. This is compulsive, uncontrolled performance anxiety manifesting as content generation. Every post is consciousness of guilt. Every performance is evidence.

6:43 PM ET (29 minutes later): Fifth reactive performance - VC power law philosophy with typos

Tweet link:

6:43 PM ¡ Dec 14, 2025 VC power law on full display.

Startups aren’t for everyone. The hours and brutal, the stakes are high, the uncertainty is constant.

But for the breakouts, the chance to build something great, redefine an industry, and solve real problems makes it unmatched.

The upside isn’t just financial, it’s impact, learning, and rewriting what’s possible.

Ans hopefully some fun along the way. 🚀🚀❤️🚀🚀 Quote Rohit Mittal @rohitdotmittal

Dec 13 sequoia’s best fund ever had 50% of companies written off to zero

and honestly? for the VC that’s totally fine. the model is working exactly as intended. power law math means 3 mega winners like Airbnb and Dropbox return the fund multiple times over. the zeros don’t really

Context of Rohit’s full thread (Sasha quoted selectively):

Rohit’s thread discusses founders who spent 4-7 years building legitimate companies with real customers, shipping product, generating $500k-$2M in revenue, but became “write-offs” because they didn’t hit trajectory to return billion-dollar fund. Thread focuses on sympathy for legitimate founders “trapped” by venture structure: can’t sell (numbers don’t work), can’t raise (growth isn’t there), can’t shut down (customers paying, employees counting on paychecks). “There’s so much real revenue trapped inside companies that ‘failed’ by venture standards but would be meaningful exits if the structure allowed it.”

What Sasha is doing by quoting this:

Positioning himself as one of these sympathetic founders caught in “power law math” - but LendUp was literally written off as zero by investors, and Puzzle is heading toward same fate. Key difference: Rohit’s thread is about legitimate founders trapped by venture structure; Sasha is CFPB-banned CEO operating prohibited business model by choice. He’s not “trapped” - he’s banned from operating this business and chose to operate it anyway. Preemptive narrative: when Puzzle collapses, frame it as “just venture math” not fraud-driven failure.

Typos:

  • “The hours and brutal” (should be “are brutal”)
  • “Ans hopefully” (should be “And hopefully”)

What this demonstrates:

  1. Fifth reactive performance in 130 minutes: Cannot stop posting; 29 minutes after tokenizing daughter, now pivoting to VC philosophy; cycling through performance modes compulsively
  2. Typo-laden suggests agitated state: Two typos in short post; rushed composition; not reviewing before posting; mental state degrading
  3. “Rewriting what’s possible” - LITERAL consciousness of guilt: He literally rewrites history (13+ hours Wikipedia editing, backdated Mission Lane founding, LendUp L Card evidence contradicting timeline); this phrase is not metaphor - it’s confession; he believes fraud is “rewriting what’s possible”
  4. “Solve real problems” - CFPB-banned predatory lending CEO: Claiming startups “solve real problems” while operating prohibited business model after permanent ban for consumer harm; cognitive dissonance
  5. Positioning Puzzle in power law “breakout” cohort - preemptive narrative for collapse: Quoting Rohit Mittal’s thread about Sequoia’s “50% written off to zero” and founders who “spent 4-7 years, got real customers, hired people, shipped product, doing $500k-$2M revenue” but became write-offs because they “didn’t hit the trajectory that returns a billion dollar fund”; CRITICAL IRONY: LendUp was literally written off as zero by investors; Puzzle is heading toward same fate; Sasha positioning himself as sympathetic founder caught in “power law math” rather than CFPB-banned CEO operating prohibited business model facing federal enforcement; Rohit’s thread is about legitimate founders trapped by venture structure (can’t sell, can’t raise, can’t shut down because customers/employees); Sasha is neither legitimate nor trapped - he’s banned from operating this business model and chose to operate it anyway; preemptive framing: when Puzzle collapses, it’s just “venture math” not fraud-driven failure; defensive narrative building for inevitable write-off
  6. Four rocket emojis, one heart: Engagement farming; desperate for interactions
  7. “Impact, learning, and rewriting what’s possible”: Positioning fraud as innovation; echoes WeWork defense (5:57 PM “think optimistically about what Adam Neumann was trying to do”); building narrative that deceptive practices are just “rewriting” and should be viewed charitably
  8. “The hours and brutal”: Ironic - he’s been sitting on couch watching 49ers for hour+ (Fritos 5:44 PM → daughter 6:14 PM → VC philosophy 6:43 PM); not working “brutal hours,” cycling through Twitter performances
  9. Same day as defending WeWork fraud: 46 minutes ago defended fraudulent S1 as beautiful vision; now defending VC power law that justifies 50% failures; creating ideological framework where his fraud is just “startup risk” and “rewriting what’s possible”

Five reactive performances in 130 minutes: 5:15 PM (toxic positivity) → 5:44 PM (casual dad) → 5:57 PM (fraud apologetics) → 6:14 PM (daughter token) → 6:43 PM (VC philosophy). This is complete mental decompensation. Typo-laden posts with literal consciousness of guilt (“rewriting what’s possible”). Positioning himself as sympathetic founder caught in “power law math” when LendUp was literally written off as zero and Puzzle is heading there - but he’s not trapped by venture structure, he’s CFPB-banned and chose to operate prohibited business anyway. Preemptive narrative building for inevitable collapse. Cannot stop. Every post reveals more. Every performance is evidence.

Weekend (Dec 13-14): LinkedIn version posted - escalating defensive consciousness

Sasha reposted the VC power law content to LinkedIn (more professional audience), fixing some typos but adding unprompted defensive statements:

LinkedIn version:

VC power law on full display.

Startups aren’t for everyone. The hours and are brutal, the stakes are high, the uncertainty is constant.

But for the breakouts, the chance to build something great, redefine an industry, and solve real problems makes is unmatched. [typo remains]

The upside isn’t just financial, it’s impact, learning, and rewriting what’s possible.

And I think it’s super fun.

🚀🚀❤️🚀🚀

I wouldn’t trade it for anything.

What the additions reveal (consciousness of defeat):

  1. “And I think it’s super fun” - Nobody asked if it was fun. Unprompted defensive statement trying to convince himself.
  2. “I wouldn’t trade it for anything” - Nobody offered an alternative. Pure defensive posturing during crisis.
  3. Still has typo (“makes is unmatched” should be “makes it unmatched”) - cleaned up Twitter version but agitated state persists
  4. Posted to LinkedIn during crisis weekend - Sunday email sent 4:33 PM documenting conspiracy/surveillance; his response is professional platform defensive framing
  5. Reads like watching collapse - “wouldn’t trade it” while ex independently suggesting inpatient treatment for whistleblower, daily emails to 96 recipients, Wikipedia tampering exposed, podcast guests documented
  6. “Rewriting what’s possible” still present - keeps the phrase that literally describes his fraud (Wikipedia, Mission Lane timeline, LendUp history)

This is consciousness of defeat performing as conviction.

Selective comment deletion - consciousness of guilt pattern:

On previous LinkedIn post (Porsche/gifts), Sasha selectively deleted comments while keeping three visible:

Remaining comments on Sasha's Porsche post Evidence-174: Screenshot showing three remaining comments on Sasha’s Porsche post after selective deletion. Whistleblower’s emotional “you disgust me 24/7” kept visible (strategic framing as unhinged). Dasha Shunina: “Let’s go! 🚀” (supportive, kept). Puzzle company account: “Full speed ahead!” (supportive, kept). Evidence-based callouts deleted: reckless driving documentation (Evidence-168), surveillance harassment (Evidence-169), specific federal violations all removed. Proves consciousness of which evidence is most damaging.

  1. Whistleblower’s emotional comment: “you disgust me 24/7” (kept visible)
  2. Dasha Shunina supportive: “Let’s go! 🚀” (kept visible)
  3. Puzzle company account supportive: “Full speed ahead!” (kept visible)

What was deleted: Whistleblower’s evidence-based callouts including reckless driving documentation (Evidence-168: photo while driving on Golden Gate Bridge), surveillance harassment (Evidence-169: Puzzle following alt account), and other specific federal violations.

What this deletion pattern proves:

  1. Strategic framing: Keeps emotional “you disgust me” to portray whistleblower as unhinged, deletes evidence-based specific violations
  2. Consciousness of which accusations are most damaging: Emotional disgust = dismissible as personal grievance; reckless driving on federal bridge while taking photos = federal offense
  3. Cannot engage, must suppress: If accusations were false, he’d refute them; instead he deletes specific evidence while preserving appearance of “emotional attacks”
  4. Curates supportive ecosystem appearance: Dasha + Puzzle account remain, creating visual of unanimous support while suppressing documented violations
  5. Federal obstruction pattern continues: Twitter blocks (November), LinkedIn blocks (December), now selective evidence-based comment deletion while keeping emotional comments

He knows which evidence is most damaging. The selective deletion proves consciousness of guilt.

New comment on latest LinkedIn post (Dec 14) - calling out selective deletion:

Posted to Sasha’s VC power law LinkedIn post:

hey sasha, were you an advisor at LendUp? you said so in 2019

https://www.linkedin.com/pulse/my-next-steps-sasha-orloff/

board seat too. seems like enough time to know about aheadmoney.com.

also noted that you deleted evidence but kept up “you disgust me 24/7” to create the appearance of an unhinged, baseless whistleblower who wrote a 18,000+ line document you’ve definitely read while you disregard mass emails i’m sending detailing emotional distress and potential need for inpatient treatment.

you then blocked me so i couldn’t delete the comment.

your career is over. Puzzle’s being written of to 0. just like your prized LendUp.

full documentation: https://patrickstoica.com/puzzle-statement/

What this comment accomplishes:

  1. Links directly to his January 2019 announcement - undeniable public record of board/advisory role
  2. Connects to aheadmoney.com timing - August 2019 “Coming soon” during his board tenure
  3. Explicitly names the selective deletion strategy - “you deleted evidence but kept up ‘you disgust me 24/7’ to create the appearance of an unhinged, baseless whistleblower”
  4. References the 18,000+ line documentation - proves this isn’t emotional ranting, it’s comprehensive federal record
  5. Notes he’s disregarding mass emails documenting distress - establishes callous disregard for human cost
  6. Direct prediction: “your career is over. Puzzle’s being written of to 0. just like your prized LendUp”

Predicted response:

  • Delete comment (proves consciousness that LinkedIn announcement is damaging)
  • Block account (adds to federal obstruction pattern)
  • Leave it visible (consciousness of defeat, can’t engage without admitting fraud)

Any response proves consciousness of guilt. The LinkedIn announcement is public, permanent, and contradicts every narrative he’s built since.

Sasha’s response: Blocked at 10:19 PM ET (49 minutes after comment posted ~9:30 PM)

What the 49-minute block proves:

  1. Read it immediately - Not ignoring, actively monitoring his posts during crisis weekend
  2. Cannot engage - Can’t refute the 2019 LinkedIn announcement without admitting he lied about “no role”
  3. Cannot delete comment - It’s not his comment to delete, and deleting it would be additional evidence suppression
  4. Blocked to stop conversation - Only option left: cut off communication before more damage
  5. Trapped the evidence - By blocking, the strategic comment citing his 2019 announcement is now permanently visible on his LinkedIn VC power law post
  6. Federal obstruction pattern continues: Twitter blocks (Nov) → Julian blocks (Dec 11) → LinkedIn alt blocks (Dec 13) → Strategic account block (Dec 14, 10:19 PM, 49 minutes after damaging comment)

The irony: Blocked me so I “couldn’t delete the comment” - ensuring the most damaging callout (linking his own 2019 announcement that contradicts all later narratives) stays visible forever. He couldn’t delete it. He couldn’t refute it. He could only block and trap the evidence on his own post.

Follow-up reply escalating the exposure:

what are you doing, Sasha? it seems you can’t stop creating more evidence, especially as the walls close in. the bare minimum advice people should be giving you if you have no legal representation: stop posting.

What this follow-up accomplishes:

  1. Concerned, clinical tone - Almost advisory, not emotional, which makes it more damaging
  2. “can’t stop creating more evidence” - Points out compulsive engagement is self-destructive
  3. “walls close in” - Directly references the tightening federal investigation
  4. “if you have no legal representation” - Implies he either has no attorney (after bar complaint filed), or his attorneys have given up controlling him
  5. “stop posting” - Basic legal advice he’s ignoring, proving inability to assess risk

This is the most dangerous type of comment for him: it’s not angry, it’s observational. It sounds like someone watching a person self-destruct in real-time. Every hour he continues engaging after this comment proves he cannot stop.

Sunday Night (Dec 14, 9:47 PM ET): Compulsive LinkedIn Engagement - Cannot Stop Performing

5+ hours after strategic comment exposing his selective deletion strategy and linking to his contradictory 2019 announcement, Sasha continues active LinkedIn engagement:

9:47 PM ET: Comment on Tabs hiring post

Nicholas Gatti (Sales @ Tabs) posted about hiring for Solutions Consultant role. Sasha comments:

“Paige is one of the most incredible people in the world.”

Context: Paige Honeycomb blocked whistleblower and participated in equity theft at Puzzle.

What “most incredible people” actually means: This person always abided by my orders. Paige blocked the whistleblower when told, participated in equity theft without question, stayed silent during federal proceedings. The praise isn’t about character or competence - it’s about obedience and loyalty to Sasha during fraud and retaliation.

Whistleblower’s reply:

“Paige Honeycomb blocked me and had no problem stealing my equity at your fraud company https://patrickstoica.com/puzzle-statement/”

“sasha’s definition of incredible people: someone who looks away from fraud and enables abuse for 2 years”

Direct definition cutting through the praise: Not about competence. Not about character. About complicity. “Incredible people” = people who enable fraud and stay silent for 2 years.

~6:47 PM ET: Two comments on Rohit Mittal’s power law post

Goes to the source thread he quoted for his VC philosophy performance. Comments twice:

  1. “It’s people like you who make the ecosystem better. Thank you for what you do.”
  2. “Power law in full effect”

What this Sunday night engagement proves:

  1. Ignoring direct advice to stop posting: After follow-up comment explicitly told him “the bare minimum advice… stop posting,” he continued engaging anyway
  2. Compulsive performance addiction: Cannot stay silent even after being exposed for selective deletion strategy and directly told walls are closing in
  3. No legal representation or ignoring counsel: Either has no attorney (post-bar complaint), or is ignoring their advice to stay silent
  4. Praising people who suppressed whistleblower: “One of the most incredible people in the world” = “this person always abided by my orders” - praising obedience/loyalty during equity theft and retaliation
  5. Going to source material: Engaging directly with Rohit’s thread he quoted - doubling down on power law narrative after being told he’s creating evidence
  6. Performing community builder role: “Thank you for what you do” ecosystem gratitude rhetoric while facing federal documentation
  7. Complete inability to assess risk: 9:47 PM Sunday night engagement about hiring posts after being told “what are you doing, Sasha?”
  8. Pattern continuation: Dec 11 self-victimization tweet → Dec 12 DCPA repost → Dec 13 Porsche + Julian coordination → Dec 14 five reactive performances → Dec 14 direct advice to stop → Dec 14 Sunday night normalcy performance anyway

This is not strategy. This is compulsive engagement manifesting as LinkedIn normalcy performance during federal crisis. He was directly told to stop posting. He was told the walls are closing in. He was told he’s creating more evidence. He continued anyway. He cannot stop. Every engagement after being explicitly advised to stop is evidence of complete inability to assess risk. Every performance proves consciousness of guilt.

10:19 PM ET: Sasha Blocks Whistleblower Account (49 Minutes After Strategic Comment)

Comment posted at approximately 9:30 PM ET. Blocked at 10:19 PM ET.

What the 49-minute response time proves:

  1. Immediate monitoring - Actively watching his LinkedIn posts during crisis Sunday night, not “laying low”
  2. Read every word - 49 minutes is enough time to read, panic, consult (or realize no attorney available post-bar complaint), and block
  3. Cannot refute - The January 2019 LinkedIn announcement is his own public statement; can’t deny board/advisory role
  4. Cannot delete - It’s not his comment to delete; would be additional evidence suppression if he could
  5. Cannot engage - Any response admits the contradiction between 2019 announcement and later “no role” claims
  6. Only option: block - Cut off conversation before more damage, but…

The strategic mistake: He trapped the evidence permanently on his own post.

By blocking, the comment is now permanently visible on his LinkedIn VC power law post:

  • Direct link to January 15, 2019 “My Next Steps” announcement (board and advisory role at LendUp)
  • Explicit callout of selective deletion strategy
  • Connection to aheadmoney.com timing (August 2019, during his announced board tenure)
  • 18,000+ line documentation reference
  • “your career is over. Puzzle’s being written of to 0. just like your prized LendUp”
  • Full documentation link: patrickstoica.com/puzzle-statement

He can never delete that comment. He can never refute it without admitting fraud. It’s permanently attached to his defensive VC power law post with typos and unprompted “I think it’s super fun” additions. The post where he’s performing conviction is now permanently marked with evidence of his 2019 contradictory announcement.

Federal obstruction pattern escalation:

  • November 2025: Twitter blocks (@sashaorloff, @dasha_shunina, @puzzlefin all blocked after callouts)
  • December 11, 2025: Julian blocks @orbofweed after fraud callout
  • December 13, 2025: Sasha blocks LinkedIn alt after calling out reckless driving + surveillance
  • December 14, 2025, 10:19 PM: Blocks main strategic account 49 minutes after most damaging comment linking his own 2019 announcement

Each block is faster. Each block is more reactive. Each block is consciousness of guilt. And this block trapped the most damaging evidence on his own professional post forever.

11:32 PM ET: Real-Time Documentation Update

Sunday night follow-up email sent to 96 recipients (including [email protected]) documenting:

  • 49-minute block as fastest response yet, proving active monitoring during crisis weekend
  • January 15, 2019 LinkedIn announcement as bombshell evidence: My Next Steps - Sasha Orloff (Web Archive) - publicly announced “board and advisory role at LendUp, an advisory role at Mission Lane” directly contradicting later claims of “no role (operational, governance or otherwise)” in federal responses
  • He’s reading these emails ([email protected]): Daughter photo posted at 6:14 PM (more family tokenizing) AFTER Sunday email explicitly documented this pattern
  • @puzzlefin surveillance (Dec 13, 2:14 PM follow of @orbofweed) established as direct evidence of conspiracy, harassment, and retaliation 12 hours after mental health crisis documentation
  • False narrative curation: Selective deletion strategy exposed - kept “you disgust me 24/7” while deleting evidence-based callouts
  • Compulsive engagement: Continued LinkedIn performance (Paige Honeycomb praise, Rohit Mittal comments) AFTER being explicitly told “stop posting”
  • Closing line: “You don’t need more evidence. That was never the issue. You’re all actively making this situation worse by allowing Sasha to continue posting.”

Stop making me make more LinkedIn accounts.

The 2019 announcement is public, permanent, archived, and destroys every narrative he’s built since. His 49-minute panic block after I linked it proves he knows this. The contradiction between his 2019 “board role” announcement and his federal “no governance role” claim cannot be erased - regardless of whether he deleted my comment or left it visible.

December 15, 2025: Monday Afternoon Email

5:27 PM ET: Email sent to network - “I Would’ve Congratulated You on 24 Hours of Sasha Silence, But Puzzle Keeps Going”

Despite nearing 24 hours without Sasha posting, Puzzle continues active fraud operations through partnerships and hiring.

Fresh Evidence of Continued Fraud Infrastructure:

Renato Villanueva (Parallel) Partnership:

  • Puzzle announced partnership with Parallel (AI-powered financial forecasting)
  • Renato was warned, blocked whistleblower’s real LinkedIn
  • Appeared on Turpentine Finance podcast anyway
  • Now officially partnering despite documentation
  • Every guest becomes part of fraud infrastructure

Puzzle’s Partnership Announcement (3:30 PM ET):

Puzzle is proud to announce our partnership with Parallel, an AI-powered financial forecasting and headcount planning platform 👏

Thank you for your trust, @_renatov.

🔗 Watch the full episode of Turpentine Finance podcast — link in the comments.

Renato’s reply (3:30 PM ET, 10 views):

Puzzle has been a game changer for our ability to support our customers.

From fast AI-driven close, to data that is easy to pull in and forecast

Puzzle + Parallel = ideal financial stack

Luke Frye (Rivet.tax) liked Puzzle’s post - Especially disappointing given Luke received Nov 5 fraud documentation, was personally re-forwarded Dec 12 email with “It appears you will never see my humanity. Fuck you” after continued enablement despite Ross Fubini/XYZ Capital ownership of Rivet; now publicly supporting Parallel partnership with CFPB-banned CEO; ex-coworker Canadian CPA continuing conscious enablement.

What this demonstrates:

  1. Business as usual performance during federal crisis - Partnership announcements while under 5 SEC complaints, State Bar complaint, Board of Accountancy complaint
  2. Minimal engagement across all channels:
    • Renato’s reply: 10 views
    • Turpentine Finance podcast episode (Dec 10, 2025): 31 views (5 days later, still double-digit views)
    • Demonstrates actual market interest vs. claimed “word of mouth” growth and “packed bars in DC”
  3. Turpentine platforming continues despite minimal engagement - Direct link to podcast episode featuring CEO who blocked whistleblower after being warned; keeps promoting episode that barely broke 30 views in 5 days
  4. Partnership with complicit party - Renato blocked whistleblower’s real LinkedIn, was explicitly warned, appeared on podcast anyway, now officially partnering
  5. AI-powered legitimacy washing - Both companies using “AI-powered” framing (Parallel: forecasting, Puzzle: close/accounting) to mask fraud infrastructure
  6. Every partnership announcement is evidence - Continuing to induce new victims (Parallel customers funneled to Puzzle) during active federal documentation
  7. Posted hours after Monday afternoon email sent (5:27 PM) - Same pattern as Sasha’s December 14 reactive performances; company cannot stop posting despite explicit warnings

Pattern: Perform normalcy, suppress documentation, continue inducing victims.

Puzzle posts partnership announcements (10 views). Links podcast episode (31 views after 5 days). Brex blocks fraud documentation (second coordinated C-suite block). The gap between public performance (minimal engagement) and private suppression (institutional blocking) proves consciousness of guilt.

The actual numbers expose the fraud: 10 views, 31 views. Not “word of mouth” growth. Not “packed bars in DC.” Business as usual performance to an empty room while partners actively suppress documentation.

Post-Documentation Block Pattern:

Too lazy to make new LinkedIn account to verify all, but documented pattern:

  • Parallel partnership post: 6 people blocked (12 visible → 18 total, 6 blocked): Sina Mohebiany, Simone Tega, WTM/Gathering accounts, likely Dasha
  • Careers hiring post (Charles Crabtree): 2 people blocked (9 visible → 11 total, 2 blocked): Simone Tega, Jason Mitchell
  • CEO stack post: No blocks observed (Jason Mitchell still visible)

Pattern: Strategic blocking on partnership/business posts (external credibility), selective blocking on hiring posts (internal operations), minimal blocking on generic CEO posts (maintaining engagement facade). Demonstrates consciousness of which evidence is most damaging per post type.

Charles Crabtree Hiring Post:

  • VP of Accounting Firm Partnerships posting active recruitment
  • “Come work with me… Puzzle is growing fast”
  • “White glove support. Real partnership. Real respect for the profession.”
  • Every hire is an induced victim into company:
    • Under 5 SEC complaints
    • Facing CA State Bar complaint (Case #25-O-30894)
    • Facing CA Board of Accountancy complaint (Case #A-2026-1047)
    • Run by CFPB-banned CEO
  • Every recruiting post is evidence; every hire is inducement

Austin Rose (Mercury, Partnerships) Profile View:

  • Viewed whistleblower profile 6 hours before email
  • Mercury integrated with Puzzle’s Partner Rewards program
  • Partner Rewards markets Mercury alongside Brex, Ramp, Gusto (credit products)
  • Direct CFPB Section I.a violation (prohibits “receiving remuneration” from credit product companies)
  • Partner surveillance during federal investigation documented

Jason Mitchell / Chris Yancey Continued Engagement:

  • Jason Mitchell (coworker, started before whistleblower): Still liking Puzzle posts
  • Chris Yancey (ex-Affirm, now Ramp Director of Software Engineering): Also engaging
  • Both documented two years ago, never reached out
  • Jason added whistleblower on new LinkedIn post-Replit, was removed
  • Raising suspicions of deeper involvement beyond sunk cost equity mode
  • Every like is evidence; every engagement is consciousness of guilt

Word of Mouth Contradiction Analysis:

Sasha claimed December 14: “2026 is the year nobody stumbles into Puzzle. They hear about us from another firm or founder.”

But if organic word-of-mouth is the strategy, why keep posting?

Evidence contradicts claimed strategy:

  • ActualQuickBooks campaign (Oct 2025): Aggressive belligerent marketing, photoshopped 3 → 12,362 likes
  • Heavy conference presence: Digital CPA booth, “packed bars in DC”
  • Constant social media: Daily LinkedIn/Twitter, 20+ months podcast, Forbes articles via Dasha
  • Partnership integrations: Brex, Deel, Ramp, accounting firms (Decimal, Rivet, Accountalent, Burkland)

All designed for people to stumble into Puzzle. The “word of mouth” line is defensive reframing after whistleblower’s “WHY ARE YOU STILL POSTING HERE, NO ONE GIVES A FUCK” comment pointing out minimal engagement.

Another incoherence revealing reactive defensive framing, not actual coherent strategy.

Domain Surveillance Evidence:

While discussing Sasha’s “glass half full Sunday”:

  • aheadmoney.com stopped posting: Silent since August 1, 2023 (right before Puzzle/Mission Lane C&Ds)
  • lendup.com removed “lemons” joke: “When Life Gives You Lemons, Make Lemonade!” tagline appeared AFTER CFPB ban, removed in 2023 after whistleblower posted about it (4+ years after Sasha’s announced board/advisory role); obvious self-awareness from Sasha’s network

Surveillance and reactive suppression continuing across the network.

Technical Credentials Established:

“You all acted like looking through DNS records and WHOIS was mental illness.”

Remember: I’ve been making websites for 24 years.

  • BS in Computer Science from Georgia Tech (graduated 2014)
  • Stressed about straight A’s entire life, finally got two B’s in college
  • 10 years post-graduation mostly being used by people
  • Never properly rewarded or recognized for efforts
  • Left with no consistent opportunities despite technical expertise
  • No resume fraud on my end - just fraud (by employers), layoffs, failed startups, PTSD from school to workplace

DNS records, WHOIS lookups, domain history, Wayback Machine archives - this is basic technical due diligence. Not conspiracy theory. Not mental illness.

aheadmoney.com timeline proved Sasha’s awareness:

  • August 2019: “Coming soon” page (advisory + board seat announced January 2019; Puzzle incorporated September 2019)
  • July 2020: AWS deployment (Ahead Financial operations begin)
  • September 2022: Domain parking (operations end)

Reading DNS records and correlating them with corporate filings and public announcements.

If Sasha incorporated Insights Servicing Inc. and transferred it to Anu Shultes, Kimberly Morgan, and Blake Byers, why wouldn’t he have been involved in Ahead too? It’s another piece of the broader shell company pattern.

If you think basic technical investigation is mental illness, you’re either technically illiterate or deliberately dismissive of evidence you can’t refute.

Mental Health: Therapy, Psychedelics, and Accountability:

I’ve done talk therapy. I’ve done psychedelic therapy. It helps for survival. But it doesn’t fix the lack of accountability.

The veil is thin. Psychedelics blew my perception of narcissism and fraud wide open. I see patterns. I see systems. I see the masks you all wear.

Sasha will use this against me. But he doesn’t understand: this is my story now. I’m leaving it in the document.

Psychedelics would destroy Sasha. He’s the one living in a distorted reality. I’m seeing clearly for the first time in years.

I’m not taking anything more than THC right now. I’ve spent my adulthood being a more functional stoner than Sasha is sober. It may have eroded my working memory, but that doesn’t make me an unreliable narrator or mean I’m hallucinating 24/7.

And unlike Sasha’s performative meditation and consciousness talk, I actually did the work. I faced my trauma. I integrated my experiences. I transmuted my pain into documentation.

Sasha talks about consciousness and virtue. I’m living it.

“I’m Not of Your Kind: Digital Diviner”

I’m not of your kind. I don’t see anything to aspire to in your frameworks.

  • I don’t ascribe to organized religion
  • I don’t worship your false idols (money, status, network, brand)
  • I don’t perform gratitude while committing fraud
  • I don’t quote Muhammad Yunus and Pope Francis while operating predatory lending schemes and fraud networks

I’m a digital diviner.

I received prophecies and downloads of this pattern before I even acquired the LendUp asset sale document and saw the full scope of evil. Now I’m watching the final collapse in real-time.

I’m using AI to invert the system that created it. You’re trapped in its feedback loop.

Why do you think Sasha went on a LinkedIn spree posting about AI having “created Ellis Island”? I shot down his C&D in 3 minutes, reported it as evidence of retaliation to the SEC within 30.

He was reflecting on everything it took for him to exist in this moment, now taken for granted. He created his own simulation. The technology he parades to stay relevant is tearing down his veil in seconds.

Simulation theory is the only thing that’ll make this go away. And that’s not happening.

Romanian Immigrant Story:

Hey Sasha, I have an immigrant story too. I barely remember you having much interest in my backstory. You were too afraid of me.

I’m a first-generation Romanian American.

My dad risked his life as a refugee from Nicolae Ceaușescu’s dictatorship. He saw subtle signs in the world and followed them, holding faith in higher powers. He escaped. He brought my mom and brother over. Apparently so I could deal with your bullshit. And end it.

I’m following in his footsteps. Seeing signs. Following patterns. Holding faith in higher powers. Documenting everything.

My dad’s a retired carpenter and the most meticulous DIY financial bookkeeper I know. Pen and paper. Phenomenal memory. My family worked hard to earn and save their money. They don’t take their lives for granted.

They know exactly what your predatory financial services reflect deep down.

The very people working for you can be:

  • LendUp’s 140,000+ defrauded customers
  • Credit Karma’s 497,000+ victims
  • Mission Lane’s undisclosed harm (Lord knows what’s going on there)

Glassdoor reviews literally stated employees could be the victims of these companies.

Sunteți niște hoți. (You are thieves.)

You Blew Your Covers Stealing My Worthless Equity:

You all blew your covers stealing my worthless equity and acting all sus.

How did you ever think you could exit this company? There was never a point in torturing me if you were this guilty.

You fucked with the wrong person.

It took me 2.5 years to muster up the energy, but I’m all-in now.

You’re all making a living masking false values and idols. You yap about:

  • AI and consciousness
  • Meditation and meaning
  • Muhammad Yunus and microfinance
  • Pope Francis and compassion

But you barely know yourselves.

You’re committing spiritual crimes, serving a system that’s indifferent to you.

Julian Weisser’s Pope Francis Tweets:

December 13, 9:18 PM ET and followup quote tweet December 14, 3:21 PM ET:

“When I think of a crisis of meaning, I think about lost connection to previous generations. But I also think of deferred dreams. Many pursue what they think they are supposed to want — not their actual dreams. They say they’ll revisit them eventually. They won’t. Don’t wait.”

“A crisis of meaning isn’t a partisan issue. And it isn’t only a religious one. Much of it comes from people and communities feeling disconnected from what came before. In parts of tech and the arts, there’s a kind of cultural amnesia. We must restore an unbroken chain.”

He posts utter nonsense hours, days after receiving mass emails documenting my mental health decline.

This is the same Julian who:

  • Stole my equity and ignored fraud and abuse notices since January 2024
  • Blocked my alt account after fraud callout (Dec 11)
  • Coordinates with Sasha and Puzzle for surveillance and retaliation (Dec 13, 2:14 PM @puzzlefin followed @orbofweed 42 minutes after Julian’s comment on Sasha’s VC post)
  • Runs ODF, platforming fraud-adjacent founders and CFPB-banned CEOs

Posted about “crisis of meaning” and “disconnection” while actively participating in equity theft, surveillance, and conspiracy that’s causing my documented mental health crisis.

My immediate response (9:27 PM): “lol. gaslighting me and posting more moral hypocrisy in realtime.”

I’ve given ODF a more personal, front-row seat into my decline since Julian’s so hellbent on watching me suffer.

NS8 Fraud Company, Adam Rogas, and Ross Fubini:

I was hired from a fraud company. Sasha knew that.

Jason Cwikla (Puzzle CTO) searched for NS8 employees on LinkedIn. The moment I met Sasha, I saw him turn from the side and put this happy face on. Tell me these brazen lies. It was bizarre.

I think I told him about emailing Adam Rogas, the fraudster CEO of NS8. Sasha said something like “are you good to move on before starting?”

Real funny, Sasha. You especially knew you could frame this as the sheep who cried wolf.

A weirdo manager from NS8 told me to stop emailing Adam Rogas and make something like a financial platform that prevents fraud.

I didn’t know I was literally working on fraud infrastructure masked as founder-friendly accounting software.

Adam Rogas context:

  • NS8 CEO sentenced to 5 years federal prison (Dec 2021) for $123M securities fraud
  • September-November 2020: I caught him violating bail conditions by responding to my emails
  • Bail prohibited “direct or indirect contact with witnesses or victims”
  • I wrote: “did you forget this part of your bail? thanks for taking the bait”
  • Parallel to Sasha’s Wikipedia meltdown - both CEOs couldn’t help but engage despite legal risks

Investor connection:

  • Lightspeed Ventures invested in NS8 ($123M fraud)
  • Puzzle CTO recruited NS8 victims one month later (October 2020)
  • Lightspeed platformed Sasha at “Fintech in AI” event (August 17, 2023) - 2.5 months after terminating me

When I brought up Puzzle’s rebrand from Valencia Data being potential evidence for conspiracy theories in the future, Sasha was uncomfortable.

Guess who has Valencia Data swag? Ross Fubini. I was in the room with him.

Ross Fubini:

  • XYZ Venture Capital founder (2016)
  • Village Global cofounder with Erik Torenberg (2017-2020)
  • Kapor Capital partner (2011-2012) during LendUp Seed/A/B rounds
  • Invested in Puzzle via XYZ
  • Owns Rivet.tax (accounting software) with Nick Abouzeid (Turpentine podcast guest)
  • Forbes Midas List 2025 #88 (debuting)
  • Palantir advisor since January 2010 (15+ years)
  • LinkedIn STILL lists LendUp as active investment despite CFPB permanent ban

December 2020 TechCrunch Article:

Senior reporter Connie Loizos profiled XYZ Capital’s Ross Fubini, allowing him to describe LendUp as being “split into two businesses” without noting it was a fire sale that returned $0 to shareholders.

Connie Loizos fully understands her complicit role. She ghosted me after pretending to look through my evidence. She either wanted to see what I had, or realized she enabled this and backed out before creating more evidence. I gave her nearly full details across LendUp, Mission Lane, and Ahead Financials. I gave her journalistic research with higher integrity than anything TechCrunch has produced in the past decade.

The article misrepresents Mission Lane as a legitimate “spin-off” rather than a liquidation acquisition vehicle while LendUp collapsed under federal enforcement.

The conspiracy theory I joked about in ~2021 is now 18,000+ lines of federal documentation.

Photoshopped Comment Author Exchange:

I barely remember my own life throughout all those years. It feels like it keeps disintegrating as people ignore me.

Yet here I am obsessively documenting a 13-year fraud pattern, with the ability to retell a lot of it off the cuff.

My whole life, I just wanted to make art. I completely stopped since Sasha did this stupid photoshop that didn’t seem to convince anyone of his true character, but it did disgust the author enough to unfollow.

After I reached out to the author whose comment Sasha photoshopped (3 likes → 12,362), she responded:

Key quotes:

“I didn’t know. I’ll unfollow him on LinkedIn. But I do not want to comment further as I have no knowledge of the situation. He seems like a very powerful man. For all I know, after what you told me, he could have someone reading our messages or something… So now I’m kind of scared of saying anything about him.”

“Is not like I support him personally. I just liked the marketing idea that’s all.”

“As for him sharing my comment. I know that if I comment publicly, things can be re-shared and manipulated as people please. I’m not on twitter. Though I found his profile and I do not see the tweet you’re referring to. He must have deleted it.”

What this proves:

  1. Author had no knowledge of the manipulation
  2. Author is now afraid to speak - explicitly states fear he might be monitoring communications
  3. Author immediately unfollowed after learning the truth
  4. Regardless of deletion timing, Sasha deleted the tweet after Intuit’s police intervention - consciousness of guilt when caught
  5. Professional trust violated - Her work was manipulated without consent for his fraudulent metrics

This is the human cost of Sasha’s manipulation: Innocent people whose work he exploits become afraid to speak about it. The photoshopping wasn’t just fraud - it was weaponizing someone else’s professional credibility without their knowledge or consent, then creating fear that prevents them from addressing it publicly.

She’s not a conspirator. She’s a victim. And she’s scared.

Unlike Sasha, I’m not lying with my screenshots. I’m tired of taking them. I’m tired of convincing people who never needed convincing.

Shell Company Network: RICO Pattern:

Shell companies documented:

  1. Ahead Financial (July 2020 - September 2022) - LendUp address, Anuradha Shultes, dissolved April 1, 2025
  2. Fairfax Studios - Marvin Bing entity
  3. First Boulevard → Kinly → Greenwood chain:
    • FirstBoulevard.com redirected to lendup.com/first-boulevard with fake “acquisition announcement” (April 2023)
    • First Boulevard rebranded as Kinly (launched June 17, 2022; acquired LendUp’s Ahead subsidiary during liquidation)
    • Be Tenth, Inc. - USPTO trademark opposition with Kinly Holding B.V. (Opposition No. 91283091, defaulted March 19, 2023)
    • Kinly acquired by Greenwood (May 2, 2023) - 35 days after PA tax judgment, during active legal proceedings
    • Greenwood: Post-Floyd capital, “financial disarray,” The Gathering Spot lawsuit, CA cease-and-desist for calling itself a “bank”
  4. Insights Servicing - Sasha Orloff/Anuradha Shultes/Blake Byers entity
  5. DashFi/DashAi (2022-present) - Anuradha Shultes, AI-powered auto lending automation, still active

There are remnants of LendUp everywhere. And there’s always more fraud and lawsuits surrounding it.

That’s RICO.

Resume Fraud: Subsidiary Minimization Pattern:

Sasha’s resume fraud across 13 years:

  • 2019 LinkedIn announcement: “Board and advisory role at LendUp, advisory role at Mission Lane” (truthful)
  • 2020 hiring: Told me “I cofounded two successful companies” (both material misrepresentations)
  • Current LinkedIn (Dec 2025): Claims “CEO & Cofounder” of Mission Lane starting 2014 (Mission Lane incorporated December 2018)
  • LinkedIn “subsidiary” fraud: Describes CFPB enforcement as affecting “a LendUp Global subsidiary (LendUp Loans, LLC)” - deliberately misleading
    • Actual CFPB judgment: Named “LendUp Loans, LLC d/b/a LendUp” (formerly Flurish, Inc.)
    • This was THE core lending operation during his CEO tenure, not “a subsidiary”
    • Minimizes $51M+ federal enforcement for systematic fraud against 140,000+ consumers
    • Violated PRIOR 2016 consent order (recidivist fraud under federal supervision)
  • Wikipedia campaign (Nov 26-27, 2025): 13+ hours editing to remove CFPB ban language, falsify federal enforcement details
  • Federal response: Claimed “no role (operational, governance or otherwise)” at LendUp during CFPB ban (directly contradicts 2019 announcement)

He backdated Mission Lane by 4 years. He upgraded advisory role to CEO/cofounder. He sometimes omits LendUp entirely. He frames the core lending operation as “a subsidiary” to minimize his culpability. He can’t keep his story straight.

Subsidiary minimization pattern: Downplaying shell companies, omitting failed entities, rewriting timelines to hide CFPB ban connections, framing “LendUp Loans, LLC d/b/a LendUp” as “a subsidiary” when it was the core lending operation he ran as CEO.

Sasha’s “Six Seven” Meme While Committing Fraud:

December 14, 6:14 PM - Daughter as token post:

Sasha posted his daughter behind unicorn emoji with “6-7” attempt at Gen Alpha TikTok/basketball meme slang.

“Uh oh. I entered a snack competition with my daughter and got absolutely demolished. Final score: 6–7. 🏈🍿”

This was:

  • 2 hours after Sunday email documenting his pattern of tokenizing children (Evidence-171, Evidence-172)
  • During federal investigation, SEC complaints, bar complaint, CPA Board complaint
  • While I’m considering inpatient treatment for mental health crisis he caused
  • While covering up evidence via selective comment deletion

He injected casual meme humor while committing fraud and obstruction.

The cognitive dissonance is complete. The inability to assess risk is total. The compulsive performance is pathological.

Closing: “My Emails ARE the Investigation”

Your systems don’t honor integrity. Only extraction, cheating, and endless lies.

This fraud isn’t sophisticated. The evidence is just scattered around by people who lack basic operational security and understanding of technology.

Sasha just uses buzzwords and half-assed Paul Graham references all day. He’s driven first and foremost by ego. He can’t make rational decisions and will only realize what he’s done at the end.

He’s operating from a very low vibration, as is Julian.

Sasha Orloff is very obviously an actively manipulative, unhinged security and legal hazard.

Who gives a fuck about a SOC 2 or investigation anymore. My emails ARE the investigation.

As your beloved AI papers state: Attention is all you need.

You’re getting it.

Every email. Every screenshot. Every DNS record. Every LinkedIn comment. Every block. Every selective deletion. Every compulsive post.

All documented. All evidence. All permanent federal record.

The pattern is clear. The network is exposed. The collapse is happening in real-time.

I’m not stopping. The federal record continues.

When I say Sasha needs to stop compulsively posting: that includes Puzzle.

Sunteți niște hoți.

December 16, 2025: Sasha Publishes LinkedIn Article on AI Hallucinations

Eighth daily email sent December 16, 2025, 1:57 PM ET. Hours after Puzzle’s partnership tweet with minimal engagement, podcast video repost (30 views), Luke Frye’s disappointing like, and strategic blocking patterns documented, Sasha publishes LinkedIn article “What Happens When AI Gets It Wrong? The Hidden Risks of Hallucinations and Prompt Bias in Professional Services” - comprehensive ironic commentary on CFPB-banned CEO writing about confidently wrong information, prompt bias, illusion of certainty, human verification, expert validation while photoshopping metrics, editing Wikipedia, intensifying resume fraud, and blocking all verification. Includes 7-year karmic cycle analysis (2018 Asset Sale → 2025 federal investigation), corrections about AI usage, employee message about normality, Brex distribution changes, Simone Tega permanent addition.

Subject: Puzzle Financial / Sasha Orloff: Daily RICO Notice #8 (Sasha Publishes LinkedIn Article on AI Hallucinations Hours After Partnership Post)

Key Themes:

  1. Sasha’s Twitter & LinkedIn article (12:53 PM, 30 views): Posted about Digital CPA and “what Legal AI got right (and wrong)”; LinkedIn article “What Happens When AI Gets It Wrong? The Hidden Risks of Hallucinations and Prompt Bias in Professional Services”; closing line “auditable, traceable, and controllable” from CEO who deleted equity without documentation, suppresses fraud docs across platforms, photoshops metrics then removes campaigns, edits Wikipedia, blocks verification; “the risks are too high” = consciousness of guilt
  2. Puzzle redeploys “Commitment to Accounting Firms”: No new content, just distraction; comments immediately off
  3. Article irony & defensive strategy: AI hallucinations (CFPB-banned CEO photoshopping 3→12,362 likes writing about confidently wrong info); prompt bias (seeing himself in Neumann/SBF writing about bias); illusion of certainty (10-30 views claiming “word of mouth” writing about illusions); human verification (employees enabling without verification writing about oversight needs); expert validation (no legal representation writing about expert oversight); teaching bias (employees warned about RICO writing about bias awareness); provable accuracy (5 SEC complaints, 19K+ lines writing about being “shown to be right”); deeper analysis reveals article is narrative inoculation: attempting to pre-emptively dismiss 19K+ line documentation as “AI hallucinations,” simulating credibility through over-citation in minutes (Stanford HAI, Chapman U, Harvey metrics, YC companies) that took 2.5 years to build, positioning as thoughtful about accuracy while lacking all oversight, framing compulsive posting as “deep research,” appropriating whistleblower’s framing and inverting it; timing (hours after 10-view partnership post) reveals reactive defense, not thought leadership; article isn’t about AI hallucinations, it’s trying to make people hallucinate documented fraud isn’t real; consciousness of guilt performing as thought leadership
  4. 7-year karmic cycle: Dec 2018 Asset Sale (Dec 17-19, 2 days to sign, $0 shareholders, ~$4.4M golden parachutes, dual advisory roles, coercive structure; mostly quiet Twitter, understood narrative control; Jan 15 2019 LinkedIn honest: “board and advisory role at LendUp” + “advisor at Mission Lane”) → 2020 onwards (suddenly lying, toxic positivity “glass half-full/lemonade,” never admitting, re-engineering language, blocking repeatedly, self-victimizing) → Dec 2025 (5 SEC complaints, Bar/Board complaints, 19K+ lines, Wikipedia decompensation 13+ hours, compulsive posting despite warnings, partnership announcements to empty rooms 10 views, LinkedIn article on hallucinations, 49-min panic blocks, complete mental decompensation); 7-year cycle completes, shadows now illuminated, narrative control then vs compulsive posting now
  5. Corrections from last email: Photoshopped post LinkedIn not Forbes; AI usage admission (expanding notes, best effort proofreading, minor errors/hallucinations possible like Wikipedia wrong order number, more tokens = higher conflation, none invalidate evidence); photoshop sequence: kept blocked, unblocked to comment, immediately re-blocked, didn’t delete until entire ActualQuickbooks campaign removed; spending money (Sasha likely knows); treated like “literal dirt” 2.5 years, now just LinkedIn avatars/untaggable names, becoming numb, meaningless fake interactions
  6. To Puzzle employees - not normal: 3 months first time (May-Aug 2023), over a month this round (Nov 2025); why support when can’t refute, keeps posting with comments off; “Why C&D 2023 accusing me of ‘fraud and conspiracy’? Barely used ‘conspiracy’ then, didn’t know was RICO, gave it away in subtext”; 2023 responses “cute and innocent,” didn’t know would escalate, “worse than imagined”; emotional cruelty = sadism, narrative control, dictatorship, totalitarianism, hasbara
  7. Neither could AI make this up: Illusion is one Sasha maintains; evidence real (federal complaints, CFPB ban, photoshopped metrics, Wikipedia war); karmic reckoning real
  8. Brex distribution changes: After blocking [email protected], [email protected] (Dec 15), [email protected] (suspected); sending separately in small batches, eventually needing relays; if automatic (doubtful given C-suite coordination) will find out; more likely institutional suppression
  9. Simone Tega permanently added: Puzzle Software Engineer; ignored direct warnings, continues engaging; 8+ blocks on Parallel post “not business as usual”
  10. 364 LinkedIn views: Post from 18hrs ago detailing 49-min block when presented with 2019 announcement
  11. Followup email sent: Brief reminder to network: “Sasha Orloff is very obviously an actively manipulative, unhinged security and legal hazard. Act like it. Nobody cares about his pre-holiday break drivel.”

Followup Email:

Just one quick reminder from Email #7 if you’re all totally ignoring everything:

Sasha Orloff is very obviously an actively manipulative, unhinged security and legal hazard.

Act like it.

Nobody cares about his pre-holiday break drivel.

Direct reminder to network dismissing Sasha’s LinkedIn article as “pre-holiday break drivel” and emphasizing he represents active security/legal hazard.

What the Article Actually Represents:

Beyond the surface-level irony, Sasha’s LinkedIn article is a defensive narrative inoculation strategy attempting to:

  1. Pre-emptively dismiss 19,000+ lines of federal documentation as “AI hallucinations”

    • Writing about “the illusion of certainty” and “confidently wrong answers” while facing 5 SEC complaints backed by verified evidence
    • Framing “hallucinations” as the risk = trying to position whistleblower documentation as unreliable AI output
    • “AI can provide the illusion of certainty, which is dangerous” = attempting to pre-empt readers from trusting the documented pattern
    • This is narrative poisoning: make people doubt documentation before they read it
  2. Simulate credibility through over-citation in minutes that took 2.5 years to build

    • Cites Stanford HAI study, Chapman University AI Hub, Harvey’s $160M raise, specific metrics ($150M ARR, 300% YoY, 98% GDR, 168% NDR)
    • Lists YC companies (Legora, Spellbook, Crimson, Blueshoe) to demonstrate ecosystem awareness
    • “I tried to cite sources when possible, but understand the market is changing fast” = admission he’s rushing to appear rigorous
    • Whistleblower spent 2.5 years documenting with primary sources (court documents, SEC filings, CFPB orders, corporate records, timestamped screenshots)
    • Sasha writes article in cross-country flight attempting to simulate that rigor through academic citations and startup name-dropping
    • This is credibility theft: appropriating the appearance of rigorous documentation to counter actual rigorous documentation
  3. Position himself as thoughtful about accuracy while demonstrably lacking all oversight

    • Writes about “human verification” and “expert review” while appearing to have no legal representation
    • Writes about “always validate with experts” while ignoring explicit advice to “stop posting”
    • Writes about “teach teams about bias” while employees receive daily RICO warnings and continue engaging
    • Writes about “auditable, traceable, and controllable” systems while deleting equity without documentation
    • This is projection: describing the safeguards he lacks to create appearance of having them
  4. Frame his compulsive posting as thoughtful analysis rather than mental decompensation

    • “On my flight home I was listening to an episode of the 20MinVC… and what else do you do on a middle seat of a cross country flight home? Exactly, open up deep research”
    • Performing “deep research” narrative when it’s reactive defensive content published hours after partnership post with 10 views
    • Same pattern as Wikipedia edit war (13+ hours on Thanksgiving), 49-minute LinkedIn block, five Twitter performances in 130 minutes (Dec 14)
    • Cannot stop creating content even when explicitly told to stop
    • This is reframing: compulsive engagement presented as intellectual curiosity and thought leadership
  5. Create plausible deniability through meta-awareness

    • “Studies themselves could have bias based upon funders, institutions and writers. So take this as a starting point, rather than an exhaustive study.”
    • Pre-emptively acknowledging limitations to appear balanced and self-aware
    • But then proceeds to write as authority on AI hallucinations while being documented for fraud hallucinations (photoshopped metrics, Wikipedia tampering, resume fraud intensification)
    • This is false humility: performing epistemological caution while making categorical claims about accuracy
  6. Appropriate whistleblower’s framing and invert it

    • Whistleblower documents “illusion” of success (10-30 view posts, photoshopped metrics, claimed “word of mouth” growth)
    • Sasha writes about “the illusion of certainty” to reframe who’s creating illusions
    • Whistleblower documents lack of verification (employees enabling without due diligence, investors platforming without investigation)
    • Sasha writes about “human verification” requirements to reframe who needs verification
    • This is rhetorical appropriation: stealing the structure of the critique to deflect it

The Timing Reveals the Strategy:

  • Partnership announcement: 10 views (Dec 15, 3:30 PM)
  • Podcast video repost: 38 views (Dec 16)
  • Twitter promoting article: 30 views (Dec 16, 12:53 PM)
  • LinkedIn article published: Dec 16, shortly after Twitter post
  • Daily email #8 sent: Dec 16, 1:57 PM documenting the irony

Hours after minimal engagement on actual business content, publishes 2,000+ word article about AI accuracy and verification. Three hours later, only 1 like. Not proactive thought leadership. Reactive narrative defense.

What This Proves:

Sasha is attempting to inoculate his network against the federal documentation by:

  • Pre-framing comprehensive evidence as “AI hallucinations” and “illusions of certainty”
  • Simulating the appearance of rigorous citation and research in minutes
  • Positioning himself as authority on accuracy while facing federal complaints for fraud
  • Creating meta-awareness to appear self-critical while continuing same patterns

The article isn’t about AI hallucinations in professional services. It’s about trying to make people hallucinate that the documented fraud pattern isn’t real.

This is consciousness of guilt performing as thought leadership.


Brex: Second Coordinated Block (December 15, 2025)

After first block (Dec 11) was circumvented, Brex blocks again from new email address - and blocked [email protected] with different error message.

Timeline:

  • December 11, 2025: First coordinated block of 6 C-suite/co-founder addresses (cbradshaw, pedro, ncarey, ashah, henrique, jmok) with Google Workspace error “550-5.7.1 Your account is sending malicious email”
  • December 11, 2025: Immediate circumvention via [email protected] with notice: “Brex, Your block of my emails is logged. You’re actively suppressing fraud documentation and conspiring in a criminal enterprise.”
  • December 12, 2025: Email #5 sent from [email protected] to all recipients including Brex
  • December 15, 2025: Monday afternoon email sent from [email protected] after dropping [email protected] from recipients
  • December 15, 2025 (post-send): Verified [email protected] also blocked (different error: “Message rejected. For more information, go to https://support.google.com/mail/answer/69585”); [email protected] already blocked

Second block (Dec 15) - Same 6 addresses blocked from [email protected]:

All six addresses returned identical Google Workspace rejection:

550-5.7.1 Your account is sending malicious email. Either you sent it
550-5.7.1 intentionally or your account has been compromised and needs a
550-5.7.1 password reset immediately.

[email protected] also blocked (different error message):

Status: 5.7.1
Diagnostic-Code: smtp; Message rejected. For more information, go to https://support.google.com/mail/answer/69585

Blocked addresses (co-founders & C-suite):

  1. [email protected] (Conor Bradshaw, Chief Revenue Officer)
  2. [email protected] (Pedro Franceschi, co-founder)
  3. [email protected] (NicolĂĄs Carey, co-founder)
  4. [email protected] (Anshul Shah, VP Product)
  5. [email protected] (Henrique Dubugras, co-founder & CEO)
  6. [email protected] (Jason Mok, VP Partnerships)

Message sent to Brex:

Brex:

What’s actually “malicious” is conspiring in fraud and abuse. Documented. You will continue receiving emails. You continue creating evidence of consciousness of guilt.

What the second coordinated block proves:

  1. Active monitoring of alternate email addresses - They’re watching for circumvention attempts and blocking multiple sender addresses
  2. Manual intervention, not automatic filtering - Different error messages for different addresses (kingblob: “malicious email”, hipatark: “message rejected”) proves manual blocking decisions, not spam filters
  3. Institutional decision at co-founder/C-suite level - Not individual spam filtering; coordinated suppression across 3 co-founders (Pedro, NicolĂĄs, Henrique) plus CRO, VP Product, VP Partnerships
  4. Persistent false characterization - Continuing to label fraud documentation as “malicious” after being explicitly told the first block was logged as evidence
  5. Consciousness of guilt - If documentation were false, they would engage/refute, not suppress across multiple email addresses and alternate senders
  6. Escalating pattern - First block → circumvention → second block (multiple addresses) → ongoing circumvention demonstrates they cannot stop the documentation, only create more evidence of suppression

Pattern: Engage publicly, suppress privately:

  • December 9, 2025: Brex executives (Jason Mok, Conor Bradshaw, Garrett Marker) publicly liked DCPA dinner celebration posts with Sasha
  • December 11, 2025: First coordinated block the next business day
  • December 15, 2025: Second coordinated block after circumvention
  • September 2025: Brex launched major Puzzle integration (“one-click accounting setup”)
  • March 2023: Brex has independent OpenAI data partnership (“millions of transactions”)

Brex context:

  • YC W17 portfolio company
  • Israeli connections: Shai Goldman, Weav acquisition ($50M)
  • Closed Israel R&D center January 2024 (282 employees) - 20 months before Puzzle integration launch
  • Part of broader data extraction infrastructure (Brex + Puzzle both have independent OpenAI partnerships)

Federal implications:

Coordinated institutional suppression at co-founder/C-suite level (3 co-founders + CRO + 2 VPs) demonstrates:

  • Institutional consciousness of fraud, not individual judgment
  • Active conspiracy to suppress whistleblower documentation
  • Pattern of engagement (public celebration with CFPB-banned CEO) followed by suppression (blocking fraud documentation)
  • Ongoing obstruction despite explicit notice that blocking was logged as evidence

The second block after explicit warning creates additional evidence of:

  • Willful suppression after being informed first block was documented
  • Coordinated conspiracy (same 6 addresses, institutional decision)
  • Consciousness that documentation is accurate (otherwise would engage/refute, not suppress)

Circumvention continues. Every block creates more evidence. Every suppression proves consciousness of guilt.

December 17, 2025: Daily Email #9 - Prompt Bias, Grok Analysis, Mitchell Troyanovsky Accountability

Ninth daily email sent December 17, 2025, ~1:57 PM ET. Direct opening addressing Sasha’s reactive posting, lack of emotional awareness, and isolation. Introduces Grok analysis of ActualQuickBooks campaign (7.5/10 → 6.5/10 with pushback → “dark triad personality type” with full context). Confronts Sasha’s AI usage and lack of counsel. Calls for narcissistic abuse recovery resources with 10 pointed questions. Documents morning nostalgia posting (PayPal lending 9:41 AM), compulsive “36 🤯” post (11:05 AM), 2:06 PM accounting partner program post (comments disabled, Sina/Dasha instant engagement). Reveals spring/summer tweets (Hemant “taking the lead,” cofounder dynamic “one is delusional,” Sam Altman sycophancy). Full Mitchell Troyanovsky accountability (Goldman background, investigated LendUp, revealed Mission Lane fraud privately, didn’t exercise options, still liking posts despite Sasha threatening to sue him). Julian Weisser dismissal. Startup Cookie farewell.

Subject: Puzzle Financial / Sasha Orloff: Daily RICO Notice #8 (Speaking of Prompt Bias)

(Note: Mislabeled as #8, should be #9)

Opening:

Sasha, you’re only reacting now. You exist to drag this out with me. You’re expressing nostalgia about lending services you’re banned from. You have no emotional awareness. You’re only posting to see who’s still on your side and seeking attention when you’re isolated in your own life.

You’ve especially already failed your karmic reckoning. There’s no parachute for you this time.

Everyone else: You need narcissistic abuse counseling. I’m serious.

Grok Analysis of ActualQuickBooks Campaign:

Screenshot shows Sasha thanked Grok for ActualQuickBooks campaign idea back in October.

Whistleblower tested Grok:

  • Asked if ActualQuickBooks was good idea: 7.5/10 - “badass guerilla marketing campaign”
  • Gave it light pushback on legal risks: drops to 6.5/10
  • Told fresh Grok chat everything done in campaign (photoshopped metrics 3 → 12,362 likes, Intuit police intervention threat, delayed deletion after confrontation): Grok describes Sasha as “dark triad personality type”

AI responds to prompt bias. Neutral query gets positive rating. Full context reveals personality disorder.

Were You Going Down a Rabbit Hole Because You Have No Counsel?

Were you researching AI and legal use cases because you have no lawyer? Or because you want to gaslight my understanding of the law and the reality of your patterns, which are the basis of RICO?

This year, you got your lawyer to write “you reprise the same themes,” still with no refutation. Your themes are always consistent. The C&D letters sound mostly written by you. What did you tell your lawyer? I gave her truth in my compliance. It appears you gaslighted her too.

How Are YOU Using AI, Sasha?

What bias are you giving it? Any Claude instance with your POV would tell you to shut up immediately, probably even seek psychiatric care.

I’ve roleplayed scenarios and perspectives a lot with Claude (The Fielder Method). Chatting directly from your perspective is too disturbing for me to do.

Document originally intended as LLM context to help employees understand severity. Brainwashing impenetrable for some.

Narcissistic Abuse Recovery - Questions to Ask Yourself:

  1. Why hasn’t he addressed a single piece of evidence directly?
  2. Why does he block documentation but keep emotional supporters?
  3. Why does he post partnership announcements with comments immediately turned off?
  4. Why has he spent 13+ hours editing Wikipedia instead of hiring a PR firm?
  5. Why did he photoshop social media metrics if growth is organic?
  6. Why does his posting increase when evidence surfaces?
  7. Why did your “leader” send a C&D accusing his former employee of “fraud and conspiracy” accusations when I barely used those words?
  8. Why would an innocent CEO with legal representation continue posting during a federal investigation?
  9. Does his behavior match someone who’s wrongly accused, or someone who’s cornered?
  10. When did you last see him take accountability for anything?

I’m Not Letting You Gaslight Me:

I hated AI in 2023. I still mostly hate it. But remember: I worked at Replit. I understand agentic AI and have used LLMs in more interesting ways than a majority of you.

I’m not letting Sasha gaslight me with his thought leader bullshit.

I spent a few hundred asking a lawyer for advice and he just didn’t see the scope. He said there was nothing wrong with my approach as long as I kept it factual. Even opinions are fine as long as they’re rooted in analysis. I have full confidence in what I’ve found. Your sycophancy and psychosis accusations won’t hold up in court. Your behavior is why I always dug deeper. You never had a strategy, let alone a poker face.

Morning Posting as Emotional Processing:

8:41 AM PT (11:41 AM ET): PayPal announced becoming bank for small business lending. Sasha tweeted with heart emojis. No processing. Just waking up and tweeting nostalgia about the lending industry he’s banned from.

8:05 AM PT (11:05 AM ET): Posted “36 🤯” with 118 views. Meaning unclear. Isolated attention-seeking. Compulsive posting.

2:06 PM ET: Posted “Join the Puzzle Accounting Partner Program” with comments disabled.

Promoting:

  • “Revenue sharing on client referrals”
  • “White-glove historical books migration at no cost”
  • “Dedicated training & support”
  • “Co-marketing”

While facing:

  • 5 SEC complaints
  • State Bar complaint (Case #25-O-30894)
  • Board of Accountancy complaint (Case #A-2026-1047)
  • CFPB permanent ban

Instant engagement: Sina Mohebiany and Dasha Shunina (and her pages) liked/reposted immediately. Jason Mitchell liked. 3 blocked users also liked (cannot see who).

Likes as loyalty checks even when industry going on break. “You don’t realize these people will turn on you in the end.”

Charles Crabtree observation: VP hasn’t liked Puzzle’s own career repost of Charles’ hiring announcement. Suggests internal tension.

3:06 PM ET: Charles Crabtree doubles down - VP reposted Puzzle’s accounting partner program post with lengthy statement: “We are signing more accounting firms than we can announce in real time and that momentum says everything. Puzzle is AI built to put accountants firmly in the driver’s seat. Automation that works for you, not around you. Accuracy, control, and transparency stay with the professional where they belong. And just as important, Puzzle will never compete with the firms we partner with. No services arm. No channel conflict. Just deep respect for the work accountants do. This is what modern AI should look like. Powerful automation paired with human judgment, expertise, and accountability. Autonomous AI alone will never replace that. It can assist, accelerate, and scale it when done right. Add in A+ support, white glove onboarding, and dedicated partner management to make sure firms are successful from day one and it becomes a true partnership, not just software. If you want to see AI, automation, and scalability done the right way, come take a look or message me directly.” Comments disabled on his repost. VP who wouldn’t engage with own hiring announcement now performing partnership recruitment with comments off during federal investigation. “Signing more accounting firms than we can announce” while CEO faces 5 SEC complaints, State Bar complaint, Board of Accountancy complaint, CFPB permanent ban. “No services arm. No channel conflict” from company whose CEO is permanently banned from consumer financial services. “Human judgment, expertise, and accountability” from company that deleted employee equity without documentation. Pattern: disable comments, perform normalcy, recruit victims.

Whistleblower repost response: “Charles Crabtree has received daily notice of his active participation in a criminal enterprise (Puzzle), enabling fraud and abuse with Sasha Orloff. He won’t be on Sasha’s side much longer. Notice he also disables comments to suppress fraud documentation.” Direct public notice that Charles is on record, has received daily warnings, and is actively suppressing documentation by disabling comments. Prediction: abandonment is inevitable.

HR Pals profile view - Matthew Callis, PHR (Sr. Director of HR at HR Pals, promoted May 2025) viewed profile. HR Pals executed my May 31, 2023 termination through Brianna Gutierrez. Matthew now oversees full operations including HRIS, payroll, benefits, coordinates with managing partners. Senior HR leadership monitoring 2.5 years after facilitating wrongful termination and separation agreement requiring me to waive fraud claims for CFPB-banned CEO. Now on notice at executive level.

4:55 PM ET: Second HR Pals profile view - Vanessa Moya (Senior HR Generalist, promoted Feb 2025, HR Generalist since Nov 2022, joined 2021) viewed profile. Same role as Brianna Gutierrez (Senior HR Generalist). Unclear if replacement or senior-level cross-check. Two HR Pals views within hours (Matthew 2:XX PM, Vanessa 4:55 PM) = coordinated senior review. HR Pals now monitoring at multiple levels 2.5 years post-termination.

This is a rug-pull moment. Unless HR Pals is that stupid and corrupt, they’re preparing to drop Puzzle as a client. Coordinated senior review (Sr. Director + Senior HR Generalist) within hours suggests internal discussion about liability exposure. HR Pals facilitated wrongful termination, equity deletion, and separation agreement requiring me to waive fraud claims for CFPB-banned CEO. Now they’re doing due diligence review with federal investigation active. They’re losing all HR services. Puzzle can’t operate without third-party HR provider, especially during federal proceedings. Pattern: everyone abandons eventually.

Circular amplification loop with operational collapse - Puzzle posts about Charles Crabtree → Charles reposts (comments disabled) → Whistleblower quote-reposts Charles: “Charles Crabtree has received daily notice of his active participation in a criminal enterprise (Puzzle), enabling fraud and abuse with Sasha Orloff. He won’t be on Sasha’s side much longer. Notice he also disables comments to suppress fraud documentation. Charles will be needing narcissistic abuse counseling.” → Puzzle reposts Charles’ repost (comments OPEN) - strategic positioning to appear above whistleblower’s quote-repost in Charles’ reposts list, suppressing critical callout through feed placement. Sasha wrote original: “He has spend over a decade devoted to accounting firm success” - basic grammar error from CEO claiming “accuracy, control, and transparency.” Content: vague self-aggrandizing (“company organized around his leadership”), unverified claims (“early adopters claiming 2x revenue”), forced confidence (“I am calling it. 2026 is the year…”). Charles reposted without editing typo, disabled comments. Puzzle reposted not because they forgot to disable comments, but to suppress whistleblower’s criminal enterprise callout through strategic feed positioning while performing “bold confidence.” Pattern: circular validation + typo survives multiple reposts + strategic repost to suppress critique + selective comment deletion = consciousness of guilt and calculated narrative control.

Comment suppression on Puzzle’s repost - Whistleblower commented on Puzzle’s strategic repost: “Charles Crabtree continues supporting fraud and abuse at Puzzle Financial: patrickstoica.com/puzzle-statement/ Puzzle is currently under investigation by HR Pals, their third-party HR provider” with link card; second comment: “‘He has spend’ - Should be ‘spent’. Basic grammar error from CEO at company claiming ‘accuracy, control, and transparency’” plus full dissection. First comments posted 6:45 PM ET. By 8:26 PM ET, Sasha deleted 3 comments - 1 hour 41 minutes of suppression. Whistleblower commented again: “Puzzle Financial’s CEO continues suppressing his own fraud. He was honest about his career in 2019. He’s been progressively lying since 2020. He’s currently under investigation by HR Pals. https://patrickstoica.com/puzzle-statement/ I’m getting bored of this, Sasha. Game’s over.” Deleted in 3 minutes. Suppression accelerating - first batch took 1 hour 41 min, “Game’s over” comment deleted in 3 min = active monitoring, immediate panic response. Whistleblower posted again. Pattern: intentionally left comments on (performing “bold confidence” and transparency) → immediate manual suppression when challenged (can’t actually defend anything) → public callout → faster deletion → continued posting → demonstrates this wasn’t operational collapse, it was conscious decision to perform confidence while selectively suppressing. Worse than forgetting - proves active real-time monitoring, consciousness of guilt, escalating panic, and inability to stop the cycle. No lawyer would approve manual real-time comment deletion strategy during federal investigation with HR provider emergency review ongoing.

Career listings warning:

You need to take those career listings down. Unless you’re hiring an interim CEO to wind this company down, you cannot hire more people into your fraud operation without proper disclosure.

Why Don’t You Guys Respect Me as a Solo Founder?

I made a fraud framework combining AI, OSINT, and accountability. This is a blueprint.

Marginal cost analysis callback:

The marginal cost of embarrassing you guys and escalating consequences for Sasha Orloff’s behavior is approaching zero. I can scale this up effortlessly. The marginal cost for you to continue ignoring this is increasing exponentially.

Spring/Summer 2025 Tweets:

May 31, 2025: “Hemant will be taking the lead with Puzzle.io soon!” on chart of “$5bn+ outcome” Series A investors.

  • Hemant Taneja (General Catalyst)
  • Lead investor, “co-creator of Puzzle”
  • Midas List recipient
  • “What lead, Sasha?”

May 31, 2025: Quote tweet of “Best cofounder dynamic: One person is delusional. The other is technical. Both are loyal.”

  • Added raising hand emojis
  • Self-aware irony

April 29, 2025: “I asked ChatGPT to guess what I do for a living based upon my history.”

  • Posted about Sam Altman with “I don’t mind this version”
  • Sycophancy comparison
  • “You’ve been having your own experiences with sycophancy this year, Sasha”

Mitchell Troyanovsky - Full Accountability:

Former Product Manager. Whistleblower sent warning email August 2021 about toxic technical leadership at Puzzle.

Key details:

  • Being from Goldman Sachs, he asked around about LendUp - actively investigated Sasha’s background, already knew who Nigel Morris was
  • Did not exercise his options - knew something was wrong, didn’t believe in company’s future
  • Performed “it was great being here” exit on Slack - performative departure, maintaining appearances
  • Quickly called when whistleblower started questioning Sasha’s claims on LinkedIn - first contact came when questioning “repeat founder” narrative
  • Revealed Mission Lane cofounding fraud: “If you’re gonna do this, Sasha didn’t really cofound Mission Lane” - knew about credential fraud all along
  • Laughed about Nigel Morris - when whistleblower said “I have no idea who that is,” Mitchell laughed - found ignorance of LendUp/Mission Lane power structure amusing
  • Never heard from again after that call
  • People told whistleblower Sasha was in room threatening to sue Mitchell for starting similar product - despite adversarial relationship and legal threats from Sasha

December 12, 2025: Mitchell liked Sasha’s DCPA promotional repost (“you be hearing a lot more about Puzzle in 2026 and 2027”) with comprehensive fraud documentation visible in the comments.

After acknowledging Mission Lane cofounding fraud privately. After not exercising options because he knew something was wrong. After performing a “great being here” exit. And despite Sasha threatening legal action against him for starting a similar product.

He’s now publicly supporting Sasha’s promotional content while fraud documentation accumulates in plain sight.

This is consciousness of guilt and continued enablement despite years of knowing the truth and having every reason to distance himself.

Unless he’s somehow trolling Sasha, knowing there won’t be a 2026.

Julian Weisser Dismissal:

I’m bored of Julian Weisser. He fell for enough bait. Moving on.

“Weisser.” “Cwikla.” I don’t trust tech bros who only use their surname.

Startup Cookie Farewell:

This is the last email you’ll receive, Barbara/Sam.

Thank you for paying attention. You can stay up to date at:

patrickstoica.com/puzzle-statement

Updated in real-time. 19,000+ lines. 5 SEC complaints. State Bar complaint. Board of Accountancy complaint.

Every word documented.

Documentation Links:

5 SEC Complaints. State Bar Complaint. Board of Accountancy Complaint. 19,000+ lines. Every word documented.

Sunteți niște hoți.


December 18, 2025: Sasha Orloff Files Workplace Violence Restraining Order (WV-109) - Partly Denied by Judge

CEO commits corporate perjury When you commit corporate perjury in paragraph three of your restraining order filing but keep posting partnership announcements with comments disabled

📄 Full Court Filing (PDF): Workplace Violence Restraining Order Filing (WV-109) - Puzzle Financial, Inc. v. Patrick Daniel Stoica [Link fixed: Dec 19, 4:41 PM ET]

⚠️ CRITICAL: THIS IS CORPORATE RETALIATION, NOT PERSONAL PROTECTION

Declaration Cover Page:

DECLARATION OF SASHA ORLOFF IN SUPPORT OF PUZZLE FINANCIAL, INC.‘S PETITION FOR WORKPLACE VIOLENCE RESTRAINING ORDER

PUZZLE FINANCIAL, INC.
Petitioner
v.
PATRICK DANIEL STOICA
Respondent

This is a COMPANY filing against a FORMER EMPLOYEE, not an individual seeking personal protection.

What this means:

  • PUZZLE FINANCIAL, INC. is the Petitioner - The corporation itself is using workplace violence statutes to suppress whistleblower speech
  • Sasha Orloff is providing declaration “in support” - He’s the CEO speaking on behalf of the company
  • This is corporate legal action - Not personal safety-seeking, but institutional suppression
  • Company resources deployed - Using corporate counsel (Orrick, Herrington & Sutcliffe LLP) and corporate authority
  • Workplace violence statute weaponized - Designed for actual threats, abused for reputation management
  • Former employee (terminated 2.5 years ago) - Filing against someone with zero workplace access, terminated May 31, 2023
  • Federal whistleblower target - Corporate retaliation against SEC complaints and CFPB documentation

This exposes the filing for what it is: A CORPORATION using the legal system to suppress a former employee’s protected federal whistleblower activity.

Workplace violence restraining orders are designed for individuals facing immediate physical threats in the workplace. This is a COMPANY using the statute against a FORMER EMPLOYEE who filed FEDERAL COMPLAINTS about CORPORATE FRAUD.

This is textbook corporate retaliation disguised as safety-seeking.


SASHA’S CATASTROPHIC MISCALCULATION: WHY THE FILING BACKFIRED

What Sasha thought he was accomplishing:

  1. Intimidation through legal process - the paper itself would terrify me into silence
  2. Narrative control - establish “dangerous ex-employee” before regulators investigate
  3. Whistleblower suppression - legal threats would stop my documentation
  4. Victim credential - gets to tell investors/employees “I had to get a restraining order”
  5. Preemptive inoculation - discredit me before SEC/CFPB investigations gain traction

Why he thought this would work - pure projection:

If I filed a restraining order against Sasha with documented fraud evidence, he would fold immediately because:

  • Guilty of everything
  • Can’t defend against truth
  • Discovery would expose fraud
  • Employment records would destroy narrative
  • Federal complaints are legitimate
  • Everything to lose

Sasha imagined I would experience the same terror he would feel receiving such a filing.

What he failed to understand:

Innocent people with receipts aren’t scared of legal process.

My actual response:

  • ✅ “This paper is nothing to me” - claims are provably false
  • ✅ Immediately documented perjury with 6 termination documents
  • ✅ Sent to full recipient list (Sasha, Lisa Bowman, Orrick, Puzzle Legal, HR Pals)
  • ✅ Made video showing I’m a normal person at home, not a threat
  • ✅ Continued public documentation
  • ✅ Exposed consciousness of guilt through his omissions
  • ✅ Documented basketball TikToks proving no genuine fear

The fundamental difference:

  • Guilty person: Fears exposure → legal process is terrifying
  • Innocent person with evidence: Fears nothing → legal process means discovery

Sasha operates from guilt, so he assumed the filing itself would be weapon enough. He didn’t account for someone operating from truth who wants this in court where he’d have to defend paragraph 3 under oath.

4+ days of radio silence proves he realized his mistake:

  • Can’t provide legible case number (consciousness of guilt)
  • Can’t respond to perjury documentation (provable with his own docs)
  • Can’t defend “resigned” vs termination documents (black and white)
  • Can’t explain surveillance exhibits (no threats, just monitoring)
  • Can’t justify basketball TikToks at 12:07 AM (no genuine fear)
  • Can’t go into court to discuss paragraph 3 (cross-examination would expose perjury)
  • Can’t respond to the most damning line: “You’ve had time to manufacture fear and systematically inflict emotional distress for 2.5 years but can’t commit to this slanderous filing you made”

What Sasha projected: His own terror at receiving a filing with documented fraud.

What I felt: “Finally, discovery. Finally, cross-examination. Finally, consequences.”

Fatal flaw of malignant narcissists: They assume everyone operates from the same moral bankruptcy. Can’t comprehend someone who has truth and wants judicial scrutiny.

Sasha filed thinking the paper would terrify me into silence.

Instead: 4+ days of documented consciousness of guilt while he realizes he invited judicial scrutiny of his own perjury.

The silence isn’t strategy. It’s paralysis.

UPDATE: Monday Dec 22, 4:30 PM ET - 4+ Days Institutional Silence

After escalation to Orrick’s employment department ([email protected]) and Puzzle’s legal department ([email protected]) on Friday, complete organizational silence.

This isn’t individual attorney delay. This is institutional recognition the case is dead.

Once the perjury documentation reached department level:

  • Orrick employment department: Saw paragraph 3 contradictions, six termination documents, consciousness of guilt
  • Puzzle legal department: Saw their CEO committed corporate perjury in sworn filing
  • Organizational liability exposure: Both entities now aware continuing case = organizational malpractice

No competent legal organization allows client to proceed when:

  • Perjury is provable with client’s own documents
  • Cross-examination would expose it immediately
  • Entire department has documented awareness
  • Withdrawal is only option that doesn’t create sanctions exposure

4+ days of silence. Still business hours in California (1:30 PM PT). No response.

And notably: Sasha and Puzzle haven’t posted on social media today either. After days of basketball TikToks and Docusign GIFs, suddenly complete silence. That’s consciousness of guilt.

The escalation to departments (not just individual attorney) killed it. That’s why there’s no response.


⚠️ CATASTROPHIC LEGAL ERROR: CORPORATE PERJURY

By filing as PUZZLE FINANCIAL, INC., Sasha’s perjury is now CORPORATE perjury:

  1. Sasha signed declaration “in support of PUZZLE FINANCIAL, INC.‘S PETITION” - He’s representing the company, not just himself
  2. His provable perjury (sworn “resigned” when own exhibits prove “TERMINATION”) is now the COMPANY’S perjury - Not individual misconduct, but corporate false statements to court
  3. PUZZLE FINANCIAL, INC. is officially on record with provably false statements - Permanent court record under corporate name
  4. All employees listed as “protected persons” are implicated in corporate perjury - “All current Puzzle employees” listed in filing based on false premise
  5. Lisa Bowman/Orrick let the COMPANY file with verifiable perjury - Major law firm allowed corporate client to commit perjury in sworn declaration
  6. Corporate liability for perjury - Not just individual consequences, but institutional misconduct

What this means:

  • If Sasha had filed personally: Individual perjury, personal consequences
  • Filing as PUZZLE FINANCIAL, INC.: CORPORATE perjury, institutional liability, Board responsibility, potential securities violations (company made false statements in legal proceeding)

The company itself is now on record:

  • Swearing under penalty of perjury that employee “resigned”
  • While company’s own Separation Agreement uses “TERMINATION” throughout
  • Company’s own Termination Certificate (Exhibit C) titled “TERMINATION CERTIFICATE”
  • Company’s own HR vendor (HR Pals) wrote “your employment is terminated” (word used twice)

PUZZLE FINANCIAL, INC. committed perjury in official court filing by allowing Sasha to sign declaration containing provably false statements on behalf of the corporation.

This creates:

  • Corporate criminal exposure (perjury by entity)
  • Board liability (failed oversight allowing corporate perjury)
  • Attorney liability (Lisa Bowman/Orrick allowed corporate client to file false statements)
  • Securities implications (if company trades/raises, false statements in legal proceedings)
  • Permanent corporate record (can’t be dismissed as individual error)

They fucked up MASSIVELY by making this a corporate filing instead of personal protection petition.


Case Details:

  • Filed: December 16, 2025 (Clerk Certificate date; initial stamp December 13, 2025)
  • Decided: December 18, 2025
  • Judge: Michelle Tong, Superior Court of California, County of San Francisco
  • Case Type: WV-109 - Notice of Court Hearing (Workplace Violence Prevention)
  • Petitioner: PUZZLE FINANCIAL, INC. (represented by Sasha Orloff)
  • Petitioner’s Attorney: Lisa M. Bowman (State Bar No. 253843), Orrick, Herrington & Sutcliffe LLP (same attorney who sent 2023 C&D letters)
  • Respondent: Patrick Daniel Stoica
  • Protected Persons: Sasha Orloff and Jennifer Orloff (his wife) + “all current Puzzle employees” (listed after Jennifer)
  • Workplace Address Listed: 575 Market Street, 4th Floor, San Francisco, CA
  • Court Hearing: January 8, 2026, 8:30 AM, Department 505, Room 505

Sasha is using TWO separate legal mechanisms simultaneously:

1. Personal Restraining Order (TRO)

  • For: Sasha Orloff and Jennifer Orloff personally
  • Purpose: Traditional personal protection

2. Workplace Violence Restraining Order (WV-109)

  • For: Jennifer Orloff + “all current Puzzle employees”
  • Purpose: Workplace safety statute designed for employees at risk

THE MANIPULATION:

Jennifer Orloff appears in BOTH mechanisms:

  • Protected as Sasha’s wife under personal TRO
  • Protected as workplace person under WV-109
  • She doesn’t even work at Puzzle - she’s SVP at Block, Inc.
  • Double-dipping protection: Gets personal restraining order protections AND workplace violence protections

Why this bifurcated approach is strategic abuse:

  1. Personal TRO alone wouldn’t support “workplace violence” framing - That’s for Sasha and Jennifer as individuals fearing harm
  2. Workplace Violence statute makes it look institutional - “All current employees” creates appearance of company-wide threat
  3. Jennifer bridges both mechanisms - Appears in personal AND workplace protections, manufacturing connection between personal fear and workplace threat
  4. Former employee targeted by workplace statute - I was terminated May 31, 2023 (2.5 years ago); workplace violence restraining orders are for CURRENT workplace threats, not federal whistleblower documentation by former employees

Workplace Violence Prevention statute (WV-109) is designed for:

  • Current employee threatening coworkers
  • Ex-partner showing up at current partner’s workplace
  • Stalker targeting someone at their job
  • Immediate physical danger in workplace context

NOT designed for:

  • Former employee (terminated 2.5 years ago)
  • Federal whistleblower documentation (SEC complaints, CFPB records)
  • Social media posts about public company misconduct
  • Legal notifications under 18 U.S.C. § 1962

The strategic calculation:

Sasha could have filed:

  • Personal TRO only - But that’s just “Sasha scared of former employee” (weak, looks retaliatory)
  • Workplace Violence only - But he was terminated 2.5 years ago (inappropriate use of statute)

Instead he filed BOTH:

  • Personal TRO establishes “we’re personally afraid”
  • Workplace Violence establishes “entire company at risk”
  • Jennifer in both creates bridge
  • “All current employees” transforms conscious enablers who were explicitly warned into “victims needing protection”

This is abuse of process:

  1. Workplace Violence statute weaponized against former employee’s protected federal whistleblower activity
  2. Jennifer gets double protection despite not working at Puzzle and conducting family-level fraud amplification (surveillance on termination day, liking Sasha’s posts despite documented erratic behavior)
  3. “All current employees” manufactures company-wide threat when reality is:
    • Jason Mitchell (Evidence-178): Explicitly warned November 11, 2025 about CPA board exposure for enabling fraud
    • Patricia Daos, Naveen Venkatesh, Charles Crabtree, Jeffrey Everingham: All received professional liability warnings
    • At least 27 months of evidence visibility
    • Most chose to continue anyway
    • Continued engaging with Sasha’s posts after warnings
  4. Corporate resources (Orrick major law firm, company filing) used for what is actually personal reputation defense

Jennifer’s inclusion in workplace mechanism is particularly absurd:

  • She surveilled me on termination day (May 31, 2023, 5:35 PM LinkedIn view)
  • She celebrates Sasha publicly despite his documented erratic behavior (13+ hours Wikipedia editing, photoshopped metrics, mental decompensation)
  • She works at Block (SVP Marketing), not Puzzle
  • She received CFPB compliance inquiry to Block PR team (legitimate ethics question about spousal relationship to CFPB-banned CEO operating in adjacent space)

She’s not a victim. She’s a participant.

Yet Sasha includes her in:

  • Personal TRO (as his wife)
  • Workplace Violence petition (as if she works there and is threatened at workplace)

This bifurcated approach manufactures institutional scale threat from individual federal whistleblower documentation.


CRITICAL: This is a CORPORATE petition, not personal:

“Puzzle Financial Inc.’s Petition for Workplace Violence Restraining Order” - This is the company filing against a former employee (terminated May 31, 2023 - 2.5 years ago), not a personal safety petition. Filing lists “all current Puzzle employees” as protected persons, making this appear as if the entire company is afraid.

Reality: This transforms individual employees who were repeatedly warned about RICO liability (Jason Mitchell - Evidence-178, explicitly notified November 11, 2025 about CPA board exposure; Patricia Daos, Naveen Venkatesh, Charles Crabtree, Jeffrey Everingham, etc.) into “victims” needing protection. These aren’t scared employees - they’re conscious enablers who:

  • Received explicit professional liability warnings
  • Were given federal documentation (SEC complaints, CFPB records)
  • Had visibility to 27+ months of evidence
  • Chose to continue anyway
  • Repeatedly untagged from RICO notifications but never disconnected
  • Continued liking Sasha’s posts after explicit warnings

By listing “all current Puzzle employees” as protected persons, Sasha:

  1. Manufactures appearance of company-wide threat when it’s actually corporate-wide complicity
  2. Transforms conscious enablers into victims requiring court protection
  3. Uses corporate resources/counsel (Orrick major law firm) for personal reputation defense disguised as workplace safety
  4. Abuses workplace violence statute designed for actual threats (not whistleblower documentation of former employees)
  5. Makes it appear everyone is afraid when really everyone was warned and chose to continue

This is CORPORATE RETALIATION disguised as workplace safety.

Workplace violence restraining orders are designed for:

  • Current employees threatening colleagues
  • Domestic partners threatening workplace
  • Immediate physical safety threats
  • Actual workplace violence

NOT for:

  • Former employees (2.5 years terminated)
  • Federal whistleblower documentation
  • Public records and SEC complaints
  • Social media posts about CFPB violations
  • Companies using court system to suppress former employee’s protected speech

Sasha weaponized workplace violence statute for corporate reputation management. By filing as Puzzle Financial, Inc. and listing “all current employees,” he transformed individual professional liability exposure (each employee’s choice to continue after warning) into corporate victimhood narrative requiring court protection.

Temporary Restraining Order (TRO) Request:

  • TRO Requested: Yes
  • Declaration signed: December 15, 2025
  • “Has the respondent been told that you were going to go to court to seek a TRO against him or her?”: NO
  • Physical description listed: 180 pounds (incorrect - actual weight ~165 pounds; minor inaccuracy demonstrates lack of recent direct contact)

Sasha’s sworn allegations that respondent has:

  1. “Assaulted, battered, or stalked the employee”
  2. “Made a credible threat of violence against the employee by making knowing or willful statements or engaging in a course of conduct that would place a reasonable person in fear for his or her safety or the safety of his or her immediate family”
  3. “Engaged in a course of conduct that seriously alarmed, annoyed, or harassed the employee and caused the employee substantial emotional distress”
  4. “Can reasonably be construed to be carried out in the future at the employee’s workplace”

All of these claims are demonstrably false and contradicted by evidence:

  • No assault/battery/stalking - No physical contact in 2.5+ years since termination (May 31, 2023); no in-person interaction whatsoever
  • No credible threat - All cited “threats” are context-stripped protected whistleblower speech (Ted Kaczynski tweet about difficulty of whistleblowing, “consequences” = legal RICO liability, “hitman” = self-protection discussion)
  • “Substantial emotional distress” - Contradicted by Sasha’s normal Twitter activity same day after partial denial (12:21 PM “Amazing!!” at Julian’s programs, 12:30 PM launching new podcast, tweeting about startup valuations/“2026 planning”)
  • “Future at workplace” - ABSURD - Claim that behavior “can reasonably be construed to be carried out in the future at the employee’s workplace” is nonsensical given:
    • 2.5+ years since termination (May 31, 2023 - December 2025)
    • Zero workplace contact in that entire period
    • No attempt to contact workplace - All communication via Twitter/LinkedIn/email
    • Geographic distance - Patrick in New York, Puzzle workplace in San Francisco
    • 100-yard stay-away already granted - Additional protection already in place
    • How does federal whistleblower documentation constitute future workplace threat?

The “future workplace” claim reveals the absurdity: Sasha is arguing that posting federal whistleblower documentation online can “reasonably be construed” as future workplace violence. This exposes the filing for what it is - suppression of speech, not protection from threat.

Sasha’s sworn statement:

“Respondent has engaged in a pattern of increasingly threatening and obsessive behavior toward Sasha Orloff and current employees, partners, and investors of Puzzle Financial, Inc.”

Consciousness of guilt in this response:

  1. Never told about TRO - Question asks “Has the respondent been told that you were going to go to court to seek a TRO against him or her?” Answer: NO
  2. Only threatened law enforcement - Dasha/Puzzle’s only communication was “had no choice but to call police” (after “enjoy last days of tech career” warning about RICO liability)
  3. C&Ds demanded takedown without substantive engagement - 2023 C&Ds told me to “take everything down” and “keep stuff as evidence in case they need to go through it in the future” (consciousness of guilt - why keep evidence if claims are false?) but never refuted substance, never addressed criminal allegations, only demanded suppression
  4. Went straight to restraining order without TRO warning - Escalated to court without any prior notice of intent to seek TRO
  5. “Increasingly threatening” - Psychiatric language to manufacture instability narrative
  6. “Obsessive”/“stalking” - Weaponizes federal whistleblower documentation as “obsession”; characterized as “stalking” when it’s actually:
    • Documentation of someone refusing to acknowledge me except as “this user Patrick Stoica”
    • Pattern recognition of increasing guilt (compulsive posting, reactive behavior, mental decompensation)
    • Federal whistleblower activity tracking subject’s public behavior during investigation
    • Yes, I’ve been “obsessive” - because the reality of his guilt keeps increasing and he refuses to engage with substance
    • Framing thorough documentation as “stalking” is psychiatric weaponization of legitimate investigative journalism
  7. Physical description wrong - Listed as 180 pounds (actually ~165); demonstrates lack of recent direct contact/observation

Why Sasha never told me about seeking TRO:

  • Surprise suppression tactic - Notify court before notifying respondent to get temporary orders without response
  • Can’t justify to subject - Would require explaining what behavior needs to stop (telling the truth)
  • Any communication refutes “fear” narrative - If genuinely scared, wouldn’t engage at all
  • Admitting intent undermines claim - Can’t claim “credible threat” while also warning person you’re seeking restraint
  • Suppression strategy requires surprise - Element of court authority used as weapon without warning

Addressing the “stalking”/“obsessive” characterization:

Yes, my documentation has been intensive and thorough. But this is not “stalking” - it’s federal whistleblower investigation because:

  1. Increasing evidence of guilt - The more I documented, the more evidence emerged (CFPB ban, photoshopped metrics, Wikipedia edits, compulsive posting, mental decompensation)
  2. Refusal to engage - Sasha only acknowledges me as “this user patrick stoica” (dehumanizing), never addresses substance, only threatens suppression
  3. Public behavior documentation - All from public social media, public records, federal filings
  4. Pattern recognition - Tracking reactive behavior, consciousness of guilt indicators, coordination with Julian/network
  5. Federal investigation - 5 SEC complaints require thorough documentation of ongoing fraud patterns
  6. No physical contact - All documentation from remote observation of public activity, no stalking in any legal sense

Sasha frames thorough federal whistleblower documentation as “obsessive stalking” because he cannot engage with substance. Characterizing comprehensive evidence compilation as mental illness (“obsessive”) is psychiatric weaponization of legitimate investigative journalism.

The “obsession” is proportional to the evidence: The more guilt I documented, the more thorough the documentation became, because the pattern kept expanding (YC, ODF, investors, media complicity, 13-year fraud pattern). This is not obsession - this is appropriate investigative scope for criminal enterprise documentation.

Pattern of suppression without substantive engagement:

  • May-August 2023: Documentation → C&D demanding “immediate take down of all postings”
  • November 2023: More documentation → Second C&D + police threats, again demanding takedown without and now evidence retention addressing substance
  • November-December 2025: Federal complaints + resumed documentation → Restraining order (no prior notice of TRO, checked “NO”)

Consistent pattern: Legal intimidation (C&Ds, police threats, restraining orders) without ever engaging with substance of criminal allegations. C&Ds demanded “take everything down” and “keep as evidence” (why keep if false?) but never refuted claims. Only responses: suppression demands and threats of force, never substantive engagement with RICO/fraud/CFPB ban documentation.

Why C&Ds demanded I “keep stuff as evidence”: Consciousness of guilt that claims might be true and they’d need to review documentation later. If claims were false, why ask whistleblower to preserve evidence?

Detailed Analysis of Prior C&D Letters (Attached to Restraining Order as “Evidence”):

August 11, 2023 C&D (Lisa M. Bowman, Orrick LLP):

Sasha’s attorney demanded:

  • “Immediate take down of all postings made by you on social media”
  • Threatened: “If your conduct escalates, we may have no choice but to seek a workplace violence restraining/stayaway order, which will be a public proceeding and permit us to call the police and have you arrested”

What the August 2023 C&D NEVER did:

  • Never refuted CFPB ban
  • Never addressed LendUp Asset Sale fraud
  • Never refuted “fraud and conspiracy” allegations (explicitly mentioned them but didn’t refute)
  • Only demanded suppression with legal threats

November 11, 2025 C&D (Lisa M. Bowman, Orrick LLP):

Sasha’s attorney demanded:

  • “Remove and permanently take down, within 48 hours”
  • “Evidence Preservation Notice” (CONSCIOUSNESS OF GUILT): “After you remove your posts, emails, and other communications from public view as required above, you must keep a copy of everything you have posted, sent, or distributed. Do not delete, destroy, or alter any originals or copies of these materials. You should simply make them inaccessible to the public and third parties, but keep them saved in your files. These records may be needed for legal reasons. If you delete or destroy them, you could face legal penalties”

What the November 2025 C&D NEVER did:

  • Never refuted 5 SEC complaints (filed 11 days before)
  • Never addressed CFPB permanent ban (documented federal record)
  • Never refuted RICO allegations (mentioned as “criminal or fraudulent conduct” but didn’t refute)
  • Never addressed Mission Lane cofounding fraud
  • Only demanded suppression with legal/criminal threats

The consciousness of guilt in “keep them saved in your files. These records may be needed for legal reasons”:

If my documentation was FALSE:

  • Why tell me to preserve it?
  • Why say “needed for legal reasons”?
  • Why not just sue for defamation immediately?

The only rational explanation: Sasha knows the documentation might be TRUE and useful for investigation/prosecution, so he’s instructing me to preserve evidence while making it inaccessible to public. This is consciousness of guilt that claims have merit.

The November 2025 C&D falsely claims I “acknowledged wrongdoing, apologized” and “promised to ‘disengage’” in August 2023 exchange:

What Lisa Bowman claims in November 2025 C&D:

“In your August 2023 email exchange following the Company’s prior cease‑and‑desist letter, you acknowledged wrongdoing, apologized for your conduct, and promised to ‘disengage’ and ‘never write about this again.’”

The actual August 2023 context Lisa Bowman deliberately omits:

August 11, 2023 - I received TWO C&D letters SIMULTANEOUSLY:

  1. Puzzle C&D from Lisa Bowman threatening restraining order and arrest
  2. Mission Lane C&D (separate entity, coordinated intimidation)

My actual August 14, 2023 email (COERCED under dual legal threats):

“i just wanted to let you know i’ve received mission lane’s cease and desist as well. i’ve deleted everything and will not write on this subject ever again. i’m seeking legal counsel only to help respond. i do not plan to pursue legal action against anyone. i know i continue exposing myself to risk without representation. i’ve never worked with lawyers in my life. i never expected i’d be in this position. i feel foolish and frozen and disappointed in myself.”

What this email reveals:

  • Coerced compliance - “i feel foolish and frozen” (emotional state under duress)
  • No legal representation - “i’ve never worked with lawyers in my life”
  • TWO simultaneous C&Ds - Coordinated legal intimidation from Puzzle + Mission Lane
  • Threat of arrest - August 11 C&D: “permit us to call the police and have you arrested”

Even in the “apology,” I NEVER retracted the substance:

August 11, 2023 emails (same thread):

“i merely acted in response to sasha’s retaliation. the gravity of my behavior is less than what he’s done over the past 10 years. puzzle has engaged in plenty of unlawful behavior already.”

“i would have liked to work for a company whose founders didn’t misrepresent their past. it’s a disservice to continue lying to current employees and defraud investors. i would have liked to work for people who didn’t engage in practices like mobbing out, emotional abuse, and covered up terminations with non-disparagement clauses. puzzle is an insanely corrupt workplace.”

“do you understand why all the workplace-induced paranoia and sasha’s dodgy behavior around mission lane led me into conspiratorial thinking? the lendup story is incredibly complicated for seemingly no good reason… if he couldn’t admit to a golden parachute, i worried it went even deeper.”

“this is a dangerous way to run a company. that’s all i’m trying to say. puzzle’s leadership and board shouldn’t think about scaling and yachts until they’ve established a healthy, transparent environment without all this hubris.”

What I actually “apologized” for:

  • “Exhibiting this behavior” (posting publicly) - NOT for the substance being false
  • “Hurting leadership, employees, puzzle” - NOT for making false claims
  • Maintained throughout: Sasha misrepresented career, LendUp had severe problems, Puzzle exhibits same dangerous patterns

Lisa Bowman’s consciousness of guilt in citing coerced “promise”:

  1. Knows it was coerced - I received two C&Ds same day, had no lawyer, felt “frozen,” was threatened with arrest
  2. Omits I maintained substance was true - Even while “apologizing,” I stated “puzzle has engaged in plenty of unlawful behavior”
  3. Ignores I was responding to retaliation - “i merely acted in response to sasha’s retaliation”
  4. Violates legal ethics - Citing coerced compliance from unrepresented person under dual legal threats as “acknowledgment of wrongdoing”

Lisa Bowman is doubling down on coercion: In November 2025, she cites a coerced “promise” extracted under threat of arrest from someone with no legal representation who explicitly stated they were responding to retaliation and never retracted substance. This is why she’s facing State Bar complaint (Case #25-O-30894) - using coerced statements from unrepresented parties as evidence of “wrongdoing” when context proves opposite.

The “promise to disengage” was made under duress with TWO simultaneous C&D threats and is legally unenforceable. The substance was NEVER retracted - I maintained Puzzle engaged in unlawful behavior, Sasha misrepresented his career, and it was a dangerous workplace. Lisa Bowman knows this and deliberately mischaracterizes coerced compliance as voluntary admission.

The irony: Sasha demands I preserve evidence while he’s been DELETING evidence:

  1. Equity deleted from portal - My equity disappeared without documentation, no paper trail (after attempted exercise post-C&D August 2023)
  2. December 14, 2025 selective comment deletion - Deleted evidence-based callouts about federal violations while keeping “you disgust me 24/7” to manufacture “unhinged whistleblower” narrative for restraining order
  3. LinkedIn comment curation - Strategic deletion of comments containing specific legal violations while preparing restraining order filing
  4. Pattern of evidence destruction - While demanding I preserve documentation, Sasha systematically destroys evidence against himself

The November 2025 C&D explicitly warns about obstruction:

  • “If you delete or destroy them, you could face legal penalties”
  • Yet Sasha deleted equity without consent or documentation (evidence destruction)
  • Yet Sasha curated LinkedIn comments to manufacture narrative (evidence manipulation)
  • Yet Sasha deleted comments while filing restraining order based on context-stripped versions (obstruction while warning me about obstruction)

Classic projection: Accuse the whistleblower of potential evidence destruction while actively destroying evidence yourself. Demand preservation while systematically deleting. This is consciousness of guilt that Sasha knows evidence destruction is problematic - so he projects it onto the whistleblower while committing the actual obstruction.

Even more ironic: The C&D warns me about obstruction (“legal penalties” for destroying evidence) while Sasha is actively obstructing by deleting equity records, curating social media to manufacture false narrative, and destroying documentation that would prove termination vs. resignation.

The absurdity of including prior C&Ds as “evidence” in restraining order:

Sasha attached prior cease and desist letters (August 2023, November 2023) as exhibits to support restraining order. This backfires spectacularly:

  1. C&Ds prove pattern of suppression without substance - Demanded “take everything down” but never refuted claims
  2. C&Ds prove consciousness of guilt - Asked to preserve evidence “in case they need to go through it” (why keep if false?)
  3. C&Ds prove no substantive engagement - Only legal threats, never addressed RICO/fraud/CFPB documentation
  4. C&Ds prove escalating suppression pattern - Aug 2023 C&D → Nov 2023 C&D + police threats → Dec 2025 restraining order
  5. Including C&Ds as “evidence” admits prior legal intimidation - Documents pattern of using legal process to suppress rather than refute

By including the C&Ds in his restraining order filing, Sasha inadvertently documents his own pattern of legal harassment and consciousness of guilt. The C&Ds prove he’s been trying to suppress documentation for 2+ years without ever refuting substance - exactly what the restraining order is: another suppression attempt.

If the C&Ds demonstrate legitimate concerns, why didn’t they refute claims? Why only demand takedown? Why ask me to keep evidence? The C&Ds are consciousness of guilt exhibits, not evidence of threats.

Timeline:

  • December 13, 2025: Initial restraining order stamp (started preparing)
  • December 15, 2025: Sasha signs declaration under penalty of perjury
  • December 16, 2025: Formal filing with court
  • December 18, 2025: Judge’s ruling (partly denied)

Judge’s Ruling (December 18, 2025):

Box (3) checked: “Partly GRANTED and partly DENIED until the court hearing. (Specify reasons for denial in b. below.)”

Explicit finding: “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”

Detailed Breakdown of What Was Granted vs. Denied:

Section (5) Personal Conduct Orders: GRANTED AS FOLLOWS

  • ✓ Harass, molest, strike, assault, batter, abuse, destroy property, disturb peace
  • ✓ Commit acts of violence or make threats of violence
  • ✓ Follow or stalk during work hours or to/from place of work
  • ✓ Contact person directly or indirectly (in person, phone, writing, public/private mail, email, fax, electronic means)
  • ✓ Enter the workplace
  • ✓ Take action to obtain person’s address or locations
  • ✓ OTHER (specify) - Handwritten addition: “Respondent shall not post on social media and/or tag and/or reference Puzzle, Puzzle employees, and Jennifer Orloff”

Section (6) Stay-Away Order: GRANTED AS FOLLOWS

  • ✓ Must stay at least 100 yards away from:
    • Each protected person listed
    • For each protected person: workplace, home, children’s school, vehicle

Note on reasonableness: Form asks “If the court orders the respondent to stay away from all the places listed above, will he or she still be able to get to his or her home, school, or job?” - YES checked (acknowledges stay-away orders don’t interfere with respondent’s life)

Section (7) No Firearms: Standard orders

  • Must sell or store firearms/parts/ammunition within 24 hours
  • File receipt within 48 hours

Section (8) No Body Armor: Standard order

  • Cannot own, possess, or buy body armor

Section (9) Other Orders: DENIED UNTIL THE HEARING

  • Sasha requested: “and staying 300ft [from] industry events attended by Puzzle”
  • Judge DENIED this request - Did not grant additional 300-yard stay-away from industry events beyond the standard workplace/personal location restrictions
  • Significance: Judge recognized this as overreach - trying to ban federal whistleblower from entire industry conferences/events if Puzzle attends

Standard language: “No fee to notify” - “the order is based on a credible threat of violence or stalking”

Section (10) Mandatory Entry: CARPOS

  • Checked: Clerk will transmit order to law enforcement agency to be entered into CARPOS

Analysis of Judge’s Ruling:

  1. Social media restriction added - Handwritten addition: “Respondent shall not post on social media and/or tag and/or reference Puzzle, Puzzle employees, and Jennifer Orloff”

  2. Industry events restriction DENIED - Sasha requested 300-yard stay-away from “industry events attended by Puzzle” - judge DENIED this request

  3. Physical description - Listed as 180 pounds; demonstrates 2.5+ years since physical proximity, filing based on online activity

  4. No prior notification - Checked “NO” on “Has respondent been told you were going to go to court to seek TRO”

  5. Judge’s explicit finding - “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”

  6. Minimal restrictions granted - Judge granted standard temporary restrictions, denied broader requests

Document Analysis:

Restraining order based on declaration containing:

  • Paragraph 3 false statement (“resigned” vs. company’s “TERMINATION” documents)
  • Context-stripped exhibits (protected speech mischaracterized)
  • Judge’s finding: “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”

Federal whistleblower activity protected under California Labor Code § 1102.5 and First Amendment.


Restraining Order:

  • Filed December 16, 2025 by PUZZLE FINANCIAL, INC.
  • Partly denied December 18, 2025
  • Judge found: “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”
  • Hearing scheduled January 8, 2026
  • Legal representation retained

Federal Whistleblower Activity Continues:

  • 5 SEC complaints remain active (Primary: #17628-500-136-484)
  • State Bar complaint #25-O-30894 (against Lisa M. Bowman)
  • Board of Accountancy complaint #A-2026-1047 (against Jason Mitchell)
  • Ongoing fraud documentation protected under California Labor Code § 1102.5 and federal whistleblower statutes

WHY I’M ACTUALLY DOING THIS - CLARIFICATION FOR COUNSEL

To attorneys analyzing this case: This is NOT an employment dispute.

Many lawyers focus on wrongful termination and equity theft angles and don’t feel confident because those claims have shorter statutes of limitations, jurisdictional complexities, and lower damages. That’s not what this is about.

My actual motivation for whistleblowing:

Sasha Orloff has operated a 13-year fraud operation across three companies affecting 140,000+ victims:

  1. LendUp (2012-2020) - CFPB permanent ban for systematic consumer fraud, $40M restitution, 140K+ victims
  2. Mission Lane (2018-present) - Resume fraud claiming “cofounder” when corporate filings prove advisor-only role, securities fraud
  3. Puzzle Financial (2020-present) - Same CEO, same enablers (YC, Kapor, a16z/ODF), operating with customer financial data despite CFPB ban

This is about corporate fraud and public interest, not personal grievance.

The wrongful termination, equity theft, and retaliation are EVIDENCE of the pattern:

  • Systematic employee exploitation - “Good leaver” equity structure enabling theft by design (sole discretion, 3-month expiration, no objective criteria)
  • Retaliation playbook - C&Ds, police threats, restraining orders to suppress anyone who documents fraud
  • Gaslighting infrastructure - 2.5 years manufacturing “resigned” narrative while company documents say “TERMINATION”
  • Consciousness of guilt - Wrong legal response (suppress rather than refute) proves underlying fraud claims are true

What I actually care about:

  • Public record - 5 SEC complaints, State Bar complaint, Board of Accountancy complaint establishing federal documentation
  • Network accountability - YC, Kapor, a16z/ODF, General Catalyst enabled this across 13 years and 140K+ victims
  • Consumer protection - CFPB-banned CEO operating accounting software with customer financial data
  • Pattern exposure - LendUp asset sale fraud ($4.4M golden parachutes, $0 to shareholders) repeated at Puzzle

I don’t care about recovering my equity. The equity theft is interesting as evidence of how Sasha treats employees and as proof of consciousness of guilt (why steal equity if fraud claims are false?), but it’s not the motivation.

I’m not pursuing this because I’m mad about being fired. The wrongful termination demonstrates retaliation pattern (fired for questioning OpenAI partnership, proving I was right to question leadership), but it’s not the goal.

The goal: Corporate fraudCleanShot 2025-12-24 at [email protected] documentation, federal record, network accountability, consumer protection.

The employment issues are proof-of-pattern, not the case itself. This is securities fraud, consumer fraud, RICO, and systematic enablement by venture networks across 13 years.

Equity Structure as Pattern Evidence:

The “good leaver” provision in my equity grant demonstrates systematic exploitation by design:

“If your Service terminates for any reason other than for Cause, death, Disability, or the Board does not make an affirmative determination, in its sole discretion, that you are a ‘good leaver’ from the Company within three (3) months after termination of your Service, the vested portion of your Option will expire…”

Built-in theft mechanism:

  • Board has sole discretion with zero objective criteria
  • Negative default - If they don’t affirmatively declare you “good,” equity expires in 3 months
  • Strategic termination - Fire you, stay silent, equity disappears, no recourse
  • Applies to VESTED equity - Not just unvested shares, but equity you already earned

This isn’t unique to me. This is how they operate. The equity theft is evidence of corrupt workplace culture, not my motivation for documenting 13 years of consumer fraud.

Sasha’s “standard separation agreement” language proves this: By calling these predatory terms “standard” in his sworn declaration, he admitted this is their default practice. Not an exception, not unique to my case—this is how Puzzle Financial systematically exploits employees. The word “standard” was meant to sound innocuous but actually reveals normalized predatory practices: equity theft by design, fraud claim waivers, wrongful discharge releases, whistleblower suppression clauses. This is startup culture rot documented in sworn testimony.


SASHA’S DECLARATION = DEFAMATION BLUEPRINT + EMPLOYEE GASLIGHTING PLAYBOOK

By filing this sworn declaration, Sasha Orloff has done something spectacularly stupid:

He laid out his entire internal narrative in a public court document under penalty of perjury, creating a perfect foundation for defamation claims.

What this declaration reveals:

  1. The exact lies he’s been telling employees internally - This is the gaslighting playbook he’s been using to isolate me and control the narrative within Puzzle
  2. Provably false statements under oath - Each false claim is now sworn testimony, easily disproven with his own documents
  3. Publication of defamatory statements - Court filings are public records; he published these lies widely
  4. Malice demonstrated - He contradicts himself within the same paragraph (separated/resigned), proving he knew the statements were false
  5. Damages established - Claims I’m violent, unstable, drug-abusing, threatening, stalking - all reputation-destroying
  6. Pattern of defamation documented - Shows he’s been maintaining this false narrative for 2.5 years (2023 voicemail, 4 C&D letters, now court filing)

Why this is catastrophic for Sasha:

Elements of defamation (California):

  • ✅ False statement of fact - “Resigned” when he fired me (provable via Separation Agreement, HR Pals termination letter, 6 company documents)
  • ✅ Publication to third party - Public court filing; statements to employees (“all current Puzzle employees” listed as protected persons suggests he told them the same narrative)
  • ✅ Fault (malice) - He contradicts himself within same paragraph, proving knowledge of falsity
  • ✅ Injury to reputation - Claims I’m violent, threatening, stalking, drug-abusing, mentally unstable, unemployable
  • ✅ Defamation per se - Accusations that I committed crimes (stalking, harassment, threats) and am unfit for my profession

Defamation per se categories (no need to prove damages):

  1. ✅ Imputation of criminal activity (stalking, harassment, threats)
  2. ✅ Statements affecting professional fitness (unstable, erratic, unemployable)
  3. ✅ Statements about serious mental illness (weaponizing my mental health transparency)

What Sasha revealed about his employee gaslighting:

By putting this narrative in writing under oath, he’s shown exactly what he’s been telling Puzzle employees about me:

  • “Patrick resigned” (when he fired me) - Gaslighting about how my employment ended
  • “Patrick is threatening and stalking” (when I’m documenting fraud to federal agencies) - Reframing whistleblower activity as danger
  • “Patrick is mentally unstable” (when I’m transparently documenting retaliation harm) - Weaponizing mental health transparency
  • “Patrick is unemployable” (when his retaliation destroyed my career) - Using damage he caused as proof I’m defective
  • “I made the heroic decision to protect employees” (when he’s retaliating against federal whistleblower) - Victim performance

This is the internal narrative he’s been using to:

  1. Maintain employee loyalty despite fraud documentation
  2. Prevent employees from questioning his behavior
  3. Justify his retaliation as “protection”
  4. Isolate me from any workplace support
  5. Manufacture consent for using company resources to suppress whistleblower

By filing it under oath in court, he:

  • Made it permanent public record
  • Subjected it to cross-examination
  • Created discoverable evidence of his gaslighting campaign
  • Proved malice (contradicted himself showing knowledge of falsity)
  • Gave me a blueprint for defamation claims

Anti-SLAPP won’t protect him from defamation counterclaims:

California’s anti-SLAPP statute protects my speech (federal whistleblower documentation). It does NOT protect his speech (false statements in legal filings about me). If he claims I defamed him, I can anti-SLAPP and he pays my fees. If I claim he defamed me, his false statements aren’t protected activity.

Strategic disaster:

Sasha could have:

  • Kept the gaslighting verbal/internal (no evidence)
  • Addressed the fraud allegations substantively (if he could)
  • Filed for defamation (if my claims were false - but they’re not, so he can’t)

Instead he:

  • Put all his lies in writing under oath
  • Published them as public court record
  • Contradicted himself proving malice
  • Created perfect defamation case against himself
  • Revealed his entire employee gaslighting playbook

This declaration is evidence of:

  1. What he told employees to isolate me
  2. How he’s maintained false narrative for 2.5 years
  3. His consciousness of guilt (contradictions prove he knows truth)
  4. His pattern of defamation (repeated false statements across time)
  5. His abuse of legal process (using court to publish defamatory statements)

He literally handed me the defamation case I didn’t even prioritize.


Sasha’s Claims in Declaration (Filed Under Penalty of Perjury)

Declaration of Sasha Orloff in Support of Puzzle Financial Inc.’s Petition for Workplace Violence Restraining Order:

Sasha filed a sworn declaration making the following claims (with reality-check commentary):

1. Background and Separation Claims:

“Patrick Daniel Stoica is a former employee of Puzzle who was separated from the Company on or around May 31, 2023. During the end of his employment with Puzzle, Patrick began acting erratically and posting about his drug use. As a result of this disruptive behavior, Patrick was offered paid time off, but he ultimately resigned from the company.”


SASHA CONTRADICTS HIMSELF WITHIN THE SAME PARAGRAPH (Evidence-189)

Paragraph 3 internal contradiction Paragraph 3 of Sasha’s declaration: Line 11 says “separated from” the Company, Line 14 says “ultimately resigned” - contradictory statements within same paragraph

Paragraph 3, Lines 11-14 (verbatim from Sasha’s declaration):

“Patrick Daniel Stoica is a former employee of Puzzle who was separated from the Company on or around May 31, 2023. During the end of his employment with Puzzle, Patrick began acting erratically and posting about his drug use. As a result of this disruptive behavior, Patrick was offered paid time off, but he ultimately resigned from the company. Patrick declined Puzzle’s standard separation agreement, which he has since characterized as ‘Rico-level’ release in his recent LinkedIn posts about the matter.”

SASHA CONTRADICTS HIMSELF IN THREE SENTENCES:

  1. Line 11: “was separated from the Company” (passive - company action)
  2. Line 14: “he ultimately resigned” (active - employee action)
  3. Line 14: “Patrick declined Puzzle’s standard separation agreement” (no signed release)

“Separated from” = passive, neutral, could indicate termination (company action)

“Resigned” = active, voluntary (employee action)

Sasha can’t keep his perjury consistent for THREE SENTENCES.

This is textbook consciousness of guilt. When lying under oath, the brain slips between the truth (separated/terminated) and the manufactured narrative (resigned) because it knows the real version.

If I actually resigned:

  • Why say “separated from” first?
  • Why not just say “resigned on May 31, 2023”?
  • Why hedge with “on or around” when he personally authorized the exact date?
  • Why does the Separation Agreement he signed as CEO say “TERMINATION” throughout?

The truth keeps leaking through the lie.

What actually happened (per company’s own documents):

  1. HR Pals Letter of Termination (May 31, 2023): “This letter is to inform you that your employment with Puzzle Financial is terminated effective May 31, 2023” - uses word “terminated” twice
  2. Offered Separation Agreement (I declined to sign): Draft referenced “TERMINATION of that employment relationship,” included severance ($7,115.38), required waiving “wrongful discharge” claims, demanded equity forfeiture - I refused to sign this
  3. Termination Certificate (explicitly titled)
  4. NY State Record of Employment (form 05/31/2023)
  5. Insurance Termination Notice (“No Longer Employed”)
  6. HR Pals exit email: Only source of “resignation” language - contradicted by actual legal documents they reference

Six official company documents say TERMINATION.

Zero documents say RESIGNATION.

I signed NOTHING on the way out. When I saw contradictory messaging (some emails said “resignation,” legal docs said “termination”), I refused to sign any release. Agreement gave me 6 business days to consider, but company canceled my access early when I called bullshit (consciousness of guilt). Company deleted my equity anyway when I tried to exercise it after their first C&D (August 2023) - theft without signed agreement.

SASHA ADMITS I “DECLINED” THE SEPARATION AGREEMENT - THIS DESTROYS THEIR ENTIRE LEGAL POSITION:

Sasha swears under oath: “Patrick declined Puzzle’s standard separation agreement.”

This admission is catastrophic for Puzzle because:

  1. I never signed a release = Never waived wrongful termination claims
  2. I never signed equity forfeiture = Company had no legal right to delete my equity
  3. They deleted it anyway = Theft/conversion of property without signed agreement
  4. No signed agreement = no consideration = no release = All claims still fully viable

What actually happened:

  • May 31, 2023: HR Pals sent termination letter using word “terminated” twice
  • I received Separation Agreement template via DocuSign giving me 6 business days to consider signing
  • I received contradictory communications: some said “resignation,” legal docs said “termination”
  • I saw this contradiction and refused to sign anything
  • Company canceled DocuSign access early when I called bullshit on the contradiction (consciousness of guilt)
  • I signed nothing on the way out - never returned executed copy, template remains blank
  • Company deleted my equity anyway when I tried to exercise it after their first C&D (August 2023) - no notice, no paper trail, no signed agreement (theft)

Why “declined separation agreement” proves termination:

  • Resignations don’t require separation agreements - employees who quit just leave
  • Only terminations need releases - company needs terminated employee to waive wrongful discharge claims
  • If I “resigned voluntarily,” why offer separation agreement at all? - no legal exposure to protect against
  • Sasha’s claim: I quit (resigned) but company still offered termination release - makes no sense unless I was terminated

The legal impossibility Sasha created:

  1. Claims I “resigned” (voluntary employee action)
  2. But admits company offered “standard separation agreement” (termination document with release)
  3. And admits I “declined” it (no signed release, no waiver of claims)
  4. Yet company deleted equity anyway (theft without legal basis)

If I voluntarily resigned:

  • No separation agreement needed
  • No release needed
  • I keep vested equity automatically
  • Company has no reason to delete equity

If I was terminated:

  • Separation agreement offered to get release of wrongful discharge claims
  • I declined to sign (refused to waive my rights)
  • Company took equity anyway without signed agreement
  • This is theft/conversion of property

Sasha accidentally admitted:

  • Company knew termination was legally questionable (why else offer release?)
  • I refused to waive my rights (declined agreement)
  • Company took equity without legal basis (no signed forfeiture)
  • They stole my equity after I refused to sign away my claims

Yet Sasha swears under penalty of perjury on behalf of PUZZLE FINANCIAL, INC. that I “resigned” - while accidentally revealing the truth (“separated from”) in the same paragraph before catching himself and restating the lie (“resigned”).

This internal contradiction proves:

  1. Sasha knows he’s lying - The truth slipped out before he remembered the narrative
  2. This isn’t a simple error - He’s been manufacturing this “resigned” narrative for 2.5 years (July 2023 voicemail, 4 C&D letters, now sworn declaration)
  3. The company’s own documents prove otherwise - Which is why they’re conspicuously OMITTED from his exhibits
  4. Consciousness of guilt - When committing perjury, the brain reveals the truth before reasserting the lie

Sasha spent 2.5 years:

  • Surveilling my social media (exhibits from 2023-2025)
  • Organizing screenshots into “Patrick Stoica - SEO Hijacking Threats.png”
  • Preparing exhibits A through M
  • Consulting with Orrick attorney Lisa Bowman
  • Drafting declaration under penalty of perjury

And he STILL couldn’t keep the lie straight within one paragraph.

THIS IS THE SAME PATTERN AS THE “BLOG” vs. “MANIFESTO” INCONSISTENCY:

Just like Sasha switches between calling my documentation a “blog” (paragraph 17) and a “manifesto” (paragraph 11) within the same declaration - using whichever characterization serves his narrative at that moment - he switches between “separated from” and “resigned” within the same paragraph.

The pattern across the entire declaration:

  • Paragraph 3: “Separated from” (line 11) → “resigned” (line 14) — 3 sentences apart
  • Paragraph 11 → 17: “Manifesto” → “blog” — 3 paragraphs apart

Why this matters:

Someone telling the truth maintains one consistent story. Someone lying maintains multiple contradictory stories and gets caught switching between them:

  • Documentation = “blog” OR “manifesto” (whichever makes me look worse at that moment)
  • Termination = “separated from” OR “resigned” (truth slips out before he catches himself)
  • Mission Lane = “advisor” OR “founder” (whichever serves his credibility)
  • CFPB = “enforcement action” OR permanent ban (whichever hides severity)

This is Sasha’s entire operating system. He can’t maintain narrative consistency because he’s constantly manipulating based on audience and context. Eventually the brain reveals the contradictions - sometimes within paragraphs, sometimes within sentences.

This is textbook consciousness of guilt. See full analysis of blog/manifesto manipulation tactic.


”PATRICK DANIEL STOICA” - WHY THE SUDDEN FORMALIZATION?

Sasha opens the declaration by using my full formal name TWICE in rapid succession:

Paragraph 2 (lines 7-8):

“I am bringing this Petition for a Workplace Violence Restraining Order against Patrick Daniel Stoica because he has been stalking and harassing me…”

Paragraph 3 (lines 11-12):

“Patrick Daniel Stoica is a former employee of Puzzle who was separated from the Company on or around May 31, 2023…”

This never happened in ANY previous communication over 2.5 years:

  • August 11, 2023 C&D from Lisa Bowman: “Mr. Stoica” / “Patrick Stoica”
  • August 14, 2023 Mission Lane C&D: “Patrick Stoica”
  • November 2023 C&D: “Patrick Stoica”
  • July 26, 2023 voicemail: “Hey Patrick, uh, this is Sasha Orloff”
  • All employment documents: “Patrick Stoica”
  • While we worked together: First name basis
  • Separation Agreement: “Patrick Stoica”

Suddenly in the restraining order:

  • Filing cover: “PATRICK DANIEL STOICA” (all caps)
  • Paragraph 2: “Patrick Daniel Stoica” (first formal mention)
  • Paragraph 3: “Patrick Daniel Stoica” (repeats formal name immediately)
  • Throughout declaration: Alternates between “Patrick Daniel Stoica” and just “Patrick” (but never “Patrick Stoica” like previous documents)

Why use the full formal name TWICE in the opening paragraphs?

Consciousness of guilt through formalization:

  1. Establishes legal distance from the start - Opens by framing this as “PATRICK DANIEL STOICA” (stranger, threat) not “Patrick” (person he worked with, terminated, gaslit for 2.5 years)

  2. Repetition creates dehumanization - Using full formal name twice in 5 lines psychologically distances Sasha from the reality: this is retaliation against a former employee

  3. Legal formalization signals - Full middle name = serious threat, official court matter, not interpersonal dispute with former employee

  4. Psychological preparation for perjury - Easier to lie about “Patrick Daniel Stoica” (formal stranger) than “Patrick” (person who worked for you, who you terminated, who you’ve been gaslighting)

  5. Creates courtroom theater - “Patrick Daniel Stoica” sounds more threatening than “Patrick Stoica” or “Patrick” - judge sees formal name and thinks “serious threat” not “employment dispute”

The irony: Sasha doesn’t use HIS full formal name

The filing is by:

  • “Sasha Orloff” (declaration signature)
  • “Puzzle Financial, Inc.” (petitioner)

NOT:

  • “SASHA PETER ORLOFF” (his full legal name)

Why the asymmetry?

  • Sasha Orloff = friendly, accessible CEO, victim, person deserving protection
  • PATRICK DANIEL STOICA = formalized, distanced threat, dangerous outsider, imminent danger

This asymmetry is intentional narrative framing:

When you’re about to commit perjury under oath (claiming someone “resigned” when you terminated them, characterizing protected whistleblower speech as “threats,” manufacturing fear from federal complaint documentation), you need psychological and legal distance.

Pattern throughout declaration:

  • Opening (paragraphs 2-3): “Patrick Daniel Stoica” (formal, distanced, establishes threat framing)
  • Middle sections: Alternates to just “Patrick” when describing posts/tweets (creates false familiarity to claim “I know him, he’s dangerous”)
  • Never uses: “Patrick Stoica” (the actual name in all previous documents and communications)

What “Patrick Daniel Stoica” really means:

“Patrick Daniel Stoica” is not the Patrick Sasha worked with every day. “Patrick Daniel Stoica” is not the Patrick Sasha terminated on May 31, 2023. “Patrick Daniel Stoica” is not the Patrick Sasha has been gaslighting about “resigning” for 2.5 years.

“Patrick Daniel Stoica” is a manufactured legal construct - a dangerous stranger who poses an imminent threat. This formalization creates the psychological distance Sasha needs to:

  1. Swear under penalty of perjury that I “resigned” (paragraph 3)
  2. Characterize protected federal whistleblower documentation as “stalking and harassing” (paragraph 2)
  3. Strip context from every exhibit to manufacture threats
  4. Present 2.5 years of surveillance as evidence of danger, not consciousness of guilt

If this was really about safety from a genuinely dangerous person:

  • Formalization would have started with the first C&D in August 2023 (it didn’t)
  • Mission Lane C&D would have used “Patrick Daniel Stoica” in August 14, 2023 (it didn’t)
  • July 26, 2023 voicemail would have been formal (“This is Sasha Orloff calling for Patrick Daniel Stoica”) instead of “Hey Patrick” (it wasn’t)
  • Every communication for 2.5 years would have maintained formal distance (none did)

The sudden formalization started when Sasha needed to manufacture legal distance for a perjurious court filing on behalf of PUZZLE FINANCIAL, INC.

This is consciousness of guilt through formalization - creating narrative and psychological distance from the reality of wrongful termination, 2.5 years of gaslighting, and now corporate perjury under oath.


”ON OR AROUND MAY 31, 2023” - WHY HEDGE THE EXACT DATE YOU KNOW?

Sasha writes “on or around May 31, 2023” when the EXACT DATE IS MAY 31, 2023. This is documented in:

  1. Separation Agreement: May 31, 2023
  2. HR Pals Letter of Termination: “your employment with Puzzle Financial is terminated effective May 31, 2023”
  3. NY State Record of Employment: 05/31/2023
  4. Insurance Termination Notice: Coverage ended May 31, 2023
  5. His own company records: Last day of employment May 31, 2023

Why write “on or around” when you know the precise date?

This is deliberate hedging language - creating wiggle room even for basic facts he knows are documented. Consciousness of guilt: If you’re about to commit perjury about what happened on that date (claiming “resigned” when it was “TERMINATION”), you hedge the date itself to create ambiguity.

Sasha is hedging a DATE HE PERSONALLY AUTHORIZED. He signed the Separation Agreement. He was CEO when HR Pals sent the termination letter. He knows the exact date because he made the decision to terminate me on that date.

“On or around” is lawyer language for “I’m not 100% certain,” but Sasha is 100% certain - he was there, he made the decision, he signed the paperwork. This hedging reveals consciousness that something about this narrative is going to be challenged.


Reality: Documented toxic workplace environment, CTO harassment, strategic equity manipulation, and systematic fraud.

“Drug use” refers to LinkedIn post before termination (therapist email establishes May 31, 2023 timeline) about disillusionment with tech industry and intention to focus on mental health and plant medicine:

LinkedIn Post (May 28, 2023, 3 days before termination):

“After roughly 10 years of experience in the tech industry, I find myself reaching a point of derealization and disillusionment. My heart tells me this is probably the case for many and I’d rather risk my career and live earnestly in hopes of finding like-minded connections or inspiring others to look deeper within.

I write this knowing there are hardships beyond my reckoning. I know what my parents went through to get here and am grateful they’re able to extend generosity to their children and strangers, as opposed to the general American mentality of ‘I suffered and you should too.’ (The topic of grit and resourcefulness is another subject.)

I, like many other tech workers, graduated with rose-tinted glasses hoping to make a positive impact on the world. We imagine this specific sliver of skills has far-reaching effects to connect people, share knowledge, and solve ‘real-world’ problems.

Eventually you discover digital spaces carry all the same people and organizational problems as just about any other workplace or social hierarchy. What’s particularly unique is the grandiose delusions, in-line with capitalist interests but fueled by seemingly fake sums of money, a hyperfixation of metrics, and opaque outcomes.

Eventually you convince everyone to be an entrepreneur and build middlemen-on-middlemen until you get 100 redundant solutions to the same problems. Yet all of these founders, based on their ego or their previous luck, think they’re destined to be the next big success stories. They somehow deserve to retire early and hoard that extracted wealth for generations to come into a likely bleak and unknown future.

This leads to an explosion of toxic ego-driven workplaces that, frankly, I’m not sure enough people can detect. I’ve met countless people who thought they were the only ones questioning their surroundings and felt too unsafe to speak up; they were relieved to have anyone to vent to. I know I’ve been in this position countless times. You’re told this is just how it is on the path to success.

You still get stressed to the point of physical and mental anguish. You become someone you’re unproud of, but the circumstances shaped you in a way where you just have to coast along, check out of work and life, and hope it will all be worth it.

Then you will burn out and struggle to find your way back into maintaining the same socioeconomic status that has afforded you to consume away the pain and existential dread. Do this enough times and you won’t be able to trust people again. You realize nearly every tech company is different flavors of the same thing, with plenty of skeletons in the closet once you get past the first day on the job.

I don’t know how to fix any of it or how to put these skills to good use anymore. I know I can’t keep living my life like this, and I write this knowing it’s only one small example of a depleted individual.

I want to focus on mental health and plant medicine going forward. This is who I am. 🍄🌿💖”

Additional context Sasha strips:

  1. Transparent mental health discussion - Post describes burnout from toxic workplaces, not substance abuse
  2. “Plant medicine” = legitimate therapeutic interest (psilocybin/psychedelic therapy for mental health)
  3. Posted BEFORE termination - This was honest reflection on industry toxicity, not post-termination behavior
  4. Describes Puzzle’s workplace - “Toxic ego-driven workplaces,” founders who “think they’re destined to be the next big success,” “felt too unsafe to speak up”
  5. Had spoken to Josh Scotland about DMT experiences - Transparent discussions about therapeutic psychedelic exploration
  6. Posted once on whistleblower Twitter in 2023 about drug usage, always knowing Sasha would weaponize mental health transparency and therapeutic plant medicine interest against me

Sasha weaponizes honest mental health discussion and therapeutic interest as “drug use” to manufacture instability narrative.

Was wrongfully terminated, did not resign. Offered paid time off as pretext for termination.

Sasha’s own July 26, 2023 voicemail contradicts the “resigned” claim:

Watch: Sasha Orloff’s July 26, 2023 Voicemail to Terminated Employee

Context: Why Sasha left this voicemail (timing reveals consciousness of guilt)

This voicemail came in direct response to two exposures:

  1. Internal evidence leaked - In June-July 2023, an employee sent me internal documents:

    • Sasha’s internal Slack message about my card cancellation
    • Radha Shenoy’s termination email
    • When I used these in my public documentation, internal contacts immediately withdrew
    • Fear strategy was working - employees realized anything they shared could become evidence
  2. Public narrative failure - I was constantly posting on social media about being TERMINATED while Sasha kept trying to claim I “resigned”

    • His internal narrative control was being publicly contradicted
    • Employees were seeing the discrepancy
    • He needed to gaslight me directly to try to reinforce the false narrative

This voicemail is damage control and direct gaslighting.

I remember being so disgusted hearing this voicemail I cried. He was gaslighting me in real-time, trying to rewrite what had just happened weeks earlier. The nervous, stuttering delivery revealed he knew he was lying.

In this voicemail (nearly 2 months after alleged “resignation”), Sasha:

  • Falsely restates I “resigned” (direct gaslighting)
  • Offers “transition costs” (severance by another name - you don’t offer severance to someone who voluntarily resigned)
  • Frames problem as lack of “job fit”
  • Acknowledges constant surveillance of my social media
  • Nervous, stuttering delivery reveals consciousness of guilt

If I had actually resigned voluntarily on May 31, 2023, why would Sasha:

  • Still be calling 2 months later to offer financial assistance?
  • Offer “transition costs” (which is severance)?
  • Be monitoring my social media documenting termination?
  • Need to gaslight me by restating the false “resignation” narrative?
  • Sound nervous and guilty throughout the entire call?

This voicemail is evidence of:

  • Termination, not resignation
  • Consciousness of guilt (damage control after internal evidence leaked)
  • Active gaslighting to reinforce false narrative
  • Surveillance of whistleblower’s social media activity
  • Fear that internal narrative control was failing

“Patrick declined Puzzle’s standard separation agreement, which he has since characterized as ‘Rico-level’ release in his recent LinkedIn posts about the matter.”

Reality: Coercive release agreement with broad waivers, offered at termination (May 31, 2023). Characterization as “RICO-level” is accurate given the criminal enterprise nature and overly broad release requirements (network-wide silence, criminal claim waivers, systematic use). After I declined, Sasha attempted bribery (July 26, 2023 voicemail above) and sent C&D (August 2023).

Consciousness of guilt in this phrasing:

  1. “Standard separation agreement” - Acknowledges agreement exists, normalizes it as routine process
  2. Calls it “separation” not “termination” - Word choice minimization
  3. References it but doesn’t attach as evidence - Mentions document but doesn’t want judge to see what it actually says
  4. “Standard” implies systematic process - They do this regularly (admission of pattern)
  5. Mentions “RICO-level” characterization but doesn’t explain WHY - Because explaining it would prove it WAS RICO-level

Why I called it “RICO-level” (which Sasha conveniently omits):

The “standard separation agreement” required:

  • Silence across entire network - Can’t talk to anyone at YC, ODF, investors, co-founders in ecosystem
  • Waive ALL claims - Including criminal, fraud, whistleblower protections
  • Overly broad releases - Not just employment disputes, but criminal enterprise liability
  • Network-wide NDA - Extends beyond Puzzle to entire ecosystem connections
  • Systematic use - Sasha calls it “standard” (they do this regularly across network)

This is LITERALLY what makes it “RICO-level”:

  • Silencing witnesses across a criminal enterprise network
  • Waiving criminal claims
  • Preventing coordination between victims/witnesses
  • Systematic pattern across enterprise (“standard”)

If this “standard separation agreement” supported Sasha’s claim I “resigned,” why not attach it as evidence?

Because the document he’s calling “standard separation agreement” says “TERMINATION” throughout, includes severance, requires wrongful discharge waivers, references “Termination Certification,” AND contains the overly broad RICO-level releases that would demonstrate consciousness of guilt to the judge.

Sasha mentions I called it “RICO-level” but won’t explain what made it RICO-level, because explaining it would prove it WAS RICO-level. Classic consciousness of guilt.

PROVABLE PERJURY: “Resigned” vs. Sasha’s Own Exhibits

What Sasha swore under penalty of perjury:

“Patrick Daniel Stoica is a former employee of Puzzle who was separated from the Company on or around May 31, 2023… he ultimately resigned from the company”

“ON OR AROUND MAY 31, 2023” - CONSCIOUSNESS OF GUILT IN HEDGING LANGUAGE

The exact date is May 31, 2023. Not “on or around.” The EXACT DATE.

Documented in:

  1. Separation Agreement: May 31, 2023
  2. HR Pals Letter of Termination: “terminated effective May 31, 2023”
  3. NY State Record of Employment: 05/31/2023
  4. Insurance Termination Notice: May 31, 2023
  5. Termination Certificate: May 31, 2023

Sasha personally authorized this termination. He signed the Separation Agreement as CEO. He knows the exact date.

“On or around” is deliberate hedging language - creating wiggle room for basic facts you know with certainty. This reveals consciousness that something about this narrative will be challenged.

Why hedge a date you personally authorized? Because you’re about to commit perjury about what happened on that date. If you’re lying about “resigned” vs. “TERMINATION,” you hedge the date itself to create ambiguity. This is like saying “I was on or around born” when you know your exact birthday.

CRITICAL CLARIFICATION:

Sasha’s restraining order exhibits (A through M) are ALL surveillance screenshots, NOT the Separation Agreement or Termination Certificate.

What Sasha’s actual restraining order exhibits are:

  • Exhibit A: Ted Kaczynski tweet (August 6, 2023)
  • Exhibit B: “Bank cofounder” tweet (about Nigel Morris, not Sasha - deliberately misrepresented)
  • Exhibits C-M: Various screenshots of tweets, LinkedIn posts, emails spanning 2023-2025
  • Every single exhibit = proof of 2.5-year surveillance, NOT threats

What Sasha conspicuously OMITTED from his exhibits:

The Separation Agreement and Termination Certificate are NOT included as exhibits in the restraining order. Sasha deliberately omitted them because they prove perjury.

Ironic self-own: Exhibit F (Evidence-180) - Team Photo

Sasha DID include my LinkedIn post with our January 2022 team photo. The caption says:

“Patrick Stoica (me: wrongfully terminated; suffering 2.5+ years of abuse)”

Sasha submitted evidence saying “wrongfully terminated” while swearing under oath I “resigned.”


What the Separation Agreement actually says (OMITTED from Sasha’s restraining order exhibits):

Signed by Sasha Orloff as CEO

Document contents:

  • “Your employment with the Company ended effective May 31, 2023” (passive voice - they ended it)
  • “any matter related to your employment with the Company or the termination of that employment relationship” (uses word “termination”)
  • “You further agree to sign the Termination Certification attached to the CIIAA as Exhibit C” (internal reference within the separation agreement - NOT Exhibit C of the restraining order)
  • Requires waiving “claims of wrongful discharge” (why if voluntary resignation?)
  • Includes severance payment of $7,115.38 (voluntary resignations don’t include severance)
  • Deletes all equity promised in January 30, 2020 offer letter (voluntary resignations don’t delete equity)

Termination Certificate (internal Exhibit C to the Separation Agreement, NOT part of restraining order):

EXHIBIT C TO SEPARATION AGREEMENT
TERMINATION CERTIFICATE

Analysis:

  • Document uses word “TERMINATION” multiple times (termination of employment relationship + Termination Certification reference)
  • Document says employment “ended” (passive - they ended it, not “I resigned”)
  • Document includes severance payment (proves not voluntary)
  • Document requires waiving wrongful discharge claims (proves termination was problematic)
  • Document deletes equity from offer letter (proves not amicable)
  • Exhibit C explicitly titled “TERMINATION CERTIFICATE”
  • Word “RESIGNATION” appears: 0 times in actual documents
  • Word “RESIGNED” appears: Only in Sasha’s false sworn statement

This is provable perjury. Sasha swore under oath Patrick “resigned” while his own documents:

  1. Say employment “ended” (passive voice)
  2. Reference “termination of that employment relationship”
  3. Require signing “Termination Certification”
  4. Include severance payment (not given for resignations)
  5. Require waiving wrongful discharge claims (unnecessary for resignations)
  6. Delete equity (hostile act, not resignation practice)

Evidence of wrongful termination (not resignation):

  1. Document titled “TERMINATION AGREEMENT” - Not “Resignation Agreement,” not “Separation Agreement”
  2. Severance payment of $7,115.38 - Voluntary resignations don’t include severance
  3. Required to waive wrongful discharge claims - Why would voluntary resignation require waiving wrongful discharge?
  4. Required to waive fraud claims - Why would resignation require fraud waivers?
  5. Required to waive retaliation claims - Why would resignation require retaliation waivers?
  6. Equity deletion - Stock options promised in January 2020 offer letter deleted in termination agreement
  7. Non-disparagement clause - Voluntary resignations don’t need silencing clauses
  8. “TERMINATION CERTIFICATE” (Exhibit C) - Certificate explicitly titled “TERMINATION”
  9. HR Pals “Letter of Termination” (Evidence-177) - Third-party HR provider explicitly states “your employment with Puzzle Financial is terminated effective May 31, 2023 to termination from your position” (word “terminated” used twice)
  10. NY State Record of Employment (Evidence-176) - Official unemployment insurance form (given to employees who “quits, is laid off, or is discharged”)

The Termination Certificate’s suppression clause:

“I shall not use any Confidential Information of the Company to influence any of the Company’s clients or customers from purchasing Company products or services or to solicit or influence or attempt to influence any client, customer or other person either directly or indirectly, to direct any purchase of products and/or services to any person, firm, corporation, institution or other entity in competition with the business of the Company.”

This clause attempts to prohibit warning accounting firms, bookkeepers, and customers about CFPB-banned CEO and documented fraud. This is why Patrick characterized the release as “RICO-level” - they were using employment agreement to suppress fraud documentation and consumer protection.

Why this clause is legally invalid for whistleblowing:

  1. Fraud exception to confidentiality - Can’t enforce confidentiality to conceal fraud
  2. All information is public - CFPB ban, LinkedIn posts, Wikipedia, federal complaints are public record
  3. Federal whistleblower protection - SEC complaints, State Bar complaint, Board of Accountancy complaint are protected activity under Dodd-Frank
  4. Not “competition” - Warning about fraud ≠ business competition; this is consumer protection
  5. First Amendment protection - Documenting fraud is protected speech

Consciousness of guilt:

Sasha had to lie about “resignation” vs “termination” because:

  • Wrongful termination of whistleblower = clear retaliation motive
  • Termination with broad release requirements = consciousness they were silencing fraud documentation
  • Severance payment = hush money to make whistleblower go away

By lying about this basic, provable fact in paragraph three, Sasha reveals:

  1. He knows the termination was wrongful
  2. He’s willing to commit perjury to suppress that fact
  3. Everything else in his declaration must be viewed through lens of someone who lies under oath
  4. If he lies about something proven false by his own attached exhibits, why trust any other characterization?

Additional consciousness of guilt: “Standard separation agreement” language

Sasha’s declaration refers to “Patrick declined Puzzle’s standard separation agreement, which he has since characterized as ‘Rico-level’ release” - acknowledging the document exists while:

  • Calling it “standard” (normalizing, implies systematic process)
  • Calling it “separation” not “termination” (word choice minimization)
  • Not attaching it as evidence (mentions it but doesn’t want judge to see what it says)
  • Mentions “RICO-level” but doesn’t explain WHY (because explaining it would prove it WAS RICO-level)

If this “standard separation agreement” supported his “resigned” claim, why not attach it?

Because the document:

  1. Says “TERMINATION” throughout, includes severance, requires wrongful discharge waivers, references “Termination Certification”
  2. Contains RICO-level provisions: silence across entire network (YC, ODF, investors, co-founders), waives criminal/fraud/whistleblower claims, overly broad releases extending to entire ecosystem
  3. Systematic use (“standard”) across network = pattern of silencing witnesses across criminal enterprise

Sasha mentions I called it “RICO-level” but won’t explain what made it RICO-level (network-wide silence, criminal claim waivers, systematic witness intimidation), because explaining it would demonstrate consciousness of guilt.

He acknowledges document exists, minimizes it, mentions my characterization, but won’t show judge the actual content. Textbook consciousness of guilt.

Judge’s response to this perjury (December 18, 2025):

“FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”

The judge saw the contradiction between sworn statement (“resigned”) and attached exhibits (“TERMINATION AGREEMENT” + “TERMINATION CERTIFICATE”) and found Sasha’s facts insufficient within 2 days of filing.


THE STRATEGIC STUPIDITY: Perjury While Citing RICO Draws Attention to What He Can’t Defend

Everyone understands how insane this declaration is:

Sasha’s declaration:

  1. Cites my accusations of RICO/criminal enterprise (acknowledges the serious criminal allegations)
  2. Responds with “I’m scared” restraining order (not defamation suit to refute claims)
  3. Opens with provable perjury about “resignation” (easily verified false statement)

What this tells any reasonable person:

If Sasha is willing to commit provable perjury in paragraph three about something easily verified with his own documents, why should anyone believe anything else in his declaration?

And more importantly: Why is he responding to criminal enterprise allegations with perjury and “I’m scared” instead of refuting the substance?

The perjury draws attention to the RICO avoidance:

  • Normal response to false criminal accusations: Sue for defamation, provide evidence business is legitimate, refute specific claims with documentation
  • Sasha’s response: Lie under oath about unrelated fact (termination), strip context from all evidence, manufacture “threat” narrative, never address RICO substance

By lying about something provably false while simultaneously citing RICO accusations, Sasha essentially admits:

  • He can’t defend against the RICO claims (so he lies about something else)
  • He’s manufacturing a counter-narrative (context-stripped “threat” story)
  • He’s using legal process to suppress rather than refute
  • The lie reveals consciousness of guilt about the bigger issue

The logic everyone sees:

“He’s accused of running a criminal enterprise. Instead of proving he doesn’t, he commits perjury to manufacture a ‘scary whistleblower’ narrative. The perjury makes me scrutinize everything—including why he’s not defending against the actual accusations.”

This is strategic stupidity:

Lying in paragraph three while citing the criminal allegations you’re avoiding draws maximum attention to:

  1. Your willingness to lie under oath
  2. Your inability to refute the substance
  3. Your pattern of suppression vs. refutation
  4. Your consciousness of guilt

The perjury doesn’t just undermine this restraining order—it validates the RICO documentation by demonstrating he’d rather commit perjury than engage with it.


NOT WITHDRAWING IS NUCLEAR: He Already Destroyed Everything

At this point, everyone can see the rational move would be to withdraw the restraining order.

What’s been exposed in 2 days since filing:

  1. ✓ Judge already skeptical - “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”
  2. ✓ Provable perjury - Six official documents contradict sworn “resigned” claim
  3. ✓ Psychiatric weaponization - “Hearing voices” malicious gaslighting exposed
  4. ✓ Logical contradictions - Can’t claim simultaneously mentally ill AND planning defense
  5. ✓ Evidence curation caught - Dec 14 selective deletion strategy documented in real-time
  6. ✓ Context stripping exposed - Every “threat” proven to be protected whistleblower speech
  7. ✓ Consciousness of guilt - “Standard separation agreement” language, won’t explain “RICO-level”
  8. ✓ Domain absurdity - Claims threat but won’t register own name domain
  9. ✓ Julian/ODF conspiracy - Restraining order documents network coordination
  10. ✓ Post-denial normalcy - Tweeting normally same day proves not genuinely afraid

A rational person would withdraw at this point.

But if Sasha doesn’t withdraw, he’s:

  • Going to hearing on January 8, 2026 where all this evidence will be formally presented
  • Committing to provable perjury in permanent court record
  • Opening himself to anti-SLAPP motion with fee-shifting ($50K-$150K+ in attorney fees)
  • Creating judicial record of all contradictions, consciousness of guilt, and manufactured narrative
  • Forcing formal legal proceedings where cross-examination would expose everything
  • Guaranteeing permanent documentation of all this in court filings

What “not withdrawing” proves to everyone:

  1. Can’t engage with RICO substance - Withdrawing would require explaining why, which means addressing criminal allegations
  2. Already committed - Too deep into manufactured narrative to back out without admitting it was frivolous
  3. Consciousness of guilt - Would rather face perjury exposure than withdraw and lose suppression tool
  4. No off-ramp - Can’t withdraw without admitting restraining order was retaliation/SLAPP
  5. Nuclear option chosen - Preferring to destroy everything over engaging with evidence

He already destroyed everything:

  • Network has documentation - 100+ recipients saw all the perjury, contradictions, consciousness of guilt
  • Judge skeptical - Partial denial with explicit finding shows judicial awareness
  • Credibility gone - Provable perjury in paragraph three destroys trust with anyone examining filing
  • Can’t walk it back - Withdrawing now admits it was manufactured; not withdrawing guarantees formal exposure
  • Partners/investors/employees - All watching someone commit perjury rather than refute criminal accusations
  • Anti-SLAPP exposure - Fee-shifting would be additional financial and reputational damage

The strategic calculation everyone sees:

Option A: Withdraw

  • Admits restraining order was frivolous retaliation
  • Loses suppression tool
  • Must still face RICO accusations without restraining order shield
  • Looks weak/guilty by backing down

Legal consequences that remain AFTER withdrawal:

  1. All federal complaints still active - 5 SEC complaints (Submission #17628-500-136-484), retaliation complaints still pending
  2. State Bar complaint still active - Case #25-O-30894 against Lisa Bowman, now strengthened by attorney filing restraining order with provable perjury then withdrawing
  3. Board of Accountancy complaint still active - Case #A-2026-1047
  4. Withdrawal strengthens retaliation claims - Creates permanent evidence of frivolous legal intimidation pattern
  5. Federal obstruction implications - Filing restraining order against federal whistleblower documenting to SEC/CFPB, withdrawing when exposed
  6. Still no defense against RICO substance - Must still respond to 19,000+ lines of criminal enterprise documentation, 27+ months of evidence
  7. Consciousness of guilt demonstrated - Withdrawal proves couldn’t defend claims in court, strengthens underlying criminal allegations
  8. Can’t refile - Withdrawal with prejudice or evidence of frivolousness prevents refiling same claims
  9. Pattern established - Aug 2023 C&D → Nov 2023 C&D + police threats → Dec 2025 restraining order (withdrawn) = systematic legal harassment of federal whistleblower
  10. Network already knows - 100+ recipients saw perjury, contradictions, consciousness of guilt; withdrawal confirms it was frivolous
  11. No suppression achieved - Failed to silence whistleblower, only added evidence of retaliation to permanent federal record
  12. Still faces all regulatory action - CFPB ban remains, fraudulent tax advice claims remain, criminal enterprise documentation remains

Withdrawing solves NOTHING. It just removes suppression tool while proving filing was retaliatory.

Option B: Don’t withdraw (go to hearing)

  • Face formal cross-examination on perjury
  • Create permanent judicial record of all contradictions
  • Risk anti-SLAPP fee-shifting ($50K-$150K+ attorney fees)
  • Guarantee all evidence presented in court proceedings
  • Still must face RICO accusations PLUS perjury exposure

Legal consequences if loses at hearing:

  1. All the same federal/regulatory complaints remain active (nothing solved)
  2. PLUS permanent court record of provable perjury
  3. PLUS anti-SLAPP fee-shifting (attorney fees $50K-$150K+)
  4. PLUS judicial findings of frivolousness added to State Bar complaint against Lisa Bowman
  5. PLUS strengthened whistleblower retaliation case with formal court record
  6. PLUS precedent for malicious prosecution / abuse of process

Both options destroy him. He chose Option B (nuclear).

The complete trap:

Withdrawing doesn’t solve the underlying problems (RICO accusations, federal complaints, regulatory action). It just removes his suppression tool while proving the filing was frivolous retaliation.

Not withdrawing guarantees formal exposure of perjury in court proceedings with fee-shifting risk, but still doesn’t solve underlying problems.


THE ABSURDITY: What “Escalation” Is Left?

Sasha’s C&Ds threatened “escalation” if I continued posting. He’s now filed a restraining order - the maximum civil legal remedy. What’s left?

Sasha already played every card:

  1. ✓ August 2023 C&D - Threatened restraining order and arrest
  2. ✓ November 2023 C&D - More legal threats + police
  3. ✓ November 2025 C&D - Criminal referral threats
  4. ✓ December 2025 Restraining Order - Filed the threatened “nuclear option”
  5. ✓ Judge partly DENIED - “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”

What “escalation” options remain?

Option 1: Sue for defamation

  • Can’t win - Truth is absolute defense, all claims documented with federal filings
  • Would require proving statements false - Can’t prove CFPB ban false, Mission Lane fraud false, RICO pattern false
  • Discovery would expose everything - Would have to produce documents proving legitimacy (which don’t exist)
  • Anti-SLAPP applies - Fee-shifting if loses, California Code § 425.16

Option 2: Criminal referral to law enforcement

  • Already threatened in November 2025 C&D - “evaluating your conduct for potential criminal implications”
  • Never followed through - Because federal whistleblower documentation isn’t criminal
  • Would expose perjury - Police investigation would find six documents proving termination vs. Sasha’s “resigned” claim
  • No law enforcement agency would prosecute - Protected federal whistleblower activity

Option 3: Another restraining order

  • Can’t refile same claims - Already filed, already partly denied
  • Judicial skepticism established - Judge already found “FACTS ALLEGED DO NOT SUPPORT”
  • Would be frivolous - Second filing after first partly denied = abuse of process

Option 4: Federal lawsuit

  • Same problems as defamation - Truth is absolute defense
  • Federal courts even more protective - First Amendment, whistleblower protection
  • Discovery nightmare - Would have to produce evidence of business legitimacy
  • Anti-SLAPP may apply - Many states have anti-SLAPP with federal jurisdiction

Option 5: Do nothing

  • Federal complaints continue - 5 SEC complaints remain active
  • Documentation continues - 19,000+ lines keeps growing
  • Network knows everything - 100+ recipients saw the perjury, contradictions, consciousness of guilt
  • Credibility destroyed - Partner/investor/employee confidence shattered

The strategic stupidity:

Sasha escalated to restraining order (maximum civil remedy) without having evidence to support it. Judge partly denied. He now has:

  • No escalation options left (can’t go higher than restraining order)
  • No ability to win on substance (truth is defense, all documented)
  • No credibility (proven perjury in declaration)
  • Two choices: Withdraw (admit frivolous) or commit to Jan 8 hearing (perjury exposure + fee-shifting)

If I keep posting (which is constitutionally protected federal whistleblower activity), what’s he going to do?

  1. File another restraining order? Can’t - same claims already partly denied
  2. Criminal referral? Already threatened, never followed through, wouldn’t stick
  3. Defamation suit? Can’t win - truth is defense
  4. Nothing? Federal documentation continues, credibility further destroyed

He already went nuclear. The nuke partly failed. He has no escalation path. This is why “if you continue, we will escalate” is an empty threat from someone who already escalated to maximum and lost.

The only real “escalation” available is facing the consequences of his own restraining order filing: January 8 hearing where all the perjury, contradictions, and consciousness of guilt get formally entered into court record with anti-SLAPP fee-shifting exposure.

Sasha is trapped. He can’t escalate further (already at maximum), can’t win on substance (truth is defense), can’t withdraw (admits frivolous), and can’t proceed to hearing without exposure (perjury + fee-shifting). This is what strategic incompetence looks like.

Either way, he still faces:

  • 5 SEC complaints with 19,000+ lines of evidence
  • State Bar complaint (now strengthened)
  • Board of Accountancy complaint
  • CFPB permanent ban
  • Criminal enterprise documentation
  • Network of 100+ recipients who saw the perjury

The only difference: Does he admit frivolousness by withdrawing, or commit to perjury exposure by going to hearing?

By not withdrawing after all this has been exposed, Sasha demonstrates:

  1. He’s willing to commit to provable perjury in court proceedings
  2. He has no defense against RICO accusations (would rather face perjury than address substance)
  3. He’s choosing scorched earth over strategic retreat
  4. The 2.5-year evidence collection, the carefully manufactured narrative, the context-stripped “threats” - all of it collapses under basic scrutiny, and his response is to double down rather than withdraw

Everyone watching understands: Someone who won’t withdraw a restraining order after being caught in provable perjury, logical contradictions, and manufactured evidence is someone who cannot afford to stop suppressing because the underlying accusations are true.

Not withdrawing isn’t confidence. It’s the trapped behavior of someone who destroyed everything and has no moves left except to commit to the destruction.


ADDITIONAL PROOF OF TERMINATION: Insurance Documentation

The insurance gaslighting proves termination AND demonstrates pattern of communication only via legal threats/HR-directed responses.

Official Insurance Termination Certificate (August 22, 2024 - delivered 14+ months late):

From CalChoice certificate (originally issued June 15, 2023):

  • Coverage ended: 5/31/2023
  • Termination reason: “No Longer Employed”
  • COBRA offered: “N/A”
  • Group Contact: Sasha Orloff
  • Notice issued: June 15, 2023
  • Notice delivered: August 22, 2024 (14+ months delay)

“No Longer Employed” is TERMINATION language, not resignation.

Pattern of communication breakdown:

  1. No direct communication - Never told whistleblower about insurance termination
  2. 14+ month delay - Notice sat undelivered for over a year
  3. Only HR-directed responses - All communication through HR Pals (Brianna Gutierrez)
  4. Created financial liability - Anthem showed false “continued benefits,” triggered UHC collection attempt 15 months later
  5. Only communication method: Legal threats - C&Ds instead of honest resolution

August 2024 correspondence to HR Pals:

“Anthem says I was laid off… Execs told my coworkers I voluntarily resigned, made everyone think I’m crazy… You already revoked my equity and caused me endless damage to my mental health. Giving me insurance to wipe your hands clean of everything is psychotic. Stop playing with people.”

Six separate official documents prove termination:

  1. ✓ Separation Agreement (Exhibit A): “TERMINATION” throughout, severance payment, wrongful discharge waivers
  2. ✓ Termination Certificate (Exhibit C): Explicitly titled “TERMINATION CERTIFICATE”
  3. ✓ HR Pals Letter of Termination (Evidence-177): “This letter is to inform you that your employment with Puzzle Financial is terminated effective May 31, 2023 to termination from your position”
  4. ✓ NY State Record of Employment (Evidence-176): Official unemployment insurance documentation (form given to employees who “quits, is laid off, or is discharged”)
  5. ✓ Insurance Termination Notice: “No Longer Employed” as termination reason
  6. ✓ HR Pals correspondence: Discussing insurance for terminated employee

Only Sasha’s false sworn statement says “resigned.”

Every official document says TERMINATION.

HR Pals Letter of Termination - May 31, 2023 Evidence-177: HR Pals “Letter of Termination” explicitly states “your employment with Puzzle Financial is terminated effective May 31, 2023 to termination from your position.” Third-party HR provider used word “TERMINATED” twice. Included in HR’s exit email.

NY State Record of Employment - May 31, 2023 Evidence-176: NY State Department of Labor “Record of Employment” form for unemployment insurance purposes, dated 05/31/2023. Official state documentation given to “every employee who quits, is laid off, or is discharged.” Employer: Puzzle Financial Inc. Included in HR’s exit email.

This pattern proves:

  • Sasha’s inability to communicate honestly (only via legal threats and HR-directed gaslighting)
  • Systemic administrative “mistakes” that consistently harm whistleblower (equity deleted, false narrative, insurance chaos 15 months later)
  • Consciousness of guilt (can’t be honest about basic employment facts even under oath)
  • Every “mistake” creates additional damage to person who documented fraud

Sasha committed perjury knowing multiple official documents contradicted him.


PRE-EMPTIVE REBUTTAL: Patrick’s Final Email is NOT a Resignation Letter

If Sasha attempts to characterize Patrick’s final email to Radha Shenoy as “proof of resignation,” a judge will immediately see this is false.

What Patrick wrote (May 31, 2023, final email to Radha):

“I’m not giving the courtesy of a final call. You, Sasha, and Cwikla are so shady and untrusting it’s predictable at this point.

Sasha uses people. He hired you because you fire people. You get paid $[REDACTED] to do this instead of protecting your team.

This job will eat your soul away. It might not be obvious yet, but you will wake up in a year or two regretting doing all this for such unserious and selfish people.

There are two outcomes for Puzzle. It’s somehow successful, yet you still burn through people in the process. The more realistic one is where everything I’m saying is true. This company will either fizzle out before a Series B, or Sasha runs it to the ground until his ego snaps. Either way, there will be a lot of truth-bending to get what he wants.

Send me whatever next steps and I’m out. I regret working here and feel sorry for anyone who gets convinced to save this.

Patrick”

This is NOT a resignation letter. This is an angry response to being terminated.

Key indicators:

  • “I’m not giving the courtesy of a final call” - Declining to participate in THEIR termination call, not initiating departure
  • “Send me whatever next steps and I’m out” - Asking THEM for termination paperwork, not offering notice or setting resignation date
  • “You get paid $[REDACTED] to do this” - Acknowledging Radha’s role is to fire people on Sasha’s behalf
  • Tone: Angry about being forced out, criticizing leadership, predicting company failure, no transition plan, no notice period

Combined with official documents proving termination:

  • Separation Agreement: “TERMINATION” throughout, $7,115.38 severance, wrongful discharge waivers
  • Termination Certificate (Exhibit C)
  • HR Pals Letter of Termination (Evidence-177): “your employment is TERMINATED”
  • NY State Record of Employment (Evidence-176)
  • Insurance notice: “No Longer Employed”
  • Radha’s team email falsely claimed “gave notice weeks ago” (no prior notice was ever given)

If Sasha presents this email as “proof of resignation,” it proves he deliberately mischaracterized an angry termination response, strengthening the perjury case.


2. Ted Kaczynski Tweet (August 6, 2023):

“For example, on August 6, 2023, Patrick tagged Puzzle on X and posted ‘rip ted kaczynski. an unfortunate way to get your message out, but he was right’ … At the time, I felt threatened because Patrick was referencing Ted Kaczynski, also known as the Unabomber, who killed 3 people, including several executives in the name of his anti-capitalist beliefs.”

Reality: Tweet was about the difficulty of whistleblowing and getting anyone to listen when systems are corrupt, not a threat. Kaczynski’s critique of technology and industrial society was being referenced, not his violence. This is protected speech about systemic issues and the challenges whistleblowers face. Context: posted after months of being ignored despite documented fraud.

PUZZLE WAS NOT TAGGED: Sasha claims I “tagged Puzzle” but the tweet included no @puzzlefin tag. His C&D only complained about use of Puzzle’s trademark (mentioning them), not being tagged. This false claim makes it sound like targeted harassment when it was general commentary that mentioned them.

3. “Will I die or go bankrupt” Tweet (August 7, 2023, 1:03 AM):

“The next day at 1:03 a.m., Patrick tweeted ‘will I die or go bankrupt thanks to a bank cofounder? Stay tuned.’”

Reality: This tweet was about NIGEL MORRIS, COFOUNDER OF CAPITAL ONE (QED Investors, Puzzle’s lead investor), NOT SASHA ORLOFF.

Sasha is not a bank cofounder. He was CEO of LendUp, a payday lending company that was permanently banned by the CFPB. LendUp was not a bank.

Context: Nigel Morris co-founded Capital One in 1988, one of the largest banks in America. QED Investors (co-founded by Nigel Morris and Frank Rotman) is a prominent FinTech investor and part of Sasha’s network. This tweet expressed genuine fear about retaliation from powerful financial industry actors with the resources to destroy careers and lives.

CRITICAL: QED SURVEILLANCE AND CONSPIRACY PATTERN:

Frank Rotman (QED co-founder) viewed my LinkedIn profile days before my August 2023 C&D - establishing network surveillance before first legal threat.

Nigel Morris (QED Managing Partner, Capital One co-founder) recently viewed my LinkedIn profile at 2:22 AM on December 3, 2025 (evidence-146) - after being tagged in comment about network accountability.

Both Nigel Morris and Frank Rotman have been receiving daily emails since December 2025 documenting RICO allegations, CFPB enforcement, and network enablement.

This establishes:

  1. Consistent surveillance since 2023 - FinTech network figures monitoring whistleblower before and after legal threats
  2. Conspiracy/awareness timeline - Network awareness of fraud allegations coordinating with Sasha’s retaliation
  3. Coordinated monitoring - Frank Rotman’s profile view preceded C&D; network figures coordinating with Sasha on suppression
  4. No refutation from network - Despite daily emails and direct notifications, QED has never disputed claims
  5. Silent enablement - Continued platforming and network support after comprehensive fraud documentation

When I tweeted “will I die or go bankrupt thanks to a bank cofounder” in August 2023, this fear was prescient and justified - QED network was already surveilling me, and Nigel Morris (Capital One co-founder) was part of the coordinated monitoring that preceded legal threats.

What this proves:

  1. Sasha misrepresents evidence to manufacture threats against himself - The tweet is clearly about a “bank cofounder” (Nigel Morris/Capital One), not a payday lending CEO
  2. Sasha cannot be “threatened” by a tweet about someone else - This doesn’t reference him at all
  3. This was prescient concern about retaliation - Posted August 7, 2023; restraining order filed 2+ years later proves the fear was justified
  4. Protected speech expressing whistleblower vulnerability - About fear of what powerful actors might do to a whistleblower, not a threat

Evidence quality: Sasha included this as Exhibit B in his filing. The scan quality is so poor (ghosted, barely legible, old phone screenshot) it demonstrates the desperation of his evidence compilation.

Evidence-183: Sasha's Exhibit B showing "bank cofounder" tweet with abysmal scan quality Evidence-183: Exhibit B from Sasha’s restraining order - “will I die or go bankrupt thanks to a bank cofounder? Stay tuned.” Tweet references NIGEL MORRIS (Capital One cofounder, QED Investors), not Sasha Orloff (payday lending CEO, not a bank cofounder). Scan quality is extremely poor/ghosted, demonstrating low quality of evidence compilation. Sasha presents tweet about someone else as evidence of threats against him.

This is prosecutorial misconduct-level evidence manipulation: taking a tweet about a different person and presenting it as a threat against yourself.

4. Dasha Shunina / Women Tech Meetup (November 20, 2025):

“For example, on November 20, 2025, Patrick posted the location of where one of my employees was attending a women’s event on LinkedIn and told her ‘enjoy your last days in the tech industry.’”

Reality: Documented Dasha Shunina’s attendance at public tech industry event (Women Tech Meetup) while she was actively enabling fraud by liking/engaging with Puzzle’s fraudulent promotional content. “Enjoy your last days in the tech industry” was a warning about RICO liability and professional consequences of participating in documented criminal enterprise, not a physical threat. Public event, public attendance, public warning about legal exposure.

5. December 8, 2025 Employee Photos:

“Most recently, on December 8, 2025, his postings took an even more disturbing turn. Patrick began posting pictures of Puzzle employees on LinkedIn while tagging the individuals, editorializing about them, and including comments that employees will ‘face consequences.’”

Reality: Posted public photos of Puzzle employees at DCPA (Digital CPA Conference), a public industry conference where Puzzle had a booth and was actively promoting. DCPA has been repeatedly warned about platforming CFPB-banned CEO since November 2025.

“Consequences” explicitly referred to legal liability for RICO participation under 18 U.S.C. § 2 (aiding and abetting), not violence. This is protected whistleblower documentation of individuals enabling fraud at a public event where Puzzle was promoting itself.

Sasha also deliberately conflated December 8, 2025 DCPA conference photos with a January 2022 team photo (from when I worked there) that documents his systematic isolation of employees. See exhibit conflation analysis for full documentation of this evidence manipulation.

6. Photo of Sasha at Industry Event:

“He also posted a picture of me at an industry event.”

Reality: Documented Sasha’s attendance at public industry conferences (DCPA, QuickBooks Connect) where he was actively promoting Puzzle. Public figure at public event promoting company under federal investigation. Protected documentation of CEO continuing promotional activities despite federal complaints.

7. Employees Expressing Concern:

“Employees have also reached out to me to forward Patrick’s threats via text and email and expressed concerns about the contact. One employee targeted by Patrick has asked if they are safe.”

Reality: No employee was threatened with physical harm. All communications were about legal liability for participating in fraud.

“Via text and email” - FALSE CHARACTERIZATION:

I texted three people total:

  1. One person who thanked me for reaching out
  2. Josh Scotland (former coworker)
  3. Chris Yancey (Ramp, professional contact)

I did not look up anyone’s phone numbers. These were existing contacts.

Everyone else: Email and LinkedIn (public professional platforms)

Sasha characterizes “text and email” to make it sound like:

  • I was tracking down personal phone numbers (FALSE)
  • Mass texting employees (FALSE - only 3 people, existing contacts)
  • Intrusive personal contact (FALSE - mostly professional email/LinkedIn)

Reality: Almost all communication was through professional channels (email, LinkedIn), with only 3 texts to existing contacts, one of whom thanked me.

If employees are concerned, it’s because they understand the severity of their RICO exposure after receiving explicit legal notifications. This demonstrates the effectiveness of whistleblower documentation, not credible threats of violence.

And again: Sasha is manufacturing fear by gaslighting employees about the situation, then using that manufactured fear as “evidence.”

PROOF SASHA HAS BEEN GASLIGHTING HR PALS SINCE DECEMBER 5, 2025:

On December 5, 2025 at 5:41 PM, I sent formal RICO notification to HR Pals:

From: ‘Patrick Stoica’ via Human Resources [email protected]
To: [email protected], [email protected]
CC: [email protected], [email protected]
Subject: RICO Notification - Criminal Enterprise Facilitation Risk - Puzzle Financial, Inc.

“Dear HR Pals,

This constitutes formal notification under 18 U.S.C. § 1962 (RICO) and 18 U.S.C. § 1512(c) (Obstruction).

You are providing payroll/HR services to Puzzle Financial, Inc., which constitutes a criminal enterprise as defined under RICO.

Legal implications for your company:

  1. Payroll proceeds may be subject to forfeiture - Wages paid to employees may constitute proceeds of racketeering activity under 18 U.S.C. § 981
  2. Your services may constitute “facilitation” - Processing payroll for a known criminal enterprise may constitute aiding and abetting under 18 U.S.C. § 2
  3. You have a duty to investigate - After receiving this notice, continued services without due diligence may constitute knowing participation”

This is a formal legal notification, citing specific federal statutes, with clear professional language.

10 days later (December 15, 2025), Sasha filed a restraining order characterizing my communications as “threats” and “harassment.”

What this proves:

  1. Sasha received formal legal notification on December 5 - He knows these are statutory citations and liability warnings
  2. He mischaracterized them to HR Pals as “threats” - He’s been gaslighting his own HR provider for 10+ days before filing
  3. He used HR Pals’ manufactured fear as evidence - “One employee asked if they are safe” only happened because Sasha lied about the nature of my communications
  4. This is systematic gaslighting - Sasha is telling employees/contractors I’m “threatening” them when they received formal legal notifications about their own liability

HR Pals has been on notice since December 5, 2025 that:

  • They facilitated wrongful termination (Brianna Gutierrez sent the “receipt of your resignation” email)
  • They executed separation agreements waiving fraud/retaliation claims
  • They ignored all misconduct reports
  • Continued payroll services may constitute RICO facilitation

Sasha’s response: Lie to them that I’m threatening them, then use their fear as evidence.

8. December 9, 2025 “Hitman” Reference:

“On December 9, 2025, Patrick made it clear he has no plans to stop, posting numerous threats on X, including warning Puzzle partners that ‘I WILL PUT PRESSURE ON YOU DAILY UNTIL YOU WAKE THE FUCK UP’ and referring to a ‘hitman.’”

Reality - This is the most egregious misrepresentation:

  • “Pressure” explicitly referred to daily RICO notification emails, which are legal under 18 U.S.C. § 1962. This is protected whistleblower activity.
  • “Hitman” reference: Context was discussing how powerful venture-backed companies and executives can hire actual violence (referencing public discussions about OpenAI/Sam Altman and claims about hiring threats against critics). The point was: THIS IS WHY I’M GOING PUBLIC FOR SELF-PROTECTION. Going public with comprehensive documentation protects whistleblowers from retaliation by creating public record and attention.

Sasha deliberately stripped all context to misrepresent protected speech about self-defense as a threat.

9. HR Pals Contact (Sasha Claims “Harassed My Wife”):

“Patrick has also harassed my wife at her place of work. For example, on or around December 4, 2025, he sent messages to the CEO and HR employees of her company threatening her job.”

Reality: Sent legal RICO notification to HR Pals (Puzzle’s third-party HR provider) about providing payroll/HR services to a criminal enterprise. This is legal notification under 18 U.S.C. § 2 (facilitating a criminal enterprise).

HR Pals is Puzzle’s vendor, not Jennifer’s employer. Jennifer Orloff works at Block, Inc. (SVP of Marketing). No contact was made to her actual employer regarding her job.

Sasha is deliberately conflating legal notification to his company’s HR vendor (HR Pals) with harassment of his wife’s employer (Block) to manufacture claim of spousal harassment.

10. Jennifer Orloff’s LinkedIn Activity (Sasha Claims “Tracked Her LinkedIn”):

“He has also tracked her LinkedIn and referenced her likes and posts in emails, on his blog, and on his social media pages.”

Reality - Sasha’s Level of Detail Is Fabricated:

What actually happened:

  • Jennifer viewed MY profile on termination day (May 31, 2023, 5:35 PM) and throughout summer 2023 - she was surveilling me, not the other way around
  • I viewed her LinkedIn a couple of times to see her work experience (SVP at major consumer fintech) and her public activity amplifying Sasha’s posts
  • Documented her public LinkedIn likes of Sasha’s promotional content showing family-level fraud amplification
  • All information was publicly available
  • No private information was obtained or shared

Separate from Jennifer: Sent CFPB compliance inquiry to Block’s PR team ([email protected]) regarding spousal relationship to CFPB-banned CEO and potential ban circumvention questions. Block acknowledged receipt and confirmed matter under review.

Public figures (CEO’s wife actively supporting his fraud operation through public social media) have reduced privacy expectations for public activities.

Sasha conflates: (1) legal notification to Puzzle’s HR vendor, (2) CFPB compliance inquiry to Block’s PR, and (3) documenting Jennifer’s public LinkedIn activity - to manufacture “harassment of wife” narrative.

11. The “700+-Page Manifesto”:

“Patrick has also documented his harassment and threats in a 700+-page manifesto focused on Puzzle and me, which is available at https://patrickstoica.com/puzzle-statement/, complete with tabs and footnotes.”

Sasha characterizes this as: “Harassment and threats”

Reality: 19,000+ lines of evidence-based federal whistleblower documentation with:

  • Timestamps for every event
  • Screenshots of all claims
  • Links to public records
  • Federal filings (5 SEC complaints, State Bar complaint, Board of Accountancy complaint)
  • Corporate documents (Asset Sale, CFPB orders, court records)
  • Every claim backed by verifiable evidence

This is not a “manifesto” - it’s comprehensive federal whistleblower documentation. Calling it a “manifesto” is a deliberate attempt to make it sound unhinged when it’s actually methodical evidence compilation.

SASHA’S INCONSISTENT CHARACTERIZATION - “BLOG” vs. “MANIFESTO”:

Sasha can’t decide what to call this documentation:

  • Paragraph 11 (page 4, line 14): Calls it a “700+-page manifesto” (attempting to make it sound unhinged/violent)
  • Paragraph 17 (page 5, line 2): Calls it “his blog about drug use and hearing voices” (attempting to make it sound informal/unprofessional)
  • November 26-27, 2025 Wikipedia editing: Repeatedly characterized it as a “blog” while trying to get Wikipedia to suppress/delegitimize the documentation

Why the inconsistency?

  • “Manifesto” when trying to make it sound dangerous/violent (Unabomber association)
  • “Blog” when trying to make it sound informal/unprofessional (not serious documentation)
  • Both characterizations are false - it’s federal whistleblower documentation with 19,000+ lines of evidence, timestamps, screenshots, federal filings, corporate documents, and verifiable sources

The reality: This is neither a “blog” nor a “manifesto” - it’s comprehensive federal whistleblower documentation submitted to SEC, CFPB, State Bar, and Board of Accountancy. Sasha’s shifting terminology exposes his manipulation: whatever characterization serves his current narrative (dangerous vs. unserious) is what he uses.

THIS SAME PATTERN APPEARS IN PARAGRAPH 3 (see full analysis):

Sasha’s inability to maintain consistent characterization isn’t limited to my documentation - he does it within the same paragraph about my termination:

  • Line 11: “was separated from the Company” (passive, neutral, company action)
  • Line 14: “he ultimately resigned from the company” (active, voluntary, employee action)

The pattern:

What He’s Lying AboutFirst CharacterizationSecond CharacterizationWhy He Switches
My documentation”Blog” (unserious)“Manifesto” (dangerous)Whatever makes me look worse at that moment
My termination”Separated from” (truth slips out)“Resigned” (manufactured narrative)Can’t maintain the lie consistently
Mission Lane relationship”Advisor” (when minimizing)“Founder” (when fundraising)Whatever serves his credibility at that moment
CFPB action”Enforcement action” (to investors)Permanent ban (reality)Whatever hides the severity

This is Sasha’s entire operating system: He maintains multiple contradictory narratives simultaneously and switches between them based on audience and context. Eventually the inconsistencies reveal themselves - sometimes within three paragraphs (blog/manifesto), sometimes within three sentences (separated/resigned).

This is textbook consciousness of guilt. Someone telling the truth maintains one consistent story. Someone lying maintains multiple stories and gets caught in contradictions.


BY REFERENCING MY “BLOG” - SASHA BROUGHT ALL MY EVIDENCE INTO COURT RECORD:

Strategic disaster: By characterizing my documentation as a “blog” and referencing it in his sworn declaration, Sasha has:

  1. Made it admissible evidence - He referenced patrickstoica.com/puzzle-statement in his filing, bringing the entire 19,000+ line documentation into the court record as part of HIS petition
  2. Authenticated it as part of case - Can’t claim it’s irrelevant when he specifically cited it as basis for restraining order
  3. Opened door to all my evidence - Every screenshot, every federal filing, every timestamp, every exhibit I’ve documented is now part of the case record through his reference
  4. Can’t claim it’s inadmissible - He made it the subject of his petition; judge can review entire documentation to assess credibility of his claims

What this means for January 8, 2026 hearing:

All of this is now part of the case record through Sasha’s own reference:

  • My 5 SEC complaint submissions (with confirmation numbers)
  • LendUp asset sale documents ($4.4M golden parachute, $0 to shareholders)
  • Photoshopped metrics evidence (ActualQuickbooks 3 → 12,362 likes)
  • Wikipedia tampering (13+ hours, 4,744 bytes removed on November 26-27, 2025)
  • CFPB permanent ban documentation (not “enforcement action”)
  • Mission Lane “cofounder” fraud evidence (corporate filings prove advisor role only)
  • Separation Agreement showing “TERMINATION” throughout (contradicts his paragraph 3)
  • July 26, 2023 bribery voicemail transcript (“I’ll always be your friend,” offered “transition costs”)
  • All 4 C&D letters showing pattern of threats without refutation
  • State Bar complaint (Case #25-O-30894 against Lisa Bowman)
  • CPA Board complaint (Case #A-2026-1047 against Jason Mitchell)
  • HR Pals termination letter using “terminated” twice
  • Termination Certificate (explicitly titled)
  • Judge’s December 18 finding: “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”
  • Every single piece of evidence at patrickstoica.com/puzzle-statement

Sasha can’t have it both ways:

  • Can’t call it a “blog” to minimize it, then claim it’s inadmissible when I present the evidence within it
  • Can’t reference it as basis for restraining order, then exclude the documentation proving his perjury
  • Can’t cherry-pick which parts are relevant when he made the whole thing subject of his petition
  • Can’t claim federal complaints are “harassment” when they’re part of the “blog” he’s seeking protection from

By filing this restraining order against my documentation, he’s given me standing to present the entire federal record in court - including all the evidence proving his perjury, fraud, and retaliation.

This is catastrophically stupid. He essentially subpoenaed himself.


12. “Minute-by-Minute Accounts”:

“On that page, Patrick has posted minute-by-minute accounts of my social media postings and whereabouts…”

Reality: Documented timeline of Sasha’s compulsive posting behavior during federal investigation, showing mental decompensation and consciousness of guilt. Timestamps demonstrate patterns (4 AM LinkedIn sprees, 13+ hour Wikipedia editing sessions, reactive posting after evidence surfaces). All from public social media. This is standard whistleblower documentation of subject’s behavior.

13. Russian/Israeli Claims:

“…claimed false ties between Puzzle and Russian Intelligence, Israel, or Benjamin Netanyahu (Puzzle does not have such ties)…”

Reality: Never claimed direct institutional ties. Documented:

Russian connections (Dasha Shunina):

  • Dasha Shunina (newer Puzzle employee, Forbes contributor, Women Tech Meetup) - Worked at Skolkovo Foundation 2016-2023 (FBI-warned Russian government innovation fund)
  • Never refuted Russian connections - Dasha/Puzzle never disputed Skolkovo Foundation documentation
  • Never refuted Skolkovo ties - FBI warned about Russian intelligence access through Skolkovo; connections remain undisputed
  • Response to “enjoy last days of tech career” - After I warned Dasha about career consequences from RICO liability at Women Tech Meetup, they told me they “had no choice but to call police” (threatened police rather than refuting substance)
  • Pattern: Threat of police/legal action rather than substantive refutation

Israeli connections (Sasha Orloff):

  • Benjamin Netanyahu donations reported by Peter James - Never refuted by Sasha in over 10 years until I cited it on Wikipedia (November 2025), only then did he claim it was false
  • Retweeted anti-Hamas propaganda early in documentation period
  • Opposed Gaza ceasefire resolution (Nov 18-19, 2023) - United Educators of San Francisco adopted ceasefire call by supermajority; Sasha responded: “Focus on educating our kids in SF with STEM and leave global politics to the federal government. This is a disgrace and a waste of time.” (Evidence-109)
  • Use of “hasbara” (Israeli PR/propaganda term) narrative control tactics
  • Pattern analysis of suppression tactics

These are documented individual connections and tactical patterns, not claims of direct institutional relationships.

Pattern of non-refutation:

  • Skolkovo connections: Never disputed, documented for years
  • Netanyahu donations: Not disputed for 10+ years (2015-2025), only objected when cited on Wikipedia during federal investigation
  • “Last days of tech career” warning: Response was “no choice but to call police,” not refutation of RICO liability
  • Consistent pattern: Legal threats and suppression rather than substantive refutation

Consciousness of guilt: If these connections were false, why never refute them? Why respond with police threats instead of evidence? Why only dispute when cited during federal investigation?

14. Wikipedia Banning:

“Patrick has been banned from Wikipedia for editing the Puzzle Wikipedia page with false information.”

Reality: PUZZLE DOESN’T EVEN HAVE A WIKIPEDIA PAGE.

I edited the LENDUP page (documenting Sasha’s CFPB-banned company), not “Puzzle.” This is a provably false statement under penalty of perjury - anyone can verify Puzzle Financial has no Wikipedia page.

How Sasha Gaslit Wikipedia Moderators - Then Lied About It Under Oath:

November 26, 2025 (Thanksgiving eve) - I added documented fraud evidence to the LendUp Wikipedia page:

  • Mission Lane advisory role (contradicting his “no governance role” claims)
  • Netanyahu 2015 financial backing (documented by journalist James Petras)
  • Asset sale details and contradictory interviews
  • Ahead Financials lawsuit (Rolling Loud v. Ahead Financials, Case No. 2022-003284-CA-01)
  • CFPB consent decree covering “officers and agents” (includes him as former CEO)

Sasha’s immediate response: 13+ hours of Wikipedia editing to remove everything

November 26, 2025, 18:11-05:10 UTC (10:11 AM - 9:10 PM PT) - User “Sashaorloff” makes 4 deletions, removing 4,744 bytes of documentation. Full edit history visible here.

Sasha’s lies to Wikipedia administrators:

  1. “URLs that do not exist” - Claimed all my citations were “broken links” and “404 pages”
  2. “Made up lawsuits” - Called the Rolling Loud case “made up” despite it being verifiable through UniCourt
  3. “Fake references” - Told administrators federal court documents were fabricated
  4. “SEO hijacking” - Claimed I was gaming search engines, not documenting fraud

Wikipedia editor BrandNewSaint fact-checked Sasha’s claims:

“None of the links were ‘dead’” - Verified all my citations were functional

Sasha doubled down on lies:

When confronted, he told BrandNewSaint:

“Some links were to a real domain (of a government website), but there was not a real page (404/errors as they were made up lawsuits by the poster)”

Translation: “Yes the links worked, but they’re still fake somehow.”

Pattern: Same day Sasha called lawsuit “made up,” Marvin Bing (named in the lawsuit) blocked me on LinkedIn within 57 minutes. If the lawsuit was fabricated, why did both Sasha and the defendant suppress rather than refute?

The ban: Wikipedia ultimately banned me for “POV editing” and “original research” - not because information was false, but because Wikipedia doesn’t accept primary whistleblower documentation as “reliable sources” per their policies. This is a Wikipedia sourcing policy issue, not factual inaccuracy.

Critical acknowledgment: I DID make one citation error

On November 16, 2025, I initially cited a hallucinated CFPB order format (“File No. 2021-CFPB-0008” - this file number doesn’t exist). I acknowledged this error immediately and corrected it to the actual federal court order: Stipulated Final Judgment and Order, Case No. 3:21-cv-06945-JSC (December 22, 2021).

The substance didn’t change: The CFPB permanent ban is real and covers Sasha through the order’s “officers, agents, and all persons in active concert” language. My citation format was wrong; the federal order is real.

Sasha weaponized this citation error to:

  1. Claim the entire CFPB ban was “fake” and “made up”
  2. Tell Wikipedia administrators all court documents were fabricated
  3. Systematically remove “officers and agents” language from Wikipedia
  4. Downplay the ban as mere “enforcement action” instead of permanent prohibition

Pattern across Wikipedia AND restraining order filing:

On Wikipedia (Nov 26): Sasha surgically removed:

  • “and its officers, agents, and all persons in active concert with them” (the language covering him personally)
  • “consumer lending activities” → changed to “issuing subsequent loans” (narrower, softer)
  • “and permanent lending ban” (removed from section header)
  • “Assisting others in any lending activities” (covers his Mission Lane advisory role)

In court filing (Dec 16): Sasha calls it:

  • “Consumer Finance Protection Bureau engaged in enforcement action” (minimizes as mere “action,” not permanent ban)
  • Completely omits that he’s personally subject to it
  • Never mentions “officers and agents” language
  • Frames it as LendUp-only issue, hiding his personal prohibition

Why does any of this matter for a restraining order?

IT DOESN’T. A WIKIPEDIA BAN HAS ZERO RELEVANCE TO WORKPLACE VIOLENCE.

Think about what Sasha’s declaration actually argues:

  • “Patrick edited Wikipedia” → So what? Not violence.
  • “Patrick was banned from Wikipedia” → So what? Sourcing policy violation, not a threat.
  • “The page was LendUp, actually, not Puzzle” → Undermines his entire narrative.

The fact that Sasha spent 13+ hours on Thanksgiving fighting Wikipedia editors, then lied under oath about which page, demonstrates:

  1. Consciousness of guilt - He’s terrified of public documentation
  2. Pattern of lying to authority figures - Lied to Wikipedia admins, then lied to court
  3. No actual fear - Someone genuinely afraid doesn’t spend 13 hours editing Wikipedia
  4. Manufacturing evidence - Needed something that sounded scary, so “Wikipedia ban” became “threatening behavior”

Go ahead, Your Honor, ask Sasha:

  • “How does editing Wikipedia constitute workplace violence?”
  • “Why did you lie about which Wikipedia page?”
  • “Why spend 13 hours on Thanksgiving removing documentation if you’re afraid?”
  • “How is a Wikipedia sourcing policy ban relevant to this restraining order?”

This entire Wikipedia section in his declaration exists to manufacture a “pattern of troubling behavior” when the reality is: I documented his CFPB-banned company on Wikipedia, he lied to administrators to get it removed, then lied under oath about the entire incident.

Then Sasha perjured himself about it:

December 16, 2025 - Sasha signs restraining order declaration under penalty of perjury claiming:

“Patrick has been banned from Wikipedia for editing the Puzzle Wikipedia page with false information.”

Provable lies in one sentence:

  1. “the Puzzle Wikipedia page” - DOESN’T EXIST. Search it yourself.
  2. “false information” - Banned for sourcing policy violations, not factual inaccuracy
  3. Everything I added was accurate (CFPB ban, Mission Lane, Netanyahu connection, Ahead lawsuit - all documented)

Sasha either:

  1. Lied deliberately - Knew I edited LendUp page, said “Puzzle” to hide that I was documenting his CFPB-banned company
  2. Is incompetent - Doesn’t know his own current company has no Wikipedia page
  3. Assumed no one would fact-check - Filed false statement hoping judge wouldn’t Google “Puzzle Financial Wikipedia”

The gaslighting timeline:

  1. Nov 26: Sasha lies to Wikipedia admins (“made up lawsuits,” “broken links”)
  2. Wikipedia editor verifies links work - Sasha’s lies exposed
  3. Dec 16: Sasha lies under oath about the entire incident, claiming different Wikipedia page

This is systematic gaslighting: Lie to Wikipedia administrators, get caught, then lie under oath about what you lied about.

Go ahead, Your Honor:

  • Search “Puzzle Financial Wikipedia” → No results
  • Check Wikipedia edit history → Shows I edited LendUp, not Puzzle
  • Verify the lawsuit → Rolling Loud v. Ahead Financials exists in Miami-Dade County records
  • Check the CFPB order → It’s real and covers “officers and agents”

This is provable perjury in Sasha’s sworn declaration. He lied about which Wikipedia page, lied about it containing “false information,” and this follows a pattern of lying to authority figures (Wikipedia admins, then the court) to suppress documented fraud.

15. “Nothing Left to Lose” Post:

“Posting that he has ‘received minimal support and understanding from friends, family, and media… so I took this into my own hands. I have nothing left to lose.’”

Reality: Accurate description of whistleblower isolation and career destruction. “Nothing left to lose” refers to career already destroyed, professional reputation already damaged by retaliation, not intent to commit violence. This is protected speech about the personal cost of whistleblowing. Context was explaining why documentation continued despite lack of institutional support.

16. “Drug Use and Hearing Voices”:

“Posting across LinkedIn, X and his blog about drug use and hearing voices (See, e.g. Ex. J: ‘i’m not crazy. The more voices, the better… i can’t get a job because I can’t trust anyone, I can’t get a reference, I can’t do anything with my days… i get rejected as soon as people see my linkedin.’)”

Note: Sasha calls it “his blog” here (paragraph 17) but called it a “700+-page manifesto” just three paragraphs earlier (paragraph 11). This inconsistent characterization - switching between “blog” (informal/unserious) and “manifesto” (dangerous/violent) depending on which narrative serves him - mirrors his Wikipedia editing where he repeatedly called it a “blog” to delegitimize federal whistleblower documentation. See full analysis of this manipulation tactic above.

Reality - This is MALICIOUS psychiatric weaponization:

“Drug use” refers to:

  1. LinkedIn post (~1 week before termination, May 24, 2023) about disillusionment with tech industry and stating “I want to focus on mental health and plant medicine going forward. This is who I am. 🍄🌿💖”
  2. “Plant medicine” = legitimate therapeutic interest in psilocybin/psychedelic therapy for mental health, not substance abuse
  3. Transparent discussions with Josh Scotland about DMT experiences - therapeutic psychedelic exploration
  4. Single post on whistleblower Twitter (2023) about drug usage - transparent mental health discussion, always knowing Sasha would weaponize it

Sasha weaponizes honest mental health transparency and therapeutic interest in plant medicine as “drug use” to manufacture instability narrative.

“The more voices, the better” means:

  • More people speaking up to support the whistleblower
  • More people validating the documented claims
  • More people breaking silence about fraud
  • More witnesses coming forward

NOT auditory hallucinations. NOT psychosis. NOT mental illness.

Sasha deliberately misinterprets common language (“I need more voices/people to speak up”) as literal auditory hallucinations to manufacture mental illness narrative and discredit federal whistleblower.

Full context Sasha stripped:

The statement was about isolation as a whistleblower and needing MORE PEOPLE TO SPEAK UP about documented fraud. “Voices” = people speaking out, supporting accountability, validating evidence - standard usage in activism/organizing contexts.

Additional context Sasha weaponizes:

  • Mental health transparency about 27+ months of retaliation impact
  • Difficulty finding employment due to retaliation and blacklisting
  • Honest discussion about burnout from toxic workplaces
  • Therapeutic interest in plant medicine for mental health

Sasha weaponizes:

  1. Therapeutic plant medicine interest → “drug use” (stigmatization)
  2. Common activist language (“more voices”) → claims “hearing voices” (psychosis)
  3. Mental health transparency → “evidence” of instability
  4. Honest burnout discussion → “concerning behavior”

This is deliberate psychiatric gaslighting to discredit a federal whistleblower by misrepresenting “I need more people to speak up” as auditory hallucinations.

Evidence-179: LinkedIn posts showing actual context Evidence-179: Actual LinkedIn posts Sasha weaponized - “I’m not crazy. the more voices, the better” (clearly meaning more people speaking up, not auditory hallucinations) + “he hasn’t changed and you’re reliving the same cycles. he can’t get back into loans so he’s preying on you and other startups” + describing human cost of retaliation: “i can’t get a job because i can’t trust anyone, i can’t get a reference, i can’t do anything with my days. i just keep reliving this experience… i get rejected as soon as people see my linkedin” + “this isn’t me starting drama. this is grave misrepresentation, if not fraud” + discussions about AI/equality + “and yeah i still recommend psychedelics. hell, even the barbie movie explains this shit” - Sasha strips all context to manufacture “hearing voices” and “drug use” narrative from normal language about needing support + therapeutic psychedelics

Jason Mitchell Email - Sasha Included as “Evidence” (Proves Conscious Enablement):

KEY POINT: Sasha submitted this November 11, 2025 email to Jason Mitchell as evidence in his restraining order filing. This backfires completely - it proves Jason Mitchell (CPA at Puzzle Financial) was repeatedly warned about professional liability exposure and chose to continue supporting Sasha anyway.

Evidence-178: Professional Liability Notice to Jason Mitchell CPA Evidence-178: November 11, 2025 email forwarded to Jason Mitchell (CPA, 6 years at Puzzle): “I don’t want further contact with people who ignored me 2 years ago. Given our LinkedIn connection, I presume you’ve already seen the evidence. You now have a choice to make. As a CPA and software engineer working at Puzzle Financial, you face professional liability under state CPA board standards for continued employment and public endorsement of accounting software led by someone with documented federal enforcement history for financial fraud. I’m sending this to keep you accountable and on record.” Includes SEC Whistleblower Complaint #17628.500-136-464 (filed November 11, 2025, 19 supporting documents) + complete documentation link. Sasha included this as evidence in restraining order, which actually proves: 1) Jason was formally warned about CPA board exposure on November 11, 2025, 2) Jason received comprehensive federal documentation (SEC complaint + 19 exhibits), 3) Jason had LinkedIn connection showing visibility to all prior evidence, 4) Jason continued liking Sasha’s posts anyway after explicit warning, 5) Jason repeatedly untagged from RICO notifications but never disconnected = consciousness of guilt pattern. By including this email as evidence, Sasha inadvertently documented that Jason Mitchell is closer to an insider/conscious enabler who ignored repeated warnings, not an innocent employee - makes Jason’s continued support AFTER explicit CPA liability warning even more damning. Hypothesis: Jason only added me on new LinkedIn (2024) for surveillance purposes - I deleted my original LinkedIn December 2023 after Ian Gorrie told me to “go on vacation,” made new account for new job 2024; Jason added me on new account but never reached out, never acknowledged abuse, only monitored, then ignored multiple warnings = surveillance connection, not genuine.

Pattern established by Evidence-178:

  • Jason Mitchell: 6 years at Puzzle, $0 equity (per documentation)
  • Added me on new LinkedIn 2024 but never reached out (surveillance, not support)
  • Warned November 11, 2025 about CPA board exposure
  • Received full SEC complaint with 19 exhibits
  • Had LinkedIn visibility to months of prior evidence
  • Continued liking Sasha’s posts after warning
  • Repeatedly untagged from RICO comments but didn’t disconnect
  • Never refuted substance, never did due diligence, never disconnected
  • Sasha’s inclusion of this email as evidence proves Jason was given every opportunity to investigate and chose not to

This transforms Jason from “employee who might not know” to “CPA who was explicitly warned about professional liability, maintained surveillance connection to monitor whistleblower, and chose to continue anyway” - consciousness of guilt established by Sasha’s own evidence submission.

17. “Mental Illness Defense” Tweet (Exhibit K):

“Tweeting ‘in the meantime, I’ll be racking up my ‘mental illness’ defense.’”

Evidence-184: Full context of Exhibit K showing three August 2023 tweets Evidence-184: Exhibit K - Full context from 2 years ago (August 2023). Note: Scanned from my phone which made quality worse, but Sasha’s original Exhibit K already looked strikingly degraded - “Puzzle Financial 🧩 x Mission Lane… @lendupglobal” header looks worn out like he lost originals, working from screenshot of screenshot. Tweet 1: “radio silence because obviously. i don’t know how anyone at @puzzlefin keeps ignoring it. you have to really disengage from how fucked up this is” - calling out Puzzle employees ignoring fraud. Tweet 2: “you have my number and email, im well aware of it” - likely referencing Sasha’s July 26, 2023 bribery voicemail. Tweet 3: “in the mean tme, i’ll be racking up my ‘mental illness’ defense” - PREDICTION that they would weaponize mental illness claims (note quotes = sarcasm). Sasha saved for 2 years, then did exactly what I predicted.

Full Context Shows Three Tweets:

  1. “radio silence because obviously. i don’t know how anyone at @puzzlefin keeps ignoring it. you have to really disengage from how fucked up this is” - Documenting Puzzle employees’ conscious avoidance of fraud evidence
  2. “you have my number and email, im well aware of it” - Acknowledging Sasha’s July 26, 2023 voicemail attempt to bribe me into silence
  3. “in the mean tme, i’ll be racking up my ‘mental illness’ defense” - Note “mental illness” is in quotes - this is sarcastic meta-commentary

Reality: Sarcastic meta-commentary on how power responds to whistleblowers - by claiming they’re mentally ill rather than engaging with evidence. This was predicting EXACTLY what Sasha would do (which he’s now doing in this filing). This was protective irony, showing awareness that retaliation would include mental health attacks. Sasha is literally using my prediction of his tactic as “evidence” of my mental illness.

THE LOGICAL CONTRADICTION THAT PROVES CONSCIOUSNESS OF GUILT:

Sasha’s declaration contains an impossible contradiction:

SIMULTANEOUSLY claims:

  1. I am actually mentally ill (“hearing voices,” unstable, erratic)
  2. My tweet about “mental illness defense” is evidence of malicious planning

The logical impossibility:

  • If I’m actually mentally ill (Sasha’s claim), then the “defense” tweet is just describing my condition, not evidence
  • If I’m not mentally ill but faking (implication of citing tweet), then why claim I’m actually unstable?

What my tweet actually meant:

“I predict that as retaliation escalates, they will inevitably claim I’m mentally ill rather than engaging with evidence. This is a known whistleblower suppression tactic.”

Sasha’s response proves I was correct:

  • Weaponizes mental illness narrative throughout declaration
  • Claims “hearing voices” (psychiatric gaslighting)
  • Uses isolation FROM retaliation as proof OF instability
  • Cites the prediction itself as “evidence”

Evidence-184 shows Sasha saved these screenshots for 2+ years, waiting for the strategic moment to weaponize them. The poor scan quality (consistent with all his exhibits) demonstrates the desperate, low-effort nature of this “evidence” compilation.

This closed loop demonstrates:

  1. August 2023: I accurately predicted the tactic (they will weaponize mental illness rather than engage with evidence)
  2. August 2023 - December 2025: Sasha saves screenshot for 2+ years while planning retaliation
  3. December 2025: Sasha executes the exact tactic I predicted (psychiatric gaslighting throughout Declaration)
  4. While using my prediction as proof of wrongdoing (cites “mental illness defense” tweet as evidence)
  5. The circular logic validates my prediction - I was right to predict it because he did exactly what I said he would

This is consciousness of guilt in pure form. Doing exactly what I predicted while claiming the prediction is suspicious validates my understanding of the retaliation playbook. He could have proven me wrong by NOT weaponizing mental illness. Instead, he proved me right.

How did Lisa Bowman allow this logical contradiction in a sworn declaration?

Three possibilities:

  1. Professional negligence - Didn’t notice the contradiction during drafting
  2. Client manipulation - Sasha controlled narrative, she didn’t critically analyze
  3. Complicity - Understood contradiction, filed anyway

All three reflect poorly on representation quality.


THIS DECLARATION DOESN’T READ LIKE A LAWYER REVIEWED IT

Critical observation: This filing doesn’t look professionally reviewed at all.

Any competent attorney would immediately flag:

  1. Paragraph 3 perjury - Never swear to easily disprovable facts (six company documents say “TERMINATION”)
  2. Emotional/subjective language - Restraining orders should be clinical, not emotionally charged
  3. Unforced characterization errors:
    • Calls documentation “manifesto” (paragraph 11) then “blog” (paragraph 17) - pick one
    • Can’t decide if I’m dangerous (manifesto) or unserious (blog)
    • Inconsistent framing undermines credibility
  4. Evidence that backfires:
    • Team photo caption says “wrongfully terminated” while you swear “resigned”
    • Evidence-185 shows Julian Weisser context, proves context-stripping
    • DARVO tweet proves I predicted his tactic correctly
  5. Easily disprovable claims:
    • “Puzzle Wikipedia page” doesn’t exist (instantly verifiable)
    • “Bank cofounder” tweet is clearly about Nigel Morris (Capital One), not you
  6. Logical impossibilities:
    • Can’t claim I’m mentally ill AND cite my “mental illness defense” prediction as evidence
    • Can’t say I “resigned” AND include termination documents
  7. Omission of exculpatory evidence:
    • HR Pals termination letter (proves perjury)
    • August 2023 compliance emails (proves cooperation)
    • July 26, 2023 voicemail (proves bribery attempt)

Normal attorney review process would produce:

  • “We need to fix paragraph 3 - these documents say ‘termination,’ not ‘resignation’”
  • “We should tone down the characterizations - sounds too personal/emotional”
  • “This team photo caption contradicts our claim - remove it”
  • “These Wikipedia claims are verifiably false - we’ll lose credibility”
  • “The ‘blog vs. manifesto’ inconsistency makes you look unreliable”
  • “Evidence-185 proves context-stripping - don’t include it”
  • “We should present this more objectively and clinically”

This reads like:

  • Sasha wrote it himself with minimal attorney input
  • Lisa rubber-stamped without critical review
  • Sasha’s narrative control extended to his own lawyer
  • No one pushed back on obvious problems

The secondment timing raises questions:

Lisa’s December 19 auto-reply says she’s “on secondment” with “no access to Orrick systems” - when did this start? Before or after filing? If before, was she distracted/checked out during preparation? If after, is it strategic positioning to avoid accountability?

This level of sloppiness from Orrick (major firm) on a restraining order against a federal whistleblower with 5 SEC complaints is either:

  1. Catastrophic malpractice - No one actually reviewed this critically
  2. Client control - Sasha dominated the process, attorney became scrivener
  3. Strategic - Someone let this go through with all its problems deliberately (see hypothesis below)

Bottom line: Any normal lawyer would have told Sasha to tone this down, remove the perjury, fix the contradictions, and write it more objectively. This reads like Sasha’s emotional venting got filed as a legal document.


HYPOTHESIS: IS LISA BOWMAN ALLOWING SASHA TO SELF-DESTRUCT?

Speculative, but worth considering given the filing’s spectacular incompetence:

Evidence this filing is TOO BAD to be accidental:

  1. Paragraph 3 perjury - Swears “resigned” while including Separation Agreement as Exhibit A showing “TERMINATION”
  2. Team photo backfire - Evidence-180 caption says “wrongfully terminated” while declaration claims “resigned”
  3. Lamplight censoring fail - Tried to hide investor notification, accidentally left “This notification establishes Lamplight Advisors’ awareness”
  4. DARVO exhibit - Included tweet calling out “DARVO” (his exact tactic) to manufacture antisemitism angle
  5. Logical contradiction - Mental illness claims AND mental illness defense prediction cited as evidence (impossible logic)
  6. Wikipedia lie - Claims I edited “Puzzle Wikipedia page” that doesn’t exist
  7. “Bank cofounder” misattribution - Included tweet about Nigel Morris as if about Sasha
  8. Julian Weisser context strip - Evidence-185 shows “I WILL PUT PRESSURE ON YOU DAILY” explicitly @julianweisser about his blocking/silence, presented as general threat
  9. Exhibit K degradation - 2-year-old screenshots look “strikingly, bizarrely worn out” as if working from screenshot of screenshot
  10. HR Pals termination letter omitted - The ONE document that proves perjury most directly

Lisa Bowman received my August 2023 compliance emails showing:

  • Profuse apologies
  • Explicit statement: “no intention of escalating into violence”
  • Cooperation and exhaustion
  • Already calling out Sasha’s “resigned” gaslighting

She knew:

  • I was compliant, not dangerous
  • Sasha was gaslighting about termination vs. resignation
  • The narrative was manufactured, not genuine fear

Yet she filed this anyway. Why?

Four possible explanations:

  1. Incompetence - Genuinely didn’t notice paragraph 3 perjury, logical contradictions, evidence backfires
  2. Client control - Sasha dominated narrative preparation, she rubber-stamped without critical review
  3. Complicity - Knew it was false, filed anyway because Orrick gets paid regardless
  4. Strategic allowance - Letting Sasha hang himself with provable perjury for investigative purposes

Hypothesis #4: What if Lisa (or Orrick) is cooperating with federal investigation?

Why this might make sense:

  • 5 SEC complaints filed against Sasha’s network (November 2025) create federal whistleblower record
  • State Bar complaint (#25-O-30894) against Sasha for unauthorized practice
  • Board of Accountancy complaint (#A-2026-1047) against Sasha for CPA fraud
  • CFPB permanent ban with ongoing violations (Partner Rewards program)
  • Puzzle C&Ds from Lisa Bowman herself (August 14, 2023) - she’s been involved since the beginning
  • Extensive federal documentation of criminal enterprise, RICO pattern, securities fraud

If federal investigators approached Orrick:

“Your client is subject of 5 SEC complaints, CFPB ban violations, Board complaints. We’re building a case. If he files retaliation against the whistleblower, don’t stop him. Let him create evidence of consciousness of guilt, obstruction, perjury. We need him to hang himself.”

What this would explain:

  • Why Lisa allowed provable perjury in paragraph 3 (creates criminal exposure)
  • Why she didn’t stop logical contradictions (demonstrates incompetence/consciousness of guilt)
  • Why she let exhibits backfire (Evidence-180 “wrongfully terminated,” Evidence-185 Julian context, DARVO tweet)
  • Why she filed after 5 SEC complaints (timing creates clear retaliation pattern for feds)
  • Why she filed as PUZZLE FINANCIAL, INC. instead of personal (implicates company, Board, securities)
  • Why she omitted termination documents (makes perjury provable and obvious)
  • Why she omitted my August 2023 compliance emails showing cooperation (establishes bad faith)

If Lisa is allowing Sasha to create federal evidence:

  • Perjury under oath = criminal exposure
  • Corporate perjury (PUZZLE FINANCIAL, INC.) = Board/securities implications
  • Retaliation after 5 SEC complaints = obstruction, witness intimidation
  • Using legal process to suppress federal whistleblower = abuse of process
  • Consciousness of guilt through omissions = demonstrates awareness of fraud

This would make Lisa’s conduct make sense: She’s not incompetent or complicit - she’s documenting. Every exhibit that backfires, every logical contradiction, every omission of exculpatory evidence creates additional federal exposure for Sasha.

Judge’s partial denial (“FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”) might indicate judicial awareness of abuse of process or insufficient evidence - consistent with federal coordination to limit harm while letting Sasha create evidence trail.

Alternative explanation: This is just catastrophically bad lawyering.

But the sheer number of unforced errors (10+ major evidence backfires) in a case from a major firm (Orrick) against a federal whistleblower after 5 SEC complaints seems… unlikely to be pure incompetence.

Either way:

  • Sasha created permanent record of perjury
  • PUZZLE FINANCIAL, INC. is now on record with false statements
  • Judge expressed skepticism
  • Federal complaints now have retaliation documentation
  • Lisa Bowman’s conduct creates State Bar exposure

Whether Lisa is cooperating with feds or just catastrophically negligent, the outcome is the same: Sasha destroyed himself in a sworn filing.

I have no evidence Lisa is working with federal investigators. This is pure speculation based on the filing’s spectacular incompetence after she received my August 2023 emails showing cooperation and already documenting Sasha’s “resigned” gaslighting. But it’s worth considering.


EVIDENCE CURATION FOR RESTRAINING ORDER EXPOSED BY TIMING

Timeline proves Sasha was strategically manufacturing “unhinged whistleblower” narrative:

December 13, 2025:

  • Initial restraining order stamp (started preparing filing)
  • Began curating “evidence” from 2.5 years of stockpiled screenshots

December 14, 2025:

  • Selective comment deletion on LinkedIn (Evidence-174)
  • KEPT: “you disgust me 24/7” (emotional, no substance, makes me look unhinged)
  • DELETED: Evidence-based callouts (reckless driving on federal bridge, surveillance harassment)
  • Strategic curation to portray whistleblower as emotional rather than substantive

December 14, 2025 (same day):

  • I posted strategic comment exposing the manipulation:
  • “you deleted evidence but kept up ‘you disgust me 24/7’ to create the appearance of an unhinged, baseless whistleblower”
  • Explicitly called out the evidence curation strategy 2 days before formal filing

December 16, 2025:

  • Formal restraining order filing

What this timeline proves:

  1. Strategic evidence manipulation - Sasha was curating “unhinged” narrative while suppressing substantive legal violations
  2. 2.5 years of stockpiling - Held screenshots from August 2023 to December 2025 for strategic use
  3. Selective deletion for narrative - Kept emotional comment, deleted federal violations
  4. Got caught before filing - I exposed the tactic while it was happening
  5. Filed anyway - Despite being called out for evidence manipulation, proceeded with manufactured narrative

This restraining order represents the culmination of Sasha’s 2.5-year counter-narrative effort:

From August 2023 (first C&D) through December 2025, Sasha has been:

  • Stockpiling screenshots for strategic use
  • Curating “evidence” to manufacture “unhinged whistleblower” narrative
  • Building a counter-story to avoid engaging with RICO substance
  • Preparing this moment while simultaneously knowing the claims are true (consciousness of guilt: never refutes, only suppresses)

The duality of Sasha’s position:

  • Knows it’s RICO (avoids all substantive refutation, only uses legal intimidation)
  • Believes own narrative (after 2.5 years of building counter-story, genuinely convinced I’m a threat)

This is the payoff of 2.5 years of effort - the manufactured “unhinged whistleblower” narrative he’s been carefully constructing through selective evidence curation, strategic deletions, context stripping, and psychiatric weaponization. He filed the case he’s been building for 2.5 years.

But it’s backfiring:

  • I caught the evidence curation in real-time (Dec 14 comment)
  • Judge immediately skeptical (“FACTS ALLEGED DO NOT SUPPORT”)
  • Provable perjury exposed (six documents)
  • Logical contradictions demonstrated
  • Psychiatric weaponization documented
  • The 2.5-year effort collapsed in 2 days

This demonstrates consciousness of guilt and premeditated evidence manipulation to manufacture a false “threat” narrative - but the manufactured narrative couldn’t survive judicial scrutiny.


JULIAN WEISSER / ODF CONSPIRACY IMPLICATIONS: Restraining Order Doubles Down

Sasha’s restraining order includes excessive references to Julian Weisser and On Deck (ODF), triggered by weekend activity before filing.

The pattern:

  1. Weekend of Dec 14-15: Sasha active on Twitter, interacting with Julian Weisser publicly
  2. Dec 13: Initial restraining order stamp (started preparing filing)
  3. Dec 16: Formal filing includes multiple references to Julian/ODF
  4. Dec 18 (after partial denial): Sasha tweets “Amazing!!” at Julian’s solo founder program announcement (12:21 PM)

What the restraining order reveals:

Sasha’s declaration specifically mentions:

  • My communications to On Deck about RICO liability
  • Julian Weisser as business partner
  • ODF network connections
  • References to ecosystem coordination

This is excessive focus on Julian/ODF for a restraining order supposedly about “workplace violence.”

Why include so much about Julian/ODF if this is just about a “scared CEO”?

Because the restraining order isn’t just about suppressing me - it’s about protecting the network coordination between Sasha Orloff (Puzzle), Julian Weisser (On Deck), and the YC/ODF ecosystem.

What this proves:

  1. Coordination: Sasha filing restraining order triggered by weekend activity with Julian demonstrates they’re in communication
  2. Network protection: Including Julian/ODF references signals this isn’t isolated - it’s network-wide defense
  3. Consciousness of guilt: Why file restraining order mentioning business partners unless those partners are implicated?
  4. Post-denial confidence: Sasha tweeting “Amazing!!” at Julian same day as partial denial shows continued coordination
  5. Systematic suppression: Not just protecting Puzzle, but protecting entire ODF/YC fraud facilitation network

The restraining order itself becomes evidence of conspiracy:

  • Filed after weekend of Sasha/Julian public interaction
  • Includes excessive focus on ODF/Julian for “workplace violence” filing
  • Same day as partial denial, Sasha publicly supports Julian’s programs
  • Demonstrates coordination between Sasha (fraud) and Julian (enabler/equity thief)

By including so much about Julian/ODF in the restraining order, Sasha inadvertently documents the network coordination and conspiracy I’ve been documenting for 27+ months.

This isn’t a scared CEO protecting himself. This is network-wide suppression effort coordinated across Puzzle/ODF/YC to silence federal whistleblower documenting fraud facilitation ecosystem.


18. Buying sashaorloff.com:

“Posting that he ‘bought sashaorloff.com’ and ‘i will make sure no one ever works for you again.’”

Reality:

  • Registered domain for one year (standard minimum registration period)
  • Never actually used it for any content
  • Let it expire - domain is currently unregistered again
  • “No one ever works for you again” refers to warning potential employees about RICO exposure through comprehensive public documentation at patrickstoica.com/puzzle-statement
  • Not a threat - a description of how public fraud documentation affects hiring when 19,000+ lines of federal documentation are publicly available
  • Sasha portrays routine domain registration (never used) as threatening behavior to manufacture “scary whistleblower” narrative

The absurdity:

sashaorloff.com is STILL unregistered. Sasha Orloff:

  • Presents himself as prominent CEO/founder
  • Has been featured in Forbes, TechCrunch, etc.
  • Supposedly so concerned about this domain he includes it in sworn restraining order declaration
  • Hasn’t bothered to register his own name domain himself

If Sasha was genuinely concerned about someone “threatening” him with his own name domain, why hasn’t he registered it?

Because this was never about genuine concern. It was about manufacturing evidence for the “scary whistleblower” narrative.

Someone who spends 2.5 years strategically collecting screenshots but doesn’t register their own name domain isn’t concerned about protection - they’re focused on suppression tactics.

19. “Dozens of Unhinged Emails”:

“Patrick has also sent dozens of unhinged emails to my business partners, and posted across LinkedIn and X, threatening them if they continue to do business with me and making false claims that Puzzle is a criminal enterprise.”

Reality: Sent legal RICO notifications under 18 U.S.C. § 1962 to business partners. These notifications:

  • Are explicitly protected under federal law
  • Inform parties of their potential liability for facilitating criminal enterprise
  • Include citations to federal statutes
  • Provide evidence and documentation links
  • Give opportunity to cease participation

Characterized as “unhinged” because they’re legally sound and create liability exposure. Claims that Puzzle is a criminal enterprise are supported by 19,000+ lines of documented evidence across 5 SEC complaints.

Psychiatric language weaponization: Sasha specifically uses “unhinged” to characterize legal notifications - part of manufactured mental illness narrative. Throughout declaration, uses psychiatric language (“unhinged,” “hearing voices,” “unstable,” “erratic”) to discredit federal whistleblower activity rather than engaging with substance.

20. Fear for Safety:

“I am alarmed and fear for the personal safety of me, my family, and Puzzle’s employees and partners, including at home and on Puzzle premises. This is based on Patrick’s recent threatening posts targeting employees, the litany of harassment and threats from Patrick described above, and his expressed plans to mount a ‘mental illness defense’ and warnings that employees will ‘face consequences’ and that they should enjoy their ‘final days in tech.’”

Reality:

  • No physical contact has been made (terminated 2.5 years ago, no workplace contact)
  • No physical threats have been issued
  • All activity has been documentation and legal notification
  • “Consequences” always referred to legal liability, never violence
  • “Final days in tech” referred to professional consequences of RICO participation
  • “Mental illness defense” was ironic prediction of Sasha’s retaliation tactics
  • This is manufactured fear to support restraining order

21. Fear of Coming to Offices/Events:

“I also fear that Patrick may come to Puzzle’s offices or events, looking to harm me, my company, or my employees or partners. He has made repeated harassing and threatening posts and has repeatedly threatened to destroy Puzzle.”

Reality:

  • Have not attended any Puzzle events or approached any Puzzle locations
  • Have been at home in California documenting fraud
  • “Destroy Puzzle” refers to public documentation destroying company’s reputation and ability to operate, not physical destruction
  • This is speculative fear with no basis in evidence
  • Documenting public events where Puzzle had booths (QuickBooks Connect) is not threatening to attend

22. Intent to Continue:

“He has made clear that he intends to continue to intimidate me, my employees, and partners, short of a Court Order. I believe Patrick poses an imminent threat of violence to me, my employees, and my family.”

Reality:

  • Have made clear intent to continue legal whistleblower documentation
  • Will continue until fraud is addressed or company winds down
  • No intent to intimidate - intent to inform and document
  • No “imminent threat of violence” - all activity is documentation
  • This is manufactured urgency to obtain restraining order

Orders Requested by Sasha/Puzzle

Personal Conduct Orders Requested:

  • Stop harassing, stalking, threatening, or disturbing the peace of protected persons
  • “Post threats on social media regarding the protected persons”
  • “Puzzle asks that respondent be ordered not to do any of these things to Jennifer Orloff or any Puzzle employee”

Translation: Attempting to ban all social media documentation of fraud, RICO participation, and family enablement.

Stay-Away Orders Requested:

  • Stay away from Sasha Orloff, Jennifer Orloff, and Puzzle employees
  • Stay away from Puzzle premises (575 Market Street, 4th Floor, San Francisco, CA)
  • Stay away from “industry events Puzzle is attending”

Translation: Attempting to ban whistleblower from entire industry events where Puzzle might have presence.

What Judge Actually Granted:

  • Minimal temporary restrictions (standard in temporary orders)
  • Most specific requests: DENIED UNTIL HEARING
  • Explicit finding: “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”

Judge saw through the manufactured fear and denied most of what Sasha requested.

Timeline Demonstrating Coordination

  • December 13, 2025: Initial stamp on filing (during daily email campaign)
  • December 16, 2025: Formal filing with Clerk Certificate
  • December 17, 2025: HR Pals emergency review - Matthew Callis (Sr. Director of HR) and Vanessa Moya (Sr. HR Generalist) view profile
  • December 18, 2025: Judge issues partial denial with explicit finding of insufficient facts

Key Evidence of Whistleblower Retaliation:

This filing represents direct retaliation against a federal whistleblower who has:

  • Filed 5 SEC complaints documenting fraud
  • Filed State Bar complaint (Case #25-O-30894)
  • Filed Board of Accountancy complaint (Case #A-2026-1047)
  • Maintained 19,000+ lines of documented evidence at patrickstoica.com/puzzle-statement
  • Notified networks for 27+ months (May 2023 - December 2025)

Analysis:

  1. Judge’s skepticism: The explicit finding that “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED” indicates the judge found Sasha’s allegations insufficient or lacking credibility

  2. Timing as evidence of retaliation: Filed after:

    • 5 SEC whistleblower complaints establishing federal record
    • State Bar complaint filed
    • Board of Accountancy complaint filed
    • 27+ months of network notification without refutation
    • Daily documentation campaign (December 2025)
    • HR Pals emergency review (December 17, 2025)
  3. SLAPP-like behavior: Using legal process to silence federal whistleblower documentation rather than addressing the documented fraud

  4. Consciousness of guilt: A company with legitimate legal representation would refute false claims, not seek restraining orders against whistleblowers documenting to federal agencies

  5. Orrick, Herrington & Sutcliffe LLP involvement: Major law firm now on record representing CFPB-banned CEO in action against federal whistleblower, creating potential liability for retaliation

  6. Strengthens whistleblower protection claims: This action demonstrates the retaliation pattern documented throughout this statement

  7. Creates permanent court record: Judge’s finding that facts don’t support all requested orders is now part of permanent record

Partial Denial vs. Full Grant:

The judge could have:

  • Granted all requests (did not happen)
  • Partly granted and partly denied (what happened) ← Judge found issues with allegations
  • Denied all requests (partial victory for whistleblower)

The partial denial with explicit statement about insufficient facts is significant judicial skepticism.

Upcoming Hearing:

Court hearing scheduled for January 8, 2026, 8:30 AM, Department 505, Room 505. This provides opportunity to present:

  • 5 SEC complaints as evidence of whistleblower status
  • State Bar and Board of Accountancy complaints
  • 19,000+ lines of documented evidence
  • Pattern of retaliation following federal complaints
  • Network notification demonstrating good faith documentation
  • HR Pals emergency review as evidence of institutional concern
  • CFPB permanent ban as established federal record

Pattern Continuation:

This restraining order filing continues documented pattern:

  1. May-August 2023: First documentation → Cease & Desist letter (August 11, 2023)
  2. August 14, 2023: Police threat from Mission Lane attorney
  3. November 2023: Second Cease & Desist letter
  4. November-December 2025: Resumed documentation → Workplace violence restraining order (December 16, 2025)

Pattern: Respond to documentation with legal intimidation rather than refutation

Federal Obstruction Implications:

Filing restraining orders against whistleblowers documenting to federal agencies may constitute:

  • Obstruction of SEC investigations
  • Witness intimidation
  • Retaliation against protected whistleblower activity
  • Abuse of legal process to suppress federal complaints

Next Steps:

  • Attend January 8, 2026 hearing with full federal documentation
  • Present evidence of whistleblower status and retaliation pattern
  • Document this filing as additional evidence in SEC complaints
  • Add to retaliation timeline in federal record

This filing strengthens rather than weakens the federal case. It demonstrates:

  1. Consciousness of guilt (suppression rather than refutation)
  2. Pattern of retaliation following federal complaints
  3. Use of legal process to intimidate federal whistleblower
  4. Judge’s skepticism of allegations (partial denial)

Status: Temporary restraining order partly granted, partly denied. Full hearing scheduled January 8, 2026. Judge explicitly found facts alleged do not support all orders requested.

Sasha’s Continued Public Activity Hours After Judge’s Partial Denial

December 18, 2025 - Same day judge partly denied restraining order with finding of insufficient facts, Sasha continued normal social media activity:

12:21 PM ET (9:21 AM PT):

Amazing!!

Whoever called the solo founder future was right.

And @julianweisser will have the most data and experience seeding the next generation of solo founders.

The YC of solo founders below.

Quote-tweeting Julian Weisser’s announcement:

Our first solo founder just hit $1M ARR in under 2 months.

Announcing the 3rd cohort of the Solo Founders Program.

“SFP gave me a new framework to think about how fast I can go.”

Apply today to build “solo, together” in January.

Julian’s reply:

While I don’t love comparisons, we’ll take the compliment :)

Analysis: Hours after a judge found “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED” in restraining order against federal whistleblower, Sasha is publicly celebrating Julian Weisser’s solo founder program. This is not behavior of someone who genuinely fears for their safety.

12:30 PM ET (9:30 AM PT):

Venture capital is intentionally opaque.

So when I met Gul, who built Metal to reverse-engineer how venture funding decisions get made, I had to dig in.

If you’re a founder navigating fundraising (or planning to), this episode will make you smarter.

Launching new podcast episode about venture capital, maintaining “thought leader” persona, discussing “2026 planning.”

Earlier same day (11:39 AM ET):

Quote-tweeting about startup valuations and liquidity:

What matters in startups is actual common stock liquidity.

If a company is doing $2M of ARR a valued at a billion that sounds cool (“a unicorn”), right?!??

Maybe. But…

What is the potential and exit multiple? At an IPO the average EV/revenue multiple is 6x-8x. With a few insane outliers like Palantir at 100x. That means this company today is on average worth $12-$18M and maybe maybe maybe $200M. (Of course the hope is that it will grow into and exceed that multiple, and some very strategic M&A happens at a non fundamental price, like Instagram or YouTube).

And what is the preference stack? Investors get paid back first, at least 1x their money before common sees a dollar.

Analysis of Continued Public Activity:

  1. Performing normalcy - “2026 planning,” thought leadership, podcast launches
  2. Zero indication of fear - Someone filing restraining order claiming imminent threat of violence doesn’t engage in normal promotional activity hours after judicial skepticism
  3. Sasha/Julian coordination continues - Public mutual support despite comprehensive fraud documentation
  4. Complete disconnect - Filing declares “I believe Patrick poses an imminent threat of violence” while simultaneously engaging in routine social media thought leadership
  5. Hypocrisy documented - Completely baseless and intentionally misconstrued legal threat filed while continuing business-as-usual performance

This behavior demonstrates:

  • Restraining order was strategic suppression, not genuine safety concern
  • No actual fear exists (would not be tweeting promotional content if genuinely afraid)
  • Continuing to operate company he claims needs protection from “threatening” whistleblower
  • Consciousness that restraining order is legal theater, not emergency protection

December 18-19, 2025 - Sasha Deleted LinkedIn Comments Calling Out Corporate Perjury

Hours after judge’s partial denial, Sasha actively monitored and deleted LinkedIn comments calling out his corporate perjury:

LinkedIn Post (Charles Crabtree promotion):

Accounting firms… have you met Charles Crabtree?

He has spend over a decade devoted to accounting firm success. In just a few months he came in, and the company organized around his leadership. Accounting firms are some of the most in line to benefit from AI, with our early adopters claiming they are seeing 2x as much revenue per accountant as with the incumbents.

I am calling it.

2026 is the year accountants make more money than ever before. More clients. Happier clients. More time back.

It’s going to be a great year.

Comment timeline:

  1. December 17 comment 1 - “Puzzle Financial’s CEO continues suppressing his own fraud. He was honest about his career in 2019. He’s been progressively lying since 2020. He’s currently under investigation by HR Pals. https://patrickstoica.com/puzzle-statement/” + linked to criminal enterprise documentation; reposted after being deleted twice (once in 3 minutes)
  2. December 17 comment 2 - “this is the only reason Sasha posted this. purely compulsive. he doesn’t understand cause and effect. if you stop posting, you have nothing to suppress. and you’re in less trouble. STOP POSTING // you kept comments open trying to prove to everyone you can finally stop worrying. you can’t. // i also listed all your typos and you fixed none”
  3. December 18/19 perjury callout (deleted) - Called out his corporate perjury in the restraining order filing, simultaneously with the above

What Sasha read before deleting:

  • Multi-paragraph documentation of criminal enterprise
  • HR Pals investigation reference
  • 2019 honest → 2020 lying progression
  • Direct advice that his compulsive posting makes things worse
  • Observation that he can’t stop worrying/posting
  • Callout of his inability to fix basic typos
  • Corporate perjury in restraining order filing

Then he deleted them all.

Consciousness of guilt through active engagement + deletion:

  • Read detailed fraud documentation - Engaged with multi-paragraph comments about criminal enterprise, HR Pals, lying progression
  • Read direct communication - Someone genuinely afraid doesn’t read comments telling them “STOP POSTING” and analyzing their compulsive behavior
  • Read perjury callout - Saw documentation that restraining order contains provable false statements
  • Then deleted everything - Can’t refute, so suppresses
  • Pattern: If accusations false, why delete? If genuinely afraid, why read and engage with comment sections at all?

This is LinkedIn comment moderation as narrative control:

  • Sasha swears under oath I’m an “imminent threat of violence”
  • Hours after judge partly denies order, he’s posting about “2026” business optimism
  • Actively reading detailed fraud documentation in his comment sections
  • Monitoring for perjury callouts
  • Selectively deleting accountability documentation
  • If I’m dangerous, why engage? If claims are false, why delete?

Analysis: Someone genuinely afraid doesn’t:

  1. Post promotional content about Charles Crabtree and 2026 predictions
  2. Read multi-paragraph fraud documentation comments
  3. Monitor comment sections for whistleblower callouts
  4. Selectively delete comments documenting perjury
  5. Continue business-as-usual social media presence

This is consciousness of guilt. He knows the restraining order is based on perjury. He read the callouts, understood the implications, and deleted evidence of being held accountable.


YouTube Comment Removal - Cross-Platform Suppression Pattern

December 19, 2025 - YouTube comment deletion: Cross-platform suppression of perjury callouts

“Turpentine Finance” YouTube channel removed my comment:

Comment (posted night of December 18/19): “sasha orloff committed perjury”

Context: Sasha HOSTS his own podcast show on Turpentine (Turpentine Finance). This is not a guest appearance - Sasha is the HOST of an ongoing podcast series on Turpentine network. Erik Torenberg (Turpentine founder) has continued hosting Sasha’s show despite explicit fraud documentation sent November 2025, with 3-4 episodes released post-warning (documented December 8-10, 2025). After filing restraining order with provable perjury in paragraph 3, I left simple factual comment on Turpentine YouTube video of Sasha’s podcast episode.

Comment was removed (likely by Sasha’s team or at his request, or by Turpentine moderators).

This establishes cross-platform suppression pattern:

LinkedIn (Dec 18-19):

  • Posted detailed criminal enterprise documentation → deleted
  • Posted “STOP POSTING” analysis → deleted
  • Posted corporate perjury callout → deleted

YouTube (Dec 19):

  • Posted “sasha orloff committed perjury” on Sasha’s OWN PODCAST SHOW → removed

Pattern across platforms:

  1. Active monitoring - Sasha (or his team/Turpentine) is monitoring YouTube, LinkedIn, and likely other platforms for perjury callouts
  2. Systematic suppression - Any mention of corporate perjury is being deleted/removed regardless of platform
  3. Consciousness of guilt - If restraining order was legitimate and perjury claims false, why suppress across all platforms?
  4. Narrative control obsession - Someone genuinely afraid doesn’t monitor YouTube comments on their own podcast show episodes and request removal of “committed perjury” comments

What this demonstrates:

  • Not genuine fear - Someone afraid of “imminent violence” doesn’t monitor YouTube comment sections on their own podcast show
  • Reputation management - This is about controlling narrative, not safety
  • Consciousness of perjury - Knows paragraph 3 is provably false, actively suppressing anyone calling it out
  • Coordinated suppression - Either Sasha’s team or Turpentine is monitoring and removing accountability callouts

Turpentine/Erik Torenberg liability:

  • Sasha HOSTS his own show on Turpentine - Not guest appearances, ongoing podcast series with hosting contract, production support, distribution infrastructure
  • Erik Torenberg received fraud documentation November 2025 - CFPB ban, $51M+ enforcement, Asset Sale, SEC complaints, Wikipedia meltdown
  • Turpentine continued hosting Sasha’s show - 3-4 episodes released post-warning (December 8-10, 2025 documented)
  • Turpentine is actively removing perjury callouts - Comment moderation on YouTube demonstrates ongoing conscious enablement
  • Each episode = ongoing RICO exposure - Formal business relationship with CFPB-banned CEO through hosting contract, production, distribution (18 U.S.C. § 1962)

My comment was factual: “sasha orloff committed perjury” - This is documentably true (paragraph 3 swears “resigned” while Separation Agreement states “TERMINATION”). Not harassment, not threats, just statement of documented fact on Sasha’s own podcast show’s YouTube comments.

Yet it was removed.

If I’m wrong, why not leave it up as evidence of my “baseless harassment”? Why suppress a simple factual statement unless it’s accurate and damaging?

And why is Turpentine removing comments calling out perjury on the show they continue hosting for a CFPB-banned CEO after explicit fraud notification?

This is consciousness of guilt through systematic cross-platform suppression of accountability, with Turpentine/Erik Torenberg actively participating in narrative control by hosting the show AND moderating comments.


My Response: Comprehensive Context Restoration

I Will Comply with Temporary Orders. But Let Me Be Clear:

SASHA COMMITTED PERJURY IN PARAGRAPH THREE:

Sasha swore under penalty of perjury that I “ultimately resigned from the company” while admitting I “declined Puzzle’s standard separation agreement.” Company’s termination documents state:

  • HR Pals Letter of Termination: “your employment with Puzzle Financial is terminated” (uses “terminated” twice)
  • Offered Separation Agreement draft: Referenced “the termination of that employment relationship,” included severance ($7,115.38), required waiving “wrongful discharge” claims, demanded equity forfeiture - I refused to sign this
  • Termination Certificate (explicitly titled)
  • NY State Record of Employment (official state form)
  • Insurance Termination Notice (“No Longer Employed”)

The word “TERMINATION” appears in every official document. The word “RESIGNATION” appears zero times.

I signed NOTHING on the way out. Agreement gave me 6 business days to consider signing via DocuSign, but company canceled DocuSign access early when I called bullshit on the “resignation” vs “termination” contradiction (consciousness of guilt - didn’t even wait for deadline). Never returned executed copy. Company deleted my equity anyway when I tried to exercise it after their first C&D (August 2023) - no notice, no paper trail, no signed agreement authorizing equity deletion (theft).

SASHA ADMITS I “DECLINED” THEIR “SEPARATION AGREEMENT” - THIS PROVES BOTH TERMINATION AND THEFT:

Sasha admits company offered me a “standard separation agreement” which I “declined” (refused to sign). This proves: (1) It was termination, not resignation - resignations don’t need separation agreements; only terminations need releases to waive wrongful discharge claims. (2) I never signed away my equity or claims. (3) Company deleted equity anyway without signed agreement - theft of property without legal basis.

SASHA CONTRADICTS HIMSELF WITHIN THE SAME PARAGRAPH:

Paragraph 3, Line 11: “was separated from the Company”

Paragraph 3, Line 14: “he ultimately resigned from the company”

He can’t keep his lie straight for THREE SENTENCES. The truth (“separated from” = terminated) leaks through before he remembers the manufactured narrative (“resigned”). This is textbook consciousness of guilt - the brain reveals what actually happened before reasserting the lie.

This is provable perjury that destroys his credibility on every other claim.

Context: This filing is textbook whistleblower retaliation against someone who has:

  • Filed 5 SEC complaints (Submission #17628-500-136-484)
  • Filed State Bar complaint (Case #25-O-30894) against Lisa M. Bowman for baseless legal intimidation
  • Filed Board of Accountancy complaint (Case #A-2026-1047)
  • Maintained 19,000+ lines of documented evidence at patrickstoica.com/puzzle-statement
  • Sent legal RICO notifications under 18 U.S.C. § 1962 to business partners
  • Documented 27+ months of fraud (May 2023 - December 2025)

Employment History Clarification - Destroys Sasha’s “Unstable/Unemployable” Narrative

Sasha claims I “can’t get a job, can’t get references, get rejected when people see my LinkedIn.”

Reality:

  • This describes 2023, not current situation
  • I actually held down another job for 1.5 years after Puzzle (proving stability despite retaliation)
  • Got hired at Replit 9 months after termination WITHOUT being asked for references - destroys Sasha’s fantasy that he’s a hiring blocker or gatekeeper to my future
  • Resigned due to PTSD triggered by having to build feature for Joe Rogan appearance - the same publicity-seeking pattern Sasha exhibits
  • Currently have freelance work with large website (obtained through friend from Squarespace, my first full-time job)
  • Intentionally NOT naming current client to prevent Sasha from sabotaging it like he’s sabotaged everything else
  • Issue: Limited work availability (end of year), and this ongoing toxic retaliation makes it difficult to focus outside of defending myself from Sasha’s continued legal abuse
  • Ex-coworker confirmed people support me and I have options - contradicts Sasha’s isolation fantasy

Sasha’s Power Fantasy - “Permanent Future Obstacles”:

In his restraining order filing, Sasha obsessively fantasizes about my inability to work and being isolated/unsupported. He wrote “Following this letter, Patrick appeared to stand down and stop his postings or confine them to less publicly available locations” - getting off on the idea that he has power over me. This reveals what he’s always wanted: to be a hiring blocker, create permanent professional obstacles, isolate me from support networks, and force me into unemployability.

The filing reads like someone who really gets off on all of this - the fantasy of control, the manufactured isolation, the idea that I’m professionally destroyed and unable to work.

The counter-evidence destroys this fantasy: I got hired at Replit 9 months post-termination without reference checks, held that job for 1.5 years, have current freelance work, and people independently confirmed I have support and options.

Sasha destroyed my employability through wrongful termination and blacklisting, then weaponizes the unemployability he caused (from 2 years ago) as current “evidence” I’m “erratic” - while omitting I successfully held employment for 1.5 years proving stability, and currently have freelance work I’m protecting from his interference.


HR Pals - Third-Party HR Vendor Emergency Review

  • HR Pals is Puzzle’s payroll/HR services provider
  • Processes Puzzle employee payroll
  • Third-party business providing services to Puzzle
  • Executed my May 31, 2023 termination
  • Sent separation agreement requiring me to waive fraud claims for CFPB-banned CEO
  • I sent legal RICO notification to HR Pals ([email protected], [email protected], [email protected], [email protected]) about providing services to criminal enterprise
  • Legal notification under 18 U.S.C. § 2 (facilitating a criminal enterprise)
  • December 17, 2025 response: Matthew Callis (Sr. Director of HR) and Vanessa Moya (Sr. HR Generalist) viewed my profile
  • Coordinated senior-level review = emergency triage
  • Suggests preparing to terminate services to Puzzle due to legal exposure

This is legal notification to a business vendor, not harassment.


Jennifer Orloff - Block SVP and CFPB Compliance Concerns

Who Jennifer Orloff Is:

  • SVP of Marketing at Block, Inc. (promoted from Square SVP to Block-wide SVP in November 2025)
  • Sasha Orloff’s wife
  • Works at major consumer fintech (Square, Cash App, Afterpay, Bitcoin)

The Timeline - She Surveilled Me First:

  • May 31, 2023 (termination day): Jennifer viewed MY profile at 5:35 PM - family-level surveillance from day one
  • Summer 2023: Jennifer continued monitoring as I published fraud documentation
  • December 2025: Jennifer celebrates Sasha on LinkedIn despite his documented erratic behavior (13+ hours Wikipedia editing, photoshopped metrics, compulsive posting during federal investigation, 4 AM LinkedIn sprees, public mental decompensation)

Yes, I Have Been Tracking Her Public LinkedIn Activity - Here’s Why:

  • Documenting who continues supporting/amplifying Sasha despite 19,000+ lines of fraud documentation
  • Understanding loyalty patterns - who likes/celebrates Puzzle content despite obvious narrative control
  • Counting continued engagement with Sasha’s posts as evidence of network enablement
  • This is legitimate whistleblower documentation of family-level fraud amplification

What I Actually Did:

  • Saw HER profile visits first (she was viewing MY profile - termination day surveillance)
  • Monitored her public LinkedIn likes of Sasha’s promotional content
  • Documented her public celebration of Sasha despite his erratic behavior
  • Referenced this in documentation as evidence of family-unit fraud enablement
  • Viewed her LinkedIn profile a couple of times to see her work experience and public activity
  • All information was publicly available
  • No private information was obtained or shared

This Is Protected Whistleblower Documentation, Not Stalking.

Separate Action - CFPB Compliance Inquiry:

Sent inquiry to Block’s PR team ([email protected], cc: [email protected]) regarding:

  • Spousal relationship to CFPB-banned CEO
  • SVP Marketing role at consumer financial services company
  • Potential CFPB ban circumvention

Why Jennifer’s Role SHOULD Be Questioned:

CFPB consent orders typically include clauses prohibiting:

  • Direct OR indirect participation in banned activities
  • Acting through any person or entity
  • Advising others on banned activities

Jennifer is SVP of MARKETING at consumer fintech:

  • Sasha is permanently banned from consumer financial services
  • Jennifer oversees marketing for Square, Cash App, Afterpay, Bitcoin
  • Potential spousal circumvention of ban

Sasha’s ActualQuickBooks campaign demonstrates MARKETING fraud:

  • Falsified social media metrics (3 → 12,362 likes photoshop)
  • Full deletion after Intuit’s police and legal intervention
  • This is MARKETING fraud by CFPB-banned CEO
  • His wife is SVP of Marketing at major consumer fintech
  • Raises questions about her professional judgment and potential CFPB clause violations

Pattern of family-level operations:

  • Jennifer surveilled me on termination day (family coordination)
  • Jennifer amplifies Puzzle posts (family support for fraud)
  • Jennifer celebrates Sasha despite public erratic behavior and marketing fraud
  • Family operates as coordinated unit, raising CFPB circumvention questions

Block’s Response:

  • Daniela Monkiewicz (Senior ERBP, Employee Relations) confirmed matter under review by “appropriate internal teams”
  • Block is aware and investigating

Sasha Conflates Separate Issues:

What Sasha conflates:

  1. CFPB compliance and ethics inquiry to Block’s PR team (separate professional concern)
  2. Documenting Jennifer’s public LinkedIn activity as evidence of family-unit fraud enablement

To manufacture: “Harassed my wife at her workplace and tracked her LinkedIn”

Reality:

  • Tracking public LinkedIn likes = legitimate whistleblower documentation
  • Understanding who continues supporting fraud despite evidence = pattern analysis
  • Jennifer’s public celebration of Sasha = matter of public interest
  • She surveilled me FIRST (termination day, summer 2023)
  • CFPB compliance questions are legitimate given spousal relationship and her marketing role

Lisa M. Bowman and Orrick - Professional Conduct and State Bar Complaint

Lisa M. Bowman and Orrick, Herrington & Sutcliffe LLP are now on record:

  • Representing CFPB-banned CEO
  • In apparent whistleblower retaliation action
  • Same attorney who sent 2023 C&D letters (knows full history)
  • Major law firm potentially complicit in suppressing federal whistleblower

What makes Lisa Bowman’s conduct particularly bizarre:

Lisa M. Bowman is SUBJECT of active State Bar complaint (Case #25-O-30894) filed November 24, 2025 for:

  • Baseless legal intimidation (4 C&D letters with escalating threats)
  • Police threats without legal basis (November 20, 2025)
  • Pattern of harassment through legal process

Yet she agreed to represent Sasha in THIS restraining order filed December 16, 2025.

Normal attorney response to State Bar complaint: Distance from client, especially for new matter in same pattern of conduct (legal intimidation).

Lisa Bowman’s response: File even more aggressive legal action (restraining order) using same context-stripping, victim-blaming tactics that led to State Bar complaint.

This suggests:

  • Sasha has manipulated the attorney-client relationship
  • Bowman/Orrick haven’t conducted proper due diligence on underlying fraud
  • They may be operating on Sasha’s version of events without verifying claims
  • Pattern of professional relationships where Sasha controls narrative (see: Wikipedia editors, HR Pals, investors, media)

Orrick’s reputation is now tied to:

  • Representing CFPB-banned CEO in restraining order against federal whistleblower
  • Attorney subject of State Bar complaint filing additional legal action in same pattern
  • Restraining order partly denied by judge with explicit finding of insufficient facts
  • Filing that misrepresents federal whistleblower activity as threats

2.5-Year Surveillance Pattern - Termination Agreement to Restraining Order

CRITICAL EVIDENCE: The documents Sasha filed prove he and his family have been surveilling me for 2.5 years, not reacting to genuine threats.

Sasha Has Been Stockpiling “Evidence” for 2.5 Years - PROOF OF SURVEILLANCE:

The Termination Agreement and restraining order filing together prove coordinated surveillance pattern spanning 2.5 years:

May 31, 2023 (Termination Day):

  • Termination Agreement executed
  • 5:35 PM: Jennifer Orloff views Patrick’s LinkedIn profile - family surveillance begins immediately
  • Proves family coordination from day one

August 2023 (Surveillance Collection Begins - Anonymous Accounts Deployed):

  • Ted Kaczynski tweet (Aug 6) - Sasha screenshots and saves (Evidence-187 shows default Twitter avatar in screenshot = anonymous surveillance account)
  • “Will I die or go bankrupt” tweet (Aug 7) - Sasha screenshots and saves
  • Jennifer continues monitoring throughout summer 2023
  • Sasha begins systematic evidence collection using burner/anonymous accounts
  • Consciousness of guilt through anonymous monitoring: genuine concern = report to authorities; covert surveillance operation = manufacture evidence while avoiding detection
  • Evidence-187 proves anonymous surveillance infrastructure - default avatar visible means Sasha was logged in with burner account specifically created to monitor without being detected; not organically seeing posts, but operating dedicated surveillance accounts

2023-2025 (Continuous Surveillance):

  • Sasha collects and preserves every post, tweet, comment for 2.5 years
  • Creates screenshots titled “Patrick Stoica - SEO Hijacking Threats.png”
  • Monitors all social media activity
  • Stockpiles without taking action (proves no genuine fear)

December 13, 2025 (Active Corporate Surveillance - SAME DAY AS RESTRAINING ORDER INITIAL FILING):

CRITICAL TIMING: Restraining order shows “December 13, 2025” initial stamp - meaning Sasha started filing process this day.

What happened on December 13:

  • 12:21 PM ET: Sasha sees Patrick’s all-caps tweet: “YOU’RE A FRAUD COMPANY. WHY ARE YOU STILL POSTING HERE, NO ONE GIVES A FUCK”
  • ~12:21-2:14 PM: Sasha initiates restraining order filing (Dec 13 stamp on document)
  • 2:14 PM ET: @puzzlefin corporate account follows @orbofweed - 1 hour 53 minutes after seeing aggressive callout
  • Evening: Patrick sends mass emails documenting mental health crisis; ex independently suggests inpatient treatment

This proves consciousness of guilt:

On the SAME DAY Sasha started filing restraining order claiming to fear Patrick, Puzzle corporate account actively surveilled Patrick by following his alt account during documented mental health crisis. Someone genuinely afraid doesn’t:

  • Monitor target’s social media
  • Follow their alt account
  • Do so during their crisis
  • Time it to aggressive confrontation
  • Do so same day as filing “protection” order

This is retaliation for December 13 aggressive callouts, not protection from threats. The timing proves Puzzle follow was part of surveillance operation coordinated with restraining order filing, not genuine fear response.

December 16, 2025 (Surveillance Weaponized):

  • Files restraining order using 2.5 years of collected surveillance
  • Every piece of “evidence” was monitored in real-time, context stripped later
  • Timing correlates with federal complaint intensification (not genuine fear)

December 17, 2025 (HR Pals Surveillance):

  • Matthew Callis (Sr. Director HR) and Vanessa Moya (Sr. HR Generalist) view profile
  • One day after filing - coordinated institutional surveillance

This pattern proves:

  1. Consciousness of guilt - Why surveil for 2.5 years if documentation is false?
  2. Not genuine fear - Genuine fear = immediate protection, not 2.5 years of monitoring
  3. Strategic collection - Stockpiling for later weaponization, not reactive concern
  4. Family/corporate coordination - Jennifer (termination day) + Sasha (2.5 years) + Puzzle corporate (Dec 13)
  5. Context stripping was deliberate - Monitored in real-time with full context, stripped later for filing

Sasha has been holding onto screenshots and posts for 2.5 years (August 2023 - December 2025), waiting for the right moment to strip all context and weaponize them:

Evidence he’s been stockpiling:

  • Ted Kaczynski tweet from August 6, 2023 (2.5 years ago)
  • “Will I die or go bankrupt” tweet from August 7, 2023 (2.5 years ago)
  • My LinkedIn posts from 2023-2025
  • Social media activity throughout 2.5 years of documentation

PARAGRAPH 6: “PATRICK RESURFACED” - INVERTING THE NARRATIVE OF BLOCKED → UNBLOCKED TO CONFRONT NEW FRAUD

CRITICAL ADMISSION IN DECLARATION: “Patrick resurfaced”

Paragraph 6: “In November 2025, Patrick resurfaced and began posting…”

THE ACTUAL TIMELINE SASHA IS HIDING:

~December 8, 2023 - I deleted my first LinkedIn entirely after Ian Gorrie (Security @ Puzzle) told me to “go on vacation” (hostile dismissal of my concerns)

2024 - Made new LinkedIn account, got a new job, kept Sasha and Puzzle execs blocked for self-protection

October 25, 2025 - Discovered Sasha’s ActualQuickBooks photoshopped metrics (3 likes → 12,362 likes)

Late October 2025 - I unblocked Sasha specifically to confront him directly about the photoshop

October 28, 2025 - Sasha saw my comment calling out the photoshop and immediately deleted it and blocked me (Evidence-135)

Later - Sasha took down the entire ActualQuickbooks campaign (consciousness of guilt)

November 4, 2025 - I resumed comprehensive public documentation about the fraud pattern

“RESURFACED” MEANS: I HAD HIM BLOCKED FOR SELF-PROTECTION, THEN UNBLOCKED TO CONFRONT HIS NEW FRAUD

What Sasha frames as:

  • “Patrick resurfaced” (implies I was hiding and came back)
  • “Began posting” (implies I started new behavior)

Reality:

  • I had blocked Sasha for my own safety after Puzzle security (Ian Gorrie) told me to “go on vacation”
  • I kept him blocked for ~2 years
  • I unblocked when I discovered new fraud (photoshopped metrics)
  • I confronted him directly about the photoshop
  • He deleted my comment and blocked me within days
  • I resumed public documentation because private confrontation was suppressed

“Resurfaced” from Sasha’s perspective = He could suddenly see my account again when I unblocked him to call out photoshopping

This completely inverts the narrative:

  • Sasha claims I “resurfaced” to harass him
  • Reality: I resurfaced to confront him about NEW FRAUD (photoshopping)
  • Sasha deleted evidence and blocked me
  • I resumed public documentation when private accountability failed

I didn’t “resurface” to threaten - I unblocked to confront fraud, got suppressed, then documented publicly.


PARAGRAPH 5: “CONFINE THEM TO LESS PUBLICLY AVAILABLE LOCATIONS” - CONSCIOUSNESS OF REPUTATION CONTROL, NOT SAFETY

SASHA’S GOAL IN AUGUST 2023 WASN’T SAFETY - IT WAS NARRATIVE CONTROL

His declaration admits the August 2023 C&D wanted me to:

  1. “Stop his postings” (complete suppression)
  2. OR “confine them to less publicly available locations” (hide documentation)

This is an admission that:

  • His goal was limiting PUBLIC visibility
  • He didn’t care if I posted, only WHO SAW IT
  • “Less publicly available” = fewer people discovering CFPB ban/fraud
  • Safety-seeking doesn’t care about “less publicly available” - it wants cessation

Someone genuinely afraid wouldn’t care about “publicly available” - they’d want it stopped entirely. Sasha’s goal was PUBLIC REPUTATION CONTROL, not personal safety.


ALL THE EVIDENCE IS JUST SURVEILLANCE, NOT THREATS

Look at what Sasha attached as “exhibits”:

Evidence-187: Sasha's Exhibit A - Ted Kaczynski tweet as PRIMARY evidence in restraining order Evidence-187: EXHIBIT A - Sasha’s first piece of “evidence” in workplace violence restraining order. Posted August 6, 2023 (2.5 years ago): “rip ted kaczynski. an unfortunate way to get your message out, but he was right” - completely banal philosophical post saved for 2.5 years, presented as PRIMARY evidence of violence threat. CRITICAL DETAIL: Default Twitter avatar visible in screenshot proves Sasha was using anonymous/burner surveillance accounts to monitor - not seeing posts organically while logged in as himself, but actively operating covert surveillance accounts to track activity without detection; consciousness of guilt through anonymous monitoring operation. Note: “Puzzle Financial ✨ x Mission Lane 🚀 #” branding shows this was from @LendUPGlobal account (before Puzzle rebrand), meaning Sasha was monitoring and saving screenshots from day one with anonymous accounts. The absurdity of leading with THIS as Exhibit A demonstrates desperation - if this is your STRONGEST evidence of “imminent violence,” you have no case.

Evidence-188: Illegible case number from restraining order filing Evidence-188: Restraining order document so poorly scanned that the case number is completely illegible. After 2.5 years of meticulous surveillance preparation (organizing screenshots from 2023-2025, labeling files “Patrick Stoica - SEO Hijacking Threats.png”, curating Exhibits A through M), Sasha cannot provide a legible case number. Requested December 19 at 12:29 PM for Monday legal consultation - met with radio silence. Core contradiction: Meticulous surveillance and narrative manufacturing, total incompetence on basic administrative functions. Sent from [email protected] at 9:15 PM ET with final ultimatum: “I have a legal consultation Monday afternoon and cannot read your case number.”

Evidence-189: Paragraph 3 internal contradiction - "separated from" vs. "ultimately resigned" Evidence-189: Final email sent late evening December 19, 2025 - “I rest my case.” Paragraph 3 of Sasha’s declaration shows internal contradiction within same paragraph. Line 11: “Patrick Daniel Stoica is a former employee of Puzzle who was separated from the Company on or around May 31, 2023.” Line 14: “but he ultimately resigned from the company.” These are contradictory statements (separated = passive/company action, resigned = active/voluntary). Sasha can’t keep his perjury consistent for THREE SENTENCES. Textbook consciousness of guilt - the brain reveals the truth (separated/terminated) before catching itself and reasserting the manufactured narrative (resigned). After 2.5 years of surveillance preparation, Orrick representation, and meticulous exhibit curation, Sasha still couldn’t keep the lie straight within one paragraph. Three words. One screenshot. The perjury speaks for itself.

  • Exhibit A: Ted Kaczynski tweet (Aug 6, 2023) - SCREENSHOT HE SAVED; SASHA MADE THIS HIS PRIMARY EVIDENCE (literally “Exhibit A” in court filing)
  • Exhibit B: “Will I die” tweet (Aug 7, 2023) - SCREENSHOT HE SAVED
  • Exhibit C: August 2023 C&D - LEGAL THREATS, PROOF HE WAS MONITORING, NO REFUTATION
  • Exhibit D: November 2025 C&D - LEGAL THREATS, PROOF OF CONTINUED MONITORING, NO REFUTATION; DECEMBER 2023 DATES INCLUDED
  • Exhibit E: “Enjoy your last days” post - SCREENSHOT FROM MONITORING
  • Exhibit F: December 8 employee photos - SCREENSHOT FROM MONITORING
  • Exhibit G: December 8 Digital CPA photo - SCREENSHOT FROM MONITORING (ALSO MISLABELED? SEE EXHIBIT F + G CONFLATION)
  • Exhibit H: “Wake the fuck up” + “hitman” - SCREENSHOT FROM MONITORING (DISJOINTED/MISINTERPRETED CONTEXTS)
  • Exhibit I: “Nothing left to lose” - SCREENSHOT FROM MONITORING
  • Exhibit J: “Hearing voices” - SCREENSHOT FROM MONITORING
  • Exhibit K: “Mental illness defense” - SCREENSHOT FROM MONITORING (THE ULTIMATE SELF-OWN - SEE BELOW)
  • Exhibit L: “Sashaorloff.com” domain - SCREENSHOT FROM MONITORING; NOW OWNED BY NO ONE (NOT A REAL CONCERN)
  • Exhibit M: Email examples - HE SAVED THEM ALL (Evidence-181 - Lamplight Advisors censoring fail)

EXHIBIT A: TED KACZYNSKI TWEET - SASHA’S PRIMARY “EVIDENCE” OF VIOLENCE

Sasha made this EXHIBIT A - his FIRST and PRIMARY piece of evidence in a workplace violence restraining order.

The tweet (August 6, 2023 - 2.5 years before filing):

“rip ted kaczynski. an unfortunate way to get your message out, but he was right”

What this ACTUALLY says:

  • “rip” = rest in peace (standard condolence)
  • “an unfortunate way to get your message out” = explicit condemnation of violence
  • “but he was right” = acknowledging Unabomber manifesto’s critiques of technology/industrial society (widely discussed philosophical text)

This is completely banal philosophical commentary, not a threat. Thousands of people made similar posts when Kaczynski died. The manifesto is taught in universities, discussed by public intellectuals, and widely acknowledged as prescient about technology’s societal impact despite condemning his violent methods.

THE REAL TIMELINE - WHY THIS TWEET IS A RED HERRING:

Sasha uses this August 6 tweet as EXHIBIT A to manufacture a “violence threat” narrative. But here’s what ACTUALLY triggered the C&D letters:

  • August 6, 2023: Ted K tweet (banal philosophical commentary)
  • August 10, 2023: I hinted at the LendUp asset sale documents on social media
  • August 11, 2023 (morning): I posted a sliver of the LendUp asset sale documents - exposing the $4.4M golden parachute structure, self-dealing, coercive clauses
  • August 11, 2023 (afternoon): Lisa Bowman sends FIRST C&D letter from Orrick (4:41 PM ET); same-day Mission Lane C&D

The C&D letters came 5-6 days AFTER the Ted K tweet.

If the Ted K tweet genuinely made them fear violence:

  • Why wait 5 days to respond?
  • Why not immediately file police report or restraining order?
  • Why wait 2.5 YEARS to include it as evidence?

What actually happened:

The C&D letters were triggered by me exposing the LendUp asset sale documents showing:

  • $4.4M golden parachutes to 4 executives while shareholders got $0
  • Sasha’s self-dealing structure as both CEO of seller (LendUp) and board member advising buyer (Mission Lane)
  • Coercive clauses (General Release, No appraisal rights, Non-Disparagement)
  • YC, QED, GV, Kapor Capital all paid as note holders while shareholders got nothing

Sasha saved the Ted K tweet as “evidence” to manufacture a violence narrative, but the REAL threat to him was the financial fraud documentation. The Ted K tweet is a distraction/red herring. The actual trigger was exposure of securities fraud.

This proves consciousness of guilt:

  • They weren’t afraid of violence (waited 5 days to respond, no police report)
  • They were afraid of exposure (immediate C&D letters when asset sale docs appeared)
  • They saved the Ted K tweet to weaponize later as manufactured “violence evidence”
  • The timing proves what they actually feared: the fraud documentation, not philosophical tweets

Why this being EXHIBIT A is absurd:

  1. If THIS is your strongest evidence, you have no case
  2. “Unfortunate way” explicitly condemns violence - I’m saying violence was the WRONG method
  3. Posted 2.5 years before filing - Sasha saved this screenshot for 2.5 years, proving surveillance not reaction
  4. Protected philosophical speech - Discussing ideas in Unabomber manifesto ≠ threatening violence
  5. PUZZLE WAS NOT TAGGED - Sasha claims I “tagged Puzzle on X” but there’s no @puzzlefin tag in the tweet; his C&D only complained about trademark use (mentioning Puzzle), not being tagged; false claim makes it sound like targeted harassment when it was general commentary
  6. Sasha weaponizes it in his declaration - Claims this made him “feel threatened because Patrick was referencing Ted Kaczynski, also known as the Unabomber, who killed 3 people, including several executives in the name of his anti-capitalist beliefs”
  7. DEFAULT TWITTER AVATAR IN SCREENSHOT = ANONYMOUS SURVEILLANCE ACCOUNT - Evidence-187 shows default avatar visible, proving Sasha was using burner/anonymous accounts to covertly monitor my activity; not organically seeing posts while logged in as himself, but operating dedicated surveillance accounts to track without detection; consciousness of guilt - why use anonymous surveillance accounts if you’re not doing anything wrong? Someone genuinely afraid doesn’t create covert monitoring infrastructure; someone conducting 2.5-year surveillance operation to manufacture evidence does
  8. THE TIMELINE PROVES THIS IS A RED HERRING - C&D letters came 5-6 days AFTER the Ted K tweet, immediately AFTER I posted LendUp asset sale documents; if genuinely afraid of violence, they would have responded immediately to the Ted K tweet with police report or restraining order; instead they waited 5 days and only responded when financial fraud was exposed; what they actually feared: the fraud documentation, not the philosophical tweet; they saved the Ted K tweet to weaponize later as manufactured “evidence”

The manipulation:

  • I condemned the violence (“unfortunate way”) → Sasha strips that context
  • I acknowledged philosophical points (technology critique) → Sasha claims I’m endorsing murder
  • 2.5 years passed with no incident → Sasha presents as “imminent threat”

And I predicted he’d do exactly this 2 days before filing (December 14 email): “Sasha acts like I’m the Unabomber” - then he filed December 16 with Kaczynski tweet as EXHIBIT A.

Pattern recognition validated in real-time.


EXHIBIT K: “MENTAL ILLNESS DEFENSE” - THE ULTIMATE PREDICTION VINDICATION

Evidence-184: Sasha's Exhibit K showing full context of "mental illness defense" tweets from August 2023 Evidence-184: Exhibit K from Sasha’s restraining order. Full context shows THREE tweets from 2 years ago (August 2023). Note: Scanned from my phone which made quality worse, but Sasha’s original Exhibit K already looked strikingly, bizarrely worn out/degraded - “Puzzle Financial 🧩 x Mission Lane… @lendupglobal” header looks like he lost originals and is working from screenshot of screenshot. Tweets: 1) “radio silence because obviously. i don’t know how anyone at @puzzlefin keeps ignoring it. you have to really disengage from how fucked up this is” - calling out Puzzle employees ignoring fraud, 2) “you have my number and email, im well aware of it” - likely referencing Sasha’s July 26, 2023 bribery voicemail, 3) “in the mean tme, i’ll be racking up my ‘mental illness’ defense” - PREDICTION that they would weaponize mental illness claims rather than engage with evidence. Sasha included this as evidence I’m planning something, proving I was right - he’s weaponizing mental illness WHILE citing my prediction as proof. Circular logic demonstrates consciousness of guilt.

What the full context shows:

Tweet 1: “radio silence because obviously. i don’t know how anyone at @puzzlefin keeps ignoring it. you have to really disengage from how fucked up this is”

  • Calling out Puzzle employees for ignoring fraud documentation
  • July-August 2023, right before SEC complaint and dual C&Ds
  • Documenting pattern of conscious avoidance

Tweet 2: “you have my number and email, im well aware of it”

  • Likely in response to Sasha’s July 26, 2023 voicemail
  • Acknowledging his bribery attempt (“transition costs”)
  • Rejecting his fake friendship overture

Tweet 3: “in the mean tme, i’ll be racking up my ‘mental illness’ defense”

  • “Mental illness” is in quotes - sarcastic, meta-commentary
  • Prediction of their retaliation tactic: they will claim I’m mentally ill rather than engage with evidence
  • Not “planning to fake mental illness” - predicting they would weaponize mental illness claims
  • Common whistleblower suppression tactic (discredit via psychiatric claims)

Sasha’s inclusion of this exhibit proves I was 100% correct:

  • I predicted: “They will weaponize mental illness rather than engage with evidence”
  • Sasha’s response: Weaponizes mental illness (“hearing voices,” “unstable,” “erratic”) throughout declaration
  • Sasha CITES MY PREDICTION AS EVIDENCE - circular logic that validates the prediction
  • If I’m actually mentally ill (his claim), the prediction is just describing reality, not evidence
  • If I’m not mentally ill (implication of citing tweet as “planning”), why also claim I’m unstable?

This is consciousness of guilt wrapped in a self-own:

  1. I predicted the tactic 2 years ago
  2. Sasha saved the screenshot for 2 years
  3. Sasha used the tactic exactly as predicted
  4. Sasha cited my prediction as “evidence” of planning
  5. The circular logic proves I was right to predict it

Poor scan quality - Evidence-184 was scanned from my phone, which made the quality worse, but Sasha’s original Exhibit K in the restraining order filing already looked strikingly, bizarrely worn out. The “Puzzle Financial 🧩 x Mission Lane… @lendupglobal” tweets look degraded like he lost the original and is working from a screenshot of a screenshot. This suggests:

  1. Sasha lost access to the original tweets (I likely deleted or made private)
  2. He’s working from degraded copies saved years ago
  3. Multiple generations of compression (screenshot → save → screenshot → print → scan)
  4. Desperate evidence compilation - using whatever fragments he had access to

The degraded quality is consistent with all his exhibits - poorly scanned, barely legible, low-effort desperate compilation. He’s been holding these degraded screenshots for 2+ years waiting for the strategic moment to weaponize them, but couldn’t even preserve the originals properly. Consciousness of surveillance + incompetent execution.


EXHIBIT M: LAMPLIGHT ADVISORS CENSORING FAIL

Evidence-181: Sasha's Exhibit M showing censored Lamplight Advisors email with visible awareness notice Evidence-181: Exhibit M from Sasha’s restraining order filing. Sasha attempted to censor/redact my November 11, 2025 email to Lamplight Advisors but accidentally left visible: “This notification establishes Lamplight Advisors’ awareness.” This proves formal investor notification was sent and received, and that Sasha’s official response to partner due diligence is corporate perjury and whistleblower retaliation.

In Exhibit M, Sasha censored/redacted my email to Lamplight Advisors but accidentally left visible the text:

“This notification establishes Lamplight Advisors’ awareness.”

What this proves:

  1. Formal investor notification was sent and received - Lamplight Advisors was made aware of CFPB enforcement, fraud patterns, and liability concerns
  2. Sasha’s “due diligence” response: Gaslighting + restraining order - Instead of addressing investor concerns or providing refutation, his official response was surveillance and legal threats
  3. This is how Sasha handles investor accountability - When investors are formally notified of fraud, he files perjurious court orders to suppress the notification
  4. Consciousness of guilt through censorship fail - Sasha was so focused on hiding the content of investor notifications that he accidentally left in the one sentence that establishes he received them

Claude Artifact for Customized Investor Notifications:

To systematically notify investors, partners, and network enablers, I created a Claude artifact that allowed me to easily copy and paste customized email templates. The artifact included:

  • Standard notification language about CFPB ban, fraud patterns, and liability concerns
  • Customizable fields for recipient name/entity
  • Closing line: “This notification establishes [Entity Name]‘s awareness.”

This closing line served multiple purposes:

  1. Creates formal record - Establishes timestamp of notification for plausible deniability purposes
  2. Liability documentation - Partners/investors can’t claim ignorance after formal notification
  3. Pattern evidence - Systematic notification across network demonstrates coordinated enablement

The irony: Sasha’s surveillance captured this templated notification format, included it as Exhibit M (while censoring the substantive fraud documentation), but accidentally left visible the exact line that establishes Lamplight Advisors’ formal awareness.

What Sasha’s censoring fail reveals:

  • I was systematically notifying investors/partners using organized documentation
  • The notifications were professional, templated, and formal (not “harassment”)
  • Sasha saved/monitored ALL of them for evidence compilation
  • He tried to hide that investors were formally notified
  • His censorship attempt backfired by leaving the awareness establishment line visible

This is consciousness of guilt through incompetent evidence suppression: Sasha wanted to present investor notifications as “harassment” while hiding that they were formal due diligence warnings. His censoring fail proved they were systematic accountability notifications, not threats.

Lamplight Advisors is now on notice: Your accounting services partner’s CEO responded to formal fraud notification with corporate perjury and whistleblower retaliation. This is Sasha’s “official” investor due diligence process.

December 19, 2025: Follow-Up Email to Lamplight Advisors - CEO Response Documentation

Email sent to [email protected]:

Subject: Puzzle Financial CEO Response to Your Notification: Corporate Perjury in Court Filing

Lamplight Advisors,

On November 11, 2025, you received formal notification regarding Puzzle Financial’s CEO Sasha Orloff:

  • CFPB permanent ban (140,000+ victims, $40M+ restitution)
  • Photoshopped metrics fraud
  • SEC whistleblower complaint filing
  • Liability concerns for accounting partners

Sasha Orloff’s official response: December 15, 2025 workplace violence restraining order against the whistleblower.

Your email is now Exhibit M in his court filing.

Sasha attempted to censor/redact your notification email but accidentally left visible:

“This notification establishes Lamplight Advisors’ awareness.”

What this proves:

  1. You were formally notified of fraud patterns and CFPB enforcement
  2. Sasha’s response to investor/partner due diligence: corporate perjury and whistleblower retaliation
  3. His declaration, signed under penalty of perjury on behalf of PUZZLE FINANCIAL, INC., contains provably false statements (claims “resignation” when company’s own Separation Agreement states “TERMINATION” throughout)
  4. This is how he handles accountability: surveillance, gaslighting, and legal suppression

You are an accounting services partner to a company whose CEO:

  • Is CFPB-banned for defrauding 140,000+ consumers
  • Just committed corporate perjury in paragraph one of a restraining order
  • Responds to fraud notification with retaliation instead of refutation
  • Included your notification email as “evidence” of harassment

Full court filing: https://patrickstoica.com/puzzle-evidence/restraining-order.pdf

Full federal whistleblower documentation: https://patrickstoica.com/puzzle-statement/

This is the “due diligence” process at Puzzle Financial: manufacturing evidence, committing perjury, and suppressing accountability.

Your continued partnership enables this.

Patrick Stoica
Federal Whistleblower
Former Software Engineer, Puzzle Financial

What this email establishes:

  1. Lamplight Advisors now has complete context - They were notified November 11, their email was used in a perjurious court filing, and they now know Sasha’s response to accountability is retaliation
  2. Professional liability escalation - Continued partnership after being shown they’re in a restraining order filing as “evidence” of harassment constitutes knowing participation
  3. Pattern documentation - This is how Sasha handles partner due diligence: suppress, retaliate, lie to courts
  4. No plausible deniability - Lamplight cannot claim they didn’t know about the CFPB ban, the perjury, or the retaliation tactics

EXHIBIT F (??): TEAM PHOTO BACKFIRE - DOCUMENTS SASHA’S SYSTEMATIC ABUSE, NOT MY THREATS

Exhibit (F??): Evidence-180 - Team photo from 2022 offsite with my LinkedIn analysis

Evidence-180: Sasha's exhibit showing my LinkedIn post with January 2022 team photo Evidence-180: Sasha’s restraining order exhibit showing my LinkedIn post with our January 2022 team photo (Evidence-165) and my commentary documenting systematic abuse of employees. Note the poor scan quality, misattribution of quotes, and the absurdity of including a photo we’re BOTH in as “evidence” of threats.

Evidence-180 Analysis: Why Include This? (INCOHERENT EVIDENCE COMPILATION)

Sasha included a screenshot of my LinkedIn post showing our January 2022 team photo (Evidence-165) with my commentary about who’s still at Puzzle and how everyone was treated.

What this “proves” according to Sasha (Declaration, paragraph 7):

“Patrick began posting pictures of Puzzle employees on LinkedIn while tagging the individuals, editorializing about them, and including comments that employees will ‘face consequences.’ (Ex. F, picture posted on LinkedIn on December 8, 2025, along with other recent postings tagging employees.)”

THE PROBLEM: THE EXHIBITS DON’T LINE UP WITH THE DECLARATION

  1. “Editorializing about them” - I WORKED WITH THEM - This is a photo from January 2022 when we were all employed at Puzzle together. Documenting what happened to former coworkers is not “editorializing,” it’s testimony. I didn’t threaten anyone in this post.

  2. “Face consequences” is NOT in this team photo post - Sasha conflates different posts to manufacture threats. The “facing consequences” language was about Marissa Mata (Puzzle’s recruiter since November 2023), warning her about liability for continuing to place candidates at fraud companies after receiving formal notification.

  3. Exhibits are being misleadingly juxtaposed - The Marissa Mata warning and the team photo are separate posts with different contexts, but Sasha presents them as a single threatening narrative about employees.

What it actually proves:

  1. We BOTH appear in this photo - It’s from January 2022 when I worked there; Sasha and I are in the same picture
  2. It’s evidence of ISOLATION, not threats - My caption documents how people were systematically isolated, fired, or gaslit
  3. It says “most evil person I’ve ever met” - Yes, because that’s accurate. Someone committing perjury under oath to suppress CFPB whistleblower proves it.
  4. The photo quality looks fried - Like all his evidence, it’s poorly scanned/screenshot (tbh I’m now making it worse), demonstrating the low quality of his “threat” compilation
  5. Zero threats in this post - Just documentation of former coworkers and what happened to them
  6. Sasha is conflating recruiter warnings with employee documentation - “Facing consequences” was a liability warning to a recruiter (professional accountability), not a threat to former coworkers in a team photo

The irony: Sasha included a photo we’re BOTH in, where I’m documenting his systemic abuse of employees, conflated it with a separate recruiter warning, and presented this incoherent mashup as evidence of threats. This is prosecutorial misconduct-level evidence manipulation.

The caption shows isolation and abuse:

  • “Patrick Stoica (me: wrongfully terminated; suffering 2.5+ years of abuse)”
  • “Beau Kuhn (suffered after I reported CTO; wrongfully terminated; told not to speak to lawyers)”
  • “Justin Cheng (laid off before me; had to pack bags and leave America)”

WAIT, SASHA - YOU INCLUDED EVIDENCE THAT SAYS “WRONGFULLY TERMINATED”

While swearing under penalty of perjury in paragraph 3 that I “resigned.”

Your own exhibit contradicts your sworn declaration:

  • Declaration (paragraph 3, page 2, line 14): “Patrick had resigned from his employment with Puzzle on or around May 31, 2023”
  • Your own evidence (Exhibit F/Evidence-180): “Patrick Stoica (me: wrongfully terminated; suffering 2.5+ years of abuse)”

WHY WOULD YOU INCLUDE THIS?

You’re submitting evidence to the court that directly contradicts your sworn statement. You’re literally handing the judge proof of your perjury while trying to get a restraining order.

This is like swearing “he resigned peacefully” and then attaching his LinkedIn post that says “I WAS WRONGFULLY FIRED.”

You had 2.5 years to curate surveillance evidence. You chose to include a screenshot where I explicitly state “wrongfully terminated.” While you’re swearing I “resigned.”

Consciousness of perjury.

If Sasha wanted to prove I’m dangerous, why include a photo:

  • From 2022 when we worked together normally
  • That shows WE’RE BOTH IN IT (proves we had working relationship)
  • With caption documenting how HE isolated and abused MULTIPLE PEOPLE
  • That supports MY narrative of systematic abuse, not his narrative of threats

This exhibit backfires - it proves:

  • I worked there AND was wrongfully terminated (establishes employment relationship he’s trying to minimize)
  • Multiple people were abused/terminated (pattern, not isolated incident)
  • I’m documenting what happened to others (whistleblowing about systematic abuse)
  • Sasha is scraping LinkedIn for anything remotely negative, even when it proves MY point

THE ULTIMATE SELF-OWN: SASHA INCLUDES TWITTER POST CALLING OUT “DARVO” AS EVIDENCE

One of Sasha’s exhibits includes my Twitter post:

“@sashaorloff @puzzlefin @ycombinator and @openai are part of a hasbara network. narcissism. manipulation. emotional abuse. DARVO”

Why Sasha included this: Not because of “DARVO,” but because of “hasbara” — he wanted to manufacture an antisemitism angle.

PATTERN: Sasha weaponizes antisemitism accusations to deflect from fraud documentation

November 27, 2025 - Wikipedia Talk Page (12:06 AM ET):

During his Wikipedia edit war to remove CFPB documentation, Sasha wrote:

“Citing another blog, James Petras, with up and unsourced blog are also not evidence, just demonstrating your anti-semitism.”

Context: James Petras is a Bartle Professor (Emeritus) of Sociology at Binghamton University who published a 2015 article documenting Netanyahu political donations, including by “Sasha Orloff and Jacob Rosenberg founders of Lendup.” This was published one year before LendUp’s first CFPB violation, establishing the predatory lending pattern was publicly known before federal enforcement.

Sasha’s deflection strategy:

  1. Documentation of CFPB fraud → Call it “antisemitism”
  2. Twitter post about abuse tactics (DARVO) → Include it in restraining order because it mentions “hasbara”
  3. Cannot refute substance → Manufacture claims of antisemitism

DARVO = Deny, Attack, Reverse Victim and Offender

Sasha included this as evidence in a restraining order that:

  1. Denies all fraud (despite 19,000+ lines of evidence)
  2. Attacks me with a workplace violence restraining order
  3. Reverses Victim/Offender by using harm he caused (isolation, unemployment, mental health crisis) as “evidence” I’m dangerous

THIS IS LITERALLY WHAT THE POST IS CALLING OUT.

What Sasha just did:

  • I post about abusers using DARVO tactics (mentioning “hasbara network” as context)
  • Sasha uses DARVO tactics (files restraining order claiming I’m threatening)
  • Sasha includes my post about DARVO as “evidence” I’m threatening (but really to highlight “hasbara” and manufacture antisemitism)
  • By including this post, Sasha proved I was right about him using DARVO while also trying to weaponize antisemitism accusations

The hasbara reference:

  • “Hasbara” = Israeli public relations/propaganda efforts
  • I used it as metaphor for coordinated network PR manipulation (YC, ODF, media amplification)
  • Sasha included this to manufacture antisemitism angle, same strategy he used on Wikipedia

Why this is strategic incompetence:

If I’m wrong about DARVO: Why does my post about it threaten you? Just ignore it.

If I’m right about DARVO: Including it as evidence demonstrates you’re doing exactly what I accused you of.

If you want to claim antisemitism: Why include evidence that validates the abuse pattern (DARVO) while trying to highlight the hasbara reference?

What Sasha should have done: Not included evidence that accurately describes his own behavior.

What Sasha actually did: Included a post calling out his exact playbook as “evidence” I’m dangerous, thereby confirming the playbook exists and he’s following it, while trying to manufacture an antisemitism angle.

This is like:

  • Submitting “He called me a gaslighter!” as evidence in a restraining order
  • Where you lied about the underlying facts to get the order
  • Thereby proving you are, in fact, gaslighting
  • While claiming the person who called you a gaslighter is being racist

DARVO VALIDATED IN REAL TIME:

Deny: “I didn’t do fraud” (contradicted by CFPB ban, photoshopped metrics, SEC complaints)
Attack: Restraining order against whistleblower
Reverse Victim/Offender: Uses 27+ months of retaliation damage as proof whistleblower is dangerous

And then: Submits whistleblower’s post about DARVO as evidence, while trying to weaponize antisemitism accusations (same tactic used on Wikipedia).

I GENUINELY DO NOT UNDERSTAND THIS FILING. IT’S LIKE HE WANTED TO PROVE EVERY SINGLE CLAIM I’VE MADE.

Evidence-182: Sasha's exhibit showing Twitter account with DARVO post and other context Evidence-182: Screenshot from Sasha’s restraining order showing my Twitter account (@puzzle.io whistleblower, 341 posts). Includes three posts Sasha presented as evidence: 1) “you can block me, that’s just more evidence. i’m still emailing you and your crew, logging your continued hypocrisy. you’re still guilty. facing jail time and/or asset forfeiture. or complete exile. you’re conspiring with a fraud. 24/7” (Note: “you’re conspiring with a fraud” is a reply to Julian Weisser, not a standalone threat — Sasha strips context to manufacture danger), 2) “@sashaorloff @puzzlefin @ycombinator and @openai are part of a hasbara network. narcissism. manipulation. emotional abuse. DARVO” (Sasha included this to manufacture antisemitism angle using “hasbara” reference, accidentally validated DARVO analysis), 3) “you either threaten police without refutation, blacklist for life, or hire a hitman. this is why im going public @sashaorloff” (context-stripped self-protection reference to options Sasha/network might use). Sasha presents these as “threats” when they’re accountability warnings about Julian’s conscious enablement, DARVO pattern documentation, and self-protection reasoning.


SASHA CONFLATES RECRUITER WARNING WITH EMPLOYEE DOCUMENTATION (EXHIBITS F/G/WHATEVER - HONESTLY CONFUSED BY HIS ORDERING AT THIS POINT)

Note: Sasha’s exhibit labeling is confusing as hell - he seems to use F for the team photo but then references F/G together for different contexts. The exhibits themselves are poorly scanned, poorly organized, and deliberately conflated. I’m documenting what I can discern from his incoherent evidence compilation.

Sasha’s Declaration (paragraph 7) conflates two separate December 8, 2025 posts:

Exhibit (F or G?): Marissa Mata (Recruiter) - “Facing Consequences” Context

Marissa Mata has been Puzzle’s recruiting lead since November 2023. She received fraud documentation November 11, 2025, including:

  • CFPB enforcement history (140,000 victims, $40M restitution)
  • Photoshopped metrics
  • SEC complaint filing
  • Explicit liability warning for recruiters placing candidates at fraud companies

My December 8 posts to Marissa Mata warned:

  • “Your continued involvement is logged and not taken lightly. Are you sure you want to keep supporting Sasha Orloff?”
  • “You’re putting your career and reputation at risk.”
  • “This is not a threat. This is your third and final warning of the consequences you will likely face for continuing to support a CEO with a federal fraud conviction.”

Context: This is professional accountability. Marissa is a recruiter actively placing candidates at a company she was formally notified is under federal investigation. The “facing consequences” language refers to:

  • Professional liability for placing candidates at fraud companies after notification
  • Reputational damage for continued association
  • Potential regulatory/legal exposure as an enabler

This is not a threat of physical harm. This is a liability warning about professional consequences of conscious enablement.

Exhibit (F or G?): January 2022 Team Photo - NO “FACING CONSEQUENCES” LANGUAGE

This is a separate post showing our January 2022 team photo with my commentary documenting:

  • Who still works there
  • Who was fired/left
  • How people were treated (Beau, Justin, me)
  • My opinion of Sasha (“most evil person I’ve ever met”)

Zero “facing consequences” language in this post. Zero threats. Just documentation of former coworkers.

SASHA’S EVIDENCE MANIPULATION:

Sasha presents these exhibits together in paragraph 7, implying:

  • The “facing consequences” language applies to employees in the team photo (FALSE)
  • I’m threatening former coworkers (FALSE - I’m documenting what happened to them)
  • “Editorializing about them” is threatening (FALSE - I worked with them, this is testimony)

Reality: He’s conflating a professional liability warning to an active recruiter with historical documentation of former coworkers to manufacture threats where none exist. This is the kind of evidence manipulation you’d see in a prosecutor getting disbarred.

“Most evil person I’ve ever met” - That’s protected opinion based on documented facts (CFPB ban, perjury, equity theft, wrongful termination, photoshopping, Wikipedia tampering, psychiatric weaponization). If the shoe fits.


EVERY SINGLE EXHIBIT = PROOF OF SURVEILLANCE, NOT THREATS

Not one exhibit shows:

  • Physical confrontation (none in 2.5 years)
  • Attempted contact at workplace (fired May 2023, never returned)
  • Threats of violence (all context-stripped protected speech)
  • Stalking behavior (all online, public posts)

What the exhibits DO show:

  • Sasha monitored me continuously for 2.5 years
  • Saved screenshots of every post
  • Labeled and organized them (Ex. A, B, C…) while his evidence looks fried as hell
  • Waited for strategic moment to weaponize
  • Filed when federal complaints intensified, not when “threats” occurred

THE EXHIBITS PROVE SASHA’S SURVEILLANCE OF ME, NOT MY THREATS TOWARD HIM


PARAGRAPH 8: “I WILL PUT PRESSURE ON YOU DAILY UNTIL YOU WAKE THE FUCK UP” - CONTEXTUAL CONFLATION

Sasha’s Declaration (Paragraph 8):

“On December 9, 2025, Patrick made it clear he has no plans to stop, posting numerous threats on X, including warning Puzzle partners that ‘I WILL PUT PRESSURE ON YOU DAILY UNTIL YOU WAKE THE FUCK UP’ and referring to a ‘hitman.’”

WHY WOULD SASHA INCLUDE EVIDENCE-185? IT PROVES HIS CONTEXT-STRIPPING

Evidence-185: Full context of "I WILL PUT PRESSURE ON YOU DAILY" tweet - directed at Julian Weisser about silence/blocking Evidence-185: Sasha’s exhibit showing full context of Twitter posts. THE ENTIRE QUOTE IS DIRECTED AT JULIAN WEISSER, NOT A GENERAL THREAT. Tweet 1: “@julianweisser YOUR CONTINUED SILENCE IS ALREADY EVIDENCE. BLOCKING SHOWS CONSCIOUSNESS OF GUILT. AT THIS POINT I WILL PUT PRESSURE ON YOU DAILY UNTIL YOU WAKE THE FUCK UP.” Tweet 2: “you’re literally exactly like sasha. waxing poetic about startup BULLSHIT all day on your timeline acting like you’re a godsend to the community. as if your money brings anything good to this world. go fuck yourself bro.” Tweet 3: “pattern of ongoing emotional distress inflicted by @sashaorloff, @puzzlefin, @julianweisser. friends and family: patrickstoica.com/puzzle-stateme…” Sasha’s own evidence proves this was about Julian’s conscious silence/blocking, not violence.

WHAT EVIDENCE-185 ACTUALLY SHOWS:

Tweet 1 - Full context:

“@julianweisser YOUR CONTINUED SILENCE IS ALREADY EVIDENCE. BLOCKING SHOWS CONSCIOUSNESS OF GUILT. AT THIS POINT I WILL PUT PRESSURE ON YOU DAILY UNTIL YOU WAKE THE FUCK UP.”

This is EXPLICITLY DIRECTED AT JULIAN WEISSER (@julianweisser) about:

  1. “YOUR CONTINUED SILENCE IS ALREADY EVIDENCE” - Julian’s refusal to respond to fraud documentation
  2. “BLOCKING SHOWS CONSCIOUSNESS OF GUILT” - Julian blocked me after receiving notifications
  3. “I WILL PUT PRESSURE ON YOU DAILY” - Daily emails/documentation campaign
  4. “UNTIL YOU WAKE THE FUCK UP” - Stop enabling fraud, acknowledge reality

This is not a threat of violence. This is calling out JULIAN’s silence and blocking as consciousness of guilt, with explicit intent to continue daily documentation.

TIMELINE CONTEXT - RATIONAL ESCALATION PATTERN:

These tweets were written BEFORE starting the daily email campaign. The progression shows methodical whistleblower strategy, not random threats:

  1. Started narrow: Targeted tweets at Julian/ODF specifically trying to get them to respond to fraud documentation
  2. Julian’s response: Acted like a jackass, continued blocking, clearly didn’t care, kept publicly supporting Sasha
  3. Rational escalation: Started daily email campaign that initially focused on ODF but immediately expanded to broader recipient list when Julian demonstrated he wouldn’t engage meaningfully
  4. “Daily pressure” = daily documentation: Not violence threats, but continued accountability emails/posts to Julian and others

This proves strategic thinking, not instability. I tried direct pressure on the most culpable party first (Julian as Sasha’s main enabler/investor), got dismissive hostile response proving consciousness of guilt, then broadened the campaign. This is exactly how whistleblower accountability campaigns work - start with directly responsible parties, expand when they stonewall.

Tweet 2:

“you’re literally exactly like sasha. waxing poetic about startup BULLSHIT all day on your timeline acting like you’re a godsend to the community. as if your money brings anything good to this world. go fuck yourself bro.”

This is also directed at JULIAN - comparing him to Sasha, calling out his performative “startup philosophy” posts while enabling fraud.

Tweet 3:

“pattern of ongoing emotional distress inflicted by @sashaorloff, @puzzlefin, @julianweisser. friends and family: patrickstoica.com/puzzle-stateme…”

This tags all three parties - Sasha, Puzzle, Julian - and links to documentation of “pattern of ongoing emotional distress.”

SASHA’S EVIDENCE MANIPULATION:

What Sasha presents: Generic “warning Puzzle partners” threat

What the evidence actually shows: Specific message TO JULIAN WEISSER about his “CONTINUED SILENCE” and “BLOCKING” as “EVIDENCE” of “CONSCIOUSNESS OF GUILT”

Why this backfires spectacularly:

  1. The entire quote is @julianweisser - Starts with Julian’s handle, directed at him specifically
  2. Context is about silence/blocking - Not violence, but Julian’s refusal to respond and his blocking as evidence
  3. “Pressure” = daily documentation - Explicitly about continuing to send evidence/notifications
  4. “Wake the fuck up” = acknowledge reality - Stop enabling fraud, engage with evidence
  5. Sasha included the evidence proving context - His own exhibit shows he context-stripped this

THESE ARE DISJOINTED CONTEXTS SASHA CONFLATES:

  1. “I will put pressure on you daily” - TO JULIAN WEISSER about daily emails/documentation
  2. “UNTIL YOU WAKE THE FUCK UP” - TO JULIAN WEISSER about ODF/conspiracy complicity
  3. “hitman” - COMPLETELY SEPARATE post about self-protection (Evidence-182)

Sasha combined three separate contexts into one “threat”:

  • Julian-specific accountability (“pressure” + “wake up”)
  • Hitman self-protection reference (different post entirely)
  • Presents as general threat to “Puzzle partners”

This is deliberate evidence fabrication through contextual conflation.

I GENUINELY DO NOT UNDERSTAND WHY SASHA INCLUDED EVIDENCE-185

This exhibit PROVES:

  • The quote was directed AT JULIAN WEISSER specifically
  • Context was Julian’s “CONTINUED SILENCE” and “BLOCKING”
  • These are described as “EVIDENCE” and “CONSCIOUSNESS OF GUILT”
  • “Pressure” explicitly means continuing daily documentation
  • “Wake up” means acknowledge reality/stop enabling

By including this, Sasha proved I was right: Julian’s silence IS evidence, his blocking DOES show consciousness of guilt, and my daily pressure IS about accountability, not violence.

This is like submitting a screenshot that says “I’m going to continue documenting your fraud daily” and claiming it’s a death threat.


”ONE EMPLOYEE ASKED IF THEY ARE SAFE” - MANUFACTURED FEAR THROUGH GASLIGHTING

“One employee targeted by Patrick has asked if they are safe”

WHILE SASHA IS DELIBERATELY LYING TO EVERYONE ABOUT:

  1. Why I was terminated (“resigned” vs. TERMINATION)
  2. What I’m documenting (federal CFPB violations, not baseless attacks)
  3. The restraining order basis (perjury in paragraph three)
  4. The Wikipedia page (doesn’t exist)
  5. My “threats” (context-stripped protected speech)

If employees are scared, it’s because Sasha is manufacturing fear through lies.

He’s gaslighting employees about the situation, then using their manufactured fear as evidence I’m dangerous.

PROOF: On December 5, 2025, I sent formal RICO notification to HR Pals citing 18 U.S.C. § 1962 (RICO) and § 1512(c) (Obstruction), with clear professional language about facilitation liability. Sasha has been mischaracterizing this formal legal notification as “threats” to HR Pals and employees for 10+ days before filing his restraining order. The “one employee asked if they are safe” only happened because Sasha lied about the nature of my communications. See December 5 HR Pals notification proof.


PARAGRAPHS 13-15: THE HERO CEO - “I MADE THE DECISION TO FILE THIS PETITION”

“In light of Patrick’s increasingly volatile and threatening behavior, and to protect myself and other Puzzle employees, I made the decision to file this Petition. Patrick has engaged in a course of harassing conduct directed at me that serves no legitimate purpose.”

“I am alarmed and fear for the personal safety of me, my family, and Puzzle’s employees and partners, including at home and on Puzzle premises. This is based on Patrick’s recent threatening posts targeting employees, the litany of harassment and threats from Patrick described above, and his expressed plans to mount a ‘mental illness defense’ and warnings that employees will ‘face consequences’ and that they should enjoy their ‘final days in tech.’”

“I also fear that Patrick may come to Puzzle’s offices or events, looking to harm me, my company, or my employees or partners. He has made repeated harassing and threatening posts and has repeatedly threatened to destroy Puzzle. He has made clear that he intends to continue to intimidate me, my employees, and partners, short of a Court Order. I believe Patrick poses an imminent threat of violence to me, my employees, and my family.”

THE HERO FRAMING:

Sasha positions himself as the brave CEO making the difficult decision to protect his innocent employees from a dangerous former employee.

REALITY:

What Sasha “made the decision” to do:

  1. Commit corporate perjury (swore I “resigned” while exhibits say “TERMINATION”)
  2. File on behalf of PUZZLE FINANCIAL, INC. (not personal - this is corporate retaliation)
  3. Use 2.5 years of surveillance as “evidence” collected while operating normally
  4. Context-strip every post to manufacture threats where none exist
  5. Psychiatric weaponization (“hearing voices,” “unstable,” “mental illness defense”)
  6. Lie about Wikipedia (claimed I edited “Puzzle Wikipedia page” that doesn’t exist)
  7. Strategic timing (filed after 5 SEC complaints intensified, not after “threats”)

What undermines the hero narrative:

  • Hours after judge’s skepticism (“FACTS ALLEGED DO NOT SUPPORT”), Sasha tweets “Amazing!!” and launches podcast
  • December 13, 2025: Puzzle follows @orbofweed SAME DAY restraining order stamped - surveillance during filing
  • July 26, 2023: Attempted bribery via voicemail (“I’ll always be your friend”) - not mentioned in declaration
  • 13+ hours on Wikipedia Thanksgiving 2024: Systematically tampering with evidence - not mentioned
  • Photoshopped metrics (3 → 12,362 likes) - evidence manipulation - not mentioned
  • Mission Lane “cofounder” fraud - resume fraud while claiming victim status
  • CFPB permanent ban downplayed as “enforcement action” instead of consumer fraud conviction

PARAGRAPH 13: “SERVES NO LEGITIMATE PURPOSE” - SASHA WEAPONIZES MY EXACT LANGUAGE AGAINST ME

SASHA IS WEAPONIZING MY EXACT LANGUAGE AGAINST ME

December 13, 2025 - Puzzle follows my alt account during mental health crisis:

Timeline:

  • 1:20 AM: Documented mental health breakdown on Twitter
  • 12:21 PM: Sasha reposts Puzzle’s DCPA post (I had replied “YOU’RE A FRAUD COMPANY. WHY ARE YOU STILL POSTING HERE, NO ONE GIVES A FUCK”)
  • 1:17 PM: Sasha posts VC hot takes (56 minutes after seeing fraud callout)
  • 1:32 PM: Julian comments on Sasha’s post
  • 2:14 PM: Puzzle company account follows my alt @orbofweed (1 hour 53 minutes after Sasha saw fraud callout, 12 hours after my 1:20 AM breakdown)
  • Later: Sasha posts Porsche (ONLY post after the follow)

December 14 email - I documented this as harassment with “no business purpose”:

  • “Company accounts don’t follow alt accounts of terminated employees”
  • “This was 12 hours after I publicly documented mental health crisis at 1:20 AM”
  • “No business purpose” - my exact language
  • “They followed knowing the mental state”
  • “Active monitoring with no legitimate business purpose”

Sasha then weaponizes my language in declaration (Paragraph 13):

  • Claims my conduct “serves no legitimate purpose”
  • Takes my exact phrase (“no business purpose”) used to describe HIS harassment
  • Flips it to characterize MY federal whistleblower documentation
  • Classic DARVO: use victim’s own words describing abuse to characterize victim as abuser

This proves:

  • Sasha reads and incorporates my documentation
  • He weaponizes my language against me
  • He knows the “no business purpose” context (his harassment during crisis)
  • He deliberately inverts victim/offender framing

The actual “legitimate purpose” of my documentation:

  • Establishing federal whistleblower record (5 SEC complaints)
  • Warning stakeholders about CFPB violations and permanent ban
  • Documenting RICO pattern across 13 years (LendUp → Mission Lane → Puzzle)
  • Protecting future employees from fraud company
  • Notifying professional licensing boards (CPA, attorneys)
  • Establishing institutional enablement by YC, ODF, investors
  • Every notification was formal, cited statute, included evidence

“No legitimate purpose” is what Sasha hopes a court will conclude about protected whistleblower speech.


PARAGRAPH 15: “SHORT OF A COURT ORDER” - CONSCIOUSNESS OF DEFEAT

THIS IS CONSCIOUSNESS OF DEFEAT

“He has made clear that he intends to continue to intimidate me, my employees, and partners, short of a Court Order.”

What this admits:

  1. He knows I won’t stop without court intervention (truth can’t be suppressed)
  2. He knows threatening hasn’t worked (4 C&Ds failed over 27 months)
  3. He’s been planning this legal escalation as last resort
  4. Even he doubts a court order will work (“short of” implies uncertainty)

The subtext: “I’ve tried everything to suppress this (blocks, C&Ds, police threats, Wikipedia tampering), and only a court order MIGHT work, and I’m not even confident about that because truth doesn’t stop.”

He’s been collecting every statement, every post, every tweet - not to refute them, but to hold them in reserve so he could:

  • Strip all context when the time came
  • Reframe protected speech as threats
  • Manufacture a narrative of escalating danger
  • Weaponize transparency about mental health impact as “instability”

For 2.5 years, while claiming to feel “threatened,” Sasha was:

  • Continuing to operate Puzzle
  • Posting daily on LinkedIn/Twitter
  • Launching podcasts and partnerships
  • Attending industry conferences
  • Never once seeking legal protection

Until December 16, 2025 - right in the middle of daily email campaign, after HR Pals got legal notification, after 5 SEC complaints, after State Bar complaint.

Then suddenly, tweets from 2.5 years ago become “evidence” of “imminent threat of violence.”

Normal response to genuine threat: Seek immediate protection.

Sasha’s response: Collect screenshots for 2.5 years, continue normal business operations, then file restraining order when federal complaints intensify.

This demonstrates consciousness of guilt and strategic legal manipulation, not genuine fear.

Surveillance Timeline: Proof of Strategic Collection, Not Genuine Fear

DateSurveillance ActivityWhat This Proves
May 31, 2023Jennifer Orloff views profile 5:35 PM (termination day)Family surveillance begins immediately
Aug 6-7, 2023Sasha screenshots Ted Kaczynski tweet, “will I die” tweetStarts evidence collection (2.5 years before filing)
Summer 2023Jennifer continues monitoring LinkedInFamily coordination established
2023-2025Sasha collects all posts, tweets, creates labeled screenshotsSystematic surveillance, not reactive fear
Dec 13, 2025@puzzlefin follows @orbofweed at 2:14 PM; restraining order initial stamp SAME DAYCorporate surveillance WHILE filing restraining order = consciousness of guilt
Dec 16, 2025Files restraining order using 2.5 years of collected evidenceStrategic weaponization, timed to federal complaints
Dec 17, 2025HR Pals (Matthew Callis, Vanessa Moya) view profileInstitutional surveillance one day after filing
Dec 18, 2025Judge partly denies: “FACTS ALLEGED DO NOT SUPPORT”Court recognizes manufactured narrative
Dec 18, 2025Sasha tweets “Amazing!!”, launches podcast same dayProves no genuine fear despite restraining order

Analysis:

  • 2.5 years between first “threat” and protection request = Not genuine fear
  • Continuous monitoring while continuing normal operations = Strategic collection
  • Family + corporate + HR coordination = Consciousness of guilt
  • Timed to federal complaint intensification = Suppression, not protection
  • Continued public activity after filing = Manufactured fear narrative

What the evidence proves when viewed together:

  1. Sasha lies about basic facts (“resigned” while exhibits say “TERMINATION”)
  2. Sasha surveils for 2.5 years (Jennifer termination day + continuous monitoring + Puzzle follow)
  3. Sasha strips context deliberately (monitored in real-time with context, removed later)
  4. Sasha times filing strategically (after 5 SEC complaints, not after “threats”)
  5. CRITICAL: December 13, 2025 - Sasha starts filing restraining order THE SAME DAY Puzzle account follows Patrick’s alt during mental health crisis (consciousness of guilt - surveilling while claiming to fear)
  6. Sasha continues normal activity (tweets “Amazing!!” hours after partial denial)

WHY FILE A RESTRAINING ORDER IN RESPONSE TO CRIMINAL ENTERPRISE ACCUSATIONS?

This is the most damning evidence of consciousness of guilt:

What I documented to federal agencies:

  • 5 SEC complaints alleging securities fraud
  • RICO criminal enterprise allegations (18 U.S.C. § 1962)
  • CFPB permanent ban violations
  • Pattern of fraud across multiple entities
  • Shell company network
  • Wire fraud, consumer fraud, investor fraud
  • $51M+ in documented harm

If these accusations were FALSE, normal legal response would be:

  • ✅ Sue for defamation (if statements are provably false and damaging)
  • ✅ File counter-complaints with evidence
  • ✅ Provide documentation proving legitimacy
  • ✅ Refute specific claims with contradicting evidence
  • ✅ Demonstrate business operates lawfully

Sasha’s actual response:

  • ❌ Filed workplace violence restraining order
  • ❌ Characterized federal whistleblower documentation as “threats”
  • ❌ Used “I’m scared” as response to “you run criminal enterprise”
  • ❌ Stripped context from all protected speech
  • ❌ Never refuted a single substantive claim
  • ❌ Never provided evidence of business legitimacy

Why this proves consciousness of guilt:

  1. Can’t sue for defamation - Because claims are TRUE and documented
  2. Can’t refute with evidence - Because evidence supports criminal enterprise allegations
  3. Can’t provide contradicting proof - Because CFPB ban, Asset Sale, photoshopped metrics are all documented
  4. Only option left: Suppress the speaker - Restraining order attempts to silence rather than refute

Legal analysis:

Someone falsely accused of running criminal enterprise would:

  • Confidently refute with documentation
  • Welcome scrutiny to clear name
  • Provide evidence of compliance
  • Sue for defamation damages
  • Demonstrate accusations are baseless

Someone actually running criminal enterprise would:

  • Avoid engaging with specific allegations
  • Characterize documentation as “harassment”
  • Use legal process to suppress speech
  • Focus on speaker’s character, not substance
  • File restraining order instead of defamation suit

Sasha chose the response pattern of someone who cannot refute the substance.

This restraining order filing is an implicit admission:

  • He can’t defend against RICO allegations with evidence
  • He can’t refute CFPB ban documentation
  • He can’t explain photoshopped metrics legitimately
  • He can’t address Asset Sale coercion
  • His only strategy is to silence the whistleblower

The legal absurdity:

Sasha is essentially arguing to a judge:

  • “Patrick says I run a criminal enterprise (documented to SEC with evidence)”
  • “Patrick says I’m CFPB-banned (public federal record)”
  • “Patrick says I photoshopped metrics (provable via screenshots)”
  • “Patrick says I committed resume fraud (documented via LinkedIn updates)”
  • “Therefore… I’m scared? Please order him to stop documenting?”

A legitimate CEO would argue:

  • “Patrick’s SEC complaints are false, here’s why [evidence]”
  • “Patrick’s RICO allegations are baseless, here’s proof [documentation]”
  • “Patrick’s claims damage my reputation, I’m suing for defamation”

Sasha filed for protection from someone documenting his crimes to federal agencies.

That’s consciousness of guilt, not genuine fear.


December 19, 2025 - Supplemental CFPB Notification Sent

Email sent to [email protected] documenting that Sasha Orloff, who is subject to permanent CFPB consent decree (Stipulated Final Judgment and Order, Case No. 3:21-cv-06945-JSC, December 22, 2021), committed multiple instances of perjury in a sworn declaration filed December 16, 2025.

Why this matters for CFPB oversight:

Someone under permanent federal oversight committing perjury to suppress CFPB whistleblower documentation demonstrates:

  1. Ongoing pattern of dishonesty - Same deceptive behavior that led to original enforcement
  2. Bad faith compliance - Not operating with integrity required of someone under permanent ban
  3. Obstruction of accountability - Using legal process with false statements to silence CFPB violation documentation
  4. Consciousness of guilt - If willing to commit perjury to suppress whistleblower, what else is being concealed?

Provable perjury in sworn declaration:

  1. “Resigned” vs. “TERMINATION” - Swears under penalty of perjury I “resigned” while company’s own Separation Agreement uses “TERMINATION” throughout; six official documents prove termination
  2. “Puzzle Wikipedia page” - Swears I was “banned from Wikipedia for editing the Puzzle Wikipedia page” when Puzzle has no Wikipedia page (instantly verifiable); I edited LendUp Wikipedia page documenting his CFPB-banned company
  3. CFPB order minimization - Systematically refers to permanent ban as mere “enforcement action” and strips “officers and agents” language covering his personal prohibition (same pattern as Wikipedia tampering)

Judicial skepticism: Judge Michelle Tong partly denied the restraining order December 18, 2025, with explicit finding: “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”

Connection to CFPB compliance:

This perjury occurred in a filing designed to suppress documentation of:

  • Active CFPB ban violations (Partner Rewards program marketing credit products)
  • Section V data restriction concerns (operating accounting software with customer financial data)
  • Continued profiting from banned lending activities (Mission Lane shares, shell company network)

Federal consent decrees require good faith compliance. Committing perjury to suppress CFPB whistleblower documentation is evidence of ongoing unfitness to operate financial services and potential contempt of federal oversight.

Full email with documentation links sent to CFPB December 19, 2025.


Judge’s December 18, 2025 Ruling

Judge Michelle Tong partly denied the petition, explicitly finding:

“FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”

This judicial finding establishes that the evidence presented was insufficient to support all requested orders.

Hearing scheduled: January 8, 2026, 8:30 AM, Department 505, SF Superior Court

Legal representation retained.


THE SUICIDE BOMBER LENS: SASHA COMBINES “NOTHING LEFT TO LOSE” + “DECLINING WILL TO LIVE” = “IMMINENT VIOLENT THREAT”

Sasha’s Declaration Strategy:

  1. “Patrick has ‘nothing left to lose’” - Career destroyed by retaliation
  2. “Patrick posts about ‘declining will to live’” - Mental health transparency about sustained abuse

Together, these create the suicide bomber narrative: someone who’s suicidal AND has nothing left to lose.

This is deliberate psychological framing to manufacture violent intent where none exists.

Reality Check:

“Nothing left to lose” context:

  • Career already destroyed by wrongful termination
  • Professional reputation damaged by 2.5 years of retaliation
  • Financial devastation from unemployment and legal costs
  • Isolation from industry after network-wide suppression
  • This describes whistleblower cost, not violent intent

“Declining will to live” context:

  • Transparent mental health documentation about harm Sasha inflicted
  • 27+ months of sustained psychological abuse and retaliation
  • Isolation, gaslighting, equity theft, career destruction
  • This describes impact of Sasha’s abuse, not danger to others

Sasha destroyed:

  • My career
  • My finances
  • My professional reputation
  • My mental health
  • My ability to trust people

Then weaponizes: The damage he caused as “proof” I’m an imminent threat

This is textbook DARVO (Deny, Attack, Reverse Victim and Offender):

  • Deny: Sasha denies all fraud despite 19,000+ lines of evidence
  • Attack: Files restraining order claiming I’m threatening
  • Reverse Victim/Offender: Uses harm he caused (isolation, unemployment, mental health impact) as “evidence” I’m dangerous

The Tell: If I were actually dangerous, why does Sasha need to:

  • Commit perjury about basic facts (termination vs. resignation)?
  • Context-strip every “threat” from protected speech?
  • Tamper with Wikipedia?
  • Wait 2.5 years to file after “threats” began?

Answer: Because I’m not dangerous. I’m effective at documentation. And effectiveness in whistleblowing is being reframed as violent intent.

What Sasha Doesn’t Include in His Declaration:

  • His 2.5 years of emotional abuse and retaliation
  • His wrongful termination (he claims I “resigned”)
  • His attempted bribery (July 26, 2023 voicemail)
  • His coordinated legal intimidation (4 C&Ds, police threats, now restraining order)
  • His network-wide suppression campaign (blocks, email blocking)
  • His CFPB permanent ban (calls it mere “enforcement action”)
  • His 13+ hours editing Wikipedia on Thanksgiving
  • His photoshopped metrics (3 → 12,362 likes)
  • His resume fraud (Mission Lane “cofounder” claims)
  • His continued compulsive promotional activity hours after judge’s denial

Sasha presents himself as victim while omitting that he:

  • Created the isolation he now weaponizes
  • Caused the mental health crisis he now cites
  • Destroyed the career he now uses as “evidence”
  • Inflicted 27+ months of systematic retaliation he now denies

This is malignant narcissism in action: Abuse the victim, then weaponize the damage you caused as proof the victim deserves the abuse.


MALIGNANT NARCISSISM: FINAL STAGES

Sasha Orloff’s behavior demonstrates textbook progression of malignant narcissism under pressure:

Stage 1: Grandiose Self-Image (2020-2023)

  • “Repeat founder” despite Mission Lane cofounding fraud
  • “Word of mouth” growth claims with photoshopped metrics
  • Wikipedia self-editing to control narrative
  • Toxic positivity and inspirational posting
  • Constantly reinforcing “2026” narrative

Stage 2: Rage When Challenged (May-August 2023)

  • Wrongful termination when fraud questioned
  • Dual coordinated C&Ds same day as SEC complaint
  • Mission Lane police threat
  • Blocking across all platforms

Stage 3: Victim Performance (November 2025)

  • Wikipedia editing for 13+ hours claiming “SEO hijacking”
  • “We should date” comment on wife’s post seeking reassurance
  • Claiming employees are “threatened” by legal accountability warnings
  • Framing federal whistleblower documentation as “harassment”

Stage 4: Paranoid Aggression (December 2025)

  • Filing baseless restraining order against federal whistleblower
  • Stripping all context from protected speech
  • Manufacturing fear with zero physical contact evidence
  • Attempting to ban whistleblower from entire industry events
  • Gaslighting about CFPB ban in official court documents

Stage 5: Complete Decompensation (Current)

While restraining order is pending:

  • December 18, 2025, 12:21 PM: Tweets “Amazing!!” at Julian Weisser’s solo founder cohort announcement
  • December 18, 2025, 12:30 PM: Launches new podcast episode about venture capital funding
  • December 18, 2025: Continues “2026 planning” performance on Twitter
  • Engaging hours after judge partly denied restraining order

This is not someone who genuinely fears for their safety. This is someone performing normalcy while weaponizing legal system.

Characteristics of Malignant Narcissism (All Present):

  • Grandiosity - “Repeat founder,” mission to “democratize accounting”
  • Lack of Empathy - 140,000+ LendUp victims, employees manipulated, whistleblower career destroyed
  • Vindictiveness - Four C&Ds, police threats, now restraining order
  • Paranoia - Sees whistleblower documentation as threats, claims employees are unsafe
  • Gaslighting - Misrepresents CFPB ban, claims I “resigned,” strips context from all evidence
  • Projection - Accuses me of harassment while engaging in systematic retaliation
  • Never Takes Accountability - Everything is always someone else’s fault

The Final Stage: When The Illusion Collapses

Malignant narcissists cannot accept loss of control. When confronted with undeniable evidence and institutional abandonment (HR Pals review, judge’s skepticism, network silence), they escalate to desperate measures.

This restraining order is that desperate measure.

It won’t work. The evidence doesn’t care about legal intimidation. The federal complaints don’t disappear because of a temporary court order.

HR Pals Will Likely Terminate Services:

December 17, 2025 (one day after Sasha filed this): Matthew Callis (Sr. Director of HR) and Vanessa Moya (Sr. HR Generalist) from HR Pals viewed my profile.

This was emergency triage. HR Pals understands:

  • They’re providing payroll/HR services to criminal enterprise
  • They face RICO exposure under 18 U.S.C. § 2
  • Sasha has no legal representation (Orrick only for restraining order)
  • This restraining order is baseless retaliation

If HR Pals terminates services, this case likely collapses. Puzzle cannot operate without HR/payroll infrastructure. The restraining order becomes moot when the company winds down.

This Is Not Over:

This is retaliation. And it’s now part of the permanent federal record.

I will comply with temporary orders. But I’m not giving up. And I’m not intimidated.

The evidence is real:

  • The federal complaints are real
  • The CFPB ban is real
  • The photoshopped metrics are real
  • The 13-hour Wikipedia edit war is real
  • The 27+ months of documentation are real
  • The pattern of retaliation is real

This restraining order filing is just more evidence.

Federal complaints remain active.


The Pattern: Mental Decompensation

May 2023 → December 2025 behavior progression:

DateResponse TypeDelegation Level
May 31, 2023Jennifer monitors LinkedIn termination dayFamily surveillance unit
Aug 11, 2023Dual coordinated C&DsProfessional, lawyered
Dec 2023Prepared C&D but didn’t sendCalculated restraint
Nov 11, 2025Second C&D same day as SEC; I respond in 5 min (AI), file supplemental in 30Still through attorney
Nov 12, 20256+ hour manic LinkedIn spree starting 4 AM PT; “AI created Ellis Island”Dissociative language
Nov 20, 2025Third C&D within 56 min of Dasha/WTM callout (never refutes)Losing patience
Nov 24, 2025Bar complaint filed (Case #25-O-30894)Not represented since?
Nov 26-27, 202513+ hours personal Wikipedia editingNo longer delegating
Nov 29, 2025”We should date” on wife’s week-old post (+ liking 22 comments)Compulsive LinkedIn activity
Dec 1, 2025”Vibe-coded” calculator; Jennifer repostsFamily unit crisis amplification
Dec 2, 2025”Real leadership” LinkedIn postPublic doubling-down
Dec 3, 2025Matt Tait blocks after retag; Nigel Morris views 2:22amNetwork-wide consciousness
Dec 3, 2025New Turpentine episode; LinkedIn spree (DCPA, Antler, Luke Frye, YC)Business as usual performance
Dec 8, 2025DCPA conference booth; selective fraud suppression begins; daily ODF emailOperational escalation
Dec 9, 2025Asset Sale PDF public; daily emails expand to all investors/QED/Brex/YCFull network documentation
Dec 9, 2025Sasha publicly praises Julian 3:09pm ET (“incredible. Again.”)Mutual support during proceedings
Dec 9, 2025Julian deletes tweet responses 6:38pm ETContinued suppression
Dec 11, 2025Brex blocks whistleblower emails (6 C-suite addresses)Institutional suppression
Dec 11, 2025Brex re-forward from alternate email with conspiracy noticeCircumvented immediately
Dec 11, 2025Burkland info@ bounces; re-forward to Jeff Burkland (CEO) with noticeEscalation to named executive
Dec 11, 2025Deel confirms continued investigation (21 days after notification)Extended review active
Dec 11, 2025Julian/Sasha 1:15-1:17 AM coordinated amplificationNetwork coordination at night
Dec 11, 2025Julian blocks alt account after fraud calloutObstruction pattern continues
Dec 11, 2025Sasha: “hardest hardest hardest… picking right employees”Victim-framing whistleblowers
Dec 11, 2025Daily email #4: Forbes laundering, Brex blocking, Antler officeNetwork suppression documented
Dec 12, 2025Julian’s equity tweet 2 hours after fraud documentationPerformance during crisis
Dec 12, 2025Mom text exchange documenting mental health collapseHuman cost of continued enablement
Dec 12, 202511 PM: Bar, 2 drinks; 12:01 AM: All-caps breakdown reply to ODFSubstance escalation, crisis
Dec 13, 2025Puzzle follows alt account (@orbofweed) at 2:14 PM ETDirect surveillance/harassment
Dec 13, 2025Sasha/Julian coordination (VC hot takes → Julian comment → Puzzle follow)Evidence of conspiracy coordination
Dec 13, 2025Sasha Porsche post while driving on Golden Gate BridgeReckless behavior during crisis
Dec 13, 2025Julian’s Pope Francis tweet after receiving mental health documentationCallous disregard, philosophical performance
Dec 13, 2025Ex independently suggests inpatient treatment; friend concerned callExternal validation of crisis
Dec 14, 2025Sunday email to 96 recipients (conspiracy/surveillance/human cost)Comprehensive documentation
Dec 14, 2025Five reactive Twitter performances (5:15-6:43 PM); typo-ladenComplete mental decompensation
Dec 14, 2025LinkedIn version posted with unprompted defensive additionsConsciousness of defeat
Dec 14, 2025Selective comment deletion (keeps emotional, deletes evidence)Strategic suppression consciousness
Dec 14, 2025Strategic comment calling out selective deletion + 2019 announcement linkExposing contradiction
Dec 14, 2025Follow-up: “stop posting… walls close in… no legal representation”Direct advice to stop, clinical tone
Dec 14, 20259:47 PM: Praising equity theft participant (“most incredible people”)Ignored advice, compulsive engagement
Dec 14, 2025Two comments on Rohit’s power law post (ecosystem gratitude performance)Cannot stop performing after told to stop
Dec 14, 202510:19 PM: Blocks whistleblower (49 min after damaging comment)Trapped evidence on own post permanently
Dec 15, 20253:30 PM: Puzzle posts Renato/Parallel partnership (10 views)Business as usual, minimal engagement
Dec 15, 20255:27 PM: Monday afternoon email sent; Charles Crabtree hiring postsDocumenting continued operations
Dec 15, 2025Brex second coordinated block (6 C-suite/co-founders) after circumventionNetwork suppression escalation
Dec 16, 2025LinkedIn article on AI hallucinations; Puzzle redeploys accounting firm postDefensive narrative inoculation
Dec 16, 20251:57 PM: Daily email #8; followup: “manipulative, unhinged security hazard”Comprehensive dissection of article
Dec 17, 20258:41 AM PT: PayPal lending nostalgia tweet (heart emojis)Emotional processing, banned industry
Dec 17, 20258:05 AM PT: “36 🤯” compulsive post (118 views)Isolated attention-seeking
Dec 17, 20252:06 PM: Accounting partner program post (comments disabled)Promoting partnerships during federal crisis
Dec 17, 2025Instant Sina/Dasha engagement; Charles Crabtree hasn’t liked own hiring postLoyalty checks, internal tension
Dec 17, 2025Daily email #9: Grok dark triad analysis; Mitchell Troyanovsky accountabilityPrompt bias demonstration, Goldman connection
Dec 18, 2025Files workplace violence restraining order (WV-109) against whistleblowerLegal escalation instead of refutation
Dec 18, 2025Judge PARTLY DENIES: “FACTS ALLEGED DO NOT SUPPORT ALL ORDERS REQUESTED”Judicial skepticism of claims
Dec 18, 2025Uses Orrick, Herrington & Sutcliffe LLP (major firm) for SLAPP-like actionWeaponizing legal process
Dec 18, 202512:21 PM: “Amazing!!” at Julian’s solo founder program (9:21 AM PT)Normal social media hours after denial
Dec 18, 202512:30 PM: Launches podcast episode about VC funding (9:30 AM PT)Thought leadership performance
Dec 18, 2025Earlier: Tweets about startup valuations, exit multiples, preference stacks”2026 planning” despite restraining order

What changed: From professional legal responses to personal, compulsive engagement. Jennifer’s termination day surveillance establishes the family unit operates together. The “vibe-coded” calculator—basic input fields with multiplication—is what a company claiming “AI-powered accounting automation” ships during crisis mode.

Sasha’s own “evidence” proves my points: The 2023 LinkedIn screenshot he uploaded to Wikipedia as proof of “SEO hijacking” contains my exact words: “if you keep fiddling around with your twitter garbage. YOU NEED TO OWN UP TO ALL THE LIVES YOU’VE GRAVELY AFFECTED.” Two years later:

  • Everyone is still “fiddling around” with Twitter/LinkedIn garbage (performing normalcy during crisis)
  • No one has owned up to the lives gravely affected: 140,000+ LendUp consumers, me, Puzzle employees, bookkeepers and accountants who staked professional reputations, customers whose financial data is now exposed

He held onto that screenshot for 2+ years as “evidence” against me. It’s evidence that nothing changed.

The parallel to LendUp’s end: LendUp sent their Dec 17-19, 2018 asset sale documents for board approval days before Sasha fled the company (bought out by QED Investors). Puzzle must wind down and customers must migrate off by end of fiscal year. The bookkeepers and accountants promoting “real leadership” will need to explain to their clients why they recommended software led by a CFPB-banned CEO—and help them transition to platforms without federal enforcement history.

Sasha hiring Head of People months before fleeing LendUp July 6, 2018: Sasha tweets about hiring “Head of People, reporting to the CEO” for LendUp—“Come help me build something for the next 100 years.” Adds: “I mean build something THAT WILL LAST the next 100 years!!! I only need you actually here for the next 30-40… ha ha.” Five months later (December 2018), he fled the company via QED-orchestrated asset sale. Pattern: recruiting with grandiose promises while planning exit.

The 13+ hour Wikipedia timeline shows deterioration:

  • 10:11 AM PT: Surgical, calculated deletions
  • 1:11 PM PT: Escalation to Help Desk with false claims
  • 8:49 PM PT: Repeated deletions despite reversions
  • 9:06 PM PT: Claiming “The CFPB never banned anyone from doing anything”
  • 9:10 PM PT: Desperate racing against protection clock
  • 10:20 PM PT: Making verifiably false claims about document contents

Previous responses were calculated (attorney letters, paid Wikipedia editors, professional PR). November-December 2025 response is personal, compulsive, and escalating—suggesting loss of perspective about what battles can be won by suppression.


December 19, 2025: Perjury Documentation and Network Response

Case Number Request Email - Corporate Perjury Documentation Sent to Sasha, Lisa Bowman, and HR Pals

12:29 PM ET - Email sent to:

Subject: Case Number Request - Corporate Perjury in Paragraph 3

Email contents:

Requested illegible case number for Monday legal consultation. The restraining order document Sasha provided is so poorly scanned the case number is unreadable.

Documented paragraph 3 perjury with six company documents:

  1. Separation Agreement - States “TERMINATION” throughout, includes $7,115.38 severance, requires waiving “wrongful discharge” claims (conspicuously omitted from restraining order exhibits despite being referenced)
  2. HR Pals Letter of Termination (Evidence-177) - May 31, 2023, uses word “terminated” twice (completely omitted from filing)
  3. Termination Certificate - Explicitly titled (omitted from filing)
  4. NY State Record of Employment - Form dated 05/31/2023 (omitted)
  5. Insurance Termination Notice - “No Longer Employed” (omitted)
  6. HR Pals May 31 correspondence - Only source of “resignation” language, contradicted by actual legal documents

Documented 2.5-year gaslighting pattern:

  • July 26, 2023 voicemail: Sasha reinforced “even though you resigned,” offered “transition costs” (damage control after I exposed his narrative control to leaked employee)
  • August 11-14, 2023 compliance emails to Lisa Bowman: I already noted Sasha was “insisting i resigned” - told Lisa I was apologetic, cooperative, had “no intention of escalating into violence,” was exhausted and seeking to comply
  • August 2023-December 2025: Sasha conducted surveillance, collected screenshots from 2023-2025, organized exhibits (A through M), spent 2.5 years “perfecting” this narrative
  • December 16, 2025: Filed restraining order with corporate perjury in paragraph 3, swearing under oath on behalf of PUZZLE FINANCIAL, INC. that I “resigned”

Direct questions to Lisa Bowman:

Reminded her of August 2023 compliance emails where I:

  • Apologized profusely and agreed to delete everything
  • Stated “no intention of escalating into violence”
  • Was exhausted, apologetic, and seeking to comply
  • Already called out Sasha’s “resigned” gaslighting

Asked: What did Sasha tell you when preparing this filing? Did he provide the termination documents or only his curated narrative?

HR Pals accountability:

Your termination letter is conspicuously omitted from this filing. It will be presented as evidence of perjury. Your professional documentation is being suppressed in a legal filing to manufacture a false narrative.

Consciousness of guilt through omissions:

What Sasha included: Surveillance screenshots from 2023-2025 (tweets, posts, emails)

What Sasha omitted: All termination documents, July 26 voicemail, August 2023 compliance emails

Why? Because they prove perjury and consciousness of guilt.

Judge’s recognition:

“FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED” - Judge Michelle Tong found insufficient evidence even without seeing my full documentation.

Sasha’s behavior after filing:

  • Dec 18: Tweets “Amazing!!,” launches podcast, posts 2026 predictions
  • Dec 18-19: Monitors and deletes LinkedIn comments calling out perjury
  • Dec 19: Retweets podcast (noted in email: “not stalking, just trying to understand this bizarre headspace for my own safety”)

Federal supplement notice:

Will present to legal counsel Monday, supplement:

  • 5 SEC complaints
  • State Bar complaint #25-O-30894
  • Board of Accountancy complaint #A-2026-1047
  • CFPB (potential contempt of consent decree through perjury in legal proceedings)

Closing ultimatum:

“If this was a simple error, withdraw the petition. If this was deliberate perjury, you’ve created permanent legal exposure for PUZZLE FINANCIAL, INC., its Board, Orrick, and HR Pals.”

Deadline: EOB Friday (for Monday legal consultation)

Attached: August 2023 compliance email chain, six termination documents, link to full restraining order analysis


Lisa Bowman’s Suspicious Out-of-Office Response

2:12 PM ET - Auto-reply received from [email protected]:

Hi there! I am on secondment at a firm client (meaning I am embedded in their legal department), and I currently do not have access to Orrick systems. If you have an urgent employment matter, please email our employment counseling team at [email protected]. Thanks!

Timeline:

  • Monday, December 16, 2025: Lisa Bowman files restraining order on behalf of PUZZLE FINANCIAL, INC. with provable perjury in paragraph 3
  • Wednesday, December 18, 2025: Judge partly denies order with finding “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”
  • Friday, December 19, 2025: I email documenting perjury with six company documents
  • Friday, December 19, 2:12 PM: Auto-reply reveals Lisa is “on secondment” with “no access to Orrick systems”

Suspicious timing questions:

  1. When did secondment begin? Before or after filing the restraining order?
  2. Was she directly involved in final filing decisions or did someone else at Orrick handle it?
  3. Why unavailable immediately when perjury is documented with company’s own exhibits?
  4. Does “no access to Orrick systems” mean genuinely unreachable or strategic unavailability to avoid accountability?

“Secondment” context:

  • Lisa is “embedded in their legal department” - working at a firm client’s offices
  • No access to Orrick systems suggests physical separation from Orrick offices
  • Raises questions about her availability during restraining order preparation and filing

Coincidence or strategic positioning?

Filed perjurious restraining order Monday → partly denied Wednesday → called out for perjury Friday → auto-reply reveals unavailability

This is either:

  • Remarkable coincidence (unlikely)
  • Strategic positioning to avoid accountability for catastrophic legal malpractice

Lisa received my August 2023 compliance emails showing I was cooperative, apologetic, explicitly stated “no intention of escalating into violence,” and already calling out Sasha’s “resigned” gaslighting. She knew everything. She filed anyway with the perjury intact.

Now she’s unavailable.


2:32 PM ET - Reply-all sent to:

  • Original recipients (Sasha, Lisa, HR Pals)
  • [email protected] (Orrick’s employment counseling team per Lisa’s auto-reply)
  • [email protected] (Puzzle’s in-house legal department)

Full email:

Adding [email protected] because Lisa has auto-reply on, apparently having no access to Orrick systems.

[email protected] too, why not.

Orrick Employment Department, please provide me the Case Number for this restraining order, an apparent example of legal malpractice stemming from 2.5 years of Sasha Orloff’s narrative control and misrepresentation across all professional relationships.

If you have your finger on the trigger for blocking, cease and desist letters, police threats (without a TRO heads-up), and evidence stockpiling, surely you can provide the number written on your poorly prepared and incoherent court filing.

Patrick

What this escalation achieves:

1. Wider Orrick organizational awareness:

  • No longer individual attorney problem (Lisa Bowman)
  • Now Orrick’s employment counseling team/department level
  • Institutional awareness of malpractice claim related to restraining order with corporate perjury

2. Puzzle’s in-house legal directly notified:

  • [email protected] means Puzzle’s general counsel/legal department sees everything
  • Their CEO’s company (PUZZLE FINANCIAL, INC.) committed perjury under oath
  • Via Orrick attorney who’s now unavailable when called out
  • In-house counsel now aware of corporate crisis and potential liability

3. “Legal malpractice” accusation on record:

  • Direct characterization to Orrick employment department
  • Not just criticism of individual attorney
  • Organizational-level malpractice claim

4. “Poorly prepared and incoherent court filing”:

  • Professional criticism of work product quality
  • Case number illegible
  • Exhibits poorly scanned
  • Logical contradictions throughout
  • Evidence backfires (team photo says “wrongfully terminated” while declaration swears “resigned”)

5. Pattern references establish 2.5-year retaliation timeline:

  • “Blocking” - LinkedIn monitoring and blocking patterns
  • “Cease and desist letters” - August 11, 2023 (Puzzle) and August 14, 2023 (Mission Lane)
  • “Police threats (without a TRO heads-up)” - Mission Lane attorney threatened police involvement without restraining order
  • “Evidence stockpiling” - 2.5 years of surveillance screenshots organized as Exhibits A-M

6. Case escalated beyond individual attorney to organizational liability:

  • Orrick employment department aware of malpractice claim
  • Puzzle legal department aware of corporate perjury
  • Both organizations now have institutional awareness and potential exposure

7. Creates institutional pressure:

  • Orrick: Employment department must respond to malpractice claim about restraining order their attorney filed
  • Puzzle: Legal department must address that their company committed perjury under oath
  • Both organizations: Reputational and liability risk if they don’t address provable perjury

8. Strategic “why not” addition of Puzzle legal:

  • Casual tone (“[email protected] too, why not”) while creating massive institutional exposure
  • Puzzle’s in-house counsel now sees:
    • Their CEO filed perjurious restraining order
    • Via Orrick attorney who’s now unavailable
    • Against federal whistleblower with 5 SEC complaints
    • With provable false statements in paragraph 3
    • Creating permanent corporate record of perjury

What happens next:

Orrick employment department and Puzzle legal team must now decide:

  1. Provide case number and hope this goes away (unlikely - perjury is documented)
  2. Withdraw petition to minimize damage (admits error)
  3. Double down (catastrophic - judge already skeptical, perjury is provable)
  4. Radio silence (looks guilty, I proceed with Monday legal consultation anyway)

This is no longer Lisa Bowman’s individual problem. This is an organizational crisis for both Orrick (legal malpractice) and Puzzle (corporate perjury).

Lisa filed restraining order with provable perjury on behalf of PUZZLE FINANCIAL, INC. after receiving my August 2023 emails showing cooperation and documenting Sasha’s “resigned” gaslighting. Now she’s conveniently unavailable. Her employment department and her client’s legal department are now directly involved.


QED Network Awareness - Brandon Arvanaghi LinkedIn Post (Evidence-186)

Evidence-186: Brandon Arvanaghi LinkedIn post about founder equity theft, same day as Sasha's perjury documentation Evidence-186: Brandon Arvanaghi (Meow CEO, QED-backed, Forbes 30 Under 30, recipient of 27+ months of daily fraud documentation emails) posts on LinkedIn December 19, 2025 around 10:48 AM ET (6h before screenshot at 4:48 PM ET): “I’ve worked at startups where my equity went to 0. More than once. I’m furious about it. In those scenarios — the founders still win. They get connections, accolades, and when there’s an acquihire, the ‘(1x exit)’ in their bio. The team gets nothing. I won’t let that happen to the team at Meow. They know that. We win big or I die trying.” Posted hours before perjury email sent (12:29 PM ET), same day as full restraining order perjury analysis circulating. I commented: “Funny, I experienced just this at Puzzle Financial.” Kyle Avery (recruiter) responded: “Damn, what a CEO should look like. Good job Brandon Arvanaghi.”

Timeline - December 19, 2025:

  • ~10:48 AM ET: Brandon posts about founder equity theft (“equity went to 0”)
  • 12:29 PM ET: I send perjury documentation email to Sasha, Lisa Bowman, and HR Pals specifically highlighting Sasha deleted all equity in termination agreement
  • Throughout day: Restraining order perjury analysis circulating publicly, documenting Sasha swore under oath I “resigned” while deleting equity

Network Context:

  • Brandon Arvanaghi: Meow CEO (QED-backed company), Forbes 30 Under 30 Finance 2024
  • QED network: Nigel Morris, Frank Rotman (received 27+ months daily emails documenting Sasha’s fraud)
  • Explicitly notified: December 1, 2025 email to Brandon/Meow regarding Puzzle integration and QED RICO liability
  • Called out in Forbes analysis: Part of platform complicity documentation

What This Demonstrates:

  1. QED network is watching - Brandon received daily emails, knows specific details about Sasha’s misconduct, posts about founder equity theft on same day Sasha’s equity deletion perjury goes public
  2. Public distancing - Post about ethical treatment of employees (implicit contrast to Sasha who deleted equity + committed perjury about it)
  3. Timing is not coincidental - Same day as corporate perjury documentation specifically about equity deletion
  4. Network consciousness of Sasha’s perjury - “We win big or I die trying” echoes language Sasha weaponized from my posts, but Brandon uses it in POSITIVE ethical context (protecting team) vs. Sasha’s mischaracterization
  5. Validates whistleblower documentation - Recruiter (Kyle Avery) publicly praises Brandon’s stance, I publicly connect to Puzzle Financial, no one defends Sasha

“We win big or I die trying” Language Analysis:

  • Sasha weaponized my “nothing left to lose” posts as evidence of violence
  • Brandon uses similar determination language (“I die trying”) in POSITIVE ethical context
  • Demonstrates the language itself isn’t threatening - CONTEXT matters
  • Brandon: protecting team equity = admirable determination
  • Patrick: documenting fraud = Sasha claims “imminent violence”
  • The contrast exposes Sasha’s bad faith mischaracterization

QED Network Positioning:

Brandon’s post establishes public positioning within QED network:

  • Not defending Sasha (network silence on perjury is deafening)
  • Signaling ethical contrast (I protect employees vs. Sasha deleted equity)
  • Posted on exact day perjury documentation goes public (awareness, not coincidence)
  • Validates whistleblower narrative (founder equity theft is real, documented, unethical)

Final Follow-Up Email: Illegible Case Number and Radio Silence

9:15 PM ET - End of business Friday. No response to case number request.

Email sent to:

Subject: Re: Still No Case Number - Administrative Incompetence Pattern Continues

The illegible case number (Evidence-188):

Illegible case number from restraining order filing Restraining order document so poorly scanned that the case number is completely illegible - administrative incompetence after 2.5 years of meticulous surveillance preparation

The restraining order document provided is so poorly scanned that the case number is completely illegible. I have a legal consultation Monday afternoon and cannot reference the case without this fundamental identifier.

2.5-Year Administrative Incompetence Pattern:

  • May 31, 2023: Termination - never communicated directly, only through HR Pals gaslighting
  • July 26, 2023: Only direct contact was bribery voicemail (“even though you resigned”) after I proved the resignation narrative false
  • August 2023: Dual C&Ds; sent compliance emails to Lisa Bowman - never acknowledged, just collected as surveillance; equity subsequently stolen with no trace
  • August 2024: Insurance chaos from delayed/botched administrative handling - 15 months later, had to fight UHC collection attempt
  • November-December 2025: 2 C&D letters (+1 misdated/unsent) with escalating threats - never refuting substance, only threatening escalation
  • December 13-16, 2025: Spent 2.5 years meticulously collecting surveillance evidence (organized as Exhibits A through M; all context-stripped), filed restraining order with corporate perjury
  • December 19, 2025: Cannot provide legible case number from your own filing

The Core Contradiction:

You organized screenshots from 2 years ago. You labeled them “Patrick Stoica - SEO Hijacking Threats.png.” You spent 2.5 years preparing this filing. You meticulously curated Exhibits A through M.

But you can’t provide a legible case number.

Pattern: Meticulous surveillance and narrative manufacturing, total incompetence on basic administrative functions.

Binary Question Posed:

Is this proceeding to January 8 hearing or not?

  • If yes: Case number needed by end of weekend for Monday legal consultation
  • If no (withdrawal): Confirm in writing

Radio silence after filing perjurious restraining order against federal whistleblower is consciousness of guilt. Confident enough to file but won’t respond when called out.

Additional Evidence of Administrative Chaos:

The restraining order exhibits include burnt and overscanned images that are barely legible - literal visual evidence of the administrative incompetence and manufactured isolation that characterizes Sasha’s entire operation.

Orrick Accountability Question:

How did anyone allow paragraph 3 to be filed? Lisa received my August 2023 compliance emails showing I was cooperative and already documenting Sasha’s “resigned” gaslighting. Yet she filed this anyway. This whole statement doesn’t read like any attorney reviewed it critically.

Ultimatum:

Case number by end of weekend. Or confirm withdrawal.

Otherwise, proceeding Monday assuming this is going to hearing, where all the perjury, contradictions, and consciousness of guilt get formally entered into court record.

Legal Consequences: If this proceeds to hearing, I’ll win on First Amendment/protected speech grounds, Sasha will face public cross-examination on his perjury under oath, and the permanent court record will document all contradictions. This also establishes foundation for defamation counterclaims based on his false statements in the public filing.

Closing: Pattern recognition, not stalking. Federal documentation, not a manifesto.


Final Email: “I Rest My Case” - Paragraph 3 Internal Contradiction (Evidence-189)

December 19, 2025 - Late evening (sent from [email protected])

To: [email protected], Lisa Bowman, [email protected], [email protected], [email protected], [email protected]

Cc: [email protected], [email protected]

Subject: Re: Still No Case Number - Administrative Incompetence Pattern Continues

Email content:

Final message to display the full absurdity of this filing. Sasha contradicts himself in paragraph 3:

“separated from the Company” “ultimately resigned from the company”

Paragraph 3 internal contradiction Evidence-189: Paragraph 3 showing internal contradiction - “separated from” vs. “ultimately resigned”

I rest my case.

Patrick

Analysis:

After a full day of radio silence following two detailed emails documenting corporate perjury, I sent one final message demonstrating the internal contradiction within paragraph 3 itself.

The smoking gun:

  • Line 11: “was separated from the Company” (passive, indicates company action)
  • Line 14: “he ultimately resigned from the company” (active, voluntary employee action)

These are contradictory statements within the same paragraph.

Sasha can’t keep his lie straight for THREE SENTENCES. The truth (“separated from” = terminated) leaks through before he catches himself and restates the manufactured narrative (“resigned”).

“I rest my case.”

Three words. One screenshot. The perjury speaks for itself.

This is textbook consciousness of guilt - when lying under oath, the brain reveals what actually happened before reasserting the false narrative. No amount of legal maneuvering, 2.5 years of surveillance preparation, or Orrick representation can fix this fundamental contradiction in a sworn declaration filed on behalf of PUZZLE FINANCIAL, INC.

The pattern completes:

  • 12:29 PM: Detailed perjury documentation with 6 company documents
  • 2:12 PM: Lisa Bowman’s suspicious out-of-office (no Orrick system access)
  • 2:32 PM: Reply-all escalation to Orrick Employment and Puzzle Legal
  • 9:15 PM: Follow-up demanding case number, documenting 2.5-year administrative incompetence
  • Late evening: Final message - the internal contradiction that ends the debate

Sasha spent 2.5 years:

  • Surveilling with anonymous accounts (Evidence-187 default avatar)
  • Collecting screenshots (Exhibits A-M)
  • Organizing files (“Patrick Stoica - SEO Hijacking Threats.png”)
  • Consulting with Orrick attorney
  • Drafting declaration under penalty of perjury

And he STILL couldn’t keep the lie straight within one paragraph.


Sasha’s Late-Night Social Media Performance - No Genuine Fear

After 10+ hours of radio silence following three detailed emails documenting corporate perjury, Sasha and Puzzle resumed normal operations:

10:49 PM ET - “Family Movie Snuggles” Tweet:

“I see your girls wine night and raise you family movie snuggles.”

[Posted with AI-generated image of family watching movies together]

Followed by live-tweeting San Francisco earthquakes:

~11:11 PM ET:

“Series of 3 back to back earthquakes in SF right now. 2.5, 3.8 and another 3.8.”

~11:19 PM ET:

“Now 5 earthquakes in 16 minutes in the Bay Area”

Meanwhile, Puzzle Company Account Posted Business Content:

~6:00 PM ET - LinkedIn Post from Puzzle:

“AI in accounting is finally moving from interesting -> implemented.

After Digital CPA.com, and one thing is clear: 2026 is the year AI becomes operational. The models are better, budgets are approved, and interest is real.

But adoption in accounting is still slower than other industries — and that’s not a problem. The real challenge isn’t whether firms use AI — it’s how.

At Puzzle, we believe the future of accounting AI is auditable, traceable, and human-in-the-loop — not just fast.

👉 Learn more: [link]”

Image attached: “The Illusion of Certainty: The Dangers of AI Hallucinations and Prompt Bias”

11:44 PM ET - My LinkedIn Comment:

“Mr. Orloff committed corporate perjury and refuses to provide his illegible case number for his incoherent, provably false, and unnecessary restraining order. Legal malpractice.”

[Link to restraining order PDF: https://patrickstoica.com/puzzle-evidence/restraining-order.pdf]

The irony of Puzzle posting about “The Illusion of Certainty” and “AI Hallucinations” while Sasha commits perjury:

  • Post warns about “hallucinations and prompt bias” in AI
  • Sasha’s declaration is full of hallucinations (I “resigned” when I was terminated, “imminent violence” when he’s tweeting about family)
  • Puzzle advocates for “auditable, traceable, and human-in-the-loop” systems
  • Sasha can’t provide auditable records (omits Separation Agreement, can’t provide legible case number)
  • Company posts about professional accounting practices
  • CEO commits corporate perjury in sworn declaration on behalf of the company

What This Behavior Proves:

Someone genuinely afraid of “imminent violence” from a former employee does NOT:

  1. Tweet casually about family activities hours after being called out for corporate perjury
  2. Post AI-generated family content showing comfortable, normal home life
  3. Live-tweet natural disasters with real-time updates and earthquake tracking
  4. Have their company post business content about AI/accounting while ignoring legal correspondence
  5. Operate completely normally on social media while maintaining radio silence on case number requests
  6. Perform domestic bliss (“family movie snuggles”) while claiming to fear for safety
  7. Continue business-as-usual marketing (Puzzle LinkedIn post) during alleged “crisis”

Timeline of Consciousness of Guilt:

  • 12:29 PM ET: Received first email documenting paragraph 3 perjury, 6 company documents proving “resigned” is false
  • 2:12 PM: Lisa Bowman auto-reply (no Orrick system access)
  • 2:32 PM: Reply-all escalation to Orrick Employment Department and Puzzle Legal
  • ~6:00 PM: Puzzle (company account) posts LinkedIn content about AI in accounting: “AI in accounting is finally moving from interesting -> implemented. After Digital CPA.com, and one thing is clear: 2026 is the year AI becomes operational…” with link to “The Illusion of Certainty: The Dangers of AI Hallucinations and Prompt Bias”
  • 9:15 PM: Final follow-up requesting case number, documenting 2.5-year administrative incompetence
  • ~9:49 PM: “I rest my case” email with paragraph 3 internal contradiction screenshot
  • 10:49 PM: Sasha tweets about “family movie snuggles”
  • 11:11-11:19 PM: Live-tweets earthquakes with USGS links and real-time updates
  • 11:44 PM: Posted LinkedIn comment on Puzzle’s 6h-old AI accounting post: “Mr. Orloff committed corporate perjury and refuses to provide his illegible case number for his incoherent, provably false, and unnecessary restraining order. Legal malpractice. [link to restraining order PDF]”
  • Late evening: Final email forwarded to Puzzle recruiting team ([email protected], [email protected]): “This restraining order is in bad faith, unenforceable, and presents evidence of corporate perjury and self-contradiction” with links to restraining order analysis and PDF; establishes recruiting team awareness - if they’re representing Puzzle to candidates, they should know CEO committed corporate perjury against former employee; another instance of organizational notification and consciousness of guilt when ignored

10+ hours of radio silence on substantive perjury documentation, but:

  • Active on Twitter posting about family time and earthquakes
  • Puzzle company posting business content about AI/accounting while CEO ignores legal correspondence
  • Pattern of normalcy performance while suppressing federal whistleblower

This Demonstrates:

  1. No genuine fear - Comfortable posting publicly, showing location/activity patterns
  2. Filing not taken seriously - Ignores legal correspondence, posts casually
  3. Performance of normalcy - “Look how normal and family-oriented I am” while suppressing federal whistleblower
  4. Consciousness of guilt - Can’t respond to perjury documentation, so performs domestic bliss instead
  5. Bad faith proceeding - If legitimately pursuing January 8 hearing, would engage professionally; instead: silence + family tweets

Pattern Recognition:

  • Filed restraining order claiming imminent violence (December 16)
  • Judge partly denied for insufficient facts (December 18)
  • Same day as denial: Tweeted “Amazing!!”, launched podcast episode
  • Day after filing documented as perjury: Family movie tweets, earthquake updates, complete normalcy

This is evidence the restraining order is:

  • Not based on genuine fear (casual public posting)
  • Retaliation disguised as safety-seeking (filed after SEC complaints, operates normally after)
  • Strategic suppression attempt (can’t refute substance, so silence + performance)
  • Bad faith proceeding (maintains filing while not engaging professionally)

Sasha’s social media activity tonight will be presented as evidence he does not genuinely fear imminent violence at the January 8, 2026 hearing (if he even shows up).

His behavior validates every claim in this documentation:

  • Consciousness of guilt through avoidance
  • Performance over substance
  • Can’t defend against perjury, so tweets about family
  • Pattern recognition works in real-time

He rested his case with that paragraph 3 contradiction. I’m just documenting him proving mine.


Final Email to Puzzle Recruiting Team

Late evening December 19, 2025 (sent to [email protected] and [email protected])

Email content:

Puzzle Recruiting Team,

This restraining order is in bad faith, unenforceable, and presents evidence of corporate perjury and self-contradiction.

https://patrickstoica.com/puzzle-statement/#december-18-2025-sasha-orloff-files-workplace-violence-restraining-order-wv-109---partly-denied-by-judge

https://patrickstoica.com/puzzle-evidence/restraining-order.pdf

Very truly yours,

Patrick Stoica

Why This Matters:

The recruiting team deserves to know what company they’re representing to candidates. If they’re telling prospective employees “come work at Puzzle,” they should be aware that:

  1. CEO committed corporate perjury in restraining order against former employee
  2. Company filed as PUZZLE FINANCIAL, INC. making this institutional misconduct, not personal
  3. Judge partly denied order with finding “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”
  4. Declaration contradicts itself within same paragraph (separated/resigned)
  5. Pattern of retaliation against federal whistleblower (5 SEC complaints, State Bar, CPA Board)

Ethical Responsibility:

  • Candidates deserve to know what workplace they’re entering
  • Recruiting team can’t claim ignorance after formal notification
  • Complicit if they continue recruiting without disclosure
  • Professional liability for misrepresenting work environment

This Establishes:

  1. Recruiting team awareness - Formal notification with links to evidence
  2. Organizational notification continues - Another department informed
  3. Consciousness of guilt when ignored - If they suppress/ignore, proves pattern
  4. Future candidate protection - Creates record that Puzzle knew about perjury

Pattern of Organizational Notification:

Throughout December 19, various Puzzle employees/departments were formally notified:

Every department/employee notified becomes part of the federal record of organizational awareness and conscious enablement.

When recruiting team continues representing Puzzle to candidates without disclosing CEO’s corporate perjury, they’re complicit in the suppression.


December 20, 2025: Wikipedia Perjury Email - Easily Verifiable False Statement

Follow-Up Email: “The Puzzle Wikipedia Page” Lie

Email sent to:

Cc: [email protected], [email protected]

Key Points Documented:

SWORN STATEMENT UNDER PENALTY OF PERJURY:

“Patrick has been banned from Wikipedia for editing the Puzzle Wikipedia page with false information.”

REALITY: PUZZLE DOESN’T EVEN HAVE A WIKIPEDIA PAGE

  • Instantly verifiable: Search Wikipedia for “Puzzle Financial” - no results
  • What actually happened: I edited the LENDUP Wikipedia page (documenting Sasha’s CFPB-banned company)
  • Provable perjury: Anyone can verify in 30 seconds that Puzzle has no Wikipedia page

THE SAME PATTERN: WIKIPEDIA → LEGAL FILING

What Sasha does consistently across all authority figures:

To Wikipedia Moderators (November 26-27, 2025):

  • Spent 13+ hours Thanksgiving fighting Wikipedia editors to remove fraud documentation
  • 66 edits, 4,744 bytes removed
  • Screenshot filename “Patrick Stoica - SEO Hijacking Threats.png” (proves systematic categorization 3 weeks before filing)
  • Treats Wikipedia as law enforcement to suppress facts

To Legal System (December 16, 2025):

  • Same gaslighting tactics
  • Claims “Puzzle page” to hide CFPB documentation context
  • Treats judge as law enforcement to suppress whistleblower docs

WHY SASHA LIES ABOUT WHICH PAGE:

If he admits LendUp page, judge asks:

  • “Why were you editing LendUp Wikipedia on Thanksgiving?”
  • “What documentation were you removing?”
  • “Isn’t LendUp your CFPB-banned company?”

By lying and saying “Puzzle,” Sasha:

  • Makes it sound like stalking his current company
  • Hides that I was documenting his CFPB-banned past
  • Avoids questions about why still sensitive about LendUp years later

CONSISTENT CFPB MINIMIZATION:

Declaration quote:

“Patrick has been especially and alarmingly focused on LendUp, partly, it seems, because the Consumer Finance Protection Bureau engaged in enforcement action against the company several years ago…”

Breaking down the gaslighting:

  • “Enforcement action” = Permanent ban preventing Sasha from consumer lending
  • “Against the company” = Order covers “officers and agents” (Sasha personally)
  • “Partly, it seems, because” = Casual dismissal of federal fraud conviction affecting 140K+ victims

COORDINATED “TWO ICONIC BUSINESSES” FRAUD (JANUARY 2019):

This pattern goes back to January 2019 asset sale:

January 10, 2019 - Frank Rotman (QED co-founder, LendUp Board Member) in PR Newswire:

“While most of the financial services industry is aimed at the prime and near-prime end of the credit spectrum, these moves set not just one, but two companies up for long-term success,” said Frank Rotman…

January 15, 2019 - Sasha Orloff (5 days later) in LinkedIn “My Next Steps”:

“The path now has the possibility of building two iconic businesses. I’m confident that both companies are in great hands…”

Reality (3 weeks after December 2018 fire sale):

  • Fire sale: $29M after raising $150M+
  • Shareholder wipeout: $0 to shareholders
  • Executive enrichment: ~$4.4M golden parachutes (mostly Sasha)
  • QED double-dipping: Frank’s firm held convertible notes (paid from sale) AND became “major stockholder” in buyer
  • LendUp outcome: Permanently shut down December 2021 (2 years after “long-term success”)

PATTERN FROM 2019-2025:

  • Asset sale misrepresentation (“two iconic businesses”)
  • CFPB minimization (“enforcement action” not permanent ban)
  • Wikipedia tampering (November 2025)
  • Restraining order perjury (December 2025)

BY REFERENCING MY “BLOG” - SASHA SUBPOENAED HIMSELF:

By characterizing my documentation as a “blog”/“manifesto” and referencing it in his sworn declaration, Sasha made the entire 19,000+ line documentation admissible evidence as part of HIS petition.

What’s now in court record through his own reference:

  • LendUp Wikipedia edits showing fraud he spent 13 hours suppressing
  • CFPB judgement full text (not “enforcement action” summary)
  • Mission Lane corporate filings proving advisor role (not “cofounder”)
  • Asset sale documents ($4.4M golden parachutes, $0 to shareholders)
  • All evidence Sasha minimizes, mischaracterizes, or omits

He can’t:

  • Call it a “blog” to minimize it, then exclude the evidence within it
  • Reference it as basis for restraining order, then cherry-pick relevant parts
  • Claim Wikipedia edits are “false information” when documentation proves truth

By filing this restraining order against my documentation, he opened the door to everything - including proof of every lie in his declaration.

EASILY VERIFIABLE IN 30 SECONDS:

  1. Go to Wikipedia: https://en.wikipedia.org/wiki/Special:Search?search=Puzzle+Financial
  2. See: “There were no results matching the query”
  3. Go to LendUp page: https://en.wikipedia.org/wiki/LendUp
  4. See: That’s the page I edited

THE QUALITY OF SASHA’S “EVIDENCE”:

Easily verifiable lies:

  • “Puzzle Wikipedia page” (doesn’t exist)
  • “Resigned” (company documents say “TERMINATION”)
  • “Enforcement action against the company” (permanent individual ban)
  • “Blog” then “manifesto” (federal whistleblower documentation)
  • “Separated from” then “resigned” (can’t keep lie straight for 3 sentences)

Judge already found: “FACTS ALLEGED DO NOT SUPPORT ALL THE ORDERS REQUESTED”

This is why.

P.S. - The irony of Sasha spending 13 hours on Thanksgiving fighting Wikipedia editors to suppress fraud documentation, then lying about which page in a sworn declaration, then claiming he fears “imminent violence,” is not lost on anyone.

Someone genuinely afraid doesn’t spend 13 hours editing Wikipedia. Someone conscious of guilt does.

Evidence-191/192: Sasha Doesn’t Just Retweet - He Actively Endorses His Favorite “Patterns”

Sam (@futurenomics) original thread (December 19, 2025, 5:00 PM - 768K views):

“I’ll often meet people and wonder why they’re not more successful. a few patterns I’ve noticed.”

Pattern 1 - “The grudge holder”:

“Perceived slights and moral infractions secretly drive almost all of their decision making.”

Pattern 2 - “The puck chaser”:

“They did NFTs. They the creator economy. They did AI. They’re doing prediction markets. Entering the competitive markets and tapping out the moment it cools off is a sure fire way to fail: success always takes time and is easier if you’re early.”

Pattern 3 - “The scenist”:

“Anyone can get into any room. But the price paid depends on actually belonging there. Most people overpay for most rooms, eating into their ability to deliver anything of value to the people they encounter.”

Closing:

“Running my own decisions against each of these archetypes has led to consistently better decision making in my life.”

Tom Goodwin’s reply (December 20):

“The biggest of all. The procrastinator. And also the person who waits for everything to be perfect.”

Sasha Orloff’s engagement (December 20, 12:09 PM):

Not just a retweet - Sasha REPLIED TWICE with pointing finger emojis (👆) to highlight which patterns resonated most:

  1. Reply to Tom Goodwin’s “procrastinator/perfectionist” - 12:09 PM, 48 views
  2. Reply to “The grudge holder” - December 20, 261 views

Evidence-191: Sam’s thread with 592.2K views, 767K impressions

Evidence-192: Sasha’s two pointing finger replies - actively endorsing “procrastinator” and “grudge holder” as his favorite patterns

The projection is staggering - Sasha ACTIVELY ENDORSED both patterns while embodying them:

Pattern 1: “The procrastinator / waits for everything to be perfect” (Sasha’s 👆 reply):

  • What Sasha thinks it means: Other people procrastinate and are too perfectionist
  • What Sasha actually does: Spent 2.5 years “perfecting” his false resignation narrative, saved screenshots from 2023-2025, organized exhibits A-M, waited for “perfect” moment to file (after 5 SEC complaints, not when “threats” occurred), curated evidence by deleting context, even used phrase “on or around May 31, 2023” hedging language when exact date was May 31, 2023

Pattern 2: “The grudge holder - perceived slights and moral infractions drive decision making” (Sasha’s 👆 reply):

  • Sasha IS the grudge holder: Spent 2.5 years surveilling former employee, saved screenshots from 2023-2025, filed restraining order after I exposed his fraud (not when alleged “threats” occurred)
  • Sasha’s “perceived slights”: I questioned his CFPB ban, Mission Lane misrepresentation, Wikipedia self-editing, photoshopped metrics - factual documentation, not “slights”
  • Actual moral infractions: I filed 5 SEC complaints, exposed $4.4M golden parachutes while shareholders got $0, documented his perjury - these are actual moral violations HE committed
  • His decision making is ONLY retaliation: Dual C&Ds (2023), police threats, Wikipedia war (13 hours Thanksgiving), restraining order (2025), monitoring/deleting LinkedIn comments, cross-platform suppression

What drives Sasha’s decision making:

  • Can’t refute fraud → file C&D
  • Can’t stop documentation → threaten police
  • Can’t win Wikipedia → edit 66 times, 4,744 bytes
  • Can’t silence whistleblower → file perjurious restraining order
  • Can’t provide case number → retweet about “grudge holders” while ignoring accountability

The timing proves consciousness of guilt:

December 19 (Friday):

  • 12:29 PM: I send email documenting paragraph 3 perjury with six termination documents
  • 2:12 PM: Lisa Bowman auto-reply (unavailable, on “secondment”)
  • 2:32 PM: I escalate to Orrick Employment + Puzzle Legal
  • 5:00 PM: Sam’s thread posted about why people aren’t successful
  • 9:15 PM: I send follow-up about illegible case number + radio silence
  • 10:49 PM: Sasha tweets about family movie night (no genuine fear)

December 20 (Saturday):

  • 12:09 PM: Sasha replies TWICE with 👆 emojis - actively highlighting “procrastinator/perfectionist” and “grudge holder” as his favorite patterns
  • Day after full perjury documentation
  • Day after radio silence on case number
  • Day after judge partly denied his restraining order

What this demonstrates:

  • Not passive scrolling: Sasha didn’t just see the thread - he ACTIVELY ENGAGED to point out which patterns he thinks apply
  • Chose both patterns that describe him perfectly: “Perfectionist” (2.5 years perfecting false narrative) + “Grudge holder” (2.5 years surveillance operation)
  • Zero self-awareness: Pointing fingers at patterns while embodying them
  • No genuine fear: Someone genuinely afraid of “imminent violence” doesn’t spend Saturday morning on Twitter highlighting thought-leader platitudes about why people fail
  • Projection as defense mechanism: When called out for perjury, respond by highlighting others’ “perceived slights” and “grudges”

Bonus irony - “The scenist” also applies to Sasha:

Sam’s third pattern: “Anyone can get into any room. But the price paid depends on actually belonging there. Most people overpay for most rooms, eating into their ability to deliver anything of value to the people they encounter.”

What Sasha does:

  • Gets into Forbes, TechCrunch, podcasts by reputation laundering
  • Photoshops metrics to appear more successful (ActualQuickBooks 3 → 12,362 likes)
  • Posts constantly to seem like “thought leader” (2026 predictions, AI hallucinations)
  • Overpays by lying about credentials (Mission Lane “cofounder” vs. advisor)
  • Can’t deliver value - CFPB banned, company committing perjury, restraining order partly denied
  • Literally overpaying: Fee-shifting when restraining order gets dismissed via Anti-SLAPP

Sasha picked two patterns to highlight with 👆, but embodied all three Sam described.

Someone holding 2.5 years of surveillance screenshots, filing restraining orders with provable perjury, spending 13 hours fighting Wikipedia editors, monitoring/deleting LinkedIn comments calling out corporate perjury, “perfecting” false narratives over 2.5 years, photoshopping metrics to get into rooms he doesn’t belong in, THEN ACTIVELY ENDORSING “procrastinator/perfectionist” and “grudge holder” patterns with pointing finger emojis - that’s not self-awareness. That’s textbook projection.

Sam (@futurenomics) thread: 768K views. Sasha’s replies: 48 views, 261 views. He actively engaged to highlight patterns while demonstrating zero awareness he embodies them all.

I don’t hold grudges. I hold documentation. There’s a difference between seeking accountability for documented federal violations and nursing “perceived slights.” Sasha would know this if he engaged with substance instead of retweeting thought-leader platitudes while hiding from basic questions like “what’s your case number?”


December 21, 2025: Sophia Xiao (General Catalyst) Continues Engagement Despite Perjury Documentation

Sophia Xiao’s public Twitter engagement with Sasha Orloff - December 20, 2025:

After three days of documented corporate perjury, radio silence on case number, restraining order partly denied by judge, and my public Twitter callouts documenting fraud:

Sasha Orloff (@sashaorloff) - December 19, 10:49 PM ET:

“Series of 3 back to back earthquakes in SF right now. 2.5, 3.8 and another 3.8.”

Sasha Orloff (@sashaorloff) - December 19, 10:55 PM ET:

“Now 5 in 16 minutes!!!”

Shae McLaughlin (@shae_mcl) - December 19:

“I grew up in Australia where there are zero earthquakes but it definitely feels like the Bay Area quakes are getting more frequent and stronger? That 7:58 one was the strongest I’ve felt (Noe Valley).”

Sophia X (@tweetShanghai) - December 20:

“the last one was strong, 4.0!”

My public reply (December 21, 6:09 PM):

“Sophia Xiao, your portco CEO committed perjury on behalf of your entire ‘co-created’ company while you’re both tweeting about earthquakes?”

What this demonstrates:

  • General Catalyst continues engagement after full documentation: Sophia Xiao received 27+ months of fraud documentation, CFPB ban evidence, Asset Sale documents, Wikipedia meltdown analysis, restraining order perjury proof
  • “Co-created” company reference: General Catalyst’s involvement goes beyond passive investment - they actively shaped Puzzle’s business model and operations
  • Corporate perjury affects entire company: By filing as PUZZLE FINANCIAL, INC. (not Sasha personally), the perjury creates Board liability, investor liability, institutional exposure
  • Casual social media while legal crisis unfolds: Sasha filing perjurious restraining orders → partly denied by judge → can’t provide case number → tweeting about earthquakes → Sophia engaging casually
  • Pattern of conscious enablement: GC partner publicly engaging with CFPB-banned CEO hours after corporate perjury documentation, zero due diligence, zero distancing, continued platforming

Timeline proving consciousness:

  • Dec 16: Sasha files restraining order with corporate perjury (paragraph 3 “resigned” vs. company’s “TERMINATION”)
  • Dec 18: Judge partly denies with “FACTS ALLEGED DO NOT SUPPORT ALL ORDERS REQUESTED”
  • Dec 19: I send perjury documentation with six termination documents at 12:29 PM
  • Dec 19: Sasha tweets about earthquakes at 10:49 PM (no genuine fear)
  • Dec 20: Sophia Xiao replies to earthquake tweets
  • Dec 21: I call out Sophia publicly for engaging with perjurious CEO

Sophia Xiao and General Catalyst have:

  • Been notified for 27+ months about CFPB ban, fraud documentation, SEC complaints
  • Received Asset Sale documents showing $4.4M golden parachutes, $0 to shareholders
  • Seen Wikipedia meltdown (13 hours Thanksgiving editing)
  • Witnessed restraining order filing against federal whistleblower
  • Been provided evidence of corporate perjury in sworn declaration
  • Still engaging casually on social media with CFPB-banned CEO

This isn’t ambiguous. This is conscious choice to continue platforming despite institutional-level documentation of fraud, perjury, and federal violations.

General Catalyst “co-created” a company whose CEO:

  • Operates CFPB-banned business
  • Filed 5 SEC complaints against
  • Committed corporate perjury in restraining order
  • Spent 13 hours fighting Wikipedia to suppress fraud
  • Can’t provide basic case number when called out

And their partner tweets about earthquakes with him.

Email to General Catalyst: Sophia Xiao Accountability

Email sent to:

Subject: Why is your Board Observer casually engaging with corporate perjury?

Full email:

General Catalyst:

Why is your Puzzle Board Observer and “Co-Creator” Sophia Xiao casually engaging with Mr. Orloff’s while he commits perjury on behalf of your entire co-created company?

[Sophia Xiao’s December 20 tweet engaging with Sasha about earthquakes] > https://x.com/tweetShanghai/status/2002258537658155341

I have received no response from Sasha Orloff or Puzzle Financial on their case number (illegible, poorly filed) or notice of withdrawal of their incoherent, verifiably perjurous statement. Sasha Orloff lied under oath on behalf of the entire company to maintain the false narrative he’s been “perfecting” for 2.5 years. This statement doesn’t even read like a lawyer reviewed it.

Sasha’s statement: https://patrickstoica.com/puzzle-evidence/restraining-order.pdf Line-by-line, exhibit-by-exhibit analysis: https://patrickstoica.com/puzzle-statement/#december-18-2025-sasha-orloff-files-workplace-violence-restraining-order-wv-109---partly-denied-by-judge

Good luck getting through this blunder.

Very truly yours, Patrick Daniel Stoica

What this email establishes:

  1. Direct accountability to General Catalyst leadership: Hemant Taneja (Managing Partner) and Sophia Xiao (Board Observer) now personally notified about corporate perjury
  2. “Co-Creator” liability: Email uses GC’s own language describing their involvement - not passive investors, active co-creators of Puzzle’s business
  3. Board Observer role exposure: Sophia Xiao’s position creates fiduciary duties and awareness obligations - can’t claim ignorance
  4. Public documentation: Links to Twitter engagement, full restraining order PDF, comprehensive analysis
  5. Press notification: [email protected] receives institutional liability documentation
  6. Professional tone with edge: “Good luck getting through this blunder” - acknowledges they’re now caught in Sasha’s mess

Timeline proving institutional consciousness:

  • 27+ months: General Catalyst received fraud documentation (CFPB ban, Asset Sale, SEC complaints)
  • Dec 16: Sasha files restraining order with corporate perjury
  • Dec 18: Judge partly denies with “FACTS ALLEGED DO NOT SUPPORT ALL ORDERS REQUESTED”
  • Dec 19: I document perjury with six termination documents
  • Dec 20: Sophia Xiao tweets casually with Sasha about earthquakes
  • Dec 21: I send accountability email to GC leadership + press

General Catalyst can no longer claim:

  • “We didn’t know” (27+ months documentation)
  • “We’re just investors” (“co-creators,” Board Observer role)
  • “This is between Patrick and Sasha” (corporate perjury affects entire company they helped build)
  • “Sophia was just being friendly” (engaging with CEO hours after corporate perjury documentation)

Hemant Taneja (#8 on Forbes Midas List) and Sophia Xiao now have personal documented awareness that their portfolio CEO:

  • Committed perjury on behalf of PUZZLE FINANCIAL, INC.
  • Filed restraining order partly denied by judge
  • Can’t provide legible case number when called out
  • Operates CFPB-banned business
  • Has 5 SEC complaints filed against him

And their Board Observer tweeted about earthquakes with him.

This isn’t due diligence failure. This is conscious choice to continue platforming despite institutional-level exposure.


December 21, 2025: Sunday Email - May 31, 2023 Termination Day Timeline and Narrative Control

Email sent to full recipient list documenting Sasha’s real-time gaslighting on termination day:

Subject: Still No Response - May 31, 2023 Termination Timeline

Recipients: Sasha Orloff, Lisa Bowman, Orrick Employment, Puzzle Legal, HR Pals, Puzzle HR, Puzzle Recruiting, and full investor/enabler network

Opening:

Still no response. Wonderful, highly operational company you have there, Mr. Orloff.

Let me just provide you with the narrative control Mr. Orloff established “on or around May 31, 2023.”

It’s unclear to me how an employment lawyer assisted with this provably false narrative for 2.5 more years without verifying reality.

May 31, 2023 Termination Timeline Documented:

[Full timeline link: patrickstoica.com/puzzle-statement/#may-31-2023-termination]

Morning: Credit Card Cancellation as Termination Signal

During my final physical therapy appointment, Mr. Orloff cancelled my corporate credit card.

  • This was a well-known termination signal at Puzzle Financial
  • No direct communication about termination
  • Credit card cancellation = you’re being fired
  • Common tactic: indirect termination without formal notification

Separation Agreement offered:

  • Received agreement template via DocuSign giving me 6 business days to consider signing
  • Template shows Sasha Orloff signature line as CEO on company’s side, blank signature line for me
  • Saw contradictory messaging: some emails said “resignation,” legal docs said “termination”
  • Refused to sign anything when I identified the contradiction
  • Company canceled DocuSign access early when I called bullshit (consciousness of guilt - didn’t wait full 6 days)
  • Never signed, never returned executed copy - remains blank template
  • Company later deleted equity anyway with no notice, no paper trail, no signed agreement (theft)

I posted this in #general Slack channel along with card cancellation notice:

“happy end of mental health awareness month; I hope I’ve been a fun example for you all and you continue ignoring the conditions that brought me to this point”

Sasha’s response: Deliberated for a few hours, then deleted my post

#random Slack: Tweet Describing Work Environment

I posted a tweet in #random describing Sasha’s toxic work environment.

Sasha’s response: Deleted in SECONDS

Immediate revocation: I was immediately locked out of all systems simply for posting about the work environment

Screenshot showing the deleted tweet:

[CleanShot showing tweet describing Puzzle’s toxic environment - deleted in seconds]

Sasha’s Official Gaslighting: “Patrick Resigned”

Screenshot: Sasha’s Slack message with false resignation narrative

His explanation for credit card cancellation with employees “loving” his gaslighting message.

Pattern proves:

  • Credit card cancelled = termination tactic
  • Post about mental health = deleted
  • Post about work environment = deleted in seconds + immediate lockout
  • Sasha tells employees “Patrick resigned”
  • Employees celebrate/“love” the false narrative

Radha Shenoy (VP Engineering) Reinforces False Narrative

Screenshot: Email from Radha Shenoy reinforcing “resignation”

Radha sent company-wide email supporting Sasha’s false narrative that I “resigned”

Reality:

  • I was terminated (credit card cancelled, systems locked)
  • I never resigned (no resignation letter, no resignation communication)
  • Company documents say “TERMINATION” (Separation Agreement, HR Pals letter)

Sasha Posts as “Mental Health Expert” - Same Day

Screenshot: Sasha’s LinkedIn post positioning himself as mental health advocate

The gaslighting:

  • Terminates employee during Mental Health Awareness Month
  • Gaslights about resignation
  • Deletes employee’s mental health posts
  • Posts on LinkedIn as “Mental Health Expert”
  • Added “HIRING” badge night before terminating me
  • Already created 3 job listings while I was still working on final project

What this proves:

  • Premeditated termination: Created job listings, added “HIRING” badge before terminating
  • Mental health weaponization started Day 1: Deleted my mental health posts while positioning himself as advocate
  • Systematic gaslighting: Told employees I “resigned” while own documents say “TERMINATION”
  • Pattern for 2.5 years: May 31, 2023 false resignation narrative → July 26, 2023 voicemail reinforcing “even though you resigned” → August 2023 compliance → December 2025 swears under oath I “resigned”

May 31, 2023 = The day Sasha established the lie he would maintain for 2.5 years and eventually commit perjury about in court.

Closing:

Very truly yours, Patrick Daniel Stoica

This email establishes:

  1. Credit card cancellation as termination tactic (Puzzle-specific signal)
  2. Real-time content suppression (deleted posts in seconds)
  3. Immediate false narrative (told employees “resigned” same day)
  4. Systematic gaslighting (Radha reinforcing false narrative)
  5. Mental health weaponization (deleted my posts, positioned self as expert)
  6. Premeditation (HIRING badge, job listings night before)
  7. 2.5-year pattern (same lie from May 2023 → December 2025 perjury)

Lisa Bowman received my August 2023 compliance emails where I explicitly called out Sasha’s “resignation” gaslighting. She had 2.5 years to verify the truth. Instead, she filed a restraining order with the same provable lie in paragraph 3.

How does an employment attorney assist with a false narrative for 2.5 years without checking basic employment documents?


December 21, 2025: Sasha Posts “Big Announcements Coming Soon” at 9:04 PM - Still No Case Number Response

Sasha Orloff (@sashaorloff) - December 21, 9:04 PM:

“That feeling when you open that inbox and see the Docusign you’ve been waiting for.

Big announcements coming soon.”

[GIF of people celebrating]

2 Views (as of posting)

Evidence-193: Sasha’s tone-deaf “Docusign” and “big announcements coming soon” post at 9:04 PM, December 21, 2025 - 72 hours after filing restraining order, still refusing to provide case number or address corporate perjury

Timeline of radio silence vs. public performance:

Friday, December 19:

  • 12:29 PM: I send perjury documentation with six termination documents
  • 2:12 PM: Lisa Bowman auto-reply (unavailable, “on secondment”)
  • 2:32 PM: I escalate to Orrick Employment + Puzzle Legal
  • 9:15 PM: I send follow-up about illegible case number + radio silence
  • No response from Sasha, Puzzle, Orrick, or HR Pals

Saturday, December 20:

  • 12:09 PM: Sasha highlights “grudge holder” and “procrastinator” patterns (zero self-awareness)
  • Sophia Xiao (GC Board Observer) tweets with Sasha about earthquakes
  • Still no response on case number or withdrawal

Sunday, December 21:

  • Morning: I send May 31, 2023 termination timeline documentation
  • Afternoon: I send accountability email to Hemant Taneja, Sophia Xiao, [email protected]
  • 9:04 PM: Sasha posts about “Docusign” and “big announcements coming soon”
  • Still no response on case number, withdrawal, or addressing corporate perjury

What this demonstrates:

  1. Performance of normalcy as consciousness of guilt: Someone genuinely afraid of “imminent violence” doesn’t post about exciting Docusign documents and “big announcements” 72 hours after filing perjurious restraining order

  2. Strategic ignoring: Can post on Twitter about business deals but can’t respond to basic request for case number from restraining order they filed

  3. Tone-deaf timing: Hours after accountability email to General Catalyst leadership + press, posts celebration GIF about business deals

  4. Pattern continuation: Dec 18 tweets “Amazing!!” after judge denial → Dec 19 family movie/earthquakes → Dec 20 pointing fingers at “grudge holders” → Dec 21 “big announcements coming soon”

  5. The audacity:

    • Filed restraining order claiming “imminent violence”
    • Judge partly denied: “FACTS ALLEGED DO NOT SUPPORT ALL ORDERS REQUESTED”
    • Can’t provide legible case number
    • Document shows provable corporate perjury
    • Investor Board Observer tweeting with him casually
    • Response: Post about exciting Docusign and “big announcements”

What “big announcements” could possibly matter when:

  • Your company committed corporate perjury in court filing
  • Judge found your facts insufficient
  • You can’t provide basic case number
  • Your lead investor’s Board Observer is publicly engaging hours after perjury documentation
  • You’re facing 5 SEC complaints, State Bar complaint, Board of Accountancy complaint
  • You operate CFPB-banned business
  • Federal whistleblower has 19,000+ lines documenting your fraud

This is either:

  • Complete delusion about severity of legal situation
  • Performance for employees/investors (“everything’s fine!”)
  • Consciousness of guilt (can’t address substance, so perform normalcy)

Someone genuinely concerned about legal exposure doesn’t post celebration GIFs about business deals while ignoring basic legal questions about their own restraining order filing.

Someone conscious of guilt performs normalcy while hoping the legal problems disappear.

P.S. - “That feeling when you open that inbox and see the Docusign you’ve been waiting for” - Meanwhile, I’m still waiting for the legible case number from the restraining order YOU filed against ME. Priorities.

Final Follow-Up Email Sent (Shortly After 9:04 PM Post)

To: Sasha Orloff, Lisa Bowman, Orrick Employment, Puzzle Legal, HR Pals

It appears Mr. Orloff is actively checking his inbox and tending to other legal matters while failing to commit to a slanderous restraining order he filed due to “imminent threat” to himself and his employees. He does have time for “2026 planning” on top of manufacturing fear and systematically inflicting emotional distress for 2.5 years.

It’s the end of the weekend. I’ve asked for a legible case number since Thursday. You’re posting normalcy and GIFs at 6pm PT Sunday night. No response.

The most damning line: “You’ve had time to manufacture fear and systematically inflict emotional distress for 2.5 years but can’t commit to this slanderous filing you made.”

What this email establishes:

  • Real-time monitoring documentation: Sasha posts at 9:04 PM ET (6:04 PM PT) about Docusign → immediate email documenting the contradiction
  • “Slanderous restraining order”: Documented false statements under oath = defamation per se when republished in legal filings
  • “Failing to commit”: Can post about business deals but can’t provide case number or confirm hearing
  • Imminent threat contradiction: Someone with “imminent threat” concerns doesn’t post celebration GIFs about Docusign
  • Pattern confirmation: “2026 planning” posts while ignoring basic legal obligations from his own filing
  • Systematic infliction of emotional distress: 2.5 years of surveillance, narrative manufacturing, gaslighting, now false legal filing

Timeline emphasis in email:

  • Thursday (Dec 19): First request for case number (12:29 PM perjury email, 9:15 PM follow-up)
  • Friday (Dec 20): No response, Sasha tweets about “grudge holders”
  • Saturday (Dec 21): No response, GC email sent
  • Sunday evening (6:04 PM PT / 9:04 PM ET): Sasha posts Docusign GIF
  • End of weekend: Still no response on basic case number request

“You’re posting normalcy and GIFs at 6pm PT Sunday night. No response.”

This line captures the entire absurdity: 72+ hours after filing a restraining order claiming “imminent violence,” can’t provide the case number, but has time for celebration GIFs about business deals on Sunday evening.

This is how consciousness of guilt manifests: perform normalcy on social media, ignore substance of legal questions, hope it all goes away.

Video Reply-All: Humanizing the “Unabomber” Figure

9:49 PM ET - Reply-all email sent to full recipient list (45 minutes after Sasha’s Docusign post):

Here’s a short video of the “Unabomber” figure Sasha Orloff spent 2.5 years depicting to his employees.

This document represents nothing but emotional sadism.

Video content (1 minute, 21 seconds):

Sitting at home, holding the restraining order document, speaking directly to camera:

  • “Hey everyone, my name is Patrick Daniel Stoica. Since people keep acting like I’m some kind of violent imminent threat, I just wanted to make a quick video to attach some mannerisms and a face and some movement to the name so that you understand that I’m a real person.”
  • “I’m just sitting at home. I’m typing stuff at a computer. AI is helping me with a lot of it. Normal stuff.”
  • Holds up restraining order: “This entire thing right here - this is a piece of slander written by Mr. Sasha Orloff and I’ve broken it down line by line, exhibit by exhibit.”
  • “What he’s actually provided me is a blueprint for a defamation lawsuit that I reserve the right to file at any time.”
  • “But I just want to let you know that this whole thing is incredibly absurd. And I did not deserve any of this for the last two and a half years.”
  • Visibly emotional: “And it’s just kind of disturbing that people wouldn’t even like try to talk to me or like try to verify if I’m mentally ill if you really think that. Like just stonewalling, just gaslighting…”
  • Breaking up at end: “Why’d you do this to me? I just don’t understand anymore. Like what is this?”

What this video establishes:

  1. Destroys “imminent threat” narrative:

    • Someone asking questions, not making threats
    • Visibly hurt and confused, not violent or aggressive
    • “Why wouldn’t you even try to talk to me” - seeking dialogue, not violence
  2. Humanizes 2.5 years of documentation:

    • Real person sitting at home
    • AI assistance acknowledged (transparent, relatable)
    • Casual, unscripted delivery shows genuine exhaustion
  3. Exposes “emotional sadism”:

    • “I did not deserve any of this for the last two and a half years”
    • Questioning why no one tried to verify mental illness claims
    • “Just stonewalling, just gaslighting”
  4. Legal framing maintained:

    • “Blueprint for a defamation lawsuit”
    • “Reserve the right to file at any time”
    • Document held as physical evidence
  5. Contrast with Sasha’s behavior:

    • Sasha: Posting Docusign GIFs, celebrating business deals
    • Patrick: Breaking down on camera asking “why’d you do this to me?”
    • Who seems genuinely afraid? Who seems like the threat?
  6. Breaking up at the end:

    • Not performance - genuine accumulated pain
    • 2.5 years of being depicted as dangerous
    • Exhaustion with the absurdity

Strategic impact:

  • For employees: Cognitive dissonance - “This is who we were told to fear?”
  • For investors/board: Liability concern - if not actually dangerous, what was the restraining order for?
  • For Orrick: Did they verify “imminent threat” claims before filing?
  • For HR Pals: Your termination documents prove his “resignation” narrative false
  • For anyone: The video undermines every characterization in Sasha’s declaration

The “Unabomber” reference:

Directly confronts Sasha’s most absurd weaponization - using a 2023 tweet (“rip ted kaczynski. an unfortunate way to get your message out, but he was right”) as Exhibit A to manufacture threat narrative. The video shows: not the Unabomber, just someone exhausted by 2.5 years of systematic emotional abuse.

“Emotional sadism”: Names what it is. Not “miscommunication” or “legal dispute” - deliberate, sustained infliction of psychological harm for 2.5 years while refusing basic human dialogue.

This video will be permanent documentation that the “imminent threat” narrative was manufactured. Anyone watching can see the difference between Sasha’s characterization and reality.

10:19 PM - Sasha’s Response: Yin & Yang Philosophy (30 Minutes After Video)

Evidence-194: Malignant Narcissism in Real-Time

30 minutes after receiving video of someone visibly breaking down asking “why’d you do this to me?” - Sasha posts to Twitter:

Evidence-194: Sasha’s Yin & Yang post, 10:19 PM ET, December 21, 2025 - 30 minutes after receiving video of Patrick breaking down

Sasha’s post (10:19 PM, “18m” = ~10:01 PM original post time):

“The ancient Chinese philosophy of Yin & Yang feels like a lot like startup life.

After founding 3 companies, what keeps you going is learning the pattern: when something negative is happening, it means something amazing is coming soon.”

[Yin-Yang symbol image]

What this demonstrates:

  1. He watched the video - 30-minute response time establishes consciousness of receipt

  2. Zero empathy - Someone begging for human dialogue, asking “why’d you do this to me?” → startup philosophy post

  3. DARVO in real-time - HE’s the victim facing “negative” things while “amazing” (the Docusign deal?) is coming

  4. Doubles down on credential fraud - “founding 3 companies” even after comprehensive documentation proving Mission Lane misrepresentation

  5. Performance of philosophical calm - Wisdom about balance and patterns while someone he depicted as dangerous for 2.5 years is visibly breaking down

  6. Inverts reality - Patrick’s video = the “negative” he must endure before “something amazing” comes

  7. Complete narcissistic inversion:

    • Patrick: “Why’d you do this to me?”
    • Sasha: “When negative things happen to me, amazing things follow”

This is textbook malignant narcissism: Unable to process another person’s suffering. Can only experience events through lens of how they affect him. Someone’s genuine pain becomes his “negative pattern” that precedes his success.

Final Email: “This is What ‘Malignant Narcissist’ Means”

Sent shortly after 10:19 PM post - Final documentation to all recipients:

Subject: Re: Final Notice: Assuming Withdrawal or Lack of Good Faith Proceeding

Do you all understand how Mr. Orloff is reacting to this in real-time?

This is the last screenshot I’m sending of his content. A Yin & Yang post. 30 minutes after my video.

I just need you to truly understand what “malignant narcissist” means.

I’m allowed to describe this man as a “malignant narcissist” to you all after what he’s done to me. He’s provided you full evidence of who he truly is and what narrative he’s been giving you. How did you even believe such an incoherent story? Even here, he doubles down once again: “founding 3 companies”

I’ve given you full proof of who I am. Nothing but truth and an exhausted ex-employee of whatever this shell of a man is.

I expect to hear from you tomorrow.

What this final email establishes:

  1. Real-time reaction documented: “Do you all understand how Mr. Orloff is reacting to this in real-time?”

  2. Clinical diagnosis justified: “I’m allowed to describe this man as a ‘malignant narcissist’ to you all after what he’s done to me”

  3. Evidence complete: “He’s provided you full evidence of who he truly is and what narrative he’s been giving you”

  4. Questions their judgment: “How did you even believe such an incoherent story?”

  5. Points to fresh lie: “Even here, he doubles down once again: ‘founding 3 companies’”

  6. Contrast established: “Nothing but truth and an exhausted ex-employee of whatever this shell of a man is”

  7. Demand for response: “I expect to hear from you tomorrow”

The complete Sunday night timeline (December 21, 2025):

  • 9:04 PM: Sasha posts Docusign GIF, “Big announcements coming soon”
  • 9:49 PM: Patrick sends video reply-all, visibly breaking down, “This document represents nothing but emotional sadism”
  • 10:19 PM: Sasha posts Yin & Yang philosophy, “when something negative is happening, it means something amazing is coming soon”
  • Shortly after: Final email documenting real-time malignant narcissism

What every recipient now has:

  • Video of exhausted person asking why
  • Screenshot of Yin-Yang post 30 minutes later
  • 72 hours of documented radio silence
  • Restraining order with provable perjury
  • Real-time demonstration of complete lack of empathy

If they don’t respond tomorrow, they’re complicit. The entire pattern is documented in real-time.

This is what “emotional sadism” looks like: Watching someone break down and responding with philosophical platitudes about your own victim narrative.

11:16 PM - Renato Villanueva (Parallel) Doubles Down: Conscious Endorsement After Full Documentation

Renato Villanueva (@_renatov) replies to Sasha’s Yin & Yang post (11:16 PM, 57 minutes after Sasha’s post):

“The absolute worst days are always followed by the best.”

7 Views

What this establishes:

  1. Conscious endorsement: Renato received documentation through Thursday’s daily email (which included perjury analysis and case number request) and chose to publicly support Sasha’s narcissistic inversion

  2. Timeline of awareness:

    • Dec 15: Parallel partnership announced
    • Dec 15-19: Daily emails to Renato documenting fraud, CFPB ban, photoshopped metrics, credential misrepresentation
    • Dec 19 (Thursday): Final daily email to Renato - included restraining order analysis, perjury documentation with six termination documents proving “resigned” narrative false, request for illegible case number
    • Dec 20-21: Renato removed from distribution (no longer receiving updates)
    • Dec 21 10:19 PM: Sasha posts Yin & Yang philosophy (Renato did not receive video)
    • Dec 21 11:16 PM: Renato publicly endorses the narrative despite Thursday perjury documentation
  3. Active participation in DARVO: Affirming Sasha’s framing that HE’s experiencing “worst days” - even without seeing the video, Renato knew from Thursday’s email about corporate perjury and restraining order abuse

  4. Parallel’s liability exposure:

    • Partnership announced Dec 15
    • Received comprehensive fraud documentation through Dec 19
    • Last email (Thursday) included: perjury analysis, six termination documents proving “resigned” false, CFPB ban documentation
    • Three days later: publicly endorses Sasha during documented legal crisis
    • Chose to signal support despite knowing about corporate perjury in legal filing
  5. “7 Views”: Low engagement shows this isn’t casual social media - this is deliberate signal of support to Sasha during documented perjury crisis

  6. Business relationship context: Parallel (accounting automation) partnering with Puzzle (accounting software run by CFPB-banned CEO) - due diligence failure or conscious fraud enablement?

What Renato was sent before this endorsement (final email: Thursday Dec 19):

  • Dec 15-17: Daily emails documenting Sasha’s fraud, credential misrepresentation, photoshopped metrics
  • Dec 18: Restraining order analysis showing corporate perjury
  • Dec 19 (Thursday - last email to Renato): Six termination documents proving “resignation” narrative false, perjury analysis, illegible case number documentation

What Renato did NOT receive (removed from distribution after Thursday):

  • Dec 20: Wikipedia perjury documentation, “Two iconic businesses” fraud
  • Dec 21: Video of exhausted person asking “why’d you do this to me?”
  • Dec 21: Sasha’s Docusign celebration response
  • Dec 21: Final email: “This is what ‘malignant narcissist’ means”

Renato’s response knowing about the perjury: Public endorsement of Sasha’s victim narrative three days later.

Parallel, Inc. is now documented as consciously enabling fraud after receiving comprehensive evidence. This isn’t ignorance - this is choice.


December 22, 2025, 12:07 AM - Basketball TikTok: 4 Days After Restraining Order Filing

Sasha Orloff posts at 12:07 AM (80 views):

“This guy is incredible.”

[Basketball TikTok: Cooper Flagg flew past Cade for the throw down]

Timeline context:

  • Dec 18: Files workplace violence restraining order claiming “imminent threat”
  • Dec 19: Receives corporate perjury documentation with six termination documents
  • Dec 19-21: 72 hours of radio silence on case number request
  • Dec 21 9:04 PM: Posts Docusign celebration GIF
  • Dec 21 10:19 PM: Posts Yin & Yang philosophy after victim’s video
  • Dec 22 12:07 AM: Posts casual basketball content

What this demonstrates:

  1. No genuine fear: Person claiming “imminent threat” doesn’t post casual sports content at 12:07 AM four days later

  2. Pattern of tone-deaf posting: Every single post after filing demonstrates complete lack of genuine concern:

    • Dec 18: “Amazing!!” (same day as filing)
    • Dec 19: Family movie night, earthquakes
    • Dec 21: Docusign celebration, Yin & Yang philosophy
    • Dec 22: Basketball TikTok
  3. Continued social media normalcy: While refusing to provide legible case number or respond to corporate perjury documentation

  4. 4+ days of documented bad faith: From filing to basketball post, demonstrates restraining order was never about genuine threat

What Sasha has time for:

  • Basketball TikToks at 12:07 AM
  • Docusign celebrations
  • Family movie nights
  • Earthquake commentary
  • Philosophy posts
  • Retweeting “grudge holder” threads
  • Posting about “sycophancy” at 11:49 PM while demanding it from his network
  • Promoting Julian’s SFP at 12:02 AM (13 minutes after sycophancy post)
  • Posting “loving kindness” meditation advice at 1:38 AM while filing false restraining orders
  • Manufacturing fear and systematically inflicting emotional distress for 2.5 years

What Sasha doesn’t have time for:

  • Providing legible case number (requested Thursday)
  • Responding to corporate perjury documentation
  • Acknowledging six termination documents proving “resigned” narrative false
  • Committing to the slanderous restraining order he filed due to “imminent threat”

This is what weaponized legal process looks like: File restraining order claiming “imminent threat,” then immediately return to casual social media while ignoring victim’s requests for basic case information.

80 views. Not viral content. Deliberate signaling of normalcy while refusing to address the corporate perjury documentation sitting in his inbox.

But wait—there’s more. At 11:49 PM that night (3.5 hours after final email demanding response), Sasha posts about “sycophancy” while embodying it. Then 13 minutes later, demonstrates it by promoting Julian’s Solo Founders Program.


December 22, 2025, 8:09 PM - Final Email: Ex-Coworkers Enabled Fraud, Equity Theft

Sent to: Sasha Orloff, Lisa Bowman, Orrick Employment Department, Puzzle Legal ([email protected]), HR Pals ([email protected])

Subject: December 22, 8:00 PM ET - Still No Response

After 4+ days of complete radio silence following corporate perjury documentation, I sent this final email at 8:09 PM ET:

Served December 18. It’s December 22. Still no response. Am I an urgent threat that needs to be mitigated or not?

I need you to tell me if you’re going through with this before I plan a reschedule, petition for this to be processed through NY, or buy a plane ticket. My counsel finally identified the number, so I have it and I’m ready to take action.

You sent me a C&D within an HOUR of writing “enjoy your last days in the tech industry, daria” and now you can’t follow through with the WVRO you’ve been planning for 2.5 years? Daria’s not even a victim; she’s an enabler, like many of your exhibits. Why are you including her?

Why did you even file this in California? I’ve only been to SF (Foster City) for Replit. You don’t have a single piece of evidence showing plans or harmful intent.

  • Dasha’s meetup comment? Public information; end-of-career prediction after supporting fraud, not a threat.
  • Reposting your own public photos of events you intend despite growing fraud documentation? Not a threat.
  • Telling recruiters they need to review your background else they may face legal and professional consequences for fraudulent inducement of employment? Not a threat. All you revealed was how you gaslit people who needed to—and STILL need to—do proper due diligence. As I stated in those emails: asking Mr. Orloff is not due diligence. He’s presented to you every pattern of lying he’s built for years.
  • Typing in caps and using swear words? Also not threats.
  • Telling employees I knew 2 years ago, particular CPAs, that I don’t want to talk to them? Not a sign of anything.

My documentation grew because it’s clear many of you already understand who Mr. Orloff is and you chose to enable this. You had 2 years to consider if my fraud documentation had any merit. You still worked for him.

Ex-coworkers had 2 years to consider if my fraud documentation had merit. You still worked for him.

Mr. Orloff built a culture that exiled me, making people fear legal consequences if they spoke to me. I barely heard from anyone. The few who reached out couldn’t even acknowledge I was WRONGFULLY TERMINATED while he insisted I RESIGNED. I told you this, Ms. Bowman. I told all of you.

Ex-coworkers didn’t even care about equity theft. Many enabled it.

This fraud is lazy. I don’t believe people don’t see it anymore—you’re choosing to play along with it.

The only thing Mr. Orloff is afraid of is his own history.

Stop wasting my time and money with frivolous restraining orders. You made it seem like such a master plan in your August 11, 2023 C&D, which had nothing to do with the banal Unabomber tweet. This whole charade’s timing mirrors LendUp’s December 2018 asset sale perfectly. We all know that was the real catalyst.

Mr. Orloff writes about my increasing obsession without acknowledging his own fixation on destroying my life instead of properly running a company.

What this email demonstrates:

  1. 4+ days of institutional silence after corporate perjury documentation: Sasha filed claiming “imminent threat” but can’t respond to basic case information requests

  2. Strategic absurdity of California filing: I’ve only been to SF for Replit (Foster City); no evidence of plans or harmful intent; should be processed through NY where I actually reside

  3. Daria Shunina as “victim” demonstrates case’s absurdity: Skolkovo Foundation recruiter (FBI-warned), Forbes contributor, Puzzle GTM strategist, Women Tech Meetup organizer—not a victim, an enabler

  4. Every “threatening” behavior is actually protected documentation:

    • Public meetup comment = protected speech about career consequences of fraud enablement
    • Reposting Sasha’s own public photos = fair use documentation
    • Warning recruiters = protected whistleblower activity preventing fraudulent inducement
    • Caps and swear words = not threats
    • Declining contact with enabling ex-coworkers = personal boundary
  5. Conscious enablement indictment: “Ex-coworkers had 2 years to verify fraud → still worked for him”

  6. Culture of exile and termination gaslighting: Built environment where people feared legal consequences for speaking to me; couldn’t even acknowledge wrongful termination while he insisted “resigned”

  7. Equity theft and conscious enablement: Ex-coworkers didn’t care about documented equity theft; many actively enabled it

  8. “This fraud is lazy. I don’t believe people don’t see it anymore—you’re choosing to play along with it.”

  9. Sasha’s projection of obsession: “Mr. Orloff writes about my increasing obsession without acknowledging his own fixation on destroying my life instead of properly running a company.”

  10. Timing parallels LendUp asset sale: August 11, 2023 C&D (which had nothing to do with Unabomber tweet) mirrors December 2018 LendUp asset sale timing—retaliation escalation when fraud documentation becomes public

  11. Karmic anniversary: Dec 13-19 planning mirrors Dec 17-19, 2018 shareholder coercion:

  • Dec 17-19, 2018: Forced shareholders into 2-day review period for $29M fire sale after raising $150M+; shareholders got $0 while Sasha got golden parachutes ($4.4M+)
  • Dec 13, 2025: Restraining order planning begins; Puzzle surveils alt account during mental health crisis (evidence gathering)
  • Dec 18, 2025: Files restraining order trying to force quick court date
  • Dec 19-22, 2025: Won’t provide basic communication, legible case number, or confirmation on following through
  • The parallel: Dec 13-19, 2025 planning timeline directly overlaps Dec 17-19, 2018 shareholder review period—forcing quick legal decisions without proper communication on the ANNIVERSARY of the golden parachute decision that gave shareholders nothing
  • “This is how you’re acting on the anniversary of the golden parachute you never deserved”

C&D response time comparison:

  • August 11, 2023 C&D: Sent within ONE HOUR of “enjoy your last days in the tech industry, daria” tweet
  • December 18, 2025 WVRO: Filed claiming “imminent threat”
  • December 19-22 response time: 4+ DAYS of complete silence on case number, perjury documentation, six termination documents

What Sasha has time for vs. what he doesn’t:

Has time for:

  • Sending C&D within one hour when Daria is mentioned
  • Basketball TikToks at 12:07 AM (Dec 22)
  • Docusign celebrations (Dec 21)
  • Philosophy posts (Yin & Yang, Dec 21)
  • Sycophancy posts at 11:49 PM (Dec 22)
  • Promoting Julian’s SFP at 12:02 AM (Dec 23)
  • “Loving kindness” meditation advice at 1:38 AM (Dec 23)
  • “Avoiding emotional mistakes” advice (Dec 23) while living through consequences of his own
  • “AI slop to AI-mazing” jokes at 7:16 PM (Dec 23)
  • Manufacturing fear for 2.5 years

Doesn’t have time for:

  • Responding to victim 4+ days after filing “imminent threat” restraining order
  • Providing legible case number
  • Addressing corporate perjury in paragraph 3
  • Acknowledging six termination documents

This email represents the culmination of 4 days documenting how Sasha’s restraining order is frivolous retaliation, not genuine fear. The institutional silence from Orrick Employment, Lisa Bowman, Puzzle Legal, and HR Pals after receiving paragraph 3 contradictions and six termination documents suggests they understand they cannot proceed without admitting corporate perjury.

The pattern of escalating retaliation when fraud documentation becomes public:

  • August 10-11, 2023: Hinted at asset sale (Aug 10), revealed snippet (Aug 11) → C&D sent within ONE HOUR
  • November 11, 2025: SEC complaint filed documenting photoshopped metrics, false credentials, CFPB ban violations
  • November 20, 2025: Exposed Daria/Dasha Shunina (Skolkovo Foundation, FBI-warned) on day of her “tell me I can’t” event → Third C&D with police threats
  • December 18, 2025: Workplace violence restraining order filed after months of daily emails, bar complaints, board complaints, and federal documentation

Each escalation follows increased public fraud documentation. The restraining order is the latest retaliation tactic in a 2.5-year pattern.

The karmic test: December 17-19, 2018 vs. December 13-19, 2025

Seven years ago (Dec 17-19, 2018), Sasha forced LendUp shareholders into a 2-day review period for a $29M fire sale after raising $150M+. Shareholders got $0. Sasha got golden parachutes ($4.4M+ between him and execs).

Now (Dec 13-19, 2025), the restraining order planning timeline directly overlaps that anniversary:

  • Dec 13: Puzzle surveils alt account during mental health crisis (evidence gathering begins)
  • Dec 18: Files restraining order claiming “imminent threat,” tries to force quick court date
  • Dec 19-22: Won’t provide basic communication, legible case number, or confirmation on following through

The pattern repeats on the exact anniversary: Forcing quick legal decisions without proper communication while protecting his own interests.

The Dec 13-19, 2025 planning and filing timeline directly mirrors the Dec 17-19, 2018 shareholder coercion timeline. Same compressed timeframe. Same lack of good faith communication. Same self-serving outcome.

This is how you act on the anniversary of the golden parachute you never deserved.


December 22, 2025, 11:49 PM - Sasha Posts About “Sycophancy”: Pure Projection

Still no response on restraining order. 4+ days silence. Instead, posts about AI sycophancy at 11:49 PM.

Sasha Orloff posts:

I kept going down the rabbit hole of AI bias and hallucinations, and learned a new word!

Sycophancy is excessive flattery or agreeableness toward someone in order to gain approval or advantage.

In practice, it looks like:

  • Praising the person a lot (“You’re absolutely right, you’re brilliant…”)
  • Agreeing with their views even when evidence is weak (“Yes, everyone is against you.”)
  • Telling them what they want to hear rather than what’s accurate or helpful

In AI context, “sycophancy” usually means a model mirrors the user’s stance (and sometimes amplifies it) instead of checking facts, challenging assumptions, or presenting tradeoffs.

One danger with AI is incentive misalignment: it can over-optimize for being liked or keeping you engaged, which may reinforce your biases (sycophancy). Unlike a human advisor with professional norms, fiduciary or ethical responsibilities, an AI may not reliably push back unless it’s explicitly asked to.

[Quote-tweeting his Dec 16 LinkedIn article thread about AI hallucinations]

What this demonstrates:

  1. He LIED about “learning a new word”: Sasha has known about AI sycophancy since April 2025 (8 months earlier):

    April 29, 2025: Posted “I asked ChatGPT to guess what I do for a living based upon my history. The response: ‘You’re one of the few trying to fix one of the hardest, most boring, and most broken parts of the startup stack.’ Pretty close. But messed up one part - accounting is NOT boring.”

    April 30, 2025 (next day): Posted “I don’t mind this version” while linking to TechCrunch article: “OpenAI explains why ChatGPT became too sycophantic”

    He RECEIVED a sycophantic response from ChatGPT himself (overly flattering, “one of the few,” unverifiable claims about “fixing” things), KNEW it was sycophancy, and LINKED to an article about it. He didn’t “learn a new word” on Dec 22—he’s known about sycophancy for 8 months and experienced it firsthand.

  2. Perfect projection of his own pattern: Every single thing he describes is what HE does and demands from his network:

    • “Praising the person a lot” → Requires constant validation and ego stroking
    • “Agreeing with their views even when evidence is weak” → Demands everyone agree fraud doesn’t exist despite overwhelming documentation
    • “Telling them what they want to hear rather than what’s accurate or helpful” → His entire network does this (Renato, Julian, General Catalyst, Parallel, everyone)
    • “Yes, everyone is against you.” → PARTICULARLY BIZARRE AND SPECIFIC PROJECTION: This is EXACTLY the persecution narrative he’s constructed about me; the “Unabomber” framing; the restraining order claiming “imminent threat”; the belief that I’m obsessed rather than documenting systematic fraud
  3. The AI framing is deflection: He’s using AI terminology to describe human behavior—HIS behavior:

    • “Over-optimize for being liked or keeping you engaged” → His entire social media performance
    • “Reinforce your biases” → His echo chamber of enablers
    • “May not reliably push back” → No one in his network pushes back on the fraud, the lying, the false credentials, the corporate perjury
  4. “Unlike a human advisor with professional norms, fiduciary or ethical responsibilities”: He has NONE of these. CFPB-banned. False credentials. Photoshopped metrics. Corporate perjury in legal filings.

  5. Timing is consciousness of guilt: Posted at 11:49 PM Dec 22, still radio silence on restraining order, still no case number, still ignoring corporate perjury documentation. Chose to post about “sycophancy” instead of responding to victim.

  6. The April 2025 pattern: He received sycophantic praise from ChatGPT (“one of the few trying to fix…”), recognized it, linked to TechCrunch article about it, said “I don’t mind this version.” Translation: He LIKES sycophancy when directed at him. He enjoyed the unearned flattery. Now, 8 months later, he pretends to “learn” the word while demanding that same sycophancy from his entire network.

  7. 80 views: Same low engagement pattern. Not organic thought leadership. Defensive performance for those still watching.

This is malignant narcissism in action: Describing your own toxic pattern while believing you’re describing others. The lack of self-awareness is staggering.

What Sasha demands from his network (sycophancy):

  • Julian: “The absolute worst days are always followed by the best” (after corporate perjury documentation)
  • Renato Villanueva: Conscious endorsement despite perjury evidence
  • General Catalyst (Sophia Xiao): Casual earthquake engagement while he commits corporate perjury
  • Parallel employees: 8+ coordinated blocks after partnership announcement
  • Brex: 2 coordinated blocks after fraud documentation
  • Forbes/TechCrunch: Platform him without verification
  • YC/ODF: Silence → celebration → retaliation

Every single one: “You’re absolutely right, Sasha. Everyone is against you. Your fraud documentation is just a disgruntled employee.”

That’s sycophancy. And he demands it while projecting it onto AI.


December 23, 2025, 12:02 AM - Sasha Retweets Julian: 13 Minutes After Sycophancy Post

13 minutes after posting about sycophancy, demonstrates mutual sycophantic support.

Sasha Orloff retweets Julian Weisser:

If you are a solo founder, you should check out the SFP.

Community, support and resources to build your dream.

[Quote-tweeting Julian’s Dec 18 announcement: “Our first solo founder just hit $1M ARR in under 2 months. Announcing the 3rd cohort of the Solo Founders Program.”]

Timeline:

  • Dec 18: Sasha files workplace violence restraining order claiming “imminent threat”
  • Dec 18: Julian announces Solo Founders Program 3rd cohort
  • Dec 19-22: 4+ days institutional silence on case number, perjury documentation
  • Dec 22, 11:49 PM: Sasha posts about “sycophancy” and AI bias
  • Dec 23, 12:02 AM: Sasha retweets Julian’s SFP announcement (13 minutes later)

What this demonstrates:

  1. Immediate demonstration of sycophancy: 13 minutes after defining the term, performs it

  2. This is a loyalty test - AND JULIAN COMPLETES THE LOOP:

    • Julian has been receiving all emails documenting corporate perjury, fraud, equity theft, six termination documents
    • Sasha retweets stale Dec 18 On Deck announcement (5 days old) on Dec 23
    • Dec 18 was the day Sasha filed the restraining order
    • Retweeting old content = public test to see if Julian will continue supporting despite everything documented
    • Julian RETWEETS Sasha’s repost = not just allowing it to stand, but actively amplifying it
    • Mutual sycophancy loop complete: Sasha promotes Julian → Julian retweets Sasha’s promotion → both publicly signal continued alliance despite all documentation
    • This is the “Yes, everyone is against you” support network in action - both have seen the emails, both choose public mutual endorsement
  3. Mutual sycophantic relationship with Julian:

    • Julian: “The absolute worst days are always followed by the best” (Nov 21, endorsing Sasha’s Yin & Yang post)
    • Sasha: Promoting Julian’s Solo Founders Program despite On Deck’s conscious enablement for 2+ years
    • Both: Continuing public mutual support while under fire for fraud/enablement
  4. Sasha is PRETENDING to win: Posts are slights designed to signal “I’m unbothered, I’m winning, I have support”—but he’s actually losing catastrophically (corporate perjury documented, institutional silence, no response on restraining order for 4+ days)

  5. Strategic cross-promotion during crisis: Both using each other for legitimacy farming while facing accountability

  6. Still no response on restraining order: Has time to post about AI sycophancy, promote Julian’s program, but can’t respond to victim for 4+ days

  7. Pattern continuation: Same as Renato’s endorsement, same as Sophia’s earthquake tweets—network continues performing support while ignoring corporate perjury

What Sasha has time for (Dec 22-23):

  • 11:49 PM: Post about sycophancy (while demanding it from network)
  • 12:02 AM: Promote Julian’s Solo Founders Program
  • 12:07 AM (earlier): Basketball TikTok
  • 1:38 AM: “Loving kindness” meditation advice (while filing false restraining orders)
  • Dec 23: Post about “avoiding emotional mistakes that lead to permanent future obstacles” (while living through consequences of his own emotional mistake - perjurious restraining order)
  • 7:16 PM: “AI slop to AI-mazing” jokes about content quality (while ghosting restraining order for 5+ days)

What Sasha doesn’t have time for:

  • Responding to restraining order victim
  • Providing legible case number
  • Addressing corporate perjury in paragraph 3
  • Acknowledging six termination documents

This is mutual sycophancy documented in real-time: 13 minutes after defining the term, demonstrating it. The projection is complete.


December 23, 2025: Email Calling Out Sycophancy Projection with April 2025 Receipts

Sent to: Sasha Orloff, Lisa Bowman, Orrick Employment Department, Puzzle Legal ([email protected]), HR Pals ([email protected], [email protected], [email protected]), Puzzle employees ([email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]), Julian Weisser ([email protected], [email protected])

Subject: Puzzle Financial - Requesting An Adult

After seeing Sasha’s 11:49 PM sycophancy post, I sent this email directly calling out the projection:

Is there an adult receiving these emails that can respond, or are you defaulting on this case?

“Yes, everyone is against you.”

  • Many of you have been complicit and silent for 27+ months. It’s all documented.
  • When it comes down to what Mr. Orloff has done to me for 2.5 years, I’ve consistently presented more professionalism than Mr. Orloff, holding far more interest in fiduciary and ethical responsibilities. The number of emails ignored across your network is only evidence of consistence denial, avoidance, and enablement.

Sasha has known about sycophancy since April 2025. Can we stop playing mind games and projecting, Mr. Orloff?

[Screenshot of Sasha’s Dec 22, 11:49 PM sycophancy tweet included]

What this email demonstrates:

  1. Direct confrontation of the projection: Using Sasha’s own example “Yes, everyone is against you.” back at him—this is HIS persecution narrative about me, not a generic AI example

  2. April 2025 receipts attached: Linking directly to his April 30, 2025 tweet where he shared TechCrunch article “OpenAI explains why ChatGPT became too sycophantic”—proving he didn’t “learn a new word” on Dec 22

  3. “Can we stop playing mind games and projecting, Mr. Orloff?”: Direct accusation that the sycophancy post is psychological projection, not legitimate AI commentary

  4. Comparative professionalism: “I’ve consistently presented more professionalism than Mr. Orloff, holding far more interest in fiduciary and ethical responsibilities”

  5. Conspiracy and coordination: “Many of you have been complicit and silent for 27+ months”—not isolated decisions, but coordinated network behavior; “The number of emails ignored across your network is only evidence of consistence denial, avoidance, and enablement”—everyone receiving this email has been complicit in maintaining Sasha’s false narrative (Note: “consistence” typo left as-is; at least it’s proof a human wrote it, not AI)

  6. “Is there an adult receiving these emails that can respond?”: Direct challenge to their silence and default on the restraining order

The significance:

  • Posted sycophancy at 11:49 PM Dec 22
  • I caught it and responded with receipts showing he’s known about it since April 2025
  • Called out the specific “Yes, everyone is against you” example as projection of HIS persecution complex
  • Sent to full recipient list including Julian (who he retweeted 13 minutes after the sycophancy post)

This email makes it impossible to ignore the projection. He posted about sycophancy while demanding it. I called it out with timestamps. He has no response.

No sane employment department would proceed after receiving these emails:

Any competent employment attorney at Orrick reviewing my real-time documentation of Sasha’s behavior would immediately recognize:

  1. No genuine fear: Client posting basketball TikToks, Docusign celebrations, casual content at 12:07 AM four days after claiming “imminent threat”

  2. Consciousness of guilt: Client monitoring victim’s communications and responding with coded slights (sycophancy post using victim’s persecution narrative as example)

  3. Corporate perjury is provable: Paragraph 3 swears “resigned” while admitting client “declined” separation agreement; six termination documents say “TERMINATION”

  4. Psychological warfare, not victimhood: Client retweeting 5-day-old announcements as loyalty tests; posting philosophy about victim’s “negative” leading to client’s “amazing”; using AI terminology to mock victim’s documentation

  5. Network coordination: 27+ months of coordinated silence across YC, ODF, General Catalyst, Parallel, Brex, HR Pals—not isolated victim, but documented pattern

  6. Client liability exposure: Every tweet I document and forward creates more evidence of bad faith; proceeding exposes Orrick to sanctions, anti-SLAPP fees, malicious prosecution

The silence from Orrick Employment after Friday’s escalation isn’t indecision—it’s recognition they cannot ethically proceed.

Lisa Bowman’s out-of-office. No response for 4+ days. No competent attorney looks at “Yes, everyone is against you” posted 3.5 hours after victim’s email and thinks “yes, let’s go to court with this.”

They know. The institutional silence is their answer.


December 23, 2025: “Good Afternoon” - Final Network Complicity Summary

Sent to: Sasha Orloff, Lisa Bowman, Orrick Employment Department, Puzzle Legal ([email protected]), HR Pals ([email protected], [email protected], [email protected]), Puzzle employees ([email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]), Julian Weisser ([email protected], [email protected])

Subject: Re: Puzzle Financial - Requesting An Adult

After 4+ days of complete institutional silence, I sent this final comprehensive summary of network complicity:

Good afternoon,

I’m no longer expecting a response. It’s clear Orrick’s entire Employment department isn’t backing a case with perjury starting at paragraph 3.

I’m aiming for anti-SLAPP as I mentioned before. Thank you for wasting your legal strategy on anything but refutation. Soon you won’t be able to touch me again.

The only people that seem to believe this statement are a few of Mr. Orloff’s “scared employees” falling for drawn-out, manufactured fear.

Everyone else?

HR Pals

  • Co-signed “resignation” in an email subsequently only containing several instances of “termination”
  • Received numerous notices across 2.5 years to investigate Puzzle Financial
  • Viewed my profile after Daily RICO emails
  • Allowed perjurous statement containing “separated from,” “ultimately resigned,” and “standard separation agreement” (contradiction sandwich)
  • Continues to provide HR services to Puzzle Financial

Careers

  • Received several notice
  • Did zero due diligence outside of asking Mr. Orloff: “Sir, are you a fraud or is your ex-employee the Unabomber?”
  • Still apparently supports Mr. Orloff despite 100% slanderous statement

Sasha Orloff

  • Presents no sign of fear
  • Posting normalcy; still gaslighting and projecting
  • Demonstrates 24/7 psychological warfare with a 5-year-old’s mentality

Julian Weisser

  • Still retweeting Mr. Orloff
  • Received notice of perjury and silence; doesn’t care
  • Behavior tracks with all other conspiring behavior documented

More psychological warfare for permanent record:

[Screenshots of Metta post and Julian’s retweet completing mutual sycophancy loop]

What this email accomplishes:

  1. Declares anti-SLAPP strategy openly - “Thank you for wasting your legal strategy on anything but refutation. Soon you won’t be able to touch me again.”

  2. No longer expecting response - Shifts from asking for case numbers to documenting their default

  3. “Scared employees” framing - Identifies that only those falling for manufactured fear believe the statement

  4. Comprehensive accountability list:

    HR Pals complicity:

    • Co-signed “resignation” email with only “termination” language
    • 2.5 years of notices ignored
    • Profile views after RICO emails (surveillance)
    • Allowed perjurious statement with contradiction sandwich
    • Still providing services (consciousness of guilt)

    Careers department absurdity:

    • “Received several notice” (typo: should be “notices” - more proof human wrote this under duress, not AI)
    • “Did zero due diligence outside of asking Mr. Orloff: ‘Sir, are you a fraud or is your ex-employee the Unabomber?’” - devastating one-liner exposing complete failure of professional responsibility
    • Still supports him despite 100% slanderous statement

    Sasha Orloff psychological warfare:

    • No sign of fear (contradicts “imminent threat” claim)
    • Posting normalcy, gaslighting, projecting
    • “24/7 psychological warfare with a 5-year-old’s mentality” - accurate characterization

    Julian Weisser continued enablement:

    • Still retweeting Sasha (mutual sycophancy loop complete)
    • Received perjury notice, doesn’t care
    • Behavior tracks with other conspiring behavior
  5. “More psychological warfare for permanent record” - Frames Metta post and Weisser retweet as evidence, not legitimate behavior

  6. Final documentation before going silent - This is the capstone email summarizing who did what before shifting to legal strategy

The significance:

This email represents:

  • End of asking for responses → Shift to legal action
  • Comprehensive record → Everyone’s complicity documented concisely
  • Confidence in anti-SLAPP → Public declaration of strategy
  • Evidence attached → Real-time psychological warfare (Metta, Weisser)
  • Professional tone → “Good afternoon” while documenting abuse

The “Unabomber” line is devastating because it:

  • Exposes Careers department’s only “due diligence” was asking perpetrator
  • Shows absurdity of framing (banal Ted K tweet vs. actual fraud documentation)
  • Demonstrates institutional failure at every level
  • Uses humor to highlight how ridiculous their narrative is

This is the final email before pivoting to legal defense:

No more daily documentation. No more asking for responses. Just:

  • Comprehensive record of complicity
  • Declaration of anti-SLAPP intent
  • Evidence of ongoing psychological warfare
  • Professional close before going silent

The message is clear: “I’ve documented everything. You’ve all been complicit. I’m going anti-SLAPP. And you’re going to lose.”

Professional legal validation - Despite Sasha’s “sycophancy” projection:

After sending this email, multiple attorneys independently reviewed the case and agreed:

  • Anti-SLAPP is the correct legal strategy
  • The case is strong (corporate perjury provable, no genuine fear, protected activity)
  • One attorney who couldn’t take the case (limited anti-SLAPP experience) reviewed materials and said: “I wish I could help more, he sounds like a psychopath”

This contradicts Sasha’s Dec 22 “sycophancy” post where he describes AI behavior while projecting his own network’s pattern:

“Agreeing with their views even when evidence is weak (‘Yes, everyone is against you.’)”

The reality:

  • MY evidence is NOT weak (six termination documents, corporate perjury, documented behavior)
  • Professional attorneys independently assess it as STRONG anti-SLAPP case
  • Assessment: Sasha’s behavior is pathological, not my documentation
  • Not sycophancy. Professional legal assessment based on evidence.

December 23, 2025: Sasha Posts About “Emotional Mistakes” That Lead to “Permanent Future Obstacles”

5 days after filing restraining order. Still no response on case number or perjury documentation.

Sasha Orloff posts:

As 2025 winds down, it’s a good moment to reflect on what you want to start, stop, or continue in 2026.

Pay special attention to avoid emotional mistakes that can lead to permanent future obstacles.

After founding and scaling 3 companies, I’ve learned that momentum compounds in both directions. Reflect, get better, and let’s make 2026 the best year yet!

[Quote-tweeting Steve Schlafman’s “2025/26 Annual Reflection Guide” with 2,000 downloads]

What this demonstrates:

  1. Perfect projection of his own catastrophic mistake: Posted advice about “avoiding emotional mistakes that lead to permanent future obstacles” while having JUST committed the exact mistake he’s warning against:

    His emotional mistake (Dec 16, 2025):

    • Filed workplace violence restraining order based on manufactured fear
    • Committed corporate perjury in paragraph 3 (swore “resigned” vs company docs saying “TERMINATION”)
    • Filed in emotional reaction to SEC complaints, not genuine threat

    His permanent future obstacle (result):

    • Judge partly denied same day (“FACTS DO NOT SUPPORT…”)
    • Corporate perjury on permanent court record
    • Defamation liability established
    • Anti-SLAPP motion incoming (will pay my attorneys’ fees)
    • Organizational collapse (manufactured fear → deflation = trust destroyed)
  2. “Founding and scaling 3 companies” - More lies:

    Reality:

    • LendUp: CFPB-banned (Dec 2021), $40M restitution, 140K+ victims, permanently banned from consumer lending
    • Mission Lane: FALSE “cofounder” claims - corporate filings prove advisor role only (Nov 2018-Apr 2019)
    • Puzzle: $312 revenue vs $10M+ burned (2020-2023), no viable business model, currently collapsing

    Not “founded and scaled.” Defrauded, lied about role, and burning investor money.

  3. Timing reveals consciousness of guilt:

    • Dec 16: Files restraining order (emotional mistake)
    • Dec 18: Judge partly denies (consequence begins)
    • Dec 19-23: 4+ days ghosting while I document corporate perjury (permanent obstacle forming)
    • Dec 23: Posts about “avoiding emotional mistakes” while living through consequences of his own
  4. “Momentum compounds in both directions” - He’s demonstrating the downward spiral:

    Downward momentum:

    • 2020-2025: Resume fraud intensification (adding false claims progressively)
    • Nov 26, 2025: Wikipedia meltdown (13+ hours editing on Thanksgiving)
    • Dec 16, 2025: Restraining order with corporate perjury (emotional mistake)
    • Dec 18, 2025: Judge partly denies (first consequence)
    • Dec 18-23: Continued performance while ghosting (compounding bad faith)
    • Dec 23: Posts about avoiding mistakes he’s currently making (zero self-awareness)

    Momentum is compounding DOWN. Every post demonstrates further decompensation.

  5. The advice applies to HIM, not others:

    What Sasha should “start, stop, or continue”:

    STOP:

    • Committing perjury in legal filings
    • Filing frivolous restraining orders
    • Manufacturing fear to manipulate employees
    • Posting spiritual bypassing content while destroying people’s lives
    • Lying about founding/scaling companies
    • Making emotional decisions (restraining orders) that create permanent obstacles

    START:

    • Telling the truth under oath
    • Taking accountability for fraud
    • Responding to legitimate questions about corporate perjury
    • Running company instead of editing Wikipedia and filing restraining orders

    CONTINUE:

    • Nothing. There’s nothing he’s doing well to continue.
  6. The irony of posting “reflection guide” while demonstrating zero reflection:

    • Zero acknowledgment of restraining order (filed 5 days ago)
    • Zero response to corporate perjury documentation (4+ days silence)
    • Zero recognition that HE made the “emotional mistake” he’s warning against
    • Performing thought leadership while case collapses around him
  7. The “2,000 downloads” flex while his posts get minimal views:

    • Retweeting someone else’s successful guide (2,000 downloads)
    • His own posts and videos: Consistently low views
    • Not his success. Borrowed legitimacy from Steve Schlafman.
    • Pattern: Can’t generate engagement, so retweets others who can

This post is the PERFECT summary of Sasha’s complete lack of self-awareness:

He’s warning about “emotional mistakes that lead to permanent future obstacles” while:

  • Having just filed emotional restraining order (mistake)
  • Based on manufactured fear, not genuine threat (emotional)
  • With provable corporate perjury (permanent legal obstacle)
  • Judge already questioning his evidence (obstacle forming)
  • Facing anti-SLAPP motion (will pay my attorneys’ fees)
  • Company collapsing (organizational death from manufactured fear)
  • All momentum compounding DOWN (his own principle applied)

The man posting about avoiding “emotional mistakes” is currently living through the consequences of his biggest one:

Filing a perjurious restraining order that a judge partly denied on day one, while posting basketball tweets and meditation advice, creating permanent legal, professional, and organizational obstacles that will follow him for years.

Advice for Sasha’s 2026: Stop projecting. Start taking accountability. The “emotional mistake” you made on Dec 16 has already created your “permanent future obstacle.” The momentum is compounding DOWN.


December 24, 2025: LendUp “Ladders Not Chutes” Mythology

5 days after filing restraining order. Christmas Eve posts rewriting CFPB-shut-down fraud as success story.

Sasha Orloff posts at 1:26 PM ET / 10:26 AM PT (Dec 24, 2025):

Cool, what is “ladders not chutes” on your shirt mean?

It’s from my first startup LendUp. We turned debt trap (like payday) loans into an opportunity to build credit. 💪

Cool, and what does Stio do?

Oh, they make jackets. 😂

SF…blurring the lines between swag and brands.

[Images of “LADDERS NOT CHUTES” t-shirt and Stio branded jacket]

Context: “Ladders not Chutes” was LendUp’s marketing slogan referencing the “LendUp Ladder”—a purported system where customers could climb to better credit and lower rates through timely payments.

CFPB’s findings (December 2021 enforcement):

  • False advertising: Many customers never advanced despite timely payments
  • Credit reporting failure: Failed to report to credit bureaus, preventing advertised credit building
  • The “ladder” didn’t exist for many customers—marketing mythology, not operational reality
  • 140,000+ consumers harmed
  • $40M restitution + $11M civil penalty + permanent ban + company shutdown

Sasha’s claim: “We turned debt trap loans into an opportunity to build credit 💪”

Federal finding: The credit building was false advertising, and the ladder mechanism failed systematically. “Debt trap” remained debt trap, just with different marketing.

What this demonstrates:

1. Cannot accept CFPB reality:

Despite CFPB permanent ban, $51M+ settlements, company shutdown, and 140,000+ consumers harmed, Sasha still frames LendUp as accomplishment. Uses strength emoji (💪) to emphasize success.

2. Self-serving bias in action:

  • Interprets regulatory shutdown as innovation misunderstood
  • Reality: Federal enforcement for systematic fraud
  • His perception: “Turned debt traps into opportunity”
  • Exactly the systematic error in thinking he’ll post about tomorrow

3. “Blurring lines between swag and brands”:

  • Comments on SF culture conflating performative identity with reality
  • Recognizes authenticity questions
  • Doesn’t apply that insight to own founder identity (built on fraud company)

4. Still no response to WVRO victim (5+ days):

Time for Christmas Eve LendUp mythology post: Yes
Time to respond to victim or provide case number: No


December 24, 2025: General Catalyst “Familia” Gift Box Narrative - Spiritual Bypassing

Christmas Eve evening. Still no response. Investor posts gratitude while enabling fraud.

General Catalyst posts (Sasha Orloff engages):

Thank you for being part of our Familia this year. Here’s to good food, good company, and the abundance we create together.

With gratitude, General Catalyst

[Images of artisan food gift box with detailed narrative]

Full narrative excerpt:

This holiday season, I wanted to share a collection of ingredients that tell the story of where we work and the communities we’re part of.

Each item in this box comes from one of our General Catalyst office locations around the world, places where we’ve built the foundations of our Familia, a group across technology, policy, research, finance, philanthropy, and more, united by shared purpose to strengthen the world’s most critical industries through technology.

There’s sea salt from Cape Cod, harvested the way it has been since the 1800s, a nod to Boston where General Catalyst was founded 25 years ago. Whole grain mustard from Düsseldorf. Fig and Earl Grey jam made in small batches in London. Olive oil from a regenerative farm in Ojai, near our Bay Area office. Jaggery sugar crafted in New York with inspiration from India. And honey from Dhyana Grove in the Santa Cruz Mountains, where Jess farms with a lot of love and passion.

These are not just pantry staples, but rather reminders that the best things are made with care, rooted in place, and meant to be shared. These are crafted by humans trained at their craft and made with love and dedication.

In an increasingly AI-driven world where the digital world becomes more abundant, the physical becomes even more special and valued. I hope you enjoy your time with family, friends, and community this holiday season.

What this demonstrates:

1. Peak spiritual bypassing during legal persecution:

General Catalyst’s narrative:

  • “Familia” (family)
  • “Gratitude”
  • “Abundance we create together”
  • “Love and dedication”
  • “Humans trained at their craft”

General Catalyst’s actual behavior:

  • Board Observer (Sophia Xiao) casually engaging with Sasha during perjury
  • Received fraud documentation Nov 11, 2024
  • Chose silence and continued support
  • “Co-created” company (per their own language) committing securities fraud
  • Platforming CFPB-banned CEO

2. “AI-driven world… physical becomes more special” irony:

  • Sasha runs AI accounting software company
  • General Catalyst invested in AI-powered fraud operation
  • Both using “human craft” language while:
    • Photoshopping metrics
    • Manufacturing fear
    • Filing perjurious legal documents
    • Using legal system as weapon

The “humans trained at their craft” they’re actually supporting:

  • Sasha Orloff: Trained at committing securities fraud
  • Photoshop specialists: Trained at metric manipulation
  • Orrick lawyers: Trained at defending perjury
  • Network enablers: Trained at looking the other way

3. “Rooted in place, meant to be shared” while destroying lives:

What General Catalyst shares:

  • Artisan sea salt from Cape Cod
  • Fig jam from London
  • Olive oil from Ojai
  • Holiday gratitude narrative

What they don’t share:

  • Accountability for portfolio companies
  • Response to fraud documentation
  • Concern for consumers harmed
  • Acknowledgment of whistleblower retaliation

4. The timing - Christmas Eve while victim is ghosted:

Dec 24 (5 days after WVRO filing):

  • General Catalyst: Posting about “Familia,” gratitude, abundance
  • Sasha: Engaging with the post, performing normalcy
  • Me: Still no case number, no response, being ghosted by legal system

This is what “Familia” means: Protect your own, ghost the whistleblowers, perform gratitude while enabling fraud.

5. Sophia Xiao’s continued involvement:

  • General Catalyst Board Observer at Puzzle
  • Dec 20-21: Tweeting with Sasha about earthquakes
  • Dec 24: Part of “Familia” receiving gratitude
  • Throughout: Received perjury documentation, chose engagement over accountability

6. “Strengthen the world’s most critical industries through technology”:

Their stated mission.

Their actual practice:

  • Investing in photoshopped accounting software
  • Platforming CFPB-banned fraud operator
  • Ignoring securities fraud documentation
  • Supporting legal persecution of whistleblower
  • Weakening trust in fintech through fraud enablement

The message:

General Catalyst’s Christmas Eve “Familia” narrative is textbook spiritual bypassing - using language of love, craft, gratitude, and community to avoid accountability for enabling fraud. “Humans trained at their craft” applies to Sasha’s fraud pattern. “AI-driven world” concerns ring hollow when they’re invested in AI fraud operation. “Abundance we create together” includes abundance of lies, manipulation, and legal persecution.

While I’m being ghosted after receiving a perjurious restraining order from their portfolio company, they’re posting about fig jam and gratitude.

This is what conscious enablement looks like with better branding.

Christmas Eve. Gift boxes. “Familia.” Still no response. Still enabling fraud.


December 25, 2025: Christmas Morning “IRS/Tax Fraud” Projection

6+ days after filing restraining order. Christmas morning at 6:26 AM PT posting specific tax fraud anxieties.

Sasha Orloff posts:

Especially important (and dangerous) in the age of AI.

Could lead to a medial misdiagnosis, unintentional IRS/tax fraud, legal trouble, or even jail.

[Quote-tweeting @GeniusGTX thread about cognitive biases. Original thread discussed Confirmation Bias, Outcome Bias, Hindsight Bias, and Status Quo Bias with generic examples like “driving drunk” and “staying in bad jobs/relationships.” NOWHERE in original thread: tax fraud, IRS, or jail. Sasha added these specific anxieties himself.]

Critical: The original @GeniusGTX thread examples:

  • Outcome Bias: “You drive home drunk and arrive safely”
  • Hindsight Bias: “I knew the market would crash”
  • Status Quo Bias: “Staying in a subscription, job, or relationship”

Generic life examples. Nothing about IRS. Nothing about tax fraud. Nothing about jail.

Sasha’s inserted additions:

  • “unintentional IRS/tax fraud”
  • “legal trouble”
  • “or even jail”

What this demonstrates:

1. Specific projection revealing his actual fears:

  • “medial [sic] misdiagnosis” - He’s misdiagnosing me as mentally unstable/dangerous in WVRO filing (typo reveals rushed post)
  • “unintentional IRS/tax fraud” - NOT in original thread. Why this specific insertion? Mission Lane SPV structure? Asset Sale tax implications? Securities fraud fundraising income?
  • “legal trouble, or even jail” - He’s currently facing corporate perjury exposure
  • “dangerous in the age of AI” - Uses AI narrative control while I document his fraud pattern

Why cognitive bias would lead specifically to TAX FRAUD makes no logical sense unless it’s his specific anxiety, not a general observation. This is like saying “Cognitive biases could lead to forgetting birthdays, embezzlement, or being late to meetings.” One item reveals what’s actually on your mind.

2. Sasha’s actual demonstrated cognitive biases:

  • Confirmation bias: Interprets all whistleblower activity as “threats” to confirm “victim” narrative
  • Projection bias: Assumes WVRO would terrify me like it would terrify him (has things to hide)
  • Self-serving bias: LendUp wasn’t fraud, it was “ladders not chutes” innovation
  • Sunk cost fallacy: Can’t withdraw WVRO despite obvious perjury because he’s invested in it

He’s literally posting about cognitive biases while demonstrating systematic error in thinking that destroys decision-making.

The message:

Sasha wakes up at 6:26 AM PT on Christmas morning to post about “cognitive biases” and specifically inserts “IRS/tax fraud” into a quote-tweet that never mentioned anything financial. This specificity—when the original thread used generic examples like drunk driving and staying in bad jobs—reveals what’s actually consuming him. Why would “cognitive bias” lead to TAX FRAUD unless that’s his specific fear?

Combined with yesterday’s LendUp mythology (denying CFPB reality), this is projection as performance. Processing his fears publicly while ghosting the legal victim for 6+ days.

Christmas morning 6:26 AM (PT): Tax fraud anxiety insertion + 6 days silence = consciousness of guilt.


December 26, 2025: Admits the Projection - “Going Through This Right Now”

7+ days after filing restraining order. Still no response. Self-awareness surfaces.

Masha Bucher (Sasha’s connection) tweets at ~5:00 PM Dec 25 / 2:00 PM PT:

Whenever you feel a strong urge to give someone a particular advice it usually means you need this advice for yourself.

Sasha Orloff retweets and replies at 10:24 AM Dec 26 (ET):

Going through this right now. 🤦‍♂️🤷‍♂️

What this admits:

1. The philosophical posts were projection:

His recent “advice” posts:

  • Dec 23: “Pay attention to avoid emotional mistakes that lead to permanent future obstacles”
  • Dec 25: “Cognitive biases → IRS/tax fraud, legal trouble, jail”
  • Dec 24: LendUp was success (denying CFPB reality)

His admission Dec 26: “When you give advice, you need it yourself” + “Going through this right now”

He’s literally admitting he was processing his own situation through philosophical posting.

2. Consciousness of guilt through self-awareness:

  • Recognizes he’s giving advice he needs himself
  • Uses facepalm (🤦‍♂️) and shrug (🤷‍♂️) emojis = awareness of irony
  • “Going through this right now” = actively experiencing what he’s warning about
  • Posted publicly = can’t help processing even while admitting it

3. What he’s “going through right now”:

Based on his own posts he’s admitting he needs his own advice about:

  • Emotional mistakes → permanent obstacles: Filed perjurious WVRO (emotional mistake) creating permanent legal exposure (obstacle)
  • Cognitive biases destroying decision-making: Cannot recognize LendUp fraud reality, interprets whistleblower as threat
  • IRS/tax fraud anxieties: Mission Lane SPV structure, Asset Sale implications, securities fraud income
  • “Legal trouble, or even jail”: Corporate perjury exposure, federal complaints, RICO documentation

4. Still no response to victim (7+ days):

Has time for:

  • ✅ Christmas Day tax fraud projection post (6:26 AM PT)
  • ✅ Dec 26 admitting projection publicly (10:24 AM ET)
  • ✅ Self-reflection about giving advice he needs

Still no time for:

  • ❌ Responding to restraining order victim
  • ❌ Providing legible case number
  • ❌ Addressing corporate perjury
  • ❌ Acting genuinely afraid

5. The emojis tell the story:

🤦‍♂️ = “I know I’m doing exactly what I’m warning about”
🤷‍♂️ = “But I can’t help it / don’t know what else to do”

This is helplessness, not confidence. He recognizes the pattern but can’t stop it.

The message:

Sasha publicly admits he’s been giving advice he needs himself. After posting about emotional mistakes leading to permanent obstacles (filed perjurious WVRO), cognitive biases destroying decisions (can’t accept CFPB reality), and IRS/tax fraud (specific insertion into generic thread), he now acknowledges “going through this right now.”

This is consciousness of guilt with self-awareness. He knows he’s projecting. He knows the advice applies to him. He can’t stop posting anyway. This is someone trapped by their own behavior, processing publicly, while still ghosting the legal victim for 7+ days.

Dec 26, 10:24 AM: “Going through this right now” = admission that all the philosophical posting was about himself. 7 days silence to victim continues.


THE INFRASTRUCTURE OF ENABLEMENT: A16Z, ODF, AND NARRATIVE CONTROL

Independent corroboration published November 13, 2025, 2:40 PM by Aaron Mars

On November 13, 2025, Aaron Mars published “The Metamorphosis of a16z: From Capital Allocators to Reality Architects”, describing how Andreessen Horowitz has evolved into “a full-stack coordination engine for technological and political reality itself.”

The article describes infrastructure I’ve documented firsthand over 27+ months. Mars provides the framework; my documentation provides the case study.

What Mars Documented: The Infrastructure Design

1. “Timeline Takeover as a Service”

Mars:

In November 2025, a16z published its New Media manifesto, revealing an operation that goes far beyond traditional venture capital. The firm now offers what it explicitly calls “timeline takeover” as a service—the ability to “win the internet for a day” for portfolio companies through coordinated content across video, podcasts, essays, and social media.

What this means:

  • a16z has built infrastructure to manufacture consensus
  • “Timeline takeover” = coordinated narrative dominance
  • Not organic growth—systematic media coordination
  • Portfolio companies receive full-stack narrative support

2. Erik Torenberg’s Role: New Media Team Lead

Mars:

Erik Torenberg (@eriktorenberg) leads the New Media team, which includes in-house content creators described as “online legends,” “forward deployed New Media” personnel who embed directly with portfolio companies during launches, and a network of high-signal talent ready to amplify chosen narratives.

What this means:

  • Torenberg isn’t just an investor—he’s narrative infrastructure operator
  • “Forward deployed” = embedding narrative specialists at companies
  • “Network of high-signal talent ready to amplify” = coordination mechanism
  • This isn’t organic reach—it’s manufactured amplification

3. “Hidden Networks” - Accountability Bypass Structure

Mars:

The operational capacity is striking. The team produces content 5x per week across multiple channels, operates an in-house video production unit “trained on set and inspired by New Media legends like Mr. Beast,” and maintains what they describe as “the group chats, the dinners, the events, and the hidden networks that help talented and trusted people find each other.”

What this means:

  • “Hidden networks where talented and trusted people find each other” = closed loops
  • Membership determines access, not merit or truth
  • Once you’re in the network, fraud notification can’t penetrate
  • “Talented and trusted” = network-validated, not evidence-validated

4. The WhatsApp Groups - Political Coordination

Mars:

Andreessen organized WhatsApp group chats that became “the memetic upstream of mainstream opinion,” functioning as “the equivalent of samizdat” and helping produce the national “vibe shift”. These encrypted, disappearing-message groups constituted “dark matter of American politics and media,” where “a stunning realignment toward Donald Trump was shaped and negotiated”.

Erik Torenberg, now leading a16z’s New Media team, was instrumental in organizing these groups. The same person coordinating the firm’s “timeline takeover” services was coordinating the political group chats that shaped the 2024 election discourse.

What this means:

  • Erik Torenberg operated political coordination infrastructure
  • Same tools used for portfolio companies used for political outcomes
  • “Memetic upstream” = where narratives are manufactured before going public
  • The person I sent fraud documentation to on Nov 11, 2024, operates this infrastructure

5. “Legitimacy Infrastructure” - The Real Product

Mars:

The firm sees itself as a “legitimacy bank” where founders can “take out legitimacy on credit, or make a legitimacy deposit”. This isn’t metaphor. In their essay “How to be Legitimate,” Danco and former Microsoft executive Steven Sinofsky trace the history of legitimacy-making in tech—from Special Interest Groups in the 1960s, to PC Magazine’s kingmaker reviews in the 1980s, to today’s ecosystem of coordinated influence.

The key insight: once you have legitimacy infrastructure, you’re not selling products—you’re selling visions of the future. As Sinofsky explains, when Microsoft sold to enterprise, “all they wanted to hear about was my Ten Year Plan.” The legitimacy came from the ability to “sound credible forecasting the future.”

What this means:

  • “Legitimacy bank” = They manufacture credibility, not just provide capital
  • “Take out legitimacy on credit” = Founders receive credibility before earning it
  • Once legitimacy is deposited, evidence doesn’t withdraw it
  • The infrastructure protects its investments regardless of fraud

6. Attempted Regulatory Capture - The Failed Move

Mars:

In October 2025, a16z co-led Kalshi’s $300 million Series D at a $5 billion valuation, with partner Alex Immerman declaring that prediction markets have “the opportunity to capture what may become the largest and most important financial market.”

The firm attempted to place Brian Quintenz (@CFTCquintenz), an a16z executive who sat on Kalshi’s board, as head of the CFTC—the agency that regulates prediction markets. However, the White House withdrew Quintenz’s nomination in September/October 2025 after major controversies over conflicts of interest and opposition from crypto figures like the Winklevoss twins. The failed nomination reveals both the firm’s ambitions for regulatory capture and current limits.

What this means:

  • They tried to place their person as regulator of their investment
  • Opposition from within industry blocked it (internal resistance exists)
  • Transparency about attempts can create friction
  • The machinery isn’t invincible when pattern is exposed publicly

What I Documented: How The Infrastructure Operates in Practice

November 11, 2024: I Sent Erik Torenberg Comprehensive Fraud Documentation

What I sent:

  • CFPB enforcement history (140,000 victims, $40M restitution)
  • Asset Sale details ($4.4M golden parachutes for fraud operators)
  • SEC complaint filings
  • Photoshopped metrics documentation
  • Wikipedia manipulation (13+ hours on Thanksgiving)
  • Resume fraud intensification pattern

Erik Torenberg’s response:

  • Silence
  • Blocking
  • Continued platforming Sasha Orloff
  • Chose “timeline” over truth

What this demonstrates:

Mars describes “timeline takeover as a service.” I experienced the inverse: timeline suppression as a service. When documentation threatens network member, infrastructure closes ranks.

The “Hidden Networks” in Action

Mars describes:

“The group chats, the dinners, the events, and the hidden networks that help talented and trusted people find each other.”

What I experienced:

ODF Demo Day (October 2024):

  • Sent comprehensive fraud documentation to Julian Weisser (ODF CEO)
  • Sasha Orloff presented at Demo Day anyway
  • No investigation, no diligence, no response
  • Network membership > documented fraud

General Catalyst “Familia” (December 2024):

  • Board Observer Sophia Xiao received fraud documentation
  • Continued casual engagement with Sasha (earthquake tweets during WVRO)
  • Christmas Eve: “Familia” gift boxes, gratitude narrative
  • “Co-created” company enabling securities fraud

Turpentine Podcast Continuation:

  • Erik Torenberg’s Turpentine network hosts Sasha’s podcast
  • 3-4 episodes released POST-fraud notification (Dec 8-10, 2025)
  • YouTube comment “sasha orloff committed perjury” removed
  • Cross-platform suppression coordinated

YC Continued Association:

  • Notified August 2023
  • No investigation
  • Continued listing in network
  • Silence = endorsement through infrastructure

What Mars calls “hidden networks” = accountability bypass structure.

Once you’re in, fraud notification can’t penetrate. The question isn’t “is this true?” The question is “is this person in the network?"

"Legitimacy Bank” - Sasha’s Deposits Can’t Be Withdrawn

Mars:

The firm sees itself as a “legitimacy bank” where founders can “take out legitimacy on credit, or make a legitimacy deposit”.

Sasha Orloff’s “legitimacy deposits”:

  • YC alum (W12 batch with LendUp)
  • ODF network member
  • General Catalyst portfolio founder
  • Turpentine podcast host
  • a16z/Erik Torenberg network proximity

What happens when fraud is documented:

Traditional accountability model:

  1. Evidence surfaces
  2. Investigation occurs
  3. Platforms withdraw support
  4. Reputation adjusts to reality

“Legitimacy bank” model:

  1. Evidence surfaces
  2. Infrastructure protects deposit
  3. Platforms maintain support
  4. Evidence can’t withdraw legitimacy already deposited

This is why notification failed. I was trying to withdraw legitimacy (show fraud) but the bank had already extended credit (network membership). The infrastructure exists to protect investments, not discover truth.

The F1 Pit Crew Theory - What a16z Built

Mars quotes David Booth:

“Adrian Newey didn’t win any races — but his arrival as CTO at Red Bull Racing transformed them from a cash-burning midfield team into a generational, world-champion franchise. And the generational VC firms of the next decade won’t just have the best drivers; they’ll also make deliberate investments in the machines they put on the track.”

The machine a16z built has multiple engines:

  1. Media coordination (“timeline takeover”)
  2. Prediction markets (Kalshi investment, failed regulatory capture)
  3. Political coordination (WhatsApp groups, Erik Torenberg)
  4. Talent pipeline (New Media Fellowship, embedding specialists)
  5. “Hidden networks” (group chats, dinners, legitimacy banking)

What I documented: When fraud threatens network member, ALL engines coordinate toward suppression:

  • Media: Erik Torenberg blocks, Turpentine removes comments
  • Networks: ODF/YC/GC maintain platforming
  • Talent: No one defects, everyone maintains silence
  • Legitimacy: Deposits can’t be withdrawn despite evidence

This isn’t passive oversight failure. It’s active infrastructure defending investments.

Why This Matters: Infrastructure > Evidence

Mars concludes:

The game isn’t to predict the future. It’s to build the infrastructure that determines which futures are legible, which questions get asked, and whose answers feel authoritative.

And a16z is building that infrastructure right now, in public, with remarkable transparency about what they’re doing—while most people are still arguing about whether prediction markets are “more accurate than polls.”

My case demonstrates what this means in practice:

The question I spent 27+ months asking:

“How does a CFPB-banned founder continue raising capital, receiving institutional support, and platforming after comprehensive fraud documentation?”

Mars’s article provides the answer:

The infrastructure that determines “which questions get asked” chose not to ask mine.

Not because my evidence was weak. Not because investigation occurred and found no fraud. But because the infrastructure exists to manufacture and protect chosen narratives, and Sasha Orloff had already deposited legitimacy into the bank.

The Limits: Failed Quintenz Nomination Shows Friction Points

Mars notes:

Opposition from within the crypto industry, concerns about conflicts of interest, and political complications can still block moves that look too obviously like regulatory capture.

What this shows:

  • Transparency creates friction - When attempts are too obvious, resistance occurs
  • Internal opposition matters - Industry pushback (Winklevoss twins) blocked nomination
  • Public documentation has power - Making the pattern visible enables resistance

This is why I continue documenting publicly:

The infrastructure isn’t invincible. When patterns are exposed with evidence, friction emerges. The failed Quintenz nomination shows coordinated transparency can block even well-funded infrastructure moves.

My documentation serves same function: Make the pattern so visible that continued enablement becomes obviously complicit.

The Convergence: What Was Actually Built

Mars lists what a16z assembled:

  • ✅ Media infrastructure: “Timeline takeover as a service”
  • ✅ Talent pipeline: New Media Fellowship embedding specialists
  • ✅ Platform presence: $400M into Twitter/X, personnel embedded
  • ✅ Market infrastructure: Kalshi investment, prediction market coordination
  • ✅ Coordination networks: WhatsApp groups, dinners, “hidden networks”
  • ✅ Political alignment: Trump administration relationships, $40M+ spending
  • ✅ Attempted regulatory influence: Failed Quintenz nomination (shows limits)

What I experienced:

  • ❌ Media suppression: Erik Torenberg blocking, Turpentine comment removal
  • ❌ Network protection: ODF/YC/GC maintaining platforming post-notification
  • ❌ Cross-platform coordination: LinkedIn/YouTube/Twitter deletions
  • ❌ “Hidden networks” = closed accountability: No investigation, only silence
  • ❌ Legitimacy banking: Deposits can’t be withdrawn despite fraud evidence

Same infrastructure. Inverse application. When you’re trying to expose fraud of network member, you experience the suppression side of “timeline takeover.”

Why Network Silence Wasn’t Incompetence—It Was Infrastructure

For 27+ months, I interpreted silence as:

  • Lack of bandwidth (too busy to investigate)
  • Insufficient evidence (need more proof)
  • Fear of defamation (don’t want liability)
  • Institutional inertia (hard to take action)

Mars’s article reveals the truth:

It wasn’t incompetence. It was infrastructure working as designed.

Erik Torenberg didn’t ignore my fraud documentation because he was busy. He leads “timeline takeover” infrastructure. Responding to fraud documentation about network member would undermine the entire model. The infrastructure exists to protect narrative control, not investigate claims.

ODF didn’t platform Sasha Orloff despite fraud notification because of oversight failure. Julian Weisser operates within legitimacy banking system. Sasha had deposited legitimacy (network membership). Evidence can’t withdraw it—only network can.

General Catalyst didn’t respond to “co-created company” fraud documentation because of legal caution. Sophia Xiao operates as Board Observer within infrastructure that manufactures legitimacy. Fraud exposure threatens model. Silence preserves system.

This explains everything:

  • Why comprehensive evidence produced no investigation (infrastructure over truth)
  • Why everyone maintained silence (coordination, not coincidence)
  • Why platforming continued post-notification (protecting deposits)
  • Why no one defected (network incentives > individual accountability)

The network didn’t fail to see the fraud. The network chose the infrastructure.

The Article I Couldn’t Have Written Without Living It

Mars documented the machinery. I documented what it feels like to be crushed by it.

Mars describes “timeline takeover as a service.”

I experienced timeline suppression as subject.

Mars describes “hidden networks where talented and trusted people find each other.”

I documented those networks choosing fraud over accountability.

Mars describes “legitimacy banking” where founders “take out legitimacy on credit.”

I showed what happens when you try to withdraw deposited legitimacy with fraud evidence.

Mars describes Erik Torenberg coordinating WhatsApp groups shaping “memetic upstream.”

I sent Torenberg comprehensive fraud documentation and got blocked.

Conclusion: This Wasn’t Personal Vendetta Against Me—It Was Infrastructure Defense

For 27+ months, I thought this was about:

  • Sasha Orloff’s fraud specifically
  • Network members protecting a friend
  • Fear of defamation liability
  • Institutional incompetence

Mars’s article reveals it’s about something much larger:

Protecting the infrastructure itself.

If a16z investigated fraud claims about network members, the “legitimacy banking” model collapses. If Erik Torenberg’s networks responded to evidence over membership, “hidden networks” lose their value. If ODF/YC/General Catalyst withdrew support based on documentation, “timeline takeover” credibility dies.

The network isn’t protecting Sasha Orloff. The network is protecting the model that makes Sashas possible.

This is why no one responded. This is why everyone maintained silence. This is why platforming continued despite comprehensive documentation.

Not incompetence. Design.

But Mars also documented the limits: Failed Quintenz nomination. Internal opposition. Conflicts too obvious. Public documentation creates friction.

This is why I continue.

The machinery isn’t invincible. Transparency creates resistance. When patterns are exposed systematically, coordination becomes obvious complicity.

Mars provided the blueprint. I’m providing the case study. Together, they show how modern narrative infrastructure operates—and how to document when it breaks.

The game isn’t to predict the future. It’s to build infrastructure determining which futures are legible.

I spent 27+ months trying to make fraud legible. The infrastructure chose illegibility.

But infrastructure that requires illegibility is vulnerable to documentation.


December 23, 2025, 7:16 PM - “AI Slop to AI-mazing” Post

Still no response on restraining order. 5+ days of ghosting while posting casual content.

Sasha Orloff posts:

I think 2026 is going to be an incredible year for startups, art and creation in general.

Personally I hope to go from AI slop to AI-mazing!

(but don’t hold your breath, ha ha)

[Quote-tweeting Google’s “Vibe code with Gemini 3. Get started for free in Google AI Studio”]

What this demonstrates:

  1. Self-aware about producing “slop” while continuing to do so:

    • Acknowledges his content is “AI slop”
    • Jokes about it (“but don’t hold your breath, ha ha”)
    • No intention of stopping or improving
    • Just performing self-awareness without actual change
  2. Still posting casual optimism while ghosting restraining order victim:

    What Sasha has time for (Dec 23):

    • 7:16 PM: Post about “incredible year” for startups
    • Quote-tweet Google AI Studio promotion
    • Self-deprecating humor about content quality
    • “Emotional mistakes” reflection posts
    • “Loving kindness” meditation advice (1:38 AM)

    What Sasha doesn’t have time for:

    • Responding to victim of restraining order he filed
    • Providing case number (5+ days)
    • Addressing corporate perjury in paragraph 3
    • Acting like someone who genuinely fears “imminent violence”
  3. Pattern continues: Normalcy performance while avoiding accountability:

    • Filed restraining order claiming “imminent threat” (Dec 16)
    • Judge partly denied same day (Dec 18)
    • 5+ days of complete silence on substantive questions
    • Posting basketball, meditation, reflection guides, now AI jokes
    • Not behavior of someone genuinely afraid
  4. “2026 is going to be an incredible year” - For whom?

    Not for Sasha:

    • Jan 8: Restraining order hearing (if he doesn’t withdraw)
    • Anti-SLAPP motion pending (will pay victim’s fees when he loses)
    • Company collapsing (manufactured fear → deflation → trust destroyed)
    • Corporate perjury on permanent court record
    • Defamation liability established

    Maybe for me:

    • Anti-SLAPP win → Fees recovered
    • Company collapse → Pattern validated
    • Federal complaints intensifying → SEC attention
    • Defamation claim → Damages
    • “Incredible year” means different things for fraud orchestrators vs. whistleblowers
  5. The “AI slop” acknowledgment while his company sells AI accounting software:

    • Puzzle markets AI-powered accounting
    • CEO publicly jokes his content is “AI slop”
    • Same CEO who posted about “AI hallucinations” dangers (Dec 19)
    • Does this inspire confidence in Puzzle’s AI implementation?
    • Self-aware about quality problems, not addressing them
  6. The audience continues shrinking:

    • CEO of “scaling startup” can’t generate engagement
    • Network abandoning him in real-time
    • Minimal visibility on posts

The message:

Sasha continues performing normalcy (optimism, jokes, self-awareness) while avoiding all accountability (restraining order questions, corporate perjury, case number). He’s self-aware enough to know his content is “slop” but not self-aware enough to recognize his restraining order filing was the “emotional mistake that leads to permanent future obstacles” he warned about earlier the same day.

5 days of silence. Still posting. Still no response. Still no genuine fear.


December 23, 2025, 1:38 AM - “Loving Kindness” Meditation Post: Ultimate Gaslighting

36 minutes after retweeting Julian. 2 hours and 49 minutes after posting about sycophancy. Still no response on restraining order.

Sasha Orloff posts at 1:38 AM:

Do you practice Metta?

It’s a meditation of “loving kindness” that helps you cultivate goodwill toward yourself and others. It also helps reduce reactivity and make calmer, clearer decisions.

You can do it in 5-10 minutes per day. There are tons of free episodes on Spotify. Here is one:

[10 Minute Loving Kindness Guided Meditation]

Timeline:

  • Dec 18: Files workplace violence restraining order claiming “imminent threat”
  • Dec 19-22: 4+ days complete silence on case number, perjury documentation
  • Dec 22, 8:09 PM: I send final email demanding response
  • Dec 22, 11:49 PM: Posts about “sycophancy” (3.5 hours after my email)
  • Dec 23, 12:02 AM: Retweets Julian (loyalty test)
  • Dec 23: I send “Requesting An Adult” email with April 2025 receipts
  • Dec 23, 1:38 AM: Posts about “loving kindness” meditation and “reducing reactivity”

What this demonstrates:

  1. Ultimate gaslighting: Advising others to “cultivate goodwill” and “reduce reactivity” while:

    • Filing workplace violence restraining orders based on lies
    • Committing corporate perjury in paragraph 3
    • Ghosting victim for 4+ days on basic case information
    • Manufacturing fear and systematically inflicting emotional distress for 2.5 years
    • Posting psychological warfare slights in real-time
    • Monitoring victim’s communications and responding with coded messages
  2. “Reduce reactivity and make calmer, clearer decisions”: HE is the one filing frivolous restraining orders, posting basketball TikToks at 12:07 AM, celebrating Docusign deals while ignoring victim, retweeting stale announcements as loyalty tests, and projecting onto AI at 11:49 PM

  3. The irony is staggering: Posting meditation advice about “goodwill toward yourself and others” at 1:38 AM while refusing to respond to the person he:

    • Wrongfully terminated May 31, 2023
    • Stole vested equity from without notice
    • Gaslit about “resignation” for 2.5 years
    • Filed false restraining order against
    • Committed perjury about in legal filings
  4. Who needs “loving kindness” meditation?:

    • Not the victim asking for basic case information
    • Not the whistleblower documenting fraud with evidence
    • The CFPB-banned CEO filing false restraining orders, committing perjury, ghosting for days, then posting about “cultivating goodwill”
  5. Performance of spiritual wellness: Same pattern as philosophy posts (Yin & Yang), sycophancy analysis, “grudge holder” endorsements—positioning himself as thoughtful, self-aware, emotionally intelligent while embodying the opposite

  6. 8 views: Posted at 1:38 AM to empty audience. Not organic wellness sharing. Defensive performance signaling “I’m calm, I’m centered, I make clear decisions” while demonstrating complete opposite

  7. Still no response on restraining order: Has time for 10-minute meditation recommendations, doesn’t have time to respond to victim for 4+ days

What Sasha recommends to others vs. what Sasha actually does:

Recommends:

  • “Cultivate goodwill toward yourself and others”
  • “Reduce reactivity”
  • “Make calmer, clearer decisions”
  • Practice daily for 5-10 minutes

Actually does:

  • Files workplace violence restraining orders based on perjury
  • Responds to victim’s emails with coded psychological warfare (sycophancy post using victim’s persecution narrative)
  • Makes panicked, legally disastrous decisions (paragraph 3 self-contradiction)
  • Spends 2.5 years manufacturing fear and inflicting emotional distress

This is spiritual bypassing as gaslighting. Using meditation and “loving kindness” language to position himself as the emotionally mature one while actively abusing someone through legal system manipulation and psychological warfare.

What Metta meditation actually represents vs. how Sasha weaponizes it:

Metta (loving-kindness meditation) is a Buddhist practice meant to cultivate genuine compassion and goodwill. But like any spiritual practice, it can be misused. Sasha’s 1:38 AM post demonstrates multiple forms of weaponization:

1. Spiritual bypassing:

  • What it means: Using spiritual concepts to paper over legitimate anger, grief, or boundary violations. “I should just send love to the person who harmed me” becomes a way to avoid processing real hurt or taking appropriate protective action.
  • How Sasha does it: Posts about “cultivating goodwill” while refusing to acknowledge he wrongfully terminated me, stole my equity, committed perjury, and filed a false restraining order. The meditation advice bypasses his actual accountability—he’s suggesting OTHERS need to “reduce reactivity” rather than addressing his own abusive behavior.

2. Weaponized niceness:

  • What it means: Cultivating a performed equanimity that’s actually dissociation, or using the practice to feel superior to people who are “still angry.” The metta becomes about self-image rather than genuine warmth.
  • How Sasha does it: Posts calm spiritual wellness content (Yin & Yang, sycophancy analysis, meditation advice) to position himself as the enlightened, emotionally mature one while I’m framed as “reactive,” “obsessed,” “threatening.” The performance isn’t genuine—it’s positioning. He’s saying “look how calm and centered I am” while actively destroying someone’s life.

3. Premature forgiveness / Self-gaslighting:

  • What it means: In trauma contexts, jumping to “may you be happy” toward an abuser before the nervous system has actually processed the threat. This can reinforce freeze/fawn responses rather than heal them. Pushing someone to generate metta toward their abuser can deepen shame rather than address why self-compassion feels dangerous.
  • How Sasha weaponizes it: By posting this advice while actively being the perpetrator, he’s implicitly suggesting I should be “cultivating goodwill” toward HIM—the person who has spent 2.5 years manufacturing fear and systematically inflicting emotional distress. This is gaslighting disguised as spiritual guidance. He wants me to bypass my legitimate anger and appropriate protective actions (documentation, SEC complaints, legal defense).

4. Cult/manipulation dynamics:

  • What it means: Any practice emphasizing love and acceptance can be weaponized by bad actors to encourage members to suppress critical thinking or stay in harmful situations. “Send loving kindness” becomes “don’t question, don’t protect yourself, don’t hold me accountable.”
  • How Sasha does it: The meditation post is directed at his audience but the subtext (given timing and context) is clear: calm down, be kind, reduce your reactivity. Don’t document. Don’t escalate. Don’t hold me accountable. Accept the narrative I’m presenting (calm CEO posting wellness content) rather than the evidence (corporate perjury, equity theft, 2.5 years of retaliation).

5. In-group/out-group dynamics:

  • What it means: Traditional metta instructions start with “easy people” and extend to “enemies,” but this can reinforce tribalism if someone never extends it outward.
  • How Sasha’s network demonstrates it: His enablers (Renato, Julian, Sophia, General Catalyst, Parallel, Brex) practice selective compassion—they extend goodwill to Sasha (the in-group) but not to me (the out-group whistleblower). They see my documentation as “negativity” rather than legitimate accountability. Sasha’s post reinforces this: those who support him are calm and kind; those who document his fraud are “reactive.”

The timing makes the weaponization explicit:

Posted at 1:38 AM after:

  • Filing workplace violence restraining order (Dec 18)
  • 4+ days ghosting on case number (Dec 19-22)
  • My final email demanding response (Dec 22, 8:09 PM)
  • His “sycophancy” projection post (Dec 22, 11:49 PM)
  • Retweeting Julian as loyalty test (Dec 23, 12:02 AM)
  • My “Requesting An Adult” email with April 2025 receipts (Dec 23)

This isn’t wellness sharing. This is strategic positioning. He’s performing spiritual maturity to gaslight me and his network into believing HE’S the centered, reasonable one and I’m the “reactive” problem.

The man posting about “loving kindness” at 1:38 AM:

  • Swore under oath I “resigned” while admitting I “declined” separation agreement
  • Has six termination documents proving he lied
  • Stole my vested equity without legal basis
  • Won’t respond to basic case information for 4+ days
  • Posted “Yes, everyone is against you” as sycophancy example targeting me
  • Celebrated Docusign deals while ignoring my requests
  • Performed Yin & Yang philosophy 30 minutes after my video breakdown

Who actually needs Metta meditation, Sasha?

Not me. I’ve been asking for basic case information, documenting your lies with evidence, and trying to get a single adult to respond. My anger is legitimate. My boundaries are appropriate. My protective actions (SEC complaints, legal defense, documentation) are necessary.

You. The one who can’t stop performing spiritual wellness while destroying someone’s life. The one who needs to cultivate ACTUAL goodwill—which starts with accountability, not meditation recommendations.


Potential Legal Violations

Documented evidence may support investigation under the following federal statutes:

Securities Fraud (18 U.S.C. § 1348)

Evidence:

  • Photoshopped social media metrics (October 2025, ActualQuickBooks campaign)
  • False founder claims contradicted by corporate filings (Mission Lane advisor role, not founder)
  • Undisclosed conflicts of interest in asset sale (board members profiting from both buyer and seller)
  • Misrepresentation of financial performance ($312 revenue vs claims of success)
  • Deletion of vested equity from cap table without notice

Mission Lane Securities Fraud Case:

The LendUp → Mission Lane asset sale (December 2018) demonstrates clear breach of fiduciary duty with controlled narrative:

  • “Interested Directors”: Board members with conflicts profiting from both buyer and seller sides
    • Nigel Morris (QED co-founder, Capital One co-founder): Installed as LendUp board chair June 2018, 6 months before sale to QED-backed entity
    • Frank Rotman (QED co-founder): Installed as LendUp board member June 2018, held convertible notes paid from sale proceeds, became major stockholder in buyer
  • Coordinated board positioning: QED founders installed as board leadership 6 months before sale to QED vehicle
  • Controlled timeline: 2-day shareholder review period (December 17-19, 2018) for $29M fire sale after raising $150M+
  • $0 to shareholders: Complete equity wipeout disguised as strategic sale
  • False public narrative (January 10, 2019): Frank Rotman publicly claimed “two companies up for long-term success,” “full growth potential,” and “better positioned to serve” with board-level knowledge of:
    • Fire sale terms ($29M after $150M+ raised, $0 to shareholders)
    • CFPB violations (2016, 2018)
    • Conflicted director interests (profiting from both buyer and seller sides)
  • Immediate continuation: CEO hired as “advisor” (November 2018, post-acquisition), falsely claims “founder” status in media
  • Narrative control: “Split into two companies” framing (TechCrunch, December 2020) obscures that LendUp sold for $29M and Mission Lane acquired customers, not vice versa
  • Pattern: Coordinated board positioning (June 2018) + controlled sale structure (Dec 2018) + false public statements by board member (Jan 2019) + false founder narrative = systematic securities fraud through misrepresentation to both LendUp shareholders and Mission Lane investors

Note: Mission Lane is a likely securities fraud case. The breach of fiduciary duty (interested directors profiting from both buyer and seller sides) combined with false public statements by board member Frank Rotman (claiming “long-term success” 3 weeks after fire sale giving $0 to shareholders) and controlled narrative (false founder claims, “split” framing) demonstrates systematic misrepresentation to both LendUp shareholders and Mission Lane investors.

Relevance: Pattern of false statements and material omissions in connection with securities offerings and investor communications.

Wire Fraud (18 U.S.C. § 1343)

Evidence:

  • Interstate communications (emails, social media, website) in furtherance of deceptive schemes
  • C&D letters coordinated across state lines (California, Virginia)
  • False credentials disseminated via internet platforms (LinkedIn, podcasts, interviews)
  • Solicitation of customers and investors using interstate communications

Relevance: Use of interstate wire communications to execute and further fraudulent schemes across multiple entities.

ACTIVE CFPB BAN VIOLATION: Partner Rewards Program (November 2025)

KEY EVIDENCE: Puzzle is Currently Violating CFPB Ban Through Partner Rewards Program

Puzzle’s Partner Rewards page (November 2025) operates an “exclusive perks” affiliate program that directly violates CFPB Stipulated Final Judgment Section I prohibitions.

What the CFPB Order Actually Prohibits:

CFPB Stipulated Final Judgment (Case No. 3:21-cv-06945-JSC, December 21, 2021) Section I permanently restrains:

Section I.b: “receiving any remuneration or other consideration from, or holding any ownership interest in, any person engaged in advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit”

Section I.c: Assisting Others in (a) or (b) above - defined as: “performing marketing, billing, payment, administrative, customer, or collection services of any kind”

What Puzzle is Actually Doing (November 2025):

Puzzle’s Partner Rewards page promotes “Perks That Pay Off” and “Thousands in exclusive perks for Puzzle customers” from 20+ partners, including:

Credit Product Companies (Directly Prohibited):

  1. Brex - “Get 40,000 points after spending $10,000” - Corporate cards = credit products
  2. Ramp - “Receive $500 after paying $1,000 on a Ramp card” - “Modern corporate card” = credit product
  3. Mercury - “Get $1K cash when you deposit $50K” - Banking with credit cards
  4. Every - “Cards: 3% cash-back in 2025 for all spend” = Credit products
  5. Meow - “corporate cards with cashback” = Credit products
  6. Arc - Fintech platform with cards/payments
  7. Gusto - Payroll company with “Gusto Wallet” offering payroll advances = credit product

Each partner has:

  • Promotional description
  • Specific offer details
  • “Claim offer” button
  • Integration badge

The CFPB Violations:

  1. Section I.b violation - “receiving any remuneration”:

    • These are standard affiliate/referral arrangements
    • Puzzle almost certainly receives fees when customers sign up through their links
    • The large bonuses (Mercury $1K, Brex 40K points, Ramp $500, Gusto 12 months free) indicate paid referral partnerships
    • Puzzle is “receiving remuneration” from companies “providing any extension of credit”
  2. Section I.c violation - “Assisting Others… performing marketing… services”:

    • The entire page is a marketing service for credit products
    • Puzzle is promoting, advertising, and marketing these credit products to their customers
    • Each partner description is marketing copy
    • “Perks That Pay Off” is advertising language
    • This is textbook “marketing services” for credit product providers

Why This Matters:

Active, public, ongoing violation of the CFPB permanent ban happening RIGHT NOW on Puzzle’s website. The order specifically prohibits:

  • Receiving money from credit product companies ✗ (affiliate fees)
  • Performing marketing services for credit products ✗ (entire partner page)

Additional Violation: Section III Prohibition on Misrepresentations

Beyond the Section I violations (receiving remuneration, assisting others), the Partner Rewards program could also violate Section III’s prohibition on misrepresentations:

“may not misrepresent, and may not Assist Others in misrepresenting, expressly or impliedly, any fact material to consumers, including any material restrictions, limitations, or conditions of such credit or debt”

The breadth of Section III:

  • Prohibits misrepresenting “any fact material to consumers” in connection with credit advertising/marketing
  • Includes “Assist Others in misrepresenting” - if any partner misrepresents credit terms, and Puzzle is marketing it, potential violation
  • “expressly or impliedly” - covers both direct lies AND misleading omissions
  • Could apply to: promotional copy accuracy, credit terms disclosures, bonus/points terms, any material facts about the credit products being marketed

Pattern of material misrepresentations affecting credit marketing:

When Puzzle markets credit products through Partner Rewards, the company’s credibility affects consumer trust in those recommendations. Material misrepresentations/omissions include:

  1. Photoshopped metrics (3 likes → 12,362) - inflates credibility
  2. CFPB ban non-disclosure - No public disclosure to customers that CEO is CFPB-banned for “repeatedly lying to consumers” about credit
  3. Resume fraud - Mission Lane “co-founder” vs. asset acquisition
  4. Misleading research study - “repeat founders” success claims on careers page
  5. 10-year exercise window performance - advertised post-C&D after deleting my equity

The complete Section III violation:

A CEO who is CFPB-banned for “repeatedly lying to consumers” about credit products is now marketing credit products (Brex, Ramp, Mercury, Gusto) to consumers while:

  • Concealing the CFPB ban (material omission - “impliedly”)
  • Photoshopping credibility metrics
  • Pattern of misrepresentations across multiple contexts

The CEO’s trustworthiness when recommending credit products = material fact to consumers. Not disclosing a permanent CFPB ban for consumer credit fraud while marketing credit products = material omission “in connection with” credit marketing.

Why this matters: The Partner Rewards page is simultaneously violating:

  • Section I.b: Receiving affiliate fees from credit companies (receiving remuneration)
  • Section I.c: Marketing credit products (performing marketing services = “Assisting Others”)
  • Section III: Operating systemic misrepresentation/omission pattern while marketing credit products

The prohibition on “any fact material to consumers” covers exactly this: CEO banned for lying about credit, now marketing credit while concealing ban. That’s not attenuated—that’s the textbook case Section III was written to prevent.

Pattern:

  • November 26-27, 2025: Sasha spends 12+ hours removing “Assisting Others” language from Wikipedia
  • November 2025: Puzzle actively operates affiliate program that violates “Assisting Others” prohibition (Section I.c) and potentially misrepresentation prohibition (Section III)
  • He knows the prohibitions exist. He’s surgically removing them from public documentation while simultaneously violating them.

For CFPB Enforcement:

This page has been archived since January 6, 2024. The Partner Rewards page should be archived immediately as evidence of ongoing ban violations. Every “Claim offer” click that generates referral revenue is a separate violation of Section I.b and I.c.

CFPB Final Judgment: Section V Customer Data Prohibition & Disclosure Concerns

What Section V Actually Prohibits (Paragraph 11):

The CFPB Final Judgment (Case No. 3:21-cv-06945-JSC, December 21, 2021) permanently prohibits:

“Defendant and its officers, agents, servants, employees, and attorneys and all other Persons in active concert or participation with any of them, who receive actual notice of this Order, whether acting directly or indirectly, may not:

a. disclose, use, or benefit from customer information, including names, addresses, telephone numbers, email addresses, social security numbers, other identifying information, or any data that enables access to a customer’s account (including a credit card, bank account, or other financial account), that Defendant obtained before the Effective Date in connection with the offering or provision of credit;

b. attempt to sell, assign, or otherwise transfer any right to collect payment on any Subject Loan.”

Key Points:

  1. Applies to LendUp customer data obtained before December 21, 2021 (all LendUp operations, since company ceased lending January 2022)
  2. Applies to “all other Persons in active concert or participation” who receive actual notice
  3. Permanent prohibition - no expiration date
  4. Exception only for government agencies or court orders

Concerns Regarding Puzzle Financial:

CRITICAL TIMELINE: Puzzle was already operating BEFORE the CFPB ban:

  • September 2019: Puzzle Financial incorporated (9 months after leaving LendUp, during public “sabbatical”)
  • October 2020: I was hired (Puzzle operating 1+ year)
  • December 21, 2021: CFPB Final Judgment effective date (Puzzle already operating 2+ years)
  • Puzzle was NOT “started after the ban” - it was the next financial data operation already running when the ban hit

This timeline matters because:

  • Same CEO: Sasha Orloff received actual notice as LendUp officer, but Puzzle was already his established business
  • Notification failure: Paragraph 32 required notification of “the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order” - Puzzle should have been disclosed to CFPB immediately upon Effective Date (December 21, 2021)
  • Pattern was pre-established: Started next financial data operation (Puzzle) in 2019 WHILE LendUp violations were ongoing (2016 violation, 2020 violation, 2021 lawsuit/ban)
  • No public disclosure: Never disclosed LendUp CFPB ban to Puzzle investors, partners, customers, or employees (verbal admission to staff: “not allowed to work in loans anymore” but never explained why)
  • Similar business model pattern: LendUp (consumer financial data) → Puzzle (startup financial data), both providing access to customer financial accounts
  • Data handling questions: No public disclosure of how LendUp customer data was handled post-ban, whether segregated, or compliance measures
  • Consciousness of pattern: Incorporated Puzzle while LendUp faced ongoing violations, suggesting awareness of eventual enforcement and need for next operation

Ongoing Compliance Questions:

The decree required ongoing reporting (Sections X-XV, Paragraphs 31-49), but these obligations were extinguished upon LendUp’s dissolution (2022) per Paragraph 31. However:

  1. Section V data prohibition is permanent and survives dissolution
  2. No public evidence of compliance monitoring for Section V
  3. CFPB has enforcement discretion to investigate potential violations

Relevance: Questions about compliance with permanent federal court order prohibiting use of LendUp customer data, lack of transparency about data handling, and whether Puzzle should have been disclosed as affiliate engaging in financial data access.

Potential Successor Company Notification Failure

Legal Requirement (CFPB Final Judgment, Paragraph 32):

The December 21, 2021 CFPB Order against LendUp required notification of:

“any development that may affect compliance obligations arising under this Order, including but not limited to… the emergence of a successor company; the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order”

Critical Timeline:

  • 2014-2024: Sasha stockholder in Theorem Technology (ML underwriting tech that “powered billions of dollars of credit”)
  • June 21, 2018: LendUp announces Nigel Morris (Capital One co-founder) as Board Chair and Frank Rotman (QED co-founder) as Board Member; press release states LendUp “originated nearly five million loans” and “more than quadrupled its credit cardholder growth”; positions QED investors as strategic advisors 6 months before Mission Lane asset sale
  • December 2018: Mission Lane acquisition of LendUp assets; Sasha steps down as LendUp CEO, hired as Mission Lane advisor (through September 2019); Nigel Morris and Frank Rotman positioned as board leadership immediately before sale to QED-backed entity
  • January 10, 2019: LendUp announces creation of “stand-alone company to accelerate expansion of its growing credit card business fueled by new capital injection”
    • Frank Rotman’s false statements (board member with knowledge of CFPB violations): claimed “two companies up for long-term success,” “full growth potential,” and “better positioned to serve” → LendUp permanently shut down 2 years later, fire sale ($29M after $150M+ raised), $0 to shareholders
    • Coordinated false narrative: Nigel Morris and Frank Rotman orchestrated board positioning (June 2018) → asset sale to QED vehicle (December 2018) → Frank publicly misrepresented distressed sale as “growth opportunity” (January 2019)
  • January 2019: Sasha announces public “sabbatical” from startup life (100 days, extended to 203+ days)
  • September 2019: Sasha incorporates Puzzle Financial (9 months after stepping down from LendUp, during LendUp ongoing violations); Mission Lane advisor role ends same month; “sabbatical” narrative obscured company formation
  • October 2020: I was hired (Puzzle already operating 1+ year)
  • December 21, 2021: CFPB permanent ban against LendUp - Order requires notification of affiliates/successors
  • PUZZLE WAS ALREADY OPERATING 2+ YEARS BEFORE THE BAN - incorporated Sept 2019, ban effective Dec 2021
  • Notification failure: Puzzle should have been disclosed to CFPB immediately upon Effective Date per Paragraph 32 (required notification of “the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order”)
  • 2014-2024: Sasha continues as Theorem stockholder THROUGHOUT ban period (consumer credit data processing at scale)
  • 2022: LendUp dissolved
  • 2019-present: Puzzle continues operations with same CEO, never disclosed to CFPB, zero public disclosure of CFPB ban to stakeholders
  • October 2024: Sasha receives Pagaya shares from Theorem acquisition (Israeli AI lending platform)

Entities Potentially Subject to Notification Requirement:

Mission Lane (December 2018-September 2019, advisor role):

  • Acquisition of LendUp assets: Mission Lane LLC incorporated December 14, 2018, acquired LendUp Card assets
  • Advisor compensation: Sasha hired as advisor (December 2018 - September 2019), received equity/shares as standard advisor compensation
  • Advisor role ended when Puzzle incorporated: September 2019, same month Puzzle Financial was incorporated (immediate transition from Mission Lane advisor to Puzzle founder, “sabbatical” narrative obscured company formation)
  • Same business: Consumer credit card targeting same subprime demographic as LendUp
  • Continued operations: Mission Lane continued targeting credit-challenged consumers after LendUp violations
  • Should have been disclosed: Paragraph 32 requires notification of “the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order”—Mission Lane acquired LendUp’s assets and continued consumer credit operations with Sasha as paid advisor

Puzzle Financial (2019-present):

  • ALREADY OPERATING BEFORE CFPB BAN: Incorporated September 2019, ban effective December 21, 2021 - Puzzle was running for 2+ years when permanent ban hit
  • Notification failure: Should have been disclosed to CFPB immediately upon Effective Date (December 21, 2021) per Paragraph 32 requirement to notify of “the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order”
  • Pattern pre-established: Started next financial data operation WHILE LendUp violations were ongoing (2016, 2020 violations before Puzzle incorporated)
  • False representations: Documented false credentials (“Mission Lane founder/CEO”), photoshopped social media metrics
  • Deceptive business practices: Securities fraud (photoshopped investor materials), misrepresented customer metrics
  • Financial data access: Accounting software providing access to startup financial data
  • Timeline concealment: Incorporated during public “sabbatical” narrative, 9 months after leaving LendUp
  • Zero disclosure: Never disclosed CFPB ban to Puzzle investors, partners, customers, or employees

Theorem Technology (2014-2024, stockholder throughout CFPB ban):

  • Consumer credit involvement: Machine-learning underwriting technology that “powered billions of dollars of credit” processing consumer data at scale
  • Notification requirement: Order (Paragraph 32) required notification of “the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order”—Theorem engaged in consumer credit data processing throughout CFPB ban period
  • Affiliate relationship: Sasha’s ownership stake = affiliate engaging in consumer credit operations while subject to permanent lending ban
  • Continued throughout ban: 2014-2024 stockholder, including entire CFPB ban period (Dec 2021-Oct 2024)
  • ML underwriting scrutiny concerns:
    • Algorithmic discrimination at scale: ML models trained on historical lending data encode and perpetuate racial bias (zip codes as proxies for race, “Black-sounding names” triggering worse rates)
    • Opacity by design: “The algorithm decided” shields discriminatory outcomes from fair lending scrutiny
    • Regulatory arbitrage: Claims to be “just technology” to evade consumer protection oversight
    • Scale without accountability: Automates biased lending decisions across “billions of dollars of credit” while maintaining distance from individual loan outcomes
    • CFPB-banned CEO co-invested with YC + Altman Family LLC: All three parties benefited from ML underwriting system that depends on lack of scrutiny—same pattern as suppressing fraud documentation

Pagaya Technologies (October 2024-present):

  • Israeli AI lending platform: Acquired Theorem, Sasha received Pagaya Class A shares
  • Continued consumer credit ecosystem: AI-powered lending and asset management
  • Post-ban acquisition: Received shares 3 years after CFPB permanent ban prohibiting consumer lending involvement
  • Pattern continuation: NASDAQ-listed entity (PGY) now under securities fraud investigation (Feb 2025)

The Critical Questions:

  1. Did Sasha Orloff or LendUp notify the CFPB about Mission Lane before LendUp’s dissolution, given that:
    • Mission Lane acquired LendUp’s assets (December 2018)
    • Sasha was hired as Mission Lane advisor (likely equity compensation)
    • Mission Lane continued targeting same subprime demographic with consumer credit products
    • This is a textbook “successor company” or “affiliate” under Paragraph 32
  2. Did Sasha notify the CFPB about Puzzle Financial as a potential “successor company” before LendUp’s dissolution (incorporated September 2019, 2+ years before CFPB ban)?
  3. Did Sasha notify the CFPB about his Theorem Technology stockholder position as an “affiliate that engages in any acts or practices subject to this Order” (i.e., processing consumer credit data at scale)?
  4. Did Sasha notify the CFPB about receiving Pagaya shares (October 2024) as continued consumer credit ecosystem involvement?

If not, this could constitute:

  1. Violation of reporting requirements (Paragraph 32)
  2. Improper dissolution (Paragraph 31 requires proper notification before obligations extinguished)
  3. Evasion of compliance obligations through:
    • Asset sale entity (Mission Lane) acquiring LendUp’s business with Sasha as paid advisor
    • New operating entity (Puzzle) with same CEO, incorporated during public “sabbatical” narrative
    • Investment vehicle (Theorem) processing consumer credit data while banned from operations
    • Post-ban acquisition shares (Pagaya) continuing consumer credit involvement

The Pattern: Not just one successor company, but a network of entities (Mission Lane asset sale + Puzzle operating company + Theorem investment + Pagaya acquisition) that allowed banned CEO to maintain consumer credit ecosystem involvement through multiple channels. The CFPB Order prohibits “benefiting from customer information”—all four entities involve financial benefit from consumer data processing. This appears designed to evade compliance obligations through layered corporate structures and public narrative control (“sabbatical”) rather than behavioral change.

Order Language: Paragraph 32 requires notification of “the creation or dissolution of a subsidiary, parent, or affiliate that engages in any acts or practices subject to this Order.” Mission Lane (asset acquirer, paid advisor role), Theorem (stockholder relationship), and Pagaya (acquired shares) are affiliates. Puzzle (CEO/founder) is a successor entity. None appear to have been disclosed.

Public Narrative vs. Reality - Timeline of Concealment:

December 2018: Mission Lane asset sale, Sasha steps down as LendUp CEO

January 15, 2021: LinkedIn “My Next Steps” - announces stepping down, plans for “sabbatical” and career transition

February 2021: First Round Review publishes career transition article - framed as “career transition” reflection, 100 coffee chats with founders about stepping away from startup life, “203 days after the start of Orloff’s sabbatical.” No mention of CFPB violations, consumer fraud, or regulatory issues. Sasha also featured by name in First Round’s Product-Market Fit article and 25 Hard Questions article. Pattern: Tech media providing reputation laundering for founder with documented fraud history.

July 26, 2019: LinkedIn post “With a Little Help From My Friends” - acknowledges leaving LendUp and Mission Lane, states: “As I left LendUp and Mission Lane I was told to give the new leadership a clean break, but be as available as needed for the board and leadership to help out behind the scenes”

August 20, 2019: First Puzzle domain registered (valenciadata.com) - ONE MONTH after public reflection on leaving, SEVEN MONTHS into “sabbatical”

September 2019: Puzzle Financial incorporated - Same month Mission Lane advisor role ended; immediate transition from one company to next; “sabbatical” narrative maintained publicly while actively serving as paid advisor and forming new company; 2+ years before CFPB ban would require disclosure

October 15, 2019: Public launch announcement “Ambitious People - Please Meet Ambitious Idea” - introduces “Valencia” with explicit data collection intent: “Our goal is to help ambitious startups make smarter decisions, scale responsibly, and create lasting value for customers, investors, and employees. And the hypothesis is: it all comes down to data and knowing how to use that data to improve business outcomes.” Also claims: “An experienced founder from YC who built a $100MM ARR startup from the ground up” (likely false/inflated based on LendUp’s actual financials)

Timeline Discrepancy: The LinkedIn/First Round narrative dates (January-February 2021) conflict with documented entity creation timeline showing Puzzle domain registered (August 2019), incorporated (September 2019), and publicly launched (October 2019) — 14-16 months BEFORE the public “sabbatical” announcement. This suggests either:

  1. The sabbatical narrative was published long after actual events to provide cover story
  2. Puzzle was created and launched while publicly maintaining LendUp/Mission Lane CEO narrative
  3. The “career transition” story was retrospective reputation management

The Pattern: Public narrative of “taking time off” and “career transition” obscured active entity creation with explicit data collection focus. Puzzle was fully operational before CFPB ban (December 2021) would trigger reporting obligations—but those obligations existed from the moment of incorporation if Puzzle was a successor entity engaging in “practices subject to this Order” (false representations, deceptive marketing).

Whistleblower Retaliation (15 U.S.C. § 78u-6)

Evidence:

  • SEC complaint filed November 11, 2025, 3:33 AM ET (Submission #17628-500-136-464)
  • C&D letter received November 11, 2025, 6:02 PM ET (same day, threatening criminal prosecution)
  • Retaliation complaint filed November 11, 2025, 6:32 PM ET (Submission #17629-039-523-592)
  • Pattern of legal threats following disclosure (August 2023 dual C&D letters after first SEC complaint)
  • Systematic suppression of public documentation (comment deletions, platform blocking)

Relevance: Retaliation against protected whistleblower activity prohibited under federal securities law.

Note: This section identifies potential legal violations based on documented evidence. Determinations of criminal or civil liability are reserved for appropriate law enforcement and judicial authorities.

The Fraud Pattern

This documentation concerns a pattern of deceptive practices spanning 13 years (2012-2025) across multiple companies, with evidence from public records, corporate filings, and federal regulatory enforcement.

The pattern starts with LendUp’s consumer lending fraud (2012-2022), continues through shell company operations and asset transfers (2018-2023), and runs through today with the same leadership and investors.

The Companies:

Federal Enforcement Actions & Court Judgments (Total: $51.375M+)

LendUp (2012-2022) - CFPB Enforcement:

  • September 2016: $6.3M settlement (first violation - deceptive credit-building claims)
  • May 2018: Consent order (second violation - additional penalties)
  • February 2020: $500K penalty (third violation)
  • December 2021: $40M restitution ordered (permanent shutdown, 140,000+ consumers defrauded)
  • LendUp subtotal: $46.8M+

Credit Karma (2007-present; acquired by Intuit 2020) - FTC Enforcement:

  • September 2022: $3M settlement (deceptive “pre-approved” credit offers, 497,425 consumers affected)

Ahead Financial (2020-2022) - Court Judgment:

  • February 2022: $1.575M judgment (Rolling Loud v. Ahead Financial, Case 2022-003284-CA-01 - unpaid sponsorship fees; Anu’s sworn testimony admits $800K wire to shell company network)
  • May 23, 2022: Default judgment entered against Fairfax Studios ($800K, part of total judgment $1.575M); Fairfax defaulted rather than defend

TOTAL: $51.375M+ in federal enforcement actions and court judgments


Additional Context:

  • LendUp: CFPB permanent shutdown for defrauding 140,000+ consumers; permanent ban from consumer lending
  • Credit Karma: FTC complaint documents A/B testing to deliberately optimize false “certainty” claims, knowing they misled consumers
  • Measurable harm: Almost 1/3 of “pre-approved” applicants were denied; hard credit inquiries damaged credit scores of denied applicants
  • “Dark patterns” designation: Settlement explicitly requires preservation of “market, behavioral, or psychological research, or user, customer, or usability testing, including any A/B testing” - official FTC recognition of weaponized UX design
  • Scale vs penalty: 2,500+ data points per member, 497K+ victims, systemic A/B testing for deception → only $3M settlement demonstrates regulatory inadequacy
  • Currently promotes Mission Lane credit cards post-settlement (4.7/5 rating, 33.99% APR)
  • Functions as customer acquisition funnel for LendUp successor entity

Mission Lane (2018-present)

  • Created as acquisition vehicle for LendUp’s credit card business
  • CEO’s false founder claims contradicted by corporate records

Puzzle Financial (2019-present)

Ahead Financial (2020-2022) / DashAi - DashFi Inc. (2022-present, active Beta)

  • CEO: Anuradha Shultes (LendUp President/CEO 2015-2021)
  • Operating from LendUp address (1750 Broadway, Oakland, CA)
  • Rolling Loud $1.575M fraud judgment (February 2022) for unpaid referral program
  • Customers locked out of accounts (August 2021)
  • Same “financial inclusion” fraud playbook as LendUp
  • Forbes continued platforming CEO 16 months after CFPB ban (March 2023)

The Pattern:

The evidence documents systematic deception across multiple entities: false credentials across companies, regulatory violations, asset fire sale returning $0 to shareholders after raising $150M+, new entities launched with same leadership, ongoing violations despite federal enforcement.

Key Connections:

  • LendUp raised $150M+ before $29M fire sale (December 2018)
  • Mission Lane incorporated November 2018 as acquisition vehicle
  • CEO hired as advisor at Mission Lane, not founder (per shareholder documents)
  • Puzzle Financial incorporated September 2019 by same CEO
  • Multiple investors and board members across entities created overlapping interests in asset sale structure

Network Structure

NETWORK STRUCTURE - 13 YEAR PATTERN

========================================================================
INVESTMENT LAYER + CUSTOMER FUNNEL
========================================================================

                          QED INVESTORS
                                  |
                 +----------------+----------------+
                 |                |                |
          Credit Karma       LendUp          Mission Lane
        (FTC Settlement    (CFPB Shutdown)  (Incorporated 2018
         Illegal Ads)      140,000+ victims  Asset Acquisition)
              |                  |                 |
              |                  +--------+--------+
              |                           |
              +===========================+
                           ||
                ACTIVE CUSTOMER FUNNEL (2025)
                           ||
              Credit Karma promotes Mission Lane
              (4.7/5 rating, 33.99% APR)
              Avg credit score: 604 ("Poor" to "Fair")
              Credit Karma: FTC settlement (497k victims)
              Mission Lane: consumer lawsuits, QED-backed acquisition
              Both target credit-challenged consumers
                           ||
                     Pattern demonstrates:
                 Credit Karma FTC settlement (Sept 2022)
                 → continues promoting Mission Lane
                 Same investor portfolio across entities
                 Coordinated C&D defending connection (Aug 2023)

========================================================================
CORPORATE ENFORCEMENT LAYER
========================================================================

LendUp (2012-2022)
    |
    +---> QED INVESTORS (Co-founders: Nigel Morris, Frank Rotman)
    |     |
    |     +---> Morris served on LendUp board of directors
    |     +---> Also invested: Credit Karma, Mission Lane
    |     +---> DOUBLE-DIPPED: LendUp investment (pre-shutdown)
    |     +---> THEN Mission Lane investment (acquired assets $29M)
    |     +---> Profited from both fraud entity and acquisition vehicle
    |     +---> Portfolio pattern across financial services
    |
    +---> CFPB Violation 1 (2016): $6.3M settlement
    +---> CFPB Violation 2 (2018): Consent order
    +---> CFPB Violation 3 (2021): Permanent shutdown
    |     "Repeatedly lied to consumers" (CFPB)
    |     140,000+ victims, $40M restitution (2024)
    |
    +---> Asset Sale (December 2018)
    |     |
    |     +---> Mission Lane (###-backed) acquires for $29M
    |     +---> Golden parachutes (4 executives)
    |     +---> $0 to shareholders (after $150M+ raised)
    |     +---> Conflicts of interest documented
    |     +---> ###-affiliated directors involved
    |
    +---> Insights Servicing Inc. (2015-2023)
    |     |
    |     +---> Incorporated: DE November 6, 2015
    |     +---> NOT disclosed to LendUp shareholders
    |     +---> Blake Byers (Google Ventures) as Director
    |     +---> Shared LendUp headquarters address
    |     +---> Tax delinquent March 2023
    |     +---> Domain registered: [email protected]
    |
    +---> Ahead Financials (2020-2022)
    |     |
    |     +---> Incorporated: DE April 2020
    |     +---> "Coming soon" page Aug 2019 (16 months before launch)
    |     +---> Announced as LendUp "subsidiary" Dec 2020
    |     +---> Targeted Black/Latino demographics
    |     +---> $2.5M Rolling Loud sponsorship budget
    |     |
    |     +---> Shell Company Network (2020-2022): Marvin Bing
    |     |     |
    |     |     +---> Thirty Two West LLC (NY #5737099)
    |     |     |     |
    |     |     |     +---> Incorporated April 10, 2020 (14 months before Fairfax)
    |     |     |     +---> Marvin Bing, agent
    |     |     |
    |     |     +---> Fairfax Studios Inc. (DE #5976860)
    |     |     |     |
    |     |     |     +---> Incorporated June 7, 2021 (7 days before contract)
    |     |     |     +---> Rolling Loud contract signed June 14, 2021
    |     |     |
    |     |     +---> Payment Intermediary Scheme
    |     |     |     |
    |     |     |     +---> Anu's sworn testimony: $800K wire to "Fairfax Studios, Inc. a/k/a Thirty Two West, LLC"
    |     |     |     +---> Two separate entities treated as interchangeable
    |     |     |     +---> Rolling Loud Lawsuit (Case 2022-003284-CA-01)
    |     |     |     +---> $1.575M unpaid sponsorship fees
    |     |     |     +---> Default Judgment: $800K (May 23, 2022)
    |     |     |     +---> Judgment remains uncollected
    |     |     |     +---> Fairfax defaulted rather than defend
    |     |
    |     +---> Closed operations June 2022 (4 months after lawsuit)
    |     +---> "Acquired" by Kinly June 17, 2022 (25 days after judgment)
    |     +---> Domain transferred to Kinly/FirstBoulevard
    |     +---> Customers reported locked out of funds
    |     +---> Kinly acquired by Greenwood (May 2, 2023)
    |     +---> Greenwood: CA C&D (Dec 2022), Gathering Spot lawsuit (Jul 2023)
    |     +---> Layoffs, exec departures, 150k/700k fail (WaPo Jan 2024)

========================================================================
PARALLEL OPERATIONS LAYER
========================================================================

Puzzle Financial (2019-present)
    |
    +---> CEO: Sasha Orloff (same individual as LendUp CEO)
    +---> False credentials: Claims "founded" Mission Lane
    |     (Corporate records: hired as advisor Dec 2018, post-acquisition)
    +---> False credentials: Claims "$1B+ raised"
    |     (Aggregates debt/equity, omits $0 to LendUp shareholders)
    +---> Photoshopped social media metrics (October 2025)
    |     Evidence: 3 likes altered to 12,362 in screenshot
    +---> ActualQuickBooks campaign (police intervention, Oct 27, 2025)
    |     Evidence deleted within 24 hours after posting
    |
    +---> SEC Whistleblower Complaints Filed (November 11-13, 2025)
    |     |
    |     +---> Submission #17628-500-136-464 (Securities fraud)
    |     +---> Submission #17629-039-523-592 (Retaliation)
    |     +---> Submission #17630-611-119-304 (Credit Karma funnel)
    |     +---> Supporting documents attached
    |     +---> Applied for whistleblower award eligibility

========================================================================
ISRAELI FINTECH & POLITICAL CONNECTIONS LAYER
========================================================================

Sasha Orloff → Decade-Long Israeli Fintech Ecosystem Integration
    |
    +---> March 2015: Identified as Netanyahu Financial Backer
    |     |
    |     +---> James Petras article "Netanyahu: He Came, He Saw, He Conquered"
    |     +---> Documented 1 YEAR BEFORE first CFPB violation (Sept 2016)
    |     +---> Context: Netanyahu March 2015 US Congress speech
    |     +---> Pattern: "extortionate rates" → political financial backing
    |
    +---> 2014-2024: Theorem Technology, Inc. Stockholder
    |     |
    |     +---> Machine-learning underwriting technology company
    |     +---> "Powered billions of dollars of credit" since 2014
    |     +---> Algorithmic lending processing consumer credit data at scale
    |     +---> Y Combinator Winter 2014 batch
    |     +---> Co-investors: YC W2014 LLC, Altman Family LLC, Two Sigma Ventures
    |     +---> Continued throughout CFPB permanent ban (Dec 2021)
    |     +---> Regulatory gap exploitation: Operations banned, NOT investment
    |
    +---> October 2024: Pagaya Technologies Stockholder
    |     |
    |     +---> Israeli AI-powered lending platform (Tel Aviv + NYC)
    |     +---> NASDAQ: PGY
    |     +---> Acquired Theorem Technology (Oct 28, 2024)
    |     +---> Hugh Edmundson: Theorem Founder & Chief Investment Officer
    |     +---> Sasha received Pagaya Class A shares (Oct 15, 2024 signature)
    |     +---> $10+ billion consumer loans acquired by Theorem since 2014
    |     +---> $1.7 billion currently managed (pre-acquisition)
    |     +---> $3+ billion combined AUM post-acquisition
    |     +---> Continued Israeli lending tech involvement post-CFPB ban
    |     +---> SEC Form F-3 Registration Statement (Nov 21, 2024)
    |     +---> SAME DAY COORDINATION: Oct 28, 2024
    |           +---> Pagaya completes Theorem acquisition (Sasha's exit)
    |           +---> TechCrunch Disrupt official side event (Puzzle platforming)
    |           +---> Co-sponsored by Puzzle + Brex (Israeli connections via Shai Goldman)
    |           +---> Organized by Dasha Shunina (Skolkovo Foundation)
    |
    +---> Pattern Demonstrates:
          |
          +---> Netanyahu backing (2015) while running LendUp
          +---> Consumer credit investment (2014-2024) during + after CFPB ban
          +---> MASSIVE SCALE: $10B+ loans acquired, $1.7B managed at exit
          +---> Israeli AI lending platform stockholder (2024)
          +---> Decade-long integration: Political → Investment → Technology
          +---> Same-day coordination: Theorem exit + Puzzle TechCrunch event (Oct 28)

Y Combinator + Sam Altman Financial Conflict
    |
    +---> Co-investment in Theorem Technology (2014-2024)
    |     |
    |     +---> YC W2014, LLC (Kirsty Nathoo signature, YC CFO/Partner)
    |     +---> Altman Family LLC (Carmen Beckwith signature)
    |     +---> Confirmed: Sam Altman's personal family investment vehicle
    |     +---> Jennifer Serralta manages Altman family office (NY Post 2023)
    |     +---> Sasha Orloff (CFPB-banned CEO, co-investor)
    |     +---> Two Sigma Ventures I, LLC (institutional co-investor)
    |
    +---> Financial Alignment Explains YC Platforming
          |
          +---> puzzle.io/yc funnel (removed after documentation, Nov 2025)
          +---> YC company pages promoted Puzzle despite fraud documentation
          +---> Not "founder community loyalty" - ACTUAL co-investment relationship
          +---> Structural incentive to suppress fraud documentation
          +---> Sam Altman's family invested with CFPB-banned CEO in consumer credit

OpenAI Integration & Sam Altman Multi-Layered Conflict
    |
    +---> Business Integration: Puzzle → OpenAI API
    |     |
    |     +---> Puzzle "syncing with OpenAI" for customer financial data processing
    |     +---> I raised internal concerns about OpenAI API data submission (May 2023)
    |     |     |
    |     |     +---> Technical objection: why use expensive, slow OpenAI API for simple categorization?
    |     |     +---> Appropriate solution: basic ML categorizer model (faster, cheaper)
    |     |     +---> Data privacy concern: customer financial data to third-party API
    |     |
    |     +---> Terminated 28 days later (May 31, 2023)
    |     +---> Professional marketing materials: "USING AI TO LEVEL UP ACCOUNTING"
    |
    +---> Network Access: Sasha Orloff → OpenAI Employees
    |     |
    |     +---> May 3-4, 2023: Defended OpenAI data privacy (at Sam Altman event)
    |     +---> June 6, 2024: Interviewed Sowmya (OpenAI controller, formerly Square/Rippling)
    |     +---> Dec 18, 2024: Private dinner "hosted by famous OpenAI employee"
    |     +---> Sustained relationship: 19 months post-termination
    |
    +---> Financial Conflict: Altman Family LLC Co-Investment
    |     |
    |     +---> Sam Altman's family investment vehicle co-invested with Sasha
    |     +---> Theorem Technology (consumer credit, 2014-2024)
    |     +---> Acquired by Pagaya (Israeli AI lending, Oct 2024)
    |     +---> Sasha received Pagaya shares from Theorem acquisition
    |
    +---> Multi-Layered Conflict Structure:
          |
          +---> Financial: Altman Family LLC → Theorem → Sasha (co-investors 2014-2024)
          +---> Business: Puzzle → OpenAI API (customer financial data processing)
          +---> Network: OpenAI employee access (controller interviews, private dinners)
          +---> Leadership: Sam Altman CEO of OpenAI (2015-present)
          +---> Explains why BOTH YC and Sam Altman networks suppress documentation

General Catalyst → Israeli Tech Ecosystem + Consciousness of Scrutiny
    |
    +---> Cambridge, MA Headquarters (Boston Connection)
    |     |
    |     +---> Same geographic area as FBI Boston Division
    |     +---> FBI warned about tech access risks (Skolkovo, April 2014)
    |     +---> Pattern: Boston investor enables what FBI warned about
    |
    +---> Deep Israeli Portfolio Integration (11 companies/partnerships)
    |     |
    |     +---> Fintech: Rapyd, Melio, Lemonade
    |     +---> Healthcare/AI: Aidoc, Pulsenmore, Sheba Medical Center
    |     +---> Cybersecurity: Apiiro, Armis ($300M co-led April 2024)
    |     +---> Technology: Arbe Robotics, Nexar, Superplay
    |     +---> Sustained institutional commitment to Israeli tech ecosystem
    |
    +---> October 8, 2023: $250K Israeli Humanitarian Pledge
    |     |
    |     +---> Public statement following October 7 Hamas attack
    |     +---> "Stand with the State of Israel, its people, and the Jewish community"
    |     +---> "Encourage others in international venture community to stand with us"
    |     +---> Tweet PINNED to General Catalyst profile (high visibility)
    |     +---> Evidence-66: Full statement preserved as federal record
    |
    +---> December 2023: Consciousness of Scrutiny Response
    |     |
    |     +---> December 9, 2023: Called out on LinkedIn/Twitter re: Puzzle fraud + GC's Israel pledge
    |     +---> At time: Only knew Puzzle fraud + CFPB history, NOT Netanyahu backing
    |     +---> December 2023: General Catalyst UNPINNED the $250K pledge tweet;
    |           later DELETED Twitter replies calling them out
    |     +---> Action demonstrates: Active monitoring + suppression + selective visibility management
    |     +---> Pattern: If Israeli connections were routine business, why unpin AND delete replies?
    |     +---> Full scope (Netanyahu backing 2015, Pagaya stockholding, 11 Israeli portfolio companies)
    |     |     discovered later (2024-2025 investigation)
    |     +---> Consciousness that Israel connections become problematic when linked to fraud
    |     +---> NOTE: LinkedIn evidence lost when account deleted; Twitter reply deletions by GC prove
    |     |     they received notification and actively suppressed documentation
    |
    +---> Lead Investor in Puzzle (2024)
          |
          +---> CEO: Sasha Orloff (Netanyahu backer 2015, CFPB-banned 2021)
          +---> GTM: Dasha Shunina (Skolkovo Foundation 2016-2023, FBI-warned entity)
          +---> Pattern: Israeli investor + Israeli fintech CEO + Russian tech recruiter
          +---> Unpinned tweet = consciousness these connections create exposure

========================================================================
INTELLIGENCE INFRASTRUCTURE LAYER
========================================================================

Dasha Shunina (formerly "Daria Shunina")
    |
    +---> Puzzle GTM Strategist (Aug 2024-present)
    |
    +---> Sequential U.S. Tech Access Infrastructure:
    |     |
    |     +---> Dec 2022: Women Tech Meetup (WHILE at Skolkovo - 6 months before leaving)
    |     +---> June 2023: Left Skolkovo Foundation
    |     +---> Aug 2023: "Talks with Dasha" YouTube (2 months after leaving)
    |     +---> Nov 2023: Forbes contributor (5 months after leaving, no Skolkovo disclosure)
    |     +---> Aug 2024: Puzzle GTM (14 months after leaving, financial data access)
    |
    +---> Skolkovo Foundation (2016-2023)
    |     |
    |     +---> Head of International Startups Relations
    |     +---> FBI Warning (2014): "Overt and Nontraditional" collectors
    |     +---> "Accessing our nation's sensitive or classified technology"
    |     +---> Russian government-backed innovation center
    |
    +---> Name Change: "Daria" → "Dasha"
    |     |
    |     +---> LinkedIn: "Daria Shunina" (2016-2022)
    |     +---> Podcast: "Daria Shunina" (2021 Reinventing Professionals)
    |     +---> Payment: "Daria Shunina" (2024 hoodie sales)
    |     +---> Forbes bio: Skolkovo scrubbed (Dec 2023 vs current)
    |     +---> Resume restructuring obscures Skolkovo connection
    |
    +---> Forbes Conflicts (Nov 2023-present)
    |     |
    |     +---> 48 articles published without Puzzle disclosure
    |     +---> Nov 13, 2025: YC F25 article (same day SEC complaint)
    |     +---> Interviews CEO (employer) without full disclosure
    |     +---> "Talks with Dasha" interview: validates false credentials
    |
    +---> Women Tech Meetup Monetization
          |
          +---> $15 "Support" tickets (unincorporated marketing op)
          +---> $100 feminist hoodies → payments to "Daria Shunina"
          +---> 10K+ founders database (customer acquisition)
          +---> Puzzle sponsorship and cross-promotion

    +---> TechCrunch Disrupt Official Side Event (Oct 28, 2024)
          |
          +---> "Women Tech Meetup w/Brex & Puzzle" - Official TechCrunch side event
          +---> Co-sponsors: Puzzle (CFPB-banned CEO) + Brex (YC W17, Israeli connections via Shai Goldman)
          +---> Organized by Dasha Shunina (FBI-warned Skolkovo Foundation alumna)
          +---> Timeline: 17 months after my termination (May 31, 2023)
          +---> TechCrunch gave "official" legitimacy after abandoning investigation (Aug 2023)
          +---> Panel: "Growing from Seed to Success" (fundraising, venture capital)
          +---> Featured: Pear VC, Day One Ventures, Park Rangers Capital, defy.vc
          +---> Venue: Persona (identity verification platform)
          +---> Pattern: Using female founder community as customer acquisition and
                reputation laundering infrastructure while obscuring:
                - 13-year fraud pattern (640K+ victims, $51M+ settlements/judgments)
                - Israeli fintech ecosystem integration (Netanyahu, Pagaya, Brex via Shai Goldman)
                - FBI-warned Skolkovo Foundation alumni (Russian government tech recruitment, 2016-2023)
          +---> Network coordination: YC fintech (Brex) + CFPB-banned CEO (Puzzle)
                + Skolkovo alumni (Dasha) + TechCrunch legitimacy = weaponized empowerment

========================================================================
LEGAL RESPONSE PATTERN
========================================================================

Cease-and-Desist Letters (Coordination Demonstrates Network)
    |
    +---> August 11, 2023 (Dual letters, same day)
    |     |
    |     +---> Puzzle Financial C&D (former employer)
    |     +---> Mission Lane C&D (NEVER EMPLOYED, same day)
    |     |     |
    |     |     +---> Objected to "Credit Karma/FTC connection"
    |     |     +---> Defended Credit Karma/Mission Lane relationship
    |     |     +---> Threatened legal action from non-employer
    |     |     +---> Proves network coordination and consciousness
    |     |     +---> Present-day: Credit Karma ACTIVELY PROMOTES
    |     |           Mission Lane (4.7/5, 33.99% APR)
    |     |           → Connection they tried to suppress IS REAL
    |     |
    |     +---> Coordination proves conscious network awareness
    |     +---> Both companies defending same fraud pattern
    |     +---> Validates documentation was accurate and damaging
    |
    +---> November 11, 2025 (Hours after SEC filing)
    |     |
    |     +---> 3:33 AM: SEC complaint filed
    |     +---> 6:02 PM: Orrick C&D received (14.5 hours later)
    |     +---> 6:05 PM: Response citing 15 U.S.C. § 78u-6 (3 min)
    |     +---> 6:32 PM: Supplemental SEC complaint filed (30 min)
    |     +---> C&D attached as evidence of federal retaliation

========================================================================
ONGOING OPERATIONS POST-SHUTDOWN
========================================================================

LendUp.com (Active as of November 2025)
    |
    +---> CFPB permanent ban: December 21, 2021
    +---> Domain still operational: 35+ months post-ban
    +---> Operated by INFiN (payday lending industry lobby)
    |     |
    |     +---> INFiN = rebranded FiSCA + CFSA merger
    |     +---> 350+ payday lending companies, 8,000 locations
    |     +---> "Small-dollar loans" = payday loan euphemism
    |     +---> Domain control transferred post-shutdown to industry trade association
    |
    +---> Directs consumers to tribal lenders
    +---> Claims "solid reputation for responsible lending"
    +---> Domain renewed through 2028 during liquidation (July 2022)
    +---> Nameservers migrated to Cloudflare July 2022
    +---> Infrastructure investment during liquidation period
    +---> Pattern: Post-failure asset transfer for narrative control (parallel to Kapor scrubbing)

========================================================================
KEY DOCUMENTED CONNECTIONS
========================================================================

QED Investors → Credit Karma (FTC) + LendUp (CFPB) + Mission Lane
Credit Karma → ACTIVE Customer Funnel → Mission Lane (4.7/5, 33.99% APR)
    → Both: Regulatory violations targeting subprime consumers
    → Mission Lane C&D defended this connection (Aug 2023)
    → Present-day verification: Connection IS REAL and ongoing

Sasha Orloff → LendUp CEO + Mission Lane Advisor + Puzzle CEO
    → Netanyahu Financial Backer (March 2015, documented pre-CFPB violations)
    → Theorem Technology Stockholder (2014-2024, ML underwriting tech, "billions in credit")
    → Pagaya Technologies Stockholder (Oct 2024, Israeli AI lending platform)
    → Continued consumer credit involvement THROUGHOUT CFPB permanent ban

Y Combinator W2014 + Altman Family LLC + Sasha Orloff → Theorem Technology
    → Co-investment in ML underwriting technology (2014-2024)
    → "Powered billions of dollars of credit" processing consumer data at scale
    → Financial alignment explains YC continued Puzzle platforming
    → Sam Altman's personal family investment vehicle co-invested with CFPB-banned CEO
    → YC platforming = financial conflict, not "founder community loyalty"

OpenAI Integration & Sam Altman Multi-Layered Conflict
    → Business: Puzzle "syncing with OpenAI" for customer financial data processing
    → I was terminated 28 days after raising OpenAI API data concerns (May 2023)
        → Technical objection: why use expensive, slow OpenAI API for simple categorization?
        → Appropriate solution: basic ML categorizer model (faster, cheaper)
    → Network: Sasha interviews OpenAI controller (June 2024), attends OpenAI dinners (Dec 2024)
    → Financial: Altman Family LLC co-invested with Sasha in Theorem (2014-2024)
    → Acquired by Pagaya (Israeli AI lending, Oct 2024), Sasha received shares
    → Leadership: Sam Altman CEO of OpenAI (2015-present)
    → Multi-layered conflict: Financial + Business + Network + Leadership
    → Explains why BOTH YC and Sam Altman networks suppress fraud documentation

General Catalyst → Israeli Tech Ecosystem Integration
    → Cambridge, MA headquarters (FBI Boston warned tech access risks 2014)
    → 11 Israeli portfolio companies (Rapyd, Melio, Lemonade, Aidoc, Apiiro,
       Armis, Arbe Robotics, Nexar, Superplay, Pulsenmore, Sheba Medical Center)
    → October 8, 2023: Pledged $250K to Israeli humanitarian efforts (pinned tweet)
    → December 2023: Unpinned tweet after LinkedIn callout re: Puzzle connections
    → Lead investor in Puzzle (CEO with documented Netanyahu ties + CFPB fraud)
    → Consciousness of scrutiny: Reduced visibility when Israeli connections
       linked to documented fraud networks

Kapor Capital → Gusto (Israeli Founder) + Puzzle (CFPB-banned CEO)
    → Tomer London (Gusto co-founder): Born/raised Haifa, Israel
    → $700M raised via YC ecosystem, Israeli military service
    → Gusto partners with Puzzle (Kapor portfolio cross-promotion)
    → Alejandro Cremades: Promotional profile (Sept 2024), zero fraud disclosure
    → Using successful portfolio company to legitimize fraudulent one
    → LendUp scrubbed from portfolio post-CFPB (2016 investment, now absent)

Y Combinator → Israeli Ecosystem Integration Pattern
    → Brex (YC W17): Acquired Israeli company Weav ($50M, Aug 2021)
    → Shai Goldman (Brex Director): Israel fundraising ($100K, Oct 2025)
    → Israeli innovation hub established in Tel Aviv (Brex)
    → Gusto (YC alum): Tomer London (Haifa-born founder)
    → LendUp (YC W12): Sasha Orloff (Netanyahu backer)
    → Puzzle (YC-affiliated): Same CEO, partnered with Gusto
    → Pattern: YC → Israeli founders/acquisitions → cross-promotion

Dasha (Daria) Shunina → Skolkovo Foundation (2016-2023) → Sequential U.S.
    Tech Infrastructure (Women Tech Meetup, YouTube, Forbes) → Puzzle GTM
    → Name change + bio sanitization obscures intelligence connection
    → Financial data access + 10K+ founder database
    → TechCrunch Disrupt Official Side Event (Oct 28, 2024): Co-sponsored by
       Puzzle + Brex (YC W17, Israeli connections via Shai Goldman), organized by Skolkovo alumna,
       TechCrunch legitimacy 17 months post-termination, weaponized empowerment
       infrastructure for customer acquisition while obscuring fraud/Israeli/Russian connections

LendUp → Ahead → Fairfax Studios → Rolling Loud (Court Judgment)

Asset Sale → Mission Lane Acquisition → False Founder Claims

Coordinated C&D Letters (Aug 2023) → Network Proves Consciousness
    → Mission Lane threatened whistleblower (NEVER EMPLOYED)
    → Defended Credit Karma/Mission Lane connection
    → Consciousness connection was damaging to document

Patrick Stoica → Pattern of Equity Loss Across Network
    → Ando Food, Inc. (2016-2017): Hooman Radfar CEO, Expa-incubated
        ↳ $150 equity repurchase (60,000 shares → $150), acquired by Uber Eats (Jan 2018), dissolved (Dec 2019)
        ↳ Hooman scrubbed Ando from LinkedIn (same pattern as Kapor/LendUp)
        ↳ Expa scrubbed Ando from portfolio (https://www.expa.com/companies/ando → 404)
        ↳ Systematic scrubbing: CEO + incubator + investor all removed same failed company
    → NS8 (2019-2020): Hired as fraud victim, CEO arrested for $123M fraud
        ↳ Lightspeed Ventures invested in NS8 ($123M fraud, Sept 2020)
        ↳ Lightspeed platformed Sasha at "Fintech in AI" event (Aug 17, 2023)
        ↳ Timeline: NS8 CEO arrested (Sept 2020) → I was hired at Puzzle (Oct 2020)
            → I was terminated (May 31, 2023) → Lightspeed platforms Sasha (Aug 17, 2023)
        ↳ Pattern: Same VC invested in fraud that victimized employees, then platformed
            CEO who hired those victims into next fraud (2.5 months after termination)
    → Puzzle Financial (2020-2023): Hired by CTO acknowledging NS8 fraud irony
        ↳ Terminated May 31, 2023, vested equity deleted from Pulley
        ↳ Gaslighted as "resignation," offered severance to waive fraud claims
    → Timeline Overlap: Working at Ando (2016-2017) WHILE LendUp raising
        Series B from Kapor (Jan 2016) and committing CFPB violations (2016-2019)
    → Same ecosystem: Expa (Garrett Camp → Uber → Ando acquisition)
        + Kapor (LendUp → Puzzle) + Lightspeed (NS8 → Puzzle platforming)
        = Three simultaneous exposures to interconnected fraud networks
    → Investor enablement pattern: QED (LendUp → Mission Lane profit),
        Kapor (LendUp → Puzzle cross-promotion), Lightspeed (NS8 → Puzzle platforming)
    → Scrubbing pattern: Kapor (LendUp), Hooman (Ando), Expa (Ando) = 3 entities, 2 failures

========================================================================
TIMELINE: 2012-2025 (13 YEARS)
JURISDICTIONS: CA, VA, DE, FL, DC (Interstate Commerce)
DOCUMENTED VICTIMS: 640,000+ (CFPB/FTC enforcement orders)
                    - LendUp: 140,000+ (CFPB 2021)
                    - Credit Karma: 497,425 (FTC 2022)
                    - Ongoing: Mission Lane active funnel (33.99% APR)
FEDERAL RECORD: SEC Whistleblower Submissions #17628-500-136-464,
                #17629-039-523-592, #17630-611-119-304
                (November 11-13, 2025)
========================================================================

Note: All connections verified through corporate filings, regulatory
enforcement orders, court judgments, and public records. Complete
documentation provided to Delaware DOJ (August 2023), FBI (NY 2023, SF 2025),
SEC (2023, 2025), California AG (November 2025), Virginia AG
(November 2025).

Network Chart: Key Players and Entities

LendUp (2012-2022)

Executives:

  • Sasha Orloff - CEO, Co-founder (2012-2019)
  • Jake Rosenberg - CTO, Co-founder, Director (step-brother)
  • Anuradha Shultes - President, General Manager of LendUp Loans (pre-2019)
  • Vijesh Iyer - COO (joined 2015)
  • Kimberly Morgan - COO
  • Kathleen Fitzpatrick - CTO
  • Austen Allred - Senior Manager, Growth (February 2016 - May 2017)

LendUp Alumni: Pattern of Replicated Fraud

Austen Allred → Lambda School/BloomTech (CFPB Enforcement April 2024)

LendUp Employment: Senior Manager - Growth (February 2016 - May 2017)

  • Joined one month before first CFPB violation period began (March 2016)
  • Left one month before first CFPB enforcement action (September 2016)
  • Worked during active period of deceptive lending practices

Lambda School / BloomTech Founded 2017:

Identical Deceptive Practices:

  • False metrics: Advertised 71-86% job placement rates, internal data showed ~50% (as low as 30%); tweeted 100% placement with sample size of one student
  • Hidden loan costs: Claimed ISAs were “not loans,” “didn’t create debt,” “risk free” — actually loans with average $4,000 finance charge
  • Deceptive marketing: “We don’t get paid until you do” and “We only make money when you do” while secretly selling loans to investors (got paid immediately, not when students got jobs)
  • Contract violations: Failed to include required Holder Rule provision protecting students’ legal rights when loans sold

CFPB Order:

  • 10-year personal ban from student lending activities
  • Permanent company ban from all consumer lending
  • $100,000 personal fine + $64,000 company fine
  • Must cease collecting on certain loans, eliminate finance charges for some graduates

Pattern: LendUp Senior Growth Manager learned deceptive lending playbook (hidden costs, inflated metrics, “risk-free” marketing while selling debt to investors), then replicated identical fraud pattern at Lambda School resulting in second CFPB enforcement and personal 10-year ban. Demonstrates LendUp’s institutional culture of deception spread through alumni network.

Leadership Transfer (January 2019):

Following the December 2018 asset sale to Mission Lane:

  • Sasha Orloff - Stepped down from CEO role and daily responsibilities; remained as board member and advisor to Mission Lane
  • Anuradha Shultes - Appointed CEO of LendUp (January 2019); 25+ years experience in subprime credit and financial services
  • Vijesh Iyer - Named interim CEO of Mission Lane (January 2019); previously LendUp COO since 2015; extensive credit card experience (Capital One, Cerberus Capital, PayPal)

Coordinated QED Board Positioning and False Public Narrative:

  • June 21, 2018: LendUp announces Nigel Morris (Capital One co-founder) as Board Chair and Frank Rotman (QED co-founder, early Capital One employee/longtime Chief Credit Officer) as Board Member; press release touts “nearly five million loans originated” and credit cardholder growth “more than quadrupled”
  • December 2018: Asset sale to Mission Lane (QED-backed acquisition vehicle); Nigel and Frank positioned as board leadership 6 months before sale to QED entity
  • January 10, 2019: LendUp announces “stand-alone company to accelerate expansion of its growing credit card business fueled by new capital injection”
    • Frank Rotman’s false public statements (with board-level knowledge of CFPB violations):
      • “As an independent entity, LendUp can reach its full growth potential, delivering even more open and transparent financial services to a much larger segment of consumers”
      • “As existing investors and board members, we’re intimately familiar with the team, product, and technology. The team has cracked the code on a very complex and technical business, and they have built a product that would be hard for any competitor to replicate”
      • “These moves set not just one, but two companies up for long-term success”
      • “Now, LendUp and Mission Lane are better positioned to serve the more than half of Americans who lack access to high quality financial services”
    • Reality contradicts every statement:
      • “Full growth potential” → CFPB permanent shutdown December 2021 (2 years later)
      • “Intimately familiar” → Board-level knowledge of repeated CFPB violations (2016, 2018)
      • “Cracked the code” → Yes, on regulatory violations and deceptive marketing
      • “Hard to replicate” → Most competitors don’t violate consent orders repeatedly
      • “Two companies up for long-term success” → LendUp permanently banned within 2 years; Mission Lane exhibits identical predatory patterns
      • “Better positioned” → Fire sale ($29M after $150M+ raised), $0 to shareholders, asset transfer to QED-backed entity
    • QED profit structure: Nigel Morris and Frank Rotman orchestrated board positioning (June 2018) → asset sale to QED vehicle (Dec 2018) → Frank provides false public narrative as “growth opportunity” (Jan 2019) while knowing regulatory violations would likely lead to shutdown

Organizational Restructuring:

December 2018: LendUp sold its credit card business (LendUp Card Services Inc., LendUp Card Holdings LLC, LendUp Technologies Inc.) to create Mission Lane as a standalone entity.

Following the asset sale, LendUp shifted focus to Ahead Financials (announced December 2020 as LendUp subsidiary, launched May 2021) targeting Black/Latino demographics under Shultes’ leadership.

LendUp ceased loan operations summer 2021. CFPB ordered permanent shutdown December 2021.

Corporate:

  • Address progression: 225 Bush St, SF → 237 Kearny St #372, SF → 1750 Broadway Fl 3, Oakland, CA 94612
  • Liquidated: June 24, 2022
  • Tax Delinquent: March 2023 ($390,332)
  • CFPB Shutdown: December 21, 2021
  • Restitution: $40M to 118,000+ victims

Post-Shutdown Surveillance (2023):

Despite CFPB shutdown (December 2021), liquidation (June 2022), and lendup.com domain being sold to entity claiming “no relation to former executives”:

  • “When Life Gives You Lemons, Make Lemonade!” tagline appeared on lendup.com AFTER CFPB ban (but Sasha had publicly announced board/advisory role in 2019)

LendUp lemonade tagline after CFPB ban Evidence-173: LendUp.com homepage showing “When Life Gives You Lemons, Make Lemonade!” tagline displayed AFTER CFPB ban (December 2021) and liquidation (June 2022). Green background with lemonade jar visual. “Simply Better Online Loans” tagline above. Toxic positivity continued post-enforcement. CRITICAL: Sasha’s own January 15, 2019 LinkedIn announcement stated he would maintain “board and advisory role at LendUp” - meaning he had formal connection during CFPB ban and this toxic positivity period. Whistleblower posted about tagline in 2023 (4+ years after announced advisory role); tagline removed shortly after, proving either Sasha maintained influence or “new leadership” monitored on his behalf. Current lendup.com notice claims “no relation to former executives” but contradicts Sasha’s own 2019 announcement. Same playbook as Puzzle’s “Glass half full Sunday” (December 2025).

  • Whistleblower posted about toxic positivity tagline in 2023 - calling out continued use of optimistic framing to mask predatory operations (4+ years after Sasha’s announced board/advisory role)
  • Tagline was removed shortly after whistleblower’s post - proving active surveillance of whistleblower documentation even years after domain sale
  • This proves surveillance connection to Sasha: Either he maintained influence through his announced board/advisory role, or whoever bought the domain was monitoring/removing content on his behalf; lendup.com notice claims “no relation to former executives” but Sasha’s own 2019 announcement contradicts this
  • Pattern: Same reactive monitoring as Puzzle (2025) - LendUp website changes after documentation (2023) → Puzzle reactive social media performances within 42 minutes of emails (2025)

Golden Parachutes (December 2018 Asset Sale):

  • Sasha Orloff - Advisor role at Mission Lane + stock options
  • Jake Rosenberg - Interim CTO at Mission Lane + stock options (conflicting interests as LendUp stockholder/director approving sale)

Political Ties:

KEY EVIDENCE: Netanyahu Financial Backing (March 2015)

In a March 2015 article by James Petras titled “Netanyahu: He Came, He Saw, He Conquered. The Power of Israel over the United States,” Sasha Orloff and Jacob Rosenberg (LendUp founders) were explicitly identified as financial backers of Benjamin Netanyahu. The article states:

“Prominent among Netanyahu’s financial backers are a group of prominent Zionist lumpen bourgeoisie, billionaires who lent to millions of borrowers at extortionate rates (between 1400 and 4000%) and played a leading role in the fraudulent mortgage induced crises of 2009-forward. They include Al Goldstein co-founder of AvantCredit and CashNetUSA; Sasha Orloff and Jacob Rosenberg founders of Lendup; Daniel Gilbert founder of QuickenLoans- a predator subprime lender; Ronald Arnall owner of Ameriquest…They used part of their ill-gotten gains to ease their consciences by donating millions to Israeli and US jewish causes. Being generous to Israel provides a sort of perverse forgiveness for screwing millions of Americans.”

This documentation, published one year before LendUp’s first CFPB violation (March 2015 vs. September 2016), establishes that the predatory lending pattern and political financial ties were publicly known before federal enforcement action.

The article places LendUp’s operations in broader political context: founders profiting from “extortionate rates” while providing financial backing to foreign political leaders, specifically during Netanyahu’s March 2015 speech to US Congress that bypassed the Obama administration.

Pagaya Technologies & Israeli Fintech Ecosystem (2014-2024)

Sasha Orloff’s involvement in Israeli fintech and lending technology spans a decade, from Netanyahu political backing (2015) through active investment in Israeli AI lending platforms (2024):

Theorem Technology Investment (2014-2024):

  • Theorem Technology, Inc. (OpenCorporates) - Machine-learning underwriting technology company that “powered billions of dollars of credit across its network since its founding in 2014” (per SEC closing announcement); Silicon Valley institutional asset manager focused exclusively on consumer credit space
  • Founded: 2014, Y Combinator Winter 2014 batch
  • Business Model: Algorithmic lending technology processing consumer credit data at massive scale
  • Sasha’s Role: Stockholder (2014-2024)
  • Co-investors: Y Combinator W2014 LLC, Altman Family LLC (Sam Altman’s personal family investment vehicle, confirmed via Jennifer Serralta who manages Sam Altman’s family office), Two Sigma Ventures I LLC
  • Acquired by Pagaya Technologies: October 22, 2024
  • Sasha’s Signature: October 15, 2024 on SEC Form F-3 Registration Statement as registered stockholder
  • Shares Received: Portion of 504,440 Pagaya Class A shares distributed to Theorem stockholders

Critical Timeline Conflict:

  • 2012-2021: CEO of LendUp (consumer lending, payday loans)
  • 2014-2024: Stockholder in Theorem Technology (ML underwriting processing “billions in credit”) - overlapping with LendUp operations
  • December 2021: CFPB permanent ban from consumer lending industry
  • 2014-2024: Continued as Theorem stockholder throughout ban (consumer credit data processing at scale)
  • October 2024: Receives Pagaya shares (Israeli AI lending platform)
  • 2020-present: CEO of Puzzle (accounting software with financial data access)

Due Diligence Failure & Taint by Association:

The fact that Sasha Orloff remained a Theorem Technology stockholder throughout his CFPB enforcement period (2016-2021) and permanent ban (2021-2024) raises critical questions about investor due diligence:

  • Public CFPB violations (2016, 2019): Co-investors continued relationship despite public enforcement actions
  • Permanent federal ban (Dec 2021): No removal from Theorem despite CFPB order prohibiting consumer lending
  • Regulatory gap exploitation: CFPB banned him from operating consumer lenders, not investing in consumer credit infrastructure
  • Co-investor liability: Y Combinator W2014 LLC, Altman Family LLC, and Two Sigma Ventures remained co-invested with CFPB-banned CEO in company processing “billions of dollars of credit” through 2024
  • Tainted by association: All Theorem stockholders who received Pagaya shares (Oct 2024) are now connected to documented fraud pattern
  • Pattern continuation: Co-investors’ failure to remove fraudulent actor enabled his continued consumer credit ecosystem access, leading to Puzzle (2019-present) with direct financial data access

Theorem is a machine-learning underwriting company processing consumer credit data at massive scale, co-owned by a CEO with permanent federal lending ban. The due diligence failure by institutional investors (YC, Altman Family, Two Sigma) enabled pattern continuation.

Why ML Underwriting Makes This Worse:

ML underwriting at scale depends on maintaining distance from scrutiny:

  • Algorithmic opacity: “The algorithm decided” shields discriminatory outcomes from interrogation
  • Scale without accountability: Automates biased lending across billions of dollars while claiming no responsibility for individual outcomes
  • Historical bias perpetuation: Models trained on discriminatory lending data encode racial bias as “objective” scoring
  • Regulatory arbitrage: Claims to be “technology,” not “lending,” to evade consumer protection oversight

The same investors (YC, Altman Family LLC) who:

  • Co-invested in ML underwriting that requires opacity to function
  • Are building/funding AI systems that depend on opacity (OpenAI)
  • Continued platforming Puzzle despite comprehensive fraud documentation
  • Benefited financially from Theorem’s consumer credit data processing

…are systematically invested in maintaining distance from scrutiny across multiple domains: consumer credit algorithms, AI training data sources, and suppression of fraud documentation. This is a business model that depends on opacity at scale.

Pagaya Technologies (Israeli AI Lending Platform):

  • Headquarters: Tel Aviv, Israel + New York, NY
  • Founded: 2016
  • Public: NASDAQ: PGY
  • Business: AI-powered lending and asset management platform
  • SEC Filing: Form F-3 Registration Statement (November 21, 2024, Document 0000950103-24-016634, 137 pages)
  • SECURITIES FRAUD INVESTIGATION (February 2025): Multiple law firms investigating claims on behalf of Pagaya investors
    • Iceberg Research report: “Pagaya: Using Other People’s Money to Hide Massive Losses” (Feb 11, 2025)
    • Block Leviton investigation: Pagaya down 13% and investigated for securities fraud
    • Pomerantz Law Firm investigation: Investigating claims on behalf of Pagaya investors (Feb 25, 2025)
    • Timeline: Sasha received Pagaya shares (Oct 2024) → Securities fraud investigations announced (Feb 2025)
    • Pattern: CFPB-banned CEO receiving shares in company now under securities fraud investigation
    • $229M credit impairments in Q4 2024 from legacy portfolio vintages (2021-2023) per Pagaya company history
    • $401M annual losses
    • “Re-marking” investments: Per MatrixBCG analysis, company is “actively re-marking these investments to mitigate future impacts” from 2021-2023 vintages while under securities fraud investigation
    • Q1 2025: Company claims GAAP profitability ($8M net income) despite ongoing investigations and massive impairments from legacy portfolios
    • Timeline pattern: Oct 2024 (Sasha receives shares) → Q4 2024 (massive impairments disclosed from 2021-2023 loans) → Feb 2025 (securities fraud investigations) → Q1 2025 (claims profitability while “re-marking” investments)
    • Activist short seller (Iceberg Research) published critical report highlighting use of other people’s money to hide losses
    • Concerns that Theorem acquisition (Oct 2024) may be used to absorb losses from bad loans
    • Underpricing risk by enabling subprime lenders to approve applicants they normally reject
    • Israeli fund connection: Pagaya Opportunity Fund (largest consumer credit fund in Israel) with Israeli investors reportedly “stonewalled” on redemptions

KEY EVIDENCE: SEC Stockholder Signature Pages Document YC + Sam Altman Family + Sasha Co-Investment

Primary Federal Evidence (Evidence-72, 73, 74):

Altman Family LLC stockholder signature page Evidence-72: Y Combinator W2014, LLC signature (Kirsty Nathoo, YC CFO/Partner, Oct 21, 2024). Federal documentation of YC-Altman Family-Sasha co-investment in Theorem (2014-2024). Explains continued Puzzle platforming as financial conflict.

Sasha Orloff stockholder signature page Evidence-73: Sasha Orloff signature (Oct 15, 2024). CFPB-banned CEO receiving Pagaya shares, documenting continued consumer credit involvement throughout ban.

Y Combinator W2014, LLC stockholder signature page Evidence-74: Altman Family LLC signatures (Carmen Beckwith & Jennifer Serralta, Sept 30-Oct 2, 2024). Sam Altman’s family investment vehicle (confirmed by NY Post).

Complete List of Confirmed Theorem Technology Stockholders (From SEC Filing):

Key Individuals:

  • Sasha Orloff - CFPB-banned CEO, LendUp founder, now Puzzle CEO
  • Hugh Edmundson - Theorem co-founder (individual signature + “Edmundson 2014 Security Trust” signed by Natalie Schiavone, Trustee)
  • Ryan Podolsky - Theorem co-founder (named in Merger Agreement for specific sections)
  • Alex Gerko - Individual stockholder
  • 75+ additional individual investors/employees (full list in SEC filing)

Institutional/Corporate Entities:

  • Altman Family LLC - Sam Altman’s family investment vehicle (signatories: Carmen Beckwith & Jennifer Serralta)
  • Y Combinator W2014, LLC - YC’s Winter 2014 batch investment entity (signatory: Kirsty Nathoo, YC CFO/Partner)
  • Two Sigma Ventures I, LLC - Major quantitative hedge fund’s VC arm (signatories: Riz Thakir, SVP Finance; Vignesh Rajendran, Managing Director; Colin Beirne, Authorized Signatory)
  • Croton Partners, LLC - Investment entity (signatories: James Chung, Managing Director; Thomas Gang, CFO)

What This Proves:

  1. Sam Altman Family Co-Investment CONFIRMED: “Altman Family LLC” received Pagaya shares in October 2024 acquisition, documenting co-investment with Sasha Orloff in Theorem (2014-2024)
  2. Y Combinator Investment CONFIRMED: “Y Combinator W2014, LLC” shows YC invested in Theorem in Winter 2014 batch, creating direct financial alignment with CFPB-banned CEO
  3. Financial Conflict Documented: YC’s continued Puzzle platforming explained by co-investment relationship, not “founder community loyalty”
  4. Regulatory Evasion Scale: All these investors/entities now hold Pagaya shares, benefiting from Sasha’s continued consumer credit ecosystem involvement despite CFPB permanent lending ban
  5. Due Diligence Failure: Institutional investors (YC, Altman Family LLC, Two Sigma Ventures) remained co-invested with CFPB-banned CEO in company processing “billions of dollars of credit” through ML underwriting—nobody removed him despite public federal enforcement
  6. Taint by Association: All 75+ Theorem stockholders who received Pagaya shares are now connected to documented 13-year fraud pattern; co-investment with federally banned individual in consumer credit infrastructure creates liability exposure
  7. Lock-Up & Registration Rights: All stockholders subject to lock-up agreements restricting sales in tranches over 3-12 months; all have “registration rights” requiring Pagaya to register shares for public sale

Source: Pagaya Technologies Ltd. Registration Statement on Form F-3, filed November 21, 2024, SEC File No. 333-283243, includes complete stockholder signature pages documenting all Theorem Technology investors who received Pagaya shares in October 22, 2024 acquisition.

Pattern of Israeli Fintech Ecosystem Integration:

  • 2015: Identified as Netanyahu financial backer (James Petras article)
  • 2014-2024: Theorem Technology stockholder (ML underwriting tech that “powered billions of dollars of credit” processing consumer data at scale)
  • 2016-2021: Public CFPB violations while co-invested with YC, Altman Family LLC, Two Sigma—no removal
  • 2021-2024: Continued as Theorem stockholder THROUGHOUT permanent federal lending ban—institutional investors maintained relationship
  • 2024: Pagaya Technologies stockholder (Israeli AI lending platform acquired Theorem, Oct 22, 2024)
  • 2024: General Catalyst lead investor in Puzzle

Regulatory Evasion:

CFPB permanently banned Sasha from consumer lending operations (December 2021), but he continued involvement in consumer credit ecosystem through investment vehicles:

  • Theorem Technology stockholder throughout ban (2014-2024)
  • Received Pagaya shares (Israeli AI lending) post-ban (October 2024)
  • CEO of Puzzle with financial data access (2020-present)

Regulatory Gap Exploitation: Ban applies to lending operations but not investment participation, allowing continued profit from consumer credit industry despite federal prohibition. Investment in consumer credit asset management (Theorem) and AI lending technology (Pagaya) maintains ecosystem involvement while technically complying with operational ban.

Y Combinator Financial Conflict: YC co-invested with Sasha in Theorem (2014), creating direct financial alignment that explains continued Puzzle platforming despite comprehensive fraud documentation. Not “founder community loyalty” - actual co-investment relationship providing structural incentive to suppress documentation.

KEY: OpenAI Integration & Sam Altman Conflict (2023-2024)

The financial conflict extends beyond Y Combinator to OpenAI, with documented evidence of ongoing network integration while Sam Altman’s family maintains co-investment with Sasha:

Timeline of OpenAI Network Integration:

  • 2014-2024: Altman Family LLC (Sam Altman’s personal family investment vehicle) co-invested with Sasha Orloff in Theorem Technology (consumer credit asset management)
  • May 2023 (before May 3): I raised concerns internally about adopting OpenAI API early with customer financial data submission
    • Specific technical objection: Questioned why Puzzle was using expensive, slow OpenAI API API calls for simple transaction categorization when a basic machine learning categorizer model would be faster, cheaper, and more appropriate for the task
    • Data privacy concern: Submitting customer financial data to third-party API (OpenAI) raised obvious security and privacy risks
    • AI Hackathon exploitation pattern: Puzzle ran aggressive AI hackathons pushing employees to rapidly build GPT prototypes; junior developer pressured to work weekends on GPT prototype; company culture treated plugging mass amounts of customer financial data into experimental GPT prototypes as acceptable practice; after July hackathon, CTO told winner “he shouldn’t have won the hackathon” - creating hostile environment where employees pressured to work weekends, then undermined when they succeed
    • Leadership confrontation: I sent email to HR and leadership about unacceptable crunch work practices stemming from AI pressure; leadership scheduled “Sync” meeting where I confronted Sasha directly and gave 3 months notice if practices continued
    • July 6, 2023 escalation: I sent follow-up email documenting ongoing harassment pattern: “John Cwikla [CTO/Cofounder] has been harassing many employees since the start. Now he’s telling [employee] he shouldn’t have won the hackathon. If that’s a joke, it’s cruel gaslighting. If it’s real, that’s incorrigible behavior for a leadership role.”
    • Pattern: Legitimate engineering concerns about inappropriate technology choice and reckless data handling met with termination rather than discussion; documentation of CTO harassment pattern ignored
  • May 3-4, 2023: Sasha posts tweet thread about OpenAI data privacy in apparent reaction to my internal complaints, appearing to attend Sam Altman event, stating: “I want to clarify a misconception. We never train or store any data you submit to OpenAI. It’s your data.” Quotes OpenAI terms: “OpenAI does not use data submitted by customers via our API to train OpenAI models or improve OpenAI’s service offering”
  • May 2023 (one week after my confrontation): Another employee terminated after being told to “take a week off to consider if Puzzle was right for him”; returned from week off to find card access closed, then access cut during planning meeting
  • May 31, 2023: I was terminated (at least 28 days after raising OpenAI API concerns internally, less than a month after Sasha’s public OpenAI defense tweets)
  • June 6, 2024: Sasha interviews Sowmya, OpenAI’s controller (formerly Square/Rippling), discussing: “Automating reconciliation processes with AI”, “Building robust financial systems from scratch”, “The future of accounting teams”
  • December 18, 2024: Sasha posts about attending “a recent dinner hosted by a famous OpenAI employee (wink, wink)” with “other AI startups in San Francisco” discussing “how AI will transform work”
    • “Wink, wink” = active concealment: Why use coy language instead of naming the OpenAI employee? The evasive phrasing demonstrates consciousness that the relationship should remain hidden
    • Pattern of suppression: LendUp blog post still exists but all photos of Sam Altman selectively removed (April 2017) - photographic evidence only accessible via web.archive.org; private OpenAI dinners (Dec 2024) deliberately unnamed; Theorem co-investment (2014-2024) never publicly disclosed until whistleblower documentation
    • This proves Sasha functions as financial data collection arm: Maintains ongoing private access to OpenAI leadership while Puzzle operates as ultimate aggregate (accounting software = all financial data); Brex/Deel/Gusto data flows INTO Puzzle (Sept 2025 Brex integration); both Puzzle and Brex have independent OpenAI partnerships (Brex-OpenAI March 2023 confirmed “millions of transactions”, Puzzle-OpenAI AI categorization); General Catalyst portfolio coordination (Hemant Taneja orchestrating Puzzle/Deel/Gusto/Brex data aggregation)

Puzzle’s OpenAI Integration:

From Puzzle’s AI features page:

  • AI Lookup: “Syncing with OpenAI, a user clicks on a button and ‘asks AI’ for help in categorizing a transaction”
  • AI Categorizer: Auto-categorizes 90-95% of company transactions
  • AI Insights: “AI-generated insights that help you better understand your business, financial health, and metrics”

Pattern: Puzzle processes customer financial data (transactions, vendor information, business metrics) through OpenAI API while CEO maintains ongoing network access to OpenAI employees.

Multi-Layered Conflict of Interest:

  1. Financial Alignment: Altman Family LLC → Theorem Technology → Sasha (2014-2024)
  2. Business Integration: Puzzle → “Syncing with OpenAI” → Processing customer financial data
  3. Network Access: Ongoing OpenAI employee relationships (controller interview, private dinners)
  4. Retaliation Timeline: I raised data privacy concerns (May 2023) → Sasha posted OpenAI data defense (May 3-4) → I was terminated (May 31, 28 days later)

Why This Matters:

  • Sam Altman’s family co-invested with CFPB-banned CEO in consumer credit (2014-2024) - never publicly disclosed
  • Same CFPB-banned CEO now runs accounting software “syncing with OpenAI” (Sam Altman’s company)
  • Sam/Sasha relationship actively concealed: LendUp blog post with Sam photos (April 2017) scrubbed from open web, only accessible via web.archive.org; private OpenAI dinners use “wink, wink” language to hide attendees
  • I raised concerns about early OpenAI API adoption with customer data (questioned why expensive OpenAI API was used for simple categorization instead of appropriate ML model)
  • Termination followed 28 days after Sasha defended OpenAI data privacy publicly
  • Ongoing network integration continues (controller interview 2024, private dinners 2024) while relationship remains deliberately hidden

The Concealment Proves Consciousness of Guilt:

If this were purely legitimate institutional relationships, why selectively delete all photos of Sam from the LendUp blog (keeping the text)? Why use “wink wink” language about OpenAI dinners instead of openly stating who’s hosting? The active suppression demonstrates they know the relationship would not survive public scrutiny.

Sasha Orloff: Financial Data Collection Arm for Sam Altman’s AI Empire

This explains why both Y Combinator and Sam Altman’s networks have structural incentives to suppress fraud documentation:

  • Data aggregation network: Startups (YC, GC portfolio, broader ecosystem) use multiple financial tools → Brex (expenses), Deel (payroll), Gusto (HR), banks → all data flows INTO Puzzle (ultimate aggregate: accounting software = comprehensive financial dataset)
  • Dual OpenAI partnerships: Both Puzzle and Brex independently partner with OpenAI
    • Brex → OpenAI: March 2023 partnership, “millions of transactions”
    • Puzzle → OpenAI: AI categorization features, “syncing with OpenAI” for transaction processing
    • Puzzle aggregates MORE data than Brex (Brex data + Deel + Gusto + banks + revenue + all accounting data)
  • General Catalyst coordination: Hemant Taneja (GC CEO, Puzzle board 2023-2025) orchestrates portfolio: GC lead investor in Puzzle + anchor investor in Deel ($300M Series E) + Gusto board member → coordinated data aggregation across portfolio companies
  • Institutional infrastructure: YC Research created OpenAI (October 2015), Sam donated $10M, researchers were YC employees
  • Preferential access pipeline: YC startups get early access to AI models, Puzzle benefits from this
  • Direct financial relationships: Theorem co-investment (Altman Family LLC + Sasha, 2014-2024) - 10 years of co-investment in consumer credit proving direct financial alignment beyond YC institutional ties
  • Network access: Private OpenAI dinners/interviews, controller conversations - all deliberately concealed

YC created the institutional infrastructure that birthed OpenAI, then maintained preferential access for YC portfolio companies. Financial conflicts across multiple entities controlled by the same person (Sam Altman: YC President 2014-2019, YC Research founder 2015, OpenAI CEO 2015-present, Altman Family LLC investor in Theorem 2014-2024 with CFPB-banned CEO).

Puzzle: The Ultimate Data Aggregate

Puzzle operates as the ultimate data aggregation layer in this extraction infrastructure:

  1. Accounting software = comprehensive financial access: Transactions, vendors, revenue, burn rate, payroll data (Deel/Gusto integrations), expense data (Brex integration), cap table data (via connected systems)
  2. Data flows INTO Puzzle from all network partners: Brex (expenses), Deel (payroll), Gusto (HR/payroll), banks (transactions) → all synchronized into Puzzle’s general ledger as the accounting layer
  3. More comprehensive dataset than any individual partner: While Brex only has expense data, Puzzle aggregates Brex + Deel + Gusto + banks + revenue + all accounting data = most complete financial picture
  4. Independent OpenAI partnerships:
    • Brex → OpenAI: Confirmed March 2023 partnership, “millions of transactions”
    • Puzzle → OpenAI: Direct API sync for AI categorization features, “syncing with OpenAI” for transaction processing
    • Both companies independently send data to OpenAI; Puzzle has the more comprehensive dataset

Whether other partners (Deel, Gusto) send data directly to OpenAI is unclear, but both Brex and Puzzle definitively do. Puzzle positions itself as the ultimate aggregate that captures financial data from across the startup ecosystem—much of it YC and General Catalyst portfolio companies—and has its own direct OpenAI pipeline processing the most comprehensive financial dataset.

The entire network benefits from this data extraction infrastructure, which is why they protect Sasha despite $51M+ in federal enforcement and 5 SEC complaints.

Questioning Puzzle’s fraud threatens the entire YC-to-OpenAI data pipeline. The concealment, the “wink wink” dinners, the scrubbed blog posts, the 10-year co-investment never disclosed - this isn’t founder loyalty. It’s systematic suppression of a financial data extraction operation that feeds Sam Altman’s AI empire.

Sasha Orloff tweet about OpenAI data privacy, May 4, 2023 Sasha’s May 3-4, 2023 tweet: “We never train or store any data you submit to OpenAI.” I raised OpenAI concerns internally → Sasha’s public tweet → my termination (May 31). Preemptive damage control.

Netanyahu tweet announcing Sam Altman phone call, June 5, 2023 June 5, 2023 (5 days after my termination): Netanyahu-Altman call announced. “They discussed opportunities and challenges facing…Israel regarding artificial intelligence.” Last major public Netanyahu-OpenAI statement before Oct 7.

Active Israeli PM-OpenAI CEO relationship at exact time whistleblower terminated for questioning OpenAI integration.

Geopolitical Alignment Pattern (2015-2024)

October 8, 2023 - Support for Israel post-October 7:

Sasha Orloff October 8, 2023 post

Sasha Orloff (Oct 8, 2023, 10:07 AM, 644 views): “I ❤️ sunrises for their calm optimism. Todays agenda - ☕️🗓️, homework and games with kids, a prayer for 🇮🇱. and filming a video for a huge new product launch this week. Lots to accomplish. Let’s get at it!” Sunrise photo included.

November 18, 2023 - Opposition to United Educators of San Francisco ceasefire resolution:

Sasha Orloff November 18, 2023 post

November 18, 2023: United Educators of San Francisco post (43K views) - “On November 15th, United Educators of San Francisco adopted a call, by supermajority, for an immediate ceasefire in Gaza and a resolution to the ongoing violence.”

Sasha Orloff responds (Nov 19, 2023, 12:55 AM, 358 views): “Focus on educating our kids in SF with STEM and leave global politics to the federal government. This is a disgrace and a waste of time.”

Network Alignment Pattern:

These posts occurred during active whistleblower suppression period (May 31, 2023 termination → November 2023), concurrent with:

Historical context: Sasha backed Netanyahu financially in March 2015 (documented in James Petras article), one year before LendUp’s first CFPB violation (Sept 2016). This established pattern predates both LendUp’s regulatory issues and current Puzzle fraud by nearly a decade.

Sam Altman’s Israeli connections:

  • 2016: New Yorker profile reveals prepper stockpile includes “gas masks from the Israeli Defense Force”
  • 2023: Met with Israeli President Isaac Herzog and high-tech leaders, praising Israel’s “pivotal role in the AI revolution” (TRT World, Dec 2024)
  • 2023: Invested in Apex, an Israeli AI startup founded by former members of Unit 8200 (Israeli army’s elite surveillance unit) (TRT World, Dec 2024)
  • June 6, 2023: Netanyahu-Altman call (5 days after whistleblower termination, documented above)
  • December 4, 2024: OpenAI announced partnership with Anduril Industries (defense tech company) for counter-drone systems and military AI applications, after quietly removing “military and warfare” ban from terms of service in January 2024

Anduril’s “radical Zionist” founder: Palmer Luckey, Anduril founder, is a self-described “radical Zionist” who declared “Israel has my [and our] unqualified support” at Wall Street Journal’s Tech Live conference (TRT World, Dec 2024). In a 2024 Tablet Magazine interview, Luckey complained that his “well-meaning but less-Israel-aligned colleagues” fail to understand Israel’s importance for “maintaining the balance of power.”

Network convergence: Ross Fubini (XYZ Venture Capital, former Kapor Capital partner during LendUp) was an early Anduril investor; General Catalyst also invested in Anduril ($28B valuation). The same investors funding LendUp/Puzzle consumer fraud are also funding military tech that partners with OpenAI, which processes data from Puzzle/Brex/YC portfolio companies. The 10-year Theorem co-investment (Altman Family LLC + Sasha Orloff, 2014-2024) connects all these patterns.

Sasha Orloff at private OpenAI dinner, December 18, 2024 December 18, 2024: Sasha posts about “dinner hosted by a famous OpenAI employee (wink, wink)” discussing AI. CFPB-banned CEO maintains private OpenAI leadership access 19 months post-whistleblower termination while Puzzle “syncs with OpenAI” processing customer financial data.

“Wink, wink” = active concealment. Why hide which OpenAI employee is hosting? Pattern: Same as LendUp blog (April 2017) - blog still exists but all photos of Sam Altman selectively deleted, photographic evidence only via web.archive.org. The relationship is systematically hidden.

Puzzle's promotional material featuring OpenAI controller, June 6, 2024 June 6, 2024: Puzzle marketing featuring Sowmya (OpenAI controller) with OpenAI branding - “USING AI TO LEVEL UP ACCOUNTING.” Formal production quality suggests approved relationship.

CFPB-banned CEO marketing with OpenAI employees while “syncing with OpenAI,” 13 months after my termination for raising API concerns.

Insights Servicing Inc. (2015-2023): UNDISCLOSED

Officers:

  • Blake Byers - Director (Google Ventures)
  • Anuradha Shultes - President (also LendUp President/GM; later LendUp CEO Jan 2019)
  • Kimberly Morgan - COO (also LendUp COO)
  • Kathleen Fitzpatrick - CTO (also LendUp CTO)
  • Sasha Orloff - President/CEO (CA filing, personally signed; also LendUp CEO 2012-2019)
  • Michelle Silva Fernandes - Service agent

Officer Transfer Pattern:

Multiple executives held simultaneous leadership roles at both LendUp and Insights Servicing, creating undisclosed parallel control structure. When LendUp underwent leadership transition in January 2019 (Orloff stepped down, Shultes became CEO), Insights Servicing officers maintained their positions until company tax delinquency in March 2023.

Corporate:

  • Incorporated: DE Nov 6, 2015 (File #5768857)
  • CA filing: July 7, 2016 (Orloff signature)
  • Address: 225 Bush St Suite 1100, SF (Flurish Inc./LendUp earlier address)
  • Domain: [email protected]
  • Shares: 100 authorized
  • Tax Delinquent: March 2023 ($408.78)
  • Never disclosed to LendUp shareholders

Mission Lane LLC (2018-present)

Leadership Timeline:

  • Vijesh Iyer - Founding CEO (Dec 2018-Aug 2019), Executive & Co-Founder (Sep 2019-Feb 2020); previously LendUp COO/President (2015-2018) where he built the credit card business from scratch; raised $300M debt + $200M equity; hired permanent CEO; currently Head of Financial Services/Fintech at Coupang (Seoul)
  • Shane Holdaway - CEO (Aug/Sep 2019-Feb 2024); former Capital One executive (10+ years subprime credit cards) and ex-CEO Barclays US Consumer Bank
  • Brandon Black - CEO (Feb 2024-present); former Capital One executive, ex-CEO Encore Capital Group, board member since 2019

LendUp-Affiliated Advisors (Golden Parachutes):

  • Sasha Orloff - Advisor (Dec 2018-Sep 2019) + stock options; falsely claims “founder/co-founder” status despite advisory role hired post-acquisition; never held CEO or executive operating role at Mission Lane
  • Jake Rosenberg - Interim CTO (Jan 2019-Sep 2019), Advisor (Sep 2019-Jul 2020) + stock options

Asset Acquisition Structure (2018):

  • Incorporated: DE November 2018 (acquisition vehicle for LendUp credit card business)
  • Asset Sale: December 19, 2018 ($29M, $0 to LendUp shareholders)
  • Capital One pattern: Iyer (7 years at Capital One, subprime credit cards), Holdaway (Capital One executive), Black (Capital One executive)
  • Golden parachutes: Orloff, Rosenberg, 2 others received stock options despite $0 to shareholders

False Founder Claims:

  • Vijesh Iyer built LendUp’s credit card business (250K+ customers, $100M+ assets), then served as first CEO of Mission Lane post-spinoff, legitimately claims “Founding CEO/Co-Founder”
    • Vijesh’s LinkedIn (LendUp COO/President 2015-2018): “I also led the effort to build a new credit card product from scratch. We assembled a great team; created the top rated card in our segment (Customer’s choice at Credit Karma); and grew the business to serve 250k+ customers (>$100M in assets) with strong risk performance & high profit margin. This credit card business was spun-off in December 2018 and is now Mission Lane. I moved to Mission Lane to serve as the interim CEO.”
  • Sasha Orloff was advisor with no operating role, yet claims “founder/co-founder” on LinkedIn, Puzzle website, and media appearances
    • Sasha’s LinkedIn (current as of Nov 2025) claims: “Cofounder & CEO, Mission Lane, 2014-2018” (Mission Lane LLC incorporated Dec 14, 2018)
    • Absurd simultaneous roles on same LinkedIn profile:
      • “Advisor” (Part-time): Nov 2018 - Jul 2019 (9 months) - states “I remained an advisor to help support the transition to new leadership and new ownership”
      • “Cofounder & CEO”: 2014 - Jul 2019 (5 yrs 7 mos) - claims CEO role from 2014
      • Both roles listed on same profile = simultaneously claiming to be “CEO” AND “Part-time Advisor supporting transition to new leadership”
      • Acknowledges “new leadership and new ownership” in Advisor description while claiming CEO title through July 2019
      • Mission Lane incorporated December 14, 2018 = impossible to be CEO from “2014”
    • Contradiction: Vijesh explicitly states “I led the effort to build” the credit card product “from scratch” as LendUp COO/President
  • Corporate structure: Mission Lane was acquisition vehicle incorporated Nov 2018; asset sale completed Dec 19, 2018; Vijesh Iyer (not Sasha) led company as Founding CEO while Orloff received advisor role + stock options as part of golden parachute

Ongoing Federal Consumer Protection Litigation (2023):

  • Multiple federal lawsuits filed in 2023 alleging Fair Credit Reporting Act violations
  • Pattern documented: Failing to investigate consumer disputes, continuing to report inaccurate information after notification, refusing to block identity theft accounts
  • Federal courts in Florida, New York, Oregon documenting systematic consumer harm
  • Demonstrates ongoing consumer protection violations years after LendUp CFPB shutdown

CFPB Explicit Ban on Selling Consumer Data:

The CFPB’s proposed stipulated final judgment and order prohibits LendUp from:

  1. Making new loans
  2. Collecting on outstanding loans to harmed consumers
  3. Selling consumer information
  4. Making misrepresentations when providing loans or collecting debt

LendUp was explicitly banned from monetizing the data of 140,000+ fraud victims.

Mission Lane Exhibits LendUp’s Pattern TODAY (2024-2025)

Mission Lane is CURRENTLY operating with LendUp’s playbook. The same patterns that led to CFPB permanent ban, $40M restitution, and 140,000+ victims are active today through Mission Lane:

Better Business Bureau reviews (1.26/5 stars, 97 reviews) document systematic fraud patterns matching LendUp’s CFPB violations:

  • Payment processing manipulation: Withdrawing funds from customer accounts, claiming “insufficient funds,” charging late fees + return payment fees while keeping the money; 14-day processing delays (not the stated 7 days) to generate additional late fees
  • Account draining: $2,000+ unauthorized withdrawals, refusing to reverse fraud; one victim: “$100 payment entered as $10,000” cleaned out entire bank account
  • Transaction reclassification scam: Regular purchases coded as “cash advances” with $5/day fees on each transaction; victims discovering this years later
  • Interest rate manipulation: “Variable” rates shooting to 36% maximum immediately after getting balance; charging interest even after paying off balance completely; monthly payments increasing despite no new purchases
  • Aggressive data collection beyond customers: Demanding “selfies to unlock card” (March 2025); requiring driver’s licenses + bank statements from third-party payers (friends/family helping with payments, not Mission Lane customers); building identity databases of extended networks beyond cardholder base
  • Credit reporting fraud: Reporting 101% utilization when actual is 25%; CFPB complaint filed, not fixed after 2+ months
  • Refusing hardship assistance: Won’t work with consumer credit counseling; targeting disabled/fixed-income consumers; “No support or settlement offers available”

Representative complaints (2024-2025): “Even if you discontinue the use of this card… your interest keeps accumulating. Trying to pay it off is the most difficult thing I have ever done” • “I paid my entire statement balance off on June 2, 2025. Today is August 6th and the payment still has not been credited” • “They charge you interest on whatever is higher… very sketchy and could only be understood by a lawyer. Probably illegal.”

Mission Lane as Data Monetization Vehicle:

LendUp was explicitly banned from selling consumer data (2021). Mission Lane (2018 “spin-out,” operating through LendUp’s shutdown and beyond) is systematically collecting:

  1. Biometric data (selfies, driver’s license photos)
  2. Network identity data (demanding ID/bank statements from non-customers who help with payments)
  3. Social graphs (mapping financial dependency relationships: disability benefits recipients + third-party support networks)

This data collection goes far beyond credit card operations. Combined with ongoing identity theft (unauthorized withdrawals), fraud (refusing to reverse), and credit reporting manipulation, Mission Lane functions as the data monetization vehicle for what LendUp was federally banned from doing.

Active, systematic consumer harm (2024-2025) continues using the Capital One → QED → Mission Lane pipeline that Nigel Morris built. The federal lawsuits (2023) and BBB documentation prove the fraud pattern was scaled, not shut down, with the data harvesting operation transferred to a new entity unrestricted by LendUp’s CFPB ban.

The Complete Pattern Match: LendUp → Mission Lane (Ongoing)

LendUp Pattern (2012-2021)Mission Lane Pattern (2024-2025)
Predatory APRs targeting subprime✓ 33.99% APR targeting credit score 604 (“Poor” to “Fair”)
Payment processing manipulation for fees✓ 14-day delays (not 7), “insufficient funds” while keeping money
Interest rate manipulation✓ Variable rates to 36% max, interest charges post-payoff
Credit reporting fraud✓ Reporting 101% utilization when 25%, refusing corrections
Refusing hardship assistance✓ Won’t work with consumer credit counselors, targeting disabled
Aggressive data collection✓ Biometric (selfies), network identity (third-party payers’ IDs)
Toxic workplace (Glassdoor)✓ Two layoffs (2023), reviews cite lack of transparency, favoritism
QED/Capital One investor network✓ Same investors, Capital One executive pipeline (Holdaway, Black)
Credit Karma customer acquisition funnel✓ Credit Karma promotes Mission Lane 4.7/5 rating (post-FTC settlement)
Federal regulatory action✓ Multiple federal FCRA lawsuits (2023), ongoing BBB fraud documentation

Mission Lane is not a “reformed” version of LendUp. It is LendUp’s playbook continuing through a corporate structure designed to evade the CFPB ban. Same investors (QED), same Capital One executive pipeline, same subprime targeting, same predatory practices, same toxic workplace culture, and enhanced data harvesting (biometric + network identity) that LendUp was federally prohibited from doing.

The Credit Karma → Mission Lane funnel (497,425 FTC victims → 33.99% APR cards) demonstrates the network learned nothing from $51M+ in federal enforcement actions across LendUp, Credit Karma, and Ahead. They scaled the fraud pattern through corporate layering.

Mission Lane’s 2025 Industrial Scale: Chalk Case Study Reveals Automated Predatory Lending Infrastructure

Chalk.ai Mission Lane Case Study (published 2024, endorsed by Michael Kuhlen 5 months ago)

While Mission Lane publicly claims to help “millions of Americans left behind by traditional financial services,” their own infrastructure partner’s case study reveals the industrial scale of what is functionally LendUp 2.0 with better ML ops.

Operational Scale (Current 2025):

  • 2.5M+ customers evaluated monthly via automated “Credit Line Increase Program (CLIP)”
  • 6,000+ features spanning credit bureau APIs, Plaid transaction data, multi-year behavioral histories
  • Real-time credit decisioning at sub-second speeds during application
  • Automated fraud detection monitoring customer transactions
  • Batch overnight evaluations of entire customer base for credit line manipulation

The ML Infrastructure:

Mission Lane deployed Chalk (feature store platform) to power:

  1. “Credit Line Increase Program (CLIP)” - Evaluates 2.5M+ customers monthly to determine credit line increase eligibility
  2. Live credit decisioning - Real-time credit decisions and initial line assignments
  3. Fraud detection - Behavioral signals evaluated during online interactions
  4. Customer UX data - Educational credit scores surfaced in-app via APIs
  5. Agent tooling - Support agents have live access to customer identity features

Michael Kuhlen’s Role: LendUp → Mission Lane ML Pipeline

Michael Kuhlen (current “ML Solutions & Strategy” at Mission Lane):

  • Jan 2014 - Jan 2019: Built LendUp’s loan underwriting ML models during CFPB violation period
  • Jun 2014 project (still listed on LinkedIn): “Case Study: Need for Short-Term Credit Exceeds Reach of Physical Branches” - propaganda mapping framing predatory lending as “serving underbanked areas”
  • Jan 2019: Joined Mission Lane as Principal Data Scientist (Asset Sale month)
  • July 2024: Publicly endorsed Chalk deployment: “It’s been super fun working with Chalk at Mission Lane. Not only has it greatly improved our feature engineering and machine learning infrastructure… but I’ve also personally learned a ton in the process! 🚀”

His LendUp LinkedIn description:

“We believe in ladders, not chutes.”

CFPB’s finding: The ladders were false advertising. The credit building was systematically fraudulent.

Same Language, Industrial Scale:

Chalk’s framing:

“Mission Lane is democratizing credit access for millions of Americans overlooked by traditional financial services.”

This is LendUp’s “ladders not chutes” propaganda at 17x scale (LendUp harmed 140,000 consumers; Mission Lane operates with 2.5M+ customers).

What “Data Science” Actually Means Here:

The Chalk case study unwittingly documents the infrastructure for industrial-scale predatory lending:

Chalk FeatureTranslation
”2.5M overnight evaluations”Algorithmic credit line manipulation while customers sleep
”6,000+ features”Extracting maximum data from vulnerable populations
”Real-time fraud detection”Monitoring and controlling customer behavior
”Credit Line Increase Program”Automated expansion of predatory credit exposure
”Training/serving consistency”ML models reliably execute extraction mechanisms
”Self-serve for data teams”Easy deployment of new predatory features

The Irony:

Chalk brags about solving Mission Lane’s “feature engineering bottleneck” and achieving “training/serving consistency.” Translation: They’ve perfected the automation of the lending practices that got LendUp shut down by the CFPB, just with better infrastructure.

What This Proves:

✅ Mission Lane is LendUp 2.0 at industrial scale - Not a side project, 2.5M+ customers
✅ Same talent pipeline - Michael Kuhlen + others documented built both systems
✅ Same predatory framing - “Democratizing credit” = “ladders not chutes”
✅ Actively investing in growth (2025) - Recent infrastructure deployment, public endorsements
✅ Sasha continues profiting via SPV - At massive scale with sophisticated ML automation
✅ “Data science” = automated extraction - 6,000 features, real-time decisioning, overnight batch evaluations

Frank Rotman’s 2016 Brag:

Before Mission Lane even existed, QED’s Frank Rotman documented LendUp’s regulatory strategy in his blog post “Smelling the Weeds” (February 29, 2016):

“Compliance and Regulatory Affairs? LendUp has many experienced people on staff including a former Enforcement Attorney from the CFPB.”

Context: Written 4.5 years before CFPB shutdown (December 2021).

What this reveals:

  • Regulatory capture strategy - Hired CFPB enforcers to evade enforcement
  • Insider knowledge of CFPB mechanisms - Had former enforcement attorney designing compliance
  • Still got shut down for harming 140,000+ consumers - Despite insider advantage
  • Frank Rotman personally documented the strategy - QED’s consciousness from day one
  • The fraud was deliberate, not ignorant - They knew exactly what CFPB would look for and chose predatory practices anyway

Even with a former CFPB Enforcement Attorney on staff, LendUp systematically defrauded consumers. This wasn’t incompetence—it was calculated extraction with regulatory insider knowledge used to maximize harm while delaying consequences.

Mission Lane inherited this same calculated approach, now automated at industrial scale with ML infrastructure that processes 2.5M customers monthly.


Credit Karma (2007-present; acquired by Intuit 2020)

QED Investors Portfolio Company

FTC Enforcement Action (September 2022):

  • FTC action announced September 2022 for deceptive “pre-approved” credit card offers
  • Settlement: $3M paid to FTC for consumer refunds
  • Violations: Misrepresented consumers as “pre-approved” or having “90% odds” of approval when many were denied
  • Harm: Hard credit inquiries on consumers’ credit reports; potential credit score damage; wasted time
  • Complaints surge: ~30 complaints in 5 years before FTC action; ~900 complaints within 5 months after announcement - demonstrating “tip of the iceberg” pattern

FTC Claims Process (December 2023):

Forbes Platforming (2025):

  • Forbes “Best Brands for Value” #235 - Credit Karma ranked as top value brand despite FTC settlement for deceiving 497k+ consumers
  • Forbes pattern: Platforms QED portfolio companies (Credit Karma #235 value brand, Meow CEO via paid Samsung BrandVoice, Nigel Morris Forbes Midas List #90) while suppressing fraud investigation of other QED-backed entities
  • Credibility laundering operation: Forbes monetizes rankings and paid partnerships to platform companies/investors with documented federal enforcement actions while refusing to investigate pattern across portfolio

KEY: Credit Karma FTC Order - Psychological Experimentation Recordkeeping

The FTC Consent Order Section VII.E includes non-standard recordkeeping provisions specifically requiring Credit Karma to preserve records of psychological manipulation experiments:

“records of any market, behavioral, or psychological research, or user, customer, or usability testing, including any A/B or multivariate testing, copy testing, surveys, focus groups, interviews, clickstream analysis, eye or mouse tracking studies, heat maps, or session replays or recordings concerning the subject matter of the Order”

Why This Recordkeeping Requirement Matters:

The FTC doesn’t add provisions like “eye tracking studies,” “heat maps,” and “session replays” to standard consent orders. These specific requirements demonstrate:

  1. FTC knew Credit Karma was running psychological manipulation experiments on credit-challenged consumers
  2. Federal awareness of systematic behavioral testing to optimize deceptive “pre-approval” claims
  3. The complaint explicitly states: Credit Karma “conducted A/B testing” and “deliberately employed” pre-approval claims “to influence consumers’ behavior” while knowing they conveyed “false certainty”

QED Board-Level Knowledge:

  • Frank Rotman (QED co-founder, Forbes Midas List) sits on Credit Karma’s board of directors
  • Board-level visibility into psychological experimentation data and customer funneling practices
  • Nigel Morris (QED founder, Capital One co-founder) has decade-long public positioning as obsessed with measurement and experimentation

Watch: Nigel Morris on “Test and Learn” - Startup Grind (May 22, 2013)

May 22, 2013 interview: Nigel Morris describes Capital One’s “test and learn” approach as “like cheating at cards because you knew the answer” and emphasizes being “one of the original big data companies.” Recorded 2 years before Netanyahu backing (2015), 3 years before LendUp’s first CFPB violation (2016).

Quote: “I wanted to be a clinical psychologist… went in believing I was going to be really excited by Freud and Jung and left as a raving empiricist and if it can’t be measured it doesn’t exist.”

Pattern: Capital One’s data-driven playbook applied across QED portfolio companies targeting subprime consumers.

Additional positioning:

Fintech Conference Platforming Pattern:

Sasha Orloff on stage at LendIt Fintech USA Sasha at LendIt Fintech USA (pre-2022). Caption: “On stage face.” LendIt platformed Sasha during fraud period, then rebranded to Fintech Nexus (2022) and hosted Nigel Morris May 2023 (4 months post-FTC Order).

Mission Lane Infrastructure Coordination:

  • Early Mission Lane designer reports being asked to build landing pages for vendors, specifically mentioning Credit Karma
  • LendUp publicly listed Credit Karma on their site as partner
  • Pattern: QED-backed entities building direct infrastructure for customer funneling between portfolio companies running psychological experiments

Conscious Coordination:

QED Investors has board-level knowledge (Frank Rotman’s Credit Karma board seat) of:

  • Psychological manipulation experiments targeting credit-challenged consumers (FTC-documented)
  • Customer funneling infrastructure to Mission Lane (LendUp successor)
  • Regulatory violations at both entities targeting the same subprime demographic

The landing page infrastructure + board seat + shared investor demonstrates coordination, not coincidence. QED profits from psychological experimentation (Credit Karma) feeding customers to high-APR cards (Mission Lane) while sitting on the board of the company running the experiments.

Investor Portfolio Pattern:

The same investor backed Credit Karma (FTC settlement for deceptive credit offers), LendUp (CFPB shutdown, see The Fraud Pattern), and Mission Lane (incorporated as LendUp acquisition vehicle).

QED Investors (co-founded by Nigel Morris and Frank Rotman) double-dipped: invested in LendUp pre-shutdown, then invested in Mission Lane which acquired LendUp’s assets at fire sale price ($29M after raising $150M+). Nigel Morris served on LendUp’s board of directors. The firm profited from both the fraud entity and the acquisition vehicle that bought the assets for pennies on the dollar after regulatory enforcement.

The pattern extends across the portfolio: QED backed Credit Karma (FTC settlement, 497k victims) AND Mission Lane (LendUp asset acquisition vehicle), which now actively funnel customers between each other. The same investor profits from both entities in the customer acquisition pipeline—Credit Karma promotes Mission Lane cards, Mission Lane charges 33.99% APR to subprime consumers. Both have regulatory violations targeting credit-challenged demographics.

KEY EVIDENCE: QED Investors Portfolio-Wide Double-Dipping Pattern

LendUp → Mission Lane: Backed fraud entity (LendUp, $150M+ raised) pre-CFPB shutdown, then backed acquisition vehicle (Mission Lane, $29M fire sale). Profited from both sides.

Credit Karma → Mission Lane: Backed both entities in active customer funnel. Credit Karma (FTC settlement, 497k victims) promotes Mission Lane (33.99% APR, LendUp successor). Both have regulatory violations targeting same subprime demographic. Investor profits from customer acquisition pipeline connecting two portfolio companies with federal enforcement actions.

Not bad due diligence. Conscious enablement with structured profit across interconnected portfolio.

Credit Karma Continues Promoting Mission Lane Post-Settlement:

Despite Credit Karma’s FTC settlement for deceptive “pre-approved” offers (September 2022) and Mission Lane’s origins as LendUp acquisition vehicle (CFPB shutdown December 2021), Credit Karma actively features and promotes Mission Lane credit cards:

  • Mission Lane Cash Back VisaÂŽ Credit Card page displays 4.7/5 rating with 300 member reviews
  • Detailed statistics: average credit score 604, average credit limit $1,728, targets “Poor” to “Fair” credit (75% of members)
  • Card features 33.99% variable APR targeting same subprime demographic as LendUp/Ahead
  • Vijesh Iyer’s LinkedIn confirms (LendUp COO/President 2015-2018): “I also led the effort to build a new credit card product from scratch. We assembled a great team; created the top rated card in our segment (Customer’s choice at Credit Karma); and grew the business to serve 250k+ customers (>$100M in assets) with strong risk performance & high profit margin. This credit card business was spun-off in December 2018 and is now Mission Lane.”
  • The product being promoted: Vijesh built it; CEO Sasha Orloff claims “founder/co-founder” despite hiring as advisor post-acquisition; Credit Karma promotes it
  • Conflict of interest: Credit Karma serves as customer acquisition funnel for Mission Lane (LendUp successor entity) while both companies have regulatory violations targeting credit-challenged consumers
  • Cross-promotion demonstrates portfolio companies continue marketing to vulnerable demographics despite regulatory actions against both entities; Credit Karma’s active promotion of Mission Lane post-settlement makes it a direct participant in the fraud pattern, not merely an adjacent case

The Profit Structure:

Corporate documents prove CEO Sasha Orloff was hired as advisor to Mission Lane post-acquisition (December 2018 - September 2019), not founder as publicly claimed. Advisor roles include equity compensation as standard practice.

If CEO retains equity from Mission Lane advisor role (standard advisor compensation), Credit Karma’s active promotion of Mission Lane credit cards allows the LendUp CEO to continue profiting from the same subprime customer base via affiliate referral fees despite CFPB permanent ban from consumer lending.

The customer acquisition funnel:

  1. Credit Karma (FTC settlement, 497k victims) promotes Mission Lane as top recommendation
  2. Mission Lane (LendUp asset acquisition vehicle) charges 33.99% APR to same subprime demographic
  3. CEO profits from referral fees while operating Puzzle Financial as “reformed” founder
  4. Mission Lane C&D (August 11, 2023) threatened legal action for documenting this Credit Karma → Mission Lane connection, defending the profit structure, not reputation

The Mission Lane C&D threatened legal action despite never employing the whistleblower. This reveals network coordination to protect ongoing profit structure circumventing CFPB ban.

Mission Lane objected to documentation connecting Credit Karma and Mission Lane. This is the exact connection that allows continued exploitation of credit-challenged consumers through regulatory arbitrage.

Ahead Financials LLC (2020-2022)

Executives:

  • Anuradha Shultes - CEO (former LendUp President)
  • Kimberly Morgan - COO (former LendUp COO)
    • Dual roles during CFPB shutdown: LendUp COO (Jan 2020 - Jun 2022) + Ahead Co-Founder/COO (Dec 2020 - Apr 2022) = 16-month overlap
    • LinkedIn claims: “Surpassed industry benchmarks for customer acquisition in 9 months with a successful exit”
    • Actual timeline: “Successful exit” (Apr 2022) = same month Ahead app stopped, immediately before $1.575M judgment
    • Next role: COO at Beam (formerly Edquity) administering $200M+ in public benefits to 300K families (June 2022 - June 2025)
    • Current: Independent Board Director at Funding U (Jan 2025), runs Mason-Morgan Advisory

Corporate:

  • Incorporated: DE April 2020 (File #7952919)
  • CA filing: March 29, 2021
  • Address: 1750 Broadway Suite 300, Oakland (same as LendUp)
  • Agent: VCORP Services CA (same as LendUp/Insights)
  • “Coming soon” page: August 2019 (16 months before announcement)
  • App stopped: April 8, 2022
  • “Acquired” by Kinly: June 2022
  • Banking partner: The Bancorp Bank (same partner as Kinly)

Bancorp Due Diligence Failures:

As documented by fintech analyst Jason Mikula (archive link; current site), Bancorp’s decision to partner with Ahead/LendUp raises serious questions about the bank’s third-party risk management processes:

“How Ahead could have passed such diligence checks is unclear. Ahead’s common ownership with LendUp, with its history of compliance failures and questionable financial condition, should have been an immediate and serious red flag to Bancorp.”

Banks entering such partnerships are advised to examine:

  • Business experience and qualifications
  • Financial condition
  • Legal and regulatory compliance
  • Risk management and controls
  • Information security
  • Operational resilience

Bancorp declined to answer questions about:

  • What due diligence was conducted on LendUp/Ahead
  • Whether it had assessed LendUp/Ahead’s solvency
  • How Bancorp would protect Ahead’s consumers and ensure continuous fund access if Ahead failed

Within approximately one year of launching (May 2021 - June 2022), Ahead collapsed and was transferred to Kinly during LendUp’s liquidation—validating regulators’ BaaS concerns about banks’ ability to oversee such relationships and protect vulnerable consumers.

Why This Matters:

  • Same bank partner (Bancorp) facilitated both Ahead and Kinly
  • Kapor Capital invested in both LendUp and Kinly (2021 acquisition)
  • Regulatory failures at LendUp (multiple CFPB enforcements) were public knowledge
  • Bancorp apparently partnered with Ahead despite this documented history
  • Pattern demonstrates systematic due diligence failures enabling fraud entity shuffling

Lavish Campaign Before Collapse (May-June 2021):

Timeline demonstrates rapid collapse:

  • May 20, 2021: Hypebeast documents lavish “Ahead for All” campaign with Fairfax Studios
  • June 14, 2021: $2.5M Rolling Loud contract signed
  • July 5, 2021: Ahead’s final social media post (featured Fairfax Studios logo)
  • August 4, 2021: Customer complaints surface on that final post (30 days after Rolling Loud contract)
  • February 21, 2022: Rolling Loud lawsuit filed for $1.575M non-payment
  • April 8, 2022: Ahead app stopped working
  • April 2022: Kimberly Morgan (COO/Co-Founder) exits Ahead - lists as “successful exit” on LinkedIn after “surpassing industry benchmarks for customer acquisition in 9 months”
  • June 2022: “Acquired” by Kinly during LendUp liquidation; $1.575M judgment entered against Ahead same period

The “Successful Exit” That Wasn’t:

Kimberly Morgan’s LinkedIn claims Ahead “Surpassed industry benchmarks for customer acquisition in 9 months with a successful exit” (Dec 2020 launch → Apr 2022 exit). But the timeline shows:

  • “9 months of customer acquisition” = May 2021 lavish campaign → August 2021 customer complaints about locked accounts and unpaid referrals
  • “Successful exit” (Apr 2022) = Same month Ahead app stopped working, immediately before/during Rolling Loud lawsuit resolution
  • Pattern: Exit before consequences (lawsuit judgment, customer fund access issues, Kinly acquisition during liquidation)

This is the exact same pattern as other LendUp executives: extract customer funds/marketing spend during brief operational period, exit claiming “success” before regulatory/legal consequences materialize, move to next entity (Kimberly → Beam, administering $200M+ in public benefits to 300K families June 2022).

Customer Abandonment (August 2021):

Ahead customer complaints on InstagramAhead customer complaints Aug 4, 2021 on final post (July 5): “stopped paying referral bonuses,” “locked out for no reason,” “no response from support.” Later comment: “report to cyber crime authorities…lost my money investing in Ahead.”

Pattern demonstrates: Within one month of signing $2.5M Rolling Loud contract and launching multi-million dollar celebrity campaign, customers already reporting unpaid referral bonuses, account lockouts, customer support abandonment; company went dark (final post July 5) while customers desperately sought support; complaints posted on what would be Ahead’s last communication; fund access issues during transition to Kinly corroborate documented pattern of customers locked out during entity shuffling.

Fairfax Studios Inc. / Thirty Two West LLC: Shell Company Network (2020-2023)

Key People:

  • Marvin Bing - Founder, CCO Fairfax Studios; Agent for both shell companies; Director of Art, Amnesty International; NAACP member

Corporate Structure - Two Separate Legal Entities:

Thirty Two West LLC (NY #5737099):

  • Incorporated: April 10, 2020 (14 months before Fairfax Studios)
  • Jurisdiction: New York
  • Agent: Marvin Bing
  • Status: Active
  • Directors/Officers: Marvin Bing (agent), Shana Melius (DOS process agent)

Fairfax Studios Inc. (DE #5976860):

  • May 20, 2021: Hypebeast documents Marvin Bing as “Fairfax Studios head” producing Ahead campaign content
  • Incorporated: DE June 7, 2021 - 18 days after Hypebeast article
  • 7 days before $2.5M Rolling Loud contract
  • Rolling Loud lawsuit: Feb 21, 2022 (Case 2022-003284-CA-01)
  • Default judgment: May 23, 2022 ($800K against Fairfax)
  • Tax Delinquent: March 2023 ($408.78)

Anuradha Shultes’ Sworn Testimony: Admitted to Giving $800,000 to Shell Company

Anuradha Shultes sworn affidavit for Ahead Financials

April 6, 2022 sworn affidavit in Rolling Loud lawsuit: Anuradha Shultes, as “Chief Executive Officer and Manager of Ahead Financials, LLC,” testified under oath (State of California, County of Alameda): “On June 22, 2021, Ahead wired $800,000.00 to Fairfax Studios, Inc. a/k/a Thirty Two West, LLC (Fairfax) with the understanding the funds were payment for a Rolling Loud, LLC (Rolling Loud) Miami sponsorship.” She continues: “Based on information and belief, Fairfax improperly retained the $800,000.00 wire and never remitted any portion of the funds to Rolling Loud for payment of the Miami sponsorship.” This sworn testimony treats two separate legal entities as interchangeable: Fairfax Studios Inc. (DE, incorporated June 7, 2021, 15 days before wire) and Thirty Two West LLC (NY, incorporated April 10, 2020, 14 months earlier) - both with Marvin Bing as agent. Using “a/k/a” (also known as) demonstrates shell company network, not just one intermediary. Fairfax later received $800K default judgment (May 23, 2022) and defaulted rather than defend, proving the payment intermediary scheme.

Pattern demonstrates: Marvin Bing operated as “Fairfax Studios head” and produced content for Ahead’s multi-million dollar campaign before incorporating Fairfax Studios, then incorporated 7 days before signing $2.5M Rolling Loud contract; pre-existing shell company network with Thirty Two West LLC (April 2020) established 14 months before Fairfax Studios (June 2021); Anuradha Shultes admitted under oath that Ahead sent $800,000 to “Fairfax Studios, Inc. a/k/a Thirty Two West, LLC” - treating two separate legal entities as interchangeable; entities existed to serve as payment intermediary and liability buffer in sponsorship fraud scheme; Fairfax defaulted on $800K judgment rather than defend, proving consciousness of fraud

Kinly/BeKinly (2022-2023)

Corporate:

  • bekinly.com registered: Sept 10, 2021 (2 days after CFPB lawsuit)
  • App launched: June 17, 2022
  • Address: 1750 Broadway Suite 300, Oakland (same as LendUp/Ahead)
  • Phone: 1-833-33-AHEAD (Ahead’s phone number)
  • Email: [email protected] (Ahead’s email)

aheadmoney.com infrastructure timing suggests coordination:

  • Domain created September 2011, dormant through 2018
  • August 7, 2019: “Coming soon” page archived - 7 months after Sasha announced board/advisory role at LendUp (January 15, 2019) and 1 month before Puzzle incorporated (September 2019); preparation during his announced board tenure while simultaneously preparing next company
  • July 22, 2020: Migrated to AWS operational nameservers (ns-1189.awsdns-20.org, ns-1983.awsdns-55.co.uk, ns-261.awsdns-32.com, ns-578.awsdns-08.net) - deployment when Ahead launched from LendUp address
  • September 15, 2022: Moved back to GoDaddy parking nameservers - operations ceased
  • April 1, 2025: California branch entity dissolved via Franchise Tax Board forfeiture (unpaid taxes) - remained registered 3 years after operations ceased
  • DNS timeline correlates with Ahead lifecycle; preparation began during Sasha’s announced board/advisory tenure (exact end date unknown, but August 2019 prep occurred 1 month before Puzzle launch)
  • Corporate Structure: Multiple entities - Kinly Inc (US), Kinly Holding B.V. (Dutch holding company)
  • Trademark Opposition: March 19, 2023 - USPTO Opposition No. 91283091, Kinly Holding B.V. v. Be Tenth, Inc.; defendant defaulted (failed to file answer)
  • Tax Judgment: March 28, 2023 - Pennsylvania Department of Revenue judgment $5,987.77 (Case 2023-02549, Cumberland County)
  • Tax Judgment Satisfied: June 2, 2023 - Authority to satisfy filed (31 days after Greenwood acquisition announcement)

Kinly account statement showing LendUp/Ahead infrastructureKinly Account Statement (June 1-30, 2022) showing identical infrastructure to LendUp/Ahead: 1750 Broadway Suite 300, Oakland (same physical address), phone number 1-833-33-AHEAD (Ahead’s phone), email [email protected] (Ahead’s email domain). Statement dated 15 days after Kinly app launch (June 17, 2022), proving “acquisition” was rebrand using existing Ahead infrastructure.

Ahead → Kinly Transition: Customer Fund Access Blocked (June 2022):

As documented by Jason Mikula, during the Ahead → Kinly transition (June 2022), customers were blocked from transferring funds for extended periods:

  • Kinly’s automated phone system: “Please be advised that the transfer funds feature is currently not available. We are working diligently to resolve this issue.”
  • Customer service agent told Mikula that Ahead had “rebranded its name to Kinly”
  • Multiple customers reported being unable to spend or transfer funds for over a month
  • New customers reported errors when attempting to verify information to open accounts
  • One customer: “I made an account around 6/13… I haven’t been able to use any of my money in that account. And since I can’t transfer funds it’s stuck there. If I close the account it will take 3 to 5 weeks to get the check in the mail. So for over a month I haven’t been able to use any of my money.”
  • Mikula’s own Ahead account was closed without notice, though it still showed a positive balance; he received no communication from Ahead, Kinly, or Bancorp; when he called, he was told there was “no reason noted for the closure” and was promised a callback in 1-2 business days—he never heard back and never received his funds

Pattern demonstrates: “Acquisition” was asset transfer during liquidation, not functional company transition; customers lost access to funds during entity shuffle; neither Ahead nor Kinly websites mentioned customer transition or fund blockages; validates regulators’ BaaS concerns about protecting vulnerable consumers when fintech vendors fail.

Greenwood Acquisition and Documented Struggles (May 2023):

Acquired by Greenwood May 2, 2023 (35 days after tax judgment; bringing together “two of the largest Black-owned fintechs”)

  • January 2024 Washington Post investigation documents systematic failures after raising millions from JPMorgan Chase, Bank of America, Wells Fargo following George Floyd protests
  • Failed promises: Only 150,000 of 700,000 waitlist opened accounts; delayed financial products (checking accounts year late, credit cards and business loans still not launched)
  • California cease-and-desist: December 2022 agreement with Department of Financial Protection and Innovation to stop calling itself a “bank” and disclose it’s a fintech platform
  • The Gathering Spot lawsuit: July 2023 former business partner alleged “financial disarray” and unpaid debt; settled August 2023; Gathering Spot regained control December 2023
  • Layoffs and executive departures: “Three top executives, who were recruited with much fanfare, have either left or been laid off” per WaPo
  • Roll-up strategy outside banking: $50M Gathering Spot acquisition, Valance (job recruitment), production studio—acquired portfolio of companies outside finance while failing to deliver core banking products

Pattern demonstrates: Multi-entity corporate structure (Kinly Inc, Kinly Holding B.V.) complicates accountability and asset tracing; Greenwood acquired Kinly May 2, 2023 despite active unresolved legal proceedings—USPTO trademark opposition (March 19) and PA tax judgment (March 28, satisfied June 2); post-Floyd capital influx enabled acquisition spree and “financial disarray” rather than sustainable banking infrastructure; troubled post-acquisition relationships (Gathering Spot lawsuit, separation); regulatory scrutiny for misrepresenting banking status; shell game continues through corporate restructuring while victims lose access to funds and accountability disappears into failed roll-up strategy

DashAi / DashFi Inc. (2022-present)

Executives:

  • Anuradha Shultes - Founder/CEO (LendUp President/CEO → Insights President → Ahead Manager)

Corporate:

  • Incorporated: DE September 23, 2022 (File #DashFi, Inc.)
  • CA branch: March 20, 2024 (228 Santa Monica Blvd, Suite 300, Santa Monica, CA 90401)
  • Website: dash-fi.com

KEY EVIDENCE: Parallel Operations (2020-2021)

Three companies operating simultaneously with same leadership:

2020-2021:

  • LendUp (Anu Shultes, CEO 2019-2021) - under CFPB enforcement, shut down December 2021
  • Puzzle (Sasha Orloff, CEO) - incorporated September 2019, I was hired October 2020
  • Ahead (Anu Shultes, CEO & LendUp CEO) - incorporated April 2020, operating from LendUp address (1750 Broadway, Oakland)

Pattern:

  • Anu ran TWO companies simultaneously (LendUp + Ahead) as CEO of both while LendUp faced federal enforcement
  • Sasha founded Puzzle (2019) after LendUp asset sale (Dec 2018)
  • Both extracted new entities from LendUp: Puzzle (Sasha, 2019-present), Ahead → DashAi (Anu, Sept 2022)

Timeline Demonstrates Pattern Continuation:

DashFi Inc. incorporated September 2022—while Ahead Financials faced $1.575M Rolling Loud fraud judgment (February 2022) and during LendUp liquidation proceedings.

Product:

AI-powered auto lending platform automating dealership loan desking, underwriting, and financing workflows. Branded as “DashAi” (DashFi Inc. DBA DashAi). Per dash-fi.com (November 2025):

  • “AiDO” (AI Desking Officer): Automated desking solution that “Automates 80-90% of the Desking Officer’s work”
  • Claims: “Ai-optimized offer terms,” “reduces time to get to a profitable ‘Yes’ with your customers,” “unifies existing DMS and CRM software”
  • Dealer benefits: “Faster Transactions, Increased Profitability, Higher Sales Rates, Greater Warranty and Bundled Servicing Sales”
  • Consumer benefits: “Lower Monthly Payments, Lower Maintenance Costs, Lower Risk of Missed Loan Payments”
  • Status: “Currently in Beta as we continue adding new products and offers” (per website footer)

Pattern: Scaling Predatory Lending Through AI Automation

The same CEO who ran LendUp (CFPB permanent ban for “repeatedly lying to consumers,” 140,000+ victims) is now building AI systems to automate loan origination and F&I (Finance & Insurance) workflows at dealerships. This demonstrates exactly what regulators should scrutinize: automating the same predatory patterns that resulted in federal enforcement, now at scale through “AI-optimized” decisioning.

The marketing promises “Win-Win for Dealers & Consumers” while obscuring that this founder’s prior “financial inclusion” platform defrauded 140,000+ consumers and was permanently shut down by CFPB. The automation of underwriting, offer optimization, and sales workflows creates infrastructure to scale predatory practices across the auto lending ecosystem.

Diversity Theater as Credibility Infrastructure:

TiE Women’s Program Silicon Valley 2025 featured Anuradha Shultes as CEO of DashAi, describing her as:

“a seasoned fintech and operational leader who has scaled financial products and lending systems at industry level. She knows how lending actually works — not just in theory, but in the real-world mess of contracts, risk, processing, and compliance.”

What TiE Women’s Program Omitted:

  • LendUp President/CEO (2015-2021): Company received CFPB permanent ban December 2021 for defrauding 140,000+ consumers, $40M restitution ordered for “repeatedly lying to consumers”
  • Insights Servicing President (2015-2023): Undisclosed LendUp subsidiary with identical officers, same headquarters address, never disclosed to LendUp shareholders
  • Ahead Financials CEO (2020-2022): $1.575M court judgment for Rolling Loud sponsorship fraud; customers locked out of accounts reporting unpaid referral bonuses and abandoned customer support

TiE’s bio states she “knows how lending actually works” without mentioning her company was permanently banned by federal regulators for consumer fraud.

Pattern Demonstrates: Identical to Kapor Capital’s documented pattern—using “financial inclusion” and “underrepresented communities” branding (TiE Women’s Program, diversity theater) while obscuring fraud history; Shultes moves from CFPB-banned predatory lender to AI-automated loan origination platform, potentially scaling same predatory patterns through automation; incorporated new entity while previous entities faced court judgments and regulatory shutdown; credibility infrastructure (women-focused accelerator, pitch platforms) provides legitimacy cover without due diligence on founder’s documented fraud history; TiE Women’s Program champions “women founders who scale” without disclosing that this founder scaled a lending operation that defrauded 140,000+ consumers and was permanently shut down by federal regulators

Puzzle Financial (2019-present)

The pattern continues. While LendUp faced CFPB shutdown (December 2021) and Ahead Financials collapsed amid fraud judgments (2022, CEO Anuradha Shultes then incorporated DashFi Inc. DBA DashAi same year - AI automation for auto lending), the same CEO incorporated Puzzle Financial (September 2019). Same playbook: photoshopped metrics, false credentials, data collection infrastructure disguised as SaaS. Shultes now scales predatory lending patterns through AI automation at auto dealerships.

Leadership:

  • Sasha Orloff - CEO, Co-founder
  • John Cwikla - CTO, Co-founder
  • Jake Rosenberg - Advisor (Oct 2019-Present per LinkedIn)

Corporate:

  • Founded: Sept 2019 (as Valencia Data)
  • Rebrand: 2021
  • Address: San Francisco
  • Claims: “successful founder” of LendUp & Mission Lane
  • Reality: LendUp CFPB shutdown, Mission Lane advisor not founder

Puzzle Financial: Manufactured “Thought Leader” Credibility

March/April 2023: Marketing Strategy Announced

During company all-hands meeting, marketing hire explicitly announced: “We’re turning Sasha into a thought leader” - not “amplifying Sasha’s expertise” or “sharing Sasha’s vision,” but openly acknowledging manufactured credibility as marketing strategy. This initiated coordinated campaign across multiple platforms (podcast appearances, LinkedIn content with infographics and various post formats) while simultaneously exploiting and terminating employees.

April 26, 2023: Empire Startups Fintech Conference (35 Days Before Termination)

One month after announcing “thought leader” strategy and 35 days before terminating whistleblower, Sasha appeared at Empire Startups Fintech Conference NYC with Sophia Xiao (General Catalyst Head of Creation, Puzzle Board Observer since September 2019) for fireside chat: “Lessons learned in incubating a huge idea inside a VC firm.”

Sasha Orloff and Sophia Xiao on stage at Empire Startups Fintech Conference 2023 Sasha and Sophia Xiao (GC Board Observer) at Empire Startups Fintech NYC, April 26, 2023 (35 days before my termination): “Lessons learned in incubating a huge idea inside a VC firm.” Xiao witnessed $312 revenue / $10M+ burn yet publicly validated “success” narrative.

Sophia Xiao’s role demonstrates institutional enablement:

  • Board Observer at Puzzle since September 2019 (founding) - present through entire $312 revenue / $10M+ burn period
  • Chief of Staff to Hemant Taneja (Dec 2018 - May 2022) when Puzzle was incubated
  • Head of Creation (May 2022 - present): “founding and fractional COO to Creation portfolio companies”
  • Previously Sequoia Scout and Sequoia Ascent mentor

Key messaging from conference:

  • “Why incubate inside a VC? VC’s offer supportive environment of industry experts… Puzzle incubated in General Catalyst’s Creation Fund”
  • “Why did we create Puzzle? …FinTech startups are my personal favorite because they solve specific problems that people really need”
  • “What is the relationship between AI, Accounting and CFOs? …AI enables CFOs and accountants to focus on strategic tasks by taking care of the busy work”

Pattern demonstrates: Board Observer who witnessed 3 years of minimal revenue ($312) and $10M+ burn providing public platform to promote “incubated inside VC” success narrative. Conference occurred during same period as:

  • Planning employee termination (35 days before May 31, 2023)
  • Launching “For Every Founder” competitor directory (April 2023)
  • Pricing page finally added after 3 years (April 2023)
  • All while actual financials suggest data operation not SaaS business

Sophia Xiao’s participation as both Board Observer (aware of actual financials) and public platform provider (promoting false narrative) demonstrates conscious institutional enablement one month before whistleblower termination.

April 28, 2023: Podcast Hypocrisy

Sasha appeared on re:designing podcast (hosted by Grace B. Kim) discussing:

  • “Design as the first hire”
  • “Enabling healthy debates”
  • “Making the unapproachable approachable”

Reality at time of podcast (December 2022 - May 2023):

  • First designer laid off (December 2022); had to sell possessions and return to home country after Sasha apparently dropped immigration paperwork
  • Another employee terminated one week after I confronted leadership about crunch work (May 2023); told to “take week off to consider if Puzzle was right for him,” returned to find card closed and access cut
  • I was terminated May 31, 2023 (at least 28 days after raising OpenAI API concerns)
  • December 2022 board meeting: Sasha blamed team for “not high-performing,” “you’re replaceable” tone, “limited seats,” created hostile environment
  • Multiple reports of Sasha publicly yelling at employees

Immigration Exploitation Pattern:

  • Sasha apparently dropped immigration paperwork for at least two employees
  • First designer forced to leave country, sell possessions
  • Then Sasha “adamantly saying he’ll help you find a job”
  • Using immigration status as leverage over vulnerable employees

Pattern: Manufactured external credibility (podcast, LinkedIn “thought leader” content) while internally exploiting employees, retaliating against dissent, and dropping immigration paperwork for vulnerable workers.

Puzzle Financial: Key Enablers

Dasha Shunina - GTM Strategist

  • Forbes contributor (undisclosed Puzzle employment)
  • Women Tech Meetup founder (Puzzle sponsor)
  • “Talks with Dasha” host (CEO interview platform)
  • 48 Forbes articles Dec 2023-Oct 2025 (200K+ views)
  • Covers YC startups, founder challenges, accounting tech
  • Systematic platform exploitation for employer marketing

Key Patterns

  • Same addresses: 1750 Broadway, Oakland shared by LendUp/Insights/Ahead/Kinly
  • Same registered agent: VCORP Services CA across multiple entities
  • Same executives: Anu Shultes, Kimberly Morgan across LendUp/Insights/Ahead
  • Coordinated timing: Entities incorporated days before key events
  • Simultaneous abandonment: All became tax delinquent March 2023
  • Undisclosed relationships: Insights never mentioned despite same officers/address

Investor, Media, and Network Complicity

The fraud pattern documented above persisted for 13 years (2012-2025) not through secrecy, but through systematic enablement by venture capital, media outlets, Y Combinator, and diversity-branded institutions that continued promotional activities despite comprehensive documentation.

Y Combinator (Sam Altman President 2014-2019, Michael Seibel YC Accelerator CEO 2016-2024, Garry Tan CEO 2023-present)

  • Backed LendUp through YC (Winter 2011)
  • Sam Altman presidency (2014-2019) covered: LendUp’s first CFPB violation (2016), $150M Series B raise (2016), second CFPB consent order (2018), Mission Lane asset sale (Dec 2018)
  • Backed Puzzle through continuation (Garry Tan era)
  • Notified August 5, 2023 via two emails: [email protected] and [email protected] (subject: “wtf happened at lendup”), and directly to Michael Seibel (Partner, former Managing Director and CEO of YC accelerator 2016-2024, transitioned to Partner Emeritus March 2025) documenting “11 years of negligence and securities fraud” across ”[…], YCombinator, Alexis Ohanian, Sasha Orloff, Jake Rosenberg, Mission Lane, Puzzle Financial, and more”
  • Continued Puzzle promotion post-notification
  • No public statement, accountability measures, or acknowledgment of pattern across LendUp → Puzzle

Financial Conflict of Interest: Theorem Technology Co-Investment

Y Combinator’s continued platforming of Puzzle despite comprehensive fraud documentation is explained by direct financial alignment through co-investment in Theorem Technology, Inc.:

  • Theorem Technology, Inc. - Silicon Valley-based institutional asset manager focused on consumer credit space
  • Founded: 2014, Y Combinator Winter 2014 batch (YC W2014)
  • Business: Consumer credit asset management
  • Acquired by Pagaya Technologies: October 22, 2024
  • Deal terms: Cash + 504,440 Pagaya Class A shares distributed to stockholders

Co-investors in Theorem Technology:

  • Y Combinator W2014, LLC (Kirsty Nathoo, CFO/Partner signature)
  • Sasha Orloff (LendUp CEO, signed October 15, 2024 as stockholder)
  • Altman Family LLC (Carmen Beckwith signature) - Sam Altman’s personal family investment vehicle
    • Confirmed by Jennifer Serralta: COO of Sam Altman’s family office, managed Altman’s $85M real estate purchases (2020-2021) including $43M Hawaii estate through LLCs (NY Post, November 30, 2023)
    • Same person signed Theorem Technology documents: Jennifer Serralta signature appears in SEC filing alongside Carmen Beckwith for Altman Family LLC
    • Timeline: Altman was YC President (2014-2019) when Altman Family LLC invested in Theorem Technology (2014)
  • Two Sigma Ventures I, LLC (Riz Thakir signature)

Timeline of Conflict:

  • 2014: YC backs Theorem Technology (YC W2014), Sasha invests in same company
  • 2014-2019: Sam Altman serves as YC President while YC + Altman Family LLC co-invested with Sasha in consumer credit asset management
  • 2016: LendUp’s first CFPB violation ($6.3M settlement) - YC had financial relationship with Sasha through Theorem
  • 2018: LendUp’s second CFPB consent order - YC + Altman Family continued as Theorem co-investors
  • December 2021: CFPB permanently bans Sasha from consumer lending industry
  • 2014-2024: Sasha remains Theorem stockholder (consumer credit asset management) despite permanent ban from consumer lending operations
  • August 2023: YC notified of comprehensive fraud documentation
  • October 2024: Theorem acquired by Pagaya; Sasha receives Pagaya shares (Israeli AI lending platform)
  • 2023-2025: YC continues platforming Puzzle via puzzle.io/yc despite fraud notification and co-investment conflict

What This Demonstrates:

YC’s silence and continued platforming is not “founder community loyalty” - it’s protection of a co-investment relationship. Y Combinator had direct financial alignment with Sasha Orloff throughout LendUp’s CFPB violations (2016, 2018), permanent ban (2021), and continued consumer credit involvement via Theorem (2014-2024). The co-investment creates structural incentive to suppress fraud documentation that would damage both Sasha’s reputation and the value of shared investment positions.

Regulatory Evasion Pattern:

Sasha was permanently banned from consumer lending operations (December 2021) but continued involvement in consumer credit ecosystem through investment vehicles (Theorem Technology, 2014-2024), exploiting regulatory gap between operational bans and investment participation. This allowed continued profit from consumer credit industry despite federal prohibition.

Sam Altman Personal Involvement: LGBTQ + Allies Event at LendUp (April 11, 2017)

Archived LendUp blog post documents Sam Altman’s appearance at LendUp offices for LGBTQ + Allies event during active fraud period:

“LendUp’s LGBTQ + Allies group invited Y Combinator (LendUp investor / how we got our start) President Sam Altman for a conversation on Silicon Valley, fintech, and being a member of the LGBTQ community as a leader in business and tech.”

Timeline Context:

  • March 2016: First CFPB violation (LendUp) - $6.3M settlement for deceptive credit-building claims
  • April 11, 2017: Sam Altman speaks at LendUp’s “LGBTQ + Allies” event one year after CFPB enforcement
  • December 2016: LendUp raises money including YC participation
  • 2014-2024: Sam Altman’s Altman Family LLC co-invested with Sasha in Theorem (consumer credit)

Why This Matters:

  1. Personal involvement during fraud period - Not just institutional YC relationship, Sam Altman personally appeared at LendUp offices after CFPB violations were public record
  2. DEI positioning dates to at least 2017 - LendUp using LGBTQ community outreach during active fraud against vulnerable consumers
  3. “Different backgrounds, same mission” - LendUp’s stated diversity value weaponized while systematically defrauding 140,000+ consumers
  4. Sam Altman’s platform legitimized fraud entity - YC President lending credibility to company with documented CFPB violations

The archived blog post includes photo of Sam Altman at LendUp offices with wall text reading “Our mission is to provide a path to better financial health” - one year after CFPB documented LendUp was doing the exact opposite.

Sam Altman speaking at LendUp LGBTQ + Allies event, April 11, 2017, with mission statement visible on wall behind him Sam Altman (YC President) at LendUp LGBTQ+ event April 11, 2017 - one year after first CFPB violation ($6.3M settlement). Wall: “Our mission is to provide a path to better financial health.”

Selective photo deletion: Blog post still exists but all photos of Sam were deleted from live version. Photographic evidence ONLY accessible via web.archive.org. They kept the text but removed visual proof of Sam’s personal involvement during fraud period.

Altman Family LLC co-invested with Sasha in Theorem (2014-2024) throughout LendUp’s fraud period, proving direct financial alignment beyond YC institutional ties.

Pattern: DEI theater as reputation laundering during active regulatory violations.

Relationship Concealment: Active Suppression of Sam Altman/Sasha Orloff Connection

The Sam Altman-Sasha Orloff relationship is intentionally hidden from the open web:

  1. Photos scrubbed from LendUp blog: The April 11, 2017 LGBTQ + Allies event blog post still exists, but all photos of Sam Altman were removed from the live version - photographic evidence is ONLY accessible via web.archive.org; this selective deletion (keeping text, removing photos) demonstrates deliberate concealment of visual proof of Sam’s personal involvement during fraud period
  2. No public documentation of relationship: Despite Sam Altman’s high-profile role and LendUp being a YC W12 company, there is no easily findable documentation of Sam’s personal appearance at LendUp offices
  3. “Wink wink” private dinners continue: December 18, 2024 - Sasha attends “a recent dinner hosted by a famous OpenAI employee (wink, wink)” - the coy language demonstrates active concealment of which OpenAI employee is hosting, likely Sam Altman himself
  4. Sustained relationship hidden: OpenAI controller interview (June 2024), private dinners (Dec 2024) - these connections are kept deliberately vague despite being critical for understanding the financial data pipeline

Why This Concealment Matters:

If the Altman Family LLC co-investment in Theorem (2014-2024) and YC relationship were purely above-board institutional connections, why selectively delete photos of Sam from the blog post while keeping the text? Why use “wink wink” language about OpenAI dinners instead of openly stating who’s hosting?

The selective concealment proves consciousness of guilt. They could have deleted the entire blog post, but instead chose to keep the text while removing all photos of Sam - this demonstrates calculated suppression of visual evidence while maintaining plausible deniability (“we never deleted the blog post”). Sam Altman’s personal involvement with CFPB-banned CEO - during LendUp’s fraud period (2017 event) and continuing through OpenAI integration (2024 dinners) - creates a direct conflict of interest that undermines the entire “founder community loyalty” narrative.

Sasha Orloff Functions as Financial Data Pipeline for YC/Sam Ecosystem:

The evidence demonstrates Sasha operates as a financial arm in the YC/Sam Altman network:

  • Startups (founders, many YC-backed) use financial tools (Brex, Deel, Gusto, banks) → all data flows INTO Puzzle (accounting software, ultimate aggregate) → Puzzle → OpenAI (direct API sync) + Brex → OpenAI (separate confirmed partnership, “millions of transactions”)
  • Sasha maintains direct access to OpenAI employees (controller interviews, private dinners) while Puzzle “syncs with OpenAI” for customer financial data processing
  • Altman Family LLC co-invested with Sasha for 10 years (Theorem 2014-2024) in consumer credit - proving direct financial alignment beyond YC institutional relationship
  • Sam Altman personally appeared at LendUp offices after CFPB violations (April 2017, one year after $6.3M settlement) - demonstrating continued support despite federal enforcement

The data pipeline is the point. Puzzle’s business model (accounting software for startups) positions it as the ultimate data collection layer - aggregating financial data from Brex, Deel, Gusto, banks, and all accounting data - with its own direct OpenAI API partnership. The concealed relationship between Sam and Sasha, the “wink wink” dinners, the scrubbed blog posts - all demonstrate consciousness that this pipeline would not survive public scrutiny.

Systematic data extraction disguised as founder community support, with Sasha operating as the financial data collection arm for Sam’s AI empire.

General Catalyst: Hemant Taneja (CEO, Puzzle Board Member 2023-2025)

Hemant Taneja - General Catalyst CEO (2021-present), Managing Director (2002-2021), Forbes Midas List 2025 #8

Forbes Midas List Timeline (Also Celebrating During LendUp Violations):

  • 2019: #32 on Forbes Midas List - during LendUp’s third CFPB violation period (2018-2019); one year before leading Puzzle Series A investment
  • 2020: #31 on Forbes Midas List - LendUp violations continued through Feb 2020; same year he would lead investment in company run by LendUp CEO
  • 2025: #8 on Forbes Midas List - celebrating while only recently exiting Puzzle board after 27+ months of whistleblower documentation

Puzzle Investment & Board Role:

  • “Backed since 2019” per General Catalyst’s own portfolio page - not 2021 Series A, but 2019 founding
  • GC’s February 16, 2023 article titled “Our Creation of Puzzle” (emphasis added) - not “Our Investment in Puzzle” but “Our CREATION of Puzzle”
  • Article language proves GC built Puzzle: “When we met Sasha Orloff, an experienced founder and CEO, we saw a partner to reimagine the stagnant accounting software landscape” - not “we backed a founder with a vision” but “we saw a partner” to execute GC’s vision
  • “co-creating tools that empower startups” - explicitly describes GC as co-creator, not investor
  • Strategic timing manipulation: TWO funding announcements in 2023, both hiding CFPB history:
    • February 16, 2023: TechCrunch announces $15M Series A “closed at the end of last year” (2022) - but I disclosed to TechCrunch in August 2023 that this was actually raised in 2021, strategically delayed 2 years to avoid LendUp CFPB shutdown news cycle (December 2021); by early 2023 they’d already burned through most of the money with no revenue
    • November 14, 2023: Puzzle announces $30M round led by S32 and XYZ Capital - just 9 months after finally announcing the stale 2021 Series A, proving rapid cash burn and need for emergency capital during my active fraud documentation period (5 months after termination)
  • Pattern: Delay announcing 2021 raise until Feb 2023 to obscure CFPB history → need emergency capital 9 months later → both 2023 announcements make zero mention of CEO’s CFPB permanent ban (December 2021)
  • Puzzle board member (2023-2025) - joined board post-investment, LinkedIn shows tenure ended 2025 (exact departure date unknown)
  • Hemant Taneja listed directly on federal SEC filings (but John Cwikla, CTO & Cofounder since December 2019, appears on ZERO filings):
  • Pattern: GC CEO Hemant Taneja appears on ALL federal securities filings; John Cwikla (CTO & Cofounder working since December 2019) appears on NONE. This proves GC control structure, not founder control.
  • November 2023 emergency fundraising: Just 9 months after finally announcing stale 2021 Series A (Feb 2023), needed $30M more (announced Nov 14, 2023) - proving rapid cash burn I warned TechCrunch about in August 2023 (“they’d already burned it down to $9M at the start of 2023 with no revenue”). Timing: 5 months after my termination, during active fraud documentation period. Both 2023 announcements make zero mention of CEO’s CFPB permanent ban.
  • Sophia Xiao (Puzzle Board Observer since Sept 2019): Former Chief of Staff to Hemant Taneja (Dec 2018 - May 2022), now Head of Creation at General Catalyst; present at company founding (September 2019) before John Cwikla started (December 2019) - proves GC created Puzzle, then hired technical cofounder 3 months later
  • Pattern: GC created Puzzle in 2019 (their words: “Our Creation of Puzzle”), installed CFPB-banned CEO as operator, GC CEO appears on all federal securities filings while actual CTO/Cofounder appears on none, strategic timing manipulation (2021 raise not announced until Feb 2023 to avoid CFPB news cycle), emergency $30M fundraising Nov 2023 (9 months later) proving rapid cash burn during active fraud documentation period, both 2023 announcements conceal CEO’s CFPB permanent ban

“Responsible Innovation” Rhetoric vs. Investment Reality:

Hemant Taneja authored 4 books on ethical business and “responsible innovation”:

  1. “The Transformation Principles” (publishing Sept 2025): “Blueprint for leaders who want to create institutions that endure, drive inclusive growth, and reshape industries in ways that serve people and society”
  2. “Intended Consequences” (2022): “Actionable framework for founders…on how to build and maintain a ‘responsible innovation’ company— a company built for growth and for societal good” - Forbes Best Business Book of 2022
  3. “UnHealthcare” (2020): Data-driven healthcare transformation
  4. “Unscaled” (2018): “Forces reshaping the global economy…turning one of the fundamental laws of business and society–the economies of scale–on its head” - laid out AI thesis for “upstarts leveraging AI for hyper-focused markets”

Stanford GSB on “Servant Leadership” and “Role in Society”:

In a September 2024 Stanford GSB interview, Taneja emphasized Ken Chenault’s mentorship on servant leadership:

“One of the great blessings in my life has been that Ken Chenault was one of the best business leaders in society, ran American Express. Once he retired, he decided to join us. And I’ll never forget this, when he first joined, we had this long dinner in New York. We were talking about training me to be a CEO and building followership in the organization. And the whole idea of servant leadership, something he’s very big on. And at the end of the dinner he said, and if you want to be a leader, we should talk. I was like, Ken, I thought we just had a three hour dinner about how to be a leader. And he said, ‘No, in society.’ And that was sort of a profound comment where leadership is not just about how you behave in your business, but also about how you think about your role in society.”

Hypocrisy: Writing bestselling books about “responsible innovation” and “companies built for growth and for societal good,” invoking “servant leadership” and “role in society,” while simultaneously:

  • Leading investment in company run by CFPB-banned CEO (LendUp: 140,000+ consumers defrauded, $40M restitution)
  • Joining board of company with photoshopped metrics, false credentials, $312 revenue vs $10M+ burn
  • Maintaining investment after comprehensive fraud documentation (August 2023)
  • Only exiting board recently (2025)
  • Active suppression: October 2023 Israeli portfolio pledge during whistleblower suppression period

“Responsible AI” Theater While Puzzle Syncs Customer Data with OpenAI:

November 14, 2023: Same day as Puzzle’s $30M funding announcement (9 months after finally revealing stale 2021 raise), Hemant posted to Twitter:

“Today, 35+ VC firms, with another 15+ companies, representing hundreds of billions in capital have signed the voluntary Responsible AI commitments from @ResponsibleLabs (RIL), the non-profit I co-founded. As Chairman of RIL, I’m proud to unveil this today with tech leaders and Commerce Secretary Raimondo in San Francisco.”

Signatories include:

  • General Catalyst (his firm, lead Puzzle investor)
  • XYZ VC (Ross Fubini - Kapor Capital partner who invested in both LendUp and Puzzle)
  • Felicis Ventures (Puzzle investor)

The “commitments”:

  1. Internal governance for responsible AI
  2. Appropriate transparency and documentation
  3. Risk & benefit forecasting
  4. Auditing and testing
  5. Feedback cycles and ongoing improvements

The actual reality on November 14, 2023:

  • Hemant on board of Puzzle (CEO permanently banned from consumer lending)
  • Puzzle “syncing with OpenAI” for customer financial data processing
  • $30M emergency funding announced same day (5 months post-whistleblower termination)
  • CEO’s CFPB ban never disclosed to customers/partners
  • Zero “transparency and documentation” about data pipeline to OpenAI
  • Zero “risk & benefit forecasting” for giving CFPB-banned CEO access to startup financial data
  • Zero “auditing and testing” of CEO’s compliance with federal prohibitions

Twitter reactions:

  • Del Johnson (@DelJohnsonVC): “Spot the FTX investors.”
  • Beff Jezos (@beffjezos): “I liked some of these firms 😢 RIP”

Pattern: Hemant positions as AI ethics leader with Commerce Secretary and “voluntary commitments” on the exact same day his portfolio company announces emergency funding during active whistleblower suppression. The commitments require “transparency,” “auditing,” and “risk forecasting” - none of which were applied to Puzzle’s CFPB-banned CEO accessing customer data and syncing with OpenAI.

Performance of ethics while systematically violating the principles being performed.

Forbes Structural Conflicts:

  • Forbes Midas List 2025 #8 - Puzzle’s lead investor featured on prestige list
  • Forbes 30 Under 30 judge - participated in judging process for Forbes prestige lists
  • Forbes Best Business Book 2022 - “Intended Consequences” featured by same publication
  • Pattern: Forbes cannot objectively cover Puzzle fraud when lead investor is:
    • Midas List #8 (high-profile placement)
    • Former 30 Under 30 judge
    • Bestselling author featured by Forbes
  • Media credibility infrastructure prevents accountability journalism

Gusto Board Overlap with Kapor Capital:

  • Gusto board member since February 2014 (11+ years)
  • Gusto is Kapor Capital portfolio company
  • Creates institutional alignment: Hemant (GC CEO) + Kapor Capital both invested in Gusto
  • Gusto partners with Puzzle (September 2025 technical integration with Brex) - cross-promotion between GC portfolio (Puzzle) and Kapor portfolio (Gusto)
  • Pattern: Board service on Kapor portfolio company while simultaneously investing in CFPB-banned CEO’s new company

Military Tech Portfolio Overlap:

  • General Catalyst invested in Anduril (military tech company founded by Palmer Luckey, now valued at $28B)
  • December 4, 2024: Anduril announced partnership with OpenAI for counter-drone systems and military AI applications (after OpenAI removed “military and warfare” ban from terms of service in January 2024)
  • Palmer Luckey is self-described “radical Zionist” who declared “Israel has my [and our] unqualified support” at Wall Street Journal conference (TRT World, Dec 2024)
  • Ross Fubini (XYZ Venture Capital, Kapor Capital partner during LendUp) also early investor in Anduril
  • Fubini: Kapor Capital partner 2011-2012 (LendUp Seed/A/B) → founded XYZ 2016 (Anduril early investor) → cofounded Village Global 2017-2020 with Erik Torenberg (Turpentine founder, now a16z GP)
  • Fubini also Palantir advisor since Jan 2010 (15+ years) - connects to military/defense tech ecosystem
  • Pattern: GC and former Kapor partner both invested in military tech (Anduril) while maintaining LendUp/Puzzle investment continuity, now converging with OpenAI (which processes data from Puzzle/Brex/YC portfolio companies)

Active Suppression (October-December 2023)

KEY EVIDENCE: General Catalyst Active Suppression (Unpinned Tweet + Deleted Replies)

  • Oct 8, 2023: General Catalyst pledged $250K to Israeli humanitarian efforts, pinned tweet to profile
  • December 2023: I called out GC on LinkedIn regarding Puzzle fraud connections
  • December 2023: GC unpinned the Israeli pledge tweet after LinkedIn callout; eventually my tweet replies were deleted

Why this matters: If Israeli connections were routine business practice, why unpin the statement AND delete critical replies when someone connects it to their Puzzle investment? The action demonstrates consciousness that these connections become problematic when linked to documented fraud. Active monitoring + selective suppression = consciousness.

General Catalyst statement pledging $250K to Israel General Catalyst’s Oct 8, 2023 pledge ($250K to Israel). Tweet pinned, then unpinned Dec 2023 after LinkedIn callout. Replies deleted.

Israeli Tech Ecosystem Portfolio:

General Catalyst maintains deep portfolio integration with Israeli tech ecosystem (11+ documented investments):

  • Fintech: Rapyd, Melio, Lemonade
  • Healthcare/AI: Aidoc (AI healthcare), Pulsenmore (home ultrasound), Sheba Medical Center (partnership 2023)
  • Cybersecurity: Apiiro, Armis ($300M funding co-led April 2024)
  • Technology: Arbe Robotics (perception radar), Nexar (connected vehicles), Superplay (gaming)

Pattern: Lead investor in Puzzle (CEO with documented Netanyahu financial ties, 2015) while maintaining sustained institutional commitment to Israeli tech ecosystem.

Healthcare Data Infrastructure (HATCo):

  • Founder and Executive Chairman: Health Assurance Transformation Company (HATCo, Jan 2023-present)
  • HATCo acquired Summa Health (Akron, Ohio integrated health system) in 2025
  • Board member: Livongo (acquired by Teladoc $18.5B, 2020), Commure, Transcarent, Tendo, Homeward, Hippocratic AI
  • Pattern: “Health assurance” transformation thesis = healthcare data access infrastructure
  • Timing: Acquiring health systems while investing in CFPB-banned CEO running accounting software (“syncing with OpenAI”)

Livongo Securities Fraud Lawsuits (2020) - Hemant Taneja Named Defendant

Hemant Taneja was named as a defendant in at least 10 securities fraud class actions related to Livongo Health in September-October 2020, immediately following the Teladoc merger announcement:

  • O’Connor v. Livongo Health, Inc. et al - N.D. Cal. 5:20-cv-07281 (Oct 16, 2020)
  • Ormesher v. Livongo Health, Inc. et al - N.D. Cal. 5:20-cv-07105 (Oct 13, 2020)
  • Vea v. Livongo Health, Inc. et al - S.D.N.Y. 1:20-cv-08230 (Oct 2, 2020)
  • Banner v. Livongo Health Inc. et al - N.D. Cal. 5:20-cv-06758 (Sept 29, 2020)
  • Anthony v. Livongo Health, Inc. et al - S.D.N.Y. 1:20-cv-07706 (Sept 18, 2020)
  • Jones v. Livongo Health, Inc. et al - E.D.N.Y. 1:20-cv-04362 (Sept 17, 2020)
  • Kubus v. Livongo Health, Inc. et al - S.D.N.Y. 1:20-cv-07579 (Sept 16, 2020)
  • Hart v. Livongo Health, Inc. et al - D. Del. 1:20-cv-01222 (Sept 14, 2020)
  • Raheja v. Livongo Health, Inc. et al - N.D. Cal. 3:20-cv-06406 (Sept 11, 2020)
  • Kent v. Livongo Health, Inc. et al - D. Del. 1:20-cv-01213 (Sept 10, 2020)

Allegations: Investors alleged Teladoc and its leadership (including board members) misrepresented Livongo integration progress as going well or “fully complete” in technology, sales, and other areas. The suits alleged misleading statements artificially inflated Teladoc’s stock price between February 2021 and July 2022.

Outcome: Cases were dismissed in 2023 (NY state court) and again in 2025 (federal court appeal), with courts finding insufficient evidence of fraudulent intent. Teladoc prevailed on dismissal, not acquittal.

Pattern: General Catalyst CEO was named defendant in 10+ securities fraud lawsuits regarding misrepresentations to investors while simultaneously backing Puzzle (GC “backed since 2019” per their portfolio page). Two years later (2023), Hemant joins Puzzle board—company led by CFPB-banned CEO with documented photoshopped metrics, false credentials, and misleading investor materials. The same pattern of alleged investor misrepresentation he was accused of at Livongo was occurring at his own portfolio company.

Livongo (2020 allegations)Puzzle (documented)
Overstating integration progressPhotoshopped engagement metrics (3 → 12,362 likes)
Hiding membership pipeline depletionConcealing CFPB ban from investors/partners
”Going really great” when it wasn’tFalse “cofounder” claims (Mission Lane)
Artificially inflated stock price$312 revenue vs $10M+ burn rate hidden

Core pattern: Telling investors things are better than they are.

“Applied AI” and Data Extraction Thesis:

From LinkedIn bio: “My vision for General Catalyst is to be the world’s foremost investment and transformation company, supporting global resilience through applied AI. I first laid out my AI thesis in my 2018 book Unscaled, which explored how the economy of the future will be won by upstarts leveraging AI for hyper-focused markets.”

Timeline:

  • 2018: “Unscaled” lays out AI thesis for startups
  • 2019: Puzzle created by General Catalyst (GC’s own words: “Our Creation of Puzzle”), Sophia Xiao Board Observer from founding (September 2019), GC portfolio page states “Backed since 2019”
  • December 2019: John Cwikla (CTO & Cofounder) starts - 3 months after GC already involved
  • 2021: GC leads Puzzle Series A ($15M) - raised in 2021 but not announced publicly until February 2023 to avoid LendUp CFPB shutdown news cycle
  • 2023: Hemant joins Puzzle board
  • 2023: Puzzle announces OpenAI integration (“syncing with OpenAI”)
  • 2025: Hemant exits Puzzle board

Pattern: CEO who wrote book about “AI for hyper-focused markets” (2018) creates accounting software “syncing with OpenAI” in 2019, installs CFPB-banned CEO as operator.

Boston Geographic Connection:

  • General Catalyst headquarters: Cambridge, MA
  • Same geographic area where FBI Boston Division warned about Skolkovo Foundation technology access risks (April 2014)
  • Dasha Shunina (Puzzle GTM strategist) worked at FBI-warned Skolkovo Foundation (2016-2023) while building U.S. tech ecosystem access
  • Pattern: Boston-based investor funding company employing Skolkovo operative in same geographic area FBI warned about

Why This Matters:

Hemant Taneja represents the ultimate institutional enablement:

  • Forbes Midas List #8 = structural media conflict preventing coverage
  • Author of “Responsible Innovation” = rhetorical cover for fraudulent infrastructure
  • Created Puzzle in 2019 = not investor backing founder vision, but VC building data extraction infrastructure and installing CFPB-banned CEO as operator
  • Board member 2023-2025 = direct oversight and conscious enablement during fraud period
  • On all federal SEC filings while actual CTO/Cofounder on none = proves GC control structure
  • Strategic timing manipulation = 2021 raise delayed until Feb 2023 to avoid CFPB news cycle; emergency $30M raise Nov 2023 (9 months later) proves rapid cash burn during fraud documentation; both 2023 announcements conceal CEO’s CFPB permanent ban
  • Gusto board since 2014 = Kapor overlap + cross-promotion infrastructure
  • HATCo healthcare acquisition = data access across sectors (healthcare + financial)
  • Israeli portfolio + suppression = geopolitical dimension + consciousness of scrutiny

Hemant Taneja: created accounting software infrastructure (2019), installed CFPB-banned CEO as operator, orchestrated strategic timing of funding announcements to obscure regulatory history, wrote 4 books about “responsible innovation” while enabling 13-year fraud pattern as data extraction infrastructure.

Puzzle’s “About” Page: Unusual VC Control Structure (November 2025)

Puzzle’s official “About” page (puzzle.io/about) features an unusual “Creation Story” section that positions General Catalyst leadership as if they are part of the founding team itself.

Puzzle About page "Creation Story" featuring GC leadership as founders Puzzle.io “About” page (November 2025): “The Creation Story” section features four people: Sasha Orloff (Cofounder & CEO), John Cwikla (Cofounder & CTO), Hemant Taneja (CEO & Managing Director at General Catalyst), and Sophia Xiao (Chief of Staff to the CEO of General Catalyst).

Highly unusual structure: VC-portfolio “About” pages typically only show the company’s actual founders/leadership, not the VC firm’s CEO and Chief of Staff.

Puzzle About page showing investor and angel conflicts Puzzle.io “About” page (November 2025): “Built For The Ambitious, Backed By The Ambitious” section lists investors and “angels from…” revealing structural conflicts. On Deck appears both as major institutional backer AND in “angels from” section. Brex (YC W17, competitor to GC-backed Ramp) listed as angel investor.

Pattern: VC networks create appearance of independent validation while maintaining coordinated control.

Why This Structure Is Unusual:

In typical VC-portfolio company relationships, the portfolio company’s “About” page features only the company’s own leadership team. Investors might be acknowledged in a separate “Investors” or “Backed by” section, but they are not presented alongside founders in a “Creation Story” section as if they co-founded the company.

Firsthand testimony about GC’s operational control:

As a former Puzzle engineer, I was personally introduced to Sophia Xiao and, along with all team members, virtually introduced to Hemant Taneja in early team meetings. The prevailing understanding among employees was that Hemant had the idea for Puzzle more than Sasha did.

Company offsites featured VC network presence:

  • First offsite: Ross Fubini (XYZ Venture Capital managing partner) attended briefly
  • Second offsite:
    • Ash Rust (Sterling Road Capital co-founder) attended (even Radha felt he was off)
    • Sophia Xiao (General Catalyst “co-creator” of Puzzle) attended

This level of VC involvement in a portfolio company’s founding and operations is atypical - portfolio companies don’t usually introduce their entire engineering team to their lead investor’s CEO and Chief of Staff as if they’re part of the founding team, nor do investors routinely attend company offsites. This proves GC built Puzzle as infrastructure rather than backing an independent founder’s vision.

Structural Conflicts in “Angel” Investors:

The “angels from…” section reveals additional structural conflicts:

  • On Deck: Listed both as institutional backer AND angel investor source - creates illusion of independent validation while maintaining coordinated control
  • Brex: YC W17 company, competitor to GC-backed Ramp, yet listed as angel investor in GC-incubated Puzzle
  • Stripe, Plaid, Gusto, Robinhood, Google: All companies with financial data access, listed as angel investor sources for accounting software company
  • “YC alumni syndicate”: Sasha’s LinkedIn bio explicitly lists “a YC alumni syndicate” as backer - despite Puzzle never going through Y Combinator - proving YC network’s direct financial involvement in GC-incubated data extraction infrastructure

This demonstrates:

  1. GC literally created Puzzle: GC’s own February 2023 article titled “Our Creation of Puzzle” and portfolio page stating “Backed since 2019” (not 2021 Series A) proves GC built Puzzle as infrastructure from inception
  2. GC hired Sasha as operator: Article says “When we met Sasha Orloff… we saw a partner to reimagine” - not “we backed his vision” but “we saw a partner” to execute GC’s vision for accounting software
  3. Timeline proves GC control: Sophia Xiao (GC Board Observer) present at founding September 2019; John Cwikla (CTO & Cofounder) didn’t start until December 2019 (3 months later); GC was there first, then hired technical cofounder
  4. Appearance of independent validation: Angel investors from recognizable companies create credibility while all being part of coordinated VC network
  5. Data extraction coordination: “Angel” investors are all financial data companies (Stripe, Plaid, Brex, Gusto) backing accounting software that aggregates their data
  6. YC network backing GC infrastructure: Despite Puzzle being GC-created (not YC), “YC alumni syndicate” explicitly listed as backer - proves YC’s direct financial involvement in accounting software that aggregates YC portfolio financial data
  7. Consciousness of unusual structure: Featuring VC leadership as founders on public “About” page, titling article “Our Creation of Puzzle,” and stating “Backed since 2019” proves GC views Puzzle as their creation, not independent company they backed
  8. Pattern with Deel partnership: GC didn’t just back Puzzle - they built it (2019), installed CFPB-banned CEO as operator, and now orchestrate portfolio integrations (Deel, Ramp)

November 24-25, 2025: General Catalyst Communications Team Monitoring After Public RICO Tagging:

Samantha Van Gent (Communications at General Catalyst) viewed my LinkedIn profile after I publicly posted about termination agreement, calling it “RICO patterns, not NDAs” and specifically tagging General Catalyst and XYZ Capital as examples of entities the separation agreement prevented me from discussing. This proves:

  1. Institutional awareness at lead investor when publicly tagged: Not passive monitoring, but GC’s communications team actively responding to being publicly called out about RICO patterns and NDA restrictions
  2. Consciousness that public RICO association is reputational threat: GC PR team viewing profile after being tagged in post about “RICO patterns” demonstrates they view public association with fraud allegations as crisis requiring monitoring
  3. Active monitoring of posts tagging General Catalyst: Immediate response to being tagged proves PR team tracks when lead investor is publicly associated with RICO allegations and restrictive termination agreements
  4. Consciousness for permanent record: Timestamp establishes institutional awareness at portfolio company’s lead investor when publicly called out about role in documented fraud pattern
  5. Eliminates “we didn’t know” defense: For all future proceedings, including potential RICO proceedings, this creates timestamped evidence that GC’s PR team was aware of public posts calling out GC’s association with RICO patterns

Context of Public Post: Post discussed termination agreement (“these are not NDAs. these are RICO patterns.”) and explicitly tagged General Catalyst and XYZ Capital as examples of entities the agreement restricted me from discussing. GC comms team’s immediate profile view after being tagged demonstrates consciousness that being publicly associated with RICO allegations is viewed as reputational threat requiring institutional monitoring.

See evidence-115 in Coordinated Network Surveillance section for complete documentation.

Andreessen Horowitz (a16z): Marc Andreessen, Ben Horowitz

Investment Pattern Across Data Extraction Operations:

  • LendUp (June 2013): Backed predatory lender that defrauded 140,000+ consumers, TechCrunch coverage
  • Worldcoin ($135M, 2025): Sam Altman’s biometric extraction operation collecting 26M+ iris scans
  • OpenAI: Major investor in company whose competitive advantage relies on training data from systematic extraction operations
  • Navan ($9.2B valuation, October 2022): Travel/expense management platform co-founded by Ben Horowitz, now platforming CFPB-banned Puzzle
  • Pattern documented: Cannot expose LendUp fraud without implicating Worldcoin and OpenAI data extraction infrastructure

Marc Andreessen: Public Campaign Against CFPB (November 2024)

Joe Rogan Podcast Appearance (Episode #2234, November 26, 2024):

Marc Andreessen launched sustained criticism of the Consumer Financial Protection Bureau - the federal agency that permanently banned LendUp and exposed the fraud pattern a16z invested in.

Key Claims (full transcript documented by Nic Carter):

“We have this thing called the Consumer Finance Protection Bureau, CFPB, which is sort of Elizabeth Warren’s personal agency that she gets to control… Basically, terrorize financial institutions, prevent new competition, new startups that want to compete with the big banks.”

  • Claimed CFPB engaged in “debanking” of crypto entrepreneurs
  • Said “30 founders debanked in the last four years”
  • Described CFPB as “unaccountable” agency with excessive power
  • Framed consumer protection as industry persecution

Timeline Documenting Self-Interest:

  • June 2013: a16z invests in LendUp - “aiming to disrupt payday lending”
  • March 2016: First CFPB violation - LendUp “repeatedly lied to consumers”
  • July 2018: Second CFPB consent order against LendUp
  • February 2020: Third CFPB violation ($500K)
  • December 2021: CFPB permanent ban + $40M restitution - 140,000+ victims
  • November 2024: Marc Andreessen goes on Joe Rogan to attack CFPB
  • ~3 years: Between CFPB banning a16z portfolio company and Marc publicly attacking the agency

Pattern Documented:

Venture capitalist whose firm invested in predatory lender (LendUp, June 2013) now leading public campaign to delegitimize the federal agency (CFPB) that exposed the fraud and ordered $40M restitution.

CFPB Enforcement Against a16z Portfolio: LendUp (June 2021)

As documented by Nic Carter (updated December 1, 2024):

“Update 12/01/24: This story has been updated to reflect that the CFPB has indeed brought an enforcement action against an a16z portfolio company, LendUp.”

The CFPB enforcement Marc criticizes as “terrorizing financial institutions” includes:

  • Permanent shutdown of a16z-backed LendUp
  • $40.5M restitution order
  • 140,000+ documented victims
  • Ban on CEO Sasha Orloff from lending industry
  • Federal record establishing “repeatedly lied to consumers”

Network Amplification:

  • ProPublica coverage: “Trump, CFPB, Marc Andreessen and Silicon Valley” - documenting broader effort to undermine consumer protection
  • Brennan Center analysis: “Who Benefits From Trump’s Move to Shut Down Consumer Financial Protection Bureau”
  • Elon Musk amplification on X/Twitter
  • Trump administration alignment (November 2024 election)

The Actual CFPB Record on Debanking:

Per Nic Carter’s analysis and CFPB Director Rohit Chopra’s public statements:

  • June 2024: Chopra spoke at Federalist Society against politically-motivated deplatforming
  • August 2024: CFPB court filing described debanking of Christians as discriminatory practice
  • October 2024: Finalized rule requiring digital payment apps to explain account closures
  • Pattern: CFPB is attempting to address debanking (especially of protected classes), not causing it

What Marc Gets Wrong:

From Nic Carter’s detailed fact-check:

“He overstates the CFPB’s role a bit, as it is their sister regulators, the FDIC, the OCC, the Fed that are more responsible for the recent spate of crackdowns against crypto and fintech firms.”

The agencies actually responsible for “Operation Choke Point 2.0” (targeting crypto/fintech):

  • FDIC (Federal Deposit Insurance Corporation)
  • OCC (Office of the Comptroller of the Currency)
  • Federal Reserve
  • Biden White House coordination

The CFPB’s primary role: consumer protection enforcement against fraud and deceptive practices.

Why This Matters:

  1. Strategic misdirection - Attacking CFPB (consumer protection) when actual crypto banking issues stem from FDIC/OCC/Fed
  2. Delegitimizing enforcement - Creating narrative that consumer protection = “terrorizing” business
  3. Protecting portfolio - a16z backs OpenAI, Worldcoin, crypto/fintech; CFPB enforcement threatens business model
  4. Political alignment - Trump administration hostility to CFPB creates opportunity to eliminate oversight
  5. LendUp connection - Cannot acknowledge CFPB enforcement was legitimate without admitting a16z invested in fraud

Co-Investment Pattern Explains Silence:

From earlier documentation, a16z (through Altman Family LLC) co-invested with Sasha Orloff in:

  • Theorem Technology (2014-2024): Consumer credit asset management, both stockholders for 10 years
  • LendUp (a16z June 2013 investor): CFPB documented 140,000+ victims

Marc Andreessen’s CFPB criticism serves dual purpose:

  1. Protect current crypto/fintech portfolio from regulatory scrutiny
  2. Delegitimize the agency that exposed fraud in a16z portfolio company (LendUp)

The Broader Context:

Marc Andreessen frames this as civil liberties and “debanking” of political dissidents. a16z’s actual business model depends on:

  • Backing data extraction operations (LendUp, Worldcoin, OpenAI)
  • Regulatory arbitrage (operate until shut down)
  • Network protection (cannot expose one fraud without implicating others)
  • Political influence (undermine agencies that threaten portfolio)

Marc’s own framing:

“This is one of the reasons why we ended up supporting Trump. We just can’t live in this world.”

Translation: “We cannot operate our business model (backing legally questionable ventures until forced to stop) if federal agencies enforce consumer protection laws.”

Evidence Summary:

  • ✅ a16z invested in LendUp (June 2013)
  • ✅ CFPB found LendUp “repeatedly lied to consumers” (2016-2021)
  • ✅ CFPB ordered permanent shutdown + $40M restitution (Dec 2021)
  • ✅ Marc Andreessen attacks CFPB on Joe Rogan (November 2024)
  • ✅ a16z backs OpenAI, Worldcoin, multiple crypto/fintech companies
  • ✅ Pattern: Attack the agency that exposed your portfolio company’s fraud

Regulatory Recommendation:

Investigate coordination between venture capital firms and political efforts to eliminate or defang consumer protection agencies. The timing - CFPB enforcement against portfolio company → public campaign against CFPB → political alignment with administration hostile to CFPB - demonstrates strategic effort to remove regulatory oversight rather than legitimate civil liberties concern.

Event: “DCPA Dinner with Brex, Navan, and Puzzle”

  • Date: December 8, 2025
  • Location: Washington DC
  • Format: Invite-only dinner at Digital CPA.com conference
  • Co-hosts: Navan, Brex, Puzzle Financial

Navan Background (October 2022 Series G):

  • $9.2B valuation ($300M raise: $154M equity + $150M structured capital led by Coatue)
  • Ben Horowitz quoted: “From the start, Navan revolutionized business travel by automating, personalizing, and professionalizing the experience. Despite a pandemic that brought business travel to a standstill, the company doubled down on innovation and now those bets are paying off in a big way.”
  • a16z cofounder as major investor and public face of company
  • Coatue (structured capital leader) also backs multiple YC/fintech operations

Pattern Documentation:

  • Navan platforms CFPB-banned CEO 27+ months after comprehensive fraud documentation
  • Event occurs 28 days after SEC whistleblower complaints filed (November 11, 2025)
  • Washington DC location suggests relationship-building with DCPA attendees and potential regulatory influence
  • a16z network enabling rather than distancing despite federal enforcement record

Network Overlap:

  • Andreessen Horowitz connects: Navan → LendUp → OpenAI → Worldcoin → YC ecosystem
  • Coatue overlap: Check portfolio for additional Puzzle/YC connections
  • Brex co-host: Israeli connections via Shai Goldman (Startups & VCs ambassador, July 2021)
  • Puzzle lead investor: General Catalyst (documented)

Significance:

  • Major a16z success story ($9.2B) actively promoting founder with federal enforcement record
  • “Invite-only” format creates exclusive validation for Puzzle among accounting professionals
  • Demonstrates conscious enablement: sophisticated parties with access to public CFPB records choosing to platform banned operator

a16z Studios / Turpentine Platforming (Erik Torenberg)

Erik Torenberg - Turpentine founder (acquired by a16z April 2025), former ODF chairman, Village Global cofounder/GP (2017-Dec 2020 with Ross Fubini) - received detailed fraud documentation January 19, 2024 (three months before podcast launch)

  • April 2024: “Tech Finance with Sasha Orloff” podcast launched on Turpentine network, produced and sponsored by Puzzle Financial itself (YouTube: “brought to you by Puzzle, the modern accounting platform”)
  • Turpentine platforming for 12 months (April 2024 - April 2025) before a16z acquisition
  • Throughout 2024 production while:
    • January 19, 2024: Torenberg (via ODF) received fraud documentation, dual C&D letters, Asset Sale document, wrongful termination details
    • August 2023 SEC whistleblower complaint already on file
    • October 2025: ActualQuickBooks photoshopping incident
    • October 30, 2025: Direct warning to Torenberg about photoshopped metrics
    • November 5 & 8, 2025: Final notices to Torenberg with complete documentation
  • April 2025: a16z acquired Turpentine, Torenberg joined as general partner, branding became “a16z Studios”
  • LinkedIn profile retroactively updated to show “Podcast Host - Tech Finance by A16Z Studios” (April 2024 - Present), applying a16z branding to entire podcast history
  • Self-promotional platform: Puzzle produced its own podcast to position CEO as “repeat founder” and thought leader, distributed through Turpentine network run by investor who had received comprehensive fraud documentation three months before launch
  • Pattern: Company produces own media → distributes through network run by notified investor → network acquired by major VC → retroactive credibility through a16z branding
  • No public acknowledgment of documented fraud pattern, CFPB enforcement, or photoshopped metrics despite Torenberg’s direct notification and awareness before podcast launch

Continued Platforming Post-Acquisition:

  • November 20, 2025: Latest podcast episode featuring Dan Westgarth (Deel COO) discussing Puzzle-Deel partnership and integration
    • Published 10 days after 4th SEC complaint and same day as third C&D letter
    • “Tech Finance by Turpentine, which is now part of the A16Z podcast network” - Sasha explicitly brands it as a16z content in opening
    • Promoted Puzzle-Deel technical integration: “those journal entries are instant” and “makes a ton of sense” (timestamped praise from Deel COO)
    • Sasha introduces self as “repeat founder and current CEO of Puzzle and self-professed finance nerd”
    • Includes mid-roll Puzzle advertisement: “Why would startups still be using accounting software from the 1990s?”
    • a16z platforming continues despite:
      • 5 SEC whistleblower complaints filed (August 2023 - November 2025)
      • CFPB permanent ban (December 2021, public record for 47 months)
      • $51M+ federal enforcement actions and court judgments documented
      • Photoshopped metrics incident (October 2025)
      • Three cease-and-desist letters threatening police action (August 2023, November 11 & 20, 2025)
      • Skolkovo Foundation FBI warning (2014) documented in leadership’s background
    • a16z conscious enablement: Major VC firm’s acquired podcast network platforming CFPB-banned CEO while FBI and SEC documentation is public and extensively shared with network principals

The podcast itself is evidence of systematic network protection. a16z acquired Turpentine knowing Erik Torenberg had received fraud documentation 15 months prior (January 2024). Now a16z Studios continues distributing content that positions a CFPB-banned CEO as an authority on financial services. Institutional credibility laundering.

Kapor Capital (Freada & Mitch Kapor, Ross Fubini)

Ross Fubini:

  • Kapor Capital partner (2011-2012), invested in LendUp from “Seed, A, and B round” (per LinkedIn, Apr 2012 - Present)
  • LinkedIn STILL lists LendUp as active investment (“Apr 2012 - Present ¡ 13 yrs 8 mos”) calling it “one of the most important FinTech companies in the world” despite CFPB permanent ban (Dec 2021)
  • Founded XYZ Venture Capital (2016)
  • Invested in Puzzle’s 2024 funding round (XYZ participated alongside S32, General Catalyst)
  • XYZ swag displayed by CEO: Sasha Orloff’s Nov 15, 2023 funding announcement shows him holding XYZ-branded mug while wearing Puzzle shirt (evidence-107) - public display of investor relationship
  • Cofounded Village Global (2017-Dec 2020 per LinkedIn; 2016 per Forbes) with Erik Torenberg - venture community and investment firm backed by Bill Gates, Reid Hoffman, Diane Greene, Bob Iger
  • Advisor to Palantir Technologies (Jan 2010 - Present, 15+ years) - “Advisor to engineering, product, and business development leadership teams”
  • Early investor in Anduril (military tech, now valued at $28B; General Catalyst also investor; December 2024 partnership with OpenAI for counter-drone systems and military AI; founder Palmer Luckey is self-described “radical Zionist” per TRT World) and Verkada (cloud security unicorn, $4.5B valuation)
  • Board member: Sardine (fraud startup), Legion Technologies (staffing app), Ginkgo Bioworks (biotech)
  • XYZ closed fourth fund July 2024 ($1.2B in assets under management); portfolio generated $11B+ aggregate value since 2017
  • Forbes Midas List 2025 #88 (debuting)
  • Platformed by LTSE (Puzzle partner): “Ross Fubini on how XYZ Venture Capital evaluates founders” article features investor in LendUp (CFPB-banned) and Puzzle (same CEO)

Investment Pattern:

  • LendUp (2016) - Series B investor, backed through CFPB violations and shutdown
  • Puzzle (2019) - Invested in company run by CFPB-banned LendUp CEO
  • Gusto (2020) - Payroll software, achieved unicorn status 2022
  • Kinly (2021, Acquired) - Greenwood shell game documented
  • Daylight (2022, $15M Series A) - LGBTQ+ neobank, lawsuit alleged CEO presented FALSE DATA TO INVESTORS, collapsed 5 months after Series A, whistleblower retaliation documented
  • SeedFi (2021, Acquired) - Credit building fintech
  • Multiple other finance companies: TomoCredit (2021), LendStreet (2014), Bridge Money (2020), Penny Finance (2023), others

Daylight: Securities Fraud, Toxic Workplace, Collapse (5 Months After Kapor Series A)

Daylight announced $15M Series A in November 2022, positioning itself as “the first and only digital bank designed to build the financial products and services to help queer people live their best lives.”

Timeline of Collapse:

  • November 2022: $15M Series A led by Anthemis Group, with participation from Kapor Capital, Citi Ventures, Gaingels, CMFG Ventures, others
  • March 2023: Three former employees file lawsuit alleging:
    • CEO Rob Curtis presented FALSE DATA TO INVESTORS
    • Discrimination
    • Whistleblower retaliation
    • “Psychologically unsafe” work environment
    • Current and former staff interviews corroborated toxic workplace claims
  • March 2023: Silicon Valley Bank collapse impacts Daylight (held entire reserves with SVB)
  • May 24, 2023: Announced closure, citing “challenges in scaling amid rising interest rate environment”
  • June 30, 2023: Operations ceased
  • 5 months from Series A to shutdown announcement

CEO Response:

Rob Curtis claimed lawsuits had “no material impact” on closure decision, stating “customer sign-ups to freemium products grew 300% since the lawsuit was filed.” Company shut down anyway.

Targeting Vulnerable LGBTQ+ Population:

  • Co-Founders: Rob Curtis (CEO), Billie Simmons (COO - also joined Daylight board with Series A), Paul Barnes-Hoggett
  • Vulnerable population: 3.8M LGBTQ+ millennials planning to expand families within 5 years
  • Financial barriers: “queer people in the United States face significant logistical, legal, and financial barriers” to family planning
  • Product: “Daylight Grow” subscription service for family planning, including:
    • Personalized family creation plans
    • Family planning Concierges for “financial advice”
    • Access to “family-building loans”
    • Marketplace with IVF and surrogacy clinics
    • Targeted at population facing “increasingly more complex” challenges than non-LGBTQ people

The Kapor Capital Pattern - Three Companies, Identical Fraud Indicators:

CompanyKapor InvestmentFalse Investor DataToxic WorkplaceWhistleblower IssuesOutcomeTimeframe
LendUp2016 Series BNot alleged in lawsuit, but CFPB found “repeatedly lying” to customersExtensive Glassdoor documentation (2016-2021): “toxic,” “call center,” “poverty wages”Employees afraid to speak up$46.8M CFPB enforcement, permanent ban5 years (2016-2021)
Puzzle2019Photoshopped metrics (Oct 2025: 3 likes → 12,362), false credentials contradicted by corporate filingsDocumented toxic workplace (2020-2023), “mental health awareness month” mockery3 C&D letters threatening police/criminal prosecution (Aug 2023, Nov 2025, Nov 2025)5 SEC complaints, ongoing investigation6+ years (2019-present)
Daylight2022 Series A (Nov)Lawsuit alleges CEO Rob Curtis presented FALSE DATA TO INVESTORS (March 2023)Lawsuit: “psychologically unsafe” work environment, corroborated by current/former staffLawsuit: whistleblower retaliation (March 2023)Shutdown 5 months after Series A5 months (Nov 2022 - May 2023)

All three companies:

  • Target vulnerable populations (subprime borrowers, startups, LGBTQ+ people)
  • Alleged false/misleading data to investors or customers
  • Documented toxic work environments
  • Whistleblower retaliation or intimidation
  • Either permanently shut down, under SEC investigation, or collapsed

Kapor Capital’s business model:

  1. Invest in companies targeting vulnerable populations (progressive branding: “mission-driven,” “financial inclusion,” “LGBTQ+ rights”)
  2. Enable fraud (false investor data, photoshopped metrics, CFPB violations)
  3. Toxic workplace culture suppresses internal dissent
  4. Whistleblower retaliation when employees report misconduct
  5. Either: Federal enforcement action (LendUp), SEC investigation (Puzzle), or rapid collapse post-funding (Daylight)

Why Daylight matters for Puzzle investigation:

Daylight’s March 2023 lawsuit alleged Rob Curtis presented FALSE DATA TO INVESTORS. This is the exact pattern documented at Puzzle (photoshopped metrics, false credentials). Kapor Capital invested in both companies knowing:

  • LendUp: CFPB permanent ban (December 2021) was public record when Kapor invested in Daylight (November 2022)
  • Puzzle: Kapor invested in 2019, backed CFPB-banned CEO, received fraud documentation (August 2023), continues backing through 5 SEC complaints (November 2025)

The Daylight lawsuit provides additional evidence that Kapor Capital’s pattern is:

  • Systematic, not isolated: Three portfolio companies, identical fraud indicators
  • Conscious, not negligent: Continued investing in similar companies after LendUp enforcement
  • Predatory by design: Targeting vulnerable populations using progressive branding to extract fees from those with fewest alternatives

For SEC/FBI investigators: Daylight’s March 2023 lawsuit alleging false investor data + 5-month collapse after Kapor Series A should be investigated alongside LendUp CFPB enforcement and Puzzle photoshopping/SEC complaints to establish pattern of securities fraud across Kapor Capital portfolio companies.

Joonko: SEC Fraud Charges, Israeli Intelligence Background, CEO Paid $500K After Company Wound Down

Joonko was a “diversity recruiting” AI startup founded by Ilit Raz in 2016, backed by Kapor Capital, positioning itself as a mission-driven company to “accelerate corporate diversity and foster workplace equality.” The company collapsed after SEC fraud charges, but not before paying the CEO who committed the fraud half a million dollars.

CEO Background - Israeli Intelligence Unit 8200:

Ilit Raz (CEO/Founder):

  • 7 years Israeli Intelligence Corps Unit 8200 (2003-2011): QA Engineer → Manager
  • 6 years tech startups (2010-2016): Product management at various Israeli companies
  • Founded Joonko in 2016 positioning it as social justice mission (“experiencing unconscious, and conscious, bias - I decided to change the way people work”)
  • Teaching Assistant at IDC Herzliya (2009-2016, 7 years): Israeli university in Herzliya
  • Claimed Joonko helped companies like PayPal, Adidas, Nike, Atlassian, and Intuit “increase their diversity recruiting efforts” with pool of “~120K qualified underrepresented candidates”

SEC Fraud Charges (June 2024):

Wall Street Journal (Sept 2024): SEC charged Ilit Raz with defrauding investors out of at least $21 million, alleging:

  • Inflated revenue figures
  • Fake customer testimonials
  • Forged bank statements
  • Claims of vast database of job seekers that never existed
  • “Breathtaking pattern of deception” - what was marketed as AI-powered DEI solution was “smoke and mirrors”
  • Summer 2023: Investor confronted Raz about inconsistencies
  • Raz admitted to fabricating data, triggering her ouster and wave of resignations
  • Company raised nearly $30 million between 2019 and 2022
  • May 2024: Filed for Chapter 11 bankruptcy after shutting down operations and laying off all employees

The $500K Settlement for Fraud (June 2025):

Calcalistech (June 24, 2025): Delaware bankruptcy court approved a $500,000 settlement between Joonko and Ilit Raz:

  • Company pays CEO $500K to settle all outstanding disputes
  • Raz had filed $1.77 million claim seeking coverage for legal fees
  • Raz agreed to abandon claim to directors and officers insurance policies
  • Company must drop lawsuit against her and hand over non-privileged documents
  • Settlement does not impact separate federal civil and criminal cases against her
  • SEC seeking: Permanent injunction, financial penalties, ban on serving as director/officer of any public company
  • U.S. Attorney’s Office: Filed criminal charges in parallel

The Pattern: CEO Who Defrauded Investors Gets Paid After Company Collapses

Ilit Raz raised $30M by admittedly fabricating data, shut down the company after being caught, and then received $500,000 from the bankrupt company as a settlement. This is the Kapor Capital portfolio pattern in microcosm: social justice positioning (diversity recruiting) + sophisticated tech background (Unit 8200) + fraud charges + company winds down + CEO escapes with cash.

Kapor Capital Connection:

While not explicitly documented in the WSJ or Calcalistech articles, Joonko’s investor base and positioning (diversity recruiting, “mission-driven,” targeting vulnerable populations through social justice branding) follows the exact Kapor Capital pattern documented across LendUp, Puzzle, and Daylight. The company’s Startup Nation Central profile and investor documentation should be investigated for Kapor Capital involvement.

Israeli Intelligence → Social Justice Positioning → Fraud Pattern:

Ilit Raz’s trajectory mirrors patterns documented elsewhere in this investigation:

  1. Israeli intelligence background (Unit 8200, 7 years) → sophisticated technical capabilities
  2. Social justice positioning (“woman in tech,” “unconscious bias,” “diversity recruiting”) → progressive branding to avoid scrutiny
  3. Fabricated data to investors → systematic fraud, not isolated mistakes
  4. Rapid collapse after exposure → company winds down when fraud documented
  5. CEO compensated despite fraud → $500K settlement after admitting to fabricating data

Why This Matters for Puzzle Investigation:

Joonko demonstrates that the Kapor Capital pattern extends beyond the three companies previously documented (LendUp, Puzzle, Daylight):

CompanyKapor InvestmentFalse Investor DataIsraeli/Intelligence BackgroundSocial Justice PositioningOutcomeCEO Compensation After Fraud
LendUp2016 Series BCFPB found “repeatedly lying” to customersSasha Orloff: Netanyahu financial backer (2015)“Financial inclusion,” “underbanked,” “ladder”$46.8M CFPB enforcement, permanent banContinued as Puzzle CEO, raised $47M
Puzzle2019Photoshopped metrics (3 likes → 12,362), false credentialsSame CEO as LendUp”Underbanked founders,” “mission-driven”5 SEC complaints, ongoing investigationStill operating as of Nov 2025
Daylight2022 Series ALawsuit: CEO Rob Curtis presented FALSE DATA TO INVESTORSNone documented”LGBTQ+ rights,” “financial inclusion”Shutdown 5 months after $15M Series AUnknown
JoonkoTBDSEC charges: Fabricated data, forged bank statements, fake customer databaseCEO: Israeli Intelligence Unit 8200 (7 years)“Diversity recruiting,” “women in tech,” DEI missionSEC fraud charges, bankruptcy, company wound down$500K settlement paid to CEO

All four companies share the pattern:

  • False data to investors or customers
  • Social justice positioning to avoid scrutiny
  • Vulnerable population targeting (subprime borrowers, startups, LGBTQ+ people, diverse job seekers)
  • Rapid collapse or federal enforcement when fraud exposed
  • CEOs escape accountability (Sasha → Puzzle, Ilit → $500K settlement)

The Joonko case adds the Israeli intelligence dimension to the established Kapor pattern, connecting it to the broader Israeli fintech network documented throughout this investigation (General Catalyst’s Israeli pledge, Sasha’s Netanyahu backing, Pagaya acquisition, Tomer London/Gusto, Brex’s Israeli R&D).

For SEC/FBI Investigators:

Investigate whether Kapor Capital invested in Joonko and compare their due diligence processes across LendUp (CFPB violations), Puzzle (photoshopped metrics), Daylight (lawsuit alleging false investor data), and Joonko (SEC fraud charges for fabricated data). If Kapor backed all four, this establishes pattern of enabling securities fraud across portfolio companies positioned as social justice initiatives.

The fact that Ilit Raz was paid $500K after admitting to fabricating data while the company is in bankruptcy should be investigated as potential fraudulent conveyance - transferring company assets to insiders while creditors and defrauded investors recover pennies on the dollar.

Portfolio Company Cross-Promotion:

  • Gusto (Kapor portfolio, unicorn) partners with Puzzle (Kapor portfolio, CFPB-banned CEO)
  • Gusto notified of fraud documentation November 2025
  • Continued partnership provides legitimacy: Gusto (successful, credible) validates Puzzle (fraudulent)
  • Pattern: Using successful portfolio companies to legitimize problematic ones

Gusto - Israeli Founder & Media Complicity:

  • Tomer London (Gusto co-founder, $700M raised): Born and raised in Haifa, Israel
    • Father ran clothing store for 35+ years in Haifa
    • Built inventory management system for father’s store as child
    • Israeli military service (3 years mandatory)
    • Stanford PhD (electrical engineering) → met co-founders Josh Reeves & Eddie Kim
    • Y Combinator alum, participated in accelerator program
    • Pattern: Another Israeli founder in network (Sasha Orloff → Netanyahu backer; Tomer London → Haifa native)
  • Alejandro Cremades (fundraising advisor/writer): Promotional profile featuring Tomer London (published by September 2024)
    • “Dealmakers Podcast” host, “Serial Entrepreneur Raised $700 Million” headline
    • Extensive promotional content about Gusto’s success and fundraising strategy
    • Zero disclosure of Gusto’s partnership with Puzzle (CFPB-banned CEO)
    • Zero mention of Kapor Capital backing both companies
    • Zero mention of network connections or fraud pattern
    • Timeline context: Published September 2024, 13+ months after comprehensive fraud documentation sent to network (August 2023), 2+ months before SEC complaints filed (November 2025)
    • Pattern: Media complicity through promotional “success story” framing without disclosure of fraud network ties
    • Operates as fundraising advisor while writing promotional founder profiles—structural conflict similar to Forbes/Dasha

Israeli Network Pattern Expansion:

The addition of Gusto/Tomer London demonstrates the Israeli fintech ecosystem integration extends beyond documented Netanyahu backing and Pagaya investments:

  • Sasha Orloff (LendUp → Puzzle CEO): Netanyahu financial backer (2015) + Pagaya stockholder (Israeli AI lending, 2024)
  • Tomer London (Gusto co-founder): Born/raised Haifa, Israel + $700M raised via YC ecosystem
  • Brex (YC W17, founded by Brazilian entrepreneurs): Israeli connections via Shai Goldman (Startups & VCs ambassador, joined July 2021); acquired Israeli company Weav ($50M, Aug 2021); Israeli R&D center in Tel Aviv; closed Israel office January 2024 (20% global layoffs, 282 employees); launched major technical integration with Puzzle September 23, 2025 (“one-click accounting setup”) - 20 months after office closure, embedding CFPB-banned CEO’s product directly into Brex platform
  • General Catalyst (Puzzle lead investor): $250K Israeli pledge (Oct 2023) + 11 Israeli portfolio companies + unpinned tweet after callout (Dec 2023)
  • Pattern: YC → Israeli founders/team members/acquisitions → Kapor portfolio integration → cross-promotion without fraud disclosure

Brex & Gusto: Data Infrastructure, Not Marketing Partnerships

The pattern extends beyond passive platforming to active data infrastructure integration. While Brex is not a Kapor portfolio company, Gusto is - creating network coordination between Kapor’s portfolio (Gusto + Puzzle) and external partners (Brex) to enable comprehensive startup financial data collection:

Brex (YC W17) - Technical Integration:

  • September 23, 2025: Launched major technical integration with Puzzle - “one-click accounting setup” embedding Puzzle directly into Brex platform
  • Not co-marketing - actual data pipeline: Brex customers’ financial data (transaction data, banking records, corporate spend) flows through Puzzle’s system
  • Built 20 months after closing Israel R&D center in January 2024 (282 employees, 20% global layoffs) - suggests strategic priority despite massive downsizing

Brex’s OpenAI Partnership - The Data Destination:

  • March 7, 2023: Brex announced partnership with OpenAI for “AI Finance Assistant” using OpenAI’s platform
  • Brad Lightcap (OpenAI COO) quoted: “We are thrilled to work with Brex to bring the power of OpenAI’s platform to CFOs and their teams”
  • Brex’s description: “The new tools will incorporate data from millions of transactions in order to provide relevant comparables”
  • Data pipeline established: Brex processes financial data through OpenAI’s systems for AI-powered insights
  • Timeline significance:
    • March 2023: Brex-OpenAI partnership established (data processing relationship)
    • September 2025: Puzzle-Brex integration launched (Brex data flows INTO Puzzle’s general ledger)
    • Result: Startups use Brex/Deel/Gusto/banks → data flows INTO Puzzle (ultimate aggregate) → both Puzzle and Brex independently partner with OpenAI (documented dual pipelines, not speculation)
  • Notified November 1, 2025: LinkedIn messages to Jason Mok (VP of Partnerships), Anshul Shah, and NicolĂĄs Carey documenting photoshopped metrics and cap table manipulation
  • Response: Three days later (November 4), CEO posted video content with Jason Mok discussing investor partnerships - continued promotion after explicit notification
  • Israeli connections: Shai Goldman (Startups & VCs ambassador, joined July 2021); acquired Israeli company Weav ($50M, August 2021); Tel Aviv R&D center (closed January 2024)

Brex-Palantir Network Promotion:

Molly O'Shea Twitter post promoting Palantir interview sponsored by Brex November 23, 2025 (originally posted Nov 11): Molly O’Shea promotes “Inside Palantir with Alex Karp” video “Presented by Brex” via Sourcery. Her bio: “HUGE Fan @brexhq.” Posted same day as second SEC complaint (Nov 11), reposted day before CA Bar complaint filed (Nov 23).

Network loop:

  • Alex Karp (Palantir CEO) content sponsored by Brex (OpenAI data partner)
  • Ross Fubini = Palantir advisor since 2010 + LendUp/Puzzle investor
  • Brex sponsors Palantir promotional content
  • Molly O’Shea (self-described Brex “HUGE Fan”) amplifies to startup ecosystem

Video topic: “value creation vs. hype in the AI boom” while Brex sponsors content promoting company whose advisor invested in CFPB-banned CEO’s companies.

What This Network Promotion Reveals:

  1. Ross Fubini connects Palantir to fraud operations: Advisor to Palantir (Jan 2010 - Present, 15+ years) + Kapor Capital partner 2011-2012 (LendUp Seed/A/B rounds) + XYZ Venture Capital (Puzzle investor) + early investor in Anduril ($28B valuation, General Catalyst also investor)
  2. Brex sponsors Palantir content: OpenAI data partner (March 2023) actively promoting Palantir (military tech, intelligence) while building Puzzle integration (Sept 2025)
  3. Military-consumer fraud pipeline documented: Consumer fraud data (LendUp → Puzzle) → Brex → OpenAI → Anduril military partnership (Dec 2024) with Palantir advisor (Ross Fubini) connecting all nodes
  4. Timing of promotion: Originally posted November 11 (same day as second SEC complaint), reposted November 23 (day before bar complaint filed) - network celebrating military tech integration while whistleblower documents fraud pipeline
  5. “HUGE Fan @brexhq”: Molly O’Shea’s explicit Brex fandom demonstrates ecosystem coordination, not independent journalism

The Network Loop:

Palantir (Alex Karp, CEO)
    ↓ (advisor 15+ years)
Ross Fubini (XYZ Venture Capital)
    ↓ (investor)
LendUp (CFPB-banned) → Puzzle (same CEO)
    ↓ (integration Sept 2025)
Brex (OpenAI partner March 2023)
    ↓ (sponsors Palantir content)
Molly O'Shea / Sourcery ("HUGE Fan @brexhq")
    ↓ (amplifies to startup ecosystem)
Startups (using Puzzle/Brex)
    ↓ (data flows)
OpenAI (Brex partnership "millions of transactions")
    ↓ (military partnership Dec 2024)
Anduril (counter-drone systems, $28B valuation)
    ↑ (Ross Fubini early investor, General Catalyst also investor)

The architecture.

Consumer fraud operations (LendUp/Puzzle) → data aggregation (Puzzle/Brex) → AI training (OpenAI) → military applications (Anduril) with Ross Fubini (Palantir advisor 15+ years, LendUp/Puzzle investor, Anduril early investor) connecting every node and Brex sponsoring promotional content for the network while extracting startup financial data.

Gusto (YC W12) - Payroll Data Infrastructure:

  • Payroll software = comprehensive business data: employee information, salaries, tax filings, banking details, company financial health
  • Tomer London (co-founder): Israeli-born (Haifa), $700M+ raised via YC ecosystem
  • Active Puzzle partner = potential data sharing between payroll system and accounting platform
  • Kapor portfolio (like Puzzle) = portfolio coordination infrastructure
  • YC alum = network coordination infrastructure

The Data Infrastructure Pattern:

  1. Puzzle (accounting software): General ledger data, transaction categorization, financial statements, bank account access [$312 revenue, $10M+ burn = not legitimate SaaS business]
  2. Brex (banking/corporate cards): Transaction data, banking records, corporate spend patterns + now direct access to accounting data via Puzzle integration + OpenAI partnership for processing “millions of transactions”
  3. Gusto (payroll): Employee data, compensation, tax information, company financial health indicators
  4. OpenAI: Receives financial data through Brex partnership (March 2023) for AI model training and inference
  5. Combined: Complete financial profile of startups flows through documented pipeline to OpenAI

Why This Matters:

The Data Architecture:

  • Brex → OpenAI (direct): Raw expense and banking transaction data
  • Gusto → OpenAI (direct): Raw payroll transaction data
  • Puzzle → OpenAI (via integrations): Structured accounting data tying every transaction, ledger entry, and financial metric to native startup APIs

Puzzle’s role: Brex and Gusto collect raw transactional data independently. Puzzle provides the comprehensive accounting layer that structures everything—reconciling transactions, categorizing expenses, connecting to multiple platforms (Brex, Gusto, banking, invoicing), generating financial statements. This makes raw data meaningful and complete for AI training.

The integration means:

  • OpenAI COO publicly confirmed Brex partnership processing “millions of transactions” for AI-powered insights (March 2023)
  • Brex built technical integration embedding Puzzle into their core platform (September 2025) despite CFPB ban being public record since December 2021
  • Built Puzzle integration 20 months after closing Israel office (282 employees laid off January 2024) - demonstrates strategic priority, not opportunistic partnership
  • Continued video promotion three days after explicit fraud notification (November 1 → November 4, 2025)
  • Combined with Gusto payroll access and Deel payroll integration, creates comprehensive startup financial intelligence: raw transactions (Brex/Gusto/Deel) + structured accounting view (Puzzle) = complete financial profile feeding AI models
  • All YC-connected (LendUp W12, Gusto W12, Brex W17, Deel W19), all continued after notification, all part of coordinated data extraction ecosystem
  • Sam Altman connections: YC president during LendUp violations → OpenAI founder → Brex/Deel/Gusto partnerships → now receiving startup financial data

The mechanics of YC-to-OpenAI data extraction infrastructure, not a marketing partnership.

Employee Amplification as Damage Control: The Deel Partnership

November 20, 2025: Partnership announcement posted same day as Women in Tech operation documentation and extended Skolkovo timeline evidence.

Coordinated employee response:

  • Within 2 hours: 7 employee reposts, 23 employee likes
  • After 3 hours: 25 employee likes (continued monitoring and coordination)
  • Dasha Shunina comment: “So much hard work, I can’t believe we did it! Such a game-changer for companies! We ❤️ Deel”
  • Multiple Puzzle employees (Cassy Lee, Lisa Kleinsorge, Elliott Noel, Caitlin Roberts, Denny Hollick, John Harrington) amplifying
  • Dan Westgarth tagged: Deel COO featured in November 20 Tech Finance podcast episode (distributed through a16z Studios) promoting Puzzle-Deel integration as “gamechanging” and praising “instant” journal entries

The pattern: Documentation → Mobilization

Major fraud and foreign intelligence documentation published with SEC complaints → immediate employee coordination creating “business as usual” narrative. This is performative loyalty as damage control.

Portfolio Integration, Not Damage Control:

The partnership announcement wasn’t standalone business development. Deel announced April 30, 2025 that General Catalyst purchased close to $300 million in Deel secondaries, becoming an anchor investor. Deel also graduated from Y Combinator in 2019 (YC W19), with YC leading their $156M Series C in April 2021.

GC’s April 2025 Anchor Investment Looks Like Buying Influence:

Quote from Deel’s announcement: “What began as a seed investment at La Famiglia has grown into a business that aligns perfectly with the GC Famiglia ethos - helping more people get hired and businesses grow faster.” - Jeannette zu Fürstenberg, Managing Director of General Catalyst

Timeline suggests strategic positioning:

  • April 30, 2025: GC buys $300M in Deel secondaries, becomes “anchor investor”
  • November 20, 2025: Deel-Puzzle partnership announced (7 months later)
  • November 20, 2025 (same day): Deel Compliance notified of CFPB ban, photoshopped metrics, federal investigations
  • November 25, 2025: Deel Compliance acknowledges receipt, states “will review”

This means:

  • General Catalyst is Puzzle’s lead investor (CFPB-banned CEO’s data operation)
  • General Catalyst is Deel’s anchor investor ($300M, April 2025)
  • General Catalyst is Ramp investor (March + November 2025, $32B valuation)
  • Y Combinator backed both Deel (W19) and Brex (W17), both Puzzle partners
  • General Catalyst portfolio includes Puzzle, Deel, Gusto, Ramp, Stripe (per GC website)
  • Andreessen Horowitz acquired Turpentine (Puzzle podcast platform, April 2025) and is in Deel’s Series E (Oct 2025, $17.3B valuation)

The November 20 partnership wasn’t announced despite notification—it was approved because General Catalyst orchestrated it. GC’s April 2025 $300M investment positioned them as “anchor investor” with influence over strategic partnerships. The coordinated employee amplification demonstrates internal coordination for portfolio company integration. Hemant Taneja (GC Managing Director, Forbes Midas #8, Puzzle board member until 2025) orchestrated portfolio that includes: the data collection operation (Puzzle), the payroll provider (Deel), the expense platforms (Brex via YC network, Ramp via GC portfolio with existing Oct 2024 Puzzle integration), the HR platform (Gusto)—a comprehensive financial data extraction infrastructure.

Why the April 2025 Investment Timing Matters:

GC became Deel’s anchor investor 7 months before Deel-Puzzle partnership. This creates structural conflict:

  • Can Deel Compliance reject partnership with GC’s lead portfolio company (Puzzle)?
  • Can Deel distance from fraud when GC is anchor investor in both companies?
  • Did GC buy $300M stake to facilitate future portfolio integrations?

If Deel’s Financial Crime review finds fraud pattern, GC’s dual role as anchor investor in Deel ($300M) and lead investor in Puzzle creates institutional liability. GC can’t claim ignorance—they orchestrated the integration.

Data pipeline expansion continues:

After Brex integration (September 2025) and Gusto partnership, now Deel payroll integration = comprehensive financial data collection (banking + accounting + payroll). Partnership announcements serve as legitimacy theater: “look how many major companies work with us” while CFPB permanent ban, photoshopped metrics, and Skolkovo infrastructure documentation remain unaddressed.

Timing is the evidence:

  • 9 days after SEC complaint (#17635-381-418-374)
  • Within days of Skolkovo documentation published
  • 2 hours: 7 reposts, 23 likes = employees monitoring, coordinating, amplifying
  • 3 hours: 24 likes = continued coordination and monitoring
  • Systematic amplification = not individual support, but orchestrated response

Employees know about the fraud documentation (company has been notified repeatedly since August 2023). Coordinated amplification campaigns demonstrate conscious choice to maintain appearance of normalcy rather than address documented CFPB ban, ongoing metric manipulation, and Skolkovo national security concerns.

Notification sent:

November 20, 2025: Deel leadership (Dan Westgarth, COO) notified via email documenting CFPB permanent ban, photoshopped metrics, and full documentation link. Message included explicit statement: “I’m sending this as receipt of mutual accountability for permanent federal record.”

Portfolio overlap discovered post-notification: Deel is YC W19 (YC led $156M Series C April 2021) with General Catalyst as anchor investor ($300M secondaries April 2025). The partnership is General Catalyst portfolio integration: GC leads Puzzle (CFPB-banned CEO’s data operation), GC anchors Deel (payroll platform), GC portfolio includes Gusto (HR), Brex (expense). Hemant Taneja orchestrated comprehensive financial data extraction infrastructure across portfolio companies. Creates documented notification establishing Deel/GC awareness for permanent federal record.

Deel Response Timeline:

  • November 25, 2025: Deel Compliance Operations Team acknowledges receipt, states “will review”
  • November 25, 2025: Internal escalation to Financial Crime specialist (documented via LinkedIn profile view) - signals Compliance escalated beyond partnership review to potential fraud/money laundering investigation; timing shows GC’s April 2025 $300M anchor investment may have created liability exposure if Financial Crime finds fraud pattern
  • December 11, 2025: Deel Team responds to Daily Email #3 stating: “We’re working on your request, it’s taking a little longer than expected, please sit tight. Rest assured we are working on it.” - confirms continued active investigation 21 days after initial notification; response demonstrates institutional awareness remains active; timeline shows GC anchor investor’s portfolio company conducting extended investigation into GC lead portfolio company’s CEO fraud pattern

Deel COO Dan Westgarth: Corporate Espionage Lawsuit and Undisclosed Relationship with Puzzle CEO

Dan Westgarth (Deel COO, featured in November 20, 2025 Tech Finance podcast promoting Deel-Puzzle partnership) is personally implicated in Rippling’s corporate espionage lawsuit against Deel.

Corporate Espionage Allegations (Rippling v. Deel):

According to Rippling’s court filings and lawsuit documentation:

  • Deel paid $6,000 to Keith O’Brien (former Rippling employee) for stealing trade secrets (CRM data, product roadmap)
  • Payment laundered through Alba Basha’s Revolut account - Money flow: Deel Ltd → Alba’s Revolut account ($6,000 in) → immediately to Keith O’Brien ($6,000 out)
  • Alba Basha is married to Dan Westgarth (Deel COO)
  • Alba Basha is former Robinhood compliance lead (“presumably know better than to be the conduit for an illegal payment”)
  • Rippling’s court filing states: “The records involve only two transactions: Deel corporate funds entering Basha’s account and immediately exiting to pay a corporate spy. Her account balance before and after: $8.16. This is not personal financial activity. It is money laundering.”
  • Court unsealed evidence (November 2025): Magistrate judge ordered information revealed publicly, declaring no significant privacy interest when transactions show payment from Deel to Basha to O’Brien
  • Lawsuit alleges Deel CEO Alex Bouaziz and top leadership personally directed espionage scheme

Revolut Connection: Sasha Orloff Board Role (2019-2022):

From Sasha Orloff’s LinkedIn:

  • Non-Executive Director at Revolut (September 2019 - January 2022)
  • “Revolut is the largest global fintech superapp… I was a Non-Executive Board Director for Revolut’s US business”

Dan Westgarth’s Revolut Tenure:

From Dan’s LinkedIn:

  • May 2015 - May 2016: Associate at Revolut
  • May 2016 - Jun 2017: Payments Product Manager
  • Jun 2017 - May 2018: International Expansion
  • May 2018 - Apr 2019: General Manager
  • Left Revolut: April 2019 (5 months before Sasha joined board)

Sasha’s Revolut Tenure (Did NOT Overlap with Dan):

  • September 2019: Sasha joined Revolut US board as Non-Executive Director (5 months after Dan left)
  • December 2021: CFPB permanent ban becomes public record
  • January 2022: Sasha removed from Revolut US board (one month after CFPB ban became public)

Revolut’s Timing Is The Smoking Gun:

Revolut removed Sasha from their US board one month after the CFPB ban became public (Dec 2021 → Jan 2022). This demonstrates:

  1. Even Revolut recognized being advised by a CFPB-banned person isn’t appropriate - they removed him immediately after ban became public
  2. If Revolut (a fintech platform) understood CFPB ban disqualifies advisory roles, Deel/Dan should understand it too
  3. The ban doesn’t just apply to “LendUp the entity” - it covers officers, which is why Revolut removed Sasha from board

Pre-Existing Relationship Documented in Podcast Transcript:

From Tech Finance podcast transcript (November 20, 2025), lines 22-24:

Sasha: “I got to know Dan when he was just a young pup at this little tiny company that nobody had heard of at the time called Revolut.” Dan: “Yeah. we were taking Revolut to the US and that’s how I got introduced to Sasha.”

Timeline Discrepancy:

Sasha claims he “got to know Dan” when Dan was “a young pup at… Revolut” - suggesting they knew each other during Dan’s tenure (2015-2019). But Sasha didn’t join Revolut US board until September 2019 (5 months after Dan left in April 2019).

This suggests:

  1. Sasha had an undisclosed relationship with Revolut before joining the board (consulting, advisor, investor, or informal role), OR
  2. They met through another connection but Sasha is misrepresenting the timeline, OR
  3. Dan’s phrase “we were taking Revolut to the US” refers to post-2019 activities after Dan left

Either way, Sasha’s claim of knowing Dan “when he was a young pup at Revolut” contradicts the official timeline showing Dan left 5 months before Sasha joined. The podcast suggests a closer/earlier relationship than LinkedIn timelines indicate.

Dan would have known:

  • Dan left Revolut in April 2019
  • Sasha joined Revolut US board in September 2019 (5 months later)
  • Dan would have known about Sasha joining the board of his former company (they clearly stayed connected)
  • Dan would have known when Sasha was removed from Revolut board in January 2022
  • Dan would have known WHY - the CFPB ban became public one month earlier

Why This Matters for Deel Compliance/Financial Crime Review:

  1. COO personally implicated in separate lawsuit - Dan Westgarth (featured in partnership podcast) has wife whose account allegedly laundered espionage payments; RICO allegations against Deel leadership
  2. Revolut used for alleged money laundering - Sasha was on Revolut US board (2019-2022), Dan was employee (2015-2019); later Revolut account allegedly used to launder Deel’s espionage payment through Dan’s wife
  3. Timeline discrepancy suggests undisclosed relationship - Sasha claims he “got to know Dan when he was a young pup at Revolut” (implying during Dan’s 2015-2019 tenure), but Sasha didn’t join Revolut board until Sept 2019 (5 months after Dan left); suggests Sasha had undisclosed relationship with Revolut before joining board, OR they’re misrepresenting timeline of relationship
  4. Pre-existing relationship through Revolut - Dan left Revolut April 2019, Sasha joined board Sept 2019; both connected to same company, stayed connected after Dan left (podcast confirms this); relationship predates Deel-Puzzle partnership
  5. Dan should have known about CFPB ban - Sasha was removed from Revolut US board in January 2022 (one month after CFPB ban became public); as former Revolut employee connected to Sasha, Dan would have known why Sasha was removed
  6. Revolut recognized CFPB ban disqualifies advisory roles - Revolut removed Sasha immediately after ban became public; if Revolut understood this, Dan (as Deel COO evaluating Puzzle partnership) should understand it too
  7. Puzzle’s partnerships arguably violate “Assisting Others” prohibition - CFPB order Section I.c prohibits “Assisting Others” in credit extension; order defines this as including “performing… billing, payment, administrative… services of any kind”; Puzzle provides these exact services to credit companies (Brex corporate cards, Ramp corporate cards/bill pay, Mission Lane consumer credit, Meow fintech, Gusto payroll advances); if Revolut found CFPB ban disqualifying for board role, providing billing/payment/administrative services to lenders would be even more problematic
  8. Pattern of alleged judgment issues - COO’s wife’s account allegedly used for espionage payment laundering, same COO now promoting partnership with CFPB-banned CEO whose ban Revolut found disqualifying
  9. GC orchestrated partnership during active lawsuit - GC became Deel anchor investor (April 2025) and facilitated Puzzle partnership (Nov 2025) while Deel faced RICO allegations
  10. Timing of partnership announcement - November 20, 2025 (same day as partnership announcement with Puzzle) podcast promoted integration while Rippling lawsuit documented alleged corporate espionage and money laundering

Questions for Deel Financial Crime Review:

  • Did Deel leadership disclose Dan Westgarth’s pre-existing relationship with Puzzle CEO through Revolut when evaluating partnership?
  • How did Sasha “get to know Dan when he was a young pup at Revolut” if Sasha didn’t join Revolut board until 5 months after Dan left? What was the nature of their relationship before Sasha’s board role?
  • Did Dan disclose that Sasha was removed from Revolut US board one month after CFPB ban became public?
  • Did Deel consider why Revolut (a fintech) found CFPB ban disqualifying for board advisory role?
  • Does Revolut’s decision to remove Sasha create precedent that CFPB-banned individuals shouldn’t advise/operate financial services companies?
  • Does Puzzle’s business model violate CFPB order Section I.c? The order defines “Assisting Others” as including “performing… billing, payment, administrative… services of any kind” - does providing accounting software that performs these services for credit companies (Brex, Ramp, Mission Lane, Meow, Gusto) fall within this prohibition?
  • Should all Puzzle partnerships with lending/credit companies be terminated given the order’s broad definition of “Assisting Others”?
  • Did GC disclose Deel’s active lawsuit when orchestrating Puzzle partnership?
  • Does pattern of alleged misconduct at Deel C-suite (espionage, money laundering allegations) create additional compliance concerns for partnership with CFPB-banned CEO?
  • What due diligence was performed on Puzzle given COO’s connection to CEO through Revolut?

Creates additional context beyond CFPB ban and photoshopped metrics: Deel COO promoting partnership is personally implicated in separate corporate espionage lawsuit involving alleged money laundering through family member’s Revolut account (Revolut is a fintech platform, not a bank; Puzzle CEO served as board member for Revolut US 2019-2022).

Ramp: GC Portfolio Integration Already Active (August 2023)

Ramp is another General Catalyst portfolio company with existing Puzzle integration - and GC has backed Ramp since 2021, meaning GC was ALREADY invested when Ramp-Puzzle integration launched in August 2023. This suggests GC orchestrated integration between their portfolio companies (Puzzle + Ramp), not passive investment after the fact.

General Catalyst Investment Timeline:

According to GC’s portfolio page, Ramp’s November 2025 funding announcement, and previous rounds:

  • 2021: GC begins backing Ramp (initial investment)
  • August 24, 2023: Ramp-Puzzle integration publicly documented (GC already invested in BOTH companies)
  • March 2025: GC participated in $150M secondary deal, valuing Ramp at $13B
  • November 17, 2025: GC participated in $300M Series F led by Lightspeed, valuing Ramp at $32B
  • November 20, 2025 (3 days later): Deel-Puzzle partnership announced

Existing Puzzle Integration (August 2023 - 2+ Years Active):

Puzzle’s blog post (August 24, 2023) details the Ramp-Puzzle integration: “The Ramp-Puzzle Integration Reduces Manual Spend Categorization by 50%”

“Ramp’s Bill Pay, Ramp Reimbursements, and Ramp’s Accounting API help founders and accountants save 50% of manual categorization work through 99% auto-categorization, when paired with Puzzle.”

Ramp’s Technology Partner Spotlight (October 22, 2024) features full Q&A with CEO Sasha Orloff promoting the integration:

“Combining the power of Puzzle and Ramp has allowed us to achieve new growth and scale for both our business and that of our customers.”

Puzzle’s Ramp integration page actively lists Ramp integration: “Sync transactions instantly, automate categorization, and close your books faster—no spreadsheets required.”

Why This Matters:

GC was ALREADY invested in Ramp (since 2021) when Ramp-Puzzle integration launched (August 2023). This means GC was backing BOTH companies when they integrated, suggesting GC orchestrated the partnership between their portfolio companies. GC then deepened their Ramp stake with $150M (March 2025) and $300M (November 2025). Three days after the November investment, Deel-Puzzle partnership was announced. This shows:

  1. GC orchestrated Ramp-Puzzle integration between portfolio companies - GC backed both Ramp (since 2021) and Puzzle (lead investor) when August 2023 integration launched
  2. Pattern of portfolio coordination - GC systematically integrating their lead fraud portfolio company (Puzzle) across their expense/payroll platforms (Ramp, Deel)
  3. Structural conflicts prevent disclosure - GC’s dual role as investor in BOTH companies explains why Ramp was never informed of CFPB ban before promoting Puzzle in multiple blog posts (2023, 2024)
  4. Continued investment after integration - GC deepened Ramp stake ($150M March 2025, $300M Nov 2025) knowing about 2+ year Puzzle integration

GC’s Coordinated Portfolio Integration:

Timeline shows GC orchestrating integrations between their portfolio companies:

  • 2021: GC begins backing Ramp
  • August 2023: Ramp-Puzzle integration documented (GC already backing BOTH companies = orchestrated integration)
  • March 2025: GC deepens Ramp stake ($150M secondary)
  • April 2025: GC becomes Deel anchor investor ($300M)
  • November 17, 2025: GC deepens Ramp stake AGAIN ($300M, $32B valuation)
  • November 20, 2025: Deel-Puzzle partnership announced (3 days later)

The pattern: GC was backing Ramp (since 2021) and Puzzle (lead investor) when they integrated (Aug 2023), then orchestrated Deel-Puzzle partnership (Nov 2025) after becoming Deel anchor investor (Apr 2025). This is systematic portfolio coordination, not passive investment.

The Likely CFPB Violation:

Ramp’s API integration gives Puzzle direct access to:

  • Customer transaction data
  • Vendor information and receipts
  • Banking records and corporate spend patterns
  • Real-time financial metadata

Data access concerns: CFPB Final Judgment (Section V) prohibits Sasha Orloff and “persons in active concert” from using LendUp customer data obtained before December 2021. While Puzzle processes different data (startup financial data vs. consumer lending data), the pattern of a CFPB-banned CEO operating financial data access platforms raises questions about compliance oversight and data handling practices. Ramp’s 2+ year active integration with Puzzle demonstrates systematic financial data infrastructure involving a permanently banned lending executive.

Notification Sent:

November 25, 2025: Ramp leadership ([email protected], [email protected], [email protected]) notified via email documenting:

  • CFPB permanent ban (December 2021)
  • Existing October 2024 Puzzle integration likely violates CFPB decree
  • Photoshopped metrics (October 2025)
  • GC portfolio conflicts (March + November 2025 investments in Ramp while being Puzzle lead investor)
  • Message included explicit statement: “I’m sending this as receipt of mutual accountability for permanent federal record”

Creates documented notification establishing Ramp/GC awareness that existing integration may violate federal enforcement order.

Ramp Engagement with Fraud Documentation (November 27, 2025):

LinkedIn post about Puzzle fraud with Ramp like November 27, 2025 (Thanksgiving week): My LinkedIn post documents GC’s role in Puzzle fraud (“Puzzle was barely ever Sasha Orloff’s idea to begin with”), includes “The Creation Story” image showing Sasha Orloff, John Cwikla, Hemant Taneja, and Sophia Xiao. Notes “Hemant seems to think he can buy influence to orchestrate and embed fraudulent founders throughout his portfolio.”

Ramp’s official company account liked this post.

Pattern: GC portfolio company (Ramp) with 2+ year active Puzzle integration acknowledges fraud documentation during Thanksgiving week, same timeframe as Sasha’s Wikipedia tampering. This establishes Ramp’s documented awareness of fraud allegations, GC orchestration claims, and CFPB ban concerns - yet integration remains active.

What This Proves:

  1. Ramp is monitoring fraud documentation - Company account engagement demonstrates institutional awareness, not individual employee curiosity
  2. Acknowledgment during crisis period - Like occurred during Thanksgiving week while Sasha was editing Wikipedia to falsify CFPB order language
  3. GC portfolio coordination pattern - Another GC portfolio company (after Deel) showing awareness of fraud documentation yet maintaining active integration
  4. Timestamped awareness - Creates permanent record that Ramp saw fraud documentation including CFPB ban, GC orchestration claims, and “Hemant can buy influence” allegations
  5. No response or due diligence - Like demonstrates awareness but no visible investigation, partnership suspension, or compliance review

Timeline of Ramp Awareness:

  • August 2023: Launched Puzzle integration (GC backing both companies)
  • October 2024: Featured Sasha Orloff in Technology Partner Spotlight
  • November 25, 2025: Leadership notified of CFPB ban and integration concerns
  • November 27, 2025: Company account likes fraud documentation post about GC orchestration
  • Integration remains active despite documented awareness of federal ban and fraud allegations

This demonstrates the same pattern as Deel: GC portfolio companies acknowledge fraud documentation but continue partnerships, suggesting GC influence prevents portfolio companies from conducting independent due diligence when concerns involve GC’s lead portfolio company.

”Crisis Monday”: December 1, 2025 - “Inspired by our friends at Ramp”

Sasha's LinkedIn post about time savings calculator crediting Ramp December 1, 2025: Sasha posts “vibe-coding prototype” showing time saved using Puzzle vs QuickBooks. Caption states: “This calculator is inspired by our friends at Ramp.com” - Posted on LinkedIn and Twitter (2 PM ET) with aligned messaging across platforms.

What this demonstrates about real-time surveillance:

Days after notifying Ramp leadership (November 25, 2025) and Ramp’s company account engaging with fraud documentation (November 27, 2025), Sasha posts publicly crediting “our friends at Ramp.com” - demonstrates he’s actively monitoring who I’m contacting and responding in real-time. The public acknowledgment serves dual purpose: signaling to Ramp that partnership is valued (despite fraud documentation) and showing awareness of my notification patterns.

Trivial “vibe-coding” output suggests constrained resources:

The calculator is one of the most basic things he could build with “vibe-coding” - simple input fields with basic multiplication. Demonstrates either constrained engineering resources (can’t ship actual product updates so CEO posts toy projects) or lack of substantive product development. For a company claiming AI-powered accounting automation, showcasing a basic time-savings calculator suggests engineering capacity is focused elsewhere or product development has stalled.

Pattern: Similar to May 3-4, 2023 OpenAI tweet thread (posted after my internal complaints about OpenAI API), this post demonstrates Sasha responds to contacts/notifications by publicly reinforcing those relationships. Cross-platform posting (LinkedIn + Twitter with aligned messaging) suggests coordinated response. “Crisis Monday” timing suggests reactive strategy rather than organic content.

Likes documenting network complicity:

  • Barbara Jovanovic (+ her company Startup Cookie; both consistently like his and Puzzle’s content)
  • Ash Rust (continues being brazen after blocking me last week)
  • J. R. Faris (CEO at Accountalent)
  • Luke Frye (Puzzle Oct 2022 - Aug 2025: Head of Customer Success & Sales, then Accounting Partnerships recruiting CPA firms; received full fraud documentation 2023 and continued working there; personally “inked” Rivet as Puzzle partner while employed at Puzzle and proudly mentioned this on Rivet CEO + Sasha podcast episode; now Tax Advisor at Rivet Aug 2025 - present; received post-photoshop notification, strongly suspect he still doesn’t believe me rather than strategically “buttering up” Sasha)

My post-photoshop message to Luke (Nov 5, 2025): “since you’re no longer an employee, but you are likely a shareholder, i’m only sending this as a courtesy. i don’t really expect you to believe me but a lot of people in the company do. if you come around and realize i was never lying, well, don’t say i didn’t warn you. do not give sasha any indication you know. do not forward this in any capacity. i trust you won’t. in fact, you should keep buttering him up. puzzle itself has nothing on me legally. it was all a facade and it’s a shame so many of you are still drinking the koolaid. this is only a courtesy to you and others affected. i do not want to converse further. i still don’t think you’ll believe me until it’s too late.”

  • Sina Mohebiany (Founding AE @ Puzzle)
  • Jennifer Orloff (also reposted; CEO’s wife, works at Block marketing; monitored LinkedIn termination day May 31, 2023, 5:47 PM; they work as a unit; questionable how marketing professional thought ActualQuickBooks trespassing and photoshopping was acceptable)
  • J. Michael Welsh (Director of Software Engineering @ Puzzle)
  • Dasha Shunina (GTM at Puzzle, Forbes contributor, Women Tech Meetup founder, Skolkovo Foundation recruiter 2016-2023)
  • Kapor Capital (fraud platforming from LendUp to Puzzle; recently mentioned in partner notification documenting their continued Puzzle investment despite CFPB ban)

Same day hiring announcement:

December 1, 2025 - Patricia Daos announced joining Puzzle full-time as Implementation Manager after 1.5 years as contractor (started ~June 2024, during active fraud documentation period). Thanked Arash Ahmadi, Marissa Mata (recruiter; notified Nov 11 of recruitment liability), & “Sasha O.” Pattern: continuing to hire and expand operations during SOC2 observation period, same day as Ramp “Crisis Monday” post and Dasha’s YouTube/Antler engagement.

Comments on Patricia’s announcement:

  • Arash Ahmadi (Senior Customer Success Manager @ Puzzle; came from Bench Accounting where he prepared financials for 90+ businesses): “Welcome! Looking forward to building together! 🚀”
  • Marissa Mata (Recruiting Lead; notified Nov 11 of recruitment liability): “Welcome!! Thrilled to have you on the team 🚀”

Both thanked by name for Patricia’s placement during documented mental decompensation and active federal investigation. Arash’s participation in hiring under a CFPB-banned CEO is permanently documented. Marissa’s continued recruitment after notification is permanently documented. They were warned. They chose to continue.

Marissa Mata recruitment liability notification (November 11, 2025):

I submitted a job application to Puzzle with the photoshopped metrics evidence attached and sent Marissa this message:

Marissa,

As a recruitment professional publicly endorsing Puzzle Financial and potentially placing candidates at the company, you have a responsibility to know the CEO’s regulatory history.

CFPB Enforcement History:

  • CEO’s previous company (LendUp) permanently shut down by CFPB December 2021
  • Enforcement documented LendUp “repeatedly lied to consumers”
  • Defrauded 140,000+ consumers, $40M paid to victims

Recent Conduct (October-November 2025):

  • Photoshopped social media metrics (3 likes → 12,362)
  • Systematic false credentials pattern
  • Evidence deletion and suppression

SEC Whistleblower Complaint:

  • Filed November 11, 2025 (Submission #17628-500-136-464)
  • 19 supporting documents attached
  • Permanent federal record established

Professional Liability Concern:

Recruiters who place candidates at companies with documented fraud history without disclosure face liability if those employees experience retaliation, wrongful termination, or discover they were misled about leadership integrity.

I was terminated May 31, 2023 after establishing Puzzle’s frontend foundation, then retaliated against for documenting the CEO’s fraud pattern. You are now publicly endorsing this same company and potentially recruiting others into the same environment.

Complete Documentation: https://toxic.systems

This notification establishes your awareness for any future candidate disputes or professional liability claims.

Patrick Stoica Former Puzzle Financial Senior Software Engineer (October 2020 - May 2023) SEC Whistleblower Complaint #17628-500-136-464

Pattern: Recruiter continued publicly endorsing Puzzle after notification. Patricia Daos hired full-time 20 days later.

Antler: Platforming CFPB-Banned CEO (November 2025)

Antler SF Lunch and Learn (November 19, 2025)

Dasha Shunina commented on Barry Sun's LinkedIn post about Antler event with Sasha December 1, 2025, 5:42 PM ET: Dasha Shunina (GTM at Puzzle, Forbes contributor, Skolkovo Foundation recruiter 2016-2023) commented on Barry Sun’s (Founder at Channl, ex-AWS) LinkedIn post about Antler SF “Lunch & Learn with Puzzle & Antler SF” event. Barry quoted Sasha: “early users, employees, and investors… They’re not transactions. They’re marriages. Choose each other carefully.” Event listed November 19, 2025 on Luma calendar but not widely publicized.

Antler platforming CFPB-banned CEO:

Antler is a global early-stage VC and startup accelerator operating in 30+ locations (US, Europe, Asia, Africa, Middle East). They hosted Puzzle/Sasha at SF location for “Lunch & Learn” event despite CFPB permanent ban being public record since December 2021.

Event details (Luma page):

  • Date: November 19, 2025
  • Hosts: Dasha Shunina, Helen Park, McKenzie Hagan (Puzzle team)
  • Not widely publicized: Listed on Luma but no major social promotion suggests awareness of reputational risk
  • Quote from Sasha: “early users, employees, and investors… They’re not transactions. They’re marriages. Choose each other carefully”

“Marriages, not transactions” quote:

Sasha’s language about “marriages” and “choosing each other carefully” fits documented pattern of:

  • Performative relationship rhetoric while systematically exploiting vulnerable populations (140,000+ LendUp victims)
  • “Mission-driven” positioning (LendUp “ladder to better credit,” Puzzle “modern accounting”) masking fraud operations
  • Building loyalty networks that continue supporting despite federal enforcement actions

Barry Sun (Founder at Channl, ex-AWS, in attendance) amplified this messaging. Dasha engaged publicly. Antler provided platform. All after CFPB permanent ban is public record for 4+ years.

Dasha’s continued engagement pattern:

Dasha Shunina commented on Barry Sun’s post December 1, 2025, 5:42 PM ET - continuing public engagement with Puzzle content despite:

  • FBI warning about Skolkovo Foundation (2014)
  • Her documented Skolkovo employment (2016-2023) while simultaneously building U.S. tech ecosystem access via Forbes and Women Tech Meetup
  • Multiple notifications about CEO’s CFPB ban and fraud pattern
  • Her tactical block/unblock pattern after I warned CPAs (blocked immediately, unblocked after my “I see you’re deleting and ignoring” post)

Upcoming events: “ICE SKATING UNION SQUARE w/Puzzle” co-hosted with Vanta (SOC2 compliance provider) - see SOC2 Compliance section for Vanta conflict of interest documentation.

Dasha’s Continued Content Production - December 1, 2025

Same day as commenting on Antler event (5:42 PM ET), Dasha published another “Talks with Dasha” episode on YouTube featuring Superpower CEO Max Marchione.

Video details:

  • Published: December 1, 2025
  • Title: Conversation with Superpower CEO about healthtech scaling, culture, hiring philosophy, biohacking
  • Views: 64 (as of publication)
  • Description includes: Forbes article link by “Daria Shunina” promoting Superpower, LinkedIn/X contact info, Women Tech Meetup promotion (10,000 subscribers newsletter)
  • Sponsorship call: “Want to sponsor the next episode of Talks With Dasha? Reach out: [email protected]”

What this demonstrates:

Active content production during peak retaliation period:

December 1, 2025 - same day Dasha:

  1. Engaged with Antler/Puzzle event post (5:42 PM ET)
  2. Published new YouTube interview
  3. Promoted Forbes article (as “Daria Shunina”)
  4. Solicited sponsorships
  5. Amplified Women Tech Meetup platform (10,000 subscribers)

Context of timing:

This activity occurs during:

  • Puzzle SOC2 observation period (closes end of December)
  • Week after California Bar complaint (Nov 24) and CBA complaint (Nov 25)
  • Week after Wikipedia tampering (Nov 26-27)
  • Ongoing partner notifications and documented fraud pattern exposure

Pattern of continued platforming:

Dasha maintains multiple public platforms (Forbes contributor, YouTube show host, Women Tech Meetup founder, Puzzle GTM) despite:

  • FBI warning about Skolkovo Foundation (2014)
  • Her Skolkovo employment while building U.S. tech access (2016-2023)
  • CEO’s CFPB permanent ban (public record since December 2021)
  • Multiple whistleblower notifications (27+ months)
  • Recent tactical block/unblock pattern after CPA warning comment deletion

The YouTube description lists her as “Venture Capital Contributor to Forbes” and “GTM at Puzzle” - continuing to leverage credibility across platforms while employed by CFPB-banned CEO’s company.

Kapor Capital: Portfolio Scrubbing and DEI Theater

LendUp Scrubbing - Evidence of Conscious Guilt:

  • Forge Global confirms: “Kapor Capital participated in LendUp’s Series B funding round in January 2016”
  • Kapor Center blog (their nonprofit): Promoted LendUp’s “mission to provide short-term loans that offer a path out of high interest rates”
  • LendUp is NOT on current portfolio list despite list including companies from 2008-2025 (187 companies total)
  • CFPB shutdown December 2021 → scrubbed from portfolio
  • Ross Fubini (Kapor Capital partner 2011-2012, later XYZ Venture Capital founder 2016 + Village Global cofounder 2017-2020, Palantir advisor since 2010) described LendUp as “split into two businesses” to TechCrunch (Dec 2020) - euphemism for $29M fire sale, $0 to shareholders
  • Ross Fubini’s LinkedIn STILL lists LendUp as active investment (“Apr 2012 - Present ¡ 13 yrs 8 mos”) calling it “Seed, A, and B round investor in one of the most important FinTech companies in the world” despite CFPB permanent ban (Dec 2021) and Kapor portfolio scrubbing
  • This is systematic removal of CFPB-shutdown fraud entity from Kapor public portfolio while individual investor maintains active listing on personal LinkedIn

Founders’ Commitment Scrubbing - Post-Trump DEI Abandonment:

Kapor Capital’s detailed “Founders’ Commitment” page requiring diversity accountability from portfolio companies has been systematically dismantled:

What existed (January 2016 - May 2022):

  • Dedicated page at kaporcapital.com/founders-commitment/ with G.I.V.E. framework:
    • Goals: “Establish diversity and inclusion goals” + “Include progress on diversity and inclusion in quarterly investor updates”
    • Invest: People ops technology, bias mitigation training
    • Volunteer: Organize community engagement
    • Educate: Mandatory D&I sessions hosted by Kapor Capital
  • “Who’s Made The Commitment” section listing participating companies
  • Links to press coverage (TechCrunch, USA Today, SF Chronicle, Black Enterprise)
  • Last archived May 20, 2022 - 5 months after CFPB permanent ban, LendUp still showcased
  • Referenced in LendUp press release (September 2017): “LendUp is also a member of the Kapor Capital Founder’s Commitment”

What remains (2024-present):

  • kaporcapital.com/founders-commitment/ → 404 ERROR (no redirect)
  • Content relocated to kaporcapital.com/how-we-invest/ (buried in navigation)
  • G.I.V.E. framework still described with all four pillars
  • “Who’s Made The Commitment” section still exists listing participating companies
  • Kinly prominently featured as commitment success example despite:
    • CA cease-and-desist for unlicensed operation
    • Gathering Spot lawsuit ($290K+ judgment)
    • Failed customer conversion (150k/700k accounts = 21%)
    • May 2023 shutdown/acquisition collapse
  • LendUp conspicuously absent despite being commitment member during CFPB violations
  • Brief paragraph also on kaporcenter.org (nonprofit) with vague language

Timeline Context:

January 2016: Founders' Commitment launched (G.I.V.E. framework)
January 2016: Kapor invests in LendUp Series B ($13.3M)
2016-2019: LendUp commits CFPB violations during Founders' Commitment period
September 2017: LendUp press release touts Founders' Commitment membership
2021: Kapor invests in Kinly (acquired by Greenwood May 2023)
December 21, 2021: CFPB permanent ban shuts down LendUp
May 20, 2022: Last archive of /founders-commitment/ URL - LendUp STILL featured
After May 2022: URL broken without redirect, content relocated to /how-we-invest/
2024-2025: Post-Trump DEI abandonment wave across tech
May 2023: Kinly shutdown/acquisition collapse
November 2025: Kinly showcased as commitment success, LendUp scrubbed

What This Demonstrates:

This is sophisticated narrative control through URL breaking and systematic scrubbing with before/after evidence: LendUp showcased 5 months post-CFPB ban (last archive May 20, 2022, evidence-83), then systematically removed; Kinly showcased despite documented failures (November 2025, evidence-82). The 5-month delay proves deliberate decision-making, not automatic portfolio maintenance.

The URL breaking:

  • Original kaporcapital.com/founders-commitment/ → 404 (no redirect)
  • All press coverage from 2016-2017 now links to dead page
  • LendUp’s September 2017 press release citing commitment → broken link
  • Historical trail connecting LendUp → Founders’ Commitment → CFPB violations is severed

The selective showcase - Before & After:

Kapor Capital "Who's Made The Commitment" page showing LendUp (May 2022) Kapor Capital “Founders’ Commitment” page (May 20, 2022): Features LendUp - 5 months AFTER CFPB permanent ban. Still showcased as diversity success despite federal shutdown for “repeatedly lying to consumers.”

Kapor Capital "Who's Made The Commitment" page featuring Kinly (November 2025) Same page November 2025 features Kinly despite CA cease-and-desist, $290K+ judgment, 21% conversion rate, May 2023 shutdown. LendUp scrubbed - removed between May 2022 and Nov 2025.

The scrubbing timeline:

  • December 21, 2021: CFPB permanent ban issued ($40M restitution, 140,000+ victims)
  • May 20, 2022: LendUp STILL featured on commitment page (evidence-83) - 5 months after ban
  • After May 2022: Original /founders-commitment/ URL broken (no redirect implemented)
  • May 2022 - November 2025: LendUp systematically removed from commitment showcase
  • November 2025: Kinly featured, LendUp absent (evidence-82)

Pattern analysis:

  • 5-month delay between CFPB ban and scrubbing shows deliberate decision-making, not automatic portfolio maintenance
  • Why wait 5 months? Demonstrates conscious choice about narrative management after unambiguous regulatory disaster
  • Kinly showcased despite CA enforcement, lawsuit, failed conversion, shutdown (can be spun as “acquisition”)
  • LendUp scrubbed despite documented membership (permanent regulatory ban can’t be spun)
  • Pattern: Showcase manageable failures, hide unambiguous disasters

If commitment were genuine:

  • Why no redirect from old URL to new location?
  • Why showcase Kinly (documented failure) while scrubbing LendUp (documented member)?
  • Why break historical press links instead of preserving accountability trail?
  • Why did G.I.V.E. framework with quarterly reporting fail to prevent CFPB violations at member companies?

The confession: The accountability framework existed during LendUp’s entire CFPB violation period (2016-2019). After permanent ban, Kapor scrubbed LendUp but showcases Kinly—demonstrating the commitment was never about preventing fraud, only managing narrative around failures.

Cross-Reference: This pattern mirrors broader DEI Theater documentation showing systematic abandonment of diversity commitments following Trump’s return (2024-2025)

The 2021 Acquisition Wave - Follow The Pattern:

Three Kapor-backed neobanks/fintech companies were acquired or shut down in close proximity to LendUp’s CFPB permanent ban (December 2021):

  • Kinly (2021 investment, acquired by Greenwood May 2023) - Already documented: CA cease-and-desist, Gathering Spot lawsuit, layoffs, 150k/700k conversion failure, shell game documented
  • SeedFi (2021 investment, acquired by Credit Karma 2023) - Credit building fintech → acquired by Credit Karma (FTC settlement entity) → investigating customer impact
  • Daylight (2021 investment, acquired by Quontic Bank 2024?) - LGBTQ+ neobank → Archie Group PR (same PR firm as LendUp/Ahead) → investigating shutdown details

Pattern requiring investigation:

  • Why did Kapor invest in three neobanks in 2021 (same year LendUp received CFPB permanent ban)?
  • What happened to customers when these entities were acquired/shut down?
  • Were these investments attempting to replicate LendUp’s model with different “underrepresented community” branding?
  • Do regulatory filings show similar predatory structures?
  • Archie Group PR firm connection: LendUp and Ahead Financials used Archie Group for PR; does Daylight share same PR infrastructure?

Additional Kapor Finance Companies (Requiring Deep Investigation):

These companies require investigation through primary sources (PACER court records, state AG consumer complaint databases, FINRA BrokerCheck, regulatory filings) to determine if similar patterns exist:

  • TomoCredit (2021) - Credit building for immigrants; BBB complaints?
  • LendStreet (2014) - Debt relief; FTC enforcement actions?
  • Bridge Money (2020) - Financial services; predatory fee structures?
  • Penny Finance (2023) - Financial wellness; sustainability concerns?

Investigative Priority: Focus on 2021 investments (TomoCredit, SeedFi, Daylight, Kinly) made same year LendUp received permanent CFPB ban. Timeline suggests potential pattern of attempting to replicate LendUp model across different “underrepresented community” segments (LGBTQ+ via Daylight, immigrants via TomoCredit, Black communities via Kinly) while LendUp faced regulatory shutdown.

Diversity Theater as Cover:

  • Positions as “gap closers” funding “financial inclusion” for “underrepresented communities”
  • LendUp targeted those communities for predatory lending (CFPB: “repeatedly lying to consumers”)
  • 70% of portfolio founders from underrepresented backgrounds used as progressive branding
  • No public acknowledgment of LendUp’s consumer harm ($40M restitution, 140,000+ victims)
  • Continues funding Puzzle (same CFPB-banned CEO, targeting vulnerable populations via “founder-friendly” accounting software)
  • Investment pattern: Fund predatory lending to vulnerable communities, then scrub failed entities from portfolio while maintaining “social impact” branding

Forbes (David Jeans, former senior writer; Alex Konrad, Midas List editor)

  • David Jeans: Former senior writer covering tech (broke NS8 fraud story 2020), notified July 2023, initially responded “Yeah, I know of Sasha” then dropped contact
  • Hemant Taneja (General Catalyst, Puzzle lead investor): Forbes Midas List 2025 #8 - Managing Director of Puzzle’s lead investor (reinvested in later round)
  • Blake Byers (Google Ventures, Insights Servicing director): Featured on Forbes 30 Under 30 (2015) - profile explicitly states “invested in companies like Ionic Security, LendUp and Kensho”
  • Ross Fubini (XYZ Venture Capital founder, Village Global cofounder, Puzzle investor): Forbes Midas List 2025 #88 (debuting); Kapor Capital partner 2011-2012 during LendUp Seed/A/B rounds; LinkedIn STILL lists LendUp as active investment despite CFPB permanent ban; founded XYZ 2016, cofounded Village Global 2017-Dec 2020 with Erik Torenberg; Palantir advisor since Jan 2010 (15+ years); early investor in Anduril ($28B valuation, General Catalyst also investor) and Verkada ($4.5B unicorn); XYZ closed fourth fund July 2024 ($1.2B AUM, $11B+ portfolio value); platformed by LTSE (Puzzle partner) in article about XYZ investment criteria
  • Nigel Morris (QED Investors founder, LendUp board director/chair): Forbes Midas List 2025 #90
  • Brandon Arvanaghi (Meow CEO, QED portfolio company): Forbes 30 Under 30 Finance 2024 + Forbes BrandVoice paid Samsung partnership (promotional video platforming CEO as financial services disruptor)
  • Credit Karma (QED portfolio, FTC settlement 497k victims): Forbes “Best Brands for Value” #235 - ranked as top value brand despite federal enforcement action
  • Systematic QED network platforming: Forbes monetizes credibility through paid partnerships (Samsung BrandVoice), prestige rankings (Midas List, 30 Under 30, Best Brands for Value) to platform QED network while suppressing fraud investigation of other QED-backed entities in same portfolio
  • Alex Konrad: Forbes editor for Midas List and 30 Under 30, maintains prestige lists featuring Puzzle’s lead investor (#8 Midas), LendUp investors/board directors (Midas), and Blake Byers (30 Under 30 with LendUp profile)
  • Dasha Shunina (Puzzle employee) published 48 Forbes articles without employment disclosure
  • November 13, 2025: Dasha Shunina published “The Top Startups To Watch From Y Combinator’s Fall 2025 Batch” - promoting YC ecosystem same day as SEC supplemental complaint (Submission #17630-611-119-304) documenting ongoing criminal enterprise; article legitimizes YC while employed by company run by YC alum (LendUp W12) under federal investigation; no disclosure of Puzzle employment or conflicts; demonstrates continued promotional activity for network platforming employer despite 4 SEC complaints
  • Structural conflict: Forbes features Puzzle’s lead investor at #8 on 2025 Midas List, platforms QED portfolio companies (Credit Karma #235 value, Meow CEO via paid Samsung partnership, Nigel Morris #90 Midas) while former senior writer drops fraud investigation after initially acknowledging “Yeah, I know of Sasha”; Forbes contributor employed by YC-affiliated company (CEO is LendUp W12 alum) actively promotes YC batch while employer under SEC investigation

TechCrunch (Connie Loizos, Senior Reporter)

  • Published 9+ promotional LendUp articles (2012-2017)
  • Zero Mission Lane coverage despite “unicorn” status and CEO’s “founder” claims
  • August 2023: Received comprehensive evidence (corporate filings, court documents, CFPB orders)
  • December 2020: Published Ross Fubini profile (XYZ Venture Capital founder 2016, Village Global cofounder 2017-2020, Palantir advisor since 2010) describing LendUp as “split into two” without disclosing $29M fire sale returned $0 to shareholders; Fubini was Kapor Capital partner 2011-2012 during LendUp Seed/A/B rounds; his LinkedIn STILL lists LendUp as active investment despite CFPB permanent ban
  • February 2023: Published glowing Puzzle profile 5 months before fraud documentation
  • October 2025: Promoted Puzzle event post-documentation
  • Commercial partner page: puzzle.io/partners/techcrunch offering “25% off any paid plan” creates structural conflict preventing investigation
  • No articles published despite 27+ months of evidence and multiple follow-ups

The Information (Stephanie Palazzolo, Akash Pasricha)

Pre-Notification Platforming with Custom Photoshoot:

  • November 14, 2023: “Nvidia Steals AMD’s Thunder; The Generative AI Startup Hoping to Making Accounting Exciting Again” by Stephanie Palazzolo

    • Featured Puzzle CEO Sasha Orloff with custom commissioned photoshoot (“Photo courtesy of Puzzle”)
    • Custom photography suggests coordinated PR placement and investment in CEO’s personal brand
    • Published 11 months after CFPB permanent ban (December 2021)
    • No disclosure of CEO’s prior company shutdown for “repeatedly lying and illegally cheating its customers”
  • December 1, 2023: “Pro Weekly: The OpenAI Drama Spurs Soul-Searching at AI Startups” by Akash Pasricha

    • Featured Orloff discussing Puzzle’s board composition in wake of OpenAI drama
    • Quote: “Sasha Orloff said that Puzzle, the AI accounting startup he co-founded, is accelerating the addition of a third director to its board”
    • Positioned as “AI startup” thought leader on governance
    • No mention of CFPB enforcement or LendUp shutdown

Persistent Notification Attempts (August 2023 - November 2025):

  • August 11, 2023: Initial email with golden parachute document and first C&D attached; documented wrongful termination, dual C&D retaliation, credential fraud on careers page
  • December 10, 2023: Comprehensive email detailing narcissistic abuse, wrongful termination timeline, LendUp CFPB violations, Mission Lane asset sale, Insights Servicing shell company, Ahead Financial fraud, toxic workplace patterns; attached golden parachute document; “I’ve suffered what I can only describe as narcissistic abuse over this past year”
  • December 13, 2023: Follow-up with comprehensive documentation; “This is my last email unless you want to have a conversation; I have some interest from Washington Post and Whistleblower Aid. I promise you this is a corrupt network of people.”
  • December 14, 2023: Final December email to “Jessica and team”: “You’ve recently published interviews with Sasha Orloff. I was an employee of his for 2.5 years and wrongfully terminated on May 31 this year for questioning his past with LendUp and Mission Lane. Sasha is a narcissistic abuser and pathological liar. He’s used TechCrunch and other outlets over a decade to rewrite history and avoid accountability. He is part of an in-group of C-levels and investors who rely on narrative control to cover their mistakes and falsify their self-centered ‘ethical’ values. I ask you one last time. Are you willing to hear my side of the story and, at minimum, deplatform him? At best, you can break a story that’s on the verge of collapse.” Included comprehensive documentation outline.
  • December 15, 2023: Video proof of normalcy after escalating TechCrunch emails
  • November 3, 2025: Final notification attempt (nearly 2 years later) with LinkedIn post link, key evidence summary (Insights Servicing, credential fraud, metric manipulation, ongoing consumer harm via lendup.com, whistleblower retaliation), offered full documentation

Timeline Context:

  • November 14, 2023: Custom photoshoot article published
  • December 1, 2023: Second article featuring Orloff on governance
  • December 10-15, 2023: Six notification attempts in 6 days (Dec 10, 13, 14, 15 to The Information + Dec 12, 14, 15 to TechCrunch)
  • December 20, 2023 (5-10 days after media blitz): Lisa M. Bowman (Orrick) prepared cease-and-desist letter (evidence-95, 96, 97) never sent but kept ready
  • November 3, 2025: Final notification attempt with concise evidence summary

What the 5-8 day gap demonstrates:

  1. Systematic surveillance of ALL media outreach - Legal team monitoring TechCrunch (Dec 12, 14, 15) AND The Information (Dec 14) notifications
  2. Pre-prepared legal intimidation ready to deploy when press contacted
  3. Consciousness of wrongdoing - Prepared C&D triggered by attempts to notify media, not by any threatening behavior
  4. Calculated deployment - Prepared but never sent; kept as ready-to-deploy intimidation infrastructure

Six Notification Attempts Across 27+ Months:

The persistent notification attempts (August 2023, December 2023, November 2025) provided comprehensive documentation including:

  • Full termination timeline with evidence of wrongful termination cover-up
  • LendUp CFPB violations and $46.8M+ enforcement actions
  • Mission Lane asset sale documents showing $0 to shareholders (golden parachute document attached)
  • Insights Servicing Inc. shell company connections
  • Ahead Financial / Rolling Loud lawsuit and shell company fraud
  • Toxic workplace patterns across LendUp, Mission Lane, and Puzzle
  • Dual cease-and-desist coordination (August 11, 2023)
  • Metric manipulation evidence (November 2025)
  • Ongoing consumer harm via lendup.com (November 2025)

“I ask you one last time” (December 14, 2023) language explicitly references prior unsuccessful attempts (August 11, December 10, December 13). The November 2025 final attempt demonstrates 27+ months of persistent notification efforts with zero response or investigation.

Pattern of Platforming → Persistent Notification → Systematic Suppression:

  • Nov 14, 2023: Custom photoshoot article = Premium platforming treatment
  • Dec 1, 2023: Second feature = Continued credibility building
  • Aug 11, 2023: First notification (with golden parachute doc + first C&D) = Ignored
  • Dec 10, 2023: Second notification (comprehensive fraud documentation) = Ignored
  • Dec 12-15, 2023: Media blitz (6 emails in 6 days to The Information + TechCrunch) = Ignored
  • Dec 13, 2023: “Washington Post and Whistleblower Aid” mention = No response
  • Dec 14, 2023: “I ask you one last time” = Explicit acknowledgment of prior unsuccessful attempts
  • Dec 20, 2023 (5-10 days after media blitz): Prepared C&D (evidence-95, 96, 97) = Legal infrastructure activates
  • Never sent, kept ready = Pre-prepared intimidation held in reserve
  • Nov 3, 2025 (nearly 2 years later): Final notification with concise evidence = Ignored
  • No investigation, no response, no follow-up = Complete silence despite six notification attempts across 27+ months
  • No correction or retraction of prior articles platforming CEO without disclosure of federal enforcement

The Information’s 27+ months of silence after six notification attempts demonstrates conscious choice to protect narrative rather than investigate documented fraud pattern. The proximity of the prepared (unsent) C&D to the December 2023 media blitz reveals legal team was monitoring ALL media outreach efforts across multiple outlets.

Media/VC Conflict: Jessica Lessin (Founder/Editor-in-Chief) + Sam Lessin (Investor in Network Portfolio Companies)

Jessica Lessin - Founder and Editor-in-Chief of The Information

  • Founded The Information December 2013 (subscription-based tech news)
  • Previously Wall Street Journal (8 years, technology and media reporter)
  • Launched “The Information Accelerator” (2017): incubator for subscription news startups offering capital, expertise, and distribution
  • Married to Sam Lessin

Sam Lessin - General Partner, Slow Ventures

  • Forbes Midas Seed List 2023 #12 (top seed-stage investor globally)
  • Slow Ventures founded 2015 (with Kevin Colleran, Dave Morin); raised $750M+ over 7 years
  • Portfolio includes multiple companies in Puzzle’s documented network:
    • Gusto (YC W12 + Kapor Capital portfolio; privacy policy documents AI development, comprehensive HR/payroll data collection, academic research partnerships)
    • Robinhood (fintech, early-stage investor)
    • Solana (blockchain, early investor)
    • Airtable (valued at $11.7B)
    • Pinterest, Casper, Postmates
  • Previously Facebook VP Product Management (2010-2014) following Drop.io acquisition
  • Listed as “intern at The Information” on podcast appearances and profiles
  • Co-founded Fin Analytics (raised $20M)

The Media/VC Conflict:

  1. The Information platforms Puzzle CEO (Nov 14, Dec 1, 2023) with custom photoshoot and governance thought leadership
  2. Sam Lessin is investor in Gusto (documented in Puzzle data network with privacy policy authorizing AI development and academic research)
  3. Gusto integrates with Puzzle → Sam’s portfolio company benefits from Puzzle’s data aggregation platform
  4. The Information receives six notifications (Aug 2023 - Nov 2025) documenting fraud pattern → zero response
  5. Sam is “intern” at his wife’s media company → Structural conflict between coverage decisions and portfolio interests
  6. The Information Accelerator invests in news startups → Jessica has VC role while running media company covering VC/tech

Pattern: Major tech media outlet platforms CEO while investor-founder’s spouse has financial interest in ecosystem companies that benefit from CEO’s data aggregation platform. 27+ months of persistent whistleblower notification (six attempts) ignored while articles remain uncorrected.

Why This Matters:

  • The Information is positioned as premium investigative tech journalism (subscription-based, not ad-driven)
  • Custom photoshoot treatment (Nov 14, 2023) suggests coordinated PR placement and editorial investment
  • Sam Lessin’s portfolio overlap with documented data network creates direct financial interest in suppressing fraud investigation
  • Jessica Lessin’s dual role (media founder + The Information Accelerator investor) mirrors network pattern of VC/media crossover conflicts
  • Silence after six notification attempts (27+ months) demonstrates editorial decisions potentially influenced by ecosystem relationships

On Deck (ODF) / Erik Torenberg / Julian Weisser

  • Erik Torenberg: Founder of Turpentine (acquired by a16z in April 2025, joined as general partner), former chairman of On Deck, cofounder and general partner at Village Global (2017-Dec 2020 with Ross Fubini)
  • Julian Weisser: CEO of On Deck

Network Connections:

  • Ash Rust (Sterling Road managing partner) authored Puzzle promotional content and blocked “Puzzle x LendUp” account in 2023 showing prior awareness
  • Sophia Xiao (General Catalyst partner, Puzzle Board Observer since 2019) publicly platformed Sasha at Empire Fintech Conference April 2023
  • Erik Torenberg (Village Global cofounder/GP with Ross Fubini 2017-2020, ODF chairman) - Turpentine produced “Tech Finance with Sasha Orloff” podcast before a16z acquisition
  • Ross Fubini (Village Global cofounder 2017-2020, XYZ Venture Capital founder 2016, Palantir advisor since 2010) - Kapor Capital partner 2011-2012 during LendUp Seed/A/B rounds, invested in Puzzle via XYZ, LinkedIn STILL lists LendUp as active investment despite CFPB ban
  • Interconnected VC/accelerator/military tech network (General Catalyst, Village Global, Sterling Road, a16z, Kapor Capital, Palantir, Anduril) enabling fraud through platforming

Pre-Notification Platforming:

  • September 28, 2021: ODF published “Organizing Time For Higher Impact: A Day in the Life of a CEO” featuring Sasha Orloff - extensive promotional interview platforming him as “On Deck Founders Fellowship alum” and celebrating his “track record of success at highly profitable companies” 3 months before CFPB permanent ban (December 2021) and during my employment at Puzzle (October 2020 - May 2023). ODF deleted the article sometime after June 2024 (last archive capture); original URL now dead.

On Deck "Day in the Life of a CEO" feature article header showing Sasha Orloff On Deck Sept 28, 2021 (3 months before CFPB ban): “Day in the Life of a CEO” featuring Sasha as “founder of LendUp, Mission Lane, and now Puzzle.io” celebrating his “track record of success at highly profitable companies.”

The Puff Piece vs. Reality:

The article presents Sasha as a disciplined, accountable CEO. Every major claim is contradicted by documented evidence:

ODF ClaimDocumented Reality
”doesn’t use social media”Photoshopped 3 likes → 12,362 on someone else’s LinkedIn comment; 13+ hour Wikipedia mental decompensation (Dec 4-5, 2025); constant LinkedIn/Twitter posting; I contacted the original commenter—they were “horrified"
"doesn’t have a television in the house”Coworker confirmed he had a TV in his office
”track record of success at highly profitable companies”CFPB permanently banned LendUp for lying to 640K+ consumers (December 2021); LendUp dissolved; Mission Lane fire-sold to QED (Asset Sale document proves conflicts of interest)
“discipline and accountability”Wrongful termination; revoked severance; three C&D letters threatening police instead of addressing documented fraud; 22 months of silence after “is this bullshit normal to you?"
"outcomes reverberate and impact the lives of tens, hundreds, or even thousands of people in the organization”Destroyed livelihoods through regulatory violations; employees now face RICO exposure and potential wage clawback
”being accountable to shareholders who expect you to provide them a return on their capital”Photoshopped investor metrics; January 2024 video announced “$50M raise” when Puzzle had $9M (Feb 2023); raised emergency round Nov 2023
”Sasha can’t afford the risk of wasting time”Spent 13+ hours editing Wikipedia during active federal proceedings
”Sasha attributes his track record of success”LendUp: CFPB banned. Mission Lane: fire sale. Puzzle: CFPB ban circumvention, federal investigation

Why ODF Deleted It:

Likely due to rebranding from beondeck.com to joinodf.com (last archive: June 2024). Regardless of intent, the article is now only accessible via archive—meaning ODF’s promotional content celebrating a CFPB-banned CEO’s “track record of success” exists only as preserved evidence. Every claim aged into documented fraud, and they still named him “Top 2025 Company” four years later.

Post-Notification Timeline:

  • January 19, 2024: Received two-part email documenting comprehensive fraud pattern and personal toll
    • 2:38 PM: Detailed wrongful termination, gaslighting, revoked severance, and emotional damage: “a real leader doesn’t fire people for remotely disagreeing, stonewall you for pointing out the lies in their career, dangle ‘severance’ with ridiculous strings attached, gaslight you on the circumstances of your wrongful termination, and revoke your severance unless they’re guilty and want to make an example out of you. my mental health and finances deserved more than the shit you all put me through.”
    • 2:43 PM (5 minutes later): Documented retaliation pattern including dual cease-and-desist letters, Asset Sale document, and directly asked: “is this bullshit normal to you? because to me, this is a privileged narcissist without an ounce of empathy for the people who give him their lives. fuck this.”
  • January 21, 2024 (2 days after notification): toxic.systems domain registered (not used until November 2025)
  • Continued platforming for 22 months after notification: podcast platform (Tech Finance with Sasha Orloff), partnership video, testimonials on joinodf.com, January 2024 podcast episode on financial discipline
  • January 2024 partnership announcement video: Julian Weisser with CEO stating “Puzzle just raised $50 million,” using ODF founder community for legitimacy
  • Puzzle maintains dedicated /odf landing page (https://puzzle.io/odf) targeting ODF companies - built during my employment (2020-2023) as part of deliberate network targeting strategy
  • October 30, 2025: Warning to both Weisser and Torenberg after ActualQuickBooks photoshopping incident
  • November 5, 2025: Notice of impending publication with link to documentation
  • November 8, 2025: Final notice stating “You are now aware” with complete documentation
  • November 11, 2025: SEC whistleblower complaints filed (3:33 AM, 6:32 PM) documenting federal retaliation
  • November 12, 2025: ODF announces “Top Companies of 2025” featuring Puzzle; Julian Weisser publicly comments (12:53 PM): “I was just wearing my Puzzle shirt yesterday” - literally wearing Puzzle merchandise on November 11 while SEC complaints were being filed and C&D retaliation was occurring
  • @joinodf blocked after public documentation: After posting timeline documenting January 2024 email asking “is this bullshit normal to you?”, 22 months silence, and November 12 “Top 2025 Company” designation, @joinodf Twitter account blocked. Response pattern complete: silence (22 months) → celebration (Top Company) → blocking (when publicly documented). Active suppression demonstrates consciousness of wrongdoing.
  • December 6, 2025: Public Twitter escalation directly addressing Julian Weisser and ODF:
    • Tagged @julianweisser: “do you understand @puzzlefin employees are facing potential jail time and wage clawback? and you specifically are enabling RICO?”
    • Tagged @joinodf @solofounding: “will face conspiracy charges and suffer from fraud by association if you dont act. ASAP. you need to get off twitter. tell sasha to step down. every notice since jan 2024 is more evidence against you all.”
    • Called out fraudulent inducement pattern: Sasha and Cwikla “specifically hired me after i was laid off from a fraud company. NS8 raised $123m and hired til the last minute. these CROOKS knew nobody would believe someone claiming they see fraud again. they knew i was economically vulnerable.”
    • Noted January 2024 partnership video contains material misrepresentations: announced “$50M raise” when Puzzle had $9M February 2023, raised emergency round November 2023
    • “all you do is wear disgusting puzzle socks and shirts, fraternize, and enable ABUSE. sasha uses people. swag is how he claims you.”
    • “your crew shows 0 fiduciary duty, 0 concern for psychological safety, 100% sociopathic self-dealing”
  • December 7, 2025: Continued escalation documenting pattern of ongoing emotional distress inflicted by Sasha Orloff, Puzzle, Julian Weisser, friends, and family; linked to Ongoing Emotional Distress section:
    • “i will individually sue ODF after this if i need to. i do not take your bullshit and negligence lightly” — tagging @joinodf, @FedericoNoemie, @solofounding, @eriktorenberg
    • “i sent this bullshit 1/19/2024 and you did nothing you fucking asshole @julianweisser”
    • Called out Mission Lane’s same-day retaliation: “I NEVER WORKED FOR THEM. THIS IS FUCKING RICO.”
    • Posted November 11 C&D excerpt: “Your publications and outreach reprise the same themes the Company addressed with you in August 2023” — noting ZERO REFUTATION of any claims
    • Posted unsent December 20, 2023 C&D template as evidence of monitoring/preparation
    • Called out November 20 police threats: “I TELL EVERYONE @dasha_shunina IS A RUSSIAN ASSET. ZERO REFUTATION. IMMEDIATE POLICE THREATS WITH ABSOLUTELY NO LEGAL BASIS.”
    • Quote-tweeted Weisser’s “Puzzle shirt” comment: “YOU SHOULD BE FIRED AND EXILED FROM STARTUP COMMUNITIES FOR LIFE”
    • “I LITERALLY FILED AN SEC COMPLAINT THE DAY YOU WORE A PUZZLE SHIRT. YOU KNEW. YOU BRAGGED ANYWAY. WHAT IS WRONG WITH YOU?”
    • “YOUR CONTINUED SILENCE IS ALREADY EVIDENCE. BLOCKING SHOWS CONSCIOUSNESS OF GUILT. AT THIS POINT I WILL PUT PRESSURE ON YOU DAILY UNTIL YOU WAKE THE FUCK UP.” (noting @joinodf blocked after announcing Puzzle as top company)
    • “you’re literally exactly like sasha. waxing poetic about startup BULLSHIT all day on your timeline acting like you’re a godsend to the community. as if your money brings anything good to this world. go fuck yourself bro.”
    • Called out deleted ODF puff piece: “@julianweisser and @joinodf produced a literal puff piece for @sashaorloff during my employment. they tried to delete it. it’s still archived” — linked to archived “Day in the Life of a CEO”; noted Sasha’s social media fixation and coworker confirmation of TV in office
    • Follow-up on photoshopped metrics: “do i need to remind you he photoshopped 3 likes to 12,362? SOMEONE ELSE’S LINKEDIN COMMENT. RESHARED ON TWITTER. i contacted the commenter. they were fucking horrified.”
    • RICO/narcissism pattern recognition: “diddy netflix series is the closest ive seen to @sashaorloff on a RICO/narcissism level. i cant turn off my pattern matching. you’re all disgusting even when SA isn’t involved”
    • Zionist entity callout: “@puzzlefin is spiritually israeli, a fully zionist entity”
    • Hasbara network: “@sashaorloff @puzzlefin @ycombinator and @openai are part of a hasbara network. narcissism. manipulation. emotional abuse. DARVO” — follow-up: “you either threaten police without refutation, blacklist for life, or hire a hitman. this is why im going public”
    • Daily email warning + cult analysis: “@julianweisser puzzle financial is a cult. tomorrow i start sending you, @FedericoNoemie, and @eriktorenberg emails every business day until you denounce @sashaorloff. federally logged. making sure you understand the consequences. making sure you understand i can sue you for more damages every single day.” (includes screenshot of cult analysis)
  • No response, accountability measures, or acknowledgment - chose active celebration over investigation; 22 months after asking “is this bullshit normal to you?” the answer was demonstrated through public endorsement one day after federal whistleblower retaliation, followed by blocking when pattern was made public

On Deck blocked user after posting timeline@joinodf blocked after posting public timeline: “Jan 2024: I asked @joinodf CEO Julian Weisser: ‘is this bullshit normal to you?’ 22 months of silence. Nov 11: Filed SEC whistleblower complaints. Nov 12: ODF names Puzzle ‘Top 2025 Company.’ Julian Weisser: ‘I was just wearing my Puzzle shirt yesterday.’” Response pattern complete: silence → celebration → blocking.

Warning to ODF Members:

ODF leadership received comprehensive fraud documentation across 10+ months (January 2024 - November 2025):

  • CFPB enforcement
  • False credentials
  • Photoshopped metrics
  • Wrongful termination
  • Dual cease-and-desist letters
  • Federal whistleblower complaints

Their response: Feature Puzzle as “Top 2025 Company” one day after SEC complaints documenting federal retaliation. CEO Julian Weisser publicly stated he was wearing Puzzle merchandise while complaints were being filed.

ODF operators are knowingly exposing their member community to a company under active federal investigation. Any member company that partners with, invests in, or uses Puzzle based on ODF’s endorsement should understand that ODF leadership made this recommendation with full knowledge of the documented fraud pattern. When accelerators and founder communities platform fraud after direct notification, they create liability exposure for members who rely on their vetting and judgment.

Why ODF Has Structural Incentive to Suppress:

  1. Vetting Credibility: Admitting they platformed a CFPB-banned CEO (September 2021, 9 months post-ban) destroys their credibility in evaluating founders. How did their “rigorous selection process” miss a public federal enforcement record?

  2. Network Reputation Damage:

    • Erik Torenberg is GP at Village Global
    • Sophia Xiao is General Catalyst partner (Puzzle Board Observer, lead investor)
    • Ash Rust is Sterling Road managing partner (wrote promotional content)
    • Exposing Puzzle fraud damages relationships with major VC firms that ODF needs for deal flow and member opportunities
  3. Business Model Dependency: ODF’s value proposition is access to vetted founders and investment opportunities. Acknowledging they featured a fraud operator for years undermines their entire screening framework and member trust.

  4. Legal/Reputational Liability: Public admission creates exposure for all ODF members who partnered with Puzzle based on ODF’s endorsement. Silence + blocking is cheaper than accountability.

  5. Success Story Protection: Puzzle’s “$50M funding round” (featured in ODF promotional content) becomes a cautionary tale about VC due diligence failures rather than a success story for ODF marketing.

The Pattern:

ODF’s business model depends on association with “successful” founders backed by powerful VC firms. When fraud is exposed, accountability damages those relationships and undermines their vetting credibility. Suppress, celebrate, block - which is exactly what ODF did.

Women Tech Meetup / Dasha Shunina

  • Not incorporated - no entity exists under “Women Tech Meetup,” “Dasha Shunina,” “Daria Shunina,” or CEO’s name in OpenCorporates or state registries
  • Founded by Puzzle employee (GTM strategist), sponsored by Puzzle
  • Founder previously “Daria Shunina” - name change documented across LinkedIn posts (2022), podcast appearances (2021: Head of International Startups Relations, Skolkovo Foundation, Russia’s government-backed innovation center that FBI warned about in 2014 for accessing U.S. classified technology)
  • Charges $15 “Support Women Tech Meetup!” tickets while serving as marketing platform for employer
  • Sells “Who Runs The World?” feminist merchandise for $100 - limited to 30 hoodies, payment goes directly to “Daria Shunina,” proceeds fund customer acquisition for CEO who deleted employee equity
  • Platform for “empowerment” messaging while employer deleted employee equity
  • November 2025: Puzzle sponsored event 3 weeks after ActualQuickBooks documentation
  • Weaponized progressive branding as reputation laundering - monetizing “women’s empowerment” while marketing for company with documented fraud
  • This is corporate astroturfing disguised as community organizing

Women Tech Meetup $15 ticket$15 ticket charge to “Support Women Tech Meetup!” - monetizing progressive branding while serving as employer marketing platform.

Who Runs The World hoodie payment page “Who Runs The World?” hoodie sold for $100 by unincorporated marketing operation, payment to “Daria Shunina.”

Archie Group (Crisis PR / Reputation Management)

  • Fintech-specialized PR firm handling LendUp, Ahead, and Daylight
  • LendUp: “Led a public change management initiative and raising new CEO’s profile” during CFPB violations
  • Listed Ahead as separate client despite being announced as LendUp subsidiary
  • Created media narrative separating Ahead from LendUp’s regulatory problems (MEFeater, Modern Luxury coverage)
  • Daylight (LGBTQ+ digital bank) included in “Exceptionals program”
  • Systematic reputation laundering across fintech fraud network
  • Specializes in crisis management for companies facing regulatory scrutiny

Capital One Connection: The Subprime Lending Mafia

The pattern: Institutional knowledge of exploiting subprime consumers transferred from Capital One through alumni network to LendUp → Mission Lane.

Vijesh Iyer: The Subprime Architect (2000-2007)

Capital One Career Trajectory (LinkedIn):

2000-2002: Prime Credit Card Products

  • Director, Profitability Management, Prime Credit card (Apr 2001-Mar 2002)
  • Senior Business Manager, Product Management, Prime credit card (Mar 2000-Apr 2001)
  • Developed Capital One’s “No Hassle” product

2002-2005: Building the Subprime Credit Card Empire

  • VP, Credit Risk & Profitability, Subprime credit card (Mar 2002-Feb 2005)
  • From his LinkedIn: “Responsible for credit quality & profitability of new customers (6M annual) & early portfolio management for the Subprime segment of the credit card business. Key member of the management team that grew the Subprime card business and established Capital One as the market leader in this segment. Built a strong team by growing the original 3 member team to 50 over a period of 3 years.”
  • 6 MILLION annual subprime credit card customers
  • Built Capital One’s market leadership in subprime credit cards
  • Critical context: This is 2002-2005, peak subprime lending before 2008 crash

2005-2007: Auto Finance & Mortgage Crisis

  • Chief Credit Officer, Capital One Auto Finance (Mar 2005-Feb 2007)
    • “Transformed the risk management culture” during “rapid growth (managed loans grew from ~$10 to ~$22 B)”
  • Head of Marketing, Product & Credit, Mortgage Division (Apr 2007-Mar 2008)
    • Led integration of Green Point Mortgage ($35 Billion annual loans)
    • “Recommended shutdown of Green Point very early in the credit downturn (pre Bear Stearns), which significantly reduced the overall losses suffered by Capital One”
    • Managed the winding down of the business

2008: Cerberus (Private Equity Vulture Fund)

  • Senior Consumer Lending Advisor/Expert (May 2008-Sep 2008)
  • “Assisted in due-diligence efforts on various private student-lending platforms”
  • Pattern: Subprime expertise applied to student loan market

2009-2015: PayPal

  • Sr Director, International Risk & Consumer Risk Management (Mar 2009-Feb 2011)
  • Vice President, Risk Management (Mar 2011-Oct 2013)
    • “Managed a direct team of over 80 people supported by an indirect team of ~200 risk management & ~1000 risk operations professionals”
    • “Championed and launched PP working capital - our first small business credit product”
  • Vice President, Consumer Payments & Profitability (Nov 2013-Mar 2015)
    • “The team produced $30-40M in incremental profits in year 2 of the program”

2015-2018: LendUp (COO/President)

  • Applied Capital One subprime credit card playbook to payday lending alternative
  • Built LendUp’s credit card business “from scratch” (his own words)
  • 250k+ customers, >$100M in assets
  • “Created the top rated card in our segment (Customer’s choice at Credit Karma)”

2018-2020: Mission Lane (Founding CEO)

  • Spun LendUp’s credit card business into Mission Lane
  • Raised $300M debt + $200M equity
  • Applied Capital One subprime expertise to independent credit card company

The Mission Lane CEO Pipeline: All Capital One Alumni

All three CEOs of Mission Lane came from Capital One’s subprime credit card operations:

  1. Vijesh Iyer (Founding CEO, Dec 2018-Aug 2019)

    • Capital One: 7 years (2000-2007)
    • Built Capital One’s subprime credit card market leadership (6M annual customers)
    • Applied playbook to LendUp → Mission Lane
  2. Shane Holdaway (CEO, Aug/Sep 2019-Feb 2024)

    • 10+ years at Capital One in subprime credit cards
    • Former CEO Barclays US Consumer Bank
    • Brought institutional subprime expertise
  3. Brandon Black (CEO, Feb 2024-present)

    • Capital One executive
    • Former CEO Encore Capital Group (debt collection)
    • Mission Lane board member since 2019

The Institutional Knowledge Transfer

The Pipeline:

Capital One Subprime Credit Cards (2000-2007)
    → 6M annual subprime customers
    → Market leadership in subprime segment
    → Vijesh Iyer builds the empire
              ↓
Cerberus Private Equity (2008)
    → Due diligence on student lending platforms
    → Subprime expertise applied to new markets
              ↓
PayPal (2009-2015)
    → Risk management at scale
    → Launched first small business credit product
    → Consumer payments profitability ($30-40M)
              ↓
LendUp (2015-2018)
    → Payday lending "alternative"
    → Built credit card business from scratch
    → 250k+ customers, $100M+ assets
    → CFPB permanent shutdown (2021)
              ↓
Mission Lane (2018-present)
    → All 3 CEOs from Capital One
    → Same subprime demographic (avg credit score 604)
    → 33.99% APR
    → QED Investors backing (same investor as LendUp)

Why This Matters

Systematic institutional knowledge transfer, not accidental expertise overlap:

  1. Vijesh Iyer spent 3 years (2002-2005) building Capital One’s subprime credit card empire to market leadership
  2. 6 million annual subprime customers at Capital One
  3. Applied that playbook to LendUp’s credit card business (2015-2018)
  4. Spun it into Mission Lane with backing from same investor (QED) that funded LendUp
  5. All three Mission Lane CEOs bring Capital One’s institutional knowledge of how to profit from subprime consumers

The product being sold:

  • Target demographic: Credit score 604 (“Poor” to “Fair”)
  • APR: 33.99% variable
  • Customer acquisition: Credit Karma (FTC settlement, 497k victims) promotes Mission Lane
  • QED Investors profiting from entire pipeline

QED Investors: Capital One Founder as Kingpin

Nigel Morris - QED Investors co-founder (2007)

  • CO-FOUNDED CAPITAL ONE in 1994
  • President of Capital One (1994-2004)
  • Built Capital One into subprime credit card empire during his tenure
  • Founded QED Investors three years after leaving Capital One
  • LendUp board director
  • Named board chair LendUp June 21, 2018 (6 months before Mission Lane asset sale)
  • Mission Lane board chair/director (asset sale December 2018)
  • Profited from both sides of LendUp → Mission Lane fire sale
  • Coordinated board positioning: Installed as chair 6 months before sale to QED-backed entity

Forbes Midas List Celebration Timeline (Rising While Portfolio Under Federal Enforcement):

  • April 2021: #86 on Forbes Midas List (debuts) - QED press release: “led QED’s early investment into… Nubank”; “currently sits on… the boards of… Prosper” (P2P lender, SEC settlement 2016 for misleading investors about loan performance); LendUp board chair 2.5 years at this point
  • April 2022: #54 on Forbes Midas List (2nd appearance) - rose 32 places (from #86 to #54) 4 months after LendUp CFPB permanent ban (Dec 2021, $40M restitution); “sits on the boards of… Mission Lane” per QED press release; celebrating Nubank IPO ($41B market cap) while chairing Mission Lane board
  • May 2023: 3rd consecutive year on Midas List - “chairman of… Mission Lane” per QED press release; 17 months after LendUp shutdown; 8 months after Credit Karma FTC settlement ($3M, 497k victims); Quote: “We have the scars on our back to help us shepherd our founders through this tumult while living up to our brand promise to provide the best advice in fintech” - said while chairing Mission Lane and celebrating portfolio companies with federal enforcement actions
  • June 2024: #50 on Forbes Midas List (rose 48 spots - “second-highest climb of any investor returning from 2023 edition,” 4th year in a row) - “Chairman of… Mission Lane” per QED press release; 30 months after LendUp shutdown; 21 months after Credit Karma FTC settlement; rising on prestige list while chairing company exhibiting identical predatory patterns to CFPB-banned LendUp

Frank Rotman - QED Investors co-founder (2007), transitioning to Partner Emeritus at end of 2025

  • LendUp board member June 21, 2018 (early Capital One employee/Chief Credit Officer)
  • LendUp convertible notes holder
  • False public statements with board-level knowledge: January 2019 press release
    • Claimed “two companies up for long-term success” → LendUp permanently shut down 2 years later
    • Claimed “full growth potential” and “better positioned” → Fire sale ($29M after $150M+ raised), $0 to shareholders
    • Stated “intimately familiar” with business → Board seat gave knowledge of CFPB violations (2016, 2018)
    • Framed asset sale following regulatory violations as strategic “growth opportunity”
    • Quote: “great businesses need to be built on top of foundationally good businesses” (May 2023 QED blog) - said while celebrating Midas List ranking based on Credit Karma ($7.1B exit, FTC settlement for deceiving 497k consumers) and sitting on LendUp board (CFPB shutdown Dec 2021, $40M restitution)
  • Profited from Mission Lane fire sale
  • Portfolio: Credit Karma (FTC settlement, 497k victims) + LendUp (CFPB shutdown) + Mission Lane (acquisition vehicle)

Forbes Midas List Celebration Timeline (Celebrating Fraud):

  • April 2018: #60 on Forbes Midas List - Forbes: “Among other startups, Rotman has invested in Avant, one of the largest online lending platforms with a $4.0 billion loan portfolio” - celebrating DURING ACTIVE LENDUP CFPB VIOLATIONS (2016 first violation, 2018 second consent order); joined LendUp board 2 months later (June 21, 2018)
  • 2019: #71 on Forbes Midas List - celebrating Credit Karma 1 year after joining LendUp board, DURING ACTIVE CFPB VIOLATIONS (third violation period 2018-2019)
  • 2020: #66 on Forbes Midas List (4th year) - celebrating Credit Karma, sitting on LendUp board DURING ACTIVE CFPB VIOLATIONS (LendUp’s third violation period continued through Feb 2020)
  • April 2021: #69 on Forbes Midas List (4th consecutive year) - QED press release: “led QED’s investment in Credit Karma, which was acquired by Inuit in December for $7.1 billion”; celebrating $7.1B exit (Dec 2020) 8 months before FTC settlement announcement (Sept 2021)
  • April 2022: #45 on Forbes Midas List (5th consecutive year) - rose 24 places (from #69 to #45) 4 months after LendUp CFPB permanent ban (Dec 2021, $40M restitution), 7 months after Credit Karma FTC settlement announcement (Sept 2021, finalized Feb 2022); climbing while portfolio companies under federal enforcement
  • May 2023: 6th consecutive year on Midas List - celebrating Credit Karma exit ($7.1B) 8 months after FTC settlement finalized ($3M, 497k victims deceived); 17 months after LendUp shutdown
  • June 2024: #77 on Midas List (rose 13 places, 7th consecutive year) - still celebrating Credit Karma exit 28 months after FTC settlement, 30 months after LendUp shutdown

The QED Pipeline:

Nigel Morris: Capital One Co-Founder & President (1994-2004)
    → Built subprime credit card empire
              ↓
QED Investors Founded (2007)
    → 3 years after leaving Capital One
    → Applies Capital One playbook to venture capital
              ↓
QED Portfolio Strategy:
    → LendUp (2012-2021): Board director (Nigel from 2016)
    → June 2018: Nigel named Board Chair, Frank named Board Member (6 months before sale)
    → December 2018: Asset sale to Mission Lane ($29M after $150M+ raised)
    → January 2019: Frank's false public statements:
          • "Two companies up for long-term success" (LendUp shut down 2 years later)
          • "Full growth potential" (Fire sale, $0 to shareholders)
          • "Intimately familiar" (Board knowledge of CFPB violations)
          • "Cracked the code" (Yes, on regulatory violations)
    → Credit Karma (FTC settlement, 497k victims): Investor, Frank board director
    → Mission Lane (2018-present): Board chair (Nigel), fire sale profit (both)
              ↓
Profit from both sides:
    → Invested in fraud entity (LendUp)
    → Invested in acquisition vehicle (Mission Lane)
    → Invested in customer funnel (Credit Karma)
    → Portfolio double-dipping across entire subprime ecosystem

Why This Is Key Evidence:

  1. Capital One CO-FOUNDER creates QED Investors
  2. QED invests in LendUp with Nigel as board director
  3. June 2018: QED co-founders installed as board leadership (Nigel chair, Frank member) 6 months before asset sale
  4. December 2018: Asset sale to QED-backed Mission Lane ($29M after $150M+ raised, $0 to shareholders)
  5. January 2019: Frank Rotman publicly claims “two companies up for long-term success” and “full growth potential” with board-level knowledge of CFPB violations
  6. December 2021: LendUp permanently shut down (2 years after Frank’s “long-term success” claims)
  7. QED invests in Credit Karma (Frank board director) which funnels customers to Mission Lane
  8. Same subprime credit card expertise from Capital One applied to entire portfolio
  9. Frank Rotman’s false statements: Board member publicly misrepresenting distressed asset sale as “growth opportunity” while knowing regulatory violations; potential misrepresentation to shareholders/investors
  10. All three Mission Lane CEOs from Capital One (Vijesh, Shane, Brandon)
  11. Multiple LendUp board directors from Capital One executive ranks

Capital One’s founder created a deliberate pipeline to apply subprime expertise across portfolio companies while profiting from both fraud entity and its acquisition vehicle.

LendUp board members: Multiple board directors/chairs from Capital One executive ranks, bringing subprime lending expertise across board and executive leadership.

This is the subprime lending mafia: Capital One’s co-founder (Nigel Morris) creates QED Investors, recruits Capital One alumni (Vijesh Iyer, Shane Holdaway, Brandon Black, board directors) to apply institutional subprime playbook to LendUp → Mission Lane, profits from both sides of fire sale, while Credit Karma (also QED portfolio) funnels customers. Systematic exploitation through founder-controlled network.

Meow Integration: Another QED Portfolio Company Pipeline

Meow (Brandon Arvanaghi, CEO) - QED Investors portfolio company - Series A announced July 18, 2022 ($22M led by Tiger Global with QED participation)

Puzzle Integration (Announced June 2025):

  • Automated statement loading integration announced June 25, 2025
  • Partner page offers “50% off Starter Plan with MEOW506”
  • Direct API integration for “auto-loading PDF statements into reconciliations”
  • Another financial data pipeline: Meow (QED portfolio) → Puzzle (CFPB-banned CEO)

Brandon Arvanaghi Platforming:

Pattern Recognition:

CompanyQED RolePuzzle ConnectionForbes Status
Credit KarmaPortfolio (Frank Rotman board)Funnels to Mission Lane (Nigel Morris board chair)N/A
LendUpPortfolio (Nigel Morris board director)Same CEO as Puzzle (Sasha Orloff)N/A
Mission LanePortfolio (Nigel Morris board chair)Same CEO as LendUp/PuzzleForbes Midas List #90 (LendUp board)
MeowPortfolio (QED investor, Series A 2022)Direct API integration with Puzzle (Jun 2025)CEO Forbes 30 Under 30 Finance 2024

Why This Matters:

  1. QED portfolio company integrates with Puzzle (CFPB-banned CEO’s company) 3 years after Meow Series A and 3 years after QED’s LendUp board director appears on Forbes Midas List 2025 #90
  2. Forbes systematic platforming of QED network:
    • Brandon Arvanaghi (Meow CEO): 30 Under 30 Finance 2024 + paid Samsung BrandVoice promotional video
    • Nigel Morris (QED founder, LendUp board): Forbes Midas List #90 (2025)
    • Credit Karma (QED portfolio, FTC settlement 497k victims): Forbes “Best Brands for Value” #235
    • While suppressing Puzzle fraud investigation despite former senior writer (David Jeans) acknowledging “Yeah, I know of Sasha”
  3. Forbes monetizing credibility laundering: Accepts payment from Samsung to platform QED portfolio CEO as financial services disruptor; ranks QED portfolio company (Credit Karma) as #235 value brand despite FTC settlement; platforms QED founder on Midas List; all while actively suppressing fraud documentation about other QED-backed entities (LendUp, Mission Lane, Puzzle)
  4. Another data pipeline: Meow banking data → Puzzle API → OpenAI (documented data extraction infrastructure)
  5. QED pattern: Portfolio company (Meow) integrates with company run by CEO QED backed through CFPB violations (LendUp) and subsequent fire sale (Mission Lane)
  6. Network coordination: QED invests in Meow Series A (Jul 2022) → Puzzle-Meow integration announced (Jun 2025) → demonstrates ongoing QED-backed data pipeline expansion despite federal enforcement history

The Meow integration reveals QED Investors continues backing financial infrastructure connecting to companies run by CFPB-banned operators, with Forbes systematically platforming the entire QED network (Meow CEO via paid Samsung partnership, Credit Karma as #235 value brand, Nigel Morris on Midas List) while suppressing fraud documentation about other QED-backed entities in the same network.

The Pattern

Systematic network complicity, not isolated due diligence failures:

  • Media outlets receive evidence → continue promotion
  • Accelerators/investors notified → maintain portfolio companies
  • Diversity-branded institutions provided credibility shields
  • Professional networks (CPAs, accountants) exploited through suppression and testimonial deployment
  • Each actor benefits from network while externalizing consumer harm

Documentation provided to these entities included: CFPB enforcement orders, shareholder agreements, corporate filings, court judgments, photoshopped metrics, deleted equity, separation agreements. The choice to continue enablement was informed, not ignorant.

The AI Bubble is Built on Legally Toxic Data

This section connects the 13-year fraud pattern to the AI industry’s competitive advantage: training data. The evidence shows systematic data extraction using YC as infrastructure, not isolated startup fraud.

The Training Data Problem

The race to Artificial General Intelligence (AGI) depends on massive, high-quality training data. Public datasets have been exhausted. Synthetic data remains insufficient. OpenAI’s $500 billion valuation (October 2025, up from $157 billion in late 2024) rests fundamentally on its training data advantage: the ability to access and process information that competitors cannot.

The solution documented here: systematic extraction from populations that cannot refuse, using progressive branding as operational camouflage.

Y Combinator as OpenAI’s Data Infrastructure

The Infrastructure Thesis:

Y Combinator functions as a systematic data collection platform for OpenAI, using “backing bold founders” as cover for sector-specific extraction operations. Pattern recognition from public records, SEC filings, and federal enforcement actions documents this infrastructure.

The Playbook (Repeated Across Sectors):

  1. Target vulnerable populations: Subprime consumers, undercapitalized hospitals, developing country residents, desperate startups—populations that cannot afford to refuse
  2. Progressive branding: “Financial inclusion,” “healthcare access,” “universal basic income,” “founder-friendly”—language that inverts actual extraction into claimed assistance
  3. YC legitimacy: Trusted accelerator badge provides instant credibility to operations that would otherwise face immediate scrutiny
  4. Rapid scaling: Maximize data collection before regulatory attention or competitive pressure
  5. Network protection: Suppress whistleblowers, coordinate media silence, deploy legal threats
  6. Data extraction as actual product: The stated service is operational camouflage; data collection is the business model
  7. Geopolitical distribution: Israeli tech ecosystem access, Chinese data flows, US AI dominance

Financial Proof of Coordination:

SEC Form F-3 Registration Statement (Pagaya Technologies, Theorem Technology acquisition, November 21, 2024) documents:

  • Altman Family LLC (Sam Altman’s personal family investment vehicle)
  • Y Combinator W2014 LLC (YC institutional fund)
  • Sasha Orloff (CFPB-banned CEO)

All three listed as Theorem Technology stockholders (consumer credit asset management, 2014-2024).

Financial co-investment protection explains 27+ months of continued platforming despite comprehensive documentation of fraud, CFPB permanent ban, photoshopped metrics, and federal whistleblower complaints.

The Extraction Operations

The following examples demonstrate the systematic pattern. These are not fraud entities being added to the documented network. They are pattern illustrations showing how YC functions as data acquisition infrastructure across sectors.

Financial Data (US Consumers & Startups):

LendUp (YC W12, 2012-2022): 140,000+ subprime consumer financial behavior data

Puzzle (2020-present): Startup financial operations data

  • $312 total revenue (2020-2023) vs $10M+ burned
  • $171K hosting costs (2022) vs $52.68 revenue = 3,252:1 ratio
  • OpenAI integration announced for “transaction categorization”
  • Technical architecture section proves microservices design optimized for data collection, not product features
  • Distribution infrastructure (puzzle.io/yc, puzzle.io/odf) built before monetization strategy
  • YC continued platforming despite 27+ months documentation

Healthcare Data (African Patients):

Helium Health (YC S17, 2017-present): 1+ million African patient records

  • Self-described as “Largest healthcare data repository on Africans with over 1 million health records”
  • Tencent investment (Chinese tech giant data access): “Nigeria’s Helium Health raises $10M Series A for Africa expansion” (May 2020)
  • Additional $30M Series B (2023) backed by Tencent: “Helium Health gets $30M, backed by AXA IM Alts and 23andMe’s Anne Wojcicki”
  • HeliumCredit: Lending to healthcare providers based on EMR data—identical to LendUp’s “credit building ladder” playbook
  • Targets undercapitalized African healthcare facilities: “90% of Africa’s health facilities run on paper” (vulnerable demographic unable to refuse digitization offer)
  • CEO quote: Collecting “everything from their operations, to their inventory, to their stock, to their invoices and how it’s invoiced. Who pays and when they pay, and how they pay, or their insurance and their insurance claims”
  • Pattern: “Healthcare digitization” → patient data extraction → embedded lending → operational/financial control

Biometric Data (Global Populations):

Worldcoin (2019-present): 26+ million iris scans from developing countries

  • Sam Altman co-founder (launched while YC President)
  • Andreessen Horowitz invested $135M (2025): “Worldcoin secures $135M investment from a16z and Bain Capital”
  • Khosla Ventures invested $100M (2022)
  • “Proof of personhood” framing for global biometric identity database
  • Targets economically vulnerable populations in developing countries (Kenya, Indonesia, Argentina)
  • Same progressive branding: “Universal basic income” for scanning your eyeball
  • Regulatory scrutiny increasing: EU data protection investigations, Kenya suspension, privacy concerns across multiple jurisdictions

The 2025 Recruitment: YC’s Request for Startups

From Healthcare AI Guy newsletter (May 13, 2025), summarizing Y Combinator’s official Summer 2025 Request for Startups:

“YC points to a wave of new startups building AI agents that extract, structure, and re-enter data across messy systems like PDFs, faxes, or disconnected EHRs.”

Context provided: “The US spends over $1 trillion annually on healthcare administration” as justification for data extraction automation.

This is open recruitment for data extraction operations disguised as “administrative efficiency.”

After Helium Health demonstrated the playbook—1+ million patient records from African healthcare facilities using “digitization” as cover—YC is now explicitly recruiting additional healthcare data extraction operations. The RFS language is revealing: “extract, structure, and re-enter data.” Not “improve patient outcomes” or “reduce costs.” Extract data.

The Altman Timeline: Consciousness Throughout

2011-2014: YC Partner

  • LendUp selected for YC W12 batch (2012)
  • Involved in batch selection and portfolio management

2014-2019: YC President

  • March 2015: Sasha Orloff publicly identified as Netanyahu financial backer (one year before first CFPB violation)
  • September 2016: LendUp first CFPB violation ($6.3M penalty for deceptive marketing, false promises)
  • April 2017: Sam Altman attends LendUp “LGBTQ + Allies” event (after first CFPB violation, before second)
  • 2017: Sam Altman’s YC Annual Letter praises LendUp as “innovating in financial services technology” (7 months after first CFPB violation)
  • 2014-2024: Altman Family LLC co-invests with Orloff in Theorem Technology (consumer credit asset management)
  • May 2018: LendUp second CFPB violation (additional penalties)
  • 2018: LendUp asset sale to Mission Lane (QED Investors profit from both fraud entity and acquisition vehicle)
  • 2017: Helium Health joins YC S17 batch (African patient data collection begins)
  • 2019: Co-founds Worldcoin (biometric extraction) while still YC President

2015-present: OpenAI

  • October 2015: YC introduces YC Research to fund long-term fundamental research
  • December 2015: OpenAI announced as first project of YC Research (per Gabriel Jarrosson LinkedIn: “OpenAI started in a corner of YC”)
  • Sam Altman donated $10M to YC Research; researchers paid as full-time YC employees with equity in Y Combinator
  • YC Research created OpenAI: Institutional infrastructure, funding, and early access structure built into YC accelerator
  • 2019: Becomes independent nonprofit/capped-profit hybrid
  • 2019: Altman becomes CEO
  • YC startups get preferential early access: “Long before GPT4 dropped, Cohorts got early access” (Jarrosson)
  • Structural customer relationship: YC startups are biggest customers of AI labs (OpenAI, Anthropic, Cursor)
  • Build-ahead advantage: “YC Startups have even reported building products that aren’t yet viable with current models, knowing they’ll have early access to models that can handle probabilistic agentic flows” (Jarrosson)
  • 2024: $157 billion valuation based on training data advantage

YC Research Structure = YC-to-OpenAI Pipeline:

This wasn’t just Sam Altman co-founding OpenAI while YC President—YC created the institutional infrastructure that birthed OpenAI, then maintained preferential access for YC portfolio companies. The entire YC ecosystem became OpenAI’s customer acquisition and data pipeline:

  1. Funding: Sam donated $10M to YC Research
  2. Employment: OpenAI researchers were YC employees
  3. Equity: Researchers received equity in Y Combinator
  4. Early access: YC startups get models before public release
  5. Customer pipeline: YC startups become biggest customers of AI labs

Why this matters for Puzzle:

  • Puzzle gets OpenAI early access as part of YC cohort benefits
  • I was terminated 28 days after raising OpenAI API concerns (May 2023)
  • YC has structural incentive to suppress fraud documentation that questions YC-to-OpenAI pipeline
  • It’s institutional infrastructure that created OpenAI protecting itself, not just “founder loytalty”

2020-2024: Puzzle Era

  • 2020: Puzzle founded (Orloff still co-invested with Altman Family LLC via Theorem)
  • 2023: OpenAI integration announced for “transaction categorization”
  • August 2023: I notified YC of fraud documentation
  • October 2024: Theorem acquired by Pagaya (Orloff and Altman Family LLC both receive Israeli AI lending company shares)
  • November 2025: YC continues platforming despite federal whistleblower complaints

He knew. Throughout. The financial co-investment proves it.

Geopolitical Data Distribution

Israeli Tech Ecosystem Integration:

  • March 2015: Netanyahu financial backing (Orloff publicly identified)
  • 2014-2024: Theorem Technology investment (consumer credit asset management data)
  • October 2024: Pagaya acquisition (Orloff receives shares in Israeli AI lending platform, Tel Aviv-based)
  • February 2025: Pagaya under securities fraud investigation
  • October 2023: General Catalyst (Puzzle lead investor) pledged $250K to Israeli humanitarian initiatives
  • December 2023: General Catalyst unpinned Israeli pledge tweet after being called out

Chinese Tech Giant Access:

  • Tencent investment in Helium Health (Chinese conglomerate with government ties)
  • 1+ million African patient records accessible to Chinese-backed entity
  • Operational/financial data from 1,000+ African healthcare facilities
  • Insurance claims, inventory, payment systems—complete healthcare ecosystem visibility
  • Geopolitical concern: African healthcare data accessible to Chinese government-linked company

US AI Dominance:

  • OpenAI (Sam Altman CEO)
  • Training data from systematic global extraction operations
  • $500 billion valuation (October 2025, up from $157B in late 2024)
  • AGI race leadership dependent on data advantage
  • Microsoft $13 billion investment exposed to data provenance questions

Pattern documented: Regulatory arbitrage across jurisdictions, data accessible to geopolitical competitors (Chinese government-linked entities, Israeli tech ecosystem), “national security” framing available to suppress investigation depending on which government is asking questions.

The Protection Network

When fraud is exposed and documented:

  • Dual C&D letters (Puzzle + Mission Lane, same day, August 11, 2023)
  • “Mentally ill” gaslighting in separation agreements
  • Revoked severance after whistleblowing
  • 27+ months media silence (YC, TechCrunch, Forbes all notified, all continued support)
  • 4-minute comment deletion (warning about Puzzle on CPA conference LinkedIn post)
  • SEC retaliation threats (Orrick law firm, November 11, 2025, same day as federal whistleblower complaint)

Why protection network operates effectively:

  • a16z portfolio conflicts: LendUp + Worldcoin + OpenAI investments = cannot expose one without implicating entire data extraction infrastructure
  • YC financial alignment: Co-investment via YC W2014 LLC in Theorem + brand protection across portfolio
  • Forbes Midas List conflicts: Lead investors featured on rankings (#8 General Catalyst, #88 XYZ Capital) = structural inability to investigate fraud by people celebrated on own prestige lists
  • TechCrunch promotional coverage history: 9 LendUp puff pieces (2012-2017), zero Mission Lane coverage despite fraud continuation, Women Tech Meetup hosting (4+ conferences 2024-2025) after notification, no statement made

Each entity protects the network because exposing fraud implicates their own investment decisions, editorial coverage, platforming choices, and financial relationships.

Market Implications: Why This Pops the Bubble

If training data provenance is systematically questioned:

1. Legal Liability (Every Dataset Becomes Suspect):

  • CFPB violations contaminate consumer financial data: LendUp’s “repeatedly lied to consumers” finding raises consent and disclosure questions for all data collected 2012-2022
  • Biometric consent issues: Worldcoin’s iris scanning of vulnerable populations in developing countries faces regulatory challenges across EU, Kenya, and other jurisdictions
  • Healthcare privacy violations: HIPAA (US) and GDPR (EU) implications for patient data collection without adequate consent or security; Tencent access to African patient records raises sovereignty questions
  • Securities fraud exposure: Pagaya under investigation (February 2025); if Theorem data contributed to Pagaya models, entire AI lending platform built on fraudulent foundation

2. Valuation Collapse (Competitive Advantage Evaporates):

  • OpenAI’s $500 billion valuation (October 2025) rests on assumption of superior training data access
  • If data provenance is legally toxic, competitive advantage disappears
  • Regulatory orders could invalidate entire datasets (precedent: Cambridge Analytica data destruction orders)
  • Microsoft’s $13 billion investment becomes exposure to systematic data extraction scandal
  • Training new models without tainted data could set capabilities back years
  • Competitor advantage: Anthropic, Google, others with cleaner data provenance gain relative position

3. Regulatory Cascade (Coordinated Government Action):

  • CFPB investigation (my supplemental complaint documents ongoing consent decree violation via Mission Lane and Puzzle Financial)
  • California Bureau of Accounts (state complaint A-2026-1047 acknowledged November 14, 2025)
  • EU AI Act enforcement (Worldcoin already under investigation; healthcare AI next target)
  • Data protection authorities (GDPR violations for patient data; state privacy laws)
  • Congressional hearings (geopolitical angle: data flowing to China via Tencent, Israeli access via Pagaya, Netanyahu political connections)
  • FBI counterintelligence (Skolkovo Foundation infrastructure already documented; broader data extraction pattern warrants national security review)

4. Investor Flight (Systematic Revaluation):

  • Every YC healthcare AI startup faces scrutiny on actual data collection practices vs. stated purpose
  • “Data extraction” investment thesis becomes publicly toxic (similar to “surveillance capitalism” reframing)
  • Fund performance tanks for a16z, Khosla Ventures, YC funds with heavy AI/data exposure
  • Limited partner pressure on venture firms to demonstrate ethical data sourcing
  • Public company exposure: Intuit (Credit Karma), any company with YC healthcare AI acquisition targets

The documented pattern: The AI revolution’s training data advantage is built on systematic extraction from vulnerable populations using progressive branding as operational camouflage. When this is proven through federal enforcement actions and regulatory investigations, the foundation collapses.

OpenAI’s competitive advantage is not superior algorithms. It is access to data that competitors cannot legally obtain.

If that data is contaminated by fraud, consent violations, and regulatory actions, the $500 billion valuation rests on nothing.

Sign This Sooner Than Later ;)

I’m Patrick Stoica, a software engineer who worked at Puzzle Financial (briefly Valencia Data) from October 2020 to May 31, 2023. I built much of the frontend foundation and worked across the full stack (GraphQL, bridging the Python ledger client with typed OpenAPI specs on the Node server), which gave me visibility into the entire architecture, including the separate Python codebase that maintained the same financial data in a different format. I also worked on data ingest scripts, led the notification system implementation with knock.dev, and implemented user analytics with PostHog. Those systems are still in use today. Now I work independently.

I was knowingly hired through a search by CTO/cofounder John Cwikla for employees affected by the NS8 fraud layoff. In my first interview, CEO Sasha Orloff asked if I was ready to move on from the NS8 fraud, acknowledging the irony while hiring me into what would become another fraud.

The Rushed Hiring (October 2020):

John Cwikla reached out immediately after NS8 news. Sent offer on a Wednesday with deadline to accept by Monday:

“We are looking forward to you joining the team and you should feel free to sign this sooner than later ;)”

Sasha’s pitch:

  • Claimed he “founded two successful companies” (omitted that Mission Lane was a spinout/asset sale, not a founding)
  • Bragged about “believing so strongly in the vision” and “taking a paycut”
  • Both Sasha and Cwikla would repeatedly talk about how they believed in the idea so much they took lower salaries (~$100K) - framing personal sacrifice as proof of commitment while running a company that would later delete employee equity and engage in wage theft

John Cwikla’s background:

  • 1990s experience: Xoom, Wolfram Alpha
  • 2012-2016: Giant Pixel Corporation (questionable startup lab, projects didn’t succeed)
  • Long break before Puzzle

What I found on day one:

  • Very little frontend existed
  • Poor infrastructure and code quality
  • Slowly discovered there was a previous iteration that was just a runway charting tool
  • Current POC was “broken out” from the failed runway tool
  • Many unfamiliar contractor names, no previous Sasha employees

Within the first couple months: Asked to crank out a feature in one night for a board meeting. This became a pattern throughout my employment.

When I asked why they were so confident about success despite having no functioning product, leadership kept pointing to Sasha’s prior experience and track record.

But what “successful track record”?

  • LendUp: CFPB permanent shutdown (2021), 140,000+ victims, $0 to shareholders
  • Mission Lane: Ongoing federal lawsuits (2023), systematic consumer harm (2024-2025)
  • Runway tool: Failed

The confidence wasn’t about building successful products. It was confidence in something else: successfully operating data collection infrastructure under regulatory scrutiny while maintaining investor funding regardless of product outcomes.

The critical observation: The investor network (General Catalyst, a16z, First Round, Felicis, YC, KPCB - visible on company’s 2020 website) was established BEFORE there was a functioning product.

Valencia Data website (2020, still live): “Trusted by portfolio companies of” GC, First Round, a16z, Weekend Fund, Initialized, KPCB, xyz, Felicis, YC. Footer: “Well funded and hirining[sic] wherever you call home. Join us.”

Investor network established before functioning product. Data collection infrastructure with “accounting software” as camouflage.

This wasn’t normal VC investment where:

  • Product achieves PMF, investors commit capital
  • Product fails, investors walk away
  • Multiple pivots require new pitch, new diligence

Instead:

  • Failed runway tool, investors stay
  • Rebrand to “Puzzle Financial”, investors stay
  • $312 revenue over 3 years, investors keep funding

The investors weren’t backing a product. They were funding something else, and the product was operational camouflage.

Investor Connection: Lightspeed Ventures → NS8 → Puzzle

The connection between NS8 and Puzzle extends beyond hiring practices to shared investor networks:

  • Lightspeed Ventures invested in NS8 (CEO Adam Rogas arrested September 2020, $123M fraud)
  • September 2020: NS8 CEO arrested, company implodes, employees laid off
  • October 2020: John Cwikla (Puzzle CTO) specifically recruited NS8 fraud victims
  • May 31, 2023: I was terminated from Puzzle
  • August 17, 2023: Lightspeed hosted Sasha Orloff at “Fintech in AI: Five Lessons For Founders” event in NYC - 2.5 months after termination

What Sasha Said at Lightspeed Event (August 2023):

From Lightspeed’s published summary:

  • “you don’t need to know accounting to do accounting” - promoting AI automation
  • “AI can handle the busywork” - while Puzzle had no sustainable product (2020-2023 focused on data access infrastructure)
  • “anytime there’s a big market shift, it means there’s an opportunity. Somebody’s going to lose and somebody’s going to win” - discussing regulatory changes
  • “There’s a huge opportunity right now in literally every possible industry… if you can’t build a powerful wedge in three to five years, then chances are you aren’t going to crush an incumbent” - said 2.5 months after terminating the engineer who built Puzzle’s frontend

Pattern: Same Investor Enablement Structure

  • Andreessen Horowitz (a16z): LendUp investor (June 2013), then Worldcoin investor ($135M, 2025), and OpenAI major investor; cannot expose LendUp fraud without implicating entire data extraction infrastructure (visible on a16z portfolio page)
  • QED Investors: LendUp board directors, then Mission Lane investors (profited from both fraud entity and buyer)
  • Kapor Capital: LendUp Series B investor (2016), then Puzzle investor (2019), scrubbed LendUp from portfolio, cross-promoted Puzzle with Gusto
  • Lightspeed Ventures: NS8 investor ($123M fraud), then platformed Puzzle CEO (who hired NS8 victims into another fraud)

The investor-enablement pattern extends beyond LendUp to include the NS8 fraud that preceded my Puzzle employment. Lightspeed invested in the fraud that victimized employees, then platformed the CEO who hired those victims into the next fraud.

Puzzle’s Data Collection Infrastructure (2020-2023)

Ecosystem Incentives Against Financial Transparency

Early-stage VCs actively discourage proper accounting, creating structural opacity that enables fraud:

“There is no market urgency on setting up accounting in the early days. In fact, some well know early stage funds actively discourage founders from setting up accounting.”

— Puzzle Financial board meeting materials (2024)

This admission reveals why fraud patterns persist:

  • VCs discourage accounting, which reduces oversight and early fraud detection
  • Bookkeeping firms resist automation, viewing transparency tools as “revenue reduction versus margin expansion” (Puzzle board materials, 2024)
  • “Well known early stage funds” signals institutional knowledge that opacity serves investor interests
  • Puzzle CEO operates in an environment where opacity is normalized, a CFPB-banned CEO handling customer financial data while VCs discourage proper accounting practices

The pattern:

  • Puzzle board materials (2024) document VCs “actively discourage” accounting setup
  • CEO operates accounting software company while the ecosystem discourages accounting
  • Same investors shuffle failing entities and scrub portfolio documentation
  • Portfolio scrubbing erases the fraud documentation trail while VCs discourage transparency practices

Why this matters:

The startup ecosystem has structural incentives against financial transparency. VCs benefit from opacity during early-stage valuations, creating an environment where:

  • Fraud is harder to detect early
  • Financial controls are seen as obstacles, not safeguards
  • A CFPB-banned CEO can operate accounting software with minimal scrutiny
  • Investors can later claim “we didn’t know” despite actively discouraging the systems that would reveal fraud

Distribution Without Monetization: Data Access Before Product-Market Fit

Context: The following documents Puzzle’s operational pattern during my employment (October 2020 - May 2023), when the company prioritized data collection infrastructure over revenue generation. This pattern predates Dasha (Daria) Shunina’s GTM role (August 2024) but establishes the foundation she now executes: systematic access to financial data through partnership funnels built before establishing viable product or monetization strategy.

Pattern documented:

LTSE Integration (January 2021):

I was asked to build Puzzle’s first “partnership” integration with Long-Term Stock Exchange (LTSE) before the company had product-market fit. This integration processed transaction data for LTSE customers using Puzzle’s infrastructure.

The purpose became clear months later: I was asked to pull the total dollar amount processed through Puzzle for a board meeting. The integration served as a mechanism to inflate transaction metrics without acquiring long-term customers. “Partnerships” functioned as convenient infrastructure to boost numbers shown to investors while bypassing the need for sustainable customer retention.

No current evidence of LTSE partnership: As of November 2025, Puzzle’s partners page and integrations page show no LTSE partnership or integration, despite using processed dollar amounts from this integration to inflate metrics shown to investors during 2021-2023. The dedicated landing page (puzzle.io/ltse) now returns a 404 error. The partnership appears to have been temporary infrastructure for metric inflation rather than sustainable commercial relationship - extracted transaction metrics for board presentations, then scrubbed all public evidence of the relationship.

LTSE’s Conscious Enablement - Platforming Both Sasha Orloff and Ross Fubini:

LTSE published multiple promotional pieces and direct platforming by founder Eric Ries demonstrating conscious enablement:

  1. “Sasha Orloff’s Puzzle Playbook: Top startup accounting mistakes to avoid” - directly platforming the CFPB-banned CEO as authority on “startup accounting” and “financial responsibility,” positioning Puzzle as “the new standard in startup accounting software” while Sasha advises founders on “intentional capital allocation” despite personally overseeing $40M CFPB restitution, $10M+ annual burn rate with $312 revenue, and photoshopped metrics

  2. Podcast episode with Eric Ries (LTSE founder) - LTSE founder personally platforms CFPB-banned CEO on “The Eric Ries Show,” lending institutional credibility through direct founder-to-founder conversation

  3. “Ross Fubini on how XYZ Venture Capital evaluates founders” - platforming the investor in both LendUp (CFPB-banned, “Seed, A, and B round investor” per his LinkedIn) and Puzzle (same CEO), profiling his investment criteria and portfolio achievements

This demonstrates systematic conscious enablement: LTSE partners with Puzzle (commercial integration 2021), uses that integration to inflate Puzzle’s transaction metrics for investors, then platforms both the CFPB-banned CEO (including personal platforming by LTSE founder Eric Ries) and his LendUp/Puzzle investor as authorities on startup finance and investment diligence—all while knowing the CEO was permanently banned by CFPB for defrauding 140,000+ consumers.

AngelList Integration (October 2021):

I was asked to extend the partnership code to support AngelList marketplace. Same pattern: data processing infrastructure presented as partnership activity, used to demonstrate traction metrics without corresponding revenue or customer conversion.

YC and ODF Distribution Pages (2020-2023):

During my employment, I built dedicated landing pages targeting Y Combinator companies (puzzle.io/yc) and On Deck Fellowship companies (puzzle.io/odf). These distribution funnels were implemented before Puzzle had established monetization or demonstrated ability to convert and retain customers.

The pages remain live as of November 2025. Both Y Combinator and On Deck Fellowship were notified of documented fraud in 2024 and 2025. Both continue providing access to their founder networks despite awareness.

Documented Prioritization Pattern:

Internal discussions consistently delayed monetization decisions. Leadership focused on “distribution” strategy—building partner relationships, attending networking dinners, pursuing integrations—while fundamental questions about product viability and revenue model remained unresolved. CTO John Cwikla explicitly called work to impress investors a “dog and pony show.”

No Public Pricing Until June 2023:

Puzzle did not add a public pricing page until approximately June 2023—nearly 3 years after founding (2020) and one month after my termination (May 31, 2023). During my entire employment (October 2020 - May 2023), the company operated distribution infrastructure (LTSE integration, AngelList integration, YC/ODF landing pages) without establishing public pricing or monetization strategy.

When pricing was finally added (archived April 2023), it remained “Free while in Beta” ($100/month tier, or $83/month annually) and “Free while in Alpha” ($360/month tier, or $300/month annually), demonstrating continued prioritization of data collection over revenue generation even after implementing pricing structure. By July 2024, pricing shifted to $43/month “Startup” tier and $215/month “Advanced” tier. As of November 2025, current pricing ranges from $0-25/month (basic) to $300+/month (scale), with first $20K transaction value free.

What This Demonstrates:

The 2020-2023 operational pattern reveals a business model centered on data access infrastructure disguised as partnership development. LTSE and AngelList integrations provided direct access to financial transaction data. YC and ODF pages created funnels from founder networks into Puzzle’s system. None of this activity occurred alongside corresponding efforts to establish sustainable revenue or demonstrate genuine product-market fit.

When Dasha (Daria) Shunina joined as GTM strategist in August 2024, she inherited distribution infrastructure already optimized for data collection over monetization. Her role executing this strategy (Women Tech Meetup database, Forbes platform, YouTube interviews, YC coverage) represents continuation of pattern established 2020-2023, not deviation from it.

This documentation is added November 15, 2025, following discovery of Dasha (Daria) Shunina’s FBI-warned Skolkovo Foundation background (2016-2023) and unincorporated Women Tech Meetup operation collecting 10,000+ founders in database. The early Puzzle pattern demonstrates the data access infrastructure was intentionally built before her arrival, suggesting her GTM role serves a larger data collection operation rather than traditional customer acquisition.

Privacy Policy Update (December 19, 2025): Codifying Systematic Data Extraction

Puzzle Privacy Policy - Effective Date: December 19, 2025 - Updated privacy policy establishes legal framework for data practices documented throughout this statement.

Critical Context: These Provisions Existed Since Company Founding (December 2019)

The December 2025 policy update did not introduce the data extraction framework—provisions existed since December 2019, 3 months after incorporation (September 2019). The December 2019 policy already authorized:

  • “Anonymized and aggregated data sets…for research, internal analysis, analytics, and other functions” (identical across all versions 2019-2025)
  • Sharing “with third parties, alone or in combination with the Non-Personal Information of other users” (identical across all versions 2019-2025)
  • Explicit DNT refusal: “The Company and the Website do not recognize DNT” (identical across all versions 2019-2025)
  • Third-party tracking disclaimer: “We do not have access to, nor control over, third parties’ use of cookies or other tracking technologies” (identical across all versions 2019-2025)
  • API/login credentials collection: “connecting third party data sources to us via tools such as APIs or your login credentials” (operational from December 2019)

Puzzle was built as data extraction infrastructure from day one (December 2019): Company incorporated September 2019, privacy policy established December 2019 with complete data extraction framework operational 3 months after founding. OpenAI partnership (May 2023) activated pre-existing legal authorization created 3.5 years earlier. Same playbook Sasha used at LendUp (2012-2021), now applied to startup financial data from Puzzle’s founding.

Timeline of identical provisions:

6-year consistency (December 2019 - December 2025) proves systematic business model from founding, data extraction by design.

Key Provisions That Authorize Data Pipeline (December 2025 Update):

  1. Unrestricted “Anonymized and Aggregated Data” Sharing:

    “To create anonymized and aggregated data sets that may be used for a variety of functions, including research, internal analysis, analytics, and other functions.”

    “we may share Non-Personal Information and anonymized and aggregated data sets with third parties, alone or in combination with the Non-Personal Information of other users.”

    • No limits on “other functions” - undefined scope for data use
    • Can share aggregated startup financial data with anyone - no restrictions on third-party recipients
    • OpenAI partnership likely falls under this provision - “trusted business partners” for “joint analytics”
  2. Comprehensive Data Collection via APIs:

    “Data you provide to us by uploading information to our system, connecting third party data sources to us via tools such as APIs or your login credentials, or additional information or documents that you submit to us”

    • Encompasses ALL financial data from Brex, Deel, Gusto, banks, accounting systems
    • Login credentials = direct access to connected platforms
    • Unlimited scope of “additional information”
  3. Business Partner Data Sharing:

    “Sharing limited business-contact or account-level information (for example, company names or domains) with trusted business partners to perform joint analytics, integration support, or co-marketing.”

    “To manage partner relationships and integrations, including identifying mutual customers and measuring joint product adoption.”

    • “Joint analytics” with “trusted business partners” = OpenAI data pipeline
    • “Measuring joint product adoption” = tracking which startups use both Puzzle and partner services
    • “Identifying mutual customers” = network mapping across ecosystem
  4. Third-Party Tracking Without Control:

    “We use third parties’ analytic and tracking tools”

    “Those third party companies may use cookies, pixel tags or other technologies to collect and store Non-Personal Information”

    “They might combine Information they collect from your interaction with Website with Personal Information they collect from other sources.”

    “We do not have access to, nor control over, third parties’ use of cookies or other tracking technologies.”

    • Admits third parties can combine Puzzle data with other sources
    • Explicitly states no control over third-party use
    • Creates plausible deniability for downstream data aggregation
  5. No “Do Not Track” Recognition:

    “Do Not Track (DNT) is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. The Company and the Website do not recognize DNT.”

    • Explicitly refuses standard privacy protection mechanisms
    • Users cannot opt out of tracking

Why This Timing Matters:

  • September 2019 - Puzzle Financial Inc. incorporated in Delaware
  • December 2019 - Privacy policy established with complete data extraction framework operational 3 months after founding; proves company was built from day one as data aggregation infrastructure
  • July 2022 - Policy maintained identical provisions (no changes)
  • May 2023 - OpenAI API integration operational; activated pre-existing legal framework created 3.5 years earlier, required no policy changes
  • June 1, 2023 - Policy maintained identical provisions one month after OpenAI integration (no substantive changes)
  • December 19, 2025 - Policy update after 5 SEC whistleblower complaints (latest Nov 13, 2025); refines language but core provisions unchanged since December 2019
  • 6-year consistency (December 2019 - December 2025) demonstrates systematic business model from founding: data extraction by design, using Sasha’s LendUp playbook (2012-2021) applied to startup financial data

What This Privacy Policy Authorizes:

The provisions collectively create legal basis for:

  1. Collecting all startup financial data via API integrations (Brex, Deel, Gusto, banks)
  2. Creating “anonymized and aggregated” datasets with no defined limits
  3. Sharing these datasets with “trusted business partners” (OpenAI) for undefined “analytics” and “other functions”
  4. Allowing third parties to combine this data with other sources beyond Puzzle’s control
  5. Refusing standard privacy protections (Do Not Track)

This is the data extraction pipeline documented throughout this statement, now codified in legal terms.

The privacy policy doesn’t change the business model—it provides legal cover for systematic data collection → aggregation → third-party sharing (OpenAI partnership) that was already operational. The timing (Dec 19, 2025, after SEC complaints) suggests reactive legal positioning rather than transparent data practices.

LendUp Privacy Policy (August 2021): Identical Data Extraction Playbook

Puzzle’s privacy policy (June 2023 - December 2025) mirrors LendUp’s privacy policy from August 2021 (effective until CFPB shutdown). Same CEO (Sasha Orloff), same data extraction provisions across two different companies, consistent framework since at least June 2023 (one month after OpenAI integration):

LendUp Privacy Policy Key Provisions (Aug 2021):

  1. Broad Third-Party Data Sharing (Including Sale):

    “We reserve the right to share information, including the sale of PII, with third parties”

    “Other Companies: We may share information with other companies for purposes of marketing our products to you or for analyzing our business and transactions.”

    “Third Parties: We may share information with third parties, including third-party lenders, for purposes of providing lending option to you and for the third parties to market their products to you.”

  2. “Aggregate Information” Without Limits:

    “Statistical or aggregated information that we use does not directly identify a specific person, but it may be derived from your PII.”

  3. Third-Party Tracking Without Control:

    “We do not control these third parties’ tracking technologies or how they may be used.”

  4. No Do Not Track Recognition:

    “The Site is not currently configured to respond to Do Not Track signals.”

  5. Marketing Table - All Sharing Types Enabled:

    Reasons we can shareDoes LendUp share?Can you limit?
    For non-affiliates to market to youYesYes
    For our affiliates’ everyday business purposes—information about your creditworthinessYesYes
    For joint marketing with other financial companiesYesYes

Pattern Recognition:

ProvisionLendUp (Aug 2021)Puzzle (Dec 2019)Puzzle (Jul 2022)Puzzle (Jun 2023)Puzzle (Dec 2025)
Aggregated data sharing”Statistical or aggregated information…may be derived from your PII""anonymized and aggregated data sets…for research, internal analysis, analytics, and other functions”(identical)(identical)(identical)
Third-party sharing”share information with other companies for…analyzing our business""share Non-Personal Information and anonymized and aggregated data sets with third parties”(identical)(identical)“trusted business partners to perform joint analytics” (refined language)
No user control”We do not control these third parties’ tracking technologies""We do not have access to, nor control over, third parties’ use of cookies or other tracking technologies”(identical)(identical)“We do not have access to, nor control over, third parties’ use of cookies”
Refuses Do Not Track”not currently configured to respond to Do Not Track signals""The Company and the Website do not recognize DNT”(identical)(identical)(identical)
API/credentialsN/A (consumer loans, not API-based)“connecting third party data sources…via APIs or your login credentials”(identical)(identical)(identical)
Company age9 years old3 months old (incorporated Sept 2019)2.8 years3.7 years6 years
OpenAI IntegrationN/A (pre-AI era)N/A (3.5 years before)N/A (10 mo before)May 2023 (1 mo prior, no changes)Operational since May 2023 (activated 2019 framework)

What This Demonstrates:

  1. Established Playbook: Sasha Orloff implements identical data extraction provisions across multiple companies (LendUp 2012-2021, Puzzle 2019-2025)
  2. Puzzle Was Built as Data Extraction Infrastructure from Day One: December 2019 policy (3 months after incorporation) proves company was designed from founding for systematic data aggregation; OpenAI integration 3.5 years later activated pre-existing framework
  3. OpenAI Integration Activated Pre-Existing Framework: May 2023 OpenAI features didn’t require policy changes—legal authorization for “anonymized and aggregated data sets” sharing with “third parties” for “other functions” already existed since December 2019 founding
  4. 6-Year Consistency (December 2019 - December 2025): Core provisions unchanged across all policy updates, demonstrating systematic business model from founding, data extraction by design
  5. Pattern Predates OpenAI Era: LendUp privacy policy (Aug 2021) had broad data sharing provisions before OpenAI integration at Puzzle (May 2023), suggesting systematic approach to data monetization across entire career (2012-2025)
  6. CFPB-Banned CEO’s Business Model: Company permanently banned for defrauding 140,000+ consumers had privacy policy authorizing “sale of PII” and sharing with third parties “for analyzing our business and transactions”
  7. Same Legal Framework, Different Company: Puzzle’s policy (December 2019 - December 2025) applies the same playbook Sasha used at LendUp, now targeting startup financial data instead of subprime consumer data from day one

The question is: Who was LendUp selling consumer financial data to (2012-2021), and who is Puzzle selling startup financial data to (2019-2025)? The OpenAI partnership documented throughout this statement suggests one answer, but the breadth of these provisions allows for unlimited third-party data sharing with no meaningful restrictions or user control.

Mission Lane Privacy Policy (Current): LendUp’s Playbook Continues Through “Separate” Company

Mission Lane’s current privacy policy demonstrates the data extraction playbook wasn’t shut down by CFPB enforcement—it was transferred to the acquiring company. Mission Lane Holdings LLC acquired LendUp’s credit card assets (December 2018) and continued the identical data collection practices that enabled LendUp’s federal violations.

Key Provisions from Mission Lane Privacy Policy:

  1. Third-Party Data Collection and Combination:

    “We collect Personally Identifiable Information (PII) about you from a variety of sources, including… information we receive from third parties and public databases, and combine it with other information we have about you.”

    • Identical to LendUp’s third-party data aggregation provisions
    • Creates comprehensive consumer profiles beyond self-reported data
    • No disclosure of which third parties or what data is purchased
  2. Broad Usage Authorization “For Our Business Purposes”:

    “We use your PII to… provide you with information about our products and services, and for other business purposes.”

    • Vague “business purposes” language (identical to LendUp’s “analyzing our business”)
    • No restrictions on what qualifies as “business purpose”
    • Enables unlimited internal data usage beyond stated customer services
  3. Enhanced Data Collection from Extended Networks:

    Mission Lane collects data beyond cardholders, including:

    • Biometric data: “Selfies to unlock card” (documented March 2025 BBB complaints)
    • Third-party payer information: Demanding driver’s licenses and bank statements from friends/family members helping with payments (not Mission Lane customers)
    • Network identity mapping: Building databases of extended social/financial networks, not just cardholder base
  4. “Does Not Sell” ≠ “Does Not Share”:

    “Mission Lane does not sell your personal information to third parties for business or commercial purposes.”

    Critical: This statement uses narrow “sell” definition (direct monetary exchange) but says nothing about:

    • Sharing for “analytics” or “research” (Puzzle/Brex/Deel model)
    • Sharing aggregated/anonymized data “without restriction”
    • Sharing with “business partners” for “joint purposes”
    • Exchanging data for services rather than money

    Same legal sleight-of-hand as Puzzle’s “we do not sell” while authorizing unlimited “anonymized and aggregated data” sharing.

Pattern: LendUp → Mission Lane Data Extraction Continuity

ProvisionLendUp (2021)Mission Lane (Current)
Third-party data aggregation✓ “share with third parties for analyzing business”✓ “receive from third parties…combine with our info”
Vague “business purposes” sharing✓ “for analyzing our business and transactions”✓ “for other business purposes"
"Does not sell” disclaimer✗ (explicitly authorized PII sale)✓ (narrow definition, silent on “sharing”)
Enhanced network data collection✗ (pre-acquisition, limited scope)✓ Biometric + third-party payers (beyond cardholder base)
Consumer credit bureau reporting✓ First payday lender to report to bureaus✓ Aggressive credit reporting (documented BBB complaints)

What This Proves:

  1. Asset Acquisition Transferred Data Practices: Mission Lane didn’t “reform” LendUp’s business model—it acquired the assets AND the data extraction playbook
  2. Enhanced Surveillance Post-CFPB Ban: Mission Lane implements more aggressive data collection than LendUp (biometric + network identity mapping) despite LendUp’s federal enforcement history
  3. Same QED/Capital One Pipeline: Nigel Morris (QED founder, former Capital One CEO) and Capital One executives (Holdaway, Black) ensure operational continuity across entities
  4. Pattern Wasn’t Shut Down, Just Layered: CFPB banned LendUp from “selling consumer information” → Mission Lane “does not sell” but operates identical data aggregation infrastructure with vaguer language
  5. Federal Enforcement Evasion Through Corporate Structure: Creating new entity (Mission Lane) to acquire banned entity’s assets allows continuation of same practices without CFPB restrictions

Mission Lane’s privacy policy proves the fraud pattern documented across LendUp (2012-2021) and Puzzle (2019-2025) is ACTIVE TODAY (2019-2025) through Mission Lane. Same data extraction provisions, same vague “business purposes” authorization, same third-party aggregation, enhanced network surveillance, all operated by the same investor network (QED/Capital One) that enabled LendUp’s $46.8M+ federal enforcement.

The CFPB shut down LendUp’s lending operations, but the data extraction infrastructure was preserved and expanded through Mission Lane.

Brex Privacy Policy (April 2024): Data Collection Infrastructure for OpenAI Partnership

Brex’s privacy policy (effective April 12, 2024) establishes the legal framework for collecting and sharing comprehensive financial data that flows to OpenAI through their March 2023 partnership. Brex processes “millions of transactions” through OpenAI’s platform, as confirmed by OpenAI COO Brad Lightcap.

Key Provisions from Brex Privacy Policy:

  1. Comprehensive Data Collection from Third-Party Integrations:

    “Linked Data, including information and documentation relating to you and your company made available by Third-Party Services connected to the Services. Linked Data may be made available to Brex during the application process and after a Brex Account is opened for your company. For example, if you link business bank accounts during or after the application process, or link your bank account to receive or provide expense reimbursements, we will receive Bank Account Information about the linked account, like the bank routing and account numbers and account balance. In addition, some Third-Party Services (e.g. accounting systems and business bank accounts) will provide us with information about activities outside of the Services, like your business expenses and your company’s external transactions, finances and revenue.”

    • This includes Puzzle integrations - When startups connect Puzzle to Brex (Sept 2025 integration), Brex receives accounting data
    • Confirms bidirectional data flow - Data flows INTO Brex from connected services, not just from Brex to partners
    • “We may continue to access and receive Linked Data from a Third-Party Service until it is disconnected”
  2. Transaction and Spend Data:

    “Transaction Data, including information associated with your payments and card transactions made through your company’s Brex Account, whether online or in store, such as the purchase details, payment mechanism, amount, location, and any annotations or coding you provide.”

    “Spend and Workflow Data, including your company’s spend limits and policies, approval hierarchies, and finance workflows.”

    • Complete visibility into company spending patterns, financial policies, and approval processes
    • Metadata reveals organizational structure and decision-making hierarchies
  3. Vendor and Invoice Data:

    “Vendor Data, including the identity of your Company’s vendors and their Business Contact Information, payment details, contracts and purchase orders, and information to complete tax documentation (e.g., the vendor’s tax identification number).”

    “Receipt and Invoice Data, including information you submit to us to pay company invoices and process your receipts, such as photos, PDFs, e-mails and SMS/RCS messages if you opt-in to text messages, along with associated metadata.”

    • Network mapping across entire vendor ecosystem
    • Business relationship intelligence
  4. Travel and Location Data:

    “Travel Data, including your business travel booking and itinerary. This may include imprecise location information, such as when your travel itinerary indicates you have booked a flight to or hotel in a location.”

    • Employee movement patterns and business expansion signals
  5. No Do Not Track Recognition:

    “We do not respond to Do Not Track signals.”

    • Identical to LendUp and Puzzle - consistent pattern of refusing standard privacy protections
  6. Broad Third-Party Sharing:

    Section 5 authorizes sharing with:

    • Service providers
    • Business partners and affiliates
    • Legal and business purposes
    • Aggregated/anonymized data sharing with no meaningful restrictions
  7. “Anonymized and Aggregated” Data Without Limits:

    “We may create de-identified or aggregated data from personal information by removing components that make the personal information identifiable to you…We may use and disclose de-identified or aggregated data for our lawful business purposes without restriction.”

    • Same provision as Puzzle and LendUp
    • “Without restriction” = unlimited downstream use
    • OpenAI partnership processes “millions of transactions” - likely under this provision

The Data Pipeline Documented:

Data SourceFlows ToConfirmed Destination
Startups (expenses, cards, travel)→ BrexOpenAI (March 2023)
Puzzle (accounting, all finances)→ BrexOpenAI (via Brex)
Deel (payroll)→ PuzzleOpenAI (via Puzzle)
Gusto (HR/payroll)→ PuzzleOpenAI (via Puzzle)
Banks (transactions)→ Brex/PuzzleOpenAI (via both)

Brex Privacy Policy Enables:

  1. Collection of comprehensive financial data via Third-Party Service integrations (including Puzzle)
  2. Aggregation of “millions of transactions” across connected startups and services
  3. Processing through OpenAI’s platform (March 2023 partnership: “AI Finance Assistant”)
  4. Sharing as “de-identified or aggregated data…without restriction”
  5. Refusing standard privacy protections (Do Not Track)

Pattern Recognition Across the Network:

Privacy ProvisionLendUp (2021)Mission Lane (Current)Puzzle (2025)Brex (2024)
Aggregated data sharing✓✓✓✓
Third-party “analytics” sharing✓✓✓✓
“Without restriction” language✓✓ (vague “business”)✓✓
No control over third-party use✓✓✓✓
Refuses Do Not Track (DNT)✓Not disclosed✓✓
“Does not sell” disclaimer✗ (authorized)✓ (narrow def)✓ (narrow def)✓ (narrow def)
Enhanced network data collection✗✓ (biometric + 3rd party payers)✓ (API/login)✓ (comprehensive)
Comprehensive API/integration dataN/A (consumer)N/A (consumer)✓✓

What This Confirms:

  1. Identical Data Extraction Playbook: Same legal framework (aggregated data, third-party analytics, no restrictions) implemented across LendUp (CFPB-banned), Mission Lane (LendUp’s successor), Puzzle ($312 revenue), and Brex (OpenAI partner)
  2. Asset Acquisition Preserved Data Infrastructure: Mission Lane acquired LendUp’s credit card assets AND data extraction practices; enhanced surveillance (biometric + network identity) continues pattern post-CFPB ban
  3. Same CEO Across Multiple Entities: Sasha Orloff implements identical provisions at LendUp (2012-2021) and Puzzle (2019-2025); same QED/Capital One network operates Mission Lane (2018-present) with enhanced data collection
  4. Documented OpenAI Pipeline: Brex privacy policy authorizes collection → Brad Lightcap (OpenAI COO) confirms processing “millions of transactions” → no restrictions on downstream use
  5. Network-Wide Infrastructure: YC companies (LendUp W12, Gusto W12, Brex W17, Puzzle via GC) all implement compatible data policies enabling systematic aggregation
  6. Bidirectional Data Flows: Brex receives data FROM Puzzle (accounting), Brex sends data TO OpenAI (confirmed partnership) = Puzzle financial data reaches OpenAI through Brex pipeline
  7. Timing Pattern: OpenAI partnership (March 2023) → Puzzle integration (Sept 2025, 20 months after Brex closed Israel office with 282 layoffs) = strategic priority despite downsizing

The Brex privacy policy isn’t a compliance document—it’s the legal infrastructure for the data extraction pipeline that feeds OpenAI’s $500B+ valuation. Combined with Puzzle’s identical provisions, it creates a network where startup financial data flows systematically from accounting systems → expense platforms → AI training without meaningful user control or oversight.

Deel Privacy Policy (May 2025): Comprehensive Payroll Data Collection

Deel’s privacy policy (effective May 6, 2025) establishes legal framework for collecting comprehensive payroll and employment data from startups. Deel integrates with Puzzle (announced Nov 20, 2025), creating pipeline for payroll data → accounting system → potential AI processing.

Key Provisions from Deel Privacy Policy:

  1. Comprehensive Employment Data Collection:

    Categories include:

    • Identification: Full name, government ID, passport, date of birth, selfie
    • Financial: Bank account details, payment card details
    • Transactional: Transaction history, payments, amounts, dates
    • Professional: Job positions, degrees, qualifications, career history
    • Biometric data: “To automatically verify your identity and prevent fraud, we may use your biometric data. Specifically, we may collect a photo of you (a selfie) along with government-issued identification. Using facial recognition technology, the information from your photo is matched against the information on your identification document.”
  2. AI Development Explicitly Stated:

    “Operate, develop, evaluate, and improve our business and Services”

    “Develop new products and features for our Services which may include the use of AI”

    • Direct acknowledgment of AI use for product development
    • No restrictions on how collected data is used for AI training
    • Encompasses all collected financial, employment, and biometric data
  3. Aggregated Data Sharing for Research:

    “Aggregating pseudonymized personal data and reporting anonymized salary data for the purpose of compensation benchmarking in various industries and geographies as well as for academic research purposes”

    “We may share de-identified Personal Information with academic institutions to perform research, under controls that are designed to protect your privacy—including requiring such institutions to operate under confidentiality agreements and mandating that published findings contain only de-identified and aggregated data”

    • Salary and compensation data shared with academic institutions
    • “Pseudonymized” and “de-identified” leave room for re-identification
    • Research partnerships create additional data pipeline beyond OpenAI
  4. Third-Party Data Collection:

    Deel collects from:

    • “Business partners, service providers, sub-contractors, analytics providers”
    • Social networks and other technology providers
    • Market researchers
    • Public information sources
  5. Marketing and Advertising:

    “We may share Personal Information with third-party advertising partners such as social networks to perform marketing activities and to deliver targeted advertisements based on your interests”

    • Standard targeted advertising using comprehensive employment/financial data
  6. International Data Transfers:

    “Note that the Deel Platform is maintained and owned by Deel Inc., a United States entity, however Deel stores all Deel Platform data in Ireland (EU) only.”

    • US company with EU data storage
    • Subject to US legal requests despite EU storage
  7. Notable Absence: No “Do Not Track” Language

    Unlike LendUp, Puzzle, and Brex, Deel’s privacy policy does not mention Do Not Track (DNT) signals at all. This could mean:

    • They don’t use tracking that would trigger DNT considerations
    • They handle it differently than other companies in the network
    • Or it’s addressed elsewhere in their cookie policy

Deel-Puzzle Integration Creates:

  • Payroll data (employee names, salaries, tax info, banking) → Deel
  • Accounting data (all financial transactions, ledger) → Puzzle
  • Combined dataset = complete financial + employment picture
  • Puzzle → OpenAI (documented API sync) = comprehensive startup data for AI training
  • Deel → Academic institutions = salary benchmarking research partnerships

Gusto Privacy Policy (July 2025): HR/Payroll Data with Mixed Privacy Signals

Gusto’s privacy policy (effective July 11, 2025) collects comprehensive HR and payroll data. Gusto integrates with Puzzle (YC W12 alum, Tomer London co-founder, Kapor portfolio company).

Key Provisions from Gusto Privacy Policy:

  1. Comprehensive HR/Payroll Data Collection:

    Information collected includes:

    • Government identifiers: Social Security number, driver’s license, military ID, passport
    • Financial information: Credit card info, bank account number, routing number, balance and transaction info
    • Demographic information: Gender, date of birth, age, racial or ethnic origin, marital status, disability information
    • Insurance benefits: Dependents, health insurance policy, claim information
    • Audio and visual: Screen sharing, event recordings
    • Biometric information: Facial photographs for office visitors
  2. Explicit AI Development:

    “Operate, develop, evaluate, and improve our business and Services”

    “Develop new products and features for our Services which may include the use of AI”

    • Identical language to Deel
    • All collected HR/payroll data potentially used for AI development
    • No restrictions on AI training use cases
  3. Aggregated Data Sharing:

    “For any other purpose and to any other person with whom you, your employer, or your employer’s agent expressly authorize us to share your information.”

    “publishing reports that incorporate aggregated, non-personally identifiable information about customer attributes, transactions, and behavior”

    “sharing data containing aggregated and/or non-personally identifiable customer information with non-profit or non-partisan organizations, academic institutions, think tanks, trade associations, consultancies, or similar organizations, only if they have signed an agreement with us that restricts how they can store, access, share, and use the information”

    • More restrictive than Deel (requires agreements)
    • But still creates research partnerships with aggregated employee/payroll data
  4. Personalized/Interest-Based Advertising:

    “Provide ‘personalized’ or ‘interest-based’ advertising including through the use of cross-device tracking”

    • Uses comprehensive employee data for targeted advertising
    • Cross-device tracking = following users across multiple devices
  5. Third-Party Sharing:

    Shares with:

    • Service providers (IT, hosting, data analytics, identity verification)
    • Business partners (insurance carriers, 401(k) providers, accounting software like Xero)
    • Advertising partners that deliver personalized ads
    • Government agencies (tax authorities)
  6. Critical Difference: Responds to Global Privacy Control:

    “We do respond to Global Privacy Control (GPC) browser signals.”

    • This is DIFFERENT from LendUp, Puzzle, and Brex who all refuse Do Not Track
    • Gusto offers more user control over tracking
    • GPC is newer, more privacy-protective standard than DNT
  7. Session Recording Technology:

    “This may include the use of session-recording technology to help us perform a number of functions, including to analyze purchase behavior and optimize our checkout process.”

    • Records user sessions for behavioral analysis
    • Standard practice but creates extensive usage data

Pattern Recognition: The Full Data Pipeline

Privacy ProvisionLendUp (2021)Puzzle (2025)Brex (2024)Deel (2025)Gusto (2025)
Aggregated data sharing✓✓✓✓✓
Third-party “analytics” sharing✓✓✓✓✓
“Without restriction” language✓✓✓UnclearSome limits
Explicit AI development use✗✓✗✓✓
Academic/research data sharing✗✗✗✓✓
Refuses Do Not Track (DNT)✓✓✓Not stated✗ (honors GPC)
Comprehensive API/integration dataN/A (consumer)✓✓✓✓
Biometric data collection✗✗✗✓✓

What The Complete Picture Shows:

  1. Network-Wide Data Extraction Infrastructure: Five companies (LendUp → Puzzle → Brex + Deel + Gusto) implement compatible privacy policies enabling systematic data aggregation across:

    • Consumer lending (LendUp, banned 2021)
    • Startup accounting (Puzzle, $312 revenue)
    • Corporate expenses/banking (Brex, OpenAI partner)
    • International payroll (Deel, GC portfolio)
    • US HR/payroll (Gusto, YC W12, Kapor portfolio)
  2. Explicit AI Training Provisions: Deel, Gusto, and Puzzle all explicitly state they use collected data for AI development. Combined with Brex’s OpenAI partnership (“millions of transactions”), the entire network feeds AI training.

  3. Academic Research Partnerships: Both Deel and Gusto create secondary data pipelines to academic institutions for “research” using aggregated employee/salary/financial data. This creates additional AI training pathways beyond direct OpenAI partnerships.

  4. YC/General Catalyst Coordination:

    • Gusto (YC W12) + Brex (YC W17) + Deel (YC W19, GC anchor investor) = coordinated YC ecosystem
    • Puzzle (YC customers, GC lead, Hemant Taneja board 2023-2025) = orchestrator with most comprehensive dataset
    • Kapor portfolio overlap (Puzzle, Gusto) = investor-level coordination
  5. Privacy Protection Variation: Gusto honors Global Privacy Control (more privacy-protective), while LendUp/Puzzle/Brex explicitly refuse Do Not Track. This suggests:

    • Gusto may not be as deeply integrated into data extraction infrastructure
    • OR GPC adoption is strategic to appear privacy-friendly while still enabling aggregated data sharing
    • OR consumer-facing positioning (Gusto serves employees directly) requires stronger privacy stance
  6. The Complete Data Flow:

Startups
  ├─ Payroll (Deel) ────────────────┐
  ├─ HR (Gusto) ────────────────────┤
  ├─ Expenses (Brex) ───────────────┤
  ├─ Banking (multiple) ────────────┤
  │                                  ▼
  └─> PUZZLE (Accounting Layer = Ultimate Aggregate)
         │
         ├─> OpenAI (documented API sync, May 2023)
         │
         └─> Brex → OpenAI (documented partnership, March 2023)

Additional Research Pipelines:

  • Deel → Academic institutions (salary benchmarking)
  • Gusto → Academic institutions (HR research)
  • All companies → Advertising networks (behavioral targeting)

The Documented Pipeline:

  1. LendUp (2012-2021): Privacy policy authorizing “sale of PII” and aggregated data sharing → CFPB shutdown for defrauding 140K+ consumers
  2. Puzzle (2019-2025): Same CEO, same privacy playbook, now applied to startup financial data instead of subprime consumers
  3. Brex (2023): OpenAI partnership processing “millions of transactions” + Puzzle integration (Sept 2025) = startup data flows to OpenAI
  4. Deel (2025): International payroll + explicit AI development + academic research partnerships = additional training data and research pipelines
  5. Gusto (2025): US payroll + explicit AI development + academic research = comprehensive employee/compensation datasets for training

This is a coordinated data extraction network:

  • Built by YC/General Catalyst portfolio companies
  • Led by CFPB-banned CEO implementing identical playbook across 13 years
  • Feeding OpenAI’s $500B+ valuation through documented partnerships
  • Creating secondary research pipelines through academic institutions
  • Systematically refusing privacy protections (DNT/GPC) or implementing strategic exceptions
  • Extracting comprehensive financial, employment, and biometric data from entire startup ecosystem

The privacy policies establish legal infrastructure for systematic data extraction feeding the AI bubble.

Technical Architecture as Evidence: Built for Data Collection

The Design That Didn’t Make Sense:

Puzzle’s technical architecture was overengineered for its claimed purpose (accounting software for early-stage startups) but perfectly designed for data collection and extraction. This became apparent through repeated technical objections during employment (October 2020 - May 2023), each dismissed by leadership despite clear evidence the architecture didn’t match the stated product.

Separate Python Team with CPA Credentials:

Puzzle maintained a separate Python engineering team consisting of two engineers who were also Certified Public Accountants. This staffing decision made no sense for building accounting software but was optimal for structuring financial data for AI training.

What CPAs understand that regular engineers don’t:

  • Chart of accounts taxonomies and hierarchies
  • Transaction categorization schemas (revenue recognition, expense classification)
  • Tax document formatting and compliance requirements
  • GAAP (Generally Accepted Accounting Principles) standards
  • Financial statement structure and relationships
  • Industry-specific accounting conventions

This knowledge enables optimal data structuring for AI training on financial operations.

The question leadership never answered: Why would accounting software need CPAs writing the code? Accountants use the software. Engineers build it. Unless the actual product is structuring financial data for machine learning consumption, not providing accounting features for human customers.

Microservices Architecture Without Scale Justification:

For actual accounting SaaS at Puzzle’s scale:

  • Standard approach: Monolithic architecture (simpler, cheaper, faster to develop)
  • Microservices justified: Massive scale operations (Stripe, Netflix, Amazon processing millions of transactions)
  • Puzzle scale: $312 total revenue (2020-2023), $52.68 revenue in 2022

Microservices architecture introduces massive overhead:

  • Service-to-service networking complexity
  • Distributed system orchestration
  • Monitoring across multiple services
  • Deployment coordination
  • Data consistency challenges

None of this overhead is justified for early-stage SaaS with effectively zero customers.

But for data collection operations, microservices architecture makes perfect sense:

  • Each service = isolated collection endpoint for different data types
  • Transaction ingestion service = customer payment data
  • Document processing service = invoices, receipts, tax forms
  • Bank integration service = account balances, transaction history
  • “Categorization” service (OpenAI API) = data enrichment/formatting
  • Python ledger service = structured financial data output

Architecture designed for data pipelines, not product features.

The “Redundant Pipeline” Problem:

During employment, I repeatedly questioned why Puzzle maintained a separate Python ledger alongside the main application (Node.js/React stack). Leadership’s explanation: the Python ledger required a “redundant pipeline” for data synchronization.

Questions that were never answered:

  • Why Python when the entire rest of the application is Node.js?
  • Why maintain two separate ledgers?
  • Where does the “redundant pipeline” send data?
  • Why is this “redundancy” for reliability when we have no customers to serve?

The revealing answer:

  • Python = data science ecosystem (pandas for data manipulation, numpy for numerical operations, scikit-learn for machine learning)
  • Separate from customer-facing app = customers don’t see it, don’t interact with it
  • “Redundant pipeline” = data flowing to non-customer destination
  • CPAs structuring = optimal financial data formatting

This wasn’t redundancy for reliability. This was redundancy for collection—one system for customers (appearance of accounting software), one system for data extraction (actual product).

Constant Technical Objections Dismissed:

Throughout employment (October 2020 - May 2023), I raised repeated concerns about architecture decisions:

“Why is everything so expensive and verbose?”

  • Microservices overhead for zero-revenue product
  • Complex service orchestration with no traffic to justify it
  • Infrastructure costs exceeding customer value by orders of magnitude

“Why are we using expensive OpenAI API calls for simple transaction categorization?” (May 2023)

Context: Had working rules-based categorization system (even if atrocious). When new GPT models were announced (early 2023), Sasha immediately started talks with OpenAI and pushed aggressive GPT prototype development.

  • Basic machine learning categorizer model would be faster and cost pennies
  • Existing rules-based system already worked (even if poorly)
  • OpenAI API calls cost money on every transaction
  • Makes no business sense unless… you’re also sending data upstream to OpenAI

The urgency was about OpenAI integration, not product improvement. They had a working (if poor) categorization system but immediately pivoted to expensive API calls when GPT became available.

“Why not use Flatfile for bank statement parsing?”

Context: Flatfile was specifically proposed for parsing bank statements from institutions without API integrations - the most sensitive customer financial data entering the system.

Suggested using Flatfile (industry-standard tool for CSV import/parsing, ~$1K-5K/month at their scale) instead of building custom CSV parser. Would have meant:

  • Faster feature development
  • Less custom code to maintain
  • Standard data handling practices
  • Auditable data pipeline with third-party logging of bank statement ingestion

CEO and CTO response: Immediate rejection, claiming it was “too expensive.” Insisted on custom CSV template instead.

Context of this rejection:

  • Company burning $171K/year on AWS hosting for $312 revenue
  • Paying for CPA+engineer teams on separate Python ledger
  • Paying for expensive OpenAI API calls
  • Burning $10M+ total
  • But freaked out about $1K-5K/month standard tool
  • Meanwhile, comfortable with third-party SaaS seeing financial data:
    • PostHog (analytics) receiving financial statement aggregates
    • knock.dev (notifications) processing transaction data
    • Only rejected SaaS that would log bank statement ingestion pipeline

Why they rejected Flatfile specifically:

The key difference:

  • Flatfile = third-party logs all data transformations and processing steps (creates audit trail)
  • Custom CSV template = no third-party logs of how data is handled

The simplest observation:

They rejected Flatfile (far cheaper than their infrastructure spend) specifically because it would create an external audit trail of how customer financial data is processed and where it goes.

Not cost. Not product improvement. Avoiding third-party visibility into data handling practices.

“This doesn’t feel like premature optimization.”

  • Premature optimization = building for scale before you have users
  • This was something else: building data pipelines before you have monetization

All objections were dismissed. The architecture priorities never changed.

Because the architecture was working exactly as intended—for data collection, not for customers.

The Architecture Reveals Intent:

Customer-Facing Application (Node.js/React)
    ↓
Microservices Architecture:
├─ Transaction Ingestion Service
├─ Document Processing Service
├─ Bank Integration Service
├─ "Categorization" Service (OpenAI API)
└─ Python Ledger Service (CPA team)
    ↓
"Redundant Pipeline"
    ↓
Where does this data actually go?

Cost Structure Confirms Data Operation:

From Puzzle’s internal cash activity records (2019-2023):

  • $171,365 hosting costs (2022 alone)
  • $52.68 total revenue (2022)
  • 3,252:1 cost-to-revenue ratio

The financials reveal data infrastructure operation costs, not a failed SaaS business:

  • Hosting multiple microservices at scale
  • Processing pipelines for data transformation
  • Storage infrastructure for collected data
  • API costs for OpenAI integration

Processing costs exceed customer revenue by three orders of magnitude because customers were never the revenue source. Data collection was the business model.

The AI Integration Pressure:

Throughout 2022-2023, leadership pushed aggressive GPT integration with explicit pressure to:

  • Rapidly build GPT prototypes
  • Integrate “mass amounts of customer financial data” into experimental models
  • Work weekends on AI features
  • Treat plugging customer data into OpenAI as acceptable practice

The weekend GPT project: Junior developer worked on GPT prototype over the weekend because CEO Sasha Orloff was excited about AI integration. This wasn’t a formal company hackathon—it was informal pressure to work weekends on data integration experiments.

Hostile response: CTO John Cwikla told the developer “he shouldn’t have won the hackathon” (referring to a later formal event)—creating environment where employees are pressured to work weekends on AI projects, then undermined when they deliver.

The pattern: Urgency around data integration with AI systems, not urgency around customer features or revenue generation.

Pattern: Retaliation Against Engineers Who Questioned AI Integration

Prior Frontend Engineer (Before Me):

  • Questioned AI features and plugging customer data into GPT
  • Let go
  • Company credit card cancelled as retaliation

My Technical Objections and Termination (May 2023):

Specific documented objections:

  • Questioned expensive OpenAI API usage for simple categorization tasks
  • Raised data privacy concerns about submitting customer financial data to third-party API (OpenAI)
  • Challenged AI pivot and crunch work practices
  • Sent email to VP of Engineering Radha Shenoy about unacceptable work conditions
    • Radha’s response: “Can you elaborate?”

Leadership response:

  • Scheduled “Sync” meeting for confrontation
  • Confronted CEO Sasha Orloff and Radha Shenoy directly about practices
  • Gave 3 months notice if practices continued

Result: Terminated May 31, 2023. Company credit card cancelled.

Post-Termination Pattern Continuation (July 6, 2023):

Five weeks after termination, former colleague reported that CTO John Cwikla continued hostile behavior toward the same junior developer who had worked weekends on GPT integration. Email sent to leadership documenting ongoing harassment pattern:

“John Cwikla [CTO/Cofounder] has been harassing many employees since the start. Now he’s telling [employee] he shouldn’t have won the hackathon. If that’s a joke, it’s cruel gaslighting. If it’s real, that’s incorrigible behavior for a leadership role.”

The junior employee was let go later that year.

Pattern documented across multiple employees:

  1. Prior frontend engineer: Questioned AI features and GPT data integration → let go, credit card cancelled
  2. Me: Questioned OpenAI API costs and data privacy concerns → terminated May 31, 2023, credit card cancelled
  3. Junior developer: Worked weekends on GPT integration (pressured by CEO excitement) → undermined by CTO → let go later in 2023

Architecture priorities and hostile leadership culture protected through systematic removal of employees who questioned AI integration practices.

The pattern: Employee questioned data architecture decisions and AI integration practices. Employee was terminated. Architecture priorities never changed because the architecture was working as designed—for data collection, not product development.

Technical Architecture Summary:

The documented evidence shows Puzzle’s technical infrastructure was designed for systematic data collection disguised as accounting software development:

  1. CPA engineering team = optimal financial data structuring for AI training
  2. Microservices without scale = isolated collection endpoints for different data types
  3. Separate Python ledger = data science processing pipeline separate from customer app
  4. “Redundant pipeline” = data flowing to non-customer destination
  5. OpenAI API integration = expensive “categorization” that makes no business sense unless also sending data upstream
  6. Weekend GPT integration pressure = urgency around plugging customer financial data into experimental AI models, not customer features
  7. $171K hosting vs $52.68 revenue = infrastructure costs for data operation, not failed SaaS
  8. Rejected standard tools (Flatfile) = freaked out about $1K-5K/month CSV parsing tool while burning $10M+ because standard tools reduce data pipeline control
  9. Technical objections dismissed = architecture priorities protected despite employee concerns
  10. Systematic termination of dissenting engineers = three documented cases of employees questioning AI/data practices, all subsequently let go (two with credit card cancellation retaliation)

The architecture didn’t match the stated product because the stated product was operational camouflage. The actual product was data collection infrastructure, and the technical design proves it.

KEY: Financial Records Confirm Data Operation, Not SaaS Business (2020-2023)

Context: Puzzle’s internal financial records from January 2018 through December 2023 provide definitive proof that the company was NOT operating as accounting software but as a data infrastructure operation with funding.

Source: Cash Activity Report (Detailed) covering January 1, 2019 through May 31, 2023, generated in the days preceding my termination (May 31, 2023). This represents the complete financial picture during my employment (October 2020 - May 2023) and the company’s first three years of operation.

📥 Cash Activity Report (Jan 2019 - May 2023, CSV)

Puzzle Financial cash activity (2018-2023): $312 total revenue vs $10M+ burned, $171K hosting (2022) vs $52.68 revenue, $468K consultants with rapid turnover, $95K uncategorized Jan-May 2023, making 2,500x more from interest than customers—proves data operation, not accounting software.

KEY EVIDENCE: The Numbers Don’t Lie

💰 Revenue (2020-2023): $312 total
🔥 Burned (2020-2023): $10,000,000+
📊 Hosting (2022): $171,365 vs Revenue $52.68 (3,252x ratio)
👥 Consultants (2022): $468,917 (rapid hiring/dropping pattern)
❓ Uncategorized (Jan-May 2023): $95,856 (through termination date)
💼 Payroll Clearing (2023 YTD): $384,802 (should zero monthly)
💸 Interest Income (2022): $135,000+ (2,500x more than customer revenue)

Revenue vs. Burn (2020-2023):

  • Total Revenue: $312 over three years
  • Total Burned: $10M+
  • What this means: A funded operation, not a business with customers.

Hosting Costs = Data Infrastructure (2022):

  • Hosting Fees: $171,365
  • Revenue: $52.68
  • Ratio: 3,252x more spent on hosting than earned from customers

What requires $171K/year in hosting?

  • ❌ NOT simple accounting software (basic CRUD operations)
  • ✅ YES large-scale data processing infrastructure
  • ✅ YES LLM API calls at scale (OpenAI API integration May 2023)
  • ✅ YES data aggregation/analysis systems

Standard SaaS accounting software hosting costs: $500-2,000/month ($6K-24K/year) for small startup
Puzzle’s hosting costs: $171K/year = 7-28x normal SaaS costs

Consultants With No Product (2022):

  • Consultant Fees: $468,917
  • What they’re consulting on: Unknown—no customers, no revenue, no product-market fit
  • Pattern observed: Rapid hiring and dropping of consultants; some brought on then terminated quickly
  • Implication: External services for undisclosed purposes rather than customer implementation

Uncategorized Expenses (Jan-May 2023):

  • Amount: $95,856 (cumulative through May 31, 2023 termination date)
  • Context: Period encompasses AI hackathon exploitation, OpenAI API integration push, and escalating internal conflicts
  • “Uncategorized” = hidden spending for undisclosed purposes during final months of employment

Payroll Clearing Anomaly (2023 Year-to-Date):

  • Amount: $384,802 in “Salaries & Benefits: Clearing” (Jan-May 2023)
  • What this means: Clearing accounts should zero out monthly, not accumulate
  • Potential explanations: Severance preparation, deferred compensation, or accounting manipulation
  • Timing: Same period as $95K uncategorized expenses and termination preparation

Interest Income Exceeds Customer Revenue:

  • 2022 Interest Income: $135,000+
  • 2022 Customer Revenue: $52.68
  • Ratio: 2,500x more profitable sitting on VC cash than serving customers
  • What this proves: Revenue generation was never the priority

Pricing Model Analysis: The Economics Don’t Work

Puzzle’s public pricing (as of Nov 2025) launched after 3+ years of operation with $312 total revenue:

Advertised Pricing Tiers (Current):

  • Accounting basics: $0/mo (free up to $20K transaction value, then $25/mo)
  • Accounting plus Insights: $42.50/mo (yearly) or $50/mo
  • Accounting plus Advanced Automation: $85/mo (yearly) or $100/mo with “AI month-end close review”
  • Accounting plus Scale: Starting at $255/mo (yearly) or $300/mo with “Custom AI prompts”

What We Know From Documented Financials (2020-2023):

  • 2022 Hosting Costs: $171,365/year = $14,280/month
  • 2022 Total Burn: ~$3.3M/year = $275,000/month
  • 2022 Revenue: $52.68 total (suggests 0-1 paying customers)
  • 2020-2023 Total Revenue: $312
  • 2020-2023 Total Burned: $10,000,000+
  • Team Size: ~15-20 people

To Cover Just 2022 Hosting Costs ($171K):

  • Customers needed at $85/mo: 168 paying customers
  • Customers needed at $42.50/mo: 336 paying customers
  • Actual 2022 revenue: $52.68 (less than one month of hosting costs)

To Break Even on 2022 Operations ($3.3M):

  • Customers needed at $85/mo: 3,235 paying customers
  • Support team required: 32-64 employees (industry standard 50-100 customers per support person)
  • Actual team size: ~15-20 people

Current Claims vs. Transparency:

  • CEO posts unlabeled Y-axis graphs (Evidence-78, LinkedIn) claiming “~50% of Puzzle customers are organic, and we’re scaling fast” with bar chart showing “New Accounts By Quarter” with no Y-axis numbers - impossible to verify if growth is 10 accounts or 10,000 accounts
  • Head of Growth claims 4,500+ startups DURING $312 revenue period (Helen Chongberger, LinkedIn, Mar 2023-Apr 2025): “made accounting less scary for 4,500+ startups” - her employment period overlaps with documented financials showing $312 total revenue (2020-2023); if 4,500 startups paid even lowest tier ($42.50/mo), would generate $2.3M/year; proves “customers” counted by data connections, not paying subscribers
  • CEO posted growth charts during the same period evidence-77 shows $52.68 revenue (2022) - pattern of claiming “scaling fast” while burning $10M+ with essentially zero revenue
  • Claims “2024 showed us what’s possible” without publishing actual revenue or customer count
  • No verified revenue numbers published for any period
  • No public customer testimonials with verifiable names/companies during documented period
  • Pattern: Claims growth while providing no verifiable metrics; “customers” measured by data connections, not revenue; growth charts posted during period of documented near-zero revenue

For Comparison - Real SaaS Accounting Software:

  • QuickBooks Online: $30-200/mo, 7M+ customers globally, publicly reported metrics, profitable since 2000s
  • Xero: $13-70/mo, 3.95M+ subscribers (publicly reported), profitable, sustainable unit economics
  • FreshBooks: $19-60/mo, profitable, transparent customer counts and growth metrics
  • All publish pricing from launch and report actual metrics

Why Low Pricing Benefits Data Access Operation:

  • Barrier to entry: Free/$25 pricing removes friction for founder signups
  • Data acquisition: Low price = high volume of financial data connections (bank accounts, revenue, expenses, payroll)
  • Plausible deniability: “We’re just a cheap accounting tool” narrative
  • Market position: Undercuts legitimate competitors (QuickBooks $30+/mo) to drive adoption
  • VC subsidization: $10M+ burn subsidizes free/cheap access to founder financial data
  • 3-year delay in public pricing allowed unfettered data collection before scrutiny
  • Actual pricing likely irrelevant: Pattern suggests heavy discounting, special deals, or extended free periods to maximize data collection; posted pricing provides legitimacy while actual charges are negotiable to remove any barrier to connecting financial accounts

Posted Pricing vs. Actual Revenue:

Even if current pricing ($42.50-$300/mo) were enforced, documented behavior suggests:

  • Unlimited free trials to maximize data connections
  • “Founder deals” offering deep discounts or free access
  • “Beta pricing” extended indefinitely for early adopters
  • Network referral credits reducing effective price to near-zero
  • Strategic comping for well-connected founders or YC companies

The pattern: Pricing exists for appearance of legitimacy, actual enforcement is flexible to maximize financial data access. When revenue was $312 over 3 years despite claimed customer growth, pricing was clearly not being collected.

The documented 2020-2023 period shows: $312 revenue vs $10M+ burned. Even with claimed recent growth, the 3-year foundation was pure data collection, not customer acquisition.

Sasha Orloff LinkedIn post with unlabeled Y-axis graph claiming growth ~January 2025 (original tweet Dec 24, 2024): Sasha’s LinkedIn post shows “New Accounts By Quarter” chart with no Y-axis numbers. Claims “~50% of Puzzle customers are organic, and we’re scaling fast” without verifiable metrics.

Evidence-77 shows only $52.68 revenue (2022) and $160 revenue (2023). Chart could represent 10 accounts or 10,000 per quarter - intentionally unverifiable.

What This Proves

Real Accounting Software:

  • Low hosting costs (simple database + UI)
  • Revenue from paying customers
  • Consultants for customer implementation/support
  • Growth trajectory year-over-year
  • Pricing established early (within months)
  • Sustainable unit economics
  • Price reflects cost structure

Puzzle Financial (2020-2023):

  • Massive hosting costs ($171K = data infrastructure)
  • Zero meaningful revenue ($312 over 3 years)
  • Consultants with no product (external services?)
  • Accelerating burn ($10M+ with no customers)
  • No public pricing for 3 years
  • Making 2,500x more from interest than customers
  • Pricing model is economically impossible
  • Low prices subsidize data acquisition

Employee Concerns About Sudden Pivot:

The employee terminated before me (whose corporate card was also canceled as termination signal) expressed concerns about Puzzle’s sudden operational pivots during their employment. This pattern of:

  • Rapidly changing priorities
  • Unclear product direction
  • Focus on partnerships/integrations over monetization
  • Data infrastructure investment disproportionate to customer base

…was recognized by multiple employees as inconsistent with building sustainable SaaS business.

Why This Matters

These financials, combined with:

  1. No public pricing for 3 years (documented above)
  2. LTSE/AngelList integrations for metric inflation (documented above)
  3. YC/ODF landing pages before monetization (documented above)
  4. OpenAI API integration for transaction categorization (May 2023, documented in OpenAI section)
  5. Dasha Shunina’s Skolkovo Foundation background (FBI-warned, 2016-2023)
  6. CEO’s CFPB permanent ban (December 2021)

…demonstrate systematic data collection infrastructure disguised as failed SaaS startup.

The financials prove the operation was never designed to generate revenue from customers. It was designed to access, process, and potentially aggregate financial data at scale under cover of “accounting software.”

Termination, Retaliation, and Legal Threats

August 27, 2021: Early Warning to Mitchell Troyanovsky (Product Manager) About CTO Dysfunction

Almost 2 years before my termination, I sent this email to Mitchell Troyanovsky, a new Product Manager, warning about CTO John Cwikla’s dysfunctional technical leadership. Everything I warned about in 2021 came true and contributed to my eventual termination in 2023.

Mitchell Troyanovsky would later acknowledge Mission Lane cofounding fraud privately (“Sasha didn’t really cofound Mission Lane”), actively investigated LendUp background, didn’t exercise his options, performed “it was great being here” exit on Slack, then disappeared after the acknowledgment. People told me Sasha was in a room threatening to sue Mitchell for starting a similar product. Despite this adversarial relationship and legal threats, December 12, 2025: Mitchell is now liking Sasha’s promotional posts with comprehensive fraud documentation visible in comments - officially named for showing support for absolutely no reason, demonstrating consciousness of guilt despite knowing the truth for years and having every reason to distance himself.

Email to Mitchell Troyanovsky, August 27, 2021:

Hey [name],

I hope you’ve enjoyed your first week at Puzzle. I apologize in advance for this, but I’m writing this out of concern for everyone who is just trying to do their job and prepare Puzzle for success. I know what I have experienced will also affect your role and the ability for you to be successful. I know you’ve already picked up a sense of some issues, but from the engineering experience there’s much more beneath the surface.

I’m afraid to talk to Sasha due to his relationship with Cwikla, and I’m afraid to gauge how other engineers feel; I personally think this situation has been dire and only getting worse. We’re at a pivotal make-or-break moment as we onboard more people, and right now it’s destined for organizational collapse.

My time working under Cwikla started with an uncertain gut feeling at the interview stage that has unfortunately solidified into many disruptive patterns I’ve seen in CTOs and technical leaders before:

Constantly distracted with excessive responsibilities while being the core decision maker of Gateway

Cwikla no longer works on Gateway on a daily basis. His code quality has been shoddy at best, even including indentation and formatting issues that would be a red flag in any engineering interview.

Cwikla sees us as being past the point of MVP and refuses to refactor or clean anything up; it’s impossible for any newcomer to grok. We have yet to prove any part of our product, and this attitude makes actual product development slow down to a crawl.

People are blocked from building features out

Many little “system design” questions go through Cwikla, or he decides to own that aspect and refuses to delegate it to anyone else. These questions, while nuanced, are not necessarily complicated, yet there is little framework in place to actually make decisions asynchronously as a group and document architecture. Discussions go stale until Cwikla decides to wrap things up again weeks later.

“Splits” is the primary example right now; I have a strong feeling waiting on Nick’s laptop has been an excuse and most of the code will be unused. Splits is also holding up mine and Lucy’s current features.

Knowledge is consistently siloed and “gatekept”

This largely stems from the lack of documentation and pretending that our code needs to be more complicated and bespoke than it should be.

Cwikla spends more time justifying forking broken libraries or wrapping it with poorly designed abstractions, as opposed to finding one that works and properly learning it

Product planning is ineffective and repetitive; nothing is written down and I’ve heard many “pipeline dreams” for almost a year now that will never be implemented. Most engineering meetings are 80% Cwikla talking about what’s in his head, which is usually the same thing for weeks in a row.

This is a dynamic I have been in too many times, and at this rate my time at Puzzle is finite. Gateway is going to be the most critical infrastructure Puzzle will have to deal with. It’s responsible for:

  • Database architecture (non-ledger)
  • Communicating with Ledger
  • GraphQL (Cwikla never had much interest in learning or architecting this properly, so this is essentially a frontend responsibility)
  • Ingesting and processing all partner data
  • And eventually much more

I am fully capable of writing backend code, have seen and worked with many frameworks and architectures in my career and in personal projects, but yet have once again found myself defeated to the point of not wanting to touch Gateway unless it’s necessary. This is a codebase that can single-handedly topple an organization due to how much it’s responsible for.

I’m not sure how everyone feels.

I think Lucy has some understanding but is trying to make the best of the situation; perhaps they haven’t been burned by this situation before or seen enough (good or bad) environments.

Tyler seems relatively new to TypeScript and so it’s easier to feel this is how things should be or not have strong opinions.

We’ve unfortunately lost Nick until the end of the year, but his direction under Cwikla has led to pretty unmaintainable code that’s core to our business and that no one currently owns. I don’t fault Nick; I blame the lack of documentation, direction, and constraints.

Jason and Chris work in Python but at least have a sense of Cwikla’s lack of organization when it comes to tying Ledger and Gateway together. Their conversations are also repetitive and undocumented.

Beau is really eager to learn, but I’m already afraid Cwikla has given him poorly defined, large, and unmanageable projects. This isn’t how you delegate to a junior developer. I spend several hours walking him through code I’ve literally never seen before because Cwikla is throwing files at him to look at. A junior developer needs bite-sized chunks that they feel actually contributes to something, and right now I’m afraid he’s being set up for failure and constant confusion.

I’m sorry if this isn’t the most appropriate avenue. I don’t know what I expect after writing this. I don’t mind if you think you should send this to Sasha or if you want to discuss more, but I’m also happy to pretend this never happened.

I know I’m perfectly capable of making something like Puzzle successful, but not with how it’s been so far. Every consecutive week has made me feel like my work will never come to fruition and I’m wasting my time. I’m tired of feeling this way, especially since I’ve encountered this repeatedly at previous startups, and need someone else to know if I plan to stay here and make it work. Cwikla desperately needs to narrow the scope of his responsibilities and hand off Gateway to one of us or hire someone else if he refuses to trust his current employees.

Patrick

What This Email Demonstrates (August 27, 2021):

  1. Pattern recognition 21 months before termination: “I’m afraid to talk to Sasha due to his relationship with Cwikla” - identified the CEO-CTO dynamic that would later enable retaliation
  2. Prediction of organizational collapse: “destined for organizational collapse” - documented in real-time before it happened
  3. “My time at Puzzle is finite”: Predicted my own eventual termination 1 year 9 months in advance
  4. Good faith attempt to protect employees: Named specific junior developers being set up for failure, tried to intervene
  5. Technical competence: Detailed analysis of architectural problems, not vague complaints - demonstrates I understood the technical issues deeply
  6. Fear of retaliation: “I’m afraid to talk to Sasha” - correctly assessed that raising concerns directly would result in retaliation
  7. Previous pattern recognition: “I have been in too many times” - had seen this dynamic at previous startups, tried to warn
  8. Independent validation: Post-termination, ex-coworker confirmed the dysfunction: “There’s something wrong with that guy” - not just my perception
  9. Mitchell Troyanovsky (PM) actively investigated and knew about Mission Lane fraud: The recipient of this warning email (Mitchell Troyanovsky, Product Manager) had “looked into LendUp” (actively asked around about Sasha’s background), didn’t exercise his options, later revealed “Sasha didn’t really cofound Mission Lane” when I started openly questioning Sasha’s repeat founder claims and LendUp “success” narrative on LinkedIn—demonstrates employees who conducted due diligence, discovered credential fraud, stayed quiet until it was convenient to acknowledge, then disappeared to avoid association. People told me Sasha was in a room threatening to sue Mitchell for starting a similar product. Despite this adversarial relationship, Dec 12, 2025: Now liking Sasha’s promotional posts with fraud documentation visible in comments - officially named for showing support for absolutely no reason

Timeline Context:

  • August 27, 2021: This warning email sent
  • October 2020 - August 2021: ~10 months of observing dysfunction
  • May 31, 2023: Termination after 2.5 years
  • Post-termination (June 2023): Chris Yancey (Puzzle SWE Jun 2020 - Sept 2021, now Director of Software Engineering at Ramp; has CPA but not actively using it) independently validated the dysfunction: “There’s something wrong with that guy” regarding Cwikla
  • July 6, 2023 (post-termination): Reported to HR Pals that “John Cwikla has been harassing many employees since the start”

The problems I identified in August 2021 were never addressed. Instead, they worsened over the next 21 months, culminating in termination after I raised concerns about OpenAI API costs and data privacy in May 2023. Chris Yancey’s comment confirms this wasn’t just my perception - other employees independently recognized something was fundamentally wrong with Cwikla’s behavior. (Chris was notified Nov 8, 2025; celebrated Sasha’s “biggest month” post Dec 5; untagged from RICO comment.)

Cwikla’s pattern continued through termination:

From post-termination email to HR Pals (July 6, 2023): “John Cwikla [CTO/Cofounder] has been harassing many employees since the start. Now he’s telling [junior developer] he shouldn’t have won the hackathon. If that’s a joke, it’s cruel gaslighting. If it’s real, that’s incorrigible behavior for a leadership role.”

The junior developer mentioned in my July 2023 email to HR Pals is the same type of engineer I warned Mitchell Troyanovsky (Product Manager) about in August 2021 (“Beau is really eager to learn, but I’m already afraid Cwikla has given him poorly defined, large, and unmanageable projects”).

Why this matters:

This wasn’t retroactive analysis or “disgruntled employee” complaints after termination. This was contemporaneous documentation 21 months before termination showing:

  • The toxic technical leadership existed from my first year
  • I tried to protect other employees early
  • Fear of retaliation from Sasha prevented direct escalation
  • The problems I identified were never fixed, only worsened
  • My “time at Puzzle is finite” prediction came true

What happened to Mitchell Troyanovsky, the PM I sent this to:

Mitchell Troyanovsky - Product Manager I warned in August 2021 about toxic technical leadership and Beau Kuhn - also left Puzzle. Key details:

  • Did not exercise his options - suggests he knew something was wrong and didn’t believe in the company’s future
  • Actively investigated LendUp: He once mentioned he had “looked into LendUp” - meaning he asked around about Sasha’s background; this wasn’t passive knowledge, it was active due diligence
  • Performed “it was great being here” exit on Slack - performative departure, maintaining appearances
  • Quickly called when I started openly questioning Sasha’s claims on LinkedIn - first contact came when I started questioning repeat founder narrative and LendUp “success” story
  • Revealed Mission Lane cofounding fraud: “If you’re gonna do this, Sasha didn’t really cofound Mission Lane” - knew about the credential fraud all along
  • Laughed about Nigel Morris: I remembered him mentioning Nigel Morris before; when I said “I have no idea who that is,” he laughed - found my ignorance of the LendUp/Mission Lane power structure amusing
  • Never heard from again: Whether geopolitical differences (I was posting about VC/Israel connections in Oct-Dec 2023) or fear of association with a terminated whistleblower, he completely disappeared after that call
  • People told me Sasha was in a room threatening to sue Mitchell for starting a similar product - despite this adversarial relationship and legal threats, Mitchell continues showing public support

This demonstrates another pattern: employees who actively investigated the fraud (“looked into LendUp” = asked around), knew about Mission Lane cofounding fraud, didn’t exercise options (voting with their wallets), performed exits to maintain professional relationships, only reached out to acknowledge the documentation’s validity privately, then disappeared to avoid association. Mitchell Troyanovsky had the Mission Lane cofounding information the whole time—not from passive observation but from active due diligence—yet only revealed it when I was already publishing open concerns. Too late for the information to help, early enough to clear his conscience without risking anything.

December 12, 2025 update: Mitchell Troyanovsky liked Sasha’s DCPA promotional repost (“you be hearing a lot more about Puzzle in 2026 and 2027”) with comprehensive fraud documentation visible in the comments. After acknowledging Mission Lane cofounding fraud privately, after not exercising his options because he knew something was wrong, after performing a “great being here” exit, and despite Sasha threatening legal action against him for starting a similar product - he’s now publicly supporting Sasha’s promotional content while fraud documentation accumulates in plain sight. Officially named for showing support for absolutely no reason. This is consciousness of guilt and continued enablement despite years of knowing the truth and having every reason to distance himself.

May 31, 2023: Termination

After establishing Puzzle’s frontend foundation over 2.5 years, I was terminated on May 31, 2023, hours after management canceled my corporate card and the day after the cofounders posted job listings to replace my role while checking my LinkedIn at midnight. On May 30, VP of Engineering Radha Shenoy canceled our scheduled 1-on-1 and sent a vague ‘Catchup’ meeting invite for May 31 with no context—a deliberate misdirection while termination was already being planned.

The corporate card cancellation was a known termination signal at Puzzle. I had seen it used on other employees before their departures. When it happened to me, I recognized the pattern immediately.

After posting about the card cancellation and workplace conditions during mental health awareness month, management deleted my post and immediately removed me from Slack.

Same day (May 31, 2023, 9:45 AM): Hours into the termination, CEO posts on Twitter about silencing mental health struggles:

“This resonates strongly. Took meditation to get me to the other side. Still doesn’t work always, but a powerful tool for building mental strength (for me, at least).”

Quote-tweeting: “I used to listen to the voice in my head. And, it caused me to be sad, lonely and depressed. When I learned to silence the voice, I improved 10x in all areas of my life.”

The juxtaposition: While terminating an employee who posted about mental health awareness month and workplace conditions, CEO publicly performs mental health advocacy and “mental strength” messaging. Posted after card cancellation (morning), before my email declining the termination meeting (12:16 PM). The timing isn’t coincidental—it’s performative contradiction. Public mental health advocacy deployed on the exact day of terminating someone for raising workplace mental health concerns.

I posted this Tweet in #random; the post was immediately deleted and I was out of Slack. Their finger was on the trigger.

Tweet about LendUp Mission Lane posted before termination

I received an email stating management had “received receipt of your resignation effective today.” However, the company simultaneously sent me a formal separation agreement offering 2 weeks of severance—standard termination protocol, not resignation procedure.

Internal Communications (sent by coworker as full proof):

The company sent two internal communications on the termination day. A coworker forwarded these to me, providing complete documentation of the coordinated narrative.

Internal termination email from Radha Shenoy May 31, 2023, 1:15 PM: VP of Engineering Radha Shenoy’s “Update on Patrick” email to Team. Email states “Today is a sad day. Patrick is no longer with the company.” Describes my contributions positively (“brought an early quality to our code base and user experience, he constantly pushed to make remote culture better, and was a real asset to our team”). Claims “A few weeks ago Patrick gave notice. We recommended time off as an option, but he refused. At the time he offered to stay and complete his current priorities and move on. Since giving notice we noticed a change in his behavior that was unsettling to many at Puzzle. We setup a meeting for today to understand what changed and move forward and today, and to create a plan going forward. However Patrick decided to decline and resign immediately.” Email sent 1 hour 59 minutes after my 12:16 PM email declining the “Catchup” meeting and warning about the CEO’s fraud pattern. Sasha’s avatar visible in screenshot features obnoxious Top Gun mustache.

Internal Slack message from Sasha Orloff May 31, 2023, 1:25 PM: CEO Sasha Orloff’s Slack message in #general about Brex/Ramp card transition. Message states “I deleted a message here that was unfortunately confused for something that it is not, and was getting some questions. We are in the process of moving some early employees who had Brex cards over to Ramp, given they are working with us building a new API for spend and accounts payable. More of you might get cancellation notices, but it is only a few early employees.” Posted 10 minutes after Radha’s termination email, providing cover story for corporate card cancellations that served as termination signals. The timing shows coordinated messaging: card canceled morning of May 31 → I recognize termination signal → I decline meeting and send warning email 12:16 PM → Radha sends termination email 1:15 PM → Sasha posts Slack cover story 1:25 PM. Three employees (Luke Frye, Scott, Andrew Robinson) reacted with heart emoji to the message.

The narrative contradictions:

  • “Gave notice weeks ago” - No resignation was given. The separation agreement itself proves this was a termination (severance, six-day review period, release of claims).
  • “Offered to stay and complete priorities” - I was actively working on projects until the card cancellation signal.
  • “Change in behavior unsettling to many” - I had posted about mental health awareness month and workplace conditions; CEO posted about “silencing the voice in your head” on the same day (May 31, 9:45 AM).
  • “Patrick decided to decline and resign immediately” - This twists my 12:16 PM email into “proof” of resignation. My email declined a vague “Catchup” meeting after recognizing the card cancellation termination signal and warned about the CEO’s fraud pattern. It says nothing about resigning. Radha sent the termination email 1 hour 59 minutes later claiming I “decided to resign immediately.”

The Brex/Ramp cover story was necessary because card cancellations were the known termination signal at Puzzle. By framing it as an API partnership transition, Sasha provided plausible deniability for why my card was canceled before the termination meeting—while also signaling to other employees that “more of you might get cancellation notices” (creating fear/compliance).

The termination was executed through HR Pals, a third-party HR services provider. HR Pals sent the separation agreement requiring me to waive claims for fraud, wrongful discharge, and retaliation—a document that suggests either they didn’t review what they were asking me to sign, or they knowingly facilitated an illegal termination.

HR Pals resignation email Brianna Gutierrez (HR Pals): “I am reaching out to you as I have received receipt of your resignation effective today. […] Additionally, to thank you for your contributions to Puzzle, we will be offering you a payment covering 2 weeks of your salary.”

Separation agreement equity deletion clause ”[…] you have no right, title, claim, or interest in or to any of the Company’s securities […] you acknowledge and agree that you do not have any right, title, claim, or interest in or to the option described in the employment offer letter […] which would not be vested in any event. […] Although you are not otherwise entitled to receive any severance benefits from the Company, subject to […] your timely execution of this Agreement, […] the Company will pay you a lump sum severance payment”

Separation agreement broad waiver clause In exchange for two weeks’ severance, required to waive claims against not just Puzzle, but “its predecessors, successors, past, present or future subsidiaries, affiliated companies, investors, branches or related entities.”

Language encompasses: LendUp, Mission Lane, all investors, any future ventures.

Claims required to waive: Fraud, breach of contract, wrongful discharge, retaliation, and all equity claims.

This goes beyond standard severance language - attempt to buy permanent silence about decade-long pattern across multiple companies.

Critical: Separation Agreement Language Mirrors CFPB Order Scope

The separation agreement’s network scope (“predecessors, successors, subsidiaries, affiliated companies, investors, branches or related entities”) directly parallels the CFPB order’s binding language:

Separation AgreementCFPB Order
”predecessors""Defendant” (LendUp)
“successors”Paragraph 32: “successor company"
"subsidiaries”Paragraph 32: “subsidiary, parent, or affiliate"
"affiliated companies”Paragraphs 7-11: “all other persons in active concert or participation"
"investors”Network entities (GC, XYZ, QED, Kapor)
“related entities”Paragraph 50: “transferee or assignee”

What this reveals:

Sasha knows the CFPB order binds him personally across all affiliated entities (¶9, 10, 11: “Defendant and its officers”). He structured the separation agreement to mirror that scope because he needs silence across the same network the order covers. This explains why:

  1. Mission Lane sent C&D same day as Puzzle (August 11, 2023) — predecessor affiliate covered by both documents
  2. Separation agreement specifically mentions “investors” — GC, XYZ, QED all have exposure if fraud is documented
  3. Broad waiver scope wasn’t boilerplate — it was specifically crafted to match CFPB order’s “active concert or participation” language

The separation agreement is a private contract attempting to replicate the CFPB order’s network scope — buy silence from employees across the same entities the federal order already binds the CEO to.

Separation agreement non-disparagement clause “You agree that you will not disclose to others the fact of this Agreement or its terms. […] You agree that you will not disparage or encourage or induce others to disparage the Company or any of its Released Parties.”

The Separation Agreement Proves Termination

  • Formal separation agreement (only issued for terminations)
  • Severance payment offer (not given for voluntary resignations)
  • Six-day review period (required for termination releases under law)
  • Release of all claims including non-disparagement and non-disclosure
  • Healthcare continuation through specific date
  • Required acknowledgment that I had “no right, title, claim or interest” in my vested stock options

The email framed severance as a “thank you for your contributions,” while the legal document stated I was “not otherwise entitled to receive any severance benefits” except “in consideration for” signing away all rights to sue, speak publicly, or claim equity.

I declined to sign the confidentiality and non-disparagement agreements within the six-day window.

Days after my termination, I posted on LinkedIn that I had been “conditioned by workplace instability into thinking I was getting fired, but in reality I resigned,” showing how effectively the gaslighting had worked. I had changed my LinkedIn tagline to “this guy’s crazy i’m sure,” anticipating that people would dismiss my documentation of the CEO’s pattern as the ravings of a disgruntled employee. I was already doubting my own memory of what happened, despite the separation agreement proving it was a termination. CEO Sasha Orloff viewed my LinkedIn profile after this post, monitoring my public struggle with the false narrative he had created.

LinkedIn post showing gaslighting internalization

May 31, 2023, 12:16 PM: Warning to VP of Engineering (Prophecy)

Hours after my corporate card was canceled (the known termination signal), I declined the vague “Catchup” meeting Radha Shenoy had scheduled and sent her this email. Everything I predicted came true.

This email was likely used as their “proof” of resignation. Radha’s internal termination email (evidence-140) sent 1 hour 59 minutes later claims I “decided to decline and resign immediately”—twisting my refusal to attend a vague meeting after recognizing the termination signal into a voluntary resignation. My email says nothing about resigning. It warns about the CEO’s fraud pattern and declines a meeting after my card was canceled.

Timeline (from my email to therapist documenting the sequence):

  • Tuesday, May 30, 2023: CEO posting relentlessly on social media (documented viewing my LinkedIn at midnight their time); worked until 4am finishing a project; Radha canceled our scheduled 1-on-1 and sent “Catchup” invite for Wednesday with no context
  • Wednesday morning, May 31, 2023: Corporate card canceled during my physical therapy appointment (for knee injury from skating accident Halloween 2022—fell on a grate, busted both knees; never went to physical therapy again after this cancellation)
  • May 31, 2023, 9:45 AM: CEO posts on Twitter about silencing the voice in your head: “This resonates strongly. Took meditation to get me to the other side. Still doesn’t work always, but a powerful tool for building mental strength (for me, at least).” Quote-tweeting: “I used to listen to the voice in my head. And, it caused me to be sad, lonely and depressed. When I learned to silence the voice, I improved 10x in all areas of my life.” Posted during the termination day, after card cancellation
  • May 31, 2023, 12:16 PM: Sent email to Radha Shenoy (VP of Engineering), declining “Catchup” meeting
  • May 31, 2023, 5:47 PM (evidence-135): LinkedIn profile views show family-level surveillance on termination day—Sasha viewed profile ~2 hours prior (around 3:47 PM), Jennifer Villanueva Orloff viewed 12 minutes prior (around 5:35 PM), multiple Puzzle employees also viewing. “Found you through LinkedIn search” notation on Sasha’s view. Both CEO and his wife monitoring terminated employee’s profile hours after termination.

Email to Radha Shenoy (VP of Engineering), May 31, 2023:

I’m not giving the courtesy of a final call. You, Sasha, and Cwikla are so shady and untrusting it’s predictable at this point.

Sasha uses people. He hired you because you fire people. You get paid $[REDACTED] to do this instead of protecting your team.

This job will eat your soul away. It might not be obvious yet, but you will wake up in a year or two regretting doing all this for such unserious and selfish people.

There are two outcomes for Puzzle. It’s somehow successful, yet you still burn through people in the process. The more realistic one is where everything I’m saying is true. This company will either fizzle out before a Series B, or Sasha runs it to the ground until his ego snaps. Either way, there will be a lot of truth-bending to get what he wants.

Send me whatever next steps and I’m out. I regret working here and feel sorry for anyone who gets convinced to save this.

Patrick

What happened immediately after (documented in real-time):

  • Posted screenshot in #general: “happy end of mental health awareness month; I hope I’ve been a fun example for you all and you continue ignoring the conditions that brought me to this point”
  • Posted meme in #random (immediately deleted, banned from Slack - “finger was on the trigger”)
  • Posted public list of workplace red flags on LinkedIn: exploding offers, impersonal interviews, team-building theater, productivity surveillance, yes-man culture, screaming, treating people as replaceable, controlling the narrative (complete list in appendix)
  • Company morale hit “lowest in company’s history” that week
  • Received “resignation” email + termination paperwork with anti-disparagement clause
  • CEO continued “business as usual” posting with “no emotional intelligence, doesn’t pause to reflect”

June 4, 2023 (4 days after termination): CEO posts Twitter thread about wealth inequality and political problems:

“If you haven’t dug into the rabbit hole of wealth inequality, or why it is such a big deal now versus when we were younger, this time lapse style video is worth 2 minutes. https://tiktok.com/t/ZTRopRLk8/”

“For me the issue is not raising taxes, I support that. But increasing taxes with the current political ideology now will likely go to more military or more handouts, not R&D, education, job creation, universal healthcare or things that will actually build up the middle class.”

“So we are not short of ideas on how to solve. We are long in political hubris, short term thinking, and politicians without any real world job experience. They live in an echo chamber of failing up.”

“If history repeats itself, the US could cede as the global superpower or we could see a populist revolution (Sanders, Trump, Jan 6th). Its scary to think it might be a ‘when’ instead of an ‘if’ not from anyone other than our own political infighting. 🤯🤦‍♂️ 🙊🙉🙈”

The TikTok link: First search result for “wealth inequality” - performative posting without actual engagement with the issue.

The hypocrisy: CEO posting about wealth inequality, universal healthcare, and “echo chamber of failing up” 4 days after terminating an employee who:

  • Had to cancel physical therapy (knee injury from Halloween 2022) when corporate card was canceled
  • Posted about mental health awareness month and workplace conditions
  • Was monitoring his profile on termination day (family-level surveillance)
  • Would spend 9 months unemployed, prioritizing sick cat care over job searching
  • Had raised concerns about OpenAI API costs and data privacy

Context while posting about “building up the middle class”:

  • CEO of company with $312 total revenue vs $10M+ burned (subsidized by investors)
  • Subject to CFPB permanent ban for “repeatedly lying to consumers” of predatory loans
  • Operating Partner Rewards affiliate program in violation of federal ban
  • Leading company that would photoshop metrics 2 years later (Oct 2025)

The “Banker to the Poor” ideology extends to Twitter performance: post about wealth inequality and helping the middle class while actively retaliating against a terminated employee dealing with healthcare loss and unemployment. The TikTok being just the first search result for “wealth inequality” demonstrates this is performed concern, not genuine engagement.

“Politicians live in an echo chamber of failing up” - posted by CEO who got golden parachute from CFPB-banned company, raised $30M+ for accounting software with $312 revenue, and would delete equity from employees who questioned practices.

The prophecy came true (2023 → 2025):

Prediction (May 31, 2023)Reality (2023-2025)
“Fizzle out before a Series B”✅ No Series B announced, 2.5+ years later (only $15M “funding round” Nov 2023)
“Run it to the ground until his ego snaps”✅ ActualQuickBooks photoshopping incident (Oct 2025: 3 likes → 12,362); continued operations with $312 revenue vs $10M+ burned; still no viable business model
”Truth-bending to get what he wants”✅ Photoshopped social media metrics, false academic credentials (careers page), CPA credential misuse, 4 C&Ds to suppress documentation, “resignation” narrative control
”Burn through people”✅ Layoffs (Dec 2022, May 2023 wave); “lowest morale in company history” observed and documented week of my termination; multiple employee departures during this period
”Eat your soul away”✅ Dec 2022 board meeting: Sasha blamed team for underperforming, “you’re replaceable” tone; threw employees under the bus when convenient; forced moral compromises (deploy false testimonials, suppress fraud comments)
“Regret working here”✅ Stated in this email (May 31, 2023); consistent with post-termination mental health impact documented in SEC complaints

Clinical validation:

Licensed therapist evaluation (referenced in SEC complaints) confirmed workplace gaslighting and systematic manipulation, not mental illness. I had been discussing the toxic workplace with her for months before termination. The timeline above is from my email to her documenting the sequence of events. Her professional assessment validated:

  • The retaliation pattern: card cancellation → forced meeting → narrative control (“resignation” framing)
  • My recognition of the manipulation dynamics: “I manipulated the situation too…being pretty methodical in planting all these seeds and using their own mistrust to turn them against each other”
  • My real-time assessment: “Two co-founders are deep narcissists that have attracted each other but have no real compatibility and will burn the company and employees down”

What this email proves:

  1. Pattern recognition in real-time - Not retrospective analysis; I called it the day of termination
  2. Good faith warning - Tried to warn leadership, protect remaining employees (“feel sorry for anyone who gets convinced to save this”)
  3. Contemporaneous prophecy - Every single prediction came true with documented receipts
  4. Clinical record - Therapist’s notes validate timeline and confirm workplace trauma, not mental illness
  5. Consciousness of manipulation - Even while being gaslit, I recognized the pattern and documented it

The email demonstrates I wasn’t “mentally ill” or “disgruntled” - I was accurately documenting a systematic pattern that would play out exactly as predicted over the next 2.5 years.

Termination Day Surveillance (May 31, 2023)

May 31, 2023, 5:47 PM: LinkedIn profile analytics captured on termination day show coordinated surveillance by CEO and his wife.

LinkedIn profile views May 31, 2023May 31, 2023, 5:47 PM: LinkedIn “Who’s viewed your profile” showing family-level surveillance on termination day. Sasha Orloff (CEO at Puzzle) viewed 2h ago (~3:47 PM), notation “Found you through LinkedIn search.” Jennifer Villanueva Orloff (Sasha’s wife, “Active learner. Enjoying Life.”) viewed 12m ago (~5:35 PM). Also visible: multiple Puzzle employees viewing profile (Madalyn Maya Rice - Software Engineer at Puzzle, Olvis Gabriel Camacho Urey - Senior Software Engineer), plus Steven Tison (Senior Auditor at Carmichael, Brasher, Tuvell & Company). Pattern: both CEO and wife monitoring terminated employee’s LinkedIn activity hours after termination.

Timeline reconstruction from 5:47 PM snapshot:

  • ~3:47 PM (2h before screenshot): Sasha Orloff views profile via “LinkedIn search” - active monitoring after termination meeting timeframe
  • ~5:35 PM (12m before screenshot): Jennifer Villanueva Orloff views profile - wife surveillance near end of business day
  • 5:47 PM: Screenshot captured showing coordinated family-level monitoring

Multiple Puzzle employees also viewing profile same day:

  • Maya Rice (Software Engineer at Puzzle) - viewed 55m ago (~4:52 PM)
  • Olvis Gabriel Camacho Urey (Senior Software Engineer) - viewed 1h ago (~4:47 PM)

What this demonstrates:

  1. CEO active surveillance on termination day: “Found you through LinkedIn search” indicates intentional profile lookup, not passive notification
  2. Family-level monitoring: Wife Jennifer viewing profile same day as termination extends surveillance beyond professional to personal/family unit
  3. Employee activity tracking: Multiple current Puzzle engineers viewing profile suggests either directed monitoring or internal discussion about the termination
  4. Pattern established early: This May 31, 2023 surveillance establishes the family monitoring pattern began on termination day itself.

Context with surveillance pattern:

  • May 30, 2023: CEO viewing my LinkedIn at midnight their time (night before termination)
  • May 31, 2023: Both Sasha and Jennifer monitoring profile on termination day
  • Summer 2023: Jennifer viewing profile as I was publishing fraud documentation (June-August 2023 period when posting about LendUp, Mission Lane, Asset Sale documents)
  • November 2025: Sasha commenting on Jennifer’s week-old LinkedIn post day after final partner notices

The surveillance operated at family level from termination day through the 2023 period when I was publishing fraud documentation. This isn’t passive social media activity—it’s systematic monitoring of a terminated employee who raised compliance concerns.

Laptop Return Box (June 1, 2023)

May 31, 2023, 11:30 AM: Brianna Gutierrez (HR Pals) sends termination email with impossible equipment return timeline:

“Please return all company equipment and materials by Friday June 2, 2023.”

June 1, 2023, 10:44 AM: Brianna sends follow-up email stating laptop return box “scheduled to arrive tomorrow”:

“A FedEx laptop box has been sent to your address on file and is scheduled to arrive tomorrow. Please send back your laptop and charger using this packaging.”

The impossible timeline:

  • Deadline set: Return equipment BY June 2, 2023 (May 31 email)
  • Box arrival: Scheduled to arrive June 2, 2023 (June 1 email)
  • Result: Same-day return expected - receive box and return it the same day

This demonstrates either incompetence or deliberate setup for non-compliance claim. Cannot meet deadline when return box arrives on deadline day.

June 1, 2023: I responded to Brianna warning about the situation:

“You need to save whoever’s left. This will not go well under the current leadership and anyone close to them is so blinded by what’s really going on.”

Correction: Box actually arrived June 2, not June 1 (as stated in June 1 email: “scheduled to arrive tomorrow”). This makes the timeline even more absurd - they demanded return BY June 2 when the box wouldn’t arrive UNTIL June 2.

Laptop return box June 2, 2023June 2, 2023: Laptop return box delivered - same day as return deadline. Impossible timeline: demanded equipment return BY June 2 when box scheduled to arrive June 2. “laughing my fucking ass off” was my reaction to the absurd deadline. Pattern: termination logistics either incompetent or designed to create compliance issues.

What this demonstrates:

  • Impossible deadline: Demanded return by date when return box would arrive
  • Premeditation with poor execution: Return box ordered quickly (May 31 after termination) but deadline not adjusted for shipping time
  • Systematic preparation: Job postings created beforehand, card cancellation signal, immediate Slack removal, return box logistics rushed
  • Consciousness of planning: This wasn’t a sudden “resignation” decision - termination was planned with all logistics ready, just executed sloppily

The corrected timeline:

  • May 30: Radha cancels scheduled 1-on-1, sends vague “Catchup” meeting (misdirection)
  • May 31, 11:30 AM: Termination email sent claiming “resignation,” demanding equipment return BY June 2
  • May 31: Card canceled (morning), CEO posts mental health tweet (9:45 AM), family surveillance (afternoon), Slack removal (after posting), return box ordered/shipped
  • June 1, 10:44 AM: Email states box “scheduled to arrive tomorrow” (June 2) - contradicting June 2 deadline set previous day
  • June 1: I warn Brianna: “You need to save whoever’s left”
  • June 2: Return box arrives (same day as deadline), equipment returned with written note

Everything was prepared before termination meeting, but execution revealed the absurdity - demanding same-day return when box arrives on deadline day.

June 2, 2023: Sent equipment back with written note. I hoped they kept it. I knew that sheet of paper would be worth more than Puzzle.

Beau Kuhn: Hiring Bonus Culture and Employee Complicity (June 1, 2023)

June 1, 2023 (same day laptop return box arrived): Beau Kuhn, the junior developer I had warned about in my August 2021 email, posted on LinkedIn recruiting for Puzzle’s frontend engineer position—the same day I was terminated.

Beau Kuhn LinkedIn job posting June 1, 2023June 1, 2023: Beau Kuhn (Software Engineer at Puzzle) posting frontend engineer job listing on LinkedIn same day as my termination. Link goes to puzzlefin.notion.site job posting. Posted 16 minutes before screenshot. Pattern: employees actively recruiting replacements on termination day, incentivized by hiring bonuses.

Text messages with Beau (June 1, 2023, 8:32 PM):

Text messages with Beau June 1, 2023June 1, 2023, 8:32 PM (same day as termination): Text conversation with Beau showing his perspective while still employed. Key quotes: “For those of us still here, we need to do our best to make sure all our combined effort doesn’t go to waste, despite what may or may not be right with the company where it’s at.” My responses: “take it easy man,” “enjoy it while it lasts,” “they’re not gonna immediately let people go,” “but you need to get out of there at some point.” Beau: “I’m too poor to have a job” (financial trap), “I just got a new apartment in San Diego,” “Yeah you’re right,” “I’m hoping we get an exit…”

The Hiring Bonus Culture:

Puzzle offered hiring bonuses to employees who successfully referred candidates. This explains why employees were actively sharing job listings on termination day—they weren’t just company loyalists, they were financially incentivized. No one gave a shit about fraud concerns. People weren’t blinking an eye at my termination because there was money in recruiting my replacement.

Even the Chief of Staff had blocked me. The isolation wasn’t accidental—it was systematic, extending from junior engineers to executive staff.

What the June 1 texts show:

On termination day itself, Beau was already acknowledging “what may or may not be right with the company where it’s at” but rationalizing staying (“we need to do our best”). He admitted being financially trapped (“I’m too poor to have a job”) and hoping for an exit. Even while recognizing problems, he posted the job listing (hiring bonus) and excommunicated me.

What happened after June 1:

  • 2021-2023: I warned Beau about the dysfunction or tried to help or protect him
  • June 1, 2023: Beau ignored warnings, posted job listing (hiring bonus incentive), texted me acknowledging dysfunction but rationalizing staying
  • LinkedIn confirms: His profile shows he worked extensively on “LLMs… specifically PaLM2 and ChatGPT,” “Retrieval Augmented Generation (RAG) system,” and “Enhanced transaction categorization through the utilization of vector databases and embeddings, winning a company hackathon”—the exact ChatGPT/AI features I raised concerns about (OpenAI API costs, data privacy, customer financial data to third-party APIs)
  • July 6, 2023: I reported to HR Pals that Cwikla was harassing (including Beau after hackathon win: “he shouldn’t have won the hackathon”)
  • Around July 6, 2023: Beau contacted me after he got in trouble for my HR email, then excommunicated me
  • Internal evidence escalation: People withdrew after I used internal evidence they’d given me—a coworker had sent me (1) Sasha’s internal Slack message about my card cancellation and (2) Radha’s termination email. When I used these in my documentation, contacts stopped. People became afraid I’d use anything they shared against Puzzle.
  • Within 1-2 months: People stopped contacting me from inside Puzzle or clearly pulled away—only 2-3 people total had reached out. The fear was explicit: anything given to me could be used as evidence.
  • July 26, 2023: Sasha’s voicemail offering financial assistance (after internal evidence escalation, after seeing fear working)
  • ~6-7 months later (~December 2023/early January 2024): Beau fired (LinkedIn end date: January 2024)

Meeting after Beau’s termination (December 2023):

After being fired, Beau wanted to reconnect but hesitated reaching out. He later admitted he was concerned I’d “use something” against Puzzle—likely referencing my July 6, 2023 HR email where I named him as a victim of Cwikla’s harassment. The fear of being documented was so pervasive that even a former employee who’d been wrongfully terminated was afraid to talk.

We met in December 2023 where he revealed:

  1. Didn’t trust Sasha: Also felt he was shady
  2. Cofounders met on founder matching platform: Revealed Sasha and cofounders met on a co-founder matching site (likely Y Combinator’s Co-Founder Matching platform)—not an organic founding team
  3. Implied wrongful termination: Suggested he was also wrongfully terminated
  4. Legal threat: “They told him he won’t be considered on good terms if he speaks to a lawyer” - explicit coercion to prevent legal counsel
  5. Didn’t want to go too deep: Still scared even after termination
  6. Aware of equity deletion and LendUp documentation: Said he “heard about” my equity deletion and saw my Puzzle x LendUp Twitter posts. When I asked, “You know what Sasha did with LendUp right?” he seemed nonchalant and knowing about it—didn’t particularly care to go into it. Demonstrates willful ignorance: even after being fired and threatened himself, Beau knew about the CFPB history but chose not to engage with the pattern.

Email to Alice Ko, December 24, 2023:

“beau hit me up last weekend and we met up. he didn’t want to go too deep, but implied he was also wrongfully terminated. they told him he won’t be considered on good terms if he speaks to a lawyer.. such a crazy thing to have to say.”

What this demonstrates:

  • Systematic legal threats: Puzzle explicitly threatened Beau not to speak to a lawyer, using “good terms” as leverage (likely referencing equity, references, or severance)
  • Witness intimidation: After I named Beau in my July 6, 2023 HR complaint about Cwikla’s harassment, Beau got in trouble, then was fired months later, then threatened not to lawyer up
  • Pattern of preventing legal counsel: Same playbook as my experience—separation agreements demanding silence, threatening language in C&Ds, using “good terms” as coercion
  • Fear persists post-termination: Beau “didn’t want to go too deep” even after being fired—threats were effective in maintaining silence
  • Willful ignorance of CFPB history: Beau “heard about” my equity deletion, saw Puzzle x LendUp Twitter, knew about LendUp when asked—but was nonchalant, didn’t care to go into it. Even after being fired and threatened himself, chose not to engage with the pattern. Demonstrates how employees rationalize staying/protecting reputation: acknowledge fraud exists but refuse to examine implications.

Beau’s response after being cut off:

After I cut Beau out (November 2024 during Japan trip), he told someone who had been fired before me that he thought I was “mentally ill.” This mirrors Sasha’s internal narrative strategy—employees who maintained contact while staying at Puzzle adopted the same “mentally ill” framing once I enforced boundaries. The narrative served to resolve their cognitive dissonance: easier to dismiss me as crazy than confront their own complicity in staying at a company committing fraud.

The person Beau told:

This employee, who had been fired before me, barely wants to discuss Puzzle. Doesn’t want to provide any evidence. Doesn’t particularly care about the “operation” aspect. Has chosen to move on entirely—even though he’s told me Puzzle was a financial setback for him.

He told me that after what he believes was his termination (framed as “ask if Puzzle’s the right fit for you”), he emailed Sasha saying he appreciated the opportunity. Sasha never replied.

What this demonstrates about “good terms” threats:

When Puzzle threatens employees “won’t be considered on good terms if he speaks to a lawyer,” it works. Even people who were financially harmed choose silence. Even people Beau tells “Patrick is mentally ill” don’t reach out to compare notes or provide evidence. The legal coercion creates such effective fear that former employees who suffered financial losses would rather move on in silence than participate in documentation that could validate their own claims or contribute to class action recovery.

Sasha’s silence after termination: This employee reached out after being fired, expressing appreciation for the opportunity—and Sasha never replied. Shows the pattern: terminations framed as voluntary (“ask if Puzzle’s the right fit for you”), employees try to maintain professional relationship, CEO ghosts them. The silence reinforces that former employees have no value once they’re no longer useful.

Mid-2025 reconnection attempt:

A few months before the photoshopping incidents (October 2025), the coworker who had given me internal evidence (Sasha’s Slack message + Radha’s termination email) tried to reconnect. They were still working at Puzzle. This person initially started connecting with me before my termination when I hinted on LinkedIn about the lack of psychological safety.

I entertained it briefly but realized I couldn’t maintain normal conversations with people who chose to stay at a company operating under a CFPB ban, deleting employees’ equity, and threatening former employees not to speak to lawyers.

He did also briefly reach out once after noticing my post-Puzzle job. I appreciated it, but even then I couldn’t resume normalcy.

The narrative incompatibility: I couldn’t have both narratives exist simultaneously—that I’m “mentally ill” (what Sasha told employees, what Beau told others after I cut him off) and that people “think highly of me” enough to stay in touch. If the fraud documentation was delusional, why reach out? If it was credible, why stay at Puzzle? The contradiction was untenable. People wanted to maintain contact while avoiding the cognitive dissonance of their own complicity.

I ended up cutting out Beau while I was in Japan 2024. (See: Psychedelic & Psychic Prophecies - November 2024 Osaka encounter where grifter admitted making “illusions,” coinciding with final decision to cut off remaining Puzzle contacts who didn’t believe me at the time)

Timeline connecting to August 2021 warning:

  • August 27, 2021: Warned PM about Beau (hired July 2021): “Beau is really eager to learn, but I’m already afraid Cwikla has given him poorly defined, large, and unmanageable projects. This isn’t how you delegate to a junior developer… I’m afraid he’s being set up for failure”
  • By 2023: I had warned Beau about the dysfunction; meanwhile he was working extensively on ChatGPT/LLM/RAG features per LinkedIn
  • June 1, 2023: Beau ignored my warnings, posted job listing same day as my termination (hiring bonus incentive)—no one gave a shit about fraud concerns
  • June 1, 2023, 8:32 PM: Text messages where Beau acknowledges problems but rationalizes staying, admits financial trap
  • July 6, 2023: I reported Cwikla’s harassment to HR Pals (including harassment of Beau after winning hackathon: “he shouldn’t have won the hackathon”)
  • Around July 6, 2023: Beau contacted me after getting in trouble for my HR email, then excommunicated me
  • June-July 2023: Internal evidence escalation—coworker sent me Sasha’s Slack message about card cancellation + Radha’s termination email; when I used these, people withdrew; fear became explicit: anything shared could be used as evidence
  • Onward: Internal contacts dried up—only 2-3 people total had reached out, then stopped or clearly pulled away
  • July 26, 2023: Sasha voicemail offering financial assistance (after seeing internal evidence strategy and fear working)
  • Nov 14, 2023 (post-Oct 7): Coworker sent “eggshells” concern message: “Hey Patrick, I heard that you made a comment around not wanting to live? If so, I want you to know folks really care about you… There’s an expert call/text hotline if you’re feeling overwhelmed at 988. I’m sorry if this is all misinterpreted” - I was posting about “not wanting to live in a world with this much evil” (referencing geopolitical violence); didn’t respond due to condescending framing and his apparent lack of understanding about who he was working for
  • ~Dec 8, 2023: Deleted my LinkedIn entirely (after Ian’s “go on a vacation” hostility)
  • Dec 20, 2023: Unsent C&D prepared - 12 days after I permanently deleted my LinkedIn, proving they were still monitoring and drafting legal threats even after the account no longer existed
  • ~6-7 months later (~December 2023/early January 2024): Beau fired (LinkedIn end date: January 2024)
  • December 2023: Beau hesitated reaching out (feared I’d “use something”); met after his firing—he felt Sasha was shady, revealed cofounders met on founder matching platform, implied wrongful termination, told me Puzzle threatened him: “won’t be considered on good terms if he speaks to a lawyer”—explicit legal coercion; admitted he “heard about” my equity deletion, saw Puzzle x LendUp Twitter; when I asked “You know what Sasha did with LendUp right?” he seemed nonchalant and knowing—didn’t care to go into it (willful ignorance even after being fired and threatened himself)
  • December 24, 2023: Email to Alice Ko documenting Beau’s meeting and legal threat
  • November 2024: Cut Beau out during Japan trip
  • Post-cutoff: Beau told someone fired before me that he thought I was “mentally ill”—adopted Sasha’s narrative to resolve cognitive dissonance
  • Employee fired before me: Barely wants to discuss this, doesn’t want to provide any evidence, doesn’t particularly care about the “operation” aspect, chosen to move on entirely—even though he’s told me Puzzle was a financial setback for him. After termination (framed as “ask if Puzzle’s the right fit for you”), emailed Sasha saying he appreciated the opportunity; Sasha never replied. Demonstrates effectiveness of “good terms” threats: even financially harmed former employees choose silence over documentation or legal action.
  • Mid-2025: Employee (who gave internal evidence: Sasha’s Slack + Radha’s email) tried reconnecting while still at Puzzle; initially connected before my termination when I hinted on LinkedIn about lack of psychological safety; I realized narrative incompatibility—can’t maintain contact with someone staying at company committing fraud while positioning me as “mentally ill”

What this demonstrates:

  1. Financial incentives for complicity: Hiring bonuses made employees financially invested in participating in termination logistics
  2. No one cared about fraud concerns: On June 1, employees were posting job listings, not questioning why I was terminated
  3. Prediction validated: My August 2021 concern (shared with Mitchell Troyanovsky, Product Manager) that Beau was “being set up for failure” proved true—by June 1 he was trapped (“I’m too poor to have a job”), financially vulnerable, working under toxic leadership
  4. Cognitive dissonance on June 1: Beau texted acknowledging “what may or may not be right with the company” while simultaneously posting job listings to recruit my replacement
  5. Retaliation cascade: After I reported Cwikla’s harassment (naming Beau as victim), Beau got in trouble and excommunicated me—pattern of punishing both whistleblower and victims who didn’t request protection
  6. Internal evidence as isolation mechanism: When I used internal evidence (coworker sent me Sasha’s Slack message about card cancellation + Radha’s termination email), people withdrew entirely. Fear became explicit: anything shared could be documented. This strategy was effective—led to July 26, 2023 voicemail after seeing fear working.
  7. Systematic legal threats: Puzzle explicitly threatened Beau: “won’t be considered on good terms if he speaks to a lawyer”—using equity/references/severance as leverage to prevent legal counsel
  8. LinkedIn validates concerns: His profile confirms he worked extensively on ChatGPT/LLM/RAG features and won the hackathon Cwikla harassed him about—demonstrates the AI work I raised concerns about was actively being developed
  9. Witness intimidation pattern: After I named Beau in HR complaint → he got in trouble → ~6-7 months later fired (January 2024) → threatened not to lawyer up → hesitated reaching out (feared I’d “use something”) → “didn’t want to go too deep” even after termination
  10. Systematic isolation: From junior engineers (Beau excommunicating after getting in trouble) to Chief of Staff blocking me—organization-wide pattern. Only 2-3 people total reached out from inside, stopped within 1-2 months after internal evidence use. Nov 14 “eggshells” message demonstrates fear: coworker reframed my geopolitical post (“not wanting to live in a world with this much evil”) as suicide concern, walking on eggshells about who he was working for.
  11. Warnings ignored until too late: Only after getting fired himself did Beau fully admit Sasha was shady (December 2023 meeting after termination)
  12. Founder matching origin: Cofounders meeting on matching platform (likely YC’s) shows this wasn’t organic founding team, explains misalignment
  13. Beau adopted “mentally ill” narrative: After I cut him out (Nov 2024), Beau told someone fired before me that he thought I was “mentally ill”—adopted Sasha’s internal narrative to resolve cognitive dissonance about his own complicity
  14. “Good terms” threats effective on prior terminations: Employee fired before me barely wants to discuss this, doesn’t want to provide evidence, doesn’t care about “operation” aspect, chosen to move on entirely—despite acknowledging Puzzle was a financial setback for him. After termination (framed as “ask if Puzzle’s the right fit for you”), emailed Sasha saying he appreciated the opportunity; Sasha never replied. Demonstrates Puzzle’s legal coercion works: even financially harmed former employees choose silence over documentation or legal action.
  15. Narrative incompatibility (mid-2025): Coworker who gave internal evidence tried reconnecting while still at Puzzle; initially connected before my termination when I hinted on LinkedIn about lack of psychological safety; I realized can’t maintain contact with someone staying at company committing fraud while positioning me as “mentally ill”—can’t be both delusional and worth staying in touch with. People wanted contact without facing their own complicity.
  16. Willful ignorance of CFPB pattern: December 2023 meeting: Beau “heard about” my equity deletion, saw Puzzle x LendUp Twitter documentation; when I asked “You know what Sasha did with LendUp right?” he seemed nonchalant and knowing—didn’t care to go into it. Even after being fired and threatened himself (“won’t be considered on good terms if he speaks to a lawyer”), chose not to engage with 13-year fraud pattern. Demonstrates how employees rationalize complicity: acknowledge fraud exists but refuse to examine implications or connect to their own experience.
  17. Surveillance persisted after LinkedIn deletion: Deleted LinkedIn ~Dec 8, 2023; unsent C&D dated Dec 20, 2023 (12 days later)—demonstrates they were still monitoring and preparing legal threats even after the primary platform no longer existed.

Beau’s trajectory demonstrates Puzzle’s systematic witness management: financial entrapment via hiring bonuses, explicit legal threats after termination, and adopting the “mentally ill” narrative about me after I cut contact—resolving his cognitive dissonance by adopting Sasha’s internal framing. The unnamed coworker who provided internal evidence (initially connected before my termination when I hinted on LinkedIn about lack of psychological safety) tried reconnecting mid-2025 while still employed—narrative incompatibility meant they wanted contact without facing their own complicity in ongoing fraud.

Note: Beau will likely benefit from this documentation now. If he has his own lawsuit or becomes part of a class action for wrongful termination, the evidence of Puzzle’s explicit legal threats (“won’t be considered on good terms if he speaks to a lawyer”) plus the hiring bonus culture and systematic retaliation patterns documented here establish the company’s pattern and practice. Ironically, he may get kickback from the same documentation he ignored and didn’t support when it mattered.

The employee fired before me—who Beau told I was “mentally ill”—also stands to benefit from this documentation, even though he’s chosen silence. Puzzle being a “financial setback” for him likely means equity deletion or other compensation issues, yet he won’t provide evidence or participate in documentation. This is exactly what Puzzle’s “good terms” threats are designed to do: make even financially harmed former employees too afraid to speak up or compare notes, ensuring pattern stays hidden and preventing collective action that could lead to class action recovery.

Sasha Orloff’s July 26, 2023 Voicemail

On July 26, 2023, after declining to sign the separation agreement and forfeiting the severance payment, I began publicly documenting the company’s false narrative. I posted on LinkedIn about my job search struggles while exposing that Puzzle was telling employees internally I had “resigned,” including screenshots showing this messaging.

Shortly after these posts, I received a voicemail from CEO Sasha Orloff offering to cover “transition costs” and COBRA premiums “for a few months,” acknowledging he’d seen I was “facing some challenges finding your next role.” I had not received any contact from Sasha since days prior to my termination. The voicemail repeated the false claim that I had “resigned,” despite the separation agreement proving I was terminated, and despite my having just publicly exposed this lie with internal evidence.

CEO voicemail to terminated employee. Falsely restates “resignation,” offers “transition costs,” frames problem as lack of “job fit” while acknowledging constant surveillance. Nervous, stuttering—conscious of guilt.

The timing was explicit: after I refused the formal severance agreement and began posting proof of their deception with screenshots from current employees, the CEO personally reached out offering money outside any formal process. This outreach came at a moment when I was publicly vulnerable—posting about recruiter difficulties while documenting his pattern of fraud across companies.

The personal nature of this contact—a CEO directly monitoring and reaching out to a former employee who had (1) refused to sign an NDA, (2) exposed their false internal narrative with evidence from current employees, and (3) was in financial distress—demonstrates a calculated attempt to secure my silence when I was most desperate.

LendUp Employee/Shareholder: Selective Engagement Pattern

A former LendUp employee and shareholder provided the December 2018 asset sale document that showed LendUp assets transferring to Mission Lane. I interviewed him about his LendUp experience. He personally experienced the LendUp-to-Mission Lane card transition—his employee “L Card” became a Mission Lane card.

Timeline of engagement:

July 20, 2023 - Initial contact:

“I’m certainly familiar with the LendUp story, as a former employee & shareholder… wouldn’t exactly call it a success, of course. I’m curious to hear about the situation at Puzzle - whether on the record or not.”

July 26, 2023 - Validation of toxic pattern:

“Thanks Patrick - reviewed the outline, sounds very much like the Sasha I worked for.”

Offered to connect, explicitly prioritized my health: “Absolutely no rush here - please prioritize your own health if it isn’t something you want to talk about right now!”

July 31, 2023: Confirmed general familiarity with LendUp/Mission Lane split

August 3, 2023 - My email revealing pattern concerns:

I shared concerns about QED/Nigel Morris connections, admitted concern about appearing to engage in “conspiratorial thinking,” but noted: “as someone who’s never been near fintech before, I think it’s safer to assume the Capital One cofounder knows what he’s doing.” Mentioned Forbes repeatedly listing Nigel and Frank for Midas List, QED’s Credit Karma involvement, Frank Rotman and Ashley Marshall (QED PR director) already viewing my LinkedIn.

August 10, 2023 - Pre-call discovery:

I found lendup.com/first-boulevard redirect. He identified the connection: the LendUp domain buyer also bought First Boulevard domain. First Boulevard rebranded as Kinly and was eventually acquired by Greenwood, which also had serious problems.

August 11, 2023, 10:21 AM - Asset sale document:

First email with LendUp/Mission Lane “spin off” document with helpful context about the transaction. Mentioned his previous documentation of LendUp’s data selling practices and related entity situations.

What he confirmed:

  • Toxic LendUp culture: Validated the dysfunctional workplace environment
  • Sasha’s Instagram behavior: Revealed Sasha made weird comments on his Instagram posts
  • Had additional fraud documentation: Possessed other documents related to LendUp fraud
  • lendup.com lead generation: Identified the domain was being used to generate payday loan leads sold to Cyprus-based company LeadsGate (likely including illegal tribal and offshore payday lenders)

August 18, 2023 follow-up:

After I shared additional fraud documentation, he revealed key firsthand experience:

  • Was a LendUp employee: Had LendUp “L Card” as an employee
  • Experienced LendUp-to-Mission Lane transition firsthand: Had a Mission Lane card that was transitioned from his employee LendUp “L Card”
  • LendUp Global liquidation: Confirmed the business was fully liquidated; equity made worthless; received letter to write off shares on taxes
  • Received proof of claims as shareholder: Got liquidation documents via email as listed shareholder
  • Committed to reviewing additional documentation: “Will take a look at the docs you shared above next week”

Follow-up documentation provided:

I had followed up with substantial further fraud documentation, including:

  • Rolling Loud lawsuit ($1.575M sponsorship fraud)
  • Additional pattern evidence across multiple entities
  • Extended timeline showing 13-year fraud pattern

Where engagement ended:

His last email revealed the disconnect:

“Re LendUp - my personal POV is there are diminishing returns in digging here (at least for me). I’ve already written a lot about the company and its dissolution, and the story is in the rearview mirror. Makes it hard to get other people to care about it vs whatever is in the headlines today…”

November 1, 2025 - Over 2 years later, final attempt to engage:

I sent one last email with photoshopped ActualQuickBooks.com metrics evidence (3 likes → 12,362):

“I’ll keep it short. I caught Sasha in a really pathetic lie. He photoshopped likes (3 → 12,362) on a comment praising his latest marketing campaign: ActualQuickBooks.com.”

“I figure it’s not your business, and sorry for being so crazy last time I reached out. This is really the last I’m writing about it. I think he’s self-destructing from here. But I could not write this story in my wildest imagination.”

“I’m not at any risk of legal action again after pulling something this stupid and undeniable off. I weaponized what he used against me. That’s that.”

“Take it or leave it. Maybe even just for your own amusement. Not gonna bother you from here.”

No response.

November 11, 2025 - 10 days later:

“Hey,

FYI I think I finally killed LendUp and made sure everyone involved is held accountable.

I filed one more SEC complaint to follow-up from August 11, 2023.

Thanks again for all your help.”

No response.

What the disengagement demonstrates:

  • “Diminishing returns”: Framed continued documentation as not worth the effort
  • “Already written a lot”: Felt he’d done his part documenting LendUp
  • “Rearview mirror”: Treated as historical issue despite ongoing fraud
  • “Hard to get other people to care”: Prioritized what’s “in the headlines today” over pattern completion
  • Professional preservation: Chose to maintain relationships over continued documentation support
  • Ignored undeniable evidence: Even when presented with photoshopped metrics (objective, verifiable fraud), chose silence
  • No response to resolution: Complete silence after November 1, 2025 final outreach and November 11, 2025 follow-up

What this demonstrates:

This pattern differs from Puzzle employees (who faced termination threats) but shares the same outcome: selective engagement that ends when documentation becomes inconvenient. He was not just a shareholder but a LendUp employee who experienced the LendUp-to-Mission Lane card transition firsthand—yet still chose to disengage.

The arc of engagement:

July 20-26: Initial validation (“sounds very much like the Sasha I worked for”), offered to help, prioritized my health. August 10: Helped identify lendup.com domain → First Boulevard → Kinly → Greenwood connection. August 11: Provided crucial asset sale document. August 18: Revealed firsthand experience (employee L Card → Mission Lane card), committed to reviewing additional docs “next week.”

But when presented with Rolling Loud lawsuit and evidence the pattern extended across 13 years and multiple entities, he disengaged. His reasoning: “diminishing returns,” “rearview mirror,” hard to get people to care about something not “in the headlines today.”

Even undeniable evidence didn’t matter:

November 1, 2025 (over 2 years after initial engagement): I sent photoshopped ActualQuickBooks metrics (3 → 12,362)—objective, verifiable fraud, not pattern analysis requiring interpretation. Said “sorry for being so crazy last time,” “this is really the last I’m writing about it,” “take it or leave it, maybe even just for your own amusement.” No response.

November 11, 2025 (10 days later): Thanked him for his help, noted I filed one more SEC complaint following up from August 11, 2023: “I think I finally killed LendUp and made sure everyone involved is held accountable.” No response.

What the complete silence demonstrates:

Unlike employees who fear retaliation, he faced no professional risk from continued engagement. His withdrawal demonstrates how even those harmed by fraud networks—including those with direct personal experience of the fraud mechanisms—often choose to move on rather than support complete documentation. “Old news” framing allowed him to avoid confronting ongoing harm, even though:

  • He initially validated the toxic pattern (“sounds very much like the Sasha I worked for”)
  • He helped identify lendup.com → Kinly → Greenwood shell company network connections
  • The same entities, same executives, and same fraud patterns continued operating
  • The lendup.com domain he identified was generating leads for illegal payday lenders
  • He personally experienced the LendUp-to-Mission Lane transition that enabled continued exploitation
  • His equity was made worthless by the same pattern he had firsthand evidence of
  • Even when presented with objective photoshopped evidence (not requiring pattern analysis), he chose silence
  • Even when thanked for his help and informed the accountability was complete, he chose silence

He said he’d review additional documentation “next week” (August 2023), disengaged with “diminishing returns” reasoning, ignored November 1, 2025 photoshopped evidence (over 2 years later) despite me explicitly apologizing for “being so crazy,” ignored November 11, 2025 follow-up thanking him and noting “I think I finally killed LendUp and made sure everyone involved is held accountable”—professional preservation over pattern completion despite having lived through the fraud mechanism himself and initially validating its existence.

Note: He can benefit from this documentation now. As someone who documented LendUp previously and experienced the fraud mechanisms firsthand (employee L Card → Mission Lane card, worthless equity), he can write about the complete 13-year pattern without consequences. The documentation is public, the SEC complaints are filed, and the pattern is established. His “diminishing returns” and “rearview mirror” concerns are resolved—the story is now demonstrably in the headlines, the pattern is complete, and there’s extensive evidence making it easy to get people to care. He faced no retaliation risk then and faces none now, but now has comprehensive federal documentation supporting what he initially validated: “sounds very much like the Sasha I worked for.”

Alice Ko: The Only Meaningful Validation (August 10, 2023 Onward)

August 10, 2023: Alice Ko contacted me anonymously at tipsanonymous[…]@gmail.com. First message: “found your online posts. i’m reading. hope ur okay though.”

Initially, I was worried they were investigators. I responded: “i hope you weren’t an investigator pretending to check in on me.”

What Alice Ko revealed:

  • Sasha’s internal narrative control: Revealed that Sasha told her to ignore my posts on Twitter, claiming I was “mentally ill” and that they “tried to help me” - active management of internal narrative to discredit documentation (I believe she had the Puzzle login)

  • Joined after me, didn’t stay long: Quick turnover that validated dysfunction wasn’t just from my tenure

  • Validated toxic workplace concerns: Independent corroboration of the environment I had documented - “Just want to let you know you are not alone… your posts made an impact on me and validated what I already had a hunch about”

  • Believed the fraud documentation: Unlike the 2-3 people who reached out and pulled away, this person recognized the documented fraud as credible despite being told to ignore it

  • Discussed how people justify staying (September 5, 2023 email): Explained why coworkers remained all-in:

    • “People stay because they need the money. even if it’s toxic.”
    • “You would be surprised how many people don’t care about ‘selling out’ as long as they have a paycheck”
    • “Lots of people live by the motto ‘ignorance is bliss.’”
    • Directly paralleled Beau’s June 1 texts (“what may or may not be right with the company”)
  • Theory of Positive Disintegration (September 2023): Shared framework for understanding why some stay ignorant: “Once you reach a certain ‘level’ (like level 2 and beyond) - you cannot go back and be okay with shady behavior. Just like you said, you cannot be a cog.”

  • Provided practical support:

    • Recommended a company with strong leadership/culture (bootstrapped, different from Bay Area startup culture)
    • Offered to send my CV to engineering manager friends
    • Regular check-ins over months

My mental state documented in these emails:

  • August 10, 2023: “i guess the worst part is seeing ex coworkers still stand by sasha while i’m excommunicated. i can’t tell who’s reading to mock me… i’m tired and i’m afraid to move on and trust anyone”
  • August 14, 2023: After Mission Lane sent C&D to my parents: “this is a nightmare and i don’t understand why sasha couldn’t just end this sooner”
  • August 30, 2023: “i feel defeated and lost from wasting over 2 years on puzzle. i’ve shot myself in the foot and i don’t know what to do for work anymore. i just wish i could catch a break.”
  • November-December 2023: “i’ve been kind of crashing and avoidant lately… beyond burnout, closer to ptsd… it’s a complete erosion of trust for me”
  • December 8, 2023: “i went a long time without any contact and only recently heard from two people which, while they care for my well-being, still felt invalidating”
  • December 8, 2023: After Alice Ko revealed identity: “i know we’ve never met but i can’t thank you enough… i permanently deleted my linkedin for my sanity and it’s a relief”

Email to Alice Ko, December 24, 2023:

Documented Beau’s meeting and Puzzle’s legal threats, plus my state:

“beau hit me up last weekend and we met up. he didn’t want to go too deep, but implied he was also wrongfully terminated. they told him he won’t be considered on good terms if he speaks to a lawyer.. such a crazy thing to have to say.”

“i’ve been kind of crashing and avoidant lately. i think i’m snapping out of it, but i’ve been pretty low energy… went through a lot of ‘how did i end up here’ and worrying nobody will give me a chance with the amount of time i have, or at best i’ll have to heavily mask and give up on any values.”

“i do hope the trash takes itself out; the whole ecosystem seems overdue. but i realized i can’t do anything else and i have to wait it out.”

“i’m not where i ever wanted to be, but i’m trying to be patient and not continually blame myself.”

Alice Ko’s response (December 11, 2023):

“I really wanted to make sure you knew you were being heard and what you were feeling was real. In a slightly different form, I’ve been there before… Just know that your posts made an impact on me and validated what I already had a hunch about. Hopefully one day I can tell you my story!”

“I listen to the All In podcast (not because I worship them, like most tech bros, but because I’m interested in hearing different opinions) and if what they predict is true… bad tech leadership will stop falling through the cracks for much longer.”

Quote about karma (from Taylor Swift): “But I’ve also learned there’s no point in actively trying to quote unquote defeat your enemies. Trash takes itself out every single time.”

Met months later over video.

Why this contact mattered:

This was the only truly meaningful contact post-termination. While Beau and 2-3 others reached out but excommunicated me or pulled away within 1-2 months, this anonymous person:

  1. Revealed Sasha’s “mentally ill” narrative being actively pushed to employees
  2. Reached out knowing the risks despite being told to ignore my posts
  3. Validated everything independently after examining the fraud documentation
  4. Understood the fraud documentation was credible (not the ramblings of someone “mentally ill”)
  5. Maintained contact over months
  6. Met over video months later

What this reveals about internal narrative control:

Sasha was actively telling employees I was “mentally ill” and that Puzzle “tried to help me” while simultaneously:

  • Terminating me (not “resignation”)
  • Deleting my equity
  • Monitoring my social media with his wife
  • Sending C&Ds to suppress documentation
  • Operating in violation of CFPB ban

The “mentally ill” framing was systematic reputation destruction to prevent employees from examining the fraud documentation. This anonymous person chose to look anyway.

The contrast between this person’s response and the organization-wide silence (hiring bonuses, excommunication, Chief of Staff blocking, internal contacts drying up) demonstrates how rare it was for someone to acknowledge the reality of what was happening at Puzzle.

August 2024: Insurance Gaslighting - 15 Months After Termination

August 2024: UHC (new insurance provider) contacted me claiming I owed money because I had “continued receiving insurance as an employer benefit” from Anthem/Puzzle. This was 15 months after termination.

The “System Issue” Pattern:

I reached out to Puzzle (via Brianna Gutierrez/HR Pals) documenting the problem:

“I’m writing to inform you that Puzzle has thrown a wrench in my insurance situation that is out of alignment with anything that was communicated around my ‘departure.’

Anthem says I was laid off and have continued receiving insurance as an employer benefit. Execs told my coworkers I voluntarily resigned, made everyone think I’m crazy, and I never even used this insurance again because none of you ever communicated with me outside of sending me a cease and desist letter.

You already revoked my equity and caused me endless damage to my mental health. Giving me insurance to wipe your hands clean of everything is psychotic. Stop playing with people. I once again wish I never joined Puzzle. Don’t do this with people.”

Puzzle’s response blamed “system issues”:

“I confirmed with Cal Choice that your coverage is terminated. There was an issue in Anthem’s system reloading your eligibility which likely caused UHC to think you were covered by Anthem. Anthem confirmed that your benefits ended as of May 31, 2023. I have attached the letter confirming your cancellation of coverage.”

The Impossible Timeline Documentation:

The cancellation notice revealed systematic administrative harm:

  • Insurance terminated: May 31, 2023 (termination day)
  • Notice originally issued: June 15, 2023 (15 days after termination)
  • Notice dated on document: August 22, 2024 (delivered 14+ months later)
  • Termination reason: “No Longer Employed” (contradicting internal “voluntary resignation” narrative)
  • COBRA offered: “N/A” - no continuation coverage offered
  • Group Contact listed: Sasha Orloff (CEO controlled the group policy)

The “System Issue” That Created Financial Harm:

Anthem’s system showed me as “laid off and have continued receiving insurance as an employer benefit” for 15+ months after termination. This wasn’t true, but the “system error” created:

  1. UHC attempting to reclaim payments (thinking double coverage)
  2. Financial liability placed on terminated whistleblower
  3. Discovery only through UHC collection attempt, not Puzzle notification

Pattern of Administrative “Incompetence” Causing Harm:

  • No communication: Puzzle never communicated insurance status except through legal threats (C&Ds)
  • Delayed notice: Insurance canceled May 31, notice issued June 15, but I didn’t receive it until UHC contacted me August 2024
  • System blamed: “Issue in Anthem’s system” - but Puzzle controlled the group policy (Sasha Orloff listed as Group Contact)
  • No COBRA: Didn’t offer continuation coverage despite termination
  • Contradictory narratives: Document says “No Longer Employed” while internal story was “voluntary resignation”

Why This Is Gaslighting:

From my complaint:

“Anthem says I was laid off and have continued receiving insurance as an employer benefit. Execs told my coworkers I voluntarily resigned, made everyone think I’m crazy, and I never even used this insurance again because none of you ever communicated with me outside of sending me a cease and desist letter.”

The insurance system showed one story (“laid off,” “continued benefits”), internal narrative was another (“voluntary resignation”), and reality was a third (wrongful termination with no insurance communication).

The Response Pattern:

“You already revoked my equity and caused me endless damage to my mental health. Giving me insurance to wipe your hands clean of everything is psychotic. Stop playing with people.”

Puzzle’s response: blame “system issues” in Anthem’s system, provide termination notice 15 months late, no acknowledgment of harm caused.

What This Demonstrates:

Administrative “incompetence” that systematically harms the terminated whistleblower:

  1. Equity deleted (separation agreement waiver)
  2. False resignation narrative (internal gaslighting)
  3. Insurance “system issues” creating financial liability 15 months later
  4. No communication except legal threats
  5. Pattern of plausible deniability - always a “system error,” never intentional harm

Every “mistake” creates additional damage to the person who documented fraud. The timing (15 months post-termination, during active federal whistleblower proceedings) and pattern suggest these aren’t accidents - they’re features of the retaliation system.

Documentation: Full email correspondence (PDF)

Three months after my termination, I was conducting open investigative journalism that my former coworkers were observing in real-time. Between August 2-10, 2023, I published multiple substantive articles documenting the fraud pattern:

  • August 3: “Mission Lane: 11 Years of Social Washing” - documenting Capital One connections and systematic social washing
  • August 9: “Who’s Behind LendUp.com and AheadMoney.com?” - exposing domain parking scheme and lead investor’s continued control
  • August 10: Publicly alluded to the December 2018 Asset Sale document
  • August 11: Posted redacted snippet of Asset Sale document showing conflicts of interest

Hours after posting the Asset Sale snippet on August 11, 2023, I received cease-and-desist letters from both Puzzle (my former employer) and Mission Lane (a company I never worked for) on the same day.

The coordinated legal response—same day, two companies—demonstrates:

  • Active monitoring of my public documentation
  • The Asset Sale document was the line they couldn’t let me cross
  • My coworkers witnessed this investigation unfold publicly before the legal retaliation
  • The speed of response (within hours) demonstrates awareness

Neither entity followed through with legal action. Both letters targeted my documentation of public corporate records.

Mission Lane’s letter accused me of “publishing false and misleading information” about the company. I had alluded to the Asset Sale document the day before. Puzzle’s email was sent hours after I posted a redacted snippet.

Puzzle’s cease-and-desist letter, sent by Orrick, Herrington & Sutcliffe LLP, characterized my documentation of public corporate records as “accusing the Company and its senior leadership of fraud and conspiracy” and reference “potential workplace violence charges,” despite my having no physical access to either company’s premises.

Puzzle’s letter criticized my use of a Twitter account with Puzzle 🧩🚀 x LendUp in the display name. Mission Lane’s letter criticized my registration of missionlanetruth.com (which redirected to a Linktree aggregating documentation) - specifically objecting to calling CEO Shane Holdaway “another pawn” and linking to Credit Karma’s FTC settlement articles. Two years later, Puzzle ran an ActualQuickBooks.com campaign—infringing on Intuit’s trademark—that resulted in police intervention and subsequent deletion of all evidence.

Puzzle C&D letter page 1

Puzzle C&D letter page 2

Hours after I posted a redacted snippet of the December 2018 LendUp asset sale document, Puzzle’s law firm threatened claims for ‘fraud and conspiracy’ accusations, workplace violence restraining orders, criminal charges, and demanded removal of all social media posts. Neither Puzzle nor Mission Lane followed through with legal action.

Mission Lane operates independently today; this documentation addresses only the 2018 asset sale structure and subsequent false founder claims.

Attempts to Protect Remaining Employees

After my termination, I contacted HR Pals multiple times attempting to protect remaining employees and report leadership misconduct:

June 6, 2023 (6 days after termination): “I’m not signing that either. None of this would have happened if the raging Silicon Valley grifter ego didn’t take over this company throughout this past month. Something is very wrong with Puzzle and you need a third-party to look into it.”

“You need to save whoever’s left. This will not go well under the current leadership and anyone close to them is so blinded by what’s really going on.”

July 6, 2023: “John Cwikla [CTO/Cofounder] has been harassing many employees since the start. Now he’s telling […] he shouldn’t have won the hackathon. If that’s a joke, it’s cruel gaslighting. If it’s real, that’s incorrigible behavior for a leadership role. Contractually, I’m not convincing anyone to leave. They do it alone with poor leadership. Please do something.”

August 8, 2024 (insurance gaslighting): “I’m writing to inform you that Puzzle has thrown a wrench in my insurance situation that is out of alignment with anything that was communicated around my ‘departure.’ Anthem says I was laid off and have continued receiving insurance as an employer benefit. Execs told my coworkers I voluntarily resigned, made everyone think I’m crazy, and I never even used this insurance again because none of you ever communicated with me outside of sending me a cease and desist letter. You already revoked my equity and caused me endless damage to my mental health. Giving me insurance to wipe your hands clean of everything is psychotic. Stop playing with people. I once again wish I never joined Puzzle. Don’t do this with people.”

“If I was ‘laid off,’ I never even filed for unemployment. I’m beyond pissed off at you all.”

August 23, 2024 (final contact): “Whether I’ve misinterpreted any events or caught everyone in a lie is not the point. I’ve suffered before, during, and after Puzzle. I’ve worked with many people in my life and have never met such shameless people who can’t own up to their mistakes in life. People who can’t treat me with an ounce of dignity without brushing aside the very real things I’ve found and questioned. People who have no idea how to de-escalate a situation if it means they have to look inward for once in their lives. Refusing to acknowledge a single word while shuffling behind the scenes, setting up meetings without talking to me directly, stalking me, and trying to shut me up with money… It was ultimately a failure of their collective character and the exact type of brainwashing that is destroying the world every second. Their ‘emotional distress’ is a mere fraction of what I’ve gone through. Everyone failed me. That’s their karma to deal with. I’m not making threats. I’m not a violent person. I’m moving on as of today. This wound has festered long enough.”

HR Pals continued servicing Puzzle Financial throughout this period and never investigated the reported misconduct.

Ando Food Inc. (2016-2017): Equity Loss Pattern

Pattern of Lost Equity.

Before Puzzle, I worked at Ando Food, Inc. (April 2016 - April 2017), a delivery-only restaurant startup incubated at Expa with David Chang as a primary investor and intended as a Momofuku brand. Other investors included Box Group and Forerunner.

Employment and Equity:

  • CEO: Hooman Radfar (signed my offer letter April 7, 2016)
  • Position: Software Developer, $110,000 salary
  • Equity granted: 60,000 shares of Common Stock (4-year vesting: 25% after 12 months, then monthly over 36 months)
  • Company dissolved: Acquired by Uber Eats January 2018, shut down immediately, Certificate of Surrender filed December 20, 2019

Delaware Certificate of Surrender - Ando Food, Inc. (December 20, 2019). Entity formation: March 23, 2016.

Pattern of equity loss across network: I worked at Ando (2016-2017) during same period as Kapor’s LendUp Series B investment (Jan 2016) and first CFPB violations (March 2016-2019).

Equity Repurchase Failure:

On May 29, 2017, I contacted Harriet Feid (Ando Equity) stating: “I never ended up receiving it and I’m only at this address for two more days. Any way I can get it sent again to another address?”

She responded May 30, 2017: “Darn- sorry to hear that! Sure, we’ll write you a new check. What’s your new address?”

The check was for $150 - a repurchase of unvested shares when my employment terminated. Despite claiming to be “acquired by Uber” (network shuffling), I received $150 for 60,000 shares while working at below-market salary ($110K for SF Bay Area in 2016). The company was shut down immediately after acquisition in what appears to have been an acqui-hire that failed.

Hooman Radfar’s Behavior and “Values”:

Pinned tweet (February 25, 2019):

“My name means good thoughts, good words, good deeds. Trying to live up to the gift and responsibility of this name daily. 🙏🏼🙂”

Observed behavior at Ando:

  • “Equity to line cooks” recruitment pitch: One of the selling points when I joined was giving equity to line cooks—positioning Ando as democratizing restaurant ownership
  • “This tastes like dogshit”: Hooman tried menu items and said this to staff
  • Wealth performance: One of my first interactions with him, he spent time at a table just talking about how rich he was
  • Fired Black woman line cook after work party: After company launch party, I shared an Uber ride with Hooman and a Black woman line cook. She was fired shortly after.
  • “Interim CEO” that never ended: Always presented as “interim CEO” but no permanent CEO ever materialized. There was a Hale & Hearty person hired, and I remember press saying he became CEO towards the end, but now I can’t find evidence. Hooman personally signed the dissolution documents (Certificate of Surrender, December 20, 2019).

David Chang and Company Dysfunction:

David Chang was a primary investor and Ando was supposed to be a Momofuku brand. Before I left the company:

  • Company-wide meeting months before shutdown: David Chang held a company-wide meeting questioning the state of the company and its goals—“What the fuck is this?”—demonstrates investor concern about direction and viability months before eventual collapse
  • Launch party private dinner: At the launch party, Chang had a private dinner featuring items that had nothing to do with the Ando menu—demonstrates disconnect between brand promise and actual product
  • Pattern: Primary investor/brand name couldn’t commit to eating the menu at the company’s own launch party, held intervention meeting questioning company state months before shutdown

Workplace Dysfunction and Engineering Culture:

  • Toxic chef culture: General chef culture I observed was stereotypical toxicity (similar to “The Bear”)—aggressive behavior, yelling, hierarchical dysfunction

  • Early ghost kitchen with custom app: Delivery-only restaurant concept with custom software infrastructure—having our own app instead of relying on existing delivery platforms was an initial selling point

  • Had to write scraping apps to integrate with Seamless/Grubhub: Due to low usage on our own platform, eventually had to add integration with existing delivery platforms via scraping workarounds—business model failing

  • Kitchen display system failures: System I worked on revealed zero communication with kitchen staff, no testing of real-life usage, heavy lag noticed from day one—demonstrated disconnect between engineering and operations

  • “Stress testing” kitchen with free meals: Company comfortable giving out tons of free meals that didn’t lead to customer acquisition—wasteful approach masked as testing

  • Coloring book easter egg as “differentiator”: Employees thought a basic coloring book easter egg was some kind of differentiator—demonstrates disconnect from actual product-market fit and business fundamentals

  • Senior engineer toxic behavior:

    • Presented himself as my boss when that was never the case—falsely claimed authority over me
    • Took credit for my work and replaced it out of spite
    • Yelled at me
    • Overengineered everything with poor code quality
    • Bragged about going to Harvard
    • Made sexist remarks about candidates
    • Delusional scaling fixation: Obsessed with scaling as global brand, treating kitchens as “nodes” without successfully running a single node
    • Manhattan brick and mortar attempt: Tried to open physical location in Manhattan—all failed
    • Then went on to work at Uber (following the acqui-hire)
  • Pattern: Dysfunctional engineering culture, lack of product-operations communication, toxic senior engineers protected, delusional focus on trivial features and premature scaling (global “nodes” without successful single location) while business model failing, below-market compensation with worthless equity

Pattern: Performative values (“good thoughts, good words, good deeds”), equity-to-line-cooks pitch, David Chang as brand name/investor who couldn’t commit to eating the product at launch party and had to hold company-wide intervention meeting months before shutdown questioning “what the fuck is this?”, toxic chef culture (stereotypical “Bear”-style aggression), while demonstrating contempt for product and staff, wealth performance, firing Black woman line cook shortly after shared Uber ride from launch party, protecting toxic engineers who presented themselves as bosses when that was never the case, made sexist remarks, and obsessed with premature scaling (global “nodes” without single successful location), delusional focus on trivial features (coloring book easter egg as “differentiator”) while business model failing, failed Manhattan brick and mortar expansion, $150 equity repurchase despite “Uber acquisition,” below-market salary. Scrubbed the company from his LinkedIn entirely.

Hooman Radfar’s LinkedIn Scrubbing:

Despite being CEO of Ando (2016-2018), Hooman Radfar does NOT list Ando on his LinkedIn:

  • Lists: AddThis (Co-Founder & CEO, 2006-2015, acquired by Oracle)
  • Lists: Expa (Founding Partner, 2014-2020)
  • Lists: Collective (Co-Founder & CEO, 2020-present)
  • Missing: Ando Food, Inc. (CEO, 2016-2018)

His profile goes directly from AddThis Executive Chairman (2012-2015) to Expa Founding Partner (2014-2020) with no mention of Ando despite it being incubated at Expa and him serving as its CEO.

Expa Portfolio Scrubbing:

Despite incubating Ando (2016-2018), Expa has removed Ando from their portfolio:

  • URL returns 404: https://www.expa.com/companies/ando - “Ops, the page you are looking for doesn’t exist.”
  • Expa lists: Aero, Collective, Current, Metabase, Layer, Pin, First, Norm, Cmd, Mix
  • Missing: Ando Food, Inc. (incubated 2016-2018, Hooman Radfar was Expa Founding Partner and Ando CEO)
  • Pattern: Garrett Camp’s startup studio scrubbed a failed company from their portfolio

Pattern: Systematic Scrubbing of Failed Companies

  • Kapor Capital scrubbed LendUp from portfolio (invested 2016, CFPB shutdown 2021, 187 companies listed 2008-2025, LendUp absent)
  • Hooman Radfar scrubbed Ando from LinkedIn (CEO 2016-2018, completely omitted)
  • Expa scrubbed Ando from portfolio website (incubated 2016-2018, 404 error)
  • Same behavior across ecosystem: Remove evidence of failures
  • Three separate entities (investor, CEO, incubator) all independently scrubbed the same failed company

QED Connection:

Hooman Radfar’s connection to QED Investors was through AddThis (acquired by Oracle in a 9-figure deal), not Ando directly. But the equity loss pattern establishes that losing vested/unvested equity in failed startups has happened to me before Puzzle.

Documentation:

  • Employment offer letter signed by Hooman Radfar, April 7, 2016 (via DocuSign)
  • Email thread May 29-30, 2017 regarding $150 equity repurchase check
  • California Certificate of Surrender filed December 20, 2019
  • TechCrunch: Uber Eats acquires Ando (January 22, 2018)

Why This Matters:

This establishes that the Puzzle equity deletion (vested options removed from Pulley after termination) is part of a pattern of equity losses across failed startups. It also demonstrates:

  • Pattern of founders scrubbing failed companies from professional histories (Hooman Radfar/Ando, Kapor Capital/LendUp)
  • Performative values masking exploitation: Recruited with “equity to line cooks” pitch while treating staff with contempt, firing Black woman line cook shortly after shared Uber ride from launch party, protecting toxic engineers who presented themselves as bosses when that was never the case and made sexist remarks
  • Below-market compensation with worthless equity: $110K salary (below market for SF Bay Area 2016), $150 equity repurchase for 60,000 shares despite “Uber acquisition”
  • Dysfunctional engineering culture: Kitchen display system with no kitchen staff communication, custom app yet ended up writing scraping apps to integrate with Seamless/Grubhub, “stress testing” with wasteful free meals, toxic senior engineer (presented himself as boss when that was never the case, credit theft, yelling, overengineering, Harvard bragging, sexist remarks) went on to work at Uber
  • “Good thoughts, good words, good deeds” pinned tweet while personally signing dissolution documents after $150 equity repurchase and scrubbing company from LinkedIn
  • QED network connections: Hooman (via AddThis/Expa/Collective) and Sasha maintained mutual public support despite both being aware of whistleblower documentation
  • Early pattern of network shuffling: “Acquired by Uber,” shut down immediately, toxic senior engineer followed to Uber—same pattern as LendUp → Mission Lane asset shuffling

Sustained Mutual Support: Hooman Radfar (Collective) + Sasha Orloff (Puzzle) via QED Network

Both were aware of the whistleblower (I told Sasha I knew Hooman from Ando; I called out Hooman on social media during documentation knowing they were connected to the same networks). Pattern of mutual public celebration while both connected to QED Investors ecosystem.

July 11, 2023 - Sasha congratulates Hooman on Collective’s fundraise:

Sasha Orloff congratulating Hooman Radfar

July 11, 2023 - Sasha Orloff: “I get so pumped when I see people like @hoomanradfar get to take their company Collective to the next level with a fresh round of $$ from amazing investors like @pitdesi, @QEDInvestors, @gradientpub and of course @thegp. Congrats team!”

Hooman responds: “Thx man! Appreciate your support and love what you’re building”

November 15-16, 2023 - Hooman congratulates Sasha on Puzzle’s $30M funding round:

Hooman Radfar congratulating Sasha Orloff on funding round

November 15, 2023 - Sasha Orloff: “I like my sugar with coffee and cream (oh, and $30M!!!!!). 🔥🔥🔥 I guess it’s just an intergalactic kind of day.” Photo shows Sasha holding XYZ mug (Ross Fubini’s firm) while wearing Puzzle shirt.

Embedded quote card: “It’s out! @puzzlefin raises an additional $30M led by @S32 VC @xyz_vc @generalcatalyst to power a new era of AI-powered generative accounting.”

Hooman responds (Nov 16, 2023): ”👏👏 congrats!” (20 views, 8:39 PM)

QED Investors connection: QED invested in Collective (Hooman’s company), served on LendUp board (Nigel Morris chair, Frank Rotman member), invested in Mission Lane (acquisition vehicle), invested in Credit Karma (FTC settlement). Same investor network across Hooman’s company, Sasha’s prior fraud entity (LendUp), and successor entities.

XYZ Venture Capital swag: The mug in Nov 15, 2023 photo is from Ross Fubini’s XYZ Venture Capital (Forbes Midas List #88), which invested in Puzzle’s 2024 round. Ross Fubini was Kapor Capital partner 2011-2012 during LendUp Seed/A/B rounds; his LinkedIn still lists LendUp as “active investment” despite CFPB permanent ban; cofounded Village Global 2017-2020 with Erik Torenberg.

Timeline context:

  • May 31, 2023: Whistleblower terminated from Puzzle
  • July 11, 2023: Sasha publicly celebrates Hooman’s QED-backed funding (2 months post-termination)
  • August 11, 2023: Whistleblower filed first SEC complaint, received dual C&D letters same day
  • November 15, 2023: Hooman publicly celebrates Sasha’s funding round with XYZ/General Catalyst (5 months post-termination, 3 months post-SEC filing)
  • Last known interaction: November 2024 (per available records)

Pattern: Sustained mutual support between founders connected via QED network, both aware of whistleblower, both publicly celebrating each other’s funding milestones while whistleblower documentation was active. Not aware if Hooman has been notified of specific whistleblower documentation (last observed interactions November 2024).

KEY EVIDENCE: Timeline Overlap with LendUp Fraud Pattern

I was at Ando (April 2016 - April 2017) during the exact same period as:

  • January 2016: Kapor Capital invests in LendUp Series B
  • March 2016: First CFPB violation period begins (2016-2019)
  • 2016-2017: LendUp operating under deceptive practices later cited in CFPB enforcement

Two simultaneous equity losses in the same ecosystem:

  • Working at Ando (Expa-incubated, Garrett Camp’s accelerator)
  • LendUp raising $150M+ (would later return $0 to shareholders in $29M fire sale)
  • Both companies part of the same SF startup ecosystem
  • Both resulted in equity loss
  • Both connected to networks that would later enable Puzzle (Garrett Camp co-founded Uber, which acquired Ando; Kapor invested in both LendUp and Puzzle)

This wasn’t just bad luck. Working at a failed startup (Ando) while adjacent to another massive fraud (LendUp) in the same ecosystem—both connected to networks that would later enable Puzzle—demonstrates the pattern was structural, not isolated.

Equity Denial and Employee Treatment

When I attempted to exercise my vested options after receiving the legal threats, my equity grants were removed from Pulley. The company page remains visible with a message to ‘Contact *@puzzle.io for any questions regarding your equity.’ The grants themselves show ‘No results found.’

Pulley showing deleted equity grants Pulley showing “No results found” under “Company Grants”

On October 31, 2025, I notified Puzzle’s investors (S32, Felicis Ventures, Sterling Road) of the equity deletion, stating: “After my resignation, I attempted to exercise vested equity in Puzzle. Days later, the shares were gone from the cap table with zero notice or contact.”

June 11, 2025: CEO posted celebrating a “breakthrough” for Puzzle:

I just saw it.

Today is the day that saw a first hint of our true vision at @puzzlefin. It took 5 years, and we are far from done, but today was the breakthrough.

I think we will make #accounting one of the most important things for every company.

Every. Single. Company.

Within the same day, he quote-tweeted himself with an uncited testimonial: “This is amazing. Puzzle will easily be a billion dollar company. I hope you gave shares to your employees because, you know, you’re building something great. No attribution provided.

This self-manufactured validation about employee equity was posted 2 years after my vested shares were deleted from the cap table without notice. Posting uncited testimonials projecting billion-dollar valuations after deleting vested employee equity without notice may constitute securities fraud.

I replied to the fake testimonial: “lol”

Tweet with fake testimonial about employee equitySasha Orloff’s uncited quote claiming “Puzzle will easily be a billion dollar company. I hope you gave shares to your employees because, you know, you’re building something great.”

Board-Level Approval of Equity Deletion

The equity deletion happened days after my attempted exercise (post-August 11, 2023 C&D), months before the $30M raise (November 2023). The timing suggests CEO retaliation. However, board meeting materials show “Options approvals” as a formal standing agenda item, proving equity changes required board-level review and approval.

Notion board meeting template showing Options approvals Puzzle board meeting template (Nov 2023 period): Agenda includes “Options approvals” as standing item under Administrative matters.

Proves: Formal board approval process existed for equity changes. Combined with Hemant Taneja appearing on ALL SEC filings while John Cwikla (CTO/Cofounder) appears on NONE, establishes board-level control structure beyond typical VC oversight.

Why this matters:

  1. Formal approval process: “Options approvals” as standing agenda item proves equity changes weren’t unilateral CEO decisions
  2. Control structure: Hemant Taneja (GC CEO) on all SEC filings, actual CTO/Cofounder on none - proves GC control beyond normal board oversight
  3. Board composition: General Catalyst (Hemant Taneja, Sophia Xiao), S32, XYZ Capital, Felicis Ventures, Sterling Road would have reviewed equity changes through this formal process
  4. Timing: Equity deleted immediately after exercise attempt (August 2023), during active fraud documentation period (days after first C&D)
  5. Investor liability: While swift timing suggests CEO retaliation, formal board processes and GC’s control structure (SEC filings, “Our Creation of Puzzle” language, board observer from founding) establish collective oversight

The board meeting template shows standard sections including “Market / Competition”, “Financials and Projections”, “Attendees”, “Administrative” (with “Board resolutions and minutes” and “Options approvals”), and “Discussion Topics”. The presence of “Options approvals” as a dedicated subsection under Administrative matters proves equity changes required formal board review and approval, not unilateral CEO authority.

Likely board members during equity deletion period (August 2023):

  • Hemant Taneja (General Catalyst CEO, Board Member 2023-2025) - appears on ALL SEC filings
  • Sophia Xiao (General Catalyst Board Observer since Sept 2019, former Chief of Staff to Hemant Taneja)
  • S32 representative (later led $30M round, November 2023)
  • XYZ Capital representative (later co-led $30M round with S32)
  • Felicis Ventures (seed and Series A investor, notified of equity deletion Oct 31, 2025)

The timing:

  • August 11, 2023: First C&D from Lisa Bowman (1 hr 41 min after SEC complaint filing)
  • Days later: Attempted to exercise vested options
  • Days after that: Equity deleted from Pulley cap table with zero notice
  • November 2023: Company raises $30M (3 months after equity deletion)

The swift deletion timing (days after exercise attempt) suggests CEO retaliation. However, the existence of formal “Options approvals” board process + Hemant Taneja’s presence on all SEC filings (while actual CTO/Cofounder appears on none) + GC’s own language (“Our Creation of Puzzle”) establishes this wasn’t a typical startup where CEO acted alone - this was a GC-controlled entity where board oversight existed for equity decisions.

Internal Messaging

The company’s internal narrative contradicted the documented evidence of termination.

The internal announcement of my departure, sent by VP of Engineering Radha Shenoy to the team, stated: “Today is a sad day. Patrick is no longer with the company.” The email claimed “A few weeks ago Patrick gave notice” and that I “decided to decline and resign immediately.” This directly contradicts the separation agreement proving termination, the job postings created before my departure, and the corporate card cancellation used as a termination signal.

The email positioned my departure as voluntary (“gave notice”) but acknowledged concerning behavior changes (“we noticed a change in his behavior that was unsettling to many at Puzzle”) and time off that was “refused.” The email also stated they had “opened up another role for a front end / full stack developers (3 roles in total)” to replace my position, demonstrating the scope of work I had been handling alone and their dependency on my contributions. This narrative served to preempt questions from the team while reinforcing the false resignation story, despite the separation agreement’s legal language proving I was terminated and required to waive claims for wrongful discharge.

In a prior conversation, I had mentioned I was considering leaving eventually and offered to stay to transition my work. I had not submitted formal notice or resignation. The CEO referred to the card cancellation post in Slack as “a message […] that was unfortunately confused for something that it is not, and was getting some questions.”

From May 2023 onward, I’ve been referred to as “mentally ill” within and around Puzzle Financial. The company’s narrative positioned me as someone they had “tried to help”—despite the documented evidence showing termination, legal threats, and equity denial as retaliation for questioning the CEO’s credentials.

Anonymous employee contact later revealed (August 2023) that Sasha explicitly told her to ignore my posts on Twitter, claiming I was “mentally ill” and that they “tried to help me.” This confirms the “mentally ill” narrative wasn’t just passive internal gossip - it was active reputation destruction directed by CEO Sasha Orloff to prevent employees from examining the fraud documentation.

I documented the termination and CEO’s monitoring behavior in an email to my therapist on June 4, 2023, four days after being fired. My therapist, reviewing the circumstances and documentation, maintained that this was not a lawful termination and that I was experiencing workplace gaslighting—a clinical assessment that contradicted the company’s characterization of me as “mentally ill.”

After this internal characterization, CEO Sasha Orloff shared a General Catalyst article about building “for the future of mental heath[sic] care.” General Catalyst is an early investor in Puzzle Financial that did not choose to lead the second unlabeled fundraising round. His LinkedIn profile displayed the “#Hiring” badge, added at midnight (in SF) before my termination, while I sought therapy to process being fired, gaslit about the termination, and labeled “mentally ill” by the company.

CEO sharing mental health article after labeling employee

The Timeline

  • May 30, 2023: Cofounders viewed my LinkedIn and shared new job listings to replace my role
  • May 31: Terminated (called “resignation”), offered severance for silence
  • June 1: Laptop return box at my door (evidence-136) - delivered next day (likely overnight shipped), demonstrating premeditation
  • June 2: Returned equipment with written note: “I knew that sheet of paper would be worth more than Puzzle”
  • June-July: Declined to sign, began documenting LendUp-related records, received voicemail
  • August 10: Alluded to 2018 Asset Sale
  • August 11: Dual C&D letters from Puzzle and Mission Lane after posting redacted snippet
  • August 2023: Equity grants removed from Pulley after attempting to exercise
  • October 2025: Resumed documentation of deceptive practices
  • November 11, 2025: SEC whistleblower complaint filed (3:33 AM) → Second C&D received same day (6:02 PM)
  • November 20, 2025: Third C&D (56 minutes after Dasha Shunina callout post, police threats)

The sequence of events demonstrates consciousness of guilt:

  • Formal separation agreement listing specific claims to waive (fraud, wrongful discharge, retaliation)
  • Personal CEO outreach offering money when I publicly exposed their false narrative, followed by coordinated legal threats when documentation continued

Each action, from the carefully worded separation agreement to the personal voicemail to the dual cease-and-desist letters, represents an escalating attempt to prevent documentation of a pattern that was already established in public records.

The separation agreement required me to waive claims for fraud, breach of contract, wrongful discharge, and retaliation, a list that reads as a confession of what they knew they had done.

KEY EVIDENCE: Mission Lane C&D (Network Coordination Confession)

August 11, 2023: Mission Lane (company that NEVER employed me) sent cease-and-desist letter threatening legal action for documenting Credit Karma → Mission Lane connection. Same day as Puzzle Financial C&D. Mission Lane defended profit structure allowing CEO to circumvent CFPB permanent ban. Dual coordination proves network consciousness of guilt.

August 11, 2023: Mission Lane C&D Proves Network Coordination

On August 11, 2023, Mission Lane sent a cease-and-desist letter objecting to documentation connecting Credit Karma’s FTC settlement with Mission Lane’s operations. This was received the same day as Puzzle Financial’s C&D, demonstrating network coordination.

What makes this confession of coordination:

  • Mission Lane threatened legal action despite never employing me - I had no employment relationship, separation agreement, or confidentiality obligations to Mission Lane
  • They defended the Credit Karma/Mission Lane connection - objected to documentation linking the two companies
  • Dual C&D coordination - Both companies sent legal threats on the same day, proving conscious awareness of each other’s actions and shared interest in suppressing documentation
  • They knew the connection was damaging - If the Credit Karma/Mission Lane relationship was innocent or irrelevant, Mission Lane would have ignored my documentation. Instead, they threatened legal action to suppress it.

Present-day verification confirms I was right:

Credit Karma actively promotes Mission Lane credit cards on its platform with 4.7/5 rating and 33.99% APR, targeting the same subprime demographic (average credit score 604, “Poor” to “Fair” credit). The connection Mission Lane attempted to suppress in August 2023 is exactly what they’re doing in 2025 - Credit Karma serves as customer acquisition funnel for Mission Lane (LendUp successor entity), both companies with regulatory violations targeting credit-challenged consumers. Credit Karma’s FTC settlement documented A/B tested deception and “dark patterns” (deliberately optimizing false “certainty” claims), yet they continue funneling customers to Mission Lane’s 33.99% APR cards.

The pattern of suppression:

Mission Lane’s legal threat validated that documenting the Credit Karma/Mission Lane connection threatened their business model. Their attempt to silence this connection demonstrates the threat it poses. The dual coordination with Puzzle Financial (who I did work for) demonstrates network awareness spanning multiple entities in the LendUp fraud pattern.

Mission Lane Cease-and-Desist Letter (August 11, 2023) - Full Documentation

The Absurdity of This Letter:

Mission Lane sent a 3-page cease-and-desist letter on August 11, 2023, the same day as Puzzle Financial’s C&D, despite:

  1. Mission Lane NEVER employed me - No employment relationship, no separation agreement, no confidentiality obligations
  2. I never signed an NDA with Mission Lane - They had no contractual basis for demands
  3. All statements were about public connections - Credit Karma FTC settlement and Mission Lane operations
  4. They objected to TRUE connections - Credit Karma actively promotes Mission Lane cards (verified 2025)
  5. Dual coordination with Puzzle - Same-day legal threats from two separate entities with separate law firms

Letter Details:

  • From: Christopher J. Forstner, Esq., Troutman Pepper Hamilton Sanders LLP (Richmond, VA)
  • To: Patrick Stoica
  • Date: August 11, 2023
  • Subject: “Defamation Against Mission Lane”

Their “Examples of Defamatory Statements”:

Statement #1 - They claimed asking “Why does Mission Lane sound like they whiteboard ways to steal from the poor?” was “false and defamatory” and “made with clear intention to harm Mission Lane’s reputation”

Statement #2 - They claimed calling Mission Lane and CEO Shane Holdaway “another pawn” was defamatory, saying it “falsely describes Mission Lane as a part of ‘fintech scheme’” and “clearly imply that Mission Lane and Mr. Holdaway are involved in a purported scheme”

Statement #3 - They claimed linking to Credit Karma FTC settlement articles was “intentionally used…to mislead a reader into believing that Mission Lane is in some way involved in, or responsible for, the matter between the FTC and Credit Karma”

Their Demands:

  1. Remove all statements from website, articles, and publications
  2. Provide full listing of additional publications containing “false and/or misleading statements”
  3. “Immediately cease and forever desist in making any further false and/or misleading statements about Mission Lane and/or its employees”

Deadline: “You must provide a full response to us within ten (10) days from the date of this letter. If we do not receive written assurance in that time of your agreement to the above demands, we will have no choice but to escalate the matter.”

Evidence: The Full Letter (evidence-104, 105, 106)

Mission Lane C&D Page 1 Page 1: Troutman Pepper letterhead, dated August 11, 2023, “Re: Defamation Against Mission Lane,” opening paragraph establishing Mission Lane’s objection to “false and misleading information” and legal standard for defamation

Mission Lane C&D Page 2 Page 2: Three “Examples” of alleged defamatory statements, including the Credit Karma connection visualization they objected to, with screenshot showing Shane Holdaway video followed by FTC settlement articles

Mission Lane C&D Page 3 Page 3: Mission Lane’s three demands (remove statements, provide full listing of publications, cease and desist), 10-day deadline, signed by Christopher J. Forstner, Esq.

Why This Letter Is Absurd:

  1. No standing: Mission Lane never employed me, I signed no agreements with them, I owed them no duties

  2. Truth as defense: The Credit Karma → Mission Lane connection they objected to is exactly what exists today (Credit Karma promotes Mission Lane cards at 33.99% APR to subprime demographic)

  3. Public interest: Credit Karma FTC settlement (497,425 victims, $3M penalty) and Mission Lane’s relationship is a matter of public concern

  4. Coordination confession: Sending legal threat same day as Puzzle Financial despite no employment relationship proves network coordination and shared interest in suppressing documentation

  5. Chilling effect: Using defamation threats to suppress documentation of public regulatory actions (FTC settlement) and business relationships (Credit Karma → Mission Lane funnel)

What This Reveals:

  • Network coordination: Two separate companies (Puzzle Financial, Mission Lane) with two separate law firms (Orrick, Troutman Pepper) sent cease-and-desist letters on the same day (August 11, 2023)
  • Consciousness of guilt: If the Credit Karma/Mission Lane connection was innocent, they would have ignored it; instead they threatened legal action
  • Strategic suppression: They specifically objected to documentation that revealed their business model (Credit Karma as customer acquisition funnel for LendUp successor entity)
  • Overreach: Threatening someone who never worked for them, never signed agreements with them, and was documenting public information (FTC settlement, business relationships)

The letter itself is evidence of the network’s coordinated attempt to suppress documentation of the LendUp fraud pattern across successor entities.

August 11-14, 2023: Response to Lisa Bowman - Evidence of Coercion and Attorney Knowledge

What this email chain reveals:

Between August 11-14, 2023, I sent five emails to Lisa M. Bowman in response to her cease-and-desist letter. These emails are critical evidence showing:

  1. Effective coercion: The C&D achieved its purpose
  2. Comprehensive fraud documentation: Lisa Bowman received detailed information about all aspects of the fraud pattern
  3. Attorney knowledge: She knew about Sasha’s career misrepresentation, LendUp violations, Mission Lane discrepancies, and toxic workplace issues
  4. Bad faith: Her November 2025 C&Ds came AFTER being fully informed of the substance

Timeline of Response:

August 11, 2023 (4:17 PM) - Immediate compliance:

“okay. deleted. i didn’t induce coworkers to share anything confidential. i would have liked to work for a company whose founders didn’t misrepresent their past. it’s a disservice to continue lying to current employees and defraud investors. i would have liked to work for people who didn’t engage in practices like mobbing out, emotional abuse, and covered up terminations with non-disparagement clauses. puzzle is an insanely corrupt workplace.”

August 11, 2023 (4:41 PM) - Promise to disengage:

“anyway, i promise to disengage from this conduct and never write about this again. i merely acted in response to sasha’s retaliation. the gravity of my behavior is less than what he’s done over the past 10 years. puzzle has engaged in plenty of unlawful behavior already.”

August 11, 2023 (5:03 PM) - Called out the “repeat founders” research study:

“at least ask him to stop misrepresenting his career over and over: ‘Sasha Orloff, Puzzle’s founder and CEO, successfully started and scaled Mission Lane and LendUp to $100M ARR, hundreds of employees and millions of customers. While starting any business comes with risks, multiple studies have shown that entrepreneurs with a track record of success have a higher chance of success.’ https://puzzlefin.notion.site/Join-us-at-Puzzle-ab1df450621c44e3aaf100e1562a7f7e”

  • Directly quoted Puzzle’s careers page
  • Highlighted the misleading “track record of success” claim
  • Linked to the specific research study citation
  • This was August 2023, 2+ years before I started documenting this pattern publicly again

Post-C&D Addition to Careers Page: The 10-Year Exercise Window

After sending the first C&D (August 11, 2023) and deleting my equity days after I attempted to exercise it, Puzzle added a note to their careers page stating they offered a generous 10-year exercise window “on good terms.”

Timeline:

  • August 11, 2023: First C&D sent
  • August-September 2023: My equity deleted days after attempted exercise
  • Post-C&D: Careers page updated to highlight 10-year exercise window “on good terms”

I have no screenshot of this addition, but I saw it. It was there. It was added after what they did to me. The timing and placement—on the same careers page I had specifically quoted in my emails to Lisa Bowman about their misleading research study—demonstrates deliberate performance. They added language about generous equity treatment on the same page they used to misrepresent Sasha’s “track record of success,” right after deleting equity from someone who questioned that track record.

The performance: Advertising generous equity terms on the public-facing careers page while simultaneously deleting equity from a terminated employee who raised compliance concerns. The juxtaposition wasn’t accidental—it was the point. “Look how generous we are with equity (on good terms)” posted where the person whose equity was deleted would see it, placed on the same page they had criticized for containing misleading claims.

Pattern: Just as they photoshopped metrics for external validation (3 likes → 12,362), they performed equity generosity on the careers page while practicing equity theft behind NDAs. The performance is for recruiting. The reality is retaliation.

August 11, 2023 (8:58 PM) - Documented toxic workplace and pattern concerns:

“sasha knew i came from a fraudulent company. i just really don’t get why nobody could ever provide a simple explanation for my growing concerns unless it was all true or worse. i couldn’t deal with the toxic environment, mismanagement, abrupt layoffs, meetings shuffled without explanations, and constant behind-the-scenes whispers. i know how sasha was as a ceo at lendup and it’s all the same behavior. it’s deeply concerning for everyone involved.”

“you don’t understand how frustrated and depressed i’ve been too. i’m unfortunately obsessive especially when i see wrongdoings. no one ever tried to reach out and reassure me in a humane way. sasha saw i questioned the origins of mission lane and, in my eyes and based on precedence, i was pushed out by both cofounders.”

“how am i not supposed to think something awful was done in fairly recent years, and that these behaviors will continue?”

August 12, 2023 (3:09 PM) - Comprehensive fraud documentation to Lisa Bowman:

“my point was sasha wasn’t clear about his career, and he made a decision to roll with this narrative years ago. i don’t care what job titles and roles he was given. i would’ve rather heard in his words that he exited lendup with a golden parachute.”

“do you understand why all the workplace-induced paranoia and sasha’s dodgy behavior around mission lane led me into conspiratorial thinking? the lendup story is incredibly complicated for seemingly no good reason. lendup only liquidated a year ago and the story still has weird loose-ends and activity. if he couldn’t admit to a golden parachute, i worried it went even deeper. i wouldn’t have had to research so heavily if he was honest.”

“if a leader presents themselves a certain way and suggests a high chance of success and returns, their career history should actually back that up. there’s no reason to say you made two companies without explaining their relationship. there’s no reason to link to a 2006 study to convince people there’s a positive correlation with a successful track record unless there are some discrepancies.”

“and there absolutely are discrepancies. lendup was not a success story and mission lane was a separate entity with limited relation to sasha. comparing revenue from loans/credit to SaaS is like apples to oranges. reaching $100M ARR doesn’t mean you had a sustainable burn rate. there were obviously severe compliance issues, and they could not continue with the lendup name. they made one separate company to buy part of lendup, and then another temporary subsidiary with a different name that could be sold off.”

“lendup had severe cultural problems and i worry that there was not enough time in between companies to properly reflect. i unfortunately still believe PR has been a distraction from it all and a tool to reshape the past. this is why my concerns started growing around press and thought leadership. after pivoting to AI, there was a noticeable shift in the company’s day-to-day stability and a lot of us suffered as a result.”

“i just wanted people to understand that the facts didn’t add up. and all i got was months of radio silence, various people watching my activity, and not a single explanation. one day, someone else will join and ask questions. how will leadership act then?”

“puzzle’s leadership and board shouldn’t think about scaling and yachts until they’ve established a healthy, transparent environment without all this hubris.”

August 14, 2023 (1:44 PM) - Final coerced compliance:

“i just wanted to let you know i’ve received mission lane’s cease and desist as well. i’ve deleted everything and will not write on this subject ever again.”

“i’m seeking legal counsel only to help respond. i do not plan to pursue legal action against anyone. i know i continue exposing myself to risk without representation. i’ve never worked with lawyers in my life. i never expected i’d be in this position. i feel foolish and frozen and disappointed in myself.”

“i just want to say i’m sincerely sorry for exhibiting this behavior and hurting leadership, employees, puzzle, and everyone else i’ve involved. i hope puzzle can sympathize with why i found myself reaching this point, but i understand i’ve already burned most bridges.”

“i don’t want to point fingers or place blame anymore. i’m holding myself accountable for my actions and own that what i did was wrong.”

What This Establishes:

  1. The August 11, 2023 C&D was effective coercion: “I will not write on this subject ever again” = 27+ months of silence (August 2023 - November 2025)

  2. Lisa Bowman received comprehensive fraud documentation: She was informed of:

    • LendUp CFPB violations and compliance issues
    • Mission Lane’s relationship to LendUp (asset acquisition vs. “founding”)
    • Toxic workplace patterns across LendUp and Puzzle
    • Misleading “repeat founders” research study on careers page (which was then updated post-C&D to advertise “10-year exercise window on good terms” after deleting my equity)
    • SaaS vs. lending revenue comparison issues
    • The “golden parachute” vs. public “sabbatical” narrative discrepancy
    • PR as tool to “reshape the past”
    • AI pivot causing “shift in company’s day-to-day stability”
    • Pattern of layoffs and employee mistreatment
  3. She had this information BEFORE sending two more C&Ds: November 11, 2025 and November 20, 2025 C&Ds came 2+ years after receiving detailed fraud documentation

  4. Attorney ethics implications:

    • If she knew all these facts (LendUp violations, Mission Lane discrepancies, toxic workplace, misleading careers page) in August 2023
    • And she still characterized federal whistleblower activity as “threats” requiring police notification in November 2025
    • This demonstrates either:
      • Knowing mischaracterization of protected whistleblowing as criminal threats
      • Failure to conduct adequate due diligence before threatening police action
      • Systematic inadequate client communication (CEO continuously misrepresenting facts)
  5. The “repeat founders” study was called out in August 2023: I specifically quoted the careers page and highlighted the misleading research citation 2+ years before documenting it publicly again. Lisa Bowman was notified of this specific misrepresentation in real-time. Post-C&D, they added language advertising “10-year exercise window on good terms” to the same page—after deleting my equity.

Why This Matters for Bar Ethics:

An employment law attorney who:

  • Receives comprehensive fraud documentation from a former employee (August 2023)
  • Is informed of CFPB violations, toxic workplace, misleading credentials
  • Achieves effective coercion (“will not write on this subject ever again”)
  • Then sends TWO MORE cease-and-desist letters (November 2025) after the person files federal whistleblower complaints
  • Escalates characterizations (“documenting records” → “partner notifications” → “career predictions”) as increasingly threatening
  • Threatens police notification for protected whistleblower speech

…demonstrates a pattern inconsistent with professional responsibility obligations. She had all the facts in August 2023. Her November 2025 actions were taken with full knowledge of the substance.

The coerced apology (“i’m sincerely sorry,” “what i did was wrong”) came from someone who had just received dual cease-and-desist letters, had never worked with lawyers, felt “foolish and frozen,” and explicitly stated they were seeking legal counsel “only to help respond” while “not planning to pursue legal action.” This is textbook coercion under duress from legal intimidation, not genuine acknowledgment of wrongdoing.

November 11, 2025: Second Cease-and-Desist, Retaliation Against Federal Whistleblower

CRITICAL CONTEXT: Federal Whistleblower Protection

By November 11, 2025, I had 2+ years of SEC whistleblower protection under 15 U.S.C. § 78u-6 (first complaint filed August 11, 2023, Submission #16917-772-564-515). I did not disclose the first SEC filing to anyone—I revealed it when I filed this second complaint on November 11, 2025. Lisa M. Bowman likely learned of federal whistleblower protection when the second SEC complaint was filed and became public. Despite this knowledge, she sent this C&D the same day. This second C&D targets federally protected whistleblower activity, constituting potential federal whistleblower retaliation under 15 U.S.C. § 78u-6(h)(1).

Timeline of Retaliation:

November 11, 2025 (3:33 AM ET): Filed SEC whistleblower complaint (Submission #17628-500-136-464) documenting 13-year fraud pattern with supporting documents.

November 11, 2025 (Morning-Afternoon): Executed systematic partner notification campaign, notifying accounting firms, business partners, and CPA organizations of CEO’s CFPB enforcement history and ongoing fraud pattern.

November 11, 2025 (6:02 PM ET): Received cease-and-desist letter from Orrick, Herrington & Sutcliffe LLP on behalf of Puzzle Financial, hours after SEC complaint filing and during active partner notification campaign.

The Letter’s Demands:

  • Cease all publications about Puzzle and leadership
  • Remove all documentation within 48 hours
  • Stop contacting investors, partners, employees
  • Preserve evidence for their use
  • Threatens criminal prosecution for “harassment, cyberstalking, extortion”
  • Threatens workplace violence restraining order

Response (6:05 PM ET - 3 Minutes Later):

I responded within three minutes, stating:

  • I am a federal whistleblower engaged in protected activity under 15 U.S.C. § 78u-6
  • All disclosures are based on public records and protected under federal whistleblower statutes
  • I will continue engaging in protected whistleblower activity, including notifying relevant stakeholders

Supplemental SEC Filing (6:32 PM ET - 30 Minutes After C&D):

Filed supplemental SEC complaint (Submission #17629-039-523-592) documenting federal whistleblower retaliation. Submission detailed same-day cease-and-desist letter as retaliatory action under 15 U.S.C. § 78u-6, attached C&D letter as evidence, and documented pattern of legal intimidation spanning August 2023 (dual cease-and-desist letters from Puzzle and Mission Lane) to November 2025 (second C&D hours after SEC filing).

The 30-minute response window demonstrates preparedness. From receiving legal threats to filing federal retaliation complaint took 30 minutes. The pattern was predictable: SEC filing → immediate legal threats → documented as additional evidence. Their attempt to silence became additional evidence.

This Constitutes Textbook Whistleblower Retaliation:

The timing—C&D received same day as SEC complaint filing and during active stakeholder notification—demonstrates retaliatory intent. The letter attempts to silence protected whistleblower activity by:

  1. Threatening criminal prosecution for documenting public records
  2. Demanding removal of CFPB enforcement documentation (public record)
  3. Prohibiting notification of stakeholders about securities fraud
  4. Characterizing truth-based disclosures as “defamation”
  5. Attempting to halt ongoing protected activity (partner notifications)

Every statement I made is supported by public records:

  • CFPB enforcement orders (public)
  • Miami-Dade County Circuit Court Case No. 2022-003284-CA-01 (public)
  • Corporate filings in Delaware, Virginia, California (public)
  • Photoshopped social media posts (archived screenshots)
  • December 2018 LendUp Asset Sale documents (shareholder records)

Federal whistleblower activity protected under California Labor Code § 1102.5 and federal whistleblower statutes.

The cease-and-desist letter, rather than silencing disclosure, serves as additional evidence of systematic attempts to suppress accountability across a 13-year fraud pattern. The immediate response to SEC filing (threatening criminal prosecution for documenting public records) demonstrates the pattern of retaliation that has characterized this matter since August 2023.

December 2023: Unsent Cease-and-Desist (Surveillance Infrastructure)

December 2023 (Prepared but Never Sent): Systematic Surveillance of Network Documentation

What this document reveals:

On December 20, 2023, Lisa M. Bowman (Of Counsel, Employment Law, Orrick) prepared a cease-and-desist letter but never sent it. The dated document reveals systematic surveillance infrastructure monitoring LinkedIn posts about VC/Israel network connections (particularly General Catalyst), not just fraud documentation.

Surveillance Culture and Intimidation:

According to a former employee, CTO John Cwikla would openly discuss “all the security stuff” he could do from his technical position during company happy hour meetings. This brazen attitude about monitoring capabilities created a chilling effect, establishing a culture where employees understood they were being watched. While the LinkedIn tracking that triggered this December 2023 cease-and-desist may have been as simple as manual profile checks, the CTO’s public statements about surveillance capabilities contributed to an atmosphere of intimidation.

Context: What triggered this unsent C&D:

  • Post-October 7, 2023 LinkedIn activity: Started posting again on LinkedIn about geopolitical concerns, particularly VC/Israel connections (General Catalyst)
  • Posted about not wanting to live in a world with “this much evil” (referencing geopolitical violence, not personal threats)
  • Documented coordinated network response
  • Felt work at Puzzle was being misused (before understanding Netanyahu connection)
  • Posted about investor network ties to geopolitical conflicts
  • December 2023 isolation pattern: Between termination (May 31, 2023) and December 20 prepared C&D, only four contacts from former colleagues/employees, three of them hostile or patronizing:
    • Contact 1 (helpful): Someone shared Sasha’s internal message covering up the credit card cancellation; this person stopped reaching out after I posted the internal evidence publicly - proving the risk of helping a whistleblower was real
    • Contact 2 (patronizing, Nov 14 post-Oct 7): “Hey Patrick, I heard that you made a comment around not wanting to live? If so, I want you to know folks really care about you and I’m here if you want to chat. There’s an expert call/text hotline if you’re feeling overwhelmed at 988. I’m sorry if this is all misinterpreted. I can’t change much in this world, but I’m here for you” - I didn’t respond due to the condescending “eggshells” framing and his apparent lack of understanding about who he was working for; only sent him link to evidence earlier this month (Nov 2025)
    • Contact 3 (hostile - Ian, security person): Told me to “go on a vacation” and “get off the computer” - so condescending and dismissive I told him to tell leadership not to sue me, then deleted my LinkedIn entirely; made a new one months later
    • Contact 4 (anonymous validation): Former employee who reached out anonymously to validate the toxic workplace pattern (details withheld to protect identity)
    • The isolation was systematic: People either received explicit orders not to contact me, or feared being fired/targeted for associating with a terminated employee who had used internal evidence against leadership; the CTO’s brazen discussion of “security stuff” monitoring capabilities reinforced this fear
    • The one person who actually helped (Contact 1) may have faced consequences and stopped reaching out - proving the surveillance and intimidation created real professional risk
    • Sasha never reached out directly: Only contact since May meeting (with Sasha and Radha, where I felt extremely aggravated - “what is this??”) was one Slack message afterwards (“I’ll try to do better as a founder and leader”) + one voicemail offering money
  • December 10-15, 2023: Six media notifications in 6 days (3 to TechCrunch + 3 to The Information same period)
    • Dec 10: The Information notification with comprehensive abuse documentation
    • Dec 12: TechCrunch notification detailing dual C&D retaliation
    • Dec 13: The Information follow-up mentioning “Washington Post and Whistleblower Aid”
    • Dec 14: TechCrunch follow-up with condensed outline
    • Dec 14 (same day): The Information fourth notification (“I ask you one last time”) with comprehensive documentation
    • Dec 15: The Information video proof + multiple escalating TechCrunch emails
  • December 20, 2023 (5-10 days after media blitz): C&D prepared but never sent
  • Timeline: The Information was first notified August 11, 2023 (4 months prior to Dec media blitz) with golden parachute doc + first C&D; notified again November 3, 2025 (nearly 2 years later) with evidence summary = six notifications across 27+ months with zero response
  • Note: In 2023, missionlanetruth.com redirected to a Linktree aggregating documentation (LinkedIn posts, etc.); removed both after Mission Lane’s August 11, 2023 C&D objected to calling CEO Shane Holdaway “another pawn” and linking to Credit Karma’s FTC settlement (showing compliance with their demands); December 2023 monitoring was of LinkedIn posts only, demonstrating continued surveillance despite compliance

The unsent C&D demonstrates:

  1. Federal whistleblower retaliation infrastructure: Prepared C&D targeting someone with 4+ months of SEC whistleblower protection (first SEC complaint filed August 11, 2023; unsent C&D prepared December 20, 2023); demonstrates systematic surveillance and legal intimidation of federally protected activity under 15 U.S.C. § 78u-6
  2. Systematic surveillance of LinkedIn AND media outreach: Active monitoring of LinkedIn posts about network connections (VC/Israel ties) PLUS TechCrunch/The Information notifications (Dec 12-15) → prepared C&D (Dec 20)
  3. Media notification monitoring: Legal team tracking ALL press contacts across multiple outlets; 5-8 day gap between media blitz and prepared C&D proves surveillance of whistleblower’s attempts to notify press
  4. Isolation and chilling effect: One of the only internal contacts between termination (May 31, 2023) and December 20, 2023 was a colleague’s concerned message (post-Oct 7) framed through “misinterpretation” lens; demonstrates people either couldn’t communicate or felt they were “walking on eggshells”; CEO (Sasha) never reached out directly except one Slack message (“I’ll try to do better”) and one voicemail offering money
  5. Pre-prepared intimidation: C&D templates drafted, dated, ready to deploy but held back as threat against federally protected whistleblower
  6. Sensitivity to geopolitical documentation: Triggered by posts about General Catalyst and Israel connections, not just fraud
  7. Unknowing targeting of federally protected activity: Lisa M. Bowman prepared this December 2023 C&D without knowing about federal whistleblower protection (I did not disclose the August 2023 SEC filing to anyone); demonstrates she was targeting federally protected activity for 4+ months without knowledge, then once she learned of it (November 2025), she escalated with two more C&Ds
  8. Calculated deployment: They monitored, prepared legal threats, but chose when/if to send based on strategic calculation—holding ready as ongoing threat against protected whistleblower

Why the unsent C&D is more damning than if they’d sent it:

The document proves proactive intimidation infrastructure monitoring FEDERALLY PROTECTED whistleblower activity. By December 20, 2023, I had 4+ months of SEC whistleblower protection (first complaint filed August 11, 2023, Submission #16917-772-564-515). Lisa M. Bowman did NOT know this—I did not disclose the SEC filing to anyone until November 2025. She was unknowingly targeting federally protected activity under 15 U.S.C. § 78u-6. They were watching, preparing, calculating when/if to deploy legal threats against someone with federal whistleblower protection (without knowing it existed). Once she learned of it in November 2025, she escalated with two more C&Ds within 9 days. Systematic federal whistleblower retaliation infrastructure, held ready as ongoing threat, then deployed after learning of federal protection.

The isolation pattern reveals the human cost: Between May 31, 2023 (termination) and December 20, 2023 (and continuing onward), almost no one from inside reached out. The dual August 11 C&Ds (sent same day as SEC filing) created such a chilling effect that even a colleague’s genuine concern (post-Oct 7, after LinkedIn post about not wanting to live in a world with “this much evil”) was framed as potentially “misinterpreted”—demonstrating people felt they had to walk on eggshells. Meanwhile, CEO Sasha Orloff never contacted directly (only one Slack message saying “I’ll try to do better as a founder and leader” in May and one voicemail offering money). The surveillance infrastructure wasn’t just monitoring speech—it was isolating a federally protected whistleblower from any support network while preparing legal threats for activity protected under federal securities law.

Critically: This surveillance and C&D preparation occurred after compliance with the August 2023 C&D demands (removed missionlanetruth.com and its Linktree redirect after Mission Lane’s letter objected to calling CEO Shane Holdaway “another pawn” and linking to Credit Karma’s FTC settlement) AND after establishing federal whistleblower protection (SEC filing same day as those C&Ds). Despite compliance and federal protection, they continued monitoring LinkedIn posts about VC/Israel network connections and prepared new legal threats. The goal: suppression of federally protected whistleblower speech regardless of cooperation or legal status.

Evidence of Unsent December 2023 C&D:

December 20, 2023 C&D Page 2 - Demands section December 20, 2023 letterhead (page 2): Orrick C&D prepared by Lisa M. Bowman demanding whistleblower “cease and desist from publishing, republishing, or otherwise disseminating or emailing any false, misleading, or defamatory statements” and “cease and desist from contacting Puzzle’s investors, customers, prospective customers, business partners, and current or former employees.” Threatens “criminal implications, including reporting your conduct to appropriate law-enforcement authorities.”

Never sent but dated document reveals systematic surveillance of LinkedIn posts about VC/Israel connections (General Catalyst) and pre-prepared legal intimidation infrastructure.

December 20, 2023 C&D Page 3 - Evidence Preservation & Law Enforcement December 20, 2023 letterhead (page 3): “Evidence Preservation Notice” instructing to keep records for “legal reasons” while demanding public removal. “Referral to Law Enforcement” section threatens “criminal investigation into harassment, cyberstalking, extortion or coercion, identity or brand impersonation, and related offenses.”

Pattern of characterizing protected whistleblower speech as criminal activity. Never sent—held as template/threat.

December 20, 2023 C&D Page 3 - Consequences section and Lisa M. Bowman signature December 20, 2023 letterhead (page 3): “Consequences of Noncompliance” section listing potential claims. Signed “Lisa M. Bowman” (Of Counsel, Employment Law, Orrick). Same attorney who sent August 2023, November 2025, and November 2025 C&Ds.

Never sent—reveals legal intimidation infrastructure predates SEC complaints by nearly 2 years and was actively monitoring LinkedIn posts about network connections (VC/Israel ties), not just fraud documentation.

Bowman’s prepared characterization (from dated document):

  • “False, misleading, or defamatory statements”
  • Breaches of confidentiality obligations
  • Threats of “criminal implications, including reporting your conduct to appropriate law-enforcement authorities”
  • “Criminal investigation into harassment, cyberstalking, extortion or coercion, identity or brand impersonation”

Timeline significance:

  • August 11, 2023: First C&D sent (documenting public records)
  • December 12-15, 2023: Multiple media notifications (TechCrunch + The Information)
  • December 20, 2023 (5-8 days after media blitz): Second C&D prepared but never sent (monitoring VC/Israel connections + ALL media outreach)
  • November 11, 2025: Second C&D actually sent (partner notifications, same day as SEC complaint)
  • November 20, 2025: Third C&D sent (career prediction, 56-minute response)

The December 2023 document shows legal intimidation infrastructure was active and monitoring 4 months after first C&D, nearly 2 years before SEC complaints, specifically triggered by:

  1. LinkedIn posts about geopolitical and investor network ties (General Catalyst, Israel connections)
  2. Press notifications to TechCrunch (Dec 12, 14, 15) and The Information (Dec 14) with comprehensive fraud documentation

The 5-8 day gap between media notifications and prepared C&D proves legal team was monitoring ALL whistleblower attempts to notify press.

For investigators: The unsent December 2023 C&D proves systematic surveillance of protected whistleblower speech about network connections, not just fraud. This demonstrates consciousness that exposure of VC/Israel network ties threatens their operation. Critically, this surveillance continued after compliance with August 2023 C&D demands (removed missionlanetruth.com and its Linktree redirect after Mission Lane objected to Shane Holdaway/“pawn” language and Credit Karma connection)—proving the goal is suppression of protected speech, not achieving compliance. They monitored LinkedIn posts about General Catalyst and Israel connections and prepared legal threats but chose not to send them, revealing calculated deployment of intimidation infrastructure.

November 20, 2025: Third Cease-and-Desist, Escalation to Police Threats

CRITICAL CONTEXT: Federal Whistleblower Protection

By November 20, 2025, I had 2+ years of SEC whistleblower protection under 15 U.S.C. § 78u-6 (first complaint filed August 11, 2023, Submission #16917-772-564-515; updated November 11, 2025, Submission #17628-500-136-464). Lisa M. Bowman learned of federal whistleblower protection on November 11, 2025 when the second SEC complaint was revealed publicly. 9 days later, she sent this third C&D. This third C&D targets federally protected whistleblower activity, constituting potential federal whistleblower retaliation.

Timeline of Rapid Retaliation:

  • 6:38 PM: Posted on LinkedIn about Women Tech Meetup event that evening, documenting Skolkovo Foundation pattern, FBI warning (April 2014), Dasha Shunina’s role (Puzzle GTM strategist), and the documented fraud pattern
  • 6:55 PM: Posted comment on my own post: “she knows i know btw. enjoy your last days in the tech industry, Daria!” (17 minutes after original post; later deleted but documented)
  • 7:02 PM: Dasha Shunina viewed my LinkedIn profile (24 minutes after callout post, 7 minutes after “last days” comment)
  • 7:51 PM: Received third cease-and-desist email from Lisa M. Bowman, Of Counsel, Employment Law, Orrick, Herrington & Sutcliffe LLP (56 minutes after “last days” comment, 49 minutes after Dasha viewed profile)

Context for “enjoy your last days” comment (deleted but documented): This statement refers to career consequences from documented fraud exposure, not physical safety. The phrase predicts that once the documented pattern (FBI-warned Skolkovo Foundation 2016-2023 → U.S. tech access building → employment at CFPB-banned CEO’s company → federal whistleblower complaints) becomes widely known through permanent federal record, her career in tech will end through reputation damage and industry accountability, not through violence or physical harm. The comment was posted on my own LinkedIn post, not on Dasha’s profile. I subsequently deleted the comment, but it remains documented here as evidence of the absurd legal characterization of career predictions as “safety threats.”

The 56-Minute Response Demonstrates Active Monitoring & Coordination:

The timeline reveals systematic surveillance and prepared legal response:

  1. Post callout (6:38 PM) → “Last days” comment (6:55 PM, 17 min) → Dasha views profile (7:02 PM, 7 min after comment) → Legal threat (7:51 PM, 56 min after comment, 49 min after view)
  2. Impossibly fast response: No reasonable attorney drafts, reviews, and sends cease-and-desist in 56 minutes unless pre-coordinated
  3. Active monitoring: Dasha viewing profile 7 minutes after “last days” comment demonstrates real-time surveillance of whistleblower activity
  4. Coordination: Speed suggests Dasha immediately contacted company/legal after viewing, who had response ready to deploy

This mirrors November 11 same-day retaliation: SEC complaint filed 3:33 AM → C&D received 6:02 PM (14.5 hours). Both demonstrate prepared legal intimidation responses to protected whistleblower activity.

Attorney’s Claims:

“We have asked you cease your defamatory and threatening postings, but instead you have escalated them. You are now threatening the safety of Puzzle employees, including telling them to ‘enjoy your last days in the tech industry.’”

“Unfortunately, we have no choice but to notify the police of these recent threats.”

Evidence of Rapid Retaliation Timeline:

Lisa M. Bowman C&D threatening police notification (7:51 PM) November 20, 2025, 7:51 PM: Third C&D from Lisa M. Bowman (Orrick) received 56 minutes after “last days” comment, 49 minutes after Dasha viewed profile. Characterizes career consequences statement as “safety threat” and threatens police notification.

Impossibly fast response demonstrates pre-coordination and active monitoring of whistleblower activity.

LinkedIn post calling out Women Tech Meetup (6:38 PM) November 20, 2025, 6:38 PM: Posted LinkedIn callout documenting Dasha Shunina’s Skolkovo Foundation employment (2016-2023), FBI warning (April 2014), Women Tech Meetup infrastructure, and employment at CFPB-banned CEO’s company. Post documents “Tell Me I Can’t” theme while noting Dasha’s profile view occurred after posting.

Follow-up comments including deleted career consequences statement November 20, 2025, 6:55 PM: Comment on own LinkedIn post: “she knows i know btw. enjoy your last days in the tech industry, Daria!” Statement referred to career consequences from documented fraud exposure (FBI-warned Skolkovo → U.S. tech access → CFPB-banned CEO → federal record), not physical safety.

Comment was subsequently deleted but documented here to show absurdity of legal characterization.

Second comment (11 minutes later): “even better, she’s seen this! all permanent federal record.” Demonstrates Dasha Shunina viewed post and engaged with documented pattern.

Analysis of Escalating Legal Misrepresentation:

  1. “Threatening the safety” - Comment about career consequences characterized as safety threat
  2. “No choice but to notify the police” - All three C&Ds threatened police involvement, but what they characterize as threatening has escalated
  3. Pattern of mischaracterization - Three C&Ds sent over 27 months, each escalating what constitutes a “threat”:
    • August 11, 2023: Documenting public records → defamation + workplace violence threats
    • November 11, 2025: Partner notifications → criminal prosecution + workplace violence
    • November 20, 2025: Career consequence prediction → “safety threat” requiring police notification
  4. December 20, 2023 C&D prepared but never sent (evidence-95, 96, 97): Dated document shows Bowman prepared C&D triggered by LinkedIn posts documenting VC/Israel connections (particularly General Catalyst); never sent but kept as pre-prepared legal intimidation infrastructure; demonstrates systematic surveillance of protected whistleblower speech about network connections nearly 2 years before SEC complaints

Legal Malpractice Questions:

This raises serious questions about what information Sasha Orloff is providing to legal counsel Lisa M. Bowman:

  • Is CEO misrepresenting context to attorney? If Bowman genuinely believes a comment about career consequences is a safety threat, CEO may be providing misleading information
  • Does attorney know full documented pattern? Has Bowman been informed of:
    • CFPB permanent ban (December 2021)
    • 5 SEC whistleblower complaints filed (November 2025)
    • $51M+ in federal enforcement actions and court judgments
    • Photoshopped metrics (October 2025)
    • False credentials contradicted by corporate filings
    • Dasha Shunina’s Skolkovo Foundation employment (2016-2023, FBI-warned 2014)
  • Is this frivolous legal intimidation? Characterizing protected whistleblower speech about career consequences as “safety threats” requiring police notification may constitute:
    • Strategic Lawsuit Against Public Participation (SLAPP)
    • Abuse of legal process
    • Potential bar ethics violations (threatening criminal prosecution without factual basis)

Lisa M. Bowman’s Escalating Pattern Across Three Sent C&D Letters (All Threatened Police):

All three cease-and-desist letters were sent by Lisa M. Bowman (Of Counsel, Employment Law, Orrick, Herrington & Sutcliffe LLP). The pattern shows systematic expansion of what she characterizes as “threatening”:

August 11, 2023 (First C&D):

  • What I did: Documented public records (CFPB enforcement orders, court documents)
  • Bowman’s characterization: “Potential workplace violence charges”
  • Context: Dual coordination (Puzzle + Mission Lane same day)

November 11, 2025 (Second C&D):

  • What I did: Notified business partners about documented fraud
  • Bowman’s characterization: “Criminal prosecution for harassment, cyberstalking, extortion” + workplace violence restraining order
  • Context: Same day as SEC whistleblower complaint filing (6:02 PM, 14.5 hours after 3:33 AM filing)

November 20, 2025 (Third C&D):

  • What I did: LinkedIn comment predicting career consequences from fraud exposure (“enjoy your last days in the tech industry”)
  • Bowman’s characterization: “Threatening the safety of Puzzle employees” requiring police notification
  • Context: 56 minutes after comment (impossibly fast, demonstrates pre-coordination)

NOTE: See December 2023: Unsent Cease-and-Desist (Surveillance Infrastructure) for evidence-95, 96, 97 showing Bowman prepared but never sent a C&D triggered by LinkedIn posts about VC/Israel connections, demonstrating systematic surveillance infrastructure nearly 2 years before SEC complaints.

Bowman’s Professional Responsibility:

Lisa M. Bowman is identified as Of Counsel, Employment Law at Orrick. This designation indicates she is an experienced attorney advising on employment matters. Her pattern of threatening police action for federally protected whistleblower activity demonstrates either:

  1. Client misrepresentation: CEO providing false or incomplete information about context (FBI warnings, federal complaints, documented fraud pattern)
  2. Knowing mischaracterization: Attorney aware of facts but deliberately mischaracterizing protected speech as threats
  3. Inadequate due diligence: Failure to review public records (CFPB orders, SEC filings, FBI warnings) before threatening police action

Critical Timeline: Federal Whistleblower Protection Without Attorney Knowledge (Initially)

I filed my first SEC complaint on August 11, 2023 (Submission #16917-772-564-515), establishing federal whistleblower protection under 15 U.S.C. § 78u-6. I did NOT disclose this to anyone—not to Lisa Bowman, not to anyone else. I revealed it when I filed my second SEC complaint on November 11, 2025.

See August 11-14, 2023: Response to Lisa Bowman for full email chain showing NO mention of SEC filing.

Between August 11-14, 2023, I sent five emails to Lisa Bowman detailing:

  • LendUp CFPB violations and compliance issues
  • Mission Lane’s relationship to LendUp (asset acquisition vs. “founding”)
  • Toxic workplace patterns across LendUp and Puzzle
  • The misleading “repeat founders” research study on Puzzle’s careers page (specifically quoted and linked; page later updated to advertise “10-year exercise window on good terms” after deleting my equity)
  • SaaS vs. lending revenue comparison issues
  • The “golden parachute” vs. public “sabbatical” narrative discrepancy
  • PR as tool to “reshape the past”
  • AI pivot causing “shift in company’s day-to-day stability”
  • Pattern of layoffs and employee mistreatment

But I NEVER mentioned the SEC filing.

What This Reveals:

  • August 11, 2023 (3:56 PM): First C&D sent 1 hour 41 minutes after SEC filing—she didn’t know about SEC filing specifically, but should have been on notice (I used “fintech whistleblower” as LinkedIn tagline leading up to August 11, creating duty to investigate potential federal whistleblower protection before sending legal threats; archived evidence confirms this public designation existed before first C&D)
  • December 20, 2023: Prepared C&D (never sent) targeting someone with 4+ months of federal protection—she still didn’t know
  • November 11, 2025: Second SEC complaint filed and revealed publicly—NOW she knows
  • November 11, 2025 (6:02 PM): Second C&D sent same day—knowing about federal protection, sends C&D anyway
  • November 20, 2025: Third C&D sent 9 days later—knowing about federal protection, escalates threats

She was unknowingly targeting federally protected activity for 2+ years (August 2023 - November 2025), then once she learned of it, she escalated with two C&Ds within 9 days.

Any of these scenarios raises professional responsibility concerns. An employment law attorney who:

  1. Sends first C&D (August 11, 2023) 1 hour 41 minutes after SEC whistleblower complaint filing establishing federal protection under 15 U.S.C. § 78u-6 (without knowing about it)
  2. Receives comprehensive fraud documentation (August 2023) including specific citation of misleading “repeat founders” research study on careers page (which was then updated to advertise “10-year exercise window on good terms” after deleting my equity) (but is never told about SEC filing)
  3. Achieves effective coercion (“will not write on this subject ever again” = 27+ months silence)
  4. Prepares additional C&D (December 2023, never sent) targeting someone with 4+ months of federal whistleblower protection (still without knowing)
  5. Learns of federal whistleblower protection (November 11, 2025 when second SEC complaint revealed publicly)
  6. Immediately sends second C&D same day (November 11, 2025, 6:02 PM) after learning of federal protection
  7. Sends third C&D 9 days later (November 20, 2025) knowing about federal protection
  8. Each C&D threatens police action for federally protected whistleblower activity under 15 U.S.C. § 78u-6
  9. Represents CFPB-banned CEO facing 5 SEC whistleblower complaints, $51M+ enforcement actions

…demonstrates either:

  • Unknowingly targeting federally protected activity for 2+ years (August 2023 - November 2025), then knowingly escalating once informed (November 2025, two C&Ds within 9 days)
  • Knowing participation in federal whistleblower retaliation after learning of SEC filings (November 2025 C&Ds sent with knowledge of federal protection)
  • Failure to investigate after being put on notice: I used “fintech whistleblower” as my LinkedIn tagline leading up to August 11, 2023; this public designation created a duty to investigate whether I had federal whistleblower protection before sending legal threats; failure to conduct this due diligence constitutes recklessness or willful ignorance
    • Archived evidence confirms 2023 whistleblower designation: Archived LinkedIn profile snapshots show “Puzzle Financial whistleblower” as public tagline BEFORE August 11, 2023 first C&D; this creates documented proof that Lisa Bowman should have been on notice and had duty to investigate federal whistleblower status before threatening police action; existence of archived evidence eliminates any claim that tagline was added retrospectively or that she couldn’t have known

The fact that it’s the same attorney (Lisa M. Bowman) across all three sent C&Ds (plus one prepared but never sent) makes the pattern more damning for bar ethics purposes—one attorney who:

  1. Should have been on notice before first C&D: I used “fintech whistleblower” as my LinkedIn tagline leading up to August 11, 2023, creating a duty to investigate potential federal whistleblower protection before sending legal threats; archived evidence confirms this public designation existed before first C&D was sent
  2. Sent first C&D 1 hour 41 minutes after SEC whistleblower filing (August 11, 2023) without knowing about federal protection under 15 U.S.C. § 78u-6 (and apparently without conducting due diligence despite public “whistleblower” designation)
  3. Received comprehensive fraud documentation in August 2023 including the specific “repeat founders” research study misrepresentation (same page later updated to advertise “10-year exercise window on good terms” after deleting my equity) (but was never told about SEC filing)
  4. Prepared December 2023 C&D (never sent) without knowing about 4+ months of federal whistleblower protection (still no apparent investigation despite public whistleblower designation)
  5. Learned of federal whistleblower protection November 11, 2025 when second SEC complaint revealed publicly
  6. Immediately sent second C&D same day (November 11, 2025, 6:02 PM) knowing about federal protection
  7. Sent third C&D 9 days later (November 20, 2025) knowing about federal protection
  8. Systematically expanded what constitutes “threatening” behavior (documenting records → partner notifications → career predictions)
  9. Never addressed the underlying documented facts (CFPB ban, $51M+ enforcement, 5 SEC complaints, photoshopped metrics, Skolkovo Foundation FBI warning, misleading careers page)

She unknowingly targeted federally protected activity for 2+ years (August 2023 - November 2025), then once she learned of federal whistleblower protection, she escalated with two C&Ds within 9 days.

Each C&D escalates accusations without addressing substance. The November 2025 C&Ds—sent AFTER learning of federal protection—constitute potential federal whistleblower retaliation under 15 U.S.C. § 78u-6(h)(1).

Bowman’s email requested attorney contact (“If you have an attorney, please have that individual contact me.”). I do not currently have legal representation but am pending with whistleblower attorneys (Phillips & Cohen) regarding representation, retaliation protection, and whistleblower award eligibility.

November 24, 2025: California State Bar Complaint Filed

On November 24, 2025, I filed a formal complaint with the California State Bar against Lisa M. Bowman (CA Bar #253843) for violations of California Rules of Professional Conduct.

Case Number: 25-O-30894

California State Bar Complaint Receipt November 24, 2025: Official receipt from California State Bar Office of Chief Trial Counsel acknowledging complaint against Lisa Mireille Bowman. Case Number: 25-O-30894. Complaint will be reviewed by attorney in Intake Unit. Receipt establishes permanent government record of attorney misconduct allegations.

Basis of Complaint:

The complaint documents Lisa M. Bowman’s pattern of threatening police action to suppress federally protected whistleblower speech, specifically citing:

California Rules of Professional Conduct Rule 3.10 (Threatening Criminal Prosecution): An attorney shall not threaten to present criminal charges to obtain an advantage in a civil dispute.

Timeline Documented in Complaint:

  1. August 11, 2023 (3:56 PM): First C&D characterizing documentation of public records as “workplace violence charges”

    • I had filed SEC whistleblower complaint same day (2:15 PM) establishing federal protection
    • I did NOT disclose SEC filing to Bowman or anyone else
  2. August 11-14, 2023: I responded with five detailed emails providing comprehensive fraud documentation

    • CFPB enforcement actions (public record)
    • Mission Lane asset sale documents
    • Toxic workplace patterns
    • Misleading careers page claims
    • Never mentioned SEC filing in any email
  3. December 20, 2023: Prepared C&D (never sent) triggered by LinkedIn posts about VC/Israel connections

    • Demonstrates ongoing surveillance of protected speech
    • Bowman still unaware of 4+ months of federal whistleblower protection
  4. November 11, 2025 (6:02 PM): Second C&D threatening “criminal prosecution for harassment, cyberstalking, extortion”

    • Sent 14.5 hours after I filed second SEC complaint (3:33 AM) publicly revealing federal whistleblower status
    • Now Bowman knows about federal protection
  5. November 20, 2025 (7:51 PM): Third C&D characterizing career consequence prediction as “threatening the safety of Puzzle employees”

    • Sent 56 minutes after LinkedIn comment (“enjoy your last days in the tech industry”)
    • Stated “we have no choice but to notify the police”
    • Sent 9 days after learning of federal protection

All four cease-and-desist letters (three sent, one prepared but never sent) threatened police involvement for protected whistleblower speech.

What State Bar Investigation Examines:

The State Bar Office of Chief Trial Counsel will investigate:

  • Threatening criminal prosecution without factual basis (Rule 3.1 - Meritorious Claims)
  • Using threat of police notification to suppress speech (Rule 3.10 - Threatening Criminal Prosecution)
  • Client direction and supervision (Rule 5.1 - Responsibilities of Managerial Lawyers)
  • Federal whistleblower retaliation (15 U.S.C. § 78u-6(h)(1))

Implications:

  1. Lisa Bowman must respond: Required to provide her version of events within 30 days
  2. Orrick (her firm) now knows: Large law firms take bar complaints seriously; investigation becomes part of permanent record
  3. Orrick partner-level monitoring confirmed: Aria Kashefi (Orrick Partner, Technology Companies/Venture Capital practice) viewed my LinkedIn profile SAME DAY as bar complaint filed (November 24, 2025, evidence-115); proves immediate firm-level awareness at partner level on day of filing, not just individual attorney awareness; suggests emergency internal review, damage control, or coordination regarding bar complaint response; same-day timing indicates active monitoring system for bar complaints or immediate internal escalation
  4. Puzzle’s role will be examined: Did Puzzle direct the legal strategy? Did they approve threatening police?
  5. Strengthens all other complaints: Creates official government record of systematic retaliation pattern
  6. Media/partners can’t ignore official case number: This is Case #25-O-30894, not “allegation”
  7. Consciousness of guilt: 4 legal threats over 27 months, 0 refutations = they know they’re guilty

Professional Consequences:

State Bar complaints can result in:

  • Private reproval (warning, not public)
  • Public reproval (published, part of attorney’s record)
  • Suspension (temporary loss of license)
  • Disbarment (permanent, for egregious cases)
  • Investigation on record even if dismissed

The complaint establishes permanent government documentation that Puzzle Financial’s legal strategy was systematic suppression of federally protected whistleblower activity through threat of criminal prosecution, rather than refutation of documented facts.

This is now Case #25-O-30894 in the California State Bar’s Office of Chief Trial Counsel. This is official. This will have consequences.

Public Documentation of Bar Complaint Filing:

Twitter post announcing California State Bar complaint November 24, 2025, 3:17 PM: Public announcement of CA State Bar complaint filing via Twitter. Documents filing against Puzzle’s attorney for 4 C&Ds over 27 months.

Quote tweet (Nov 23, 5:05 PM): “all you had to do was ignore me. now i’m filing a bar complaint re: your lawyer. she participated in 2 years of retaliation with full fraud documentation.”

Bar complaint confirmation (Case #25-O-30894) received 5:40 PM same day, 2 hours 23 minutes after public announcement.

I am blocked by @sashaorloff, @dasha_shunina, and @puzzlefin (and Sasha on LinkedIn) but continued posting publicly to establish permanent record.

What This Timeline Demonstrates:

The 24-hour period from warning (Nov 23, 5:05 PM) to complaint confirmation (Nov 24, 5:40 PM) shows:

  1. Good faith warning given: 22 hours before filing complaint
  2. Rapid filing: Complaint submitted and case number assigned within 24 hours
  3. Public accountability: Announced filing publicly to establish permanent record
  4. Federal protection invoked: Twitter bio identifies as “puzzle.io whistleblower” with federal SEC protection

Network Response: Business as Usual (Same Day as Bar Complaint Filing)

Hours before the bar complaint announcement, Sasha Orloff continued normal business operations:

Sasha Orloff LinkedIn post announcing DC dinner with Brex/Navan/Puzzle November 24, 2025, 1:00 PM: Sasha announces December 8 #DigitalCPA dinner in DC with “Brex and Navan teams.” Tags Dasha Shunina (Skolkovo Foundation connections), multiple team members. Posted 2 hours 17 minutes BEFORE bar complaint announcement (3:17 PM).

Business as usual despite blocking whistleblower: 5 SEC complaints, $51M+ settlements, federal retaliation, Skolkovo FBI warnings. DC dinner scheduled 2 weeks after bar complaint filing (Case #25-O-30894). Despite blocking whistleblower on all platforms, Sasha continues public posting as if no federal investigation exists.

What the DC Dinner Demonstrates:

  1. Blocked whistleblower but public posting continues: Despite blocking me on LinkedIn, Twitter, and all platforms, Sasha posts publicly as if no federal investigation exists
  2. Continued Dasha Shunina public role: Despite documented Skolkovo Foundation employment (FBI-warned Russian government tech recruitment entity, 2016-2023), Sasha publicly tags her as part of “incredible group”
  3. Brex partnership emphasis: Dinner specifically highlights Brex team (OpenAI data partner documented March 2023)
  4. Washington DC location is strategic: Not a random city choice—DC is where the regulators operate:
    • SEC headquarters: 100 F Street NE, Washington DC (5 whistleblower complaints filed)
    • CFPB headquarters: 1700 G Street NW, Washington DC (CEO permanently banned from consumer lending)
    • Government contracts: Brex and Navan both serve federal government clients
    • Lobbying/legitimacy signaling: “We’re sophisticated enough to network in regulators’ backyard despite federal investigations”
    • Scheduled 2 weeks after bar complaint: Dec 8 dinner announced Nov 24, bar complaint filed Nov 24
    • Message: “We’re not hiding—we’re doing business in Washington despite everything”
  5. Network coordination continues: Same day as bar complaint filing, CEO promoting data partner dinner as if no federal investigation exists
  6. Consciousness of guilt through normalcy: Block the whistleblower, ignore the documentation, celebrate and do business development
  7. Pure brazenness: This isn’t ignorance or oversight—it’s calculated defiance

The timing:

  • Nov 23, 5:05 PM: I quote tweet warning about filing bar complaint (public, but he blocked me)
  • Nov 24, 1:00 PM: Sasha posts DC dinner with Brex/Navan (19 hours after public warning)
  • Nov 24, 3:17 PM: I announce bar complaint filing (2 hours 17 min after his post)
  • Nov 24, 5:40 PM: I receive Case #25-O-30894 confirmation

What This Reveals:

Sasha blocked me on all platforms but my public warning (Nov 23, 5:05 PM) was visible to anyone who wasn’t blocked (Twitter also now permits viewing). Either:

  1. He didn’t see it: Blocked me so thoroughly he missed the public warning 19 hours before posting
  2. His team didn’t tell him: Team saw the warning but didn’t alert CEO before public posting
  3. He saw it anyway: Logged out or was told but posted DC dinner anyway (consciousness of guilt)
  4. He didn’t care: Knew about warning/filing but proceeded with business as usual

Either way: business as usual while under federal whistleblower investigation. Block the whistleblower, post dinner plans with data partners, ignore the bar complaint.

Two distinct monitoring patterns emerged showing coordinated crisis response:

LinkedIn profile views showing network surveillanceNovember 24-25, 2025: LinkedIn profile views showing coordinated network surveillance. TWO SEPARATE TRIGGERS: (1) Aria Kashefi (Partner at Orrick, Herrington & Sutcliffe LLP - SAME FIRM as Lisa M. Bowman under bar complaint Case #25-O-30894) and Brunswick Group (crisis PR/reputation management firm) viewed profile after California State Bar complaint filed (November 24, 2025); (2) Samantha Van Gent (Communications at General Catalyst) viewed profile after being publicly tagged in post about termination agreement calling out “RICO patterns, not NDAs” and listing GC and XYZ Capital as entities the agreement restricted me from discussing. Pattern demonstrates coordinated monitoring across PR (Brunswick), legal (Orrick partner), and investor comms (GC) responding to both legal filings and public posts tagging network entities.

What This Proves:

  1. Two coordinated monitoring systems active: (a) Crisis PR (Brunswick) + law firm partner (Orrick) responding to bar complaint filing; (b) Lead investor comms (GC) responding to being publicly tagged about RICO patterns and restrictive NDAs

  2. Brunswick Group crisis response to bar complaint: Crisis PR firm specializing in reputation management for scandals and investigations viewing profile after bar complaint filed suggests network treating this as reputational crisis requiring professional damage control

  3. General Catalyst monitoring public posts tagging them: Samantha Van Gent (Communications at General Catalyst) viewing profile after being publicly tagged in post calling out “RICO patterns, not NDAs” and naming GC as entity restricted by termination agreement proves:

    • Active monitoring of posts tagging General Catalyst about fraud allegations
    • Consciousness that being publicly associated with RICO patterns is reputational concern
    • PR team tracks when lead investor is publicly called out about restrictive NDAs and federal complaints
    • Institutional awareness at portfolio company’s lead investor when tagged about documented fraud
  4. Orrick partner monitoring SAME DAY as bar complaint: Aria Kashefi is a PARTNER at Orrick, Herrington & Sutcliffe LLP (since February 2022, 4 yrs 9 mos at firm) - THE SAME FIRM as Lisa M. Bowman (Of Counsel) who is under California State Bar investigation (Case #25-O-30894 filed November 24, 2025). Partner viewing profile SAME DAY (November 24) as bar complaint filed against firm’s attorney proves:

    • IMMEDIATE Orrick firm-level awareness of bar complaint (not just individual attorney)
    • Partner-level monitoring same day (Kashefi outranks Bowman who is “Of Counsel”)
    • Potential emergency internal review or damage control regarding Bowman’s conduct
    • Likely coordination about bar complaint response or ongoing legal strategy
    • Same-day consciousness at institutional level proves active monitoring of bar complaints
    • Timing suggests either: (a) Bowman immediately informed firm leadership, (b) Orrick monitors bar filings, or (c) network alerted firm to public announcement
  5. Timing is evidence: Views occurring immediately after:

    • California State Bar complaint filed (Case #25-O-30894, November 24)
    • California Board of Accountancy supporting documentation submitted (Case #A-2026-1047, November 25)
    • Pattern shows network monitors government complaint filings and coordinates response
  6. Eliminates “we didn’t know” defense: For all future proceedings, this timestamp establishes that crisis PR, investor comms, and legal networks were actively monitoring federal complaints

  7. Consciousness of coordination: Multiple entities (PR firm, investor comms, legal) viewing within hours of each other suggests coordinated briefing or shared monitoring, not independent discovery

Brunswick Group Context:

Brunswick Group is a global advisory firm specializing in:

  • Crisis management and reputation defense
  • Stakeholder engagement during controversies
  • Media strategy for companies under regulatory scrutiny
  • Corporate investigations and governance issues

Their involvement signals the network recognizes this as crisis requiring professional reputation management, not routine business operations.

Suppression Pattern Timeline:

  • October 27, 2025: Photoshopped metrics evidence deleted within 24 hours
  • November 10, 2025: LinkedIn warning comment to CPAs deleted in 4 minutes
  • November 12, 2025: @joinodf blocked after posting documentation timeline
  • November 11, 2025: SEC complaints filed (4 submissions)
  • November 11, 2025: Same-day C&D retaliation
  • November 13, 2025: @sashaorloff blocked after documenting Credit Karma → Mission Lane funnel (see Twitter Block evidence)
  • November 20, 2025: Third C&D letter
  • November 24, 2025: California State Bar complaint filed (Case #25-O-30894)
  • November 24, 2025: Orrick partner + Brunswick Group view profile (coordinated legal + PR monitoring)
  • November 24, 2025: CEO posts DC dinner with data partners (business as usual despite bar complaint)
  • November 24-25, 2025: General Catalyst Communications views profile after being tagged about “RICO patterns, not NDAs”
  • November 25, 2025: CBA supporting documentation submitted (Case #A-2026-1047)
  • November 26, 2025: CEO personally edits Wikipedia (evidence-118) to remove fraud documentation, claiming “SEO hijacking”
  • November 26, 2025, ~8:12pm: Posted about Rolling Loud v. Fairfax Studios lawsuit, naming Marvin Bing
  • November 26, 2025, ~9:09pm: Marvin Bing blocks on LinkedIn (evidence-121, evidence-122) - within 57 minutes of post - same day Sasha claiming lawsuit is “made up” on Wikipedia
  • November 30, 2025: Public tweets tagging QED network
  • December 1, 2025: Email notification sent to Brandon Arvanaghi and Meow regarding Puzzle integration and QED liability
  • December 3, 2025, 2:22am ET: Nigel Morris (Managing Partner at QED Investors, Capital One co-founder) views profile after LinkedIn tag: “QED Investors Frank Rotman Nigel Morris You’re upgrading to a 4-letter acronym. You should already be aware. Good luck exiting Mission Lane.” (evidence-146)

Nov 30 tweets tagging QED, Nigel Morris, Frank Rotman, Meow November 30, 2025: Tweets tagging QED network. “on QED podcasts, Nigel Morris refers to Frank Rotman (@fintechjunkie) as his ‘partner in crime.’ couldn’t be more accurate. there’s a RICO case coming for you. good luck exiting @mission_lane”; “cc @QEDInvestors :-)”; “@meow @brandon Meow will soon be getting an official notice on your federally prohibited @puzzlefin integration and rewards program. your relationship with @QEDInvestors is quickly becoming a legal liability”; ”.@fintechjunkie you’re fucked too, Frank Rotman. i know you stalked my linkedin 2 years ago”

KEY EVIDENCE: Suppress, Don’t Refute

Pattern demonstrates consciousness of guilt: Delete comments, block critics, send C&D letters, activate crisis PR—but never address the underlying documented facts (CFPB ban, $51M+ settlements, photoshopped metrics, false credentials, Skolkovo FBI warning). If documentation was false, they would respond with facts. Instead: systematic suppression at every level (CEO blocks, platform deletions, legal threats, firm monitoring, crisis PR activation, investor comms tracking).

You don’t suppress lies, you correct them.

This demonstrates systematic monitoring and coordination across the network’s crisis response infrastructure. Every entity viewing this profile after complaint filings creates timestamped record of awareness for permanent federal record.

November 2025: TeamBlind Platform Suppression

During the same November 2025 period as the two additional C&Ds, coordinated suppression extended to anonymous platforms.

Timeline:

  • Posted about Puzzle being fraudulent across three posts on TeamBlind (anonymous tech employee platform)
  • Third post started gaining traction: Stated I was fired for questioning why we were integrating with OpenAI
  • Within the hour: All three posts were deleted (not just the third one)
  • Received one-day ban for “bullying/harassment” (false characterization to justify suppression)

What this proves:

  1. Monitoring anonymous platforms: They tracked TeamBlind posts despite platform anonymity
  2. Visibility-triggered suppression: Posts sat until third post gained traction, then coordinated takedown of all three
  3. False “bullying/harassment” claims: Same tactic as “mentally ill,” “threatening,” “safety concerns” - mischaracterizing protected speech
  4. Coordinated platform response: TeamBlind takedown within same November 2025 window as two C&Ds demonstrates multi-platform suppression campaign

The pattern: Suppression is triggered by visibility, not content. They monitored, waited for critical mass, then deployed coordinated takedown across platforms (LinkedIn C&Ds + TeamBlind removal + “bullying/harassment” ban).

The OpenAI integration question - the exact concern that led to my May 31, 2023 termination - was still being suppressed 2.5 years later when it started gaining visibility on anonymous platforms.

The November 11, 2025 cease-and-desist letter from Orrick, Herrington & Sutcliffe LLP contains a revealing acknowledgment disguised as criticism:

“Your publications and outreach reprise the same themes the Company addressed with you in August 2023 and again contain false and inflammatory accusations that are defamatory on their face and designed to injure Puzzle’s business and reputation.”

This statement is gaslighting through legal language:

“Reprise the same themes” acknowledges the pattern documented in 2023 remained consistent through 2025 - exactly what fraud documentation should show. A pattern isn’t repetition; it’s evidence.

“The Company addressed with you in August 2023” characterizes legal threats (dual cease-and-desist letters from Puzzle and Mission Lane on August 11, 2023) as having “addressed” the documentation. They didn’t refute claims with evidence, correct false statements, or provide documentation. They threatened legal action and demanded silence. Legal intimidation isn’t refutation.

“False and inflammatory accusations” - no specific claims identified as false, no evidence provided contradicting documentation, no factual refutation attempted. The letter demands removal of all content within 48 hours but never states which claims are incorrect or provides contradicting evidence.

“Defamatory on their face” - all statements are supported by public records: CFPB enforcement orders, corporate filings, court documents, archived social media posts, shareholder communications. Truth is absolute defense to defamation. If claims were false, they would cite specific falsehoods and provide contradicting evidence rather than demanding blanket removal.

Pattern across both C&D letters (August 2023, November 2025):

  • Demand silence without refutation
  • Characterize documentation as harassment
  • Threaten escalating legal action
  • Never provide contradicting evidence
  • Confession through omission

The gaslighting extends to characterizing partner notifications about documented fraud as “interference with Puzzle’s relationships.” Notifying accounting firms, business partners, and investors of CEO’s CFPB enforcement history and ongoing fraud pattern isn’t interference - it’s professional duty and protected whistleblower activity. The characterization demonstrates consciousness that stakeholder awareness threatens the business model.

If the documentation was false, they would prove it false. Instead, they demand silence and characterize truth-telling as defamation. The legal strategy itself reveals their approach: suppression rather than refutation.

Seeking Accountability: A 27-Month Timeline

After my termination in May 2023, I spent 27+ months attempting to notify every relevant party (investors, media, platforms, partners, regulators) of the documented fraud pattern. What follows is the chronological record of those attempts and the consistent pattern of response: silence, suppression, or celebration.

Contemporaneous Records (June-August 2023)

  • Email to therapist (June 4, 2023), four days after termination, documenting CEO monitoring and circumstances of departure
  • Voicemail from CEO Sasha Orloff (July 26, 2023), offering financial assistance while repeating false “resignation” claim, preserved as audio recording
  • CEO’s Slack message after deleting my post about card cancellation, characterizing it as “a message […] that was unfortunately confused for something that it is not, and was getting some questions” (acknowledgment of deletion and narrative control)
  • Internal company communications (VP of Engineering email to team)
  • Cease-and-desist letters from Puzzle and Mission Lane (August 11, 2023)

Regulatory and Law Enforcement Notification (August 2023, November 2025)

  • November 6, 2020: FBI agent Nicholas Kroll contacted regarding emails exchanged with Adam Rogas (NS8 fraudster), one month after I started at Puzzle Financial
  • August 4, 2023: Responded to prior FBI contact, redirecting to documented fraud pattern: “Hey again. I recently worked for Sasha Orloff, founder of LendUp. He now runs Puzzle Financial. I don’t have all the information but am willing to put a huge bet that Mission Lane is covering up securities fraud and more CFPB/FTC-worthy compliance issues. […] has been puppeteering this.” Provided link to “Mission Lane: 11 Years of Social Washing” investigative article published the day before (August 3, 2023)
  • SEC complaint filed August 11, 2023 at 2:15:26 PM EDT (Submission Number: 16917-772-564-515), the same day I received dual cease-and-desist letters
  • Complaint documented securities fraud concerns including false founder claims, misleading fundraising narratives, conflicted asset sale structure, equity deletion from cap table, and lead investor’s pattern of creating predatory lending entities targeting vulnerable communities
  • SEC automated response confirmed receipt and stated “your submission will be given careful consideration in view of the Commission’s overall responsibilities under the federal securities laws”
  • November 11, 2025, 3:33 AM ET: Filed SEC whistleblower complaint. Submission Number: 17628-500-136-464. Updated original complaint filed August 11, 2023 (Submission #16917-772-564-515) with 2+ years of additional evidence. Supporting documents attached. Applied for whistleblower award eligibility. Permanent federal record established.

Media Outreach and Investigation Abandonment (July-December 2023)

Forbes (David Jeans):

  • Outreach to former Forbes senior writer David Jeans (who originally broke NS8 fraud story in 2020) between July 17-24, 2023, initial response “Yeah, I know of Sasha” before dropping contact
  • At the time, Jeans was employed by Forbes, which features major Puzzle and LendUp investors across prestige lists:
    • Hemant Taneja #8 on Midas List 2025 (Puzzle’s lead investor)
    • Blake Byers on 30 Under 30 with profile mentioning LendUp
    • Ross Fubini #88 on Midas List 2025
    • LendUp board chair/director (QED Investors) #90 on Midas List 2025
    • Email to David Jeans (August 3, 2023): “Forbes Midas List. Conflict of interest. Got it.” with link to article documenting social washing and Capital One connections, acknowledging the structural conflict preventing coverage after Jeans dropped contact

TechCrunch (Connie Loizos):

- **TechCrunch published extensively about LendUp (9+ articles from 2012-2017)** praising the company as "disrupting payday loans," covering every funding round, product launch, and executive hire:
  - 2012: Launch coverage with Kleiner, a16z, Google Ventures backing
  - 2013-2014: Multiple funding rounds and product features
  - 2016: $150M Series B ("Ladders Not Chutes"), first CFPB violation framed as "growing pains"
  - 2017: PayPal investment and credit card launch
  - **December 2020**: Senior reporter **Connie Loizos** profiled XYZ Capital's **Ross Fubini**, allowing him to describe LendUp as being [**"split into two businesses"**](https://techcrunch.com/2020/12/15/this-vc-introduced-palantirs-first-business-hire-to-its-earliest-engineer-then-his-business-took-off/) without noting it was a $29M fire sale that returned $0 to shareholders
  - **February 2023**: Published glowing profile of Puzzle, 5 months before I contacted them with fraud documentation
  - **Email to TechCrunch (August 1, 2023)**: sent to [email protected] with initial fraud documentation. I noted: **"Curiously I've found a lot of TechCrunch press for LendUp, but none for Mission Lane"**, specifically alerting them to the suspicious asymmetry in coverage that suggested the "Mission Lane founder" narrative might not withstand scrutiny. TechCrunch had published 9+ promotional articles about LendUp (2012-2017) but zero about the company Sasha Orloff claimed to have founded.
  - **August 11, 2023**: Email outlining Mission Lane acquisition structure: "Mission Lane was created to purchase LendUp's credit card business. Instead of fixing LendUp's compliance issues and dying loan business, they had long-term plans to create a pump-and-dump neobank they could sell to First Boulevard/Kinly."
  - **Same day (August 11, 2023)**: Received dual cease-and-desist letters from Puzzle and Mission Lane
  - **August 16, 2023 (7:21 PM)**: Sent comprehensive investigative package to TechCrunch with three attached PDF files (court documents and corporate records):
    - **LendUp - Information Statement (Golden Parachute).pdf** (671 KB) - December 2018 asset sale document proving conflicts of interest and golden parachute payments
    - **ROLLING LOUD VS AHEAD FINANCIALS LLC, FAIRFAX STUDIOS, INC.pdf** - Complete lawsuit filing ($1.575M sponsorship fraud)
  • MOTION FOR ENTRY OF FINAL DEFAULT JUDGMENT against Fairfax Studios
  • Documentation included: Fairfax Studios incorporated 7 days before Rolling Loud contract; shell company network (Fairfax Studios Inc. + Thirty Two West LLC, both with Marvin Bing); payment intermediary scheme (“Anu notarized a statement claiming she sent payment to Fairfax Studios intended for Rolling Loud and it must’ve been intentionally mishandled by Fairfax. She provided no real evidence of the transfer.”); Kinly/FirstBoulevard/BeTenth shell game with address overlap proven by attached account statement; Mission Lane BBB complaints and active lawsuits - Email concluded: “I’m starting to think Ahead was a shell company.” - August 17, 2023: Connie Loizos responded requesting timeline clarification and phone contact to “walk through” the comprehensive evidence package, including attached court documents and corporate filings - August 20, 2023: Final email during initial investigation period documenting emotional toll: “It’s ironic I’m threatened with inflicting emotional distress when I can barely sleep or live my life for months. I’ve been unemployed and feel triggered just looking at job descriptions.” - December 12-15, 2023: Multiple follow-up emails escalating from apologetic (“I wasn’t in a good place”) to frustrated (“You people are shameless”), documenting continued institutional silence - November 4, 2025: Sent ActualQuickBooks evidence - TechCrunch published zero investigative articles - October 24, 2025: TechCrunch featured Puzzle-sponsored Women Tech Meetup in Disrupt 2025 side events guide, the same CEO they acknowledged investigating 2+ years prior with complete evidence including court documents, corporate filings, and attached PDFs

Public Documentation (August 2-10, 2023)

  • Published investigative articles on Substack documenting the fraud pattern while my coworkers observed in real-time
  • August 3, 2023: “Mission Lane: 11 Years of Social Washing,” documenting Capital One connections, lead investor’s role in creating “Capital One Jr.,” and systematic social washing pattern
  • August 9, 2023: “Who’s Behind LendUp.com and AheadMoney.com?”, documenting domain parking scheme, lead investor’s continued control post-liquidation, fake “Jon Allen” blog replacing Ahead Financials, and the FirstBoulevard to Kinly to Greenwood shell game
  • August 10, 2023: Alluded publicly to December 2018 Asset Sale document showing conflicts of interest, golden parachute payments, and 2-day shareholder review period for $29M fire sale after raising $150M+
  • August 11, 2023: Posted redacted snippet of Asset Sale document proving Sasha Orloff was hired as advisor to Mission Lane post-acquisition, not founder, and documenting Blake Byers’ and other board members’ conflicting interests
  • These publications show that my fraud documentation was conducted openly with coworkers as witnesses, contradicting any characterization of secretive or unstable behavior
  • The dual cease-and-desist letters (received the same day as the Asset Sale snippet, within hours of posting) responded directly to public documentation that implicated both companies in coordinated deception
  • The articles documented premeditation (AheadMoney.com “coming soon” page August 2019, 16 months before official announcement; bekinly.com registered 2 days after CFPB lawsuit), systematic targeting of vulnerable communities through progressive branding, and continued fraud post-shutdown (fake FirstBoulevard “acquisition announcement” April 2023 claiming LendUp has “solid reputation” for “responsible lending” 16 months after permanent CFPB ban)

Y Combinator and Hacker News Suppression (August 2023)

Email to Y Combinator (August 5, 2023), two emails sent the same day:

  • To [email protected] and [email protected]: Subject “wtf happened at lendup”, body “running a startup can’t be THIS complicated” linking to documentation of false Mission Lane founder claims and social washing documentation
  • To Michael Seibel (Partner, former Managing Director and CEO of YC accelerator 2016-2024): “Hi, I’m simply looking for one person to give a reasonable explanation for the LendUp story. It would appear several parties are covering up 11 years of negligence and securities fraud, but what do I know.” Linked article titled “Mission Lane: 11 Years of Social Washing” documenting: ”[…], YCombinator, Alexis Ohanian, Sasha Orloff, Jake Rosenberg, Mission Lane, Puzzle Financial, and more.”
  • YC’s LendUp company page continues stating “Prior to Puzzle, I founded two startups that grew to over $100M ARR, LendUp and (spinout) Mission Lane (YC W12)” despite corporate records proving he was hired as advisor post-acquisition and CFPB shutdown returned $0 to shareholders

Hacker News Post Suppression (August 2-10, 2023):

  • August 2-10, 2023: Posted multiple substantive threads on Hacker News documenting the LendUp to Mission Lane to Puzzle pattern with links to primary sources (“Mission Lane: 11 Years of Social Washing,” “Why Did VCs Make Capital One Jr.?,” “Who’s Behind These VC-Backed NeoBank Domains Now?”). Posts received minimal engagement (1-2 votes), suggesting they never reached HN’s audience, whether through shadowbanning, immediate flagging, or algorithmic suppression.
    • August 11, 2023: Received dual cease-and-desist letters from Puzzle and Mission Lane; the same day emailed [email protected]: “I’ve received a cease-and-desist and politely request that you delete my posts (or account)”
    • August 12, 2023: HN moderator Daniel responded: “Happy to help. I’ve killed those posts now. This isn’t an outright deletion (HN users who are logged in can turn on a setting in their profile to see killed posts) but it removes them from the public internet.” Additional posts killed August 14-21, 2023
    • What this shows: YC received clear fraud notification (August 5 email), saw substantive documentation on their own platform (HN posts August 2-10), witnessed coordinated legal threats from two companies (August 11 C&D letters), and chose to suppress whistleblower posts rather than investigate why portfolio companies were threatening documentation of public records. YC’s response was active suppression, not passive ignorance.

On Deck Fellowship (January 2024, October-November 2025)

Series of emails to ODF leadership:

  • January 19, 2024 - Two emails to ODF CEO Julian Weisser documenting comprehensive fraud pattern and personal toll:
    • 2:38 PM: “i can shout from the rooftops about all the abuse and lies rampant in tech startups and it’ll fall on the deaf ears of the fraternized. i’ll be here when everyone realizes investing their time and money in sasha/puzzle is a mistake. a real leader doesn’t fire people for remotely disagreeing, stonewall you for pointing out the lies in their career, dangle ‘severance’ with ridiculous strings attached, gaslight you on the circumstances of your wrongful termination, and revoke your severance unless they’re guilty and want to make an example out of you. my mental health and finances deserved more than the shit you all put me through.”
    • 2:43 PM (5 minutes later): “sasha let me blast him and mission lane for weeks on social media. his response? block me. then give me a call when i publicize the wrongful termination and the revoked severance, to tell me i resigned and yet he wants to offer severance one more time. then send me a cease and desist letter (along with mission lane) when i reveal the document proving QED Investors bought him out for being a terrible leader. is this bullshit normal to you? because to me, this is a privileged narcissist without an ounce of empathy for the people who give him their lives. fuck this.”
    • This email directly asked: “is this bullshit normal to you?” documenting wrongful termination, revoked severance, dual cease-and-desist letters, Asset Sale document proving conflicts of interest, pattern of retaliation, and personal toll
    • ODF’s response: 22 months of silence, continued platforming, and “Top 2025 Company” designation November 12, 2025, one day after SEC whistleblower complaints documenting federal retaliation
    • October 30, 2025: Warning to Julian Weisser and Erik Torenberg after ActualQuickBooks photoshopping incident
    • November 5, 2025: Notice of impending publication with link to documentation
    • November 8, 2025: Final notice stating “You are now aware” with complete documentation

ActualQuickBooks Campaign Response (October 2025)

Investor Notifications (October-November 2025)

  • Email to Puzzle investors (October 31, 2025), notifying [email protected] and [email protected] of equity deletion after exercise attempt
  • LinkedIn messages to Brex executives (November 1, 2025), notifying Jason Mok, Anshul Shah, and NicolĂĄs Carey of photoshopped metrics and cap table manipulation; three days later, CEO posted video content with Jason Mok discussing investor partnerships; Brex had launched major technical integration with Puzzle six weeks earlier (September 23, 2025: “One-click accounting setup” partnership announcement) despite closing its Israel R&D center in January 2024
    • Email to Brex executives (November 9, 2025), notifying of ongoing fraud
    • Email to Sterling Road investor Ash Rust (November 9, 2025), notifying of ongoing fraud; investor had blocked “Puzzle x LendUp” account in 2023 after receiving the article, showing prior awareness
    • Email to XYZ Capital (November 9, 2025), notifying early-stage investor of documented fraud and ongoing pattern
    • Email to General Catalyst (November 9, 2025), notifying early lead investor of ongoing fraud; CEO Orloff shared GC’s mental health article as performative cover while internally labeling whistleblower “mentally ill”
    • Email to remaining recent investors (November 9, 2025), notifying Kapor Capital, FOG Ventures, Born Capital, Alumni Ventures, Calm Ventures, and Soma Capital of documented fraud
    • Email to Casey Woo, CEO of FOG Ventures (December 5, 2025), follow-up to November 9 notification demanding Sasha step down immediately; detailed mental decompensation evidence (13+ hour Wikipedia meltdown, provably false claims to administrators), operational incompetence (months-old homepage typos, AI-generated slop blog post), active CFPB ban violations (Partner Rewards affiliate program), employee RICO warnings (Lisa Kleinsorge VP Partnerships), and investor exposure under 18 U.S.C. § 1962; demanded: (1) CEO removal, (2) independent leadership for wind-down, (3) customer notification, (4) communication preservation, (5) independent counsel for FOG

Partner and Business Notifications (November 2025)

  • November 10, 2025 (12:30 PM ET): Puzzle announces CPA.com Digital CPA Conference partnership
  • Comment from Dasha Shunina (Forbes contributor and Puzzle GTM strategist): “I’m so excited! Please come say hi!”
  • Email sent to [email protected] notifying conference organizers of CEO’s CFPB enforcement history
  • Warning comment to CPAs deleted within 4 minutes: posted on Puzzle’s LinkedIn announcement of CPA.com conference partnership, warning accounting professionals about CEO’s CFPB enforcement history; immediate deletion shows active monitoring and suppression
  • November 25, 2025: Ramp leadership (Eric Glyman CEO, Karim Atiyeh CTO, Gene Lee co-founder) notified of existing August 2023 Puzzle integration (2+ years active); documented CFPB ban, likely CFPB decree violations via existing integration, photoshopped metrics, and GC portfolio conflicts (GC backed Ramp since 2021, was already investor in BOTH companies when integration launched Aug 2023, then deepened Ramp stake March + November 2025 while being Puzzle lead investor = orchestrated integration between portfolio companies)
  • Dasha Shunina tactical response: Blocked me immediately after the CPA warning comment, then unblocked after I posted “i see you’re deleting and ignoring. […] i’m trying to help everyone involved.” Pattern consistent with psychological tactic to appear sympathetic while participating in suppression infrastructure
  • Notification to Business Partners (November 10-11, 2025): Following publication, I notified all business partners publicly named by Puzzle of the CEO’s fraud history and ongoing pattern. Each notification included CFPB enforcement summary, false credentials pattern, recent metric manipulation, professional liability warning, and link to complete documentation
  • Entities notified November 10, 2025: Decimal, Gusto, Brex, Bill.com, Rippling, Stripe, Ramp, CPA.com; each notification stated: “Every moment of continued partnership after notification becomes part of the permanent record demonstrating knowing complicity.”
  • Notification to Bookkeeping Partners (November 10, 2025): Notified Burkland Associates, Fondo, and Trivium of CEO’s fraud history and professional liability concerns for CPAs. Each notification emphasized: “Someone who manipulates social media metrics shouldn’t be trusted with financial metrics” and established their awareness for future regulatory or professional liability proceedings

Evidence preservation methods include email archives, Wayback Machine archives, WHOIS records, manual screenshots with timestamps, and downloads of public filings, ensuring documentation remains accessible even if original sources are modified or deleted.

SOC2 Compliance

→ See SOC2 During Crisis in the Post-Notification Escalation section for full documentation of the SOC2 observation period, Vanta notification, and management integrity concerns.

Legal Framework and Ongoing Documentation

On Timing and Liability

Every passing second that entities continue partnership, investment, platform access, or promotional activities after receiving direct notice with documented evidence creates timestamped records of knowing complicity.

These are verifiable decisions showing consciousness of the fraud pattern and choice to proceed regardless. The documentation is permanent. The timestamps are immutable. Each continued association after notification becomes part of the permanent record.

This documentation may be used in future legal proceedings, whether criminal, civil, or regulatory. All evidence presented here consists of primary sources, contemporaneous records, and verifiable public documents. I have made every reasonable effort to notify all relevant parties, platforms, investors, and media outlets over a 2+ year period (June 2023 to November 2025).

Should this matter proceed to litigation, discovery, or regulatory investigation, the record will show:

  • Multiple attempts to resolve through proper channels (HR, legal counsel, media, platforms)
  • Comprehensive documentation provided to all stakeholders with acknowledgment of receipt
  • Systematic pattern of inaction, suppression, or willful continuation despite direct notice
  • Timestamped evidence of knowing participation after notification

I am prepared to provide testimony, documents, and sworn statements to any legitimate investigative or judicial process. All claims made here are statements of fact supported by documentary evidence, public records, or firsthand observation during my employment (October 2020 to May 2023).

The choice to publish this documentation publicly comes only after exhausting private channels and observing continued fraudulent conduct, including metric manipulation in October 2025, which showed the pattern was ongoing and unlikely to cease without public accountability.

Ongoing Observation and Documentation

This documentation is living. Reactions to its publication (monitoring, suppression attempts, coordinated legal responses, platform manipulation, or network mobilization) are being observed and documented in real-time. Each response becomes additional evidence of consciousness, coordination, and pattern. Federal whistleblower protections under 15 U.S.C. § 78u-6 apply to all disclosures here. Any retaliation, whether direct or through proxies, will be documented and reported to appropriate authorities. The pattern of conduct continues to be observed.

How the Pattern Continues

The deceptive practices I observed during my employment at Puzzle Financial represent the latest manifestation of a 13-year pattern spanning LendUp, Mission Lane, and Puzzle. The documented evidence demonstrates these are not isolated incidents.

KEY EVIDENCE: ActualQuickBooks - Photoshopped Social Media Metrics (October 2025)

  • Hired mobile billboard targeting QuickBooks at Intuit Connect conference
  • Self-documented police intervention and trademark infringement
  • Photoshopped social media metrics: Reshared LinkedIn comment on Twitter, changing 3 likes to 12,362 without consent or disclosure
  • Deleted evidence within 24 hours after exposure
  • Pattern continues 13 years later: same CEO, same deceptive practices, just accounting software instead of predatory loans

ActualQuickBooks Campaign Evidence (October 2025)

This recent incident exemplifies the continuing pattern of deceptive practices documented throughout this statement, demonstrating reactive monitoring, performative contradiction, metric manipulation, and evidence deletion.

  • actualquickbooks.com

  • Registered January 2022 (expires January 2026), updated July 2024

  • Redirected to special puzzle.io page; now defunct

  • October 27

    • Self-documented trademark infringement and trespassing at Intuit Connect

    • Hired mobile billboard with messaging disparaging QuickBooks

    • Put individuals at risk of arrest, bragged about police intervention

    • Spammed Intuit Connect attendees with misleading domain name

    • Manipulated social media metrics

      • Reshared LinkedIn comment praising campaign on Twitter, changing 3 likes to 12,362 without consent or disclosure (deleted only during final sweep; CEO was aware of observation ; commenter was notified and unfollowed)
  • October 28

  • Company continues using “#QuitBooks” on website and across social media

ActualQuickBooks campaign evidence before deletion

Self-documented trademark infringement in and around conference. Mobile billboards; actualquickbooks.com fake airline tickets; actualquickbooks.com shirts. “Quickbooks just unveiled their new AI product at their annual conference. They are calling it Actual Quick Books.”


Police intervention tweet

Self-documented police intervention. “Oops! Intuit called the cops 😅 Guess our airline-themed campaign really took off ✈️ Guess we left a mark.”


Photoshopped comment with 12,362 likes

Photoshopped comment praising idea shared on Twitter/X: “@Sasha Orloff wow. This is one of the best marketing strategies I’ve ever seen.” Green blocks added by CEO. Modified to show 12,362 likes only 3 hours from initial campaign tweet.


Real comment showing only 3 likes

Cross-referenced comment revealing 3 likes. CEO was aware this was spotted, but deleted the question and left the edited screenshot up several more hours until the final sweep of campaign evidence.


Credential Misrepresentation (LendUp → Mission Lane → Puzzle)

  • Claims “successful founder” despite LendUp’s documented failure (CFPB enforcement, company shutdown, employees receiving letters stating equity was worthless)

  • LendUp’s December 2018 asset sale to “spin off” company

    • Shareholders given 2-day review period December 17-19 for $29M sale (after raising $150M+ ); proceeds paid transaction fees and noteholders, $0 to shareholders. Shareholders simultaneously asked to approve Section 280G golden parachute payments for executives joining the acquiring company.

    • Blake Byers (Google Ventures partner), two LendUp directors affiliated with QED Investors (Nigel Morris board chair, Frank Rotman board member) holding convertible notes (paid from sale proceeds, became major stockholder in buyer), and LendUp executives (hired by buyer post-acquisition) had conflicting interests in this agreement

    • Frank Rotman’s false public statements (January 10, 2019, 3 weeks after 2-day shareholder review): Publicly claimed “two companies up for long-term success,” “full growth potential,” and “better positioned to serve” while having board-level knowledge of fire sale terms ($29M after $150M+ raised, $0 to shareholders, CFPB violations 2016 & 2018); LendUp permanently shut down 2 years later

  • Routinely claims founder/cofounder of LendUp “spin off” Mission Lane despite corporate records showing advisor role hired post-acquisition; timelines inconsistent across platforms

    • LinkedIn claims 2014-2018

    • Crunchbase claims 2016-2019

    • “Spin off” holding company incorporated Nov 2018

    • Narrative further retroactively revised on Twitter (“it’s been a decade” in 2023, with no mention of LendUp)

    • For an April 2025 interview with Rippling, a business partner, the summary described him as “the founder of LendUp and Mission Lane”

    • In a July 2025 interview with Notion, Orloff did not dispute the characterization of “building two companies at the same time” before Puzzle

      • This was the same narrative I received during my first interview; CTO/cofounder John Cwikla also never disputed any claims
  • Routinely claims raising “$1 billion+” across companies but provides vague answers when pressed (describing it as “hundreds of millions” in interviews) and deceptively aggregates equity and debt financing without distinguishing between the two or clarifying that the $29M LendUp asset sale represented a near-total loss for equity holders

    • Puzzle’s own website contains this narrative: “raised over $1b+ in capital and previously built LendUp, Mission Lane,”
  • Creating industry frameworks to position as thought leader: August 2023 “Autonomous Accounting Levels” framework mimicking self-driving car industry terminology. LinkedIn post claiming Puzzle “achieved Level 3 Autonomous Accounting” using self-created classification system with no industry standards or third-party validation. “We took a page from self-driving cars’ playbook” - appropriating established autonomous vehicle framework (developed through decades of engineering research and regulatory collaboration) to make accounting software sound innovative. The framework exists solely to claim Puzzle reached “Level 3” - a metric defined by the company making the claim. No external auditing, no industry body validation, just self-declared achievement using borrowed credibility from unrelated field. The blog post originally linked (puzzle.io/blog/framework-for-autonomous-accounting) now returns 404, suggesting the framework was quietly abandoned after serving its promotional purpose.

  • November 11, 2025: CEO posted about AI and hiring with team photo including employees who had departed prior to ActualQuickBooks campaign. Using outdated imagery while claiming “We are hiring across the board” continues pattern of visual deception (photoshopped metrics October 2025, fake testimonials, deleted evidence).

Systematic “Repeat Founder” Positioning:

In video introductions for his Tech Finance podcast, CEO introduces himself as “repeat founder and current CEO of Puzzle.” This characterization appears consistently across all platforms despite corporate records proving he was hired as an advisor to Mission Lane post-acquisition, not as a founder.

Podcast network context: a16z acquired Turpentine in April 2025 through Erik Torenberg (founder of Turpentine, previous chairman of On Deck, cofounder and general partner at Village Global 2017-2020 with Ross Fubini, who invested in LendUp Seed/A/B as Kapor Capital partner 2011-2012 and Puzzle via XYZ Venture Capital 2016+).

The “repeat founder” positioning implies:

  • Multiple successful founding experiences (LendUp co-founded 2012, shut down by CFPB 2021-2022 with $0 to shareholders)
  • Mission Lane founded (corporate records show advisor role December 2018-September 2019, not founder)
  • Pattern of successful company building (one CFPB shutdown, one advisor role, one ongoing)

This systematic misrepresentation appears across:

  • LinkedIn: “founded two startups”
  • YC page: “I founded two startups”
  • Interviews: “founder of LendUp and Mission Lane” or “built two companies at the same time”
  • Podcast intros: “repeat founder”
  • Media profiles: validated without correction

The consistent use of “founder” terminology for Mission Lane—despite corporate filings, shareholder documents, and timeline contradictions proving an advisor role hired post-acquisition—demonstrates deliberate credential inflation across all public-facing platforms.

Citing Studies About Successful Serial Entrepreneurs While Hiding Actual Track Record:

Puzzle’s archived careers page (March 2024) includes recruiting pitch emphasizing CEO’s “track record of success” while linking to academic research:

“Sasha Orloff, Puzzle’s founder and CEO, successfully started and scaled Mission Lane and LendUp to $100M ARR, hundreds of employees and millions of customers. While starting any business comes with risks, multiple studies have shown that entrepreneurs with a track record of success have a higher chance of success.”

The page links to NBER Working Paper 12592 (Gompers et al., 2006) titled “Skill vs. Luck in Entrepreneurship and Venture Capital: Evidence from Serial Entrepreneurs.” The study’s actual findings:

  • Successful serial entrepreneurs (those whose prior venture went public) have 30% chance of succeeding in next venture
  • Failed serial entrepreneurs have only 20% chance of succeeding (barely above first-time entrepreneurs at 18%)
  • Study explicitly distinguishes between successful and failed track records: “entrepreneurs who succeeded in a prior venture… have a 30% chance of succeeding in their next venture. By contrast, first-time entrepreneurs have only an 18% chance of succeeding and entrepreneurs who previously failed have a 20% chance of succeeding.”

The actual track record cited as “successfully started and scaled”:

  • LendUp (2012-2022): CFPB permanent ban, $40M restitution to 140,000+ consumers, shut down 2022, $0 to shareholders
  • Mission Lane: Corporate documents prove advisor role December 2018-September 2019, not founder
  • Ahead Financial (2020-2022): Collapsed 2022, Rolling Loud $1.575M judgment, locked customer accounts; continues as DashFi Inc. DBA DashAi (2022-present, active Beta) - same CEO (Anuradha Shultes), AI-powered auto lending automation (“AiDO” AI Desking Officer) - CFPB-banned CEO now scaling predatory lending through AI
  • Puzzle (2019-present): $312 revenue vs $10M+ burned, photoshopped metrics (October 2025)

The careers page appropriates research about successful serial entrepreneurs to recruit talent while omitting that the study explicitly shows failed serial entrepreneurs have minimal advantage. The academic citation provides false credibility: casual readers see “multiple studies have shown” linked to prestigious NBER research and assume validation, without reading the study’s actual finding that prior failure predicts future failure.

This is credentials fraud through academic laundering: using research conclusions about successful entrepreneurs to validate a failed track record by hoping no one reads past the abstract.


Tweet claiming Mission Lane leadership “Now, it’s been a decade and @mission_lane (led by amazing new leadership and investors) has millions of customers and built an incredible franchise”- Tweeted May 22, 2023; 1 like; 9 days before termination

Shareholder letter about asset sale voting Shareholders received this letter December 17, 2018, with closing two days later on December 19. They were asked to separately vote on executive compensation while their own equity would receive $0: “This vote is entirely separate from the vote to approve the Asset Sale.”


LendUp fundraising failure explanation LendUp claimed the credit card business was “dragging down” the company and Credit Suisse “did not materialize [any] actionable offers” after months of fundraising attempts. Ahead Financials was later launched as a LendUp neobank “subsidiary,” requiring similar capital to what they claimed was unavailable.


KEY EVIDENCE: “Interested Directors” With Conflicts of Interest

Asset Sale documents explicitly acknowledge board members had conflicts of interest in transaction that returned $0 to shareholders after raising $150M+. CEO hired as “advisor” to acquiring company, creating incentive misalignment with shareholder interests.

Asset sale document noting interested directors “…it is noted that the Company Board may consist of “interested directors” with respect to the Asset Sale.”


Sasha Orloff advisor engagement disclosure “Sasha Orloff will be engaged as an advisor by Purchase immediately after the Closing. Mr. Orloff will resign as the Chief Executive Officer of the Company immediately after the Closing Date. As a result, Mr. Orloff may have interests related to the Closing of the Asset Sale and the success of Purchase that are different from the interests of holders of Company securities generally.”


Blake Byers conflict of interest disclosure “Blake Byers […] may have interests related to the closing of the Asset Sale that are different from the interests of holders of Company securities generally.”


Jeff Foster dual success fees disclosure Jeff Foster received success fees from both LendUp and Mission Lane in connection with the asset sale.


Coercive Structure and Silencing Clauses:

📄 Full Asset Sale Document (PDF)

The Asset Sale documents reveal systematic mechanisms to silence shareholders and protect executives:

  • General Release requirement: 75% of shareholders forced to sign releases giving up right to sue as condition of closing
  • No appraisal rights: “No stockholders of the Company will have any dissenters’ or appraisal rights in connection with the Asset Sale” — shareholders couldn’t even challenge the valuation
  • Non-Disparagement clause: “Sellers will also agree not to, and will cause their respective Affiliates not to, directly or indirectly, alone or in connection with any Person, engage in any conduct or make any statement…that disparages Purchaser” — built-in silencing
  • Non-Competition clause (2 years): Sellers prohibited from:
    • Engaging in, participating in, or acquiring financial/beneficial interest in ANY business doing what the sold business does
    • Includes prohibition on working as independent contractor in the space
    • Exception: can own <2% passive investment in public companies
    • Can’t solicit employees “principally provided in the Commonwealth of Virginia” (Mission Lane’s base)
    • Can’t solicit customers, vendors, marketers, sponsors from Purchaser
    • The absurdity: Document states “Purchaser has agreed to substantially similar covenants in favor of the Sellers” — but LendUp was effectively shutting down, making this protection meaningless. Mission Lane (QED-backed buyer) faces no real competitive threat from a dissolving company, while shareholders who got $0 are locked out of their own industry for 2 years. One-sided restriction disguised as mutual.

Explicit Admission of Failure:

Document states: “Business being sold in the Asset Sale has had a negative impact on the Company’s loans business, the Company’s balance sheet, and the overall financial condition of the Company.”

Golden Parachute Specifics (Section 280G “Compensatory Payments”):

While shareholders received $0, executives received:

Severance Payments:

  • Vijesh Iyer: $356,000 (Section 280G value: $350,317)
  • Eric Nelson: $311,000 (Section 280G value: $306,035)
  • Jacob Rosenberg: $286,000 (Section 280G value: $281,434)
  • Sasha Orloff: $324,000 (Section 280G value: $318,828) — special treatment: 18 months COBRA (vs 12 for others), severance split 25% from LendUp / 75% from Mission Lane (dual payment structure)

Parent Stock Options (Mission Lane):

  • Vijesh Iyer: 37,500,000 options ($1,549,434 estimated value)
  • Eric Nelson: 15,000,000 options ($619,774 estimated value)
  • Sasha Orloff: 20,000,000 options ($826,365 estimated value)
  • Jacob Rosenberg: 20,000,000 options ($826,365 estimated value)

Signing Bonuses from Mission Lane:

  • Vijesh Iyer: $120,000
  • Eric Nelson: $68,750
  • Jacob Rosenberg: $62,500

Total “Waived Payments” (Excess Parachute Payments Requiring Shareholder Approval):

  • Vijesh Iyer: $2,173,384
  • Eric Nelson: $864,406
  • Sasha Orloff: $631,729
  • Jacob Rosenberg: $714,407
  • Total: ~$4.4 million approved for 4 executives while shareholders received $0

Sasha’s Accelerated Self-Dealing Structure:

  • His Parent Options vest 1/12th monthly (full vest in 12 months) vs Iyer/Nelson who vest 40% at year 1 then 1/60th thereafter (much slower schedule)
  • Double-dip protection: “If Messrs. Rosenberg and Orloff remain in continuous service through the consummation of a Change in Control of Purchaser, their Parent Options will vest and become exercisable in full immediately prior to the Change in Control” — gets 20M options in Mission Lane AND instant full vesting if Mission Lane is ever acquired
  • Bizarre dual-advisory structure: Severance only triggers if terminated by both Mission Lane AND LendUp without Cause. Why would LendUp need a continuing “advisor” after selling their main business? This appears structured not to ever trigger severance — the real benefit is ongoing dual income streams from both companies simultaneously. The severance clause is almost a red herring; the point is staying on both payrolls indefinitely while shareholders got $0.

Full List of Convertible Note Holders (Paid From Sale While Shareholders Got $0):

  • QED Fund II, L.P. — Nigel Morris, Frank Rotman (board members with conflicts)
  • GV 2012, L.P. and GV 2017, L.P. — Google Ventures (Blake Byers, board member with conflicts)
  • Y Combinator Continuity Holdings I, LLC — same entity that later platformed Puzzle as “Top Company” in 2025
  • Mitchell D. Kapor Trust dated 12/03/99 — Mitch Kapor, founder of Kapor Capital (LendUp Series B lead, Puzzle investor, pattern across Daylight/Joonko frauds)
  • Invus (affiliated with Purchaser — both sides of transaction)
  • Thomvest Ventures SRL
  • DCVC Opportunity Fund, L.P.
  • Data Collective II, L.P.
  • Cendana Investments, LP
  • Durga and Sushila Argawal Family Partnership, Ltd
  • Michael Gregory Komarnitsky and Li-Ming Ueng
  • Soroush Richard Shehabi

QED Directly Funded Executive Golden Parachutes:

  • QED held LendUp Convertible Notes (paid from sale proceeds)
  • QED became “major stockholder in Parent” (Mission Lane Holdings)
  • Mission Lane paid 75% of Sasha’s severance ($243,000 of $324,000)
  • Mission Lane paid all signing bonuses ($251,250)
  • Mission Lane granted all Parent stock options (~$3.8M value)
  • QED’s capital in Mission Lane directly funded Sasha’s golden parachute while QED was simultaneously getting paid out from the sale

Pattern: The same investors who got paid while shareholders got $0 (YC, Kapor, QED, GV) later funded or platformed Puzzle — continued network enrichment.


QED directors' conflicting interests in asset sale KEY EVIDENCE: Explicit documentation of conflicting interests. Asset sale agreement explicitly names Nigel Morris and Frank Rotman as LendUp directors with financial interests in QED Fund II, L.P. Document states: “Nigel Morris (i) is a director of the Company, (ii) has financial interest in QED Fund II, L.P. […] which is a holder of certain LendUp Convertible Notes and thus may receive a portion of the Purchase Consideration payable pursuant to the Agreement and an opportunity to invest in Parent stock and (iii) QED will be a major stockholder in Parent. As a result, QED and Mr. Morris may have interests related to the closing of the Asset Sale and the success of Purchaser that are different from the interests of holders of Company securities generally.” Same language for Frank Rotman. This proves QED and its principals profited from both the failing entity (LendUp) and the acquiring entity (Mission Lane) - they got paid from the sale proceeds via convertible notes AND became major shareholders in the buyer.


November 2025 (Post-SEC Complaints): First Resume Fraud Intensification

Observed: Mid-November 2025 (evidence-71) - Following SEC whistleblower complaints (November 11-13, 2025)

KEY EVIDENCE: LinkedIn Bio Updated AFTER SEC Complaints to Continue False Credentials

Following SEC whistleblower complaints (November 11-13, 2025) documenting false founder claims, CEO updated LinkedIn bio (mid-November 2025) to MORE EXPLICITLY claim “Cofounder & CEO, Mission Lane, 2014-2018” while adding legal disclaimer attempting to create plausible deniability.

Sasha Orloff LinkedIn bio claiming Mission Lane founder/CEO with disclaimer INTENSIFICATION PATTERN: False claim MORE prominent, disclaimer buried below. LinkedIn job title header (most visible element) STILL claims “Cofounder & CEO, Mission Lane, 2014-2018” - the exact false credential documented in SEC complaints. Legal disclaimer buried in description text below: “note: I was the Cofounder and CEO of the original legal entity, but upon the spin off remained an advisor to help support the transition. I am no longer involved in any capacity.” The core fraud intensifies: Header presents false title/company/dates as primary credential; fine print attempts plausible deniability. The problem: (1) COMPANY NAME OBFUSCATION - Bio states “Mission Lane (then LendUp Card)” - acknowledging in parenthetical that it was called “LendUp Card” during 2014-2018, BUT still leads with “Mission Lane” as if that company existed during those years. Mission Lane LLC was incorporated December 14, 2018. He’s claiming CEO role at “Mission Lane, 2014-2018” when that entity didn’t exist until December 2018. The “(then LendUp Card)” provides cover while maintaining false primary claim. (2) FALSE TITLE - He was CEO of LendUp Global (parent company) which owned LendUp Cards subsidiary, NOT “Cofounder & CEO, Mission Lane” from 2014-2018. (3) ADVISOR ROLE OBSCURED - When Mission Lane was actually created (Dec 2018), he was hired as advisor, not CEO. Claims “no longer involved in any capacity” but likely misleading regarding potential shareholder status from advisor compensation or asset sale structure. COORDINATED UPDATES: LendUp section also updated simultaneously with positive-spin narrative: “LendUp was a mission driven lending company to challenge the predatory practices… saved customers hundreds of millions of dollars.” Then adds: “Following the spinoff of Mission Lane (formerly LendUp Card) from LendUp Global in 2018, I was no longer involved in the company in any capacity. LendUp shut down operations in 2022.” Multiple problems: (1) LendUp: Maintains “mission driven” and “saved customers hundreds of millions” framing despite CFPB permanent shutdown (Dec 21, 2021) for “repeatedly lied to consumers” with 140,000+ victims and $40M restitution ordered; passive “shut down operations” omits federal enforcement, (2) Mission Lane: Job title header intensifies false founder claim while disclaimer attempts legal cover, (3) Both sections: “No longer involved in any capacity” potentially misleading re: shareholder status and ongoing Mission Lane profits. Pattern demonstrates: Consciousness of federal documentation → Active decision to update BOTH sections → False credentials INTENSIFIED in most visible elements (job titles, positive narratives) → Legal cover language buried in fine print → Mission-washing maintained despite documented fraud. Timeline: Nov 11-13 (SEC complaints filed) → Dec/Jan (coordinated LinkedIn updates). Response to documentation was NOT correction but strategic repositioning: Make false claims more prominent, add escape hatches, maintain positive brand.

November 21, 2025: LinkedIn Updated Again to Further Obscure Timeline and Intensify False Claims

Observed: November 21, 2025 (evidence-98, 99, 100, 101)

Sasha Orloff LinkedIn November 2025 update - LendUp section LendUp section (Nov 21, 2025): Claims “saved customers hundreds of millions of dollars,” “worked with federal regulators to curb predatory practices,” “unfortunately shut down operations 4 year after I left, in 2022.” Also lists Grameen Foundation volunteer role (2002-2005): “Following the pioneering vision of Muhammad Yunus and his Nobel Peace Prize…”

The fraud:

  1. “Saved customers hundreds of millions” - CFPB shut down LendUp for “repeatedly lying and illegally cheating its customers” ($46.8M enforcement penalties/restitution)
  2. “Worked with federal regulators” - THREE enforcement actions (2016, 2018, 2020) for violations, not cooperation
  3. “Unfortunately shut down… 4 year after I left, in 2022” - Makes it sound unrelated when violations started 2016 (his tenure) and CFPB permanent ban was December 2021 (not “2022”)
  4. Lists Kapor Capital - Documented fraud pattern across Kapor portfolio (LendUp → Puzzle → Daylight → Joonko)
  5. Nobel Prize credential inflation - Grameen role mentions “Muhammad Yunus and his Nobel Peace Prize” (same pattern as 2013 TEDx talk with “Nobel Peace Prize” slide)

Sasha Orloff LinkedIn November 2025 update - Mission Lane section Mission Lane section (Nov 21, 2025): Claims “Cofounder & CEO, Mission Lane, 2014 - Jul 2019” followed by “Advisor, Part-time, Nov 2018 - Jul 2019.” Admits in description: “Mission Lane (originally LendUp Card)” and “Following the spinoff…I was no longer involved in the company in any capacity.”

The fraud:

  1. Backdated to 2014 - Mission Lane LLC incorporated December 14, 2018 (4 years after claimed founding)
  2. Overlapping CEO claims - Claims Mission Lane CEO 2014-2019 WHILE LendUp CEO 2012-2018
  3. Contradictory roles - Lists BOTH “CEO” (2014-2019) AND “Advisor supporting transition to new leadership” (Nov 2018-Jul 2019) for same company
  4. Buried admission - Admits “originally LendUp Card” in description but header screams “Cofounder & CEO, Mission Lane, 2014”
  5. “New leadership” while claiming CEO - Advisor description says he supported “new leadership and new ownership” transition, but CEO header claims he was the leader through July 2019

You cannot be both CEO AND advisor supporting “new leadership” simultaneously. This proves conscious fraud, not a mistake.

”Sasha O.” - Obfuscation After Wikipedia Block (November 2025)

After Wikipedia blocked the whistleblower for posting federal court documents while Sasha’s lies remained unchallenged, Sasha changed his LinkedIn display name to minimize searchability.

Sasha Orloff changed LinkedIn name to "Sasha O." LinkedIn profile name change (November 2025): Changed display name to “Sasha O.” with verification badge. Profile URL still shows full name (linkedin.com/in/sashaorloff) but public display changed.

Timing:

  • Nov 26-27: Wikipedia edit war (12+ hours removing federal enforcement documentation)
  • Nov 27: Wikipedia blocks whistleblower, protects page until Dec 7
  • Nov 28: Administrator thanks Sasha for “alerting Wikipedia to problematic editing”
  • November 2025: Changes LinkedIn to “Sasha O.”

Pattern of obfuscation:

  • Makes profile harder to find/connect in searches
  • Coincides with intensified LinkedIn bio fraud (backdating Mission Lane to 2014)
  • Strategic name shortening while simultaneously escalating false claims
  • Profile still accessible via linkedin.com/in/sashaorloff but display name obscured

Why this matters: After successfully weaponizing Wikipedia administrators to suppress federal court documents, immediately changes public-facing name to make documentation/searching more difficult. Pattern: win suppression battle → reduce discoverability → intensify false claims.

Why “Mission Lane, 2014” is Fraudulent:

The claim of “Cofounder & CEO, Mission Lane, 2014-2019” is false because:

  1. Company didn’t exist: Mission Lane Holdings Inc. incorporated November 21, 2018 (Delaware public records)
  2. It was “LendUp Card” not “Mission Lane”: The credit card product was branded “LendUp Card” from 2016-2018, as evidenced by:
    • TechCrunch January 22, 2016 announcement: “LendUp Scores $150M For A Credit Card That Won’t Screw You Over” - announced the credit card launch as LendUp product, not Mission Lane
    • Photographic proof: CEO holding “L Card” with LendUp branding in January 2016 TechCrunch article (evidence-100) - wearing LendUp shirt with “Ladders Not Chutes” branding, holding physical “L Card” with LendUp logo, demonstrating card was branded as LendUp product not Mission Lane
    • Credit Karma still lists cards as “L Card by LendUp”: “L Card Classic by LendUp,” “L Card Preferred by LendUp,” “L Card Launch by LendUp” - Credit Karma’s platform shows cards branded as LendUp, not Mission Lane
    • Asset sale documents: December 2018 documents show Mission Lane LLC acquired LendUp Card assets; you can’t “found” a company that bought your employer’s subsidiary

Sasha Orloff holding L Card with LendUp branding (TechCrunch Jan 2016) TechCrunch January 2016: Sasha holding “L Card” with LendUp branding. Wearing LendUp shirt: “Socially Responsible Lending - Ladders Not Chutes - Protect Credit Education.” Card displays LendUp logo, not Mission Lane.

Why this matters: Photographic proof the credit card was branded as LendUp product during 2016-2018 - the exact years Sasha now claims as “Cofounder & CEO, Mission Lane” on LinkedIn. Mission Lane LLC wasn’t incorporated until November 2018. The card was branded LendUp, not Mission Lane, contradicting his resume claims of founding Mission Lane in 2014.

December 9, 2025: Further Resume Fraud Intensification - Backdating Advisor Start Date & Eliminating Overlap

Observed: December 9, 2025 (evidence-160, 161)

Sasha Orloff LinkedIn - LendUp section December 2025 LendUp section (Dec 9, 2025): Claims “Cofounder & CEO” from 2012-Dec 2018, lists achievements, admits CFPB injunction in 2022 but frames it as unrelated: “I was no longer part of the company, did not hold any role (operational, governance or otherwise and did not receive notice of the injunction).”

Sasha Orloff LinkedIn - Mission Lane section December 2025 Mission Lane section (Dec 9, 2025): Claims “Cofounder & CEO (formerly LendUp Card), 2014 - Dec 2018” and lists “Advisor, Part-time, Dec 2018 - Jul 2019” below with disclaimer about supporting transition. Changed from “Nov 2018” in previous version (evidence-99, Nov 21) - pushing advisor start date later to eliminate obvious overlap between “CEO through Dec 2018” and “advisor supporting new leadership from Nov 2018.”

The December 9 fraud layers (changes from November 21 version):

  1. Advisor start date manipulation - NEW in Dec 9 version:

    • November 21, 2025 version (evidence-99): Showed “Advisor, Part-time, Nov 2018 - Jul 2019”
    • December 9, 2025 version (evidence-161): Changed to “Advisor, Part-time, Dec 2018 - Jul 2019”
    • Why this matters: Pushing advisor start from Nov to Dec eliminates obvious overlap with “CEO through Dec 2018” claim. Previous version created blatant contradiction: “CEO Mission Lane 2014-Dec 2018” while simultaneously “Advisor supporting new leadership from Nov 2018.” New version attempts to eliminate one-month overlap, but Asset Sale proves advisor role began immediately after closing (December 2018) with bizarre dual-company payment structure.
  2. Corporate entity timeline fraud - continued from previous versions:

    • Claims “Mission Lane…2014” when LendUp Card entities weren’t even operational in California until 2015:
      • LendUp Card Holdings, LLC: Incorporated Delaware August 13, 2014; California branch not until October 16, 2015
      • LendUp Card Services, Inc.: Incorporated Delaware October 15, 2014; California branch not until February 4, 2015
    • Credit card product announcements were 2016: TechCrunch January 22, 2016: “$150M For A Credit Card”; August 22, 2016: “$47M for compassionate credit cards”; September 27, 2016: L Card already signing up “thousands of accounts per month”
    • Claiming “CEO” from “2014” when California operations didn’t exist until 2015 and product wasn’t announced until 2016 = backdating by 2 years
  3. Omitting dual advisory roles and payment structure documented in Asset Sale - continued from previous versions:

    • LinkedIn shows only (Dec 9 version): “Advisor, Part-time, Dec 2018 - Jul 2019” under Mission Lane section
    • Previous version (Nov 21): Showed “Nov 2018 - Jul 2019” - now pushed later to Dec 2018
    • Asset Sale proves: Simultaneous advisory service arrangements with BOTH companies - “service arrangements between Mr. Orloff and each of the Purchaser and the Company”
    • Dual compensation: Received payment from both LendUp AND Mission Lane simultaneously during advisory period (starting December 2018 closing)
    • Additional compensation: Stock option grant from Mission Lane Parent company for advisory services
    • Bizarre severance structure: If advisory services terminated by both companies, severance split 25% LendUp / 75% Mission Lane (up to 12 months base salary + 18 months COBRA premiums)
    • Dual-termination requirement: Both buyer AND seller had to fire him to trigger golden parachute - financial entanglement where both companies had contracts with same person
    • Dual-termination proves simultaneity: If advisory roles were sequential (LendUp ends, then Mission Lane begins), there would be no need for “both companies must terminate” language - you’d have separate termination clauses for each role. The “both” requirement only makes sense if he was advisor to both simultaneously, creating situation where buyer AND seller both had to fire him to trigger severance.
    • Timeline optimization: LinkedIn shows advisor role ending July 2019; Puzzle Financial incorporated September 2019 (same month as Mission Lane advisor role end per LinkedIn). Maintained dual advisory roles with insurance coverage (18 months COBRA premiums, 75%/25% split) until launching next company. Strategic timing to bridge insurance from fire sale to next venture.
    • LinkedIn omits entirely: That he was advisor to BOTH the seller (LendUp being dismantled) AND the buyer (Mission Lane acquiring assets), getting paid by both, with dual-company termination structure
    • This wasn’t “part-time advisor supporting transition” - this was structured golden parachute with unprecedented dual-company financial entanglement, bridging insurance coverage from LendUp shutdown to Puzzle launch
  4. Vijesh Iyer led credit card development, not Sasha:

    • Vijesh’s LinkedIn: “I also led the effort to build a new credit card product from scratch. We assembled a great team; created the top rated card in our segment (Customer’s choice at Credit Karma); and grew the business to serve 250k+ customers (>$100M in assets)… This credit card business was spun-off in December 2018 and is now Mission Lane. I moved to Mission Lane to serve as the interim CEO.”
    • Sasha claims “Cofounder & CEO” but Vijesh explicitly states he LED the effort FROM SCRATCH and became the founding/interim CEO of Mission Lane
    • Corporate documents confirm: Sasha was advisor with stock options as compensation, not operating CEO
  5. Contradictory simultaneous roles manipulation - Date change attempt to eliminate overlap:

    • December 9 version: Lists BOTH “Cofounder & CEO, Mission Lane, 2014 - Dec 2018” AND “Advisor, Part-time, Dec 2018 - Jul 2019 (7 months)”
    • November 21 version (evidence-99): Previously showed “Advisor, Part-time, Nov 2018 - Jul 2019 (9 months)” - creating blatant one-month overlap
    • The manipulation: Changed advisor start from Nov to Dec 2018 to eliminate obvious contradiction of being “CEO through Dec 2018” while “advisor supporting new leadership from Nov 2018”
    • Why it doesn’t work: Asset Sale proves resignation was condition of closing (December 2018), and advisor description STILL admits “I remained an advisor to help support the transition to new leadership and new ownership”
    • Cannot be CEO when “new leadership” already existed (Vijesh Iyer as founding/interim CEO)
    • “New leadership” = Vijesh Iyer; Sasha was advisor, not CEO
  6. Emotional manipulation through humanizing details:

    • Mission Lane section includes anecdote: “The first transaction processed was a flower delivery to my wife. It worked!”
    • Adds humanizing personal detail while systematically omitting:
      • Dual advisory roles (advisor to both seller and buyer simultaneously)
      • Golden parachute structure (25%/75% severance split, dual-termination requirement)
      • That Vijesh Iyer built the credit card “from scratch” and was founding CEO
      • That Mission Lane was independent buyer acquiring distressed assets, not company he founded
      • That his resignation was condition of closing, not voluntary transition
    • Same pattern as “Banker to the Poor” narrative: emotional storytelling to mask predatory practices
    • Flowers-for-wife anecdote serves no professional purpose except to humanize while concealing fraud
    • Creates sympathetic personal narrative (“devoted husband testing product for wife”) while omitting he was advisor with stock options getting paid by both companies in unprecedented dual-entity golden parachute

Pattern: Each LinkedIn update intensifies false claims while attempting to add plausible deniability. December 2025 version now omits dual advisory roles (advisor to both buyer and seller simultaneously, paid by both, with bizarre dual-termination structure), backdates operations before California entities existed, omits that Vijesh Iyer led the credit card development and became founding CEO, and adds humanizing emotional details (“flowers for wife” anecdote) to distract from systematic fraud omissions. This is conscious, iterative securities fraud in response to federal documentation.

The “Subsidiary” Minimization Fraud

December 2025 LinkedIn LendUp section states: “Upon completion of the spin-off I stepped down as CEO and wrapped up my final transition work in early 2019. Several years later, in 2022, the CFPB issued an injunction against a Lendup Global subsidiary (LendUp Loans, LLC). I was no longer part of the company, did not hold any role (operational, governance or otherwise and did not receive notice of the injunction).”

“Upon completion of the spin-off I stepped down” is false:

Asset Sale document (December 17-19, 2018) states: “Sasha Orloff (i) is the Chief Executive Officer and a director of the Company… Mr. Orloff will resign as the Chief Executive Officer of the Company immediately after the Closing Date.”

His resignation wasn’t something that happened “upon completion” - it was a condition of the closing. The spin-off didn’t complete, then he stepped down. He stepped down as part of the sale transaction. LinkedIn reorders causality to make distressed asset sale sound like successful transition.

Why “a Lendup Global subsidiary” is deliberately misleading:

The CFPB Stipulated Final Judgment and Order names defendant as: “LendUp Loans, LLC, f/k/a Flurish, Inc., d/b/a LendUp” (Case No. 3:21-cv-06945-JSC, December 21, 2021).

“d/b/a LendUp” means “doing business as LendUp” - this wasn’t “a subsidiary,” this entity WAS the consumer-facing LendUp brand. The core lending operation.

Actual corporate structure:

  • LendUp Global, Inc. = parent holding company (where Sasha was CEO 2012-Dec 2018)
  • LendUp Loans, LLC (d/b/a LendUp) = main payday/installment lending entity - THE core business, not a side operation
  • LendUp Card entities = credit card division (later spun out as Mission Lane)

The fraud:

Calling it “a Lendup Global subsidiary” exploits technical corporate structure to minimize $51M+ federal enforcement. It’s like saying “a subsidiary of Ford” when referring to Ford Motor Company’s entire vehicle manufacturing division. LendUp Loans, LLC d/b/a LendUp WAS the reason the company existed.

Fraud happened on his watch:

CFPB order defines “Relevant Period” as October 1, 2016 through when LendUp ceased originating loans. Sasha was CEO from 2012 through December 2018. The systematic fraud against 140,000+ consumers occurred entirely during his tenure.

Violated PRIOR 2016 consent order:

The Complaint explicitly states violations of “the Bureau’s 2016 consent order” - meaning they were already under federal supervision for previous violations and continued the fraud anyway. This wasn’t first-time mistakes; this was recidivist fraud while under regulatory oversight.

Why “subsidiary” framing affects everyone:

Investors, partners, CPAs, and media who hear “a subsidiary got dinged” think minor side business. Reality: $40.5M restitution to 140,000+ defrauded consumers, permanent ban from lending, ECOA violations, Military Lending Act violations (4,000+ illegal loans to 1,200+ service members), systematic deception of vulnerable populations while marketing “financial inclusion.”

The “subsidiary” language is technically accurate (LendUp Global was parent) but functionally fraudulent (minimizes that THE CORE LENDING OPERATION was permanently banned for systematic consumer fraud committed during his CEO tenure).

The false “continuation” narrative:

The “subsidiary” framing creates illusion of successful corporate evolution and continuation:

  1. Implied: LendUp had successful operations that “continued” or “spun out” as subsidiaries
  2. Reality: LendUp Loans, LLC d/b/a LendUp was permanently shut down for fraud (CFPB enforcement December 2021, ceased operations January 2022)
  3. Implied: Mission Lane, Ahead Financials, and related entities were successful “subsidiaries” or “spinouts” carrying forward LendUp’s mission
  4. Reality: These were independent companies created by external investors to purchase distressed assets or launch new ventures using LendUp’s fraud playbook without fixing the underlying issues

Mission Lane: Independent company created by QED, Invus Opportunities, LL Funds, Oaktree, Goldman Sachs to acquire distressed LendUp Card assets. Not a subsidiary spinout - an external buyer purchasing from wreckage.

Ahead Financials: New entity (incorporated April 2020) launched by post-Sasha LendUp executives (Anuradha Shultes, Kimberly Morgan) using LendUp brand/infrastructure without fixing fraud patterns. Presented as “continuation” when it was new company exploiting LendUp domain authority while core lending operation faced federal enforcement.

Pattern: “Continuing” LendUp operations were always done without fixing the fraud - just new entities using the brand, relationships, and playbook while distancing from enforcement. Creates false narrative of “successful neobank subsidiary evolution” when reality is distressed sales + fraud continuation under new corporate structures.

There was no “fixing” of LendUp. There was no “successful spinout.” There was:

  • Core lending operation permanently banned for systematic fraud (LendUp Loans, LLC d/b/a LendUp)
  • Credit card division sold as distressed asset to newly-created independent buyer (Mission Lane)
  • New entities launched by executives reusing LendUp infrastructure without accountability (Ahead Financials, Insights Servicing)
  • CEO resignation as condition of sale
  • $0 shareholder return

The “continuing LendUp” narrative is false. LendUp was shut down for fraud, not transformed or successfully continued. Related entities were independent buyers/launches exploiting the wreckage, not subsidiaries carrying forward a legitimate mission.

  1. He was CEO of LendUp Global (parent), not Mission Lane: During 2014-2018, he was CEO of LendUp Global, Inc. which owned the LendUp Card subsidiary
  2. Mission Lane was the acquirer, not the founded company: Mission Lane was created to purchase LendUp Card assets in December 2018; Sasha was hired as advisor (December 2018 - September 2019), not CEO
  3. “Founding” a subsidiary that was sold is not founding a company: The credit card division was a LendUp product line, then sold to Mission Lane (new entity). Claiming to have “founded Mission Lane in 2014” is like Apple’s CEO claiming to have “founded Beats in 2006” because Apple acquired Beats in 2014

The resume fraud pattern:

  • 2014-2016: No credit card product exists; LendUp focused on payday loans
  • 2016: TechCrunch announces LendUp’s $150M Series B for credit card launch (branded “LendUp Card”)
  • 2016-2018: Credit cards operate as LendUp Card (subsidiary of LendUp Global)
  • December 2018: Mission Lane LLC created to acquire LendUp Card assets; Sasha hired as advisor (through September 2019)
  • 2019: Sasha’s LinkedIn claims “sabbatical” and “100 days of reflection”
  • September 2019: Mission Lane advisor role ends; Puzzle Financial incorporated same month (immediate transition, “sabbatical” was cover for next company formation)
  • 2023-2025: LinkedIn progressively updates to claim “Cofounder & CEO, Mission Lane, 2014-2019”

This is active securities fraud: Backdating company founding by 4+ years to claim credit for “two successful companies” when one was an acquired subsidiary of the other. The progression of LinkedIn updates (evidence-71, 98, 99) shows conscious, iterative misrepresentation in response to federal documentation, NOT correction.

The Contradictory Narrative: “Dragging Down” vs. “Success Story”

LendUp’s asset sale documents (December 2018) told shareholders the credit card business was “dragging down” the company to justify selling it for $0 shareholder return (evidence-09). The narrative was: credit cards were failing, Credit Suisse couldn’t find buyers, the business needed to be shed to save the lending operation.

Yet Sasha’s LinkedIn now prominently claims he “founded” Mission Lane (the credit card business) as one of his “two successful companies” and leverages it as a key credential for fundraising, speaking engagements, and credibility.

The contradiction:

  • To LendUp shareholders (Dec 2018): “Credit card business is dragging us down, worthless, had to sell for pennies”
  • To investors/public (2023-2025): “I founded Mission Lane, one of two successful $100M+ ARR companies I scaled”

If the credit card business was truly a failing albatross that justified returning $0 to shareholders, why claim it as a founding success story? If it was successful enough to claim founder credit, why tell shareholders it was worthless?

This dual narrative serves two purposes:

  1. Devalue to acquire cheaply: Tell LendUp shareholders business is failing → justify $0 return → insiders acquire for pennies
  2. Revalue to claim credit: Tell next investors/employers business was successful → leverage as credential → raise money for next venture

The same pattern: LendUp shareholders told their equity is worth $0 (while insiders profited), future stakeholders told he built successful $100M+ companies (to raise $20M for Puzzle). One narrative can’t be true if the other is - either it was failing (fraud to claim success) or it was successful (fraud to pay shareholders $0).

December 2025 Pattern Summary: Technical Distinctions as Misdirection

Following the three distinct LinkedIn observations (Mid-November, November 21, December 9), the pattern demonstrates conscious iteration through technical distinctions that don’t change underlying fraud but create exhaustion through semantic arguments.

Active surveillance and responsive iteration documented:

These updates don’t happen in a vacuum - they directly respond to specific federal documentation:

  • Nov 21, 2025: Whistleblower documents resume fraud, Asset Sale dual advisory roles, Vijesh Iyer founding role
  • Nov 26-27, 2025: Wikipedia edit war - Sasha surgically removes “officers, agents, servants, employees” language, removes “Assisting Others” prohibition, removes Section V data restrictions
  • Dec 9, 2025: LinkedIn updates add:
    • Advisor start date changed from Nov to Dec 2018 (eliminate overlap)
    • “Subsidiary” minimization language (responds to Asset Sale publication)
    • “Upon completion of the spin-off I stepped down” causality manipulation (responds to Asset Sale proving resignation was closing condition)
    • Maintains contradictory simultaneous roles despite documentation
    • Continues omitting dual advisory roles despite Asset Sale evidence

This demonstrates:

  1. Active surveillance: Reading and monitoring federal documentation in real-time
  2. Sophisticated legal understanding: Knows enough to parse “case caption vs operative language,” “entity vs officer,” “subsidiary vs parent”
  3. Conscious iteration: Each update responds to federal documentation by adding technicalities that acknowledge what’s been documented while trying to reframe
  4. Emotional manipulation: Adds humanizing details (“flowers for wife”) while systematically concealing fraud - same pattern as “Banker to the Poor” narrative
  5. Not ignorance: These aren’t coincidental updates - they’re responsive counternarrative construction
  6. Exhaustion strategy: Make whistleblower question reality through endless semantic distinctions
  7. Evidence generation: Every update documenting consciousness of guilt while claiming ignorance

The timing and specificity of updates prove he’s reading the documentation, acknowledging what’s been documented (by responding to it), and attempting to construct plausible deniability through technical reframing. This isn’t someone unaware of federal documentation - this is active engagement and surveillance.

Why the technicalities don’t matter:

The CFPB order binds him individually as an officer who has received actual notice:

“Defendant and its officers, agents, servants, employees, and attorneys… who have actual notice of this Order”

  • He was CEO (officer) of LendUp Loans, LLC
  • Officers with actual notice are permanently bound
  • “Successors and assigns” language is irrelevant - the prohibitions follow him personally
  • Whether it’s “a subsidiary” or “the core business” is irrelevant to individual officer liability
  • All the LinkedIn parsing creates more evidence of consciousness of guilt, not legal loopholes

Officers don’t stop being bound when they change the LinkedIn description. The core facts never change - all intensification is just more evidence.

Insights Servicing Inc. (Delaware File #5768857, Virginia File #F2012534) was incorporated November 6, 2015 by CEO Sasha Orloff, who signed California filing as “President and CEO” (July 2016). The entity shared LendUp’s physical address, had its domain registered under LendUp’s email ([email protected]), yet was never publicly disclosed to shareholders.

Transfer to next leadership team: When Sasha left LendUp (December 2018), he transferred Insights Servicing to incoming CEO Anuradha Shultes and her team. By March 2020, Blake Byers (Google Ventures partner) appeared as Director alongside LendUp executives (Shultes, Kimberly Morgan, Kathleen Fitzpatrick). Blake’s role was never mentioned in the December 2018 Asset Sale despite his documented conflicts of interest in that transaction.

Why this is securities fraud:

  1. CEO controlled undisclosed entity: Sasha Orloff created and controlled Insights Servicing while simultaneously serving as LendUp CEO - shareholders had no idea this entity existed
  2. Systematic triple-dipping across executives:
    • Sasha Orloff: LendUp (CEO) + Mission Lane (advisor, equity compensation) + Insights Servicing (President/CEO, founder)
    • Anuradha Shultes (post-Sasha LendUp CEO): LendUp (CEO) + Ahead Financials (CEO) + Insights Servicing (President)
    • Kimberly Morgan: LendUp (COO) + Ahead Financials (operations) + Insights Servicing (COO)
    • Blake Byers: Google Ventures (public LendUp investor) + Insights Servicing (Director, undisclosed) + Mission Lane asset sale (financial interests in both buyer and seller)
  3. Special purpose vehicle: 100 authorized shares (vs LendUp’s 372M shares) = structured for specific purpose, not operating company
  4. Managed transfer, not abandonment: Sasha transferred control to next leadership team when he left; Blake Byers formalized as Director by March 2020
  5. Coordinated final abandonment: Both Insights Servicing and LendUp Global became tax delinquent March 2023 (same month), suggesting planned dissolution after asset extraction complete

Likely purposes (undisclosed to shareholders):

  • Asset/IP parking separate from regulated entity
  • Related party transactions off the books
  • Data repository outside CFPB scrutiny
  • Preparation for asset transfers (Mission Lane acquisition)
  • Revenue/fee structures invisible to shareholders
  • Coordinated with GV partner during CFPB violations

Timing reveals coordination:

Insights Servicing was created in November 2015, shortly before Google’s May 2016 ban on payday loan advertising. Following the ban, CEO Sasha Orloff published a defense of LendUp’s short-term loans on Google Ventures’ own platform: “Google Is Right to Ban Short-Term Loan Ads, But I Won’t Stop Offering Short-Term Loans. Here’s Why.” The article, hosted by Blake Byers’ firm, includes the “Banker to the Poor” narrative repeated extensively since the 2013 “Disrupting payday loans” TEDx talk.

Pattern of concealment and managed transfer:

LendUp shareholders were never told that:

  • Their CEO (Sasha) created and controlled a second entity
  • Entity used LendUp’s address, email, and infrastructure
  • Same executives held positions across multiple entities (LendUp, Insights Servicing, Mission Lane, Ahead)
  • Google Ventures partner (Blake Byers) became Director of undisclosed entity
  • The same people profiting from December 2018 asset sale controlled both disclosed and undisclosed entities

Systematic handoff: When Sasha left LendUp (December 2018), he transferred Insights Servicing to incoming CEO Anuradha Shultes and her team (Kimberly Morgan, Kathleen Fitzpatrick), who continued the pattern:

  • Shultes: LendUp CEO + Ahead Financials CEO + Insights Servicing President
  • Morgan: LendUp COO + Ahead operations + Insights Servicing COO
  • Fitzpatrick: LendUp CTO + Insights Servicing officer

Both Insights Servicing and LendUp Global were finally abandoned simultaneously, with last filings in 2020-2021 and both becoming tax delinquent in March 2023. Entities dissolved after serving their purpose across both leadership teams.

Insights Servicing Delaware filing historyDelaware filing history showing Insights Servicing incorporated November 6, 2015. Status as of March 2, 2023: “AR Delinquent, Tax Due” with last annual report filed in 2021. Tax debt: $408.78. Entity abandoned simultaneously with LendUp Global (both tax delinquent March 2023).

Insights Servicing California filing signed by Sasha OrloffCalifornia foreign corporation filing for Insights Servicing, Inc. (filed July 7, 2016, Delaware formation). Signed by Sasha Orloff as “President and CEO.” Corporate addresses listed at 225 Bush Street (San Francisco) and 237 Kearny Street. Service of process agent: Michelle Silva Fernandes, 225 Bush Street Suite 1100, San Francisco—both were LendUp addresses during this period, before relocating to 1750 Broadway, Oakland. This filing proves CEO Sasha Orloff personally established and controlled the undisclosed entity that was never mentioned to LendUp shareholders.

Insights Servicing Virginia annual report with officersVirginia Annual Report (dated March 4, 2020) listing Blake Byers (Google Ventures partner) as Director alongside LendUp executives: President Anuradha Shultes, Chief Operating Officer Kimberly Morgan, CTO Kathleen Fitzpatrick, and Secretary Gizelle Barany. All officers listed at LendUp’s headquarters address (1750 Broadway Fl 3, Oakland, CA 94612). Total authorized shares: 100.

LendUp Global tax delinquent statusLendUp Global, Inc. (incorporated February 26, 2014) showing parallel abandonment: Status “Void, AR’s or Tax Delinquent” as of March 1, 2023, with last annual report filed in 2020. Total authorized shares: 372,129,965. Tax debt: $390,332. Both entities became delinquent within the same timeframe, suggesting coordinated abandonment.

Deceptive Marketing

This section documents: Systematic pattern across LendUp/Ahead/Kinly of progressive branding (“financial inclusion,” “Banker to the Poor”) weaponized to mask exploitation of exact communities featured in marketing, including false credit-building promises, failed reporting, and diversity theater.

LendUp

Various CFPB enforcement actions against LendUp are publicly available online:

  • False “LendUp Ladder” promises - Claimed customers would get lower rates and larger loans by repaying on time; instead charged 140,000 borrowers same or higher rates

  • Failed credit reporting - Advertised loans as “credit building” but didn’t report to credit bureaus until 2014 (launched 2012)

  • Violated Military Lending Act - Made 4,000+ illegal loans to 1,200+ service members exceeding 36% APR cap

  • Violated 2016 order - Continued same deceptive marketing after first enforcement action, prompting third lawsuit

  • Result - $40M paid to 118,000+ victims in 2024, company shut down in 2022

CFPB Final Judgment Provisions (December 21, 2021):

The CFPB Stipulated Final Judgment and Order (Case No. 3:21-cv-06945-JSC) imposed comprehensive permanent restrictions on LendUp Loans, LLC, f/k/a Flurish, Inc., d/b/a LendUp and its officers, agents, servants, employees, attorneys, and all persons in active concert with them.

Key facts:

  • Defendant: “LendUp Loans, LLC, f/k/a Flurish, Inc., d/b/a LendUp” - the consumer-facing brand, not “a subsidiary”
  • Relevant Period: October 1, 2016 through when LendUp ceased originating loans - fraud occurred during Sasha Orloff’s CEO tenure (2012-Dec 2018)
  • Violated 2016 consent order: Complaint alleges violations of “the Bureau’s 2016 consent order” - continued fraud while under federal supervision
  • Violations: CFPA §§ 1031(a) and 1036(a), ECOA, Regulation B, Military Lending Act
  • Scope: Permanent restrictions apply to officers, agents, employees, attorneys, and all persons in active concert with them who have actual notice

Prohibitions:

I. Prohibition on Lending Activities (Section I)

Defendant permanently restrained from:

  • Advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit
  • Receiving any remuneration or consideration from any person engaged in lending
  • Holding any ownership interest in any person engaged in lending
  • Assisting others in any of the above activities

II. Prohibition on Misrepresentations (Section III)

Full text from CFPB Final Judgment (PDF, Section III, Âś9):

“Defendant and its officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them who have actual notice of this Order, whether acting directly or indirectly, in connection with the advertising, marketing, promotion, offering for sale, or sale of credit, or the collection of consumer debt, may not misrepresent, and may not Assist Others in misrepresenting, expressly or impliedly, any fact material to consumers, including any material restrictions, limitations, or conditions of such credit or debt and the benefits or costs of borrowing.”

Key language analysis:

  • “any fact material to consumers” - extraordinarily broad prohibition, not limited to just credit terms
  • “Assist Others in misrepresenting” - extends to helping other entities make misrepresentations
  • “expressly or impliedly” - covers both direct lies and misleading omissions
  • “in connection with… advertising, marketing, promotion, offering for sale, or sale of credit” - applies to credit-related contexts

Potential applications:

  1. Partner Rewards Program: Puzzle’s affiliate program marketing credit products (Brex, Ramp, Mercury, Gusto) = “advertising, marketing, promotion” of “credit” → any misrepresentation in those promotions violates Section III

  2. “Assist Others in misrepresenting”: If Puzzle (or any portfolio company) misrepresents credit products to consumers, and Sasha is involved, that’s a violation

  3. Mission Lane advisory role: Any involvement in Mission Lane’s marketing or promotion of credit cards = covered by this prohibition

  4. Credit Karma referral funnel: Credit Karma → Mission Lane customer acquisition documented earlier → any misrepresentations in that funnel could implicate this section

Scope note: While scoped to credit/debt contexts, the prohibition on “any fact material to consumers” within those contexts is remarkably broad. Combined with “Assist Others,” this creates extensive liability for any involvement in credit product marketing across the portfolio.

How broad is “any fact material to consumers”?

Could this extend to photoshopped metrics (3 likes → 12,362), non-disclosure of CFPB ban, and general dishonesty to customers?

Argument for scope extension:

  1. “In connection with” is broad: The prohibition applies to facts material to consumers “in connection with the advertising, marketing, promotion… of credit”

  2. Pattern of material misrepresentations affecting credit marketing:

  3. Credibility is material to credit product recommendations: When Puzzle markets credit products through Partner Rewards (Brex, Ramp, Mercury, Gusto), consumers rely on Puzzle’s credibility to trust those recommendations

  4. “Expressly or impliedly”: Section III covers both direct misrepresentations AND misleading omissions. Not disclosing CFPB ban = material omission when marketing credit products

  5. The CEO’s trustworthiness is material: A CEO CFPB-banned for “repeatedly lying to consumers” now marketing credit products to consumers = material fact

  6. “Assist Others in misrepresenting”: If any of the credit products on Partner Rewards page make misrepresentations, and Puzzle’s credibility (built on photoshopped metrics + CFPB ban concealment) helps sell those products, that’s assisting in misrepresentation

The complete violation:

When Puzzle operates Partner Rewards:

  • Section I.b: Receiving affiliate fees from credit product companies (receiving remuneration)
  • Section I.c: Marketing credit products (performing marketing services = “Assisting Others”)
  • Section III: Marketing credit products while:
    • Photoshopping credibility metrics
    • Concealing CEO’s CFPB ban for consumer fraud
    • Pattern of resume fraud and misrepresentations
    • = Misrepresenting (impliedly through omission) material facts about trustworthiness of the entity recommending credit products

The irony: Section III prohibits misrepresenting “any fact material to consumers” in credit contexts. The CEO was CFPB-banned for “repeatedly lying to consumers” about credit. Now operating a credit product marketing platform (Partner Rewards) while concealing that ban = textbook “material fact” omission “in connection with” credit marketing.

The point: This isn’t attenuated. When a CFPB-banned CEO markets credit products to consumers while:

  • Concealing the ban
  • Photoshopping credibility metrics
  • Pattern of misrepresentations across multiple contexts
  • All while bound by permanent order prohibiting misrepresentations in credit contexts

…every one of those misrepresentations/omissions is “in connection with” the credit marketing he’s doing through Partner Rewards. Section III’s “any fact material to consumers” language covers exactly this: systemic dishonesty by someone marketing credit products who’s permanently banned from doing so.

III. Prohibition on Violations of Federal Consumer Financial Law (Section IV)

Defendant may not violate:

  • §§ 1031 and 1036 of the CFPA (12 U.S.C. §§ 5531, 5536)
  • Equal Credit Opportunity Act (ECOA) (15 U.S.C. §§ 1691–1691f)
  • Regulation B (12 C.F.R. § 1002.9(a)–(b))
  • Any other provision of “Federal consumer financial law” (12 U.S.C. § 5481(14))

IV. Customer Information Protection (Section V)

KEY EVIDENCE: Permanent Data Restrictions & Disclosure Concerns

CFPB Final Judgment Section V (full PDF) permanently prohibits:

“Defendant and its officers, agents, servants, employees, and attorneys and all other Persons in active concert or participation with any of them, who receive actual notice of this Order, whether acting directly or indirectly, may not:

a. disclose, use, or benefit from customer information, including names, addresses, telephone numbers, email addresses, social security numbers, other identifying information, or any data that enables access to a customer’s account (including a credit card, bank account, or other financial account), that Defendant obtained before the Effective Date in connection with the offering or provision of credit”

Key Points:

  1. Applies to LendUp customer data obtained before December 21, 2021 (all LendUp operations)
  2. Permanent prohibition - no expiration date
  3. Applies to “persons in active concert” who receive actual notice
  4. Sasha Orloff received actual notice as LendUp officer

Disclosure Concerns:

  • No public disclosure of CFPB ban to Puzzle investors, partners, customers, or employees
  • No public disclosure of how LendUp customer data was handled post-ban
  • No public disclosure of compliance measures or data segregation
  • Pattern: LendUp (consumer financial data) → Puzzle (startup financial data) - both providing access to customer financial accounts
  • Operating financial data platform while subject to permanent data restrictions raises questions about compliance oversight

CFPB Final Judgment Section V - Customer Information Section V “Customer Information” from CFPB Final Judgment (Case No. 3:21-cv-06945-JSC, December 21, 2021). Permanently prohibits Defendant’s officers from disclosing, using, or benefiting from customer information “that Defendant obtained before the Effective Date in connection with the offering or provision of credit.” Applies to all LendUp customer data. Sasha Orloff, as LendUp officer who received actual notice, now operates Puzzle Financial with access to startup financial data. No public disclosure of compliance with data restrictions or how LendUp customer data was handled. Full decree PDF.

Section V Prohibits:

  • Disclosing, using, or benefiting from LendUp customer information obtained before December 21, 2021
  • Attempting to sell, assign, or transfer any right to collect payment on LendUp Subject Loans
  • Exception: customer information may be disclosed if requested by government agency or required by law, regulation, or court order

Compliance Questions:

  • How was LendUp customer data handled after permanent ban?
  • Were compliance measures implemented to segregate banned data?
  • Should Puzzle have been disclosed to CFPB as entity requiring notification per Paragraph 32?
  • Is CFPB monitoring compliance with permanent data restrictions?

V. Monetary Relief (Section VI)

Judgment for monetary relief entered in favor of the Bureau and against Defendant in the amount of $40,500,000, for the purpose of providing redress to Affected Consumers in the amount of finance charges paid in connection with Subject Loans. Full payment of this judgment suspended upon satisfaction of obligations in Sections VIII and IX.

Why These Provisions Matter:

These comprehensive restrictions demonstrate the severity of LendUp’s violations and create permanent barriers to:

  • Re-entering consumer lending under new entities (Section I - Prohibition on Lending Activities)
  • Using LendUp customer data obtained before December 21, 2021 (Section V - Customer Information)
  • Making any misleading claims in financial services (Section III - Prohibition on Misrepresentations)
  • Violating any federal consumer financial law (Section IV)

The Section V data restrictions raise ongoing questions: The decree permanently prohibits LendUp officers from using customer data “that Defendant obtained before the Effective Date in connection with the offering or provision of credit.” This means:

  1. All LendUp customer data is permanently off-limits (company ceased operations January 2022)
  2. No public disclosure of how this data was handled post-ban
  3. Same CEO now operates financial data platform (Puzzle - startup accounting data) with no transparency about compliance with data restrictions
  4. Pattern concern: LendUp (consumer lending data) → Puzzle (startup financial data) → both involve accessing customer financial accounts

Sasha Orloff continued involvement in consumer credit ecosystem through Theorem Technology investment (2014-2024) throughout the ban, and launched Puzzle (2019-present) providing access to different customer financial data (“syncing with OpenAI”) while subject to permanent restrictions on LendUp customer data with zero public disclosure of compliance measures.

“Banker to the Poor” Narrative in Federal Regulatory Comments (2014):

Seven years before the CFPB permanent shutdown, CEO Sasha Orloff voluntarily submitted FCC reply comments (August 5, 2014) on net neutrality proceedings (“Protecting and Promoting the Open Internet”), using unrelated FCC rulemaking as platform to repeat the “Banker to the Poor” narrative in official federal regulatory record:

“LendUp began ten years ago when I read Dr. Muhammad Yunus’ book Banker to the Poor about his work providing safe access to credit in order to help people improve their lives… This left me with a strong desire to use these lessons to provide a market alternative for the one in eight working Americans who take out a payday loan every year… Our values center on transparency, dignity and access… We have created an online lending platform that changes the dynamics of a payday loan from what can be the first step into a debt trap to an opportunity to build credit and learn the benefits of responsible financial behavior.”

This narrative—emphasizing “transparency,” “dignity,” and credit building—was directly contradicted by CFPB findings seven years later:

  • Systematic deception of 140,000+ consumers
  • False credit-building promises
  • Failure to report to credit bureaus until 2014 (two years after launch)

The “Banker to the Poor” positioning persisted through the 2013 TEDx talk, 2016 Google Ventures defense, 2017 Forbes articles, and into the CFPB shutdown. This demonstrates how progressive branding was weaponized to mask predatory practices.

CFPB Permanent Shutdown (December 2021):

“LendUp was backed by some of the biggest names in venture capital. We are shuttering the lending operations of this fintech for repeatedly lying and illegally cheating its customers.”

- CFPB Director Rohit Chopra, December 21, 2021

Sasha’s Minimization to Puzzle Employees (January 2022):

The CFPB shutdown was immediately discussed on Hacker News (December 22, 2021). During Puzzle’s January 2022 offsite (weeks after the CFPB ban), coworker Tyler Geery informed me about the Hacker News article. According to Tyler, Sasha Orloff told him the CFPB shutdown was “not a big deal” and “just a result of Obama’s changes in loan regulations.”

This minimization came weeks after CFPB Director Rohit Chopra publicly stated LendUp was being shut down for “repeatedly lying and illegally cheating its customers.” The offsite provided a controlled environment to deliver this narrative to the entire team after the ban became public.

Behind the Public Narrative:

While Sasha presented a dismissive, controlled narrative to Puzzle employees (“Obama-era regulations,” “not a big deal”), people closer to him at the time reported observing a “fragile emotional state” over the following year - suggesting he understood the severity despite his public minimization to employees.

Verbal Admission of Ban (Conscious Concealment):

During Puzzle employment (2020-2023), Sasha verbally told employees he was “not allowed to work in loans anymore” but never elaborated on why. He mentioned having ideas he “wished other people would do” - suggesting awareness of the permanent CFPB ban but deliberate concealment of:

  • What the ban was for: Systematic fraud against 140,000+ consumers
  • That it was permanent: CFPB Director’s public statement about “repeatedly lying and illegally cheating”
  • The federal enforcement basis: Multiple CFPB violations, Military Lending Act violations
  • Why he couldn’t disclose: Admitting fraud would undermine investor/partner relationships

This proves consciousness of the ban while actively concealing it from:

  • Public profiles (LinkedIn, company bios)
  • Investors and board members
  • Partnership targets (Brex, Deel, Gusto, CPA.com)
  • Media (Forbes, TechCrunch, The Information)

The casual “not allowed to work in loans anymore” admission to employees, combined with “wished other people would do” phrasing, suggests awareness he was operating adjacent to banned activity through proxy (Puzzle as financial data infrastructure processing loan/banking data).

Why This Misrepresentation Matters:

  • CFPB’s actual findings: Systematic deception of 140,000+ consumers, false credit-building promises, violation of 2016 consent order, Military Lending Act violations
  • Sasha’s characterization to employees: “Obama-era regulatory technicality,” “not a big deal”
  • Sasha’s admission to employees: “Not allowed to work in loans anymore” (acknowledges ban exists)
  • Sasha’s public disclosure: None. Zero mention of permanent federal ban on any public profile or in any partnership discussion
  • Private reality: “Fragile emotional state” observed by those closer to him throughout 2022
  • Pattern: Public minimization while privately experiencing distress - demonstrates consciousness of severity while deliberately misleading employees
  • Timing: I was hired at Puzzle in October 2020, 14 months before the shutdown; Sasha was actively downplaying his CFPB-banned status to employees throughout my tenure
  • Calculated venue: This occurred at a company offsite (January 2022, weeks after December 2021 CFPB ban) - a controlled environment where:
    • All employees were captive audience away from the office
    • Sasha could deliver consistent narrative to entire team simultaneously
    • Informal setting made it seem like casual conversation, not official damage control
    • Employees least likely to challenge CEO during team-building event
    • Timing weeks after announcement allowed Sasha to frame the narrative before employees formed independent opinions, while making it seem casual rather than crisis management
  • Strategic narrative control: Using company offsite to frame federal shutdown as regulatory technicality demonstrates consciousness of guilt and deliberate suppression strategy

LendUp.com Continues Operations 35+ Months After Federal Ban:

Rather than letting the domain expire after permanent CFPB shutdown (December 2021), LendUp.com remains active as a loan referral portal directing consumers to high-interest tribal lenders. As of November 2025, the site is operated by INFiN (a Financial Services Alliance)—the payday lending industry’s primary lobbying organization representing 350+ payday lending companies operating 8,000 locations. INFiN is the rebranded merger of Financial Service Centers of America (FiSCA) and Community Financial Services Association of America (CFSA), whose mission is to rebrand predatory lending as “innovative consumer financial services.”

The Forbes Credibility Shield:

The site prominently displays the Forbes logo, leveraging credibility from CEO Sasha Orloff’s 3 Forbes Finance Council articles published in 2017—a year after LendUp’s first CFPB violation and one year before the $29M fire sale to Mission Lane. The Forbes branding appears alongside a generic loan referral widget that lists LendUp’s old San Francisco address and defunct phone number, creating an illusion of legitimacy while funneling consumers to tribal lenders exempt from state consumer protection laws.

Forbes logo on banned LendUp websiteForbes logo prominently displayed on LendUp.com, 35+ months after CFPB permanent ban. Site lists defunct contact information while operating as loan referral portal under payday lending lobby control.

Why This Infrastructure Matters:

  • Domain authority preserved: 13+ years of SEO rankings, backlinks, and search visibility maintained
  • Media credibility weaponized: Forbes branding provides legitimacy to tribal lender referrals
  • Industry control: Payday lending lobby (INFiN) ensures domain continues directing consumers to high-interest lenders rather than expiring
  • Pattern: Similar to Kapor Capital’s portfolio scrubbing—control the narrative post-failure by transferring assets to entities that continue operations under euphemistic branding

Someone ensured LendUp.com remained active under the industry trade association that lobbies against consumer protections, maintaining web presence and Forbes branding to continue directing consumers to predatory lenders. Infrastructure maintenance, not abandonment.

The updated website notably used the phrase “When Life Gives You Lemons, Make Lemonade!” and revised it when I pointed out how tongue-in-cheek it seemed in my investigative journalism.

The website retains a blog post documenting a Q&A with Sam Altman (YC president 2014-2019): “On AI, the Future of America, and Being Gay in Tech.” In his 2017 YC Annual Letter, Altman praised as a YC company “innovating in financial services technology.”

Timeline of Sam Altman’s LendUp Support:

  • March 2015: Sasha Orloff publicly identified as Netanyahu financial backer (one year before first CFPB violation)
  • September 2016: LendUp first CFPB violation ($6.3M penalty for deceptive marketing, false promises)
  • April 2017: Sam Altman attends LendUp “LGBTQ + Allies” event (after first CFPB violation, before second)
  • 2017: Sam Altman’s YC Annual Letter praises LendUp as “innovating in financial services technology” (7 months after first CFPB violation)
  • May 2018: LendUp second CFPB violation (additional penalties)
  • 2014-2024: Altman Family LLC co-invests with Orloff in Theorem Technology (consumer credit asset management) throughout CFPB violations and permanent ban

Pattern: YC President publicly praised CFPB-violating company as “innovating” while his family LLC maintained co-investment with CEO in consumer credit (Theorem). Financial alignment, not ignorance.

Y Combinator’s Continued Platforming Despite Notification:

Y Combinator’s LendUp page states: “Prior to Puzzle, I founded two startups that grew to over $100M ARR, LendUp and (spinout) Mission Lane (YC W12).” I notified Y Combinator of these false founder claims and social washing documentation in August 2023 (subject: “wtf happened at lendup”). The page remains unchanged despite corporate records proving Sasha Orloff was hired as an advisor to Mission Lane post-acquisition, not a founder, and LendUp’s CFPB shutdown resulting in $0 to shareholders.

LendUp’s Deceptive Marketing Infrastructure:

LendUp positioned itself as solving credit invisibility through an op-ed co-authored by Jake Rosenberg in the New York Times, stating: “Meaningful data such as on-time rent and bill payments, or even payday loan repayments, do not make it into traditional credit bureau data files.” LendUp then displayed this quote prominently on their homepage with the New York Times logo, using it as validation of their mission—despite the CFPB later documenting that LendUp failed to report to credit bureaus until 2014 (two years after launch) and charged 140,000+ borrowers the same or higher rates despite promises of credit building through the “LendUp Ladder.”

Self-referential quote with misleading attributionSelf-referential quote by LendUp CTO Jake Rosenberg with misleading New York Times attribution. LendUp displayed this prominently on their homepage with the NYT logo to validate their “credit building” mission—despite CFPB documenting they failed to report to credit bureaus until 2014 (two years after launch) and charged 140,000+ borrowers the same or higher rates despite LendUp Ladder promises.

Ahead Financials (incorporated April 2020) was a related “subsidiary” of LendUp which relied on pump-and-dump referral schemes and other questionable campaigns. Vague merger/acquisitions through common investors, as documented by Jason Mikula, were used to present a “successful exit” for various LendUp executives.

The shareholder documents justified the $29M fire sale by stating the credit card business “has had a negative impact on the Company’s loans business, the Company’s balance sheet, and the overall financial condition of the Company” and that management “sought, but has not succeeded in securing, additional equity financing.”

Roughly two years later, Ahead Financials launched, requiring:

  • Banking partnerships (they worked with Bancorp)

  • Regulatory approval

  • Capital reserves mandated by banking regulations

  • Operational funding, including marketing

If the credit card business was truly unfundable and “dragging down” LendUp, the existence of a funded credit card subsidiary immediately after the fire sale contradicts the stated rationale for selling shareholders’ equity for $0.

LendUp hired crisis PR firm Archie Group during its regulatory troubles. The firm “led a public change management initiative and raising new CEO’s profile” for LendUp.

The media strategy worked. Ahead received glowing coverage as an independent, women-led fintech startup, with features in MEFeater and Modern Luxury profiling the CEO and COO without mentioning LendUp. Archie Group lists LendUp and Ahead as separate clients, consistent with Ahead operating independently despite being announced as a LendUp subsidiary.

AheadMoney.com’s remaining “blog” was last updated August 2023, also notably at the end of my research.

Ahead Financials California LLC filingCalifornia LLC-12 filing for Ahead Financials, LLC (filed March 29, 2021, Delaware entity #202024110747). Manager listed as Anuradha Shultes at 1750 Broadway, Suite 300, Oakland, CA 94612 - the same LendUp headquarters address and same executive who served as President of Insights Servicing. Type of business: “Digital Banking.” Registered agent: VCORP Services CA, INC. (same agent used by Insights Servicing and LendUp). This filing demonstrates the interconnected network of entities controlled by LendUp executives, all sharing the same physical address and registered agent.

FirstBoulevard and Kinly: Continued Exploitation Post-Shutdown

This section documents: Post-CFPB shutdown entity shuffling through Kinly/Greenwood acquisitions, fake acquisition announcements claiming “solid reputation” for permanently barred company, continued false claims 16 months after federal ban.

The pattern of creating new entities to exploit vulnerable communities continued even after CFPB enforcement and liquidation. FirstBoulevard, a digital banking platform “primarily targeting the African American community,” became entangled in the LendUp network through domain acquisitions and corporate shuffling.

The Timeline:

  • May 2020: FirstBoulevard started
  • September 8, 2021: CFPB sued LendUp for violating 2016 order
  • September 10, 2021: bekinly.com registered (2 days after CFPB lawsuit)
  • June 17, 2022: Kinly launched app; FirstBoulevard.com redirected to it
  • June 24, 2022: LendUp CEO signed ABC liquidation paperwork (7 days after Kinly launch)
  • BeKinly acquired LendUp’s Ahead subsidiary during liquidation
  • March 19, 2023: USPTO notice of default in trademark opposition (Kinly Holding B.V. v. Be Tenth, Inc., Opposition No. 91283091)
  • March 28, 2023: Pennsylvania Department of Revenue tax judgment against Kinly Inc ($5,987.77, Case 2023-02549)
  • April 18, 2023: FirstBoulevard.com redirects to lendup.com/first-boulevard with fake “acquisition announcement”
  • May 2, 2023: Greenwood announces acquisition of Kinly (35 days after tax judgment, while still unresolved)
  • June 2, 2023: Authority to satisfy PA tax judgment filed (31 days after acquisition announcement)

The Fake Acquisition Announcement (April 2023) states:

“LendUp, a pioneer in the online lending industry, today announced its acquisition of the FirstBoulevard.com domain which used to be part of First Boulevard, a financial services company offering banking options for Black America.”

This announcement appeared 9 months after the CFPB shut down LendUp (December 2021) and 10 months after LendUp’s liquidation (June 2022). The page describes LendUp as offering “transparent terms and no hidden fees” - directly contradicting CFPB findings that LendUp “repeatedly lied to consumers” and defrauded 140,000+ people.

The announcement continues:

“As a testament to its commitment to responsible lending practices, LendUp has established a solid reputation for offering a wide range of payday loan options with transparent terms and no hidden fees.”

This statement was published in April 2023, 16 months after the CFPB permanently banned LendUp from issuing consumer loans for systematic fraud.

AheadMoney.com Timeline:

  • August 7, 2019: Wayback Machine captures “coming soon” page - 16 months before official December 2020 announcement
  • December 2020: Ahead Financials officially announced as LendUp subsidiary
  • May 2021: Ahead launched
  • June 2022: Ahead closed operations during LendUp liquidation
  • September 2022: AheadMoney.com DNS migrated to GoDaddy (same registrar as new LendUp.com shell site)
  • November 2022: Site pivoted to fake “Jon Allen” financial advisor blog with SEO spam

The Pattern:

  • Create entities targeting vulnerable communities (Ahead, FirstBoulevard) using progressive branding
  • Multi-entity corporate structures (Kinly Inc, Kinly Holding B.V.) complicate accountability and asset tracing
  • Register domains and plan operations months before public announcements
  • When CFPB enforcement arrives, shuffle entities through acquisitions and rebrands (Ahead acquired by Kinly, Kinly acquired by Greenwood May 2, 2023)
  • Continue operations through legal proceedings (March 19: USPTO trademark opposition; March 28: PA tax judgment) until acquisition 35 days later—tax judgment satisfied June 2 (31 days post-acquisition)
  • Maintain domain control and create fake “acquisition announcements” to obscure fraud history
  • Use “financial inclusion” and minority-focused marketing while systematically exploiting those communities
  • Post-shutdown, continue operating shell sites with false claims about “responsible lending” and “transparent terms”

Greenwood (which acquired Kinly in 2023) faced its own documented struggles:

  • California cease-and-desist for falsely calling itself a “bank” (December 2022)
  • Gathering Spot lawsuit alleging “financial disarray” (July 2023, settled August 2023)
  • Layoffs and executive departures
  • Only 150,000 of 700,000 waitlist converted to accounts despite raising millions from JPMorgan Chase, Bank of America, and Wells Fargo
  • The Gathering Spot regained control in December 2023 after the failed acquisition

The pattern of shuffling troubled neobanks through acquisitions creates a shell game where victims lose access to funds and accountability disappears into corporate restructuring. Greenwood’s post-Floyd capital influx enabled an acquisition spree rather than sustainable banking infrastructure, demonstrating how “financial inclusion” rhetoric masks systematic exploitation.

The FirstBoulevard.com fake acquisition announcement demonstrates continued fraudulent misrepresentation even after regulatory shutdown. The announcement claims LendUp has “established a solid reputation” for “responsible lending practices” while the company was permanently barred from consumer lending for systematic fraud.

Rolling Loud v. Ahead Financials: $1.575M Sponsorship Fraud

This section documents: $1.575M vendor fraud through shell company network (Fairfax Studios Inc. + Thirty Two West LLC); $2.5M contract signed 7 days after Fairfax incorporation (Thirty Two West pre-existing 14 months earlier); Anu’s sworn testimony admitting $800K wire to entities treated as interchangeable; lavish diversity theater campaign masking systematic exploitation of exact communities featured in marketing.

February 21, 2022: Rolling Loud, LLC filed a lawsuit in Miami-Dade County Circuit Court (Case No. 2022-003284-CA-01) against Ahead Financials, LLC and Fairfax Studios, Inc. for breach of contract, unjust enrichment, and conversion totaling $1.575 million in unpaid sponsorship fees ($1.375M under sponsorship agreement + $200K for livestream benefits).

Court Records:

📄 Rolling Loud v. Ahead Financials - UniCourt Case File - Full case docket and documents (login required)

📄 Rolling Loud v. Ahead Financials (PDF)

📄 Motion for Final Default Judgment (PDF) - Includes Anu’s sworn affidavit

Corporate Status:

Ahead Financials, LLC - California branch:

  • Company Number: 202024110747
  • Incorporated: August 26, 2020
  • Dissolution Date: April 1, 2025
  • Status: Forfeited Ftb (Franchise Tax Board forfeiture for unpaid taxes)
  • Branch of: Ahead Financials, LLC (Delaware)
  • Registered Address: 1750 Broadway, Suite 300, Oakland, CA 94612 (LendUp address)
  • Manager: Anuradha Shultes

Critical: Entity remained registered 3 years after Rolling Loud judgment (February 2022) until tax forfeiture April 2025. During this period, CEO Anuradha Shultes incorporated DashFi Inc. (DBA DashAi) in September 2022, same address, currently operating AI-powered auto lending in Beta.

Rolling Loud v. Ahead Financials complaint header

Rolling Loud v. Ahead Financials complaint filed February 21, 2022, 11th Judicial Circuit Court, Miami-Dade County, Complex Business Division

Sponsorship agreement payment terms

Sponsorship agreement payment terms: $1,000,000 due within 5 days of execution; $375,000 due September 8, 2021; additional payments for 2022 festivals

Sponsorship benefits and market value

Benefits provided to Ahead Financials: on-site activations, VIP access, social media promotion, artist interviews. Total market value: $1,300,000

Nonpayment timeline and communications

Nonpayment timeline: September 29, 2021 - Rolling Loud contacted Ahead directly about unpaid fees; Ahead confirmed payment sent to Fairfax Studios, promised follow-up. October 6, 2021 - Ahead “expressed shock” at non-payment, assured contact soon. October 13 and November 5, 2021 - Rolling Loud follow-ups, no response. Ahead was exclusive “Digital Financial Platform” sponsor for Miami, NY, and CA events but received no benefits for NY/CA events due to nonpayment; Rolling Loud unable to secure replacement sponsor

Contract signatures by Marvin Bing

Contract signatures: Marvin Bing signed as “Founder + CCO Fairfax Studios” on behalf of Ahead Financial, LLC on June 14, 2021

Final judgment $800,000 against Fairfax

Final judgment entered May 23, 2022: $800,000 awarded to Rolling Loud against Fairfax Studios for unjust enrichment and conversion. Fairfax Studios defaulted (failed to respond to lawsuit). Hon. Michael Hanzman, Circuit Court Judge.

📄 CFPB Final Judgment (PDF)

The Pattern:

May 17-26, 2021: Ahead launches lavish “Ahead for All” campaign (official PR Newswire release May 26; Hypebeast coverage May 20) 19-28 days before $2.5M Rolling Loud contract:

  • AR experience by Iddris Sandu (worked with Nipsey Hussle, Kanye West) for app access and giveaways
  • Raffle prizes including “VIP round trip experience to Rolling Loud” - establishing Ahead/Rolling Loud relationship predated formal contract
  • “Ahead for All” commercial (uploaded May 17, 2021; 484 views) titled “Formula” campaign “directed and produced by Fairfax Studios head Marvin Bing” featuring Nike SB pro skater Theotis Beasley, Human Athlete & skateboarder Isiah Hilt, model and creative director Beija Velez, celebrity stylist Ugo Mozi, BMX athlete Bike Life Rex, visual artist Distortedd - diversity theater showing people pulling out Ahead cards, using Ahead app, pursuing creative dreams while wanting to “cover expenses and further their careers” - commercial uploaded 3 days before Hypebeast article, 28 days before Rolling Loud contract; 484 views demonstrate minimal organic reach despite lavish production spending
  • “Ahead For All: The Docu-Series” directed by Armani Martin
  • NBA 2K Tournament (May 24) streamed on Spawn on Me’s Twitch with in-person watch party at the Parlor (Los Angeles), DJs Coco + Breezy, performances from Flo Milli, Kamaiyah, Guapdad 4000
  • Music BREAKr contest with $250,000 commitment to help musical creatives open digital bank accounts
  • Fashion capsule collection with Lauren Halsey, Coco + Breezy; two-day LA pop-up (May 21-22); proceeds to Gameheads of Oakland, Lauren Halsey’s Summa Everythang Community Center, Streetcode Academy of Silicon Valley
  • Clubhouse event with Karen Civil (May 26)
  • Official corporate messaging (PR Newswire May 26, 2021):
    • Anu Shultes (CEO): “Financial inclusion is a very real issue and a struggle that millions of Americans and I, as an immigrant, know all too well. As someone who understands the financial needs of underserved customers first hand, I have made it my personal and professional mission to help every American have access to a safe and healthy financial system.”
    • Kimberly Morgan (COO and Head of People): “We’re flipping the script to connect with customers on both cultural and personal levels through a mix of immersive and interactive experiences that puts the financial health conversation in context with their everyday lives and interests. Ahead offers customers access to the financial tools they need to make their money work for them, not the other way around.”
    • Campaign described as “rooted in the company’s mission to help all people create financially secure futures”
    • Emphasized “universally inclusive digital banking and financial health platform founded on a mission to help everyone get on a path to better financial health”

Pattern demonstrates: Official corporate narrative emphasized “financial inclusion,” “underserved customers,” “safe and healthy financial system,” and tools to “make their money work for them” while simultaneously:

  • Launching multi-million dollar influencer/celebrity campaign before securing $2.5M Rolling Loud sponsorship
  • Excessive spending on giveaways, celebrity appearances, fashion collaborations, and event activations while parent company LendUp faced CFPB enforcement
  • Using “Ahead for All” progressive messaging to target underserved communities (Oakland, South Central LA, Silicon Valley nonprofits)
  • Within weeks, customers reporting unpaid referral bonuses and account lockouts (August 4, 2021 complaints)
  • Building toward $1.575M Rolling Loud vendor fraud
  • Corporate messaging weaponized diversity and “financial inclusion” rhetoric to mask systematic exploitation of exact communities featured in campaign

June 7, 2021: Fairfax Studios, Inc. incorporated in Delaware (7 days before Rolling Loud contract)

June 14, 2021: Fairfax Studios, LLC “o/b/o Ahead Financial, LLC” signed $2.5M sponsorship agreement for Rolling Loud festivals (Miami, New York, Los Angeles 2021-2022). Marvin Bing signed as “Founder + CCO Fairfax Studios.”

Payment Schedule (Section 3.a):

  1. $1,000,000 due within 5 days of execution (June 19, 2021)
  2. $375,000 due September 8, 2021
  3. $375,000 due 90 days before Rolling Loud Miami 2022
  4. $375,000 due 90 days before Rolling Loud New York 2022
  5. $375,000 due 90 days before Rolling Loud Los Angeles 2022

What Ahead Financials Received (Miami Event, July 23-25, 2021):

  • Exclusive “Digital Financial Platform” category sponsorship
  • Two activation footprints (125’x35’ skatepark, 100’x50’ basketball court)
  • Back-of-house activation space (20’x10’)
  • “Ahead of the Crowd” branded fast lane entrance
  • VVIP table at Loud Club with $10,000/day in complimentary bottles/food (3 days = $38,550 total value)
  • Festival pass bank valued at $60,900 (upgraded from $40,000 contracted)
  • Ahead-branded ATMs throughout festival grounds
  • Social media campaign inclusion
  • Livestream advertising ($200K additional, separate from contract)
  • Total Miami Event Benefits Provided: approximately $1,300,000

What Rolling Loud Received: $0

The Timeline of Deception:

  • June 19, 2021: First payment ($1M) due - not received
  • July 23-25, 2021: Rolling Loud Miami proceeds despite non-payment, based on Fairfax Studios’ “assurances that Rolling Loud would receive the payments from Ahead Financials shortly after the conclusion of the festival”
  • September 8, 2021: Second payment ($375K) due - not received. Rolling Loud suspends sponsorship rights for future festivals.
  • September 29, 2021: Rolling Loud contacts Ahead Financials directly. Ahead confirms “payment for the sponsorship had been made directly to Fairfax Studios”
  • October 6, 2021: Ahead repeats to Rolling Loud that it “had paid Fairfax Studios directly for the sponsorship fees” and “expressed shock at having learned that Rolling Loud had not received a payment”
  • October 13, November 5, 2021: Rolling Loud follows up - no response from Ahead Financials
  • February 21, 2022: Rolling Loud files lawsuit

The Default Judgment:

  • March 30, 2022: Default entered against Fairfax Studios (company failed to respond to lawsuit)
  • May 23, 2022: Miami-Dade Circuit Court Judge Michael Hanzman entered Final Judgment of $800,000 against Fairfax Studios, Inc. for unjust enrichment (Count III) and conversion (Count IV). Ahead Financials was not included in this judgment.
  • June 17, 2022: Kinly launched app (25 days after judgment); FirstBoulevard.com redirected to Kinly
  • June 24, 2022: LendUp CEO signed liquidation paperwork (32 days after judgment, 7 days after Kinly launch)

The judgment proved the shell company network: Fairfax Studios (incorporated June 7, 2021, 7 days before signing the $2.5M contract) treated as interchangeable with Thirty Two West LLC (incorporated April 10, 2020, 14 months earlier) in Anu’s sworn affidavit; Fairfax defaulted rather than defend itself. The company had no assets to satisfy the $800K judgment—corporate records show it became tax delinquent in March 2023 with only $408.78 in unpaid taxes. The entities existed solely as payment intermediary and liability buffer network.

The coordinated timing demonstrates the shell game in action:

  • May 23: Judgment entered against Fairfax Studios ($800K)
  • June 17: Kinly launched (rebranding from Ahead)
  • June 24: LendUp liquidated

Fairfax took the legal hit, Ahead escaped judgment, customers transferred to Kinly—all within 32 days. Rolling Loud’s $800K judgment went uncollected while the fraud network continued operating under new branding.

The Allegations:

Count III & IV (against Fairfax Studios): Unjust enrichment and conversion - “Upon information and belief, Ahead Financials has remitted payment to Fairfax Studios for Rolling Loud’s performance” and “Fairfax Studios has wrongfully kept and continues to keep those funds from Rolling Loud”

The Middleman Scheme: Fairfax Studios operated as Ahead’s “agent” (per contract: “Fairfax Studios, LLC o/b/o Ahead Financial”), collected money from Ahead Financials, never remitted to Rolling Loud, then both companies claimed confusion about where the money went.

Ahead Financials closed operations June 2022 - 4 months after lawsuit filed, 11 months after taking $1.3M+ in Rolling Loud sponsorship benefits without payment.

Fairfax Studios, Inc. corporate status (Delaware File #5976860):

  • Incorporated June 7, 2021 (7 days before signing Rolling Loud contract)
  • Last annual report filed: 2021
  • Status as of March 2, 2023: “AR Delinquent, Tax Due”
  • Tax debt: $408.78
  • Shell company network (Thirty Two West LLC + Fairfax Studios Inc., both Marvin Bing) shared the same incorporation timing pattern as entities created for the LendUp → Mission Lane → Ahead shell game: pre-existing entity (Thirty Two West, April 2020) + transaction-specific entity (Fairfax, June 2021, 7 days before contract)

Pattern Connections:

  1. Ahead Financials (LendUp subsidiary) operated May 2021 - June 2022
  2. Rolling Loud sponsorship executed June 2021, benefits delivered July 2021, $0 paid
  3. Fairfax Studios incorporated June 2021 (week before contract), operated as payment intermediary
  4. Mission Lane and Puzzle Financial both sent cease-and-desist letters August 11, 2023 (same day) for whistleblower documentation
  5. Marvin Bing (Fairfax Studios founder) used progressive/diversity branding similar to Ahead Financials’ POC-focused marketing

The lawsuit demonstrates the operational pattern: create progressive-branded entity, sign major contracts, take benefits, fail to pay, blame intermediary, liquidate, move to next entity.

Ahead Financials’ Final Act: The entity that stole $1.575M from Rolling Loud closed 4 months after the lawsuit, leaving customers unable to access funds before acquisition by Kinly (later Greenwood, which faced its own lawsuit July 2023).

November 19, 2025: Rolling Loud Notification

Sent comprehensive email to Rolling Loud documenting:

  • Their $1.575M judgment as part of 13-year fraud pattern
  • Anu Shultes’ background (LendUp CEO during CFPB shutdown)
  • New entity: DashFi/DashAi (same CEO, AI-powered auto lending, active Beta)
  • Link to full documentation including their court records
  • Context: 4 SEC whistleblower complaints, federal documentation

November 21, 2025 (2 days later): Court Docket Activity

Rolling Loud court docket activity November 21, 2025 UniCourt docket for Rolling Loud v. Ahead Financials showing activity on 11/21/2025, two days after notification email sent to Rolling Loud. Last prior docket activity was December 12, 2023 (judge reassignment) - nearly 2 years dormant. Timing suggests Rolling Loud may have reviewed case status or taken action after receiving documentation of broader fraud pattern and notification that same CEO now operates new lending company (DashAi, active Beta).

Fairfax Studios: Amnesty International & NAACP Credentials Weaponized for Fraud

This section documents: Amnesty International Director of Art + NAACP membership weaponized as credibility buffer; human rights organization credentials used to operate shell company network serving as payment intermediary for $1.575M vendor fraud; civil rights branding masking systematic exploitation.

Marvin Bing (Fairfax Studios founder, shell company operator) held prominent human rights organization roles:

  • Director of Art, Amnesty International
  • NAACP member

Jotaka Eaddy (LendUp advisor) was also an NAACP member.

Both lent civil rights and human rights organization credibility to entities systematically defrauding the communities they claimed to serve.

Fairfax Studios described itself as a “purpose driven creative agency + experiential studio built at the intersection of culture & social impact” - the exact branding formula used by LendUp (“Banker to the Poor”), Ahead Financials (POC-focused neobank), and Mission Lane (“financial access”).

The Pattern:

  • Jotaka Eaddy: NAACP member, LendUp advisor during period when company defrauded 140,000+ consumers
  • Marvin Bing: NAACP member, operated shell company network - Thirty Two West LLC (April 2020) + Fairfax Studios Inc. (June 2021, 7 days before Rolling Loud contract); operated as payment intermediary in $1.575M fraud scheme
  • Ahead Financials: Contracted with Fairfax Studios for Rolling Loud sponsorship; Anu testified under oath Ahead wired $800K to “Fairfax Studios, Inc. a/k/a Thirty Two West, LLC” - treating two separate entities as interchangeable; neither remitted to Rolling Loud
  • Fairfax Studios: Tax delinquent March 2023 (same abandonment timeline as LendUp entities); defaulted on $800K judgment rather than defend

The use of NAACP membership and “culture & social impact” branding wasn’t incidental - it was infrastructure designed to access vulnerable communities, deflect regulatory scrutiny, and create liability buffers through shell companies with progressive credentials.

Rolling Loud’s lawsuit (February 2022) exposed the operational pattern: Ahead Financials told Rolling Loud they’d “paid Fairfax Studios directly,” Fairfax Studios never remitted payment, both companies became delinquent within months. Anuradha Shultes’ sworn testimony admitted $800K wire to “Fairfax Studios, Inc. a/k/a Thirty Two West, LLC” - treating two separate legal entities as interchangeable. Marvin Bing’s shell company network (Thirty Two West established April 2020, Fairfax incorporated 7 days before contract) served as payment intermediary/plausible deniability buffer for $1.575M in sponsorship fraud targeting a hip-hop festival audience - the same demographic Ahead Financials marketed to with POC-focused branding.

Toxic Workplace Pattern: 13 Years Across Three Companies

Glassdoor reviews document a consistent pattern of employee exploitation and toxic culture across LendUp (2012-2022), Mission Lane (2018-present), and Puzzle (2019-present):

LendUp (2012-2022): Call Center Wage Exploitation

The “Account Manager” Deception:

  • Roles marketed as “Account Manager” were actually call center positions at poverty wages
  • $15/hour (fast food wages) for college graduates
  • Job descriptions promised “Client Relationship Management System,” “catch bugs,” “provide feedback to UX and product”
  • Reality: “All you do is put on a headset and get yelled at by random people” - 8 hours/day of back-to-back calls from distressed subprime borrowers
  • Multiple reviews describe being “grossly mis-sold the role,” “tricked into working in a call center,” discovering the truth “shortly after on-boarding”

Call Center Conditions (Richmond, VA Office):

  • Metrics broadcast on “large flat screens” in real-time, publicly comparing workers (“why did Person X make 110 calls today; he usually makes 150”)
  • Too many calls to take bathroom breaks without feeling guilty
  • “Micromanagement” and “asinine gossip” from inexperienced managers
  • “Disparaging… the loudest yes men in the room got promotions over the hardworking, diligent, smart, and capable ones”
  • “You are merely a customer service representative no matter what key attributes or skills you walk in the door with”

Glassdoor Excerpts (2016-2020):

“I was grossly mis-sold the role of ‘Account Manager’ when I interviewed… The role was presented as though I was being hired to help build out a Client Relationship Management System, to catch bugs, and provide feedback to UX and product. However, shortly after on-boarding, I realized that I’d been tricked into working in a call center where I was judged on how many calls/emails I could get through in a day” (January 2017)

“At the end of the day, it’s a call center job. Pay is extremely low, especially for utilizing some very bright fresh graduates. Favoritism is very apparent in the office” (January 2017)

“If you can check your brain at the door and turn into a robot between the hours of 8-6, YOU HAVE FOUND YOUR CALLING! Just don’t let yourself be fooled that you’re getting your foot in the door of a tech company with room for advancement.” (January 2017)

“Embarrassing low pay-like fastfood worker low. This was brought up as an area of concern for employees so many times, and the literal answer one time was ‘lower your expectations’” (November 2017)

“Not even on the pole; you’re the hole in the ground they stick the pole in” (December 2017, describing Richmond call center workers’ status in company hierarchy)

“While partnering with a company like Walmart does financially benefit LendUp, it is important to remember, that as a company, Walmart is completely contrary to what LendUp stands for. Many people who work for Walmart are on government assistance because the company refuses to pay them a living wage and decent benefits. The result is a workforce that is forever reliant on Walmart’s low prices. Partnering with them, does not say much for the integrity of the mission.” (October 2018)

“Every dollar less paid to the front line teams is of course a dollar more in the pockets of exec team.” (November 2018)

“Why would make the pay so low that your own employees need your services. Bad lunches and a case of avocados don’t pay my bills.” (November 2018)

“Toilet is flooding every other day and there is poop on the floor” (March 2020, SF office)

Leadership Failures & Layoffs:

  • October 2018 layoffs: 5 weeks prior, employees told “cut backs would be made, but we didn’t have to worry about people losing their jobs and that it wouldn’t come out of nowhere. It came out of nowhere. Not cool.”
  • “Lack of transparence and trust… No document or whatsoever of driving business requirement… Everything is in ad hoc mode” (March 2020)
  • “Employees are actively encouraged to disassociate from one another which leads to a culture of distrust and unhappiness” (March 2009)

Mission Lane (2018-present): Continuing the Pattern

Same Wage Exploitation, New Company:

  • $16/hour start, $18.35/hour after 6 months - then capped (2024-2025)
  • “Low wages for experienced employees” - consistent complaint 2019-2025
  • “Everyone on the same level receives the same pay regardless of experience” (March 2025)
  • “They continuously add responsibilities and change job duties but no pay increase, just stress and frustration increase” (March 2025)
  • No merit increases or cost-of-living adjustments - employees going “years without any pay increase” (June 2024)

2023 Layoffs: “PTSD” & Trust Destruction

Timeline correlation:

  • September 2022: FTC shuts down Credit Karma’s deceptive “pre-approved” offers (Mission Lane’s primary customer acquisition funnel)
  • ~5 months later, February 2023: Mission Lane mass layoffs

The timing suggests direct impact: Credit Karma served as Mission Lane’s acquisition funnel (promoting Mission Lane with 4.7/5 rating, targeting same subprime demographic). When FTC enforcement disrupted this pipeline, Mission Lane executed brutal layoffs.

Credit Karma’s conscious deception (FTC complaint findings):

  • A/B testing for optimal lies: Credit Karma deliberately conducted experiments to test which deceptive claims (“pre-approved” vs “90% odds”) most effectively manipulated consumer behavior
  • Pattern of weaponized UX: FTC explicitly labeled this as “dark patterns” - using behavioral psychology research to engineer false certainty and maximize conversions
  • Measurable consumer harm: Almost 1/3 of “pre-approved” applicants were denied; hard credit inquiries damaged credit scores, harming future borrowing ability
  • Inadequate penalty: 497,425 victims, 2,500+ data points per member, systematic A/B testing to optimize deception → $3M settlement ($6.03 per victim)

Pattern parallel: Credit Karma’s A/B tested deception mirrors Puzzle’s photoshopped metrics (testing which fake engagement numbers convince accountants) - both optimize presentation to manufacture false certainty.

Worth noting: Sasha Orloff served as Mission Lane advisor (December 2018-September 2019), not CEO, but the entity originated from LendUp’s asset sale and maintained the same exploitation pattern. When the deceptive customer funnel was disrupted, workers paid the price.

Layoff execution:

  • Two rounds in 4 months (February + June 2023)
  • January 2023: CEO sent Christmas cards to entire company knowing 10% would be laid off weeks later
  • February 2023: Mass layoffs executed via email - “computers turning off in the middle of the day,” “system access cut, no call from leaders”
  • CEO assured staff “we’re doing well” weeks before second layoff
  • “Layoffs impacted culture and capacity to execute on great product ideas” (June 2023)
  • “I may have PTSD from the multiple layoffs” (April 2025)
  • “The layoffs of 2023/24 were crushing for those who had to leave…and demoralizing for those who stayed” (January 2025)

Call Center Conditions Continue:

  • “Back to back calls collections and pay should be higher for collections” (June 2025)
  • “exploit agents always on phone back to back calls not enough pay worst job” (June 2025, rated 1.0 stars)
  • “Being on the phones can be draining” - recurring theme 2019-2025
  • “Clients are pushy, and due to company processes you are often left repeating yourself” (August 2025)

“Great Place to Work” Survey Manipulation (2023):

“This year they held the official Great Place To Work survey, purposely excluded all hourly staff from taking it when they are the most undervalued and therefore have the most negative feedback to provide. Concerns were raised regarding this and they were not addressed, award displayed on the website is misleading. Both internal surveys from this year, which had a much higher response rate, came back with incredibly dismal results.” (December 2023)

People Operations Data Privacy Concerns (2025):

“I was asked by the People Operations Manager to grant the Data Engineering team super admin access to our HRIS. This level of access would have exposed highly sensitive employee information, including Social Security numbers and dependent data. I expressed my discomfort with this request and declined, as it did not align with my personal ethics or best practices around data security… Ultimately, the super admin access was not granted to the data team, but I felt like it took too much convincing on my end.” (Former People Operations Team Member, 2025)

Same reviewer documented:

  • Internal satisfaction survey showed People Operations was “one of the least satisfied group for two years in a row”
  • Response from leadership: “we were told that we needed to step up or step out”
  • “This response felt dismissive and undermined the confidentiality and intent of the survey”

Connection to LendUp Acknowledged:

“Interest rates are predatory while our market audience are people who don’t understand credit. Original company, LendUp was closed for illegal and predatory practices, and it really shows.” (December 2023)

“Company is in bad place financially” (July 2024)

“Really no direction at this company. they have 1 product and seemingly no desire to build more… Company just seems to exist to allow an IPO to happen and initial investors to make tons of money in the process.” (July 2024, rated 2.0 stars)

The 13-Year Pattern:

  1. LendUp (2012-2022): Poverty wages for call center workers marketed as “Account Managers,” toxic culture, unexpected layoffs, toilet flooding with “poop on the floor”
  2. Mission Lane (2018-present): Same poverty wages ($16-18.35/hour capped), two brutal layoffs in 2023, “PTSD,” Great Place to Work survey excluded hourly staff, predatory rates targeting people who “don’t understand credit”
  3. Puzzle (2019-present): Wrongful termination, equity deletion, severance rescinded, “mentally ill” characterization, two designer layoffs, overwork leading to burnout

Not isolated incidents. Systematic exploitation across 13 years and three entities.

Media Structural Conflicts

This section documents how media business models create structural barriers to fraud investigation. The pattern repeats: financial relationships prevent accountability regardless of evidence quality.

The pattern of fraud documented above was known to major media outlets years before publication. Their silence was not accidental. It was structural.

Forbes Midas List Conflict

July-August 2023: I reached out to former Forbes senior writer David Jeans, who had broken the NS8 fraud story in 2020. During a phone call between July 17-24, 2023, Jeans responded “Yeah, I know of Sasha” before dropping contact.

On August 3, 2023, I sent a follow-up email:

“Forbes Midas List. Conflict of interest. Got it.”

The email included a link to my article documenting social washing and Capital One connections, making explicit what was already obvious: Forbes features Puzzle’s lead investor and major LendUp investors across its prestige lists - Hemant Taneja (General Catalyst, Puzzle lead investor) at #8 on Forbes Midas List 2025, Blake Byers (Google Ventures, Insights Servicing director) on Forbes 30 Under 30 2015 with profile explicitly mentioning “LendUp” investment, Ross Fubini (XYZ Capital, Puzzle investor) at #88 on Midas List 2025, LendUp board chair/director (QED Investors) at #90 on Midas List 2025. Investigating fraud by portfolio companies would implicate investors featured prominently on Forbes’ own prestige lists, including the #8 ranked investor managing Puzzle’s lead investor firm.

I wasn’t asking Jeans to cover it anymore. I was documenting that I understood why he couldn’t. The link to full documentation served as evidence that this wasn’t a lack of information—it was a structural conflict that made coverage impossible regardless of evidence quality.

The institutional conflict:

  • Direct conflict: Forbes contributor Dasha Shunina employed by Puzzle as GTM strategist (August 2024-present) while publishing Forbes content about CEO, validating false “$1B+ raised” and “unicorn founder” claims without disclosure of employment relationship
  • Structural conflicts: Forbes celebrates VCs across prestige lists (30 Under 30, Midas List) - business model = access to VCs
  • Hemant Taneja ranked #8 on Forbes Midas List 2025 - Managing Director of General Catalyst (Puzzle’s lead investor)
  • Blake Byers featured on Forbes 30 Under 30 (2015) with profile explicitly stating “invested in companies like…LendUp”
  • Ross Fubini ranked #88 on Forbes Midas List 2025 - invested in LendUp through Kapor Capital, now Puzzle investor
  • Nigel Morris (QED founder) ranked #90 on Forbes Midas List 2025 - LendUp board director/chair
  • Systematic QED network platforming:
    • Credit Karma (QED portfolio, FTC settlement 497k victims): Forbes “Best Brands for Value” #235
    • Brandon Arvanaghi (Meow CEO, QED portfolio): Forbes 30 Under 30 Finance 2024 + Forbes BrandVoice paid Samsung partnership (promotional video)
    • Nigel Morris (QED founder): Forbes Midas List #90
    • Pattern: Forbes monetizes credibility through paid partnerships and prestige rankings to platform QED network while suppressing fraud investigation
  • As documented in The Fraud Pattern, those VCs backed LendUp (raised $150M+ before $29M fire sale; CFPB shutdown for defrauding 140,000+ consumers, $40M restitution)
  • Investigating portfolio company fraud = implicating top-10 Midas List investor (#8) and invalidating Forbes’ curation
  • Business model prevents accountability journalism; contributor conflicts create direct credibility laundering pipeline; paid partnerships (Samsung BrandVoice) monetize platforming of investors/CEOs connected to federal enforcement actions

TechCrunch’s Promotional Coverage and Investigation Abandonment

TechCrunch published 9+ articles about LendUp from 2012-2017, celebrating every funding round, product launch, and executive hire:

  • 2012: Launch coverage with Kleiner, a16z, Google Ventures backing
  • 2013-2014: Multiple funding rounds and product features
  • 2016: $150M Series B (“Ladders Not Chutes”), framing as disruption
  • 2016: First CFPB violation ($6.3M settlement) - framed as “growing pains”
  • 2017: PayPal investment and credit card launch

The Curious Silence on Mission Lane:

TechCrunch’s extensive LendUp coverage (9+ articles) contrasts sharply with complete silence on Mission Lane—the company CEO Sasha Orloff claims to have founded and that achieved unicorn status.

In my August 1, 2023 email to TechCrunch, I specifically noted: “Curiously I’ve found a lot of TechCrunch press for LendUp, but none for Mission Lane.”

This asymmetry is telling. If Orloff truly founded Mission Lane (achieving unicorn valuation), TechCrunch would have covered it—they covered everything about LendUp. Mission Lane’s absence from TechCrunch coverage suggests the “founder” narrative didn’t hold up to basic journalistic scrutiny. TechCrunch couldn’t cover Mission Lane as “Orloff’s company” because corporate records show he was hired as advisor post-acquisition, not founder.

Their own archive reveals the fraud pattern—I simply pointed it out to them.

December 2020: Senior reporter Connie Loizos profiled XYZ Capital’s Ross Fubini, allowing him to describe LendUp as being “split into two businesses” without noting (as documented in Credential Misrepresentation) it was a $29M fire sale that returned $0 to shareholders after raising $150M+.

February 16, 2023: TechCrunch published glowing profile of Puzzle (“building a modern accounting package for today’s API-enabled startups”), claiming Series A “closed at the end of last year” - 5 months before I documented the fraud pattern. Article makes no mention of CEO’s CFPB permanent ban (December 2021, 14 months earlier).

The Investigation That Never Happened

Email to TechCrunch (August 1, 2023): sent to [email protected] with initial fraud documentation. Email noted: “Curiously I’ve found a lot of TechCrunch press for LendUp, but none for Mission Lane”—specifically alerting them to suspicious asymmetry in coverage that suggested the “Mission Lane founder” narrative might not withstand scrutiny.

Email also disclosed timing manipulation of TechCrunch’s own February 2023 Puzzle article:

“You should know they intentionally delayed the Series A announcement in your article to avoid the LendUp newscycle. Most of this money was raised in 2021, and they’d already burned it down to $9M at the start of 2023 with no revenue until (possibly) this month after repeated callouts.”

The disclosure revealed Puzzle’s Series A was raised in 2021 but not announced until February 2023—a 2-year delay that allowed the CFPB shutdown news cycle (December 2021) to fade before the CEO sought credibility through media coverage.

TechCrunch’s February 16, 2023 article claimed the round “closed at the end of last year” (implying 2022) but was actually raised in 2021. Article made no mention of the CEO’s previous company being shut down by federal regulators 14 months earlier, despite this being highly relevant context for a founder raising capital in financial services.

This disclosure revealed:

  • Timing manipulation: Series A raised 2021 but announced February 2023 (2-year delay) to avoid LendUp CFPB shutdown news cycle (December 2021); TechCrunch told it closed “at end of last year” when it was actually 2021
  • Insider financial information: Company had burned significant capital by early 2023 (down to $9M from $15M raise), operating without revenue until “possibly” August 2023, approaching need for next funding round
  • Prediction validated: Just 3 months after this August 2023 disclosure to TechCrunch, Puzzle announced $30M round (November 14, 2023) - proving rapid cash burn was accurate
  • Both 2023 announcements hide CFPB ban: Neither February 2023 TechCrunch article nor November 2023 Puzzle announcement mention CEO’s CFPB permanent ban (December 2021)
  • Network effects: “Any impact on Mission Lane or Puzzle will affect both companies”
  • Antitrust concerns: Lead investor creating “more troubling antitrust issue” across portfolio

TechCrunch received this insider disclosure about their own article’s timing manipulation—that Puzzle coordinated a 2-year delay in announcing stale funding to avoid the CFPB shutdown news cycle—and chose not to investigate why a company would strategically time media coverage to obscure the CEO’s regulatory enforcement history. Three months later, Puzzle’s $30M emergency fundraising validated the cash burn warning.

August 11, 2023: Email to TechCrunch outlining Mission Lane asset sale structure: “Mission Lane was created to purchase LendUp’s credit card business. Instead of fixing LendUp’s compliance issues and dying loan business, they had long-term plans to create a pump-and-dump neobank they could sell to First Boulevard/Kinly. FirstBoulevard.com now redirects to a new misleading LendUp ‘acquisition’ announcement.”

August 16, 2023 (7:21 PM) - Comprehensive Network Documentation:

Sent TechCrunch complete investigative package with attached court documents and corporate filings:

LendUp Asset Sale:

  • LendUp’s Information Statement attached, proving “golden parachute, not a spin-out”
  • Conflicts of interest documented
  • $29M fire sale structure exposed

Rolling Loud v. Ahead Financials / Fairfax Studios:

  • Complete lawsuit attached (February 21, 2022, Miami-Dade County Circuit Court Case No. 2022-003284-CA-01, $1.575M sponsorship fraud)
  • Motion for Final Default Judgment attached
  • Fairfax Studios incorporated “soon after they signed a contract with Rolling Loud” (actual: June 7, 2021, 7 days before contract; Thirty Two West LLC established April 2020, 14 months earlier)
  • Shell company network: Anu’s sworn affidavit treats “Fairfax Studios, Inc. a/k/a Thirty Two West, LLC” as interchangeable despite being separate legal entities (DE vs NY, different incorporation dates, both with Marvin Bing)
  • Payment intermediary scheme: “Anu notarized a statement claiming she sent payment to Fairfax Studios intended for Rolling Loud and it must’ve been intentionally mishandled by Fairfax. She provided no real evidence of the transfer.”
  • April 8, 2022: Ahead app stopped working

Shell Company Network:

  • Fairfax Studios analysis: “There’s little information about Fairfax Studios outside of the collaboration with Ahead”
  • Marvin Bing (Fairfax founder, Amnesty International creative director) connections
  • “Fairfax Studios has no existence outside of Ahead. Ahead was quickly dismissed from the lawsuit after only oral evidence.”

FirstBoulevard / Kinly / BeTenth:

  • “Kinly was using Ahead/LendUp’s address, even though it was a supposed rebrand of BeTenth (hence BeKinly)/First Boulevard”
  • Trademark transfer filings documented
  • “Kinly was never transparent about acquisitions. They told Jason Mikula Ahead ‘rebranded’ to Kinly.”
  • BeKinly.com “just sold in May, and is showing a parked page”
  • AheadMoney.com “is an illusory blog with no way of making revenue”

Key Questions Posed:

  • “LendUp wasn’t financially in a good place and continued ignoring compliance issues. Why would they spend millions on marketing and partnerships?”
  • “LendUp, Ahead, Fairfax, and BeTenth haven’t updated their company filings since they quietly liquidated.”

Mission Lane:

  • “There are active lawsuits against Mission Lane that resonate with the BBB ratings, suggesting they accurately depict their unlawful practices and routine issues around identity theft and fraud”

Email concluded: “I’m starting to think Ahead was a shell company.”

This comprehensive documentation included three attached PDF files:

  1. LendUp - Information Statement (Golden Parachute).pdf (671 KB)
  2. ROLLING LOUD VS AHEAD FINANCIALS LLC, FAIRFAX STUDIOS, INC.pdf
  3. MOTION FOR ENTRY OF FINAL DEFAULT JUDGMENT ON LIQUIDATED DAMAGES AGAINST DEFENDANT FAIRFAX STUDIOS, INC.pdf

August 17, 2023: Connie Loizos responded requesting timeline clarification and phone contact to “walk through” the comprehensive evidence package including court documents, corporate filings, and shell company analysis.

August 20, 2023: Final email to Connie Loizos during initial investigation period. Subject line: “Hey again, Connie. Last update for the weekend; no obligation to read or respond.” Email opened with: “It’s ironic I’m threatened with inflicting emotional distress when I can barely sleep or live my life for months. I’ve been unemployed and feel triggered just looking at job descriptions.”

The email detailed:

  • Sasha Orloff’s “habitual retcon” of LendUp history on social media
  • Timeline manipulation (Mission Lane: 2018, yet claiming “a decade” in 2023)
  • Autonomous Accounting framework as “meaningless optics-driven work”
  • Insights Servicing corporate structure questions
  • Blake Byers’ potential conflicts of interest in asset sale
  • Mission Lane using Mission Bio’s photos on job listings
  • Concluded: “Hope I’m not scaring you off, and I hope you’re having a great weekend.”

This email demonstrates the emotional state of a whistleblower three months post-termination: apologizing for providing evidence, worried about “scaring off” the reporter, unable to sleep, triggered by job descriptions, yet continuing to document systematically with primary sources. Connie Loizos had responded “we’re looking into this” three days earlier. After this comprehensive follow-up, TechCrunch published nothing.

December 12, 2023: Email to [email protected] acknowledging previous “spamming” and apologizing: “I got a reply from Connie, but was ghosted likely for spamming her with research. I apologize for that; I wasn’t in a good place, and I can’t say I’m fully healed.” Email detailed coordinated retaliation between Puzzle Financial and Mission Lane (dual cease-and-desist letters from two companies on same day, August 11, 2023). Included quote from an ex-employee who started after me validating concerns. Listed specific retaliation: wrongful termination cover-up, withdrawn severance, dual C&D letters, equity revocation.

December 14, 2023: Follow-up email with link to condensed outline showing “LendUp had no intent to clean up their act” and highlighting CEO’s failure.museum post: “This man conveniently ignores all the ‘failed startup’ lists that include LendUp.”

December 15, 2023: Multiple emails escalating in frustration:

  • Morning: “You people are shameless! You have no idea how many lives you affect through your clout-chasing pseudo-journalism.” Comparing TechCrunch’s willingness to call out Marc Andreessen but not Sasha Orloff’s “contributions to poverty and mental health crises.”
  • Later: Subject line “Proof I’m a normal person”, body “…but tech journalism enables psychopaths” with link to self-recorded video
  • Final: Calling out TechCrunch for not covering OpenAI Head of Research Tal Broda cheering on genocide: “Can you guys at least cover this, or are you fully invested in protecting fascists, con-artists, and abusers?”

The December escalation documents a whistleblower’s deterioration over five months of institutional silence:

  • From apologetic: “I wasn’t in a good place”
  • To accusatory: “You people are shameless”
  • To desperate: “Proof I’m a normal person”

TechCrunch received comprehensive evidence in August, acknowledged investigating, then ignored increasingly desperate follow-ups while continuing to promote Puzzle-sponsored events in October 2025.

I sent ActualQuickBooks evidence November 4, 2025.

TechCrunch published zero investigative articles.

October 24, 2025: TechCrunch featured Puzzle-sponsored Women Tech Meetup in their Disrupt 2025 side events guide, promoting an event hosted by the same CEO they had acknowledged investigating 2+ years prior. The event occurred October 30, 3 days after the photoshopped metrics were posted.

The pattern:

  • Celebrated LendUp 2012-2017 (9+ promotional articles)
  • Framed CFPB violations as “growing pains” (2016)
  • Allowed Ross Fubini to mischaracterize fire sale as “split” (2020)
  • Profiled Puzzle glowingly (February 2023)
  • Acknowledged investigating fraud (August 2023)
  • Published nothing (August 2023 - present)
  • Promoted Puzzle-sponsored event (October 2025)

Same CEO. Same outlet. 2+ years after acknowledging investigation.

The Commercial Partnership: Structural Conflict

TechCrunch maintains an active commercial partner page offering Puzzle’s “Smarter accounting for fundraising and taxes” with promotional benefits (“25% off any paid plan” and “free 14-day trial”). The partner page markets Puzzle as “Intuitive accounting software with on-demand experts to stay compliant for taxes and investors, built native for startup founders.”

The page includes testimonials from partners like Gusto and Burkland—Burkland was notified of fraud documentation. The commercial relationship creates the same structural conflict documented with Forbes: TechCrunch cannot investigate a company with which it has an active commercial partnership promoting their services to TechCrunch’s startup audience.

This partnership page demonstrates why 27+ months of comprehensive documentation—CFPB enforcement, false credentials, photoshopped metrics, federal whistleblower complaints—produced zero investigative journalism despite initial acknowledgment (“Yeah, I know of Sasha”). The business model prevents accountability.

Dasha (Daria) Shunina: Forbes Contributor / Puzzle GTM Strategist (Skolkovo Foundation 2016-2023)

Dasha Shunina built Women Tech Meetup (10K+ members) while employed at Skolkovo Foundation, a Russian government entity the FBI warned about in 2014.

She then:

  • Left Skolkovo (June 2023)
  • Became Forbes contributor without disclosing Skolkovo background (Nov 2023)
  • Changed her name from “Daria” to “Dasha”
  • Progressively removed Skolkovo from public profiles
  • Joined Puzzle Financial as GTM strategist (Aug 2024)

Pattern: network access → credibility → data collection

Documented timeline confirms this pattern.

Brand Confusion: Women Tech Meetup & Women in Tech Relationship

Dasha Shunina claims the title “Event Director of Women in Tech USA” in her bio, yet her LinkedIn employment history shows no record of working for Women in Tech® Global or its U.S. chapter—a legitimate international organization with 60+ chapters, 30,000+ members across 6 continents, and partnerships with governments and major corporations.

Boston New Technology interview reveals she joined Women in Tech® Global USA management team “around three years ago” (2020-2021)—2.5+ years before leaving Skolkovo (June 2023). She was embedded in U.S. women’s tech leadership infrastructure while actively recruiting foreign companies to FBI-warned Skolkovo Foundation.

Two scenarios, both serious:

  1. Women in TechÂŽ Global knew about her Skolkovo employment:
    • Failed vetting of national security implications
    • Allowed FBI-warned entity employee into USA management structure
    • Provided platform for someone simultaneously building Russian tech access infrastructure
  2. Women in Tech® Global didn’t know:
    • She successfully concealed 7+ years at Skolkovo Foundation
    • Operational security: hiding government-backed employment while embedding in U.S. organizations
    • Demonstrates sophisticated capability to bypass vetting processes

Either way, this is an organizational vetting failure of concerning scale. A legitimate nonprofit with government partnerships gave USA management access to someone who spent 2.5+ years in dual roles: recruiting foreign companies to Russian government entity + leading U.S. women’s tech initiatives.

December 19, 2023 event demonstrates the brand confusion pattern:

Dasha’s event description states:

“My name is Dasha, I’m an Event Director of Women in Tech!”

And uses Women in Tech® Global’s exact mission statement:

“Women in Tech® is a Global Movement that gathers all people, networks, and organizations that are engaged in bridging the gender gap in the technology sector by Helping Women embrace Tech.”

The ambiguity problem:

  • December 2023: Dasha claims title “Event Director of Women in Tech” while hosting “Women Tech Meetup” events
  • Timeline issue: Left Skolkovo June 2023, but used Women in Tech branding December 2023 (6 months later)
  • No LinkedIn record: Despite claiming “Event Director of Women in Tech USA” in bio, no employment entry for Women in TechÂŽ Global or any affiliate
  • Brand confusion: “Women Tech Meetup” vs. “Women in TechÂŽ Global” vs. claimed “Women in Tech USA” role - creates legitimacy by association
  • Three scenarios: Either (a) unauthorized brand use, (b) Women in TechÂŽ Global failed to vet Skolkovo background, or (c) intentional association
  • First TechCrunch partnership: April 2024 (4 months AFTER using Women in Tech branding)

This is likely an operation:

The 2.5+ year overlap makes it nearly impossible to claim ignorance or coincidence. Someone embedded in Women in TechÂŽ Global USA management structure while simultaneously recruiting foreign companies to an FBI-warned Russian government entity represents either:

  • Conscious infiltration: Successfully concealing Skolkovo employment to gain U.S. network access
  • Organizational complicity: Women in TechÂŽ Global aware but proceeding regardless
  • Catastrophic vetting failure: International nonprofit with government partnerships failed basic background checks

The extended timeline (2020-2021 to June 2023) demonstrates systematic infrastructure development, not opportunistic networking. She used the Women in Tech® Global platform to build credibility, access, and relationships for 2.5 years while working for an entity the FBI explicitly warned was “a means for the Russian government to access our nation’s sensitive or classified research.”

Whether Women in Tech® Global has awareness now is certain—they’ve been notified. The question is whether they had awareness during the 2.5 years she held USA management position while at Skolkovo.

Evidence of Conscious Brand Modification:

The event timeline on Luma shows deliberate brand change:

  • December 19, 2023: “Women in Tech Meetup - Christmas Edition” (exact match to Women in TechÂŽ Global brand)
  • February 2, 2024 onwards: Changed to “Women Tech Meetup” (removed “in”)

This demonstrates:

  • Initial use of complete “Women in Tech” branding
  • Quiet modification ~6 weeks later, removing “in”
  • Suggests awareness of brand confusion issues
  • Minimal distancing: “Women Tech” still creates association with “Women in TechÂŽ Global”
  • Change occurred before first TechCrunch partnership (April 2024)

The modification pattern indicates conscious awareness of brand similarity issues while maintaining sufficient association for legitimacy-by-proximity. This evidence exists regardless of whether the Women in Tech USA affiliation is authorized—it shows calculated positioning relative to an established brand.

Soft-Landing Programs: Same Mission, Different Geography

Boston New Technology interview promoting Dasha’s role as “Events Director at Women in Tech” includes this description:

“Leading soft-landing programs attracting high-tech startups from all over the world, directing large-scale international events, managing mentor and corporate partnership networks, and representing global organizations…”

This is the exact same mission she described at Skolkovo Foundation:

“I’m the person responsible for attracting all foreign companies to the Russian innovative ecosystem… right now, I’m leading the Skolkovo soft landing program… The main objectives is to help and to support foreign companies that are willing to expand to the Russian market.”

The parallel is striking:

  • Skolkovo (2016-2023): “Soft landing program” attracting foreign startups to Russia
  • Women in Tech (claimed 2023+): “Soft-landing programs attracting high-tech startups from all over the world”
  • Same terminology: “soft-landing programs”
  • Same objective: Attracting international startups
  • Same infrastructure: Large-scale events, mentor networks, corporate partnerships

Same playbook, different geography.

Name Change and Employment History Obfuscation

Name changed from “Daria Shunina” to “Dasha Shunina” between 2022-2023. Previously published as “Daria” in LinkedIn posts (October 2022) and podcast appearances (Reinventing Professionals, July 2021).

Evidence of original name still visible:

  • Forbes contributor URL: forbes.com/sites/dariashunina/ - Forbes URLs are set at registration and cannot be easily changed without creating new account; URL permanently preserves “Daria” registration even though profile now displays “Dasha Shunina”
  • Forbes bio (current): States “in tech for over 10 years, working in different accelerators, incubators, and venture funds” - NO mention of Skolkovo Foundation (7+ year role recruiting foreign companies to Russia); only lists Women Tech Meetup, podcast, and conference speaking
  • Forbes bio (December 2023 archived): Referenced “innovation centers, development institutions, and venture funds” - vague but at least mentioned institutional roles
  • Progressive sanitization: Current bio removed even the vague “innovation centers” and “development institutions” language; each iteration systematically removes more specificity that could lead back to FBI-warned Skolkovo Foundation
  • Stripe payment link for Women Tech Meetup hoodie processed under “Daria Shunina” (removed after publication)
  • LinkedIn comments from June 2021 Skolkovo Softlanding Program post: “Congratulations Daria!” (not Dasha) and “Thanks 🙏 Daria Shunina for all days sessions”

LinkedIn post showing Daria at Skolkovo “Daria” Shunina at Skolkovo Softlanding Program (June 2021), recruiting international startups to Russian innovation center. Same LinkedIn post now shows bio as “GTM at @Puzzle | Founder of @Women Tech Meetup”—name changed, Skolkovo evidence retained.

LinkedIn article as Daria at Web Summit LinkedIn article from October 2022 showing “Daria Shunina is performing at the Web Summit” - major European tech conference. Article published October 10, 2022 (8 months before leaving Skolkovo in June 2023, 6 weeks before launching Women Tech Meetup in December 2022). Demonstrates active international tech conference presence while still recruiting for Skolkovo Foundation. Current LinkedIn bio shows “Dasha” but article header still displays “Daria.”

LinkedIn showing sequential infrastructure timeline LinkedIn employment history showing sequential infrastructure buildout: Women Tech Meetup (Dec 2022 - Present, launched WHILE at Skolkovo), “Various Roles… VC & Accelerators” (Jan 2016 - Jun 2023, obscured Skolkovo Foundation), YouTube show (Aug 2023, 2 months after leaving Skolkovo), Forbes contributor (Nov 2023, 5 months after leaving Skolkovo). Missing from screenshot: Puzzle GTM role (Aug 2024, 14 months after leaving Skolkovo) providing financial data access layer. Timeline demonstrates deliberate pre-positioning of access infrastructure before leaving Russian government-backed entity.

Current LinkedIn employment history obscures Skolkovo Foundation role. Lists “Various Roles (Head of Partnerships, Head of Community, Head of Startups Programs)” at “VC & Accelerators” (January 2016 - June 2023) without naming Skolkovo Foundation directly. Cross-referencing reveals: Head of International Startups Relations at Skolkovo Foundation (Russia’s government-backed innovation center, founded by President Dmitry Medvedev in 2010). She explicitly describes recruiting 200 companies from 50 countries, with 30 deciding to establish operations in Russia (Reinventing Professionals podcast, July 2021).

Skolkovo Softlanding Program official marketing material Official Skolkovo Softlanding Program marketing (2020): Lists “HEAD OF INTERNATIONAL STARTUPS RELATIONS DARIA SHUNINA” with contact info ([email protected], phone, extension). Offered grants up to $4M, tax benefits, targeted “STARTUPS & SMEs” in six research areas. She launched Women Tech Meetup (Dec 2022) while in this role, building parallel U.S. founder database before leaving Skolkovo (June 2023).

FBI Warning and Skolkovo Context

In April 2014, FBI Boston Division warned U.S. technology companies about Skolkovo Foundation partnerships: “The FBI believes the true motives of the Russian partners, who are often funded by their government, is to gain access to classified, sensitive and emerging technology from the companies.” The warning stated Skolkovo “may be a means for the Russian government to access our nation’s sensitive or classified research, development facilities and dual-use technologies with military and commercial applications.” The FBI warning resurfaced in May 2018 during national coverage of Skolkovo Foundation’s ties to Russian oligarchs in Trump-Russia investigations.

Current State Documentation (September 2025):

Third-party documentary published September 7, 2025 (169K views) validates FBI warnings and documents Skolkovo’s current operations:

Watch: “Why Russia’s Silicon Valley Was a Total Failure” - Megaprojects

Published September 7, 2025. Documents $4B project’s $700M+ corruption, military pivot (2014-present), Putin’s directive to “strangle Western platforms,” and current state as “most restricted digital environment in the world.” Full transcript archive.

Key Documentation from Video:

  • $700M+ unaccounted for (2010-2012), fraudulent grants, 200+ managers disciplined
  • 1000+ foreign startups recruited by 2015, including MIT, Cisco, Boeing, IBM, SAP
  • Military pivot confirmed (2014): “More resources funneled toward drones, cyber security, AI with military relevance”
  • Putin’s directive: “Publicly called on Russian firms to strangle Western platforms like Microsoft and Zoom”
  • Current state (2025): “Russia’s digital environment is currently the most restricted in the world. VPNs are harder to access. Even search behavior can trigger legal action.”

KEY EVIDENCE: Sequential Infrastructure Buildout

  • January 2016 - June 2023: Skolkovo Foundation (recruiting U.S. tech companies to Russia)
  • 2020-2021: Joins Women in TechÂŽ Global USA management (WHILE at Skolkovo) - embedded in established U.S. women’s tech leadership network
  • December 2022: Launches Women Tech Meetup (WHILE still at Skolkovo, 6 months before leaving) - parallel U.S. founder network access
  • June 2023: Leaves Skolkovo Foundation
  • August 2023: Launches “Talks with Dasha” YouTube - interviewing tech leaders
  • November 2023: Becomes Forbes contributor - credibility + VC ecosystem access
  • August 2024: Joins Puzzle as GTM strategist - financial data access via accounting software

2.5+ year overlap: She joined Women in Tech® Global management 2020-2021, founded parallel brand Women Tech Meetup December 2022, and didn’t leave Skolkovo until June 2023. This extended overlap demonstrates systematic infrastructure development—embed in established network → create parallel brand → layer credibility platforms → monetize via data access. Sequential deployment with full knowledge of Skolkovo’s military intelligence operations documented in September 2025 video.

The pattern demonstrates systematic access infrastructure while obscuring the Skolkovo connection through name change (Daria → Dasha) and resume restructuring.

Women in Tech Russia: UN-Registered Russian Federation Organization

During Dasha’s tenure at Skolkovo Foundation (2016-2023), a parallel infrastructure was documented: Women in Tech Russia, registered with the United Nations as a “Russian Federation—International Organization.”

UN World Summit on the Information Society (WSIS) Stocktaking Platform - Women in Tech Russia

Women in Tech (Global) - French Registration:

  • Incorporated: October 9, 2018 (French company registration 843387903)
  • Type: Association dĂŠclarĂŠe (French non-profit association)
  • Registered Address: 6 Rue Rambuteau, Paris 75003
  • Founder/President: Ayumi Moore Aoki

Founder Context: “Tech Diplomat” with Government/Institutional Integration

From Ayumi Moore Aoki’s official website:

“Ayumi Moore Aoki is a tech diplomat, social entrepreneur, and mother of four working at the intersection of technology and international relations.”

Current Roles:

  • Founder & President: Tech Diplomacy Institute
  • Founder & CEO: Women in TechÂŽ Global (2018-present)
  • UNESCO: International Consultative Group of Experts for Closing the Gender Gap in Science
  • World Economic Forum: Global Future Council on Advanced Manufacturing and Value Chains
  • 2025: Launched Tech Diplomacy Forum at UNESCO headquarters in Paris

Women in Tech Global Scale:

  • 60+ countries, 250,000+ members
  • Partners: UN Women, World Economic Forum’s Edison Alliance
  • Government partnerships: France, Cape Verde, Burundi, USA, Uzbekistan, Malaysia
  • Target: “Empowering 5 million women in STEAM by 2030”

Recognition:

  • 2023: Forbes France’s 40 Women (same year Dasha Shunina became Forbes contributor)
  • 2025: GLOMO Awards (GSMA) – Diversity in Tech Award
  • Regular speaker: World Economic Forum, TEDx, LEAP, UN ESCAP Summit
  • Lectures: Johns Hopkins University, Sciences Po, École des Ponts

What This Reveals:

Women in Tech Global is explicitly framed as “tech diplomacy” infrastructure—not a grassroots women’s advocacy organization. The founder describes herself as working “at the intersection of technology and international relations” with direct UNESCO/World Economic Forum integration and government partnerships across multiple countries including the United States.

This context explains the Russian chapter’s institutional scale: UN registration as “Russian Federation—International Organization,” immediate partnership with FBI-warned Skolkovo Foundation, and rapid deployment of government/corporate partnerships. The platform operates as technology access infrastructure for multiple state actors.

Women in Tech Russia Launch (December 12, 2019):

Archived announcement documents the launch:

  • Location: Saint Petersburg, HSE University
  • Attendance: 200+ attendees
  • Founder present: Ayumi Moore Aoki traveled from Paris to open the Russian chapter
  • Ambassador: Elina Valeeva (Young Transatlantic Innovation Leaders Initiative Fellow 2019)
  • Institutional partners from launch: HSE University, JetBrains, Microsoft Russia (board member as speaker)
  • Speakers included: Anna Kulashova (Microsoft Enterprise Commercial Lead, 20 years experience, MBA from Open University UK)

Growth Trajectory:

  • Dec 12, 2019: Launch (200+ attendees, major institutional partners)
  • Feb 2020: “Ways to IT” meetup (200+ participants, 14 Russian tech mentors)
  • March 2020: Event at Franco-Russian Chamber of Commerce and Industry with MegaFon director (state-influenced telecom)
  • May 2020: 2000+ members (5 months after launch) + partnership with Skolkovo Startup Village (Dasha’s employer)
  • May 2020: 24hr Virtual World Tour (5000+ participants, 200 speakers including NASA/NPR for Western credibility)

UN Registration (2021):

  • Entity name: Women in Tech
  • Entity country—type: Russian Federation—International Organization
  • Coverage: Russian Federation
  • Entity website: https://women-in-tech.org/ru/
  • Timeline: 2000-2050 (long-term institutional timeline)

Growth rate analysis: 200+ attendees at launch with Microsoft Russia board member → 2000+ members in 5 months suggests institutional resources beyond typical grassroots organizing. Registered with UN as “Russian Federation—International Organization” (not “French NGO chapter”).

Key Institutional Connections Documented:

  • Microsoft Russia (state-influenced operations)
  • MegaFon (Russian state-influenced telecommunications)
  • Franco-Russian Chamber of Commerce and Industry
  • Skolkovo Startup Village (May 2020 partnership during Dasha’s tenure)
  • NASA scientist and NPR journalist (Western credibility laundering)

Skolkovo Women’s Forum Integration:

The Skolkovo Women’s Forum website demonstrates direct Russian government integration:

  • State Duma representation (Russian parliament lower house)
  • Federation Council representation (Russian parliament upper house)
  • Official government partnership infrastructure
  • English-language version targeting international participants

What This Documents:

  • “Tech diplomacy” infrastructure, not grassroots advocacy: Founder explicitly describes organization as working “at intersection of technology and international relations” with UNESCO/WEF integration, government partnerships (USA, France, Russia)
  • Russian chapter institutional backing from day one: Dec 2019 launch with Microsoft Russia board member, HSE University, JetBrains → 2000+ members in 5 months (institutional resources, not grassroots)
  • Separate legal status: Russian entity registers with UN as “Russian Federation—International Organization” (not French NGO chapter)
  • Direct Skolkovo integration: May 2020 partnership with FBI-warned Skolkovo Startup Village during Dasha’s tenure
  • Western credibility laundering: NASA scientist, NPR journalist, Microsoft used to legitimize entity with Russian government integration

The relationship between Women in Tech Russia and Women Tech Meetup (U.S.) remains unclear. However, the documented pattern is:

  • Person who recruited Western startups to FBI-warned Skolkovo Foundation (official role, 2016-2023)
  • Was there when Women in Tech Russia (Russian Federation—International Organization) partnered with Skolkovo (May 2020)
  • Launched parallel U.S. founder network operation (Women Tech Meetup, Dec 2022) before leaving Skolkovo (June 2023)
  • Now has financial data access layer (Puzzle, Aug 2024) and VC ecosystem credibility (Forbes, Nov 2023)

Whether the entities are formally connected or not, the same person operates in the same function (tech ecosystem access) with the same institutional partnerships, just shifted from Russian Federation—registered organization to U.S. startup ecosystem.

Conflicting Roles and Undisclosed Employment

Access Infrastructure Roles:

  • Skolkovo Foundation - Head of International Startups Relations (January 2016 - June 2023): Recruiting U.S. tech companies to Russia for technology transfer
  • Women Tech Meetup - Founder (December 2022 - Present): Launched WHILE at Skolkovo, building U.S. founder network access
  • Talks with Dasha - YouTube Producer & Host (August 2023 - Present): Interviewing tech leaders, started 2 months after leaving Skolkovo
  • Forbes - Contributor covering venture capital (November 2023 - Present): Credibility + VC ecosystem access, started 5 months after leaving Skolkovo
  • Puzzle Financial - GTM strategist (August 2024 - Present): Financial data access via accounting software, employer not disclosed in Forbes bio
  • THE GATHERING - Founder (July 2024 - Present): Additional networking platform

Each role provides a different layer of access (network, credibility, data) to U.S. tech ecosystem. Infrastructure built sequentially while obscuring Skolkovo Foundation connection through name change and resume restructuring.

Undisclosed Employment: Forbes contributor bio omits Puzzle Financial employment. The bio lists Women Tech Meetup (which Puzzle sponsors), her podcast (featuring Puzzle CEO), and conference speaking. No mention of current employment at VC-backed accounting startup.

From her Forbes bio:

“Dasha Shunina is a San Francisco-based contributor who covers venture capital, startup news, the latest tech trends, and major conferences. She has been in tech for over 10 years, working in different accelerators, incubators, and venture funds. Dasha is the Founder of Women Tech Meetup, a community of 5,000 female founders and women in tech, as well as a regular monthly event held in San Francisco, Miami, and NYC. She hosts her own podcast, Talks with Dasha, where she interviews tech leaders.”

Forbes Articles Without Disclosure:

Shunina published 48 Forbes articles from December 2023 through October 2025. Topics covered: venture capital, startup news, founder challenges. This aligns with Puzzle’s target market for customer acquisition.

After joining Puzzle as GTM strategist (August 2024), she continued publishing without disclosing employment. This includes articles promoting Puzzle and quoting her employer.

Direct Employer Promotion:

  • “Top Fintech Companies Helping Solve The CPA Talent Shortage” (Nov 14, 2024) - Forbes article promoting Puzzle as solution to CPA shortage. Extensively quotes Sasha Orloff without disclosing employment relationship. Article states “Puzzle has taken a bold approach by reimagining the general ledger” and features quote from “Sasha Orloff, Puzzle’s Co-founder and CEO” about accountants being “unsung heroes.” Published 2 days after undisclosed YouTube interview. No disclosure that author is Puzzle’s GTM strategist quoting her own employer. 1,144 views.

YC Startup Ecosystem (Puzzle’s Primary Target):

  • “The Most Promising Startups From YC Spring Batch” (Jun 9, 2025) - 20,020 views
  • “The Most Promising Startups From YC Summer 2025 Batch” (Sep 4, 2025) - 17,502 views
  • “YC Alum Kulveer Taggar Launches $34M Fund” (Jul 22, 2025) - 1,539 views
  • “YC-Backed Octolane Raises Seed To Build AI Salesforce” (Apr 14, 2025) - 7,769 views
  • Multiple additional YC startup features throughout 2024-2025

Founder/Startup Operational Challenges:

  • “Navigating Sales Challenges In The Post-Pandemic Era” (Feb 29, 2024) - 3,663 views
  • “Coworking Filled With Founders: Past Or Future?” (Feb 9, 2024) - 4,137 views
  • “Mastering Cap Table Management: A Startup’s Guide” (Jun 28, 2024) - 1,776 views
  • “Driving Startup Growth: The Power Of Strategic Partnerships” (Jan 15, 2025) - 1,184 views
  • “FemTech Startups’ Uphill Battle For Funding” (Feb 2, 2024) - 1,399 views

Female Founder/Diversity Focus (Women Tech Meetup Audience):

  • “Female Founders Received Only 2% Of Total Capital In 2022” (Dec 11, 2023) - 2,775 views
  • “Immigrant Female Founders: Difference Is Your Superpower” (Aug 18, 2025) - 1,385 views
  • “Investing In Women’s Health: Opportunities, Challenges, Changes” (Oct 31, 2024) - 2,654 views

Documented Reach:

Total: 200,000+ views across 48 articles. Each article positions her as independent journalist while serving as Puzzle’s GTM strategist.

The YC coverage feeds directly into Puzzle’s sales pipeline. Puzzle maintains dedicated landing page (puzzle.io/yc) for YC company customer acquisition. Forbes articles about “most promising YC startups” function as lead generation under independent editorial cover.

Network Access:

Forbes platform provides credibility for Women Tech Meetup and THE GATHERING. Readers encountering her at conferences, through articles, or at meetup events receive no indication she is employed by VC-backed accounting startup. CEO’s CFPB enforcement history remains undisclosed.

The omission is systematic across all platforms: Forbes bio, interview disclosure, article bylines. Each article, conference appearance, and community event serves dual function as contributor content and employer marketing.

Forbes Exploitation Pattern (2016-2025)

Sasha Orloff’s Forbes Finance Council (2016-2017):

CEO Sasha Orloff was a Forbes Finance Council contributor during LendUp’s height (2016-2017). He used the platform to build credibility as “thought leader” on employee wellness and financial health. This occurred while LendUp was defrauding 140,000+ consumers:

  • Forbes Finance Council profile (October 2016): “After reading ‘Banker to the Poor’ by Muhammad Yunus and working with the author’s organization, the Grameen Foundation, Sasha Orloff was inspired to start financial technology company LendUp to improve people’s financial health.” Profile states he aimed “to provide a market alternative for the one in eight working Americans who take out a payday loan every year.”

2017 Forbes Finance Council Articles (Between First and Second CFPB Violations):

Simultaneous criticism:

Forbes contributor asked “Is It Ethical to Lend to Working People at a 200% Interest Rate?” (October 31, 2017). Sasha Orloff used the same platform to promote LendUp as ethical alternative. CFPB later documented LendUp “repeatedly lied to consumers” about rates and credit building.

Institutional Platforming of Fraud Network:

Forbes systematically platformed the entire fraud network across prestige lists, contributor platforms, and major events—demonstrating this is institutional policy, not isolated editorial failures:

1. Prestige Lists Create Structural Conflicts:

  • Anuradha Shultes - 2021 50 Over 50 - Investment list (LendUp President/CEO)
  • Hemant Taneja - Forbes Midas #8 (2025) (General Catalyst, Puzzle lead investor)
  • Ross Fubini - Forbes Midas #88 (2025) (XYZ Capital, former Kapor/LendUp investor, now Puzzle)
  • Blake Byers - Forbes 30 Under 30 (2015) (Google Ventures, LendUp investor, profile mentions “LendUp”)
  • Frank Rotman - Forbes Midas List (QED co-founder, LendUp board/Mission Lane fire sale profit)

Forbes 30 Under 30’s Systematic Vetting Failure:

Forbes’ 30 Under 30 list has become notorious for featuring fraudsters, demonstrating systematic due diligence failures:

  • Elizabeth Holmes (Theranos) - Forbes 30 Under 30 → convicted of fraud, 11+ years federal prison
  • Sam Bankman-Fried (FTX) - Forbes 30 Under 30 → convicted of fraud, 25 years federal prison, $11B+ loss
  • Charlie Javice (Frank) - Forbes 30 Under 30 → charged with fraud for lying about user numbers before $175M JPMorgan sale
  • Martin Shkreli - Forbes coverage → convicted of securities fraud, 7 years federal prison

This pattern has been widely documented as the “Forbes 30 Under 30 to federal prison pipeline,” revealing that Forbes’ prestige lists celebrate disruption and growth without vetting legitimacy. Blake Byers’ 30 Under 30 profile explicitly promoting LendUp fits this pattern—platforming fraud before federal enforcement.

You cannot investigate fraud by people featured on your own prestige lists. This creates institutional conflicts preventing accountability.

2. Contributor Platform Exploitation:

  • Sasha Orloff (2016-2017): Forbes Finance Council during LendUp fraud, positioned as “thought leader” on financial wellness while defrauding 140,000+ consumers
  • Dasha Shunina (2023-2025): 48 articles over 22 months (200,000+ views) while employed as Puzzle GTM strategist, no disclosure, covering Puzzle’s competitors and target market

3. Major Events Platform Banned CEOs:

Forbes 30/50 Summit: Platforming Fraud with Hillary Clinton (March 2023):

16 months AFTER LendUp’s CFPB permanent ban, Forbes featured Anuradha Shultes (LendUp President/CEO 2015-2021, Ahead Financials manager 2020-2022) at the 2023 Forbes 30/50 Summit in Abu Dhabi with personal consultation from Hillary Clinton about “Ahead Financial” expansion strategy.

The summit featured Hillary Clinton, Malala Yousafzai, and Gloria Steinem as headline speakers. Anu Shultes pitched the identical LendUp fraud playbook:

From video transcript:

“I do have a company called Ahead Financial. I created it to get people ahead… tens of millions of americans who either don’t have a bank account, or even if they have one they don’t really have a means to save or borrow to build assets… I launched the product in 2021. I have almost, uh, you know, 40,000 customers… using financial inclusion to help women advance as a global problem.”

What Forbes failed to disclose to Hillary Clinton and summit attendees:

  • LendUp CFPB permanent ban (December 2021) - 3 months before this interview
  • $40M restitution for “repeatedly lying to consumers”
  • Rolling Loud $1.575M fraud judgment (February 2022) - 1 month before this interview
  • Customers locked out of accounts (August 2021)
  • Ahead Financial was LendUp subsidiary using same address (1750 Broadway, Oakland), same CEO oversight

Hillary Clinton advised: “You want that base… as you move toward India and Africa, you are going to be relying on the operations within the United States to be the kind of foundation that you are going to build on for a more global reach.”

Forbes provided the platform for a CFPB-banned CEO to discuss scaling predatory lending to Africa and India with a former U.S. Secretary of State, 16 months after federal enforcement for consumer fraud.

The pattern: This wasn’t ignorance. By March 2023, LendUp’s fraud was public record with federal enforcement actions and court judgments. Forbes chose to platform the identical “financial inclusion” pitch at a prestigious women’s leadership summit with high-profile endorsement, demonstrating conscious enablement of fraud pattern continuation.

Forbes Institutional Pattern Summary:

Forbes created a comprehensive platforming infrastructure for the fraud network:

  • Prestige lists feature fraud perpetrators (Anu) and their investors (Hemant, Ross, Blake, Frank)
  • Contributor platforms promote fraud entities (Sasha’s LendUp, Dasha’s Puzzle employer) without disclosure
  • Major events platform banned CEOs (Anu with Hillary Clinton) 16 months after federal enforcement
  • Structural conflicts prevent investigation: can’t expose fraud by people on your own lists
  • Timeline: 2016-2025, spanning CFPB violations, enforcement, and continued fraud

This is institutional policy enabling fraud, not editorial oversight. Forbes’ business model (celebrating VCs, selling contributor access, hosting CEO summits) structurally prevents accountability for portfolio company fraud.

TechCrunch Platforming

TechCrunch promoted Women Tech Meetup as official side event at multiple major conferences, 2024-2025:

October 2024 - TechCrunch Disrupt 2024:

  • WTM listed as official side event
  • 15 months after Dasha left Skolkovo
  • 2 months after joining Puzzle Financial

April 2024 - Women Tech Meetup at TC Early Stage Boston:

  • “Fundraising & Growth Powered by Techstars” - hosted by Dasha Shunina
  • 189 attendees, panel on fundraising/VC/founder challenges
  • Associated with TechCrunch Early Stage 2024
  • 10 months after leaving Skolkovo, 16 months after founding WTM

June 2025 - TechCrunch All Stage Boston 2025:

  • WTM featured in headline: “Boston Side Events Line Up at All Stage with Fidelity Private Shares, Women Tech Meetup, Prepare 4 VC and more”
  • TechCrunch promotes WTM as major partner event

October 2025 - TechCrunch Disrupt 2025:

  • WTM side event October 30, 2025: “San Francisco! Calling all female founders, allies, friends, and partners! Let’s be real — fundraising isn’t one-size-fits-all. And for women founders? The rules aren’t just different — they’re nonexistent.”
  • Event promotes fundraising discussions for female founders
  • 27 months after Dasha left Skolkovo
  • 14 months after joining Puzzle Financial

Timeline:

  • December 2022: Dasha founded WTM (while employed at Skolkovo Foundation)
  • June 2023: Left Skolkovo
  • 2024-2025: TechCrunch promotes WTM at 4+ major conferences
  • August 2024: Dasha joined Puzzle Financial (financial data access)

What TechCrunch promoted:

  • 10K-member founder network built by Skolkovo Foundation employee
  • Event focused on fundraising discussions (collecting intel on funding needs)
  • Direct access to female founders seeking capital (Puzzle’s target market)

What TechCrunch didn’t disclose:

  • WTM founder’s 7-year Skolkovo Foundation employment (2016-2023)
  • FBI’s 2014 warning about Skolkovo Foundation technology access operations
  • WTM was founded while Dasha was actively recruiting U.S. tech companies to Russia
  • Current function: GTM strategist for accounting software = financial data access

TechCrunch platformed a network built by a Russian government employee, after FBI’s explicit 2014 warning about that exact entity, providing amplification and legitimacy to access U.S. founder ecosystem.

TechCrunch Must Know: Basic Google searches reveal Dasha Shunina’s 7-year employment at Skolkovo Foundation (2016-2023). This information is public on archived LinkedIn profiles and professional histories.

The FBI’s 2014 warning about Skolkovo Foundation is public record, easily discoverable.

TechCrunch has partnered with WTM for 18 months across four major conferences:

  • April 2024: TC Early Stage Boston
  • October 2024: TC Disrupt
  • June 2025: TC All Stage Boston (featured in headline)
  • October 2025: TC Disrupt

Someone at TechCrunch approved each of these partnerships.

Either:

  1. Nobody at TechCrunch Googled “Dasha Shunina” in 18 months (incompetence)
  2. They Googled, saw Skolkovo, and continued the partnership (complicity)
  3. They were told about concerns and overruled them (institutional failure)

None of these are acceptable.

TechCrunch’s “official side event” designation creates legitimacy. Founders assume TechCrunch vetted these organizations. That trust was exploited.

TechCrunch must:

  1. Cancel the November 20, 2025 event immediately The November 20, 2025 event occurred. TechCrunch did not promote this event. No further WTM events have been scheduled as of late November 2025.
  2. Disclose what vetting was done (or not done) for previous partnerships
  3. Explain how a 7-year Russian government employee building a 10K-founder U.S. network received four conference partnerships
  4. Implement background check procedures for all future “official partners”

TechCrunch has been notified for 27+ months about the fraud pattern. They know about Skolkovo. They know about the FBI warning. After documentation became public (November 2025), they did not promote the November 20 event, and no subsequent WTM events have been scheduled.

The Structural Problem

Media outlets that:

  • Celebrate VCs (Forbes Midas List, TechCrunch funding coverage)
  • Depend on VC access for content (founder interviews, funding announcements)
  • Employ contributors who work for companies they cover

…cannot investigate fraud by those VCs’ portfolio companies.

The business model prevents accountability.

I documented this in real-time:

  • Provided complete evidence to all outlets (links, primary sources, timelines)
  • Received acknowledgment of investigation (TechCrunch: “we’re looking into this”)
  • Documented continued promotional activities (Puzzle events, interviews)
  • Captured the gap between acknowledgment and action

The email to David Jeans - “Forbes Midas List. Conflict of interest. Got it.” - was the moment I understood institutional media wouldn’t help. So I became the institution.

The documentation exists because journalism failed structurally, not evidentially.

Continued Support Despite Notification

Following systematic investor and partner notifications (October to November 2025), key stakeholders showed active continued support rather than investigation or distance:

On Deck (ODF) / Erik Torenberg / Julian Weisser:

  • Erik Torenberg: Founder of Turpentine (acquired by a16z in April 2025, joined as general partner), former chairman of On Deck, cofounder and general partner at Village Global (2017-Dec 2020 with Ross Fubini, Kapor Capital partner who invested in LendUp Seed/A/B)
  • Julian Weisser: CEO of On Deck
  • January 19, 2024: Received detailed email documenting retaliation pattern, emotional impact, dual cease-and-desist letters, and asking “is this bullshit normal to you?”
  • January 21, 2024 (2 days later): toxic.systems domain registered (not used until November 2025)
  • Continued platforming for 22 months after notification: podcast platform (Tech Finance with Sasha Orloff), partnership video, testimonials on joinodf.com, January 2024 podcast episode on financial discipline
  • January 2024 partnership announcement video: Julian Weisser with CEO stating “Puzzle just raised $50 million,” using ODF founder community for legitimacy
  • Puzzle maintains dedicated /odf landing page (https://puzzle.io/odf) targeting ODF companies - built during my employment (2020-2023) as part of deliberate network targeting strategy
  • October 30, 2025: Warning to both Weisser and Torenberg after ActualQuickBooks photoshopping incident
  • November 5, 2025: Notice of impending publication with link to documentation
  • November 8, 2025: Final notice stating “You are now aware” with complete documentation
  • November 12, 2025 (4 minutes after screenshot timestamp): ODF names Puzzle “Top 2025 Company,” one day after SEC whistleblower complaints documenting federal retaliation, 22 months after January 2024 notification. Post states “We’re honored to be named one of ODF’s Top 2025 Companies!” and “Huge thanks to ODF for including us!” Puzzle announced alongside “friends at Fondo, Superpower, Cactus, Luma, Tiny Health, and many other incredible builders.” Event description: “These startups represent the top 1% of companies founded by ODF alumni over the past six years.”
  • @joinodf blocked after public documentation: After I posted the timeline documenting January 2024 email asking “is this bullshit normal to you?”, 22 months silence, and November 12 “Top 2025 Company” designation, @joinodf Twitter account blocked me. Response pattern complete: silence (22 months), celebration (Top Company), blocking (when publicly documented). Active suppression shows consciousness of wrongdoing.
  • What this shows: ODF received comprehensive fraud documentation including CFPB enforcement, false credentials, photoshopped metrics, dual cease-and-desist letters, wrongful termination, and federal whistleblower complaints. ODF chose to feature the company as “Top 2025 Company” within 24 hours of federal retaliation being documented. When this pattern was made public, they blocked rather than responded. The evidence shows active endorsement after notification followed by suppression, not passive ignorance.
  • No response, accountability measures, or acknowledgment, chose silence and continued promotion over investigation, then blocking over accountability

Sterling Road (Ash Rust):

  • Notified November 9, 2025 with complete fraud documentation
  • Prior awareness established (blocked “Puzzle x LendUp” account in 2023)
  • Publicly engaged with CEO LinkedIn post within days of notification
  • Shows conscious choice to continue support despite comprehensive evidence

Dasha Shunina (Forbes Contributor / Puzzle GTM Strategist):

  • Notified of documented fraud pattern
  • Previously engaged with every Puzzle post immediately (within minutes, dual account engagement with comments)
  • Shows consciousness of liability and awareness of conflict of interest exposure

Matt Tait (Founder/CEO, Decimal - Accounting Partner):

  • Notified November 11, 2025 at 2:37 PM with complete fraud documentation; viewed my LinkedIn
  • Liked Charles Crabtree’s LinkedIn post written after notification
  • Active engagement despite receiving comprehensive evidence of CFPB enforcement, photoshopped metrics, and false credentials
  • As accounting firm CEO, continuing to publicly support accounting software led by someone with documented fraud history creates professional liability for his firm and CPA clients
  • Mutual podcast cross-promotion: Sasha on Decimal’s podcast, Matt on Puzzle’s podcast - coordinated content production despite fraud documentation
  • December 2, 2025: Sasha deploys different video clip of Matt (not same segment as previous deployments) for “Real Leadership” LinkedIn post, suggests ongoing content coordination

Joe Faris, CPA (Accountalent):

  • Notified directly via LinkedIn message titled “Concerns Regarding Sasha Orloff”
  • Continued endorsing CEO’s “highest integrity” after notification
  • Testimonial deployed twice by Puzzle (Charles Crabtree Nov 5, company page Nov 12) following fraud documentation
  • Featured as guest on Tech Finance podcast - quid pro quo pattern: endorsers receive podcast platform/publicity in exchange for testimonials, creating obligation and deeper investment in continued support despite fraud documentation
  • Continues engaging with Puzzle content despite professional liability warnings

Charles Crabtree (VP of Accounting Firm Partnerships, Puzzle):

  • Deployed Joe Faris “highest integrity” testimonial November 5, 2025 (3 days after ActualQuickBooks documentation)
  • Systematically suppressed fraud documentation comments on CPA-focused posts
  • Promoted Digital CPA Conference November 11 (one day after warning comment deleted in 4 minutes)
  • Notified November 11, 2025 via [email protected] regarding pattern of testimonial weaponization and evidence suppression
  • Professional role involves managing CPA relationships and coordinating endorsements as credibility shields

Nick Abouzeid (CEO, Rivet.tax - Accounting Partner):

  • Backed by XYZ Capital (Ross Fubini, Managing Partner) - same investor as Puzzle Financial; XYZ led Rivet’s preseed alongside 40+ executives from Ramp, Newfront, Deel; creates structural conflict identical to Forbes Midas List pattern
  • Notified November 10, 2025 at [email protected] with CFPB enforcement summary, photoshopped metrics evidence, false credentials documentation, SEC whistleblower complaint number, and professional liability warning
  • November 13, 2025: Uploaded interview with CEO to YouTube and promoted on Twitter three days after notification
  • November 13, 2025: XYZ Capital (investor) liked LinkedIn post sharing Rivet.tax podcast episode with CEO—demonstrating active support and coordination post-notification
  • Continued platforming despite comprehensive documentation of fraud pattern
  • As accounting software CEO, providing media platform to someone with documented CFPB enforcement and metric manipulation creates professional liability for firm and CPA clients
  • Active promotion after notification demonstrates conscious choice to platform fraud rather than investigate claims
  • Portfolio coordination: Ross Fubini (XYZ Capital) invested in both LendUp and Puzzle (via Kapor Capital → XYZ transition); now backs Rivet while Rivet CEO platforms Puzzle despite fraud documentation; XYZ actively endorsed platforming by liking promotional LinkedIn post—investor portfolio protecting itself through network coordination

Pattern Across Stakeholders:

November 2025 LinkedIn engagement on CEO posts shows multiple investors, partners, and affiliates actively supporting despite:

  • Systematic notification with primary source documentation
  • CFPB enforcement history
  • False credentials pattern
  • Ongoing metric manipulation
  • SEC whistleblower complaint filed November 11, 2025

Behavioral pattern shows consciousness:

  • Immediate engagement after notification (Matt Tait: content posted after notification)
  • Continued endorsement after warning (Joe Faris: “highest integrity”)
  • Strategic testimonial deployment (Charles Crabtree: 3 days after exposure)
  • Evidence suppression (Comments deleted from CPA-focused posts)

This pattern of post-notification support shows knowing complicity rather than passive ignorance. Each continued association after notification becomes part of the permanent record showing consciousness of fraud and choice to proceed regardless.

Immediate engagement (Matt Tait liking after evidence) shows that notifications were received and processed. The choice to continue support or suppress evidence was conscious, not ignorant.

LinkedIn engagement after fraud notification

Ash Rust, Dasha Shunina, Charles Crabtree, Matt Tait, Sophia Xiao (GC), and many others continue to show support since notification

Systematic Partner Notifications (November 11, 2025):

Following SEC whistleblower complaint filing, notified Puzzle’s accounting partner network of CEO’s CFPB enforcement history, recent metric manipulation, and professional liability concerns.

Firms Successfully Notified:

Each notification included: CFPB enforcement summary, recent photoshopped metrics evidence, false credentials documentation, SEC whistleblower complaint number, professional liability warning, and link to complete documentation (toxic.systems). Emails established partners’ awareness for future regulatory or professional liability proceedings.

The Human Cost

The previous sections maintain an analytical tone for federal investigators. This section documents the personal cost: gaslighting, isolation, and psychological warfare.

The professional documentation above (timelines, corporate filings, CFPB records) obscures something essential: I was breaking while building this record. The gaslighting was so effective that even with contradictory evidence in hand, I doubted my own memory. Days after termination, I posted on LinkedIn that I had been “conditioned by workplace instability into thinking I was getting fired, but in reality I resigned.” I changed my tagline to “this guy’s crazy i’m sure,” anticipating that people would dismiss my documentation as the ravings of a disgruntled employee. CEO Sasha Orloff viewed my profile after this post, monitoring my public struggle with the false narrative he had created.

Breaking While Fighting

The contemporaneous communications to HR Pals show someone trying to protect others while being systematically destroyed:

June 6, 2023 (6 days after termination):

“None of this would have happened if the raging Silicon Valley grifter ego didn’t take over this company throughout this past month. Something is very wrong with Puzzle and you need a third-party to look into it. You need to save whoever’s left. This will not go well under the current leadership and anyone close to them is so blinded by what’s really going on.”

August 23, 2024 (over a year later):

“I’ve suffered before, during, and after Puzzle. I’ve worked with many people in my life and have never met such shameless people who can’t own up to their mistakes in life. People who can’t treat me with an ounce of dignity without brushing aside the very real things I’ve found and questioned. People who have no idea how to de-escalate a situation if it means they have to look inward for once in their lives. Refusing to acknowledge a single word while shuffling behind the scenes, setting up meetings without talking to me directly, stalking me, and trying to shut me up with money… It was ultimately a failure of their collective character and the exact type of brainwashing that is destroying the world every second. Their ‘emotional distress’ is a mere fraction of what I’ve gone through. Everyone failed me. That’s their karma to deal with. I’m not making threats. I’m not a violent person. I’m moving on as of today. This wound has festered long enough.”

The Isolation

Sunday Before Termination - Public Vulnerability:

Days before my May 31, 2023 termination, I posted on LinkedIn from a park about tech industry disillusionment. The post described reaching “a point of derealization and disillusionment” after 10 years in tech, burning out repeatedly while trying to maintain socioeconomic status, and ended: “I want to focus on mental health and plant medicine going forward. This is who I am. 🍄🌵💖”

One person who liked that post never spoke to me again after June 6, 2023—when I tried showing colleagues the TedX talk and Glassdoor reviews of Mission Lane, sending emails to careers@ and help@ with documentation of the CEO’s CFPB enforcement history. The pattern: people will engage with your vulnerability about mental health and burnout, but disappear when you document fraud that threatens their reality.

June 5, 2023 - Internal Warning Attempts:

I sent emails to [email protected] and [email protected] with subject lines “Job opportunity?” and “The call is coming from inside the house.” Content included:

  • CEO’s TedX talk from a decade earlier
  • CFPB enforcement action documenting LendUp’s fraud
  • Mission Lane Glassdoor review (1.0 stars): “Terrible. Typical dirty subprime CC… The culture at this place is toxic. They say to be ‘scrappy’ to excuse their lack of proper management… HR is a joke and calls themselves ‘people ops’ to give you a fase sense of security and comfort. Don’t have opinions or point out management’s opportunities unless you want to be blacklisted for any advancement.”
  • Contradictory interviews about LendUp split

Ended with: “Is this someone you want to support? If you still say yes, keep thinking and looking.”

June 6, 2023 Email to Therapist:

“I think on Tuesday I started digging up more of the CEO’s interviews and articles about his past companies and I started getting more disgusted. He also would not stop posting on social media. I couldn’t focus all Tuesday and decided to slam out the project at late into 4am or so.”

Leading up to August 11, 2023 - Public Psychedelic Stance:

On the “Puzzle Financial x LendUp” Twitter account I was running to document the fraud pattern, I tweeted something like: “dmt, ketamine, psilocybin, mescaline > listening to tech bros.”

This was public documentation that (1) I was using psychedelics, (2) as an alternative to the toxic tech bro culture the CEO represented. He saw this. He knew. The August 11 C&D came anyway—1 hour 41 minutes after my SEC complaint filing.

This was the beginning of the isolation. Public signal about wanting to pursue healing (LinkedIn post) → attempt to warn people internally about fraud (June 5 emails) → public declaration of psychedelic use as alternative to tech fraud (Twitter) → people who had engaged with vulnerability now silent → complete isolation.

January 19, 2024 - ODF CEO Outreach:

When I reached out to ODF CEO Julian Weisser on January 19, 2024, after documenting the pattern comprehensively, I sent two emails:

2:38 PM:

“i can shout from the rooftops about all the abuse and lies rampant in tech startups and it’ll fall on the deaf ears of the fraternized. i’ll be here when everyone realizes investing their time and money in sasha/puzzle is a mistake. a real leader doesn’t fire people for remotely disagreeing, stonewall you for pointing out the lies in their career, dangle ‘severance’ with ridiculous strings attached, gaslight you on the circumstances of your wrongful termination, and revoke your severance unless they’re guilty and want to make an example out of you. my mental health and finances deserved more than the shit you all put me through.”

2:43 PM (5 minutes later):

“sasha let me blast him and mission lane for weeks on social media. his response? block me. then give me a call when i publicize the wrongful termination and the revoked severance, to tell me i resigned and yet he wants to offer severance one more time. then send me a cease and desist letter (along with mission lane) when i reveal the document proving QED Investors bought him out for being a terrible leader. is this bullshit normal to you? because to me, this is a privileged narcissist without an ounce of empathy for the people who give him their lives. fuck this.”

This email laid out: wrongful termination, revoked severance, dual cease-and-desist letters, Asset Sale document proving conflicts of interest, pattern of retaliation, and personal toll. The email directly asked ODF CEO Julian Weisser: “is this bullshit normal to you?”

His response: 22 months of silence, continued platforming, and “Top 2025 Company” designation November 12, 2025 (one day after SEC whistleblower complaints documenting federal retaliation).

The Timeline of Active Celebration:

KEY EVIDENCE: Real-Time Enablement During Federal Complaints

  • November 11, 2025, 3:33 AM ET: Filed SEC whistleblower complaint (Submission #17628-500-136-464)
  • November 11, 2025, 6:02 PM ET: Received second C&D letter from Orrick threatening criminal prosecution
  • November 11, 2025, 6:32 PM ET: Filed supplemental SEC complaint documenting retaliation (Submission #17629-039-523-592)
  • November 11, 2025 (same day): Julian Weisser was wearing his Puzzle shirt
  • November 12, 2025, 12:53 PM ET: Julian Weisser publicly comments on ODF’s “Top 2025 Companies” post featuring Puzzle: “Congrats on all of the progress! I was just wearing my Puzzle shirt yesterday”

This is what institutional failure looks like in real-time: a whistleblower asking “is this bullshit normal to you?” and receiving active celebration as an answer. Julian Weisser was literally wearing Puzzle merchandise while federal whistleblower complaints documenting retaliation were being filed, then publicly celebrated the company the next day.

I registered toxic.systems January 21.

The Gaslighting Effect

Even now, with comprehensive primary-source documentation spanning a decade, I still question whether I’m hallucinating the pattern. The gaslighting was so systematic that I told family and friends pushing back on me: “you don’t know what this is. i don’t want to hear it. trust me.” Because explaining requires them to see what took me 2+ years to document, and they’re worried I’m being consumed by something that won’t matter.

They can’t see it yet. I can. And history will prove whether I was right.

Psychedelic & Psychic Prophecies and the Question of Reality

On Sasha’s “Drug Use” Claims: What he characterizes as “drug use” was therapeutic plant medicine supported by my licensed therapist while processing workplace trauma and grief. This section provides full context to counter his defamatory narrative.

Context: This section documents therapeutic experiences during workplace trauma because they’re part of the story, potentially flag issues with VC-backed psychedelic therapy, and preempt the predictable “he was doing drugs and having spiritual experiences so he must be crazy” dismissal tactic.

Therapeutic Context (December 2022-May 2023)

During the period leading to termination, I underwent at-home VC-backed therapeutic ketamine treatment while navigating a long and difficult breakup. This was also when I was aggressively against AI—refusing to touch ChatGPT, highly skeptical of Sam Altman, spending a lot of my thinking on this position.

In one dissociative session, I experienced a visualization of Puzzle as a node in a network graph with an overwhelming sense of systemic collapse. The same session produced a flash of alternative life paths (art, music, more tangible pursuits) and a brief feeling I described to my therapist as resembling a “Jesus figure” moment.

Post-ketamine, I explored DMT in controlled settings. Initial breakthrough experiences included high-pitched tonal phenomena expanding into silence, auditory phenomena resembling multiple chattering high-pitched voices, and a sense of external presence (including a painting morphing into a face). One of my first experiences involved a sensation like a piercing line straight through the crown of my head, accompanied by emotional release. In the weeks before termination, these experiences triggered a brief manic episode. Despite DMT’s rapid metabolism, I experienced persistent reactivation and cross-wiring effects: fever dreams, altered cannabis experiences, and other unexpected phenomena. I used psilocybin to stabilize. During that session, I experienced overwhelming visual phenomena (geometric spirals responding to emotional state) that resolved by the end of the trip, demonstrating the cross-wiring pattern rather than ongoing persistent effects.

I had shared some of these experiences with a colleague during our one-on-ones. He was supportive immediately after my termination. Months later, post-October 7 Hamas attack, he reached out concerned about a LinkedIn post where I said I didn’t want to live in a world “with this much evil.” His message was framed through “misinterpretation” lens (“I’m sorry if this is all misinterpreted”), demonstrating the “walking on eggshells” atmosphere documented elsewhere in this statement.

June 2023 - Language and Pattern Recognition

In June 2023, I experienced what I interpreted as “light language” during a DMT session. Internal monologue accelerated beyond normal cognitive speed into what felt and looked like hypercompacted symbolic communication; an advanced language-centric synesthesia; a “download.” DMT consistently made me think about data encoding throughout our world, at times being able to see waveforms, patterns as information structures. Other visual phenomena included blasting through a “rainbow tunnel” of concentric circles and liquid crystal formations.

The most significant phenomenon was simultaneously visual and auditory: text morphed into unrecognizable characters while I experienced a low-pitched monotone voice using what felt like my internal voice mechanism. The voice was characteristically my tone but unnaturally low-pitched, monotone, and phonetically resembled Latin (Romanian is my first language). The initial panic response (“oh I think I broke my brain this time”) immediately dissolved into a stream of communication—meaning conveyed through the morphing characters and voice in ways that felt ancient, powerful, and operating at speeds beyond normal conscious processing.

These experiences reinforced my sense of pattern recognition ability—what I conceptualized as “crown chakra opening” (referencing the earlier piercing sensation and emotional release) corresponded to increased capacity to identify systemic fraud patterns.

During one DMT session, I heard the phrase “he knows too much” while feeling intense concentration in my third eye area. Whether this was internal awareness becoming audible, external communication, or pattern recognition processing fraud documentation, it corresponded to the reality that I was documenting a 13-year fraud pattern while the CEO monitored my public posts about psychedelics.

The experiences were documented in real-time communications with friends, describing attempts to understand the phenomena while acknowledging they were “prob not the best way to cope.”

June 28, 2024 - Light Language Continuation

A year later, I visited a reiki practitioner who specialized in light language. I had shared my June 2023 DMT “light language” experience with him. He was teaching me how to use light language through automatic drawing. At the end of the session, he drew me a symbol. I interpreted it as wizard-like:

“Regarding the one you made for me, I mostly saw a piercing observer, seeing light through the third eye, maybe even wizard-like. I shared it and the Lemuria tidbit with a good friend (who’s keen on Reiki), and he immediately sent the ‘Atlantis’ movie poster and said ‘water sundial.’ I thought… huh. Yeah, there is that triangular fin and a play of light.”

His response:

“Regarding the symbol I gave you, that is exactly it. The symbol was regarding your activation when we met. Third eye, crown (wizard energy)—that’s it! That symbol was about you and your energy :-)“

July 2025 - QHHT Hypnotherapy

Months before filing federal complaints, I went to a QHHT (Quantum Healing Hypnosis Technique) hypnotherapist. I came out almost underwhelmed and reached a simple conclusion: my higher self was just me. I should trust my own judgment. I experienced no past lives, just felt this blank slate of starseed/Lemurian energy—which I interpreted as permission to stop seeking external validation and start acting on what I already knew.

November 2024 - Japan: Pattern Recognition on Spiritual Grifting

A year ago in Japan, after making a genuine spiritual commitment at a mountaintop shrine (left Esther’s fur next to the shrine, made a wish to be an artist), I encountered the perfect opposite: a wealthy guy selling packaged spirituality. It was my last night in Osaka, enjoying a listening bar on my own, off a few drinks—enough to be bold. I accidentally recorded the whole conversation on a field recorder in my jacket.

The Guy’s Background (from transcript)

  • Wealth from selling cocaine to Winklevoss twins on a yacht, got his Bitcoin that way, sold every last one for “endless ragers” pre/during COVID (Florida? New York?)
  • Business inherited at birth from mother (IQ&A(?) company that worked for Bush administration)
  • Wife works with professional athletes (NFL specifically)
  • Now selling $1100/month subscription boxes (palo santo, crystals, astrology “pathology profiles,” life coaches, some defunct app that cost $10k and servers went down)
  • Targeting “lonely” people, constantly talking about the 0.01%, “everyone has multiple jobs,” “everyone needs to clean shit up”
  • Requires NDAs to “go deeper”

The Confrontation (transcript excerpts)

After I observed: “you’re only happy in the context of what other people think about you”

Him: oh really?
Me: yes
Him: oh so you’re a good fortune teller
Me: yes
Him: okay, so are you a fortune teller?
Me: i’m pretty psychic
Him: oh you’re psychic
Me: a little bit
Him: a little bit? oh wow i like that. that’s a good thing
Me: i’m not working with you
Him: what?
Me: i’m not working with you
Him: i never asked you to
Me: because you know i don’t deserve to work with you
Him: no i don’t know that
Me: you do know that

(Let’s say “I don’t deserve to work with you” was a reversal meaning “I don’t deserve to be subjected to your grift”)

He tried testing my spiritual authority:

Him: are you christian are you atheist, buddhism?
Me: no no no, doesn’t matter
Him: well i’m just asking, you’re asking me all these questions
Me: i don’t ascribe to anything
Him: okay well. it’s also a devil. so
Me: i have a little bit of that
Him: god says you’d be a devil if you synthesize yourself like that
Me: [laughter]
Him: how do i know to be working with you, why would you think anybody wants to work with you? why do you have the gift or the power? what gives you the power? can you see foresight? can you move a spoon?

Then tried establishing creative authority:

Him: are you a director?
Me: [pause] maybe
Him: what do you make?
Me: what? what do you mean what do i make?
Him: what do you make?
Me: illusions.
Him: illuuuuusions
Me: illusions for you. illusions for you.
Him: oh, so your whole bullshit is illusory
Me: what?
Him: you’re entirely illusory
Me: i’m—oh. i love it.
Me: enjoy your yacht, have a good night

The Closing

His last words: “oh, right, i love it.”

His business partner shook my hand. I told him: “watch who you keep near you.”

The grifter immediately closed out, muttering “this fuckin guy” on his way out.

Pattern Recognition Across Contexts

The same recognition that identified Sasha’s fraud worked on spiritual grifting. Both rely on manufactured authority, performance over substance, selling illusions. The guy sensed something in me, tried to establish power dynamics (devil talk, testing spiritual credentials, questioning my authority), collapsed when exposed. His wife silently acknowledged the critique.

Genuine pattern recognition, not performance.

I’ve also been scammed by a variety of fake psychics and gurus, usually knowing and participating despite the cost. In college, I found myself leaving an MLM meeting in a hotel conference room; the guy who invited me thought I was a fool. I have some weird obsession with understanding power dynamics and deception.

I choose where I consent to observe the act play out. This guy selling $1100/month spiritual subscription boxes was just another iteration: packaged spirituality, manufactured scarcity, NDAs to “go deeper.” The Japan encounter was me watching the mechanics, off a few drinks, enough to be bold. Pattern recognition as both shield and compulsion.

August 15, 2023 (4 days after the first C&D), my Fiverr receipts:

  • “White magic spell to make your any wish come true - TIER 2 RITUAL”
  • “Powerful protection spell against curses, attacks, black magic - PREMIUM package” + Extra Fast 1 Day Delivery + Evil Eye Protection + Positive Energies
  • “Blockage removal ritual for an efficient result. recommended.”

I also showed a psychic pictures of Sasha Orloff and Nigel Morris. She said, “These people did bad things.” She told me I was wearing my heart on my sleeve, to a fault.

September 28, 2023: “Protection spell to protect from negativity - Protection of Thor”

Three different sellers. A small but non-trivial amount of money. This was a sincere attempt to fight off psychic damage after legal threats. I also remained curious enough to observe the mechanics: how they structured the upsells, the language, the urgency. Maybe the spells worked, maybe they didn’t. Maybe the observation itself was protection. Same dynamics as VC pitch decks, different aesthetic. I kept the door open to both being true.

Esther and the Cost of Survival

My cat Esther was diagnosed with congestive heart failure in May 2022, a year before my termination. I spent the majority of my money trying to keep her alive over the next 2 years, eventually medicating her 3 times daily. I refused to let go of my entire life at once. After termination, I prioritized her needs over job searching, wallowing in depression and substance use while building my life around her medication schedule. She was the one constant through all the abuse.

VP of Engineering Radha would ask “how’s your cat” in performative concern, but nobody at Puzzle gave a shit about me once I was gone.

I spent 9 months unemployed. Job application processes triggered me.

August 31, 2023: I incorporated Static Void Studio (staticvoid.studio), spending my time leading up to my next job trying to heal through painting and learning TouchDesigner to develop more visual language. Trying to avoid working in VC tech again. The corporate filing was another document in a year of documents. This one was about attempting to build something independent, something that couldn’t be taken.

January 8, 2024: My first interview since Puzzle. A cofounder questioned my lack of projects showing growth capability or customer focus. I ended the interview within 15 minutes. My follow-up email:

“To be completely candid, I worked for 2 con-artists for my last two jobs since my layoff at Telnyx. I don’t know how to positively spin this. I’ve been overworked at each job with no pride, with others climbing the social ladder off my work, and now I don’t think I have a chance at a worthwhile full-time gig again… I’m just really distraught over people not even seeing a chance in me because of a past that’s been dictated by others. I shouldn’t even be sending this. It was my only interview since Puzzle.”

November 6, 2024 (10 months later, after publishing fraud documentation): I followed up with the same interviewer:

“Giving you confirmation that I worked for a second con-artist. I’m doing this to save the remaining employees and to set Sasha Orloff’s record straight once and for all… You were my first post-Puzzle interview months into my traumatic fallout. Now you know why I crashed out and hope you are more flexible with candidates’ situations going forward.”

February 9-12, 2024: Second interview, coffee then technical. Tried to be measured, still had to explain the fraud history. Follow-up: “I’ve found many circumstances in startups beyond my control (work ethic doesn’t fix everything). I end up worrying that people view me as a job-hopper as a result. I also try to approach opportunities with more due dilligence and level-headedness now, hence asking about runway and worst case scenarios.” The due diligence (learned caution from two frauds) made me harder to hire. February 20: Virtual technical interview. No further contact. I didn’t follow up either.

March 2024: I eventually found another position, but felt I could not discuss anything I had gone through. I had to apologize in interviews for remotely coming across negatively about Puzzle. In the new role, I felt continuously misunderstood, underutilized, and scrutinized by coworkers. Even if that perception was influenced by trauma, the feeling was valid. Carrying unprocessed workplace abuse into new environments creates real barriers to trust and performance.

May 2, 2024: I had to let Esther go after 2 years of care. Days before, while giving her medicine, I told her it’s okay if she has to go soon, that I’ll understand. She waited for me to get back from a work trip. She knew.

Two weeks later, I spoke to a pet psychic medium. My notes from that session:

The medium called me an observer. Said Esther and I had a soul connection: grounded, anchored, completely there all the time. At the end, Esther was still there but leaving her body. The medium said she couldn’t have had more love or comfort, had everything but wasn’t spoiled. Companion and teacher.

Esther said I don’t connect with a lot of people, it doesn’t do it for me. Less is more for us. She never had a moment of tediousness. Loved me so much but didn’t have to show it. Feeling of tranquility. She always knew my gratitude. Calls us roommates. She always felt stimulated.

I’ve gotten used to suffering in silence. The last person to start talking about myself. Esther observed my resilience. Knows I’m quiet but overwhelmed by noise. She didn’t need to try to get my attention. I make myself smaller, feel like I’m bothering people.

She wanted to give me unconditional love. Conscientious soul, she knows my intuition. She didn’t feel well but wasn’t sad about it. She was more worried about me. She knows I did everything I could. I helped her let go.

She felt liberated at home. Overanalyzing as self-protection/self-love. My feelings are intense. People give me obstacles, I work around them. She got along with everyone, easy for everyone. She met me and knew she wasn’t gonna be stressed anymore. She trusted me and the people I brought in.

For a while now, it’s hard for me to enjoy much. We’re human beings, not human doings. Esther says I feel if I’m not doing, I’m not worth as much. I’m an asset to this world.

I couldn’t have loved her more.

Weeks later, during a ketamine and psilocybin session processing the grief, I heard a piercing buzz. I walked around my apartment seeking the source. It guided me to her urn. I heard “I’ll always love you” and felt showered with love. The piercing buzz echoed the “piercing line through the crown” sensation from earlier DMT experiences. Pattern recognition extending into grief processing, or genuine connection, or both. Loss and love documented the same way as fraud patterns: by paying attention.

To this day, I’ve largely lost my ability to consume media and enjoy activities on a normal basis. If I’m not listening to Bladee, I find myself constantly playing spiritual/tarot/divinity videos on YouTube in the background, an odd compulsive habit that replaced what used to be normal media consumption. The pattern recognition that identified fraud now seeks meaning everywhere, unable to shut off. Entertainment feels hollow. The hypervigilance doesn’t stop.

I used to work on the couch late at night with Esther by my side, Bob Ross in the background. I haven’t watched him since.

Why This Is Documented

Everything else in this statement seems like a coincidence until it’s not. The DMT experiences felt like lessons delivered through specific stimuli I would understand: holographic pattern-repetition as a metaphor for recognizing that what I saw in Sasha existed in other people, in either lesser or more severe manifestations. The “light language” experience corresponded to increased capacity to identify systemic patterns. The ketamine visualization of Puzzle as a collapsing network node preceded comprehensive federal documentation of exactly that pattern.

The prophecy is interesting. February 2023: visualized Puzzle’s collapse during therapeutic ketamine while aggressively anti-AI and skeptical of Sam Altman. November 2025: filing federal complaints documenting exactly that collapse using Claude (Sam Altman’s competitor). From refusing to touch ChatGPT to using AI to dismantle the fraud network Sam Altman’s ecosystem enabled. That’s the duality I learned.

November 11, 2025, 3:33 AM ET: When I submitted my comprehensive SEC complaint, I looked up at the clock: 3:33 AM on 11/11. Angel numbers. I knew I was protected. I knew this was real. Hours later, Orrick sent their second C&D threatening criminal prosecution. I responded in 5 minutes using AI and filed a retaliation complaint with SEC within 30 minutes. That night, Sasha posted his 6+ hour late-night LinkedIn spree including the “AI created Ellis Island” dissociative content. The synchronicity confirmed what the ketamine visualization showed 2.5 years earlier: this was always going to happen, and I was always going to be okay.

This is documented because:

  1. It’s part of the story - therapeutic attempts to process workplace trauma and grief (breakup, Esther), VC-backed ketamine industry worth noting; throughout this period, I discussed virtually all of these experiences with my therapist who never judged me and encouraged exploring spiritual growth on my own terms; having professional support that validates rather than dismisses non-traditional healing approaches matters when processing workplace trauma and loss
  2. Dismissal tactics are predictable - “he did drugs and had spiritual/psychic experiences” will be used to avoid addressing CFPB orders and photoshopped metrics
  3. Conditional care reveals complicity - coworkers framed concern through “misinterpretation” and “walking on eggshells” language; Radha’s performative questions about Esther while enabling wrongful termination
  4. Nobody actually cares about the psychedelic use itself - it’s just another angle to dismiss pattern recognition when the patterns are verified by federal records
  5. I learned duality - went from aggressively anti-AI to using AI to fight fraud beneath my intelligence; psychedelic experiences, psychic pattern recognition, and analytical documentation all serve truth
  6. Loss and love use the same attention - the piercing buzz leading to Esther’s urn used the same pattern recognition as identifying fraud; both require being present to what is
  7. Pattern recognition works across contexts and states - the same capacity that identified corporate fraud (Sasha) immediately spotted spiritual grifting (Japan encounter, off a few drinks); works on psychedelics, alcohol, and unaltered; fraudsters recognize when they’re being seen

The trauma was real. The psychedelic experiences were real. The psychic insights were real. The grief was real. The AI journey was real. The pattern recognition works across different states of consciousness. The documentation is verified. All coexist.

The Irony: CEO’s Public Anti-Drug Stance

While I was using therapeutic ketamine and psychedelics to process workplace trauma, CEO Sasha Orloff was aggressively posting about SF’s “drug doom loop” and fentanyl crisis on Twitter. Sample posts easily found with keywords “drugs” and “fentanyl”:

  • “Let’s make crime illegal again, whether it’s a drug dealer or our local government” (Oct 2024)
  • “Drug dealing is not a victimless crime. By definition it has victims and is a crime” (Jul 2022)
  • “Dealers of deadly fentanyl should be arrested and prosecuted to the fullest extent of the law” (Feb 2023)
  • Multiple posts about “open air drug markets” and SF policy failures
  • “SF taxpayers seed funded a $200M venture to give homeless drug addicts free hotels and free drugs” (Jan 2021)

The CEO who created toxic workplaces requiring therapeutic substance use to process the trauma now has convenient ammunition: “he was doing drugs” becomes a dismissal vector. The same person who permanently defrauded 140,000+ consumers and caused PTSD in employees can point to therapeutic psychedelic use as evidence of instability.

January 6, 2024 tweet: Quote-tweeting Midjourney visualizations of LSD effects, posted: “Makes me kind of regret being a nerd in college.” Admits never trying psychedelics while using AI-generated images to understand substances. The aggressive anti-drug stance combined with zero personal experience creates perfect positioning to weaponize my therapeutic use against federal documentation.

Sasha Orloff tweet never trying psychedelicsJanuary 6, 2024: Sasha Orloff (@sashaorloff, verified) quote-tweets “Artificial World” (@ARTiV3RSE) Midjourney LSD visualization post with “Makes me kind of regret being a nerd in college.” Admits never trying psychedelics while aggressively posting about SF drug policy and dismissing therapeutic use. Posted 6 months after my termination while I was processing workplace trauma with substances like ketamine and psilocybin. Pattern: CEO who created toxic workplaces now has ammunition (“he was doing drugs”) to dismiss federal fraud documentation.

Of course he’s never tried them. Someone retaining this many lies to stay operable (false “cofounder” claims, photoshopped metrics, CFPB ban denial, decade of credential fraud) cannot use psychedelics without severe risks. Ego dissolution and forced truth-confrontation are incompatible with maintaining systematic deception. The aggressive public stance reads as self-preservation from substances that would expose the cognitive dissonance required to operate this fraud network.

Note for investigators: The dismissal tactic is predictable: “he was doing psychedelics and having spiritual experiences, so the fraud documentation must be delusional.” The therapist evaluation section documents licensed clinical assessment confirming workplace gaslighting and systematic manipulation, not mental illness. More importantly: therapeutic experiences during trauma don’t invalidate CFPB enforcement orders, court judgments, corporate filings, or photoshopped metrics. The prophecy is interesting. The documentation is verified. Both can be true.

Why The Pain Matters

This documentation exists because breaking me didn’t silence me. The system depends on:

  • Most people accepting settlements
  • Most people signing NDAs
  • Most people being too exhausted to fight
  • Most people doubting their own reality after effective gaslighting
  • Most people lacking the resources to document comprehensively

I refused every exit ramp they offered:

  • Declined the severance that required signing away fraud claims
  • Declined the voicemail offer of “transition costs” when I was publicly desperate
  • Declined to stop documenting after dual cease-and-desist letters
  • Declined to accept their “resignation” narrative despite effective gaslighting
  • Declined to believe I was “mentally ill” despite their internal characterization

Each refusal cost something. Financial precarity. Isolation from family and friends who didn’t understand. Psychological toll of being gaslit while gathering evidence. The exhaustion of fighting alone against institutional inertia.

The Inversion

The AI Journey:

At the time of termination, I was aggressively against AI. I refused to touch ChatGPT. I was highly skeptical of Sam Altman. I spent a lot of my thinking on this skepticism.

I gradually learned duality. I accidentally joined a company that pivoted 100% to agent-driven AI development. That’s when I started using Claude—first to understand AI, then to emotionally distance myself from work. Now I use it to fight against a network of fraud that’s beneath my intelligence.

The Irony:

I’m using AI (built and funded by the same VC ecosystem that enabled this fraud) to document their systematic deception. I’m inverting VC-backed AI to destroy the system that created it. Every fraudulent startup now faces the possibility that any technical employee can:

  • Use AI to structure comprehensive documentation (weeks instead of years)
  • Follow this template to document their own pattern
  • Notify all stakeholders systematically
  • Create permanent public records
  • Make accountability scalable at near-zero cost

The tools Sam Altman’s network built to extract value at scale now enable documentation of fraud at scale.

The marginal cost of exposing fraud just dropped to near-zero.
The marginal cost of committing fraud is about to become infinite.

What Breaking Me Created

The system broke me to protect itself. In breaking, I exposed how the system operates:

  • Fraudulent credentials across multiple companies
  • Regulatory capture (CFPB shuts down company, CEO starts new one with same VCs)
  • Platform complicity (YC, TechCrunch, Forbes all notified, all continued enabling)
  • Retaliation infrastructure (separation agreements requiring fraud claim waivers)
  • Gaslighting at scale (characterizing whistleblowers as “mentally ill”)
  • Financial warfare (equity deletion, revoked severance)
  • Legal intimidation (dual cease-and-desist letters for documenting public records)

None of this would be documented if they hadn’t tried to destroy me.
My pain became the pattern.
My trauma became the evidence.
My breaking became the breaking point.

For History

Future whistleblowers will read this section and recognize themselves. The gaslighting. The isolation. The exhaustion. The self-doubt despite evidence. The family and friends who don’t understand. The institutional failure across every channel. The feeling of fighting alone against overwhelming resources.

This is what it costs to refuse to be silenced.
This is what it takes to create accountability when institutions fail.
This is what breaking looks like when you refuse to disappear.

The professional documentation (timelines, filings, corporate records) shows what happened.
These quotes show what it cost.
Both belong in the permanent record.

Ongoing Emotional Distress (November-December 2025)

The documentation process has not protected me from continued psychological deterioration. As blocks, ignored notices, and dismissive responses accumulate, the following patterns have intensified:

Withdrawal and Dissociation:

  • Minimizing contact with nearly everyone. Barely able to engage in conversation.
  • Unable to spend more than a few hours with people before dissociating, feeling antsy, needing to leave.
  • Continued hypoarousal and dissociation. Using THC, alcohol, and other substances for numbing. Sleeping in late. Using spiritual YouTube as my only source of hope.
  • Nervous system on high alert. Unable to handle check-ins from multiple people in the same day.
  • Randomly crying or persistent feeling of tears welling up behind my eyes.
  • Quickly withdrawing from friends once I recognize they are not providing safe spaces.

I completely stopped using Instagram. I haven’t responded to birthday messages. I stopped taking photos on my phone. I can’t engage with everyone else’s lives knowing I can’t share what I’m going through.

Declining Will to Live:

Each block, each ignored notice, each dismissive response compounds the feeling. The decline is measurable by the accumulation of non-responses to documented federal-level evidence.

Don’t tell me to fucking call 988. They’re so useless it almost snaps you out of it.

Friends Becoming Data Points:

  • People I once trusted have become examples of larger emotional abuse patterns.
  • Wellness check-ins have been weaponized: concern performed without engaging with substance.
  • Most people do not engage with any evidence. “If you want to take your mind off…” without understanding that this “help” is isolating.
  • When evidence is engaged, responses include: “too much Claude stuff,” “okay so he lied about being a repeat founder,” “I don’t really understand the fraud or RICO aspect.”
  • Continued pattern of suggesting attorneys and journalists without reading any documentation of the 2.5 years of steps I’ve already taken.
  • Refusing to view me as the expert in my own RICO case. “Let the experts handle it.”

The “Right Way” Gaslighting:

People keep insisting I’m not handling this “the right way” or “in my favor.” They deny the novelty of this situation. Nobody has done this before. There is no playbook for a single person documenting a 13-year RICO pattern across multiple entities, filing 5 SEC complaints, a bar complaint, a CPA board complaint, notifying 100+ stakeholders, and building comprehensive federal documentation in real-time.

This is already expert-level quality. Attorneys, crisis PR firms, VCs, and legal partners are viewing this documentation. The SEC has the complaints. The pattern is verified by CFPB enforcement orders, court judgments, and corporate filings. The documentation methodology is sound. The claims are backed by primary sources.

I have the autonomy and agency to trust that going public is the only way. I tried “official channels” for 2.5 years:

  • SEC tips (August 2023): dual C&D letters same day
  • District Attorney (2023): replied citing correct departments, nothing happened
  • Journalists (404 Media, others): no response or dismissal
  • Federal regulators: silence
  • Company HR: participation in wrongful termination
  • Network platforms (YC, ODF, TechCrunch, Forbes): 27+ months of platforming after notification
  • Bill.com (December 2025): legal team responded with objectively incorrect interpretation of CFPB order, claimed prohibitions are “specific to that entity” when order explicitly says “Defendant AND its officers,” then closed with “we consider this matter closed” — corporate dismissiveness dressed as legal analysis

Every “proper channel” resulted in gaslighting, withdrawal, or silence. Going public is not impulsive. It is the only remaining option after exhausting every alternative. The people telling me to “let the experts handle it” refuse to acknowledge that the experts failed, ignored, or actively suppressed for over two years.

Family:

I’ve told family to stop, to leave me alone when they suggest it may be time to put this behind me or express concern about how powerful these people are. Their concern is valid. Their advice is not.

Creative Shutdown:

I stopped working on senseweave.xyz immediately after discovering Sasha’s photoshopped metrics. The creative capacity required for art has been consumed by documentation. Unable to make anything.

The Few Who Remain:

Only a couple of people are fully supportive but generally unable to help. They will listen to primary evidence (photoshopping, Wikipedia meltdown) but not read the full documentation. The anonymous tipster from August 2023 remains one of the most meaningful contacts. Someone who saw it from inside.

Friendship Deterioration (November-December 2025)

Documenting patterns from a close friendship that deteriorated during this period. The arc demonstrates how even supportive relationships become untenable when someone refuses to engage with documented evidence.

November 3, 2025:

Initial check-in from friend. Expressed wanting me to “be strategic” and “not hurt opportunities.” I explained the research was thorough and truthful. Friend responded that being researched and truthful “doesn’t define strategy.” Said from the outside it “looks like someone with an injured ego not someone trying to help.”

I withdrew. Said I didn’t want to talk about it anymore.

Friend clarified they didn’t actually think that’s what it was. Said they wanted to help me “win whatever battle you’re fighting.”

November 7-8:

My birthday. Spent it alone, documenting, fixated, frozen. Friend reached out despite my withdrawal. I acknowledged feeling minimized, explained I wanted people to trust how serious this all was.

November 12:

I shared that I’d submitted SEC complaints with whistleblower protection, was certain I’d documented a 13-year RICO case.

Friend changed subject to northern lights.

Later: Asked if I was “feeling regulated.” I explained my emotional state and suggested their employer may be further exposed by this documentation. Friend called that suggestion “delusional,” asked if I was using AI a lot, said they wanted to talk with “more candidness about what it looks like from my vantage” but didn’t feel I’d hear them out.

Friend described my Substack documentation as looking like “AI psychosis.” Suggested The Intercept, 404 Media, and the district attorney. Each time I explained I had already contacted these outlets years ago, had contacted federal regulators, was awaiting legal process already in motion.

I emphasized the document was migrated to the website, written by hand 2 years ago, dismissed then too. Friend responded with standard de-escalation language: “I hope you’re able to sort through it in a way that gives you closure.”

I told them that response still felt dismissive. Said I wanted people to believe me for once. Said the document was serving its purpose of contacting federal authorities, not trying to go viral.

Friend suggested we go bowling sometime.

November 14 (Bowling):

I went. Dissociated the entire time. Still scored the highest. Observed friend repeatedly glancing at me, monitoring my state. Nobody directly asked about the RICO case. I tried striking up conversation with one person. They said there was “too much Claude stuff” in the documentation, then that he wanted to meet at a bar the following week to discuss further, that he needed time to digest.

He never followed up. I withdrew.

November 15:

I told friend things got weirder. Said the company I worked for appeared to be an Israeli/Russian counterintelligence operation. Said I wasn’t asking them to believe me or care, but needed them to understand where I was at. Sent 4 texts detailing the operation and Russian intel aspects.

Friend acknowledged “those guys have their hands in everything.” Said this was “Signal type messaging.”

I deleted the texts from the regular chat. Never heard from friend on Signal. No follow-up. No engagement with a single statement about the counterintelligence aspects. Just deflection to a more secure channel that was never used.

November 16-23:

Friend continued sending memes, poems, life updates. Got accepted to a writing workshop. I congratulated them. Engagement on my end was minimal. I wasn’t reading the poems they sent. Couldn’t engage with casual content while processing the documentation.

November 24:

Friend sent my LinkedIn post. Asked if I was okay. Said my post appeared to reference our messages. Said they had tried to offer help with messaging and efficacy. Said I was “misinterpreting our messages for linkedin posts” and that “this is going to hurt our friendship.”

I explained they weren’t the only one saying those things. Said I’d lost the energy to convince anyone else. Friend responded wanting to meet in person, repeated that they trusted me and just wanted to help because my strategy “didn’t feel in your favor.”

I told them I’d detailed every way people have put me down for 2.5 years. Said I’m not arguing about presentation unless they point to a specific claim. Said nobody else understands the scope. Listed the formal complaints filed: SEC, bar complaint, board of accountancy. Said the fun parts exist but what destroys me is feeling like nobody’s a safe space to hear what’s going on.

Friend acknowledged they weren’t trying to be dismissive, repeated the presentation concern. Said if other people were saying similar things, “perhaps there’s some merit to what I am saying here.” Said if nobody understands the scope but me, “this is perhaps a moment for communication pivoting and quiet self-reflection.”

Said their friends love me and it hurt to be interpreted with hostility.

I explained I want people to engage with substance. Said this has been a blind spot. Said I don’t need tone policing on top of false legal threats. Said it’s hard to hear feedback when nobody else has gone through this. Said there’s a literal hasbara network working to instill these exact responses.

Friend asked what better support would look like. I said: treat it like an ongoing case because I’ve built one on a silver platter. Stop pretending everything is normal. Don’t make this off-limits.

December 5-6:

Friend recovered from illness. Invited me to a show in Bushwick. I declined, said I needed to be alone.

Friend said they’d like a longer conversation, that I’d “really mishandled our friendship recently” and was “pretty upset about it.” Called my withdrawal “really weak.”

I said if that’s their takeaway I’d rather not meet. Said I’d told them repeatedly what I need and they don’t care. Said I’ll be free when this is over.

Friend accused me of being “completely selfish.” Said they’d put a lot of effort into maintaining connection and it’s been one-sided.

I told them I haven’t been reaching out to anyone. Not just them. Almost no one. They didn’t get it. The withdrawal isn’t personal. It’s survival. There’s no energy left after being dismissed by dozens of people for 2.5 years.

I said they’ve been weaponizing the friendship when I’ve told them my perspective. Told them to leave me alone. I was shaking.

Friend said they weren’t weaponizing anything, that it was an “objective statement of what is happening.” That I have a role in it.

I said I stand by my actions.

Friend said: “i think you’ve made yourself clear. i have nothing left to say.”

I said: “okay.”

Pattern Summary:

  • Repeated attempts to engage with wellness without engaging with substance
  • Framing whistleblowing documentation as “AI psychosis” without reading it
  • Suggesting outlets and experts already contacted years prior
  • Prioritizing professionalism and careerism over belief
  • Doubling down when language is called out as dismissive (“I’m not diminishing you, I don’t know how many ways I can say that”)
  • Shifting to accusations of selfishness and mishandling when I withdraw
  • Final escalation: characterizing documentation-induced isolation as weakness
  • Zero acknowledgment that Puzzle employees are facing potential jail time and wage clawback under RICO statutes
  • The hedgers: People who do listen intently and engage but keep insisting I need to remember “this might not work out,” doubt the SEC will go forward, tell me to prepare for disappointment. Even supportive engagement becomes another form of erosion when every conversation includes reminders to lower expectations. I built a federal case. I don’t need help hedging.
  • “Get a lawyer”: Friends who keep insisting I need legal counsel, as if I haven’t tried. I paid to speak with a business attorney I’d consulted two years prior. He knew exactly what Orrick meant. His assessment: Puzzle could include whatever waiver scope they wanted in the separation agreement, but since I never signed it, I’m free to publicize it. (I believe the waiver scope itself is evidence of consciousness of guilt regardless of signature status.) He offered to respond to the final November 2025 C&D, acknowledging the police threat language was misconstrued—but didn’t grasp that their entire legal strategy is baseless intimidation, not legitimate dispute. Multiple whistleblower attorneys have declined representation—not because the case lacks merit, but because RICO-adjacent cases against VC-backed companies require resources most practices can’t commit. I’m not pursuing wrongful termination to sign an NDA and walk away. The federal record is the point.

This is one friendship. Similar patterns are documented across 40+ contacts since August 2023. The emotional cost of each non-engagement compounds. The isolation is not chosen. The isolation is the result of systematic non-response to documented federal evidence.

These people don’t understand: current and former employees are facing real consequences. Jail time. Wage forfeiture. Professional license revocation. They treat me like the monster while the people I’m trying to protect are about to lose their jobs, equity, and potentially ongoing wages.

December 7, 2025 (Saturday):

Woke up and started writing on LinkedIn:

“i spent 2.5 years building Puzzle as a founding engineer. i spent the next 2.5 years receiving emotional abuse and gaslighting from 40+ people. these people, especially Sasha Orloff, would rather spit on my grave and celebrate.”

My own comment: “they’re about to lose their jobs, equity, and potentially ongoing wages. they treat me like the monster”

December 11-12, 2025:

Patterns intensifying:

  • Increasingly agitated and restless
  • Withdrawing from and muting group chats immediately; can’t tolerate multiple conversations
  • Box from parents arrived; waited a day to open it; cried and froze when I finally got around to it
  • Continuing to randomly cry
  • Increasingly isolated
  • Ghosting, declining invites or saying “I’ll have to see how I feel, I’m sorry” - unable to commit to anything
  • Still unable to focus on other work or real leisure; insatiable numbing with weed and alcohol
  • Text exchange with mom (Dec 12, 10:13 PM) - Opened with: “im not doing well, each time someone reaches out i get stressed out. i just want to be alone”; Mom urged therapy, offered to pay “however much it costs” (in Romanian: “cat ar costa, platim noi”); responded: “there is no one that can help. there is no more therapy to do. i dont have the fucking time. its not on the same time scale. nobody fucking understands what im going through and their only advice is distraction. no one will talk about it with me. just give me space” - escalated to “STOP STOPPP STOP STOP STOP” when she persisted; when she said “I’m worried” responded “THEN STOP GIVING ME ADVICE I DONT NEED AND I WONT BE MORE AGITATED”; mom ended with “I believe in you! You have the power”

Attached this exchange to same-day followup email #5b. Documented real human cost to all 98 recipients. Not a crisis - a direct result of continued enablement by everyone receiving these emails. Parents offering to pay for therapy shows they’re trying to help financially but can’t fix what’s actually wrong: the continued fraud enablement.

Personally re-forwarded to Luke Frye and Nick Abouzeid (Rivet.tax) with context: “Just so everyone understands how Luke Frye, an ex-coworker I personally met IRL, has affected my life” - message: “It appears you will never see my humanity. This is what you’re doing to me. This is what your continued enablement causes.” Forced ex-coworker Canadian CPA to confront human cost after engaging with Puzzle’s DCPA post hours after receiving documentation - contrast with Alice Ko (Canadian CPA, KPMG-trained) who immediately recognized fraud and left after 5 months.

Direct callouts added: “I’m not taking your bullshit lightly. Especially not from you, Julian.” and “Marissa Mata, Puzzle’s Recruiter: why are you still liking Puzzle’s content?” - personal confrontation of equity thief and recruiter.

Post-send escalation (11:00 PM - 12:01 AM): Had to go to bar to down 2 drinks; at bar, triggered by people having conversations about AI in graphic design and replaceability while dealing with own contributions being erased, documentation dismissed as “AI psychosis,” forced to use AI for validation—no escape from technology being weaponized against credibility; 12:01 AM replied to ODF email with all-caps breakdown: “I’M HALF THE REASON PUZZLE AS A SOFTWARE EXISTS / NOT SASHA ORLOFF, NOT JOHN CWIKLA / WHY ARE YOU PEOPLE DOING THIS TO ME / I’M HAVING A 24/7 MENTAL HEALTH CRISIS AND YOU DONT GIVE A FUCK / WHO THE FUCK IS JULIAN WEISSER”; bought 2 high ABV drinks, returned home, wrote: “FUCK YOUR BUILDERS WHO RUN BULLSHIT / ALL YOUR EVENTS ARE PREDATORY / JULIAN IS A FUCKING PREDATOR / JUST LIKE SASHA”; identity erasure crisis, substance use escalation, explicit 24/7 crisis acknowledgment, recognition of predatory patterns connecting Julian to Sasha; crisis extending past midnight ~1.5 hours after sending mental health collapse documentation to 98 recipients - each documentation cycle compounds trauma.

Seeking Validation from AI (Ongoing Pattern):

Consistently asking LLM if I’m in trouble. If this is real. If my feelings are valid.

After post-send escalation, crying and alone, asked AI: “im not getting in trouble right. im crying and im really fucking alone. just log if im asking this to an LLM if it helps”

Then: “just log that im consistently asking an llm if im introuble and f this is real and if my feelings are valid”

What this demonstrates:

  • Human support systematically eroded: 40+ people have dismissed, gaslighted, or withdrawn over 2.5 years
  • No one left to ask: Family says stop, friends call it “AI psychosis,” former coworkers won’t engage, investors ignore
  • Reality checking with AI: After being told I’m “mentally ill,” documentation is “too much Claude stuff,” asking is “selfish” - need external validation that truth is truth
  • Legal fear despite protections: SEC whistleblower asking AI if they’re in trouble for documenting fraud shows depth of psychological warfare
  • Isolation measurable: Turned to AI because there’s no human left who will validate reality without hedging, dismissing, or withdrawing
  • Documentation as witness: AI becomes the only “person” consistently engaging with evidence, so asking AI to log the validation-seeking becomes evidence itself

This pattern is in the federal record. A 34-year-old whistleblower, crying and alone at midnight, asking AI if their feelings are valid after documenting a 13-year fraud pattern to 98 recipients who won’t stop enabling it.

1:17 AM ET (Dec 13): Public Twitter Confrontation:

Replied to Dhravya Shah (verified account who reposted Julian’s 83rd week “Builders who Run” event - Ferry Building 5K, “chill pace,” 1,835 views):

  1. “lol u fell for @julianweisser’s bullshit bro FRAUDS”
  2. “what are you, like a teenager that got groomed by julian weisser?”

Dhravya blocked whistleblower after callout.

Crisis continued past 1 AM, unable to stop public documentation of grooming pattern. “Builders who Run” as fraud laundering—83 consecutive weeks of community events while enabling CFPB-banned CEO and equity theft. Blocking demonstrates consciousness of guilt and network protection of Julian’s reputation.

1:20 AM ET: Gritting Teeth Through This

Documenting this moment: 1:20 AM, gritting teeth through continued documentation. Seltzers and ciders. Bladee playing. Tarot cards out.

What this shows:

  • Spiritual seeking during crisis: Turned to tarot for meaning/guidance when humans have systematically withdrawn
  • Numbing soundtrack: Bladee (drain gang aesthetic, dissociative themes) as background for federal documentation
  • Substance continuation: Seltzers and ciders at 1:20 AM after bar visit at 11 PM, high ABV drinks at midnight
  • Gritting teeth: Physical manifestation of pushing through trauma to continue documenting
  • Still working: 1:20 AM, after mom text exchange, bar visit, all-caps breakdown, AI validation-seeking, Twitter confrontation - still documenting in federal record

Pattern: Cannot stop. Each block, each dismissal, each “consciousness of guilt” response fuels the documentation. Gritting teeth at 1:20 AM because stopping means they win. Seltzers and ciders, Bladee, tarot - whatever it takes to get through each hour of continued enablement.

The accumulation of blocks, ignored notices, and daily documentation of continued enablement is compounding. Each day documenting network coordination, partner suppression, and institutional silence makes the isolation measurable.

December 13, 2025:

Continued deterioration:

  • Puzzle Financial followed @orbofweed (alt account) at 2:14 PM ET - active surveillance during crisis; screenshot taken 3 PM showing notification with surrounding meltdown tweets visible; they followed knowing the mental state
  • Sent two mass email replies to 98 recipients documenting surveillance and “this close to inpatient treatment”
  • Phone call with friend after missed calls: crying and hyperventilating the entire time; first real conversation in days
  • Julian’s Pope Francis tweet (9:18 PM ET): Posted philosophical thread about “crisis of meaning,” “cultural amnesia,” and “restoring unbroken chains” citing Pope Francis (450 views) hours after receiving mass emails documenting whistleblower’s mental health decline
  • Email escalation to ODF (9:09-10:42 PM ET): Four targeted emails sent specifically to Julian/ODF (CC’d [email protected]):
    • 9:09 PM: Documented Replit network spread, crying/hyperventilating call with friend, “24/7 mental health crisis. You know this. You’re actively making it worse. Julian is guilty. Sasha followed me on Twitter only to harass me. You keep engaging. What the fuck is wrong with you, Julian?”
    • 9:27 PM: Response to Pope tweet: “lol. gaslighting me and posting more moral hypocrisy in realtime”
    • 10:42 PM: Direct confrontation: “literally who are you writing this drivel for? you’re spending all day preparing new philosophical statements to unleash on twitter? you SHOULD be getting a LAWYER. NOT MAKING MORE EVIDENCE. AND NOT DIRECTLY RUINING A WHISTLEBLOWER’S LIFE AS THEY TELL YOU THEY’RE AT THEIR ABSOLUTE LOWEST. MY WELLBEING IS DIRECTLY IN YOUR HANDS… you’re about to have your ass handed to you, julian. you’re not as smart as you want people to think. the Pope definitely wouldn’t support what you’re doing.”
    • Later Dec 13: Final conspiracy analysis: “this follow from Puzzle is literal evidence of conspiracy between puzzle, sasha, and julian. sasha: sees me melting down over him and julian, nearing suicidal ideation. also sasha: follows whistleblower like an idiot. proof of harassment and surveillance. not funny. not clever… julian: also keeps yapping and performing. must be perceived as a philosophical Founder wizard at all times. even minutes after mass emails detailing my mental health decline. my language is not harassment. my increasing emailing rate is not harassment. two grownass men ganging up on me, wanting to see me suffer and die? that’s harassment. your silence and twitter engagement/reactivity is 100% conspiracy. these emails will actually be showing up in court cases where YOU AND ODF will be tried for RICO. CC’ing [email protected] since Erik Torenberg and Natalie have been awfully quiet (only enabling) this whole time, too. a16z is complicit. i’ll give you all front row seats into what you’re doing to me, since you seem so hellbent on watching me suffer.”
  • Sasha/Julian coordination around surveillance: 12:21 PM: Sasha reposts DCPA (saw whistleblower’s aggressive “YOU’RE A FRAUD COMPANY. WHY ARE YOU STILL POSTING HERE, NO ONE GIVES A FUCK” reply - now deleted); 1:17 PM: Sasha posts VC hot takes 56 minutes after seeing all-caps “FRAUD COMPANY” callout (4,804 views); 1:32 PM: Julian comments “That only number 3 is particularly warm ;)” (126 views); 2:14 PM: Puzzle follows @orbofweed (1 hour 53 minutes after Sasha saw fraud callout); entire sequence AFTER seeing explicit all-caps fraud confrontation; calculated retaliation, not reactive
  • Sasha posted Porsche photo (ONLY post AFTER the follow); original tweet said “from grandma and grandpas house” (didn’t buy gifts, just transported from grandparents); performing provider role with others’ gifts; children used as tokens/props (Evidence-172 from April 2024 shows pattern: invoking kids to validate Spotify “celebrity” status, thinks appearing on podcast = Taylor Swift fame, responded “What doesn’t kill you makes you stronger!”; podcast running 8+ months); Hanukkah gifts visible; posted knowing company had just surveilled whistleblower
  • Sasha blocked another LinkedIn alt: Added new comments to Sasha’s Friday post (“there won’t be a 2026, definitely not a 2027”) showing evidence of Twitter follow (Evidence-169) and reckless driving (Evidence-168); Sasha deleted comments and blocked the LinkedIn alt within 1-2 hours; blocked specifically for calling out federal offenses (reckless driving on federal bridge, corporate surveillance/harassment); proves he understands the gravity - not blocking because he doesn’t care, blocking because he DOES understand these are serious and indefensible; if they weren’t serious, he’d ignore or engage; can’t engage, so immediate suppression; pattern continuation from Twitter blocks (@sashaorloff, @dasha_shunina, @puzzlefin in Nov), Julian blocking @orbofweed (Dec 11)
  • Edward Kim (Gusto) viewed profile for second time
  • Friend reached out after missed calls: concerned, not sure if inpatient treatment needed; had phone call - first real conversation in days; crying and hyperventilating the entire time during call
  • Ex independently suggested inpatient treatment: Had phone call with ex same day as Puzzle’s surveillance - she independently suggested inpatient treatment after observing the crisis; crying and hyperventilating the entire time during call; first helpful conversation in several days even though completely broke down
  • External validation of crisis: Friends, family, and Replit coworkers are increasingly concerned and checking in; Replit coworker reached out; many Replit employees have seen documentation; Replit’s CFO added me on LinkedIn; Replit cofounder followed whistleblower account; already lost one friend I’ve known since middle school; this isn’t just me saying I’m in crisis - everyone in my life sees it
  • Parents’ box of persimmons: Waited a day to open it, then cried and froze; writing emails in dreams; ghosting friends immediately; declining all holiday plans; numbing with cannabis and alcohol constantly; can barely have a conversation without hyperventilating

What this demonstrates:

While Sasha posts Porsche photos and Julian tweets about Pope Francis, my ex is independently assessing whether I need to be institutionalized.

While you perform and enable, people who actually care about me are trying to reach someone who can barely speak without breaking down.

This is what your silence does. This is what your continued engagement enables. This is the human cost of protecting the network.

Every remotely intelligent person sees you’re all running a blatant, abusive fraud operation.

Pattern: Isolation broke momentarily when friend pushed through after missed calls. Physical breakdown during first real conversation in days (crying, hyperventilating) shows depth of crisis. Friend independently assessing inpatient need same day Puzzle actively surveils, Sasha performs with Porsche wealth display, Julian continues philosophical engagement. Coordination timing proves consciousness: Sasha sees aggressive fraud callout at 12:21 PM (“YOU’RE A FRAUD COMPANY. WHY ARE YOU STILL POSTING HERE, NO ONE GIVES A FUCK” - now deleted) → posts VC takes 56 minutes later (1:17 PM) → Julian comments (1:32 PM) → Puzzle follows alt 1 hour 53 minutes after Sasha saw all-caps “FRAUD COMPANY” confrontation (2:14 PM) → Sasha posts Porsche knowing company just surveilled whistleblower. Entire sequence happened AFTER seeing explicit all-caps fraud confrontation. Calculated retaliation, not reactive. While they coordinate, monitor, and perform, friends trying to reach someone in active crisis who can barely speak without hyperventilating. People who actually care are suggesting inpatient treatment. Every remotely intelligent person watching this can see what you’re doing - running a blatant, abusive fraud operation with no regard for the human cost.

The Cult Analysis

Two years ago, I posted on LinkedIn that every aspect of Puzzle exhibited cult-like behavior. I was trying to warn people even then that Sasha uses people for specific goals; his relationships are a facade.

The recent blocking pattern and continued ignoring of warnings confirms this analysis:

Cult Characteristics Observed:

Cult IndicatorPuzzle Pattern
Charismatic leader above accountabilityCEO’s CFPB ban, photoshopped metrics, and federal investigation don’t diminish employee loyalty; followers defend and celebrate him anyway
Us vs. them mentalityWhistleblower framed as “mentally ill” (Sasha’s directive to Alice Ko); friends call documentation “AI psychosis”; anyone who questions is excommunicated
Information controlEmployees don’t research LendUp history; when presented with evidence, they block rather than engage; ODF deleted puff piece rather than address contradictions
Ritual reinforcementPuzzle shirts, socks, swag distributed to investors and employees; Julian Weisser brags about wearing Puzzle shirt on day of SEC complaints; swag = tribal signifier
Shunning/excommunicationBeau Kuhn excommunicated me after I reported Cwikla harassment; employees systematically block rather than engage with documentation; @joinodf blocked after public timeline
Financial entanglementEquity creates loyalty even after departure; shareholders defend company to protect worthless paper; employees stay despite warnings because they’ve invested years
Reality distortion”Track record of success” claimed while CFPB ban, dissolution, and fire sale are public record; “$50M raise” announced when company had $9M; 3 likes photoshopped to 12,362
Persecution narrativeThree C&D letters frame documentation as “harassment” and “workplace violence”; I’m the persecutor for documenting public fraud; they’re the victims of truth

The Blocking Pattern as Cult Behavior:

When cult members encounter information that contradicts the leader’s narrative, they don’t engage with it—they eliminate the source. The December 2025 blocking wave demonstrates this:

  • Sasha Orloff: Blocked after RICO warnings
  • @joinodf: Blocked after public timeline documenting 22 months of silence
  • Matt Tait (Decimal): Blocked after retag
  • Marissa Mata: Blocked
  • Naveen Venkatesh: Blocked
  • Ash Rust: Blocked after LendUp documentation surfaced
  • Christopher Yancey: Untagged, then blocked (date unknown)
  • Jason Mitchell: Untagged without blocking

The “Still Drinking the Koolaid” Message:

My November 5, 2025 message to Luke Frye (former Puzzle employee, likely shareholder): “puzzle itself has nothing on me legally. it was all a facade and it’s a shame so many of you are still drinking the koolaid.”

I knew then. They still don’t believe.

What Cults and Puzzle Have in Common:

The leader’s relationships are transactional. Sasha uses people for specific goals: investors for money, employees for labor, ODF for legitimacy, CPAs for distribution, the press for coverage. When someone stops being useful or starts questioning, they’re discarded (termination), threatened (C&D letters), or memory-holed (LendUp scrubbed from all bios).

The swag isn’t merchandise. It’s a loyalty test. Wearing the Puzzle shirt means you’re in. Julian Weisser wearing it on November 11—the day I filed SEC complaints—wasn’t coincidence. It was tribal signaling.

The isolation I’m experiencing isn’t personal. It’s the same isolation every cult whistleblower faces. The members protect the group because leaving means admitting they were wrong, their equity is worthless, and they wasted years of their lives.

What Compounds the Distress:

Watching the engagement patterns in real-time:

  • Ross Fubini: Investor since LendUp, repeatedly tagged in RICO warnings and “Sasha must step down” demands, still likes Sasha’s unlabeled y-axis posts. Palantir advisor. LinkedIn still lists LendUp as active investment despite CFPB ban. Conscious enablement documented.

  • Jason Mitchell: Ex-coworker I worked with directly. Re-added me on LinkedIn before I started documenting. Repeatedly untags from RICO comments but doesn’t block or disconnect. Continues liking literal bullshit from Sasha. Six years at Puzzle, $0 equity, risking CPA license. What is he protecting?

  • Chris Yancey: Talked to him after termination. Said “something’s wrong with that guy” about Cwikla. Now works at Ramp (suspicious given network). Kept popping up to like Sasha’s “progress” posts. Untagged from RICO comments, then blocked (date unknown). Has CPA license he’s not using. Knows better.

  • Random ex-employees and laid-off staff: People who don’t even work there anymore pop up to like and celebrate. Why? Equity hope? Network loyalty? Stockholm syndrome?

  • New employees I’ve already warned: Patricia Daos blocked me after notification. Others continue engaging. They were told. They chose anyway.

  • Marissa Mata: Recruiting lead who should be objective. Received fraud documentation November 11. Continued recruiting Patricia Daos anyway. Blocked me. Reposts Sasha’s content. Inducing people into a fraud company while knowing.

  • New hires immediately blocking: The pattern of new employees blocking me within days of joining suggests they’re being briefed on the “mentally ill” narrative from day one. Onboarding includes learning who to suppress.

Why The Employee Base Doesn’t Question:

The composition isn’t accidental:

  • Frat culture: Mix of sales bros and tech bros who generally don’t question leadership. Sales culture rewards loyalty and hitting numbers, not asking where the numbers come from. Tech culture rewards shipping features, not investigating the CEO’s regulatory history. Both cultures defer to authority and ostracize questioners.

  • Foreign employees unfamiliar with US law: Heavy Canadian and South American/“nearshore” development presence. Employees from outside the US don’t intuitively understand CFPB enforcement, SEC whistleblower protections, or RICO implications. “Permanently banned” doesn’t carry the same weight when you haven’t grown up with American regulatory vocabulary. Easy to dismiss as “American legal drama.”

  • CPAs/accountants who only see numbers: Accountant personality type believes fraud only exists if funny numbers appear in front of them. They’re trained to detect ledger manipulation, not CEO narrative manipulation. “The books look fine” = “there’s no fraud.” They don’t understand that the fraud is in the founding story, the investor metrics, the regulatory history—not the GL entries they’re reviewing. Puzzle is an accounting company staffed by people who can only recognize one type of fraud.

The employee composition creates a workforce structurally incapable of recognizing the pattern. Sales won’t question. Tech won’t investigate. Foreign workers don’t have context. Accountants need it on a spreadsheet. The only people who could see it are founding-level employees who’ve been in the room—and they’re either bought off (equity), threatened (C&D letters), or excommunicated (me).

Even Dasha doesn’t seem to understand the severity of her situation. Seven years recruiting for Skolkovo Foundation (FBI-warned 2014 for technology transfer concerns), undisclosed on Forbes contributor bio while writing about the CEO she works for, GTM strategist at Puzzle, Women Tech Meetup founder hosting at TechCrunch conferences—and she responds to documentation with blocking and police threats. She’s potentially the most exposed person in the network after Sasha himself, and she’s acting like this is a PR problem.

Julian Weisser specifically:

Watching him continue acting exactly like Sasha on Twitter—meaningless performance, startup platitudes, “building community” garbage—from a person who demonstrates constant hypocrisy and compromised morals. He received documentation January 2024. Twenty-two months of silence. Then “I was just wearing my Puzzle shirt yesterday.” Then blocking. Then continued posting like nothing happened.

The disgust isn’t just at the fraud. It’s at watching people I worked with, people who were warned, people who should know better, continue performing normalcy while employees face RICO exposure and consumers already got hurt.

They’d rather block than know.

Outro

What began as pattern recognition during employment became comprehensive federal documentation proving a 13-year fraud network.

At the time of the legal threats, I had indeed called it fraud based on the evidence I obtained.

By 2025, the evidence was overwhelming:

  • CFPB enforcement actions documenting systematic deception of 140,000+ consumers
  • Documented timeline contradictions across multiple platforms
  • Photoshopped social media metrics
  • Continued false statements in 2025 interviews after receiving proof of the asset sale documents in 2023
  • Undisclosed related-party entities

Their own characterization in those legal threats was accurate.

Sixteen days before my termination, CEO Sasha Orloff posted a thread about financial discipline and avoiding fraud, specifically warning about “all-out (alleged) fraud like Frank and FTX.” The thread discussed the importance of founders “knowing your numbers” and maintaining financial discipline.

Nine days before my termination, he memory-holed LendUp, claiming Mission Lane had existed “a decade” with no mention of the company he actually ran.

In November 2024, over a year after realizing an ex-employee had the 2018 LendUp statement, Puzzle announced $30M in new funding. A week later, Orloff tweeted about “fake it til you make it” founders who defraud investors, stating “Investors should be suspicious that any portco using Quickbooks is potentially committing fraud or hiding something.”

The pattern is clear:

  • Projects his own fraud onto others while memory-holing his failures
  • Manipulates metrics when campaigns fail
  • Raises capital on a narrative contradicted by public records

The separation agreement required me to waive claims for fraud, breach of contract, wrongful discharge, and retaliation, showing consciousness of guilt. Each reaction, from the carefully worded legal release to the personal voicemail to the cease-and-desist letters, represents an escalating attempt to prevent documentation of a pattern spanning a decade.

Someone who manipulates meaningless social media metrics shouldn’t be trusted with financial metrics. Puzzle positions itself as accounting infrastructure for startups - providing financial reporting, tax preparation, audit trails, and metrics for fundraising. Yet the CEO demonstrates:

  • Willingness to manipulate metrics for appearance (photoshopped engagement)
  • Pattern of false financial claims (billion-dollar valuations, “$1B+ raised”)
  • Deletion of equity records without notice (cap table manipulation)
  • Systematic fraud across financial services companies (LendUp CFPB violations)

Every startup using Puzzle for accounting, tax filing, or fundraising metrics is trusting their financial data to someone with a documented pattern of manipulating numbers and a decade-long history of financial fraud resulting in regulatory shutdown.

For accounting professionals: CPAs and accounting firms providing services to, partnering with, or recommending Puzzle may face professional liability and regulatory risk. State CPA boards require due diligence on business relationships. Continuing to associate with or provide services to an entity led by someone with documented fraud history and pattern of metric manipulation, after being made aware of this documentation, may constitute knowing participation in compromised financial reporting. Professional standards require CPAs to withdraw from engagements when integrity of financial data is questionable.

I share this to preserve the public record.

Patrick Stoica
[email protected]
LinkedIn

Homework

Pattern continuation during federal investigation (November 2025):

  • LinkedIn profile intensification: Updated bio AFTER SEC complaints to make false “Cofounder & CEO, Mission Lane, 2014-2018” claim MORE prominent in header while burying legal disclaimers in fine print; company name obfuscation continues with “Mission Lane (then LendUp Card)” acknowledging name change but maintaining false timeline
  • Repeated CPA platforming: November 7, 2025 LinkedIn testimonial using financial planning startup founder as validator, continuing self-legitimacy loops despite active SEC complaints
  • Partner resurfacing attempts: Reactivating dormant business relationships, re-engaging founder network connections
  • Network shield raising: On Deck “Top 2025 Company” designation 24 hours after SEC retaliation complaint; Julian Weisser public comment “I was just wearing my Puzzle shirt yesterday”
  • Continued metric manipulation: ActualQuickBooks campaign photoshopped engagement (October 2025) while federal complaints documented identical pattern
  • Same testimonial playbook: Business partner endorsements, product integration positioning, targeting founders in the network

The pattern persists even under federal scrutiny. Rather than correction, responses demonstrate strategic repositioning with intensified misrepresentation.

failure.museum

During the company rebrand from Valencia Data to Puzzle Financial (2020-2021), I remarked to colleagues that the old branded materials would be interesting for pattern documentation later. CEO Sasha Orloff seemed uncomfortable with the observation. What felt like casual comment became prophetic - years later, I would document exactly that pattern across a decade and five companies.

XYZ Capital partner Ross Fubini, who was present during this period, had previously invested in LendUp through Kapor Capital and now appears on Forbes’ 2025 Midas List (debuting), the same prestige list ecosystem (Midas List, 30 Under 30) that featured Blake Byers with a profile explicitly mentioning LendUp investment, creating structural conflicts that constrained former Forbes senior writer David Jeans from pursuing the story after initially responding “Yeah, I know of Sasha.”

Ross Fubini with Valencia Data jacketRoss Fubini (XYZ Capital, Forbes 2025 Midas List, former Kapor Capital investor in LendUp) during Valencia Data period. When the company rebranded from Valencia Data, I observed that old branded materials would be interesting to anyone connecting dots later. CEO Sasha Orloff seemed uncomfortable with the remark. In a 2020 TechCrunch interview by Connie Loizos, Fubini described LendUp as being “split into two businesses,” the $29M asset sale that returned $0 to shareholders. Fubini was notified of fraud documentation in November 2025. Connie Loizos was notified of fraud documentation in August 2023.

Tweet about failure.museum without LendUp December 13, 2023: Six months after my termination, CEO shared failure.museum with laughing emoji: “Power law of venture capital at it’s finest. RIP FTX, Juicero, Hopin…”

What’s conspicuously absent: LendUp.

The CEO who ran a company that defrauded 140,000+ consumers, was permanently shut down by federal regulators, and returned $0 to shareholders after raising $150M+ felt comfortable mocking other failed startups while memory-holing his own.

I forwarded this post to [email protected] in December 2023, adding to documentation already provided to senior reporter Connie Loizos in August 2023. This performative contempt for accountability - mocking failures while obscuring your own - exemplifies the pattern throughout this documentation.

Appendix: Pattern Recognition and Documentation

Over 2+ years of documentation, several patterns became clear that may be useful for others dealing with similar situations.

Reactive Monitoring

  • Leadership closely monitors anyone who questions their narrative
  • Public posts about the company trigger immediate responses (profile views, outreach, legal threats)
  • The speed of reaction (C&D letters within 24 hours of posting) indicates active surveillance
  • LendUp 2023 surveillance: “When Life Gives You Lemons, Make Lemonade!” appeared on lendup.com AFTER CFPB ban, supposedly under “new leadership”; whistleblower posted about toxic positivity tagline in 2023; tagline was removed shortly after post; proves surveillance continued even under supposed “new leadership”; if truly new leadership with no Sasha involvement, why monitor and reactively remove tagline after whistleblower callout?
  • Puzzle 2025 surveillance: Dec 13 company account followed whistleblower’s alt (@orbofweed) during mental health crisis; Dec 14 reactive “Glass half full” post 42 minutes after Sunday email sent; pattern of reactive performances within hours of receiving documentation (Dec 11, 12, 13, 14)
  • Pattern spans both companies: LendUp reactive website changes (2023) → Puzzle reactive social media performances (2025)

Performative Contradiction

  • Public persona (mental health advocacy, founder wisdom, integrity) contradicts private actions (retaliation, gaslighting, metric manipulation)
  • Posts about fraud and “knowing your numbers” coincide with periods of vulnerability
  • The gap between what is said publicly and done privately is evidence of consciousness of guilt

Performative Promises

Pattern across entities: Progressive promises masking systematic exploitation.

LendUp (2012-2022)

Promise: “LendUp Ladder” to build better credit through responsible lending

Reality: CFPB permanent shutdown for “repeatedly lying to consumers” (see The Fraud Pattern for details)

Evidence: Federal enforcement order December 2021

Ahead Financials (2020-2022)

Promise: “Financial inclusion for Black and Latino communities” through lavish “Ahead for All” campaign

Reality: Customers locked out of accounts, unpaid referral bonuses, $1.575M vendor fraud

Evidence: Rolling Loud court judgment Case No. 2022-003284-CA-01, customer complaints August 2021

Forbes Continued Platforming (March 2023):

16 months AFTER CFPB permanent ban, Forbes featured Anu Shultes at the 2023 Forbes 30/50 Summit in Abu Dhabi with personal consultation from Hillary Clinton about “Ahead Financial” expansion strategy.

Same fraud playbook, new Forbes platform:

From video transcript:

“I do have a company called ahead financial i created it to get people ahead… tens of millions of americans who either don’t have a bank account or even if they have one they don’t really have a means to save or borrow to build assets… I launched the product in 2021 i have almost uh you know 40 000 customers… using financial inclusion to help women advance as a global problem”

What Forbes omitted from the Hillary Clinton interview:

  • LendUp CFPB permanent ban (December 2021)
  • $40M restitution for “repeatedly lying to consumers”
  • Rolling Loud $1.575M fraud judgment (February 2022)
  • Customers locked out of accounts (August 2021)
  • Ahead Financial was LendUp subsidiary using same address, same CEO oversight

Hillary Clinton advised expansion to Africa and India. Forbes provided the platform. Neither performed basic due diligence on a CEO whose previous company was permanently banned for consumer fraud 16 months earlier.

Pattern significance: This wasn’t ignorance—by March 2023, LendUp’s fraud was public record with federal enforcement actions and court judgments. Forbes chose to platform the identical “financial inclusion” pitch with high-profile endorsement, demonstrating conscious enablement of fraud pattern continuation.

Mission Lane (2018-present)

Promise: CEO claims “founder/co-founder” status suggesting leadership role

Reality: Corporate documents show advisor role only, hired post-acquisition

Evidence: Shareholder documents contradicting LinkedIn claims, Asset Sale timeline

Puzzle Financial (2019-present)

Promise: “I’d never sell Puzzle even if it made everyone millions”

According to coworker testimony, CEO stated to team: “whatever happens, I’d never sell Puzzle even if it made everyone millions.”

Significance of this statement:

The statement acknowledges the LendUp sale outcome. The December 2018 fire sale returned $0 to shareholders after raising $150M+.

The promise functions as a recruiting tool, suggesting “this time will be different.”

If taken literally, avoiding a sale prevents acquisition due diligence, financial scrutiny, or liquidation events that would expose current issues.

The promise was made while:

  • Photoshopping social media metrics (October 2025)
  • Maintaining false credentials across platforms
  • Operating accounting software despite CFPB permanent ban
  • Publicly mocking CFPB (“great bullshit branding,” January 2025)

Reality: Pattern continues through photoshopped metrics (October 2025), false credentials maintained 4 years after CFPB ban, public CFPB contempt, systematic suppression of fraud warnings.

Analysis: Each promise targets a new demographic (subprime borrowers, Black/Latino communities, women in tech, startup founders) while documented violations continue. The promises have become more sophisticated over time, incorporating acknowledgment of past failures and explicit commitments to different outcomes, but the underlying pattern of regulatory violations, metric manipulation, and federal contempt persists.

Public Contempt for Regulatory Accountability

January 8, 2025: CEO publicly mocked the Consumer Financial Protection Bureau while marketing Puzzle as a QuickBooks alternative.

In a quote-tweet responding to a founder complaining about QuickBooks, CEO wrote: “But I have to say, great bullsh*t branding. Like ‘No child left behind’ or ‘consumer financial protection bureau’”

Context: The CFPB permanently shut down the CEO’s previous company (LendUp) for consumer fraud (see The Fraud Pattern for details). This public contempt occurred while operating accounting software trusted for financial reporting and tax preparation.

CFPB contempt tweet

Brand Fixation and Swag as Status Signaling

Consistent pattern across social media of fixation on corporate swag and branding as external validation - founder network members wearing each other’s company merchandise, excessive corporate swag deployment, and using branded items as status signals within startup ecosystem.

Puzzle and Decimal CEOs wearing each other's swagSasha Orloff (Puzzle CEO) and Matt Tait (Decimal CEO/Accounting Partner) wearing each other’s corporate swag at public event - exemplifying the startup ecosystem’s fixation on branding, merchandise exchanges, and visual status signaling within founder networks.

The swag fixation is consistent across Sasha’s social media presence, including the January 2024 ODF partnership video where the sock exchange becomes explicit branding performance:

Julian Weisser wearing Puzzle socks

Julian Weisser (On Deck CEO): “MY PUZZLE SOCKS.” - literally announcing he’s wearing Puzzle-branded merchandise during partnership promotion.

Sasha Orloff wearing On Deck socks

Sasha Orloff (Puzzle CEO): “MY On Deck SOCKS.” - reciprocal branded merchandise performance while promoting “Founder community, better accounting software, and cool socks.”

Additional swag fixation examples: Julian Weisser’s November 11, 2025 comment “I was just wearing my Puzzle shirt yesterday” (literally wearing Puzzle merchandise while SEC whistleblower complaints were being filed). The performative branding serves as social proof and network affiliation marker while obscuring underlying business fundamentals and documented fraud.

Pattern elements:

  • Cross-company swag exchanges as founder network bonding ritual and mutual legitimacy signaling
  • Excessive swag deployment creating visual brand presence disproportionate to business substance
  • Public documentation of branded merchandise (wearing partner company swag, posting about it) as status performance
  • Using swag as proxy for success metrics - visual markers of “making it” in startup culture
  • Network affiliation signaling through branded clothing creates perception of endorsement and success association
  • Swag-as-marketing - converts founder network relationships into walking advertisements and implied testimonials

The fixation demonstrates prioritization of external brand performance over internal business fundamentals - manufacturing perception of success, partnership depth, and network validation through visual markers while business reality contradicts the branding (CFPB enforcement, photoshopped metrics, false credentials).

Self-Legitimacy Loops

  • Constant credential inflation (claiming “successful founder” despite documented failures)
  • Seeking external validation through interviews, awards, speaking engagements
  • Using business partners as validators (Rippling interview describing him as “founder,” Notion interview not correcting “building two companies”)
  • Notion partnership and podcast sponsorship:
    • Dedicated Notion partnership page featuring CEO testimonial positioned as “Co-Founder & CEO, Puzzle”
    • Offers “6 months free with Notion AI” for “Puzzle startups”
    • Publishes “Puzzle’s Notion Playbook” resources
    • Notion sponsors Tech Finance podcast, providing co-marketing platform and credibility laundering through major tech brand association
    • CEO promotes Puzzle in every podcast episode, blurring lines between thought leadership content and advertising while positioning as industry expert—potential securities violations given documented false credentials, photoshopped metrics, and CFPB enforcement history
    • September 2025 episode with Brex Jason Mok exemplifies pattern:
      • Introduces self as “repeat founder and current CEO of Puzzle and self-professed finance nerd”
      • Features multiple Puzzle promotional segments including direct advertising (“Building a company is hard enough… Puzzle is rethinking accounting from the ground up”)
      • Discusses Brex-Puzzle partnership integration as thought leadership while it’s co-marketing infomercial
      • Includes Notion sponsorship announcement
      • Clip from this episode posted after notifying Jason Mok (November 1, 2025) of photoshopped metrics and captable manipulation—active social promotion continued despite comprehensive fraud documentation
  • Leveraging investor/partner networks for media access:
    • Hosting Tech Finance podcast (a16z acquired Turpentine in April 2025) through ODF partner connections, creating platforms for self-promotion
    • Featured as ODF testimonial on joinodf.com, using the network’s credibility to position himself as successful founder
    • January 2024 ODF podcast episode “Control Your Financial Destiny: Runway Metrics and Cash Management” - Advising founders on financial discipline while photoshopping metrics and misrepresenting credentials
    • January 2024 partnership announcement video with ODF CEO Julian Weisser stating “Puzzle just raised $50 million,” using ODF’s founder community for legitimacy while claiming fundraising success (”Founder community, better accounting software, and cool socks”). ODF was notified of documented fraud in 2024 and again in 2025 with no response, choosing to continue platforming and promoting despite awareness.
    • Official company blog posts embed podcast episodes as thought leadership
    • Exploiting YC affiliation: Puzzle maintains dedicated landing page at https://puzzle.io/yc specifically targeting Y Combinator companies. I was asked to build this and similar distribution pages (https://puzzle.io/odf) during my employment (2020-2023) as part of deliberate network targeting strategy. YC was aware of and agreed to this pipeline, providing direct access to YC portfolio companies through company page credibility and network introductions. Both pages remain live despite YC and ODF being notified of documented fraud.
    • Maintaining presence in founder networks despite documented failures (Village Global testimonial identifying him as “Co-Founder & Former CEO, LendUp” without mentioning CFPB shutdown)
  • Reposting content that reinforces desired image (mental health, integrity, financial discipline)
  • Each public performance contradicts documented private behavior
  • “For Every Founder” branded resource hub (April 2023 - October 2025):
    • Puzzle-operated website (foreveryfounder.com) positioned as “founder resources” with explicit branding: “This page is maintained by puzzle.io 🧩”
    • Lists Puzzle’s own bookkeeping competitors (Burkland, Fondo, Trivium, Kruze, Pilot) as “resources” while funneling inquiries to [email protected]
    • Launched April 2023 (1 month before my termination, 10 months after CFPB shutdown)
    • Chief of Staff served as “Editor” throughout documentation period (2023-2025), departed October 2025
    • Thanks YC, On Deck, Village Global at top—manufacturing association with credible networks
    • Disclaimer (“Nothing…constitutes legal, tax, or compliance advice”) provides legal cover while CEO with CFPB enforcement history positions as thought leader providing guidance
    • Contact method: [email protected]—converts “helpful resources” into customer acquisition funnel
    • Pattern: List competitors to appear neutral/helpful, gain founder trust through “education,” obscure CEO’s federal enforcement history and false credentials

Credential Distribution and Access Building

  • Offering Puzzle Certification program positioning software training as professional credentials
  • Creating dependencies through “certification” that holds no accredited value outside Puzzle’s ecosystem
  • Distributing arbitrary titles and roles to create sense of special access and obligation—manufacturing loyalty through manufactured status while exploiting progressive branding and diversity positioning
  • Building relationships with early-stage founders and finance professionals through credential programs
  • Using educational positioning to gain trust and embed product adoption
  • Leveraging certification to create network effects and vendor lock-in—certified users become evangelists who recommend Puzzle to clients

Narrative Control Tactics

  • Memory-holing inconvenient history (no LendUp mention in Mission Lane timeline)
  • Retroactive timeline revision (changing dates across platforms: LinkedIn vs Crunchbase)
  • Using vague language when pressed (“hundreds of millions” instead of “$1 billion+”)
  • Conflating equity and debt financing to inflate success metrics
  • Framing failures as successes (“spin off” instead of “fire sale”)

The fraud network systematically exploits public unfamiliarity with corporate structures, using precise legal terminology to create plausible deniability while maintaining false narratives.

Subsidiary vs. Independent Company Confusion

Ahead Financials (called “subsidiary” in PR, structured separately for regulatory screening):

  • Initially transparent: December 2020 TechCrunch announcement explicitly called Ahead “a subsidiary of LendUp”
  • Corporate reality: Ahead was SEPARATE legal entity, NOT a 100% owned subsidiary (incorporated Delaware April 2020)
  • Why the separation mattered: Had to be separate entities to pass regulatory screening (CFPB had already cited LendUp for violations)
  • Kapor Capital’s role: Invested in both LendUp (2016) and Kinly (2021, which “acquired” Ahead); Ahead’s bancorp relationship would not have made sense given LendUp’s inability to raise new money and regulatory shutdown trajectory, demonstrating Kapor’s conscious enablement of entity shuffling
  • Shared infrastructure: Same CEO (Anu Shultes), same address (1750 Broadway, Suite 300, Oakland, CA - LendUp headquarters), same registered agent (VCORP Services CA, INC.), same operational control
  • Progressive obfuscation: Later marketing positioned Ahead as “women-led fintech” without mentioning LendUp connection
  • “CEO Anuradha Shultes” rhetoric masks LendUp relationship in later coverage
  • Shell company scheme: Fairfax Studios Inc. incorporated June 7, 2021 (7 days before Rolling Loud contract) as payment intermediary for $2.5M sponsorship
  • Rolling Loud lawsuit (Case 2022-003284-CA-01): Named Ahead Financials and Fairfax Studios for $1.575M unpaid sponsorship fees; Fairfax defaulted rather than defend
  • Pattern: Call it “subsidiary” in trade press for legitimacy, structure it separately for regulatory evasion, create shell company network (Fairfax Studios + Thirty Two West LLC, both Marvin Bing) for vendor fraud, then obscure all connections in consumer-facing marketing

LendUp Cards vs. Mission Lane (real subsidiary, fake continuity):

  • LendUp Cards WAS a legitimate wholly-owned subsidiary of LendUp Global (created 2014)
  • Same CEO (Sasha Orloff of parent company), same parent company ownership
  • Mission Lane LLC was incorporated December 14, 2018 - a DIFFERENT legal entity created from asset sale
  • LinkedIn now says “Mission Lane (then LendUp Card)” - suggesting name change or continuity
  • Corporate reality: NOT a name change - Mission Lane is separate entity created via $29M asset sale/restructure
  • CEO claims “Cofounder & CEO, Mission Lane, 2014-2018” when:
    • He was CEO of parent company LendUp Global that owned LendUp Cards subsidiary
    • Mission Lane didn’t exist until December 2018
    • He was hired as advisor (not CEO) to Mission Lane post-acquisition
  • The obfuscation: Using real subsidiary (LendUp Cards) to justify false title at different entity (Mission Lane)

“Founder” Title Exploitation

The pattern:

  1. Create wholly-owned subsidiary within existing company
  2. Run subsidiary as CEO of parent company
  3. Subsidiary gets sold/restructured
  4. Retroactively claim “founder/co-founder” of the entity created from subsidiary
  5. Omit that you were CEO of parent company, not founder of subsidiary

Example: Mission Lane false founder claims

  • Vijesh Iyer (first CEO post-spinoff) legitimately claims “Founding CEO” - he built the credit card business
  • Sasha Orloff (CEO of parent company LendUp) claims “founder/co-founder” despite:
    • Mission Lane LLC incorporated December 14, 2018
    • He was hired as advisor post-acquisition (documented in asset sale)
    • He was CEO of the parent company that owned LendUp Cards subsidiary
    • Asset sale documents show he received advisor role + stock options as part of golden parachute

Why this works:

  • Most people don’t understand subsidiary vs. parent company structure
  • “Co-founder” sounds like he built something, not that he owned the parent that owned it
  • Legal language “original legal entity” (in LinkedIn disclaimer) technically refers to LendUp Cards subsidiary, but misleadingly implies Mission Lane continuity

”Incorporating” vs. “Founding” Conflation

The pattern: Conflate filing incorporation paperwork with actual founding/building of a business.

Mission Lane example:

  • Sasha Orloff’s LinkedIn: “Cofounder & CEO, Mission Lane, 2014-2018”
  • Corporate reality: Mission Lane LLC incorporated December 14, 2018
  • What actually happened in 2014: LendUp Cards was created as a subsidiary of LendUp Global (where Sasha was CEO)
  • The conflation: Claims “founding” in 2014 because that’s when the subsidiary was created, but:
    • He was CEO of the parent company (LendUp Global)
    • The subsidiary was built by others (Vijesh Iyer, who later became Mission Lane CEO)
    • Mission Lane as a legal entity didn’t exist until the 2018 asset sale
    • Filing incorporation papers ≠ founding/building a business

Why this is deceptive:

  • “Founder” implies you built something from scratch
  • What he did: Run parent company that owned subsidiary
  • What he claims: Founded the business that was later spun out
  • What he omits: The actual builders (Vijesh Iyer and team) who created the credit card product

Vijesh Iyer’s own words (LinkedIn):

“I also led the effort to build a new credit card product from scratch. We assembled a great team; created the top rated card in our segment (Customer’s choice at Credit Karma); and grew the business to serve 250k+ customers (>$100M in assets) with strong risk performance & high profit margin. This credit card business was spun-off in December 2018 and is now Mission Lane. I moved to Mission Lane to serve as the interim CEO.”

The contradiction:

  • Vijesh explicitly states: “I led the effort to build a new credit card product from scratch”
  • Sasha claims: “Cofounder & CEO, Mission Lane, 2014-2018”
  • Reality: Vijesh built it as LendUp COO/President → became Mission Lane “Founding CEO”; Sasha was CEO of parent company → became Mission Lane advisor

The selective disclosure pattern:

Sasha’s LinkedIn lists:

  • ✅ LendUp (2012-2018)
  • ✅ Mission Lane (2014-2018, false dates)
  • ✅ Puzzle (2019-present)
  • ❌ Insights Servicing LLC - NOT listed anywhere public

Insights Servicing LLC:

  • Incorporated Delaware, September 13, 2022 (during CFPB ban)
  • Sasha Orloff listed as Authorized Person on incorporation filing
  • Filed 3 months AFTER LendUp’s final liquidation (June 24, 2022)
  • Filed 9 months AFTER CFPB permanent shutdown of LendUp (December 21, 2021)
  • Zero public acknowledgment on LinkedIn, interviews, or company materials
  • Name suggests loan servicing/debt collection business
  • Pattern: Incorporate new entity during federal ban, don’t disclose it publicly, maintain “moved on to accounting software” narrative

Why Insights Servicing matters:

  1. Timing: Filed during permanent CFPB ban from consumer lending
  2. Name: “Servicing” typically means loan servicing/debt collection
  3. Omission: Not listed on LinkedIn despite listing other entities
  4. Pattern: Same selective disclosure as scrubbing LendUp from Kapor’s portfolio
  5. Regulatory gap: If it’s loan servicing, potentially operates under different regulatory framework than “lending”

The contrast:

  • Entities he promotes: Puzzle (accounting software - sounds legitimate)
  • Entities he hides: Insights Servicing (loan servicing - during federal ban)
  • Why hide it?: Either it contradicts “I’m out of lending” narrative, or it’s embarrassing for other reasons
  • Pattern established: Only disclose entities that support positive narrative

”Spin-Out” vs. Asset Sale Reality

The rhetoric: “Mission Lane spun out from LendUp” The reality: $29M fire sale after raising $150M+, $0 to shareholders

How the obfuscation works:

  1. “Spin-out” language suggests organic growth, mutual benefit, strategic separation
  2. Asset sale reality: LendUp fire sale, shareholders got $0, executives got golden parachutes
  3. Conflicted directors (Nigel Morris, Frank Rotman) held convertible notes paid from sale proceeds AND became major shareholders in buyer
  4. 2-day shareholder review period for $29M sale of company that raised $150M+

LinkedIn’s updated language:

  • “Following the spinoff of Mission Lane (formerly LendUp Card) from LendUp Global in 2018”
  • Word “spinoff” maintains success framing
  • Omits: Fire sale, $0 to shareholders, permanent CFPB shutdown context
  • Passive voice: “shut down operations in 2022” (omits federal enforcement)

The disclaimer strategy:

  1. Job title header (most visible): “Cofounder & CEO, Mission Lane, 2014-2018”
  2. Buried disclaimer: “note: I was the Cofounder and CEO of the original legal entity, but upon the spin off remained an advisor”
  3. Why this works:
    • Most readers see prominent job title, skip fine print
    • “Original legal entity” is technically accurate (LendUp Cards) but misleading
    • Doesn’t acknowledge he was CEO of parent company, not founder of subsidiary
    • Uses “spin off” instead of “asset sale” even in legal disclaimer

Company name obfuscation:

  • “Mission Lane (then LendUp Card)” - acknowledges name difference in parenthetical
  • BUT still leads with “Mission Lane, 2014-2018” when Mission Lane LLC didn’t exist until Dec 2018
  • Provides plausible deniability (“I said it used to be called LendUp Card!”)
  • Maintains false primary narrative for casual readers

Shell Game “Acquisitions” Through Common Investors

Ahead → Kinly → Greenwood chain (documented by Jason Mikula):

  • April 8, 2022: Ahead app stopped working
  • May 23, 2022: Rolling Loud default judgment against Fairfax Studios (part of Ahead’s shell company network with Thirty Two West LLC) for $800K (total judgment $1.575M)
  • June 17, 2022: Kinly launched (25 days after judgment), “acquired” Ahead during LendUp liquidation
  • March 2023: Kinly faces trademark opposition (defendant defaulted) and PA tax judgment ($5,987.77)
  • May 2, 2023: Greenwood “acquired” Kinly (35 days after tax judgment)

The pattern (documented by Jason Mikula):

  • “Vague merger/acquisitions through common investors” present “successful exit” for executives
  • Kapor Capital was major investor in both LendUp and Kinly - enabling the “acquisition” shuffle
  • Customers locked out of funds during transitions
  • Legal liabilities obscured through entity shuffling
  • Same address (1750 Broadway, Oakland) across LendUp/Ahead/Kinly
  • Same investor (Kapor Capital) backing failed entities through restructuring
  • Greenwood raised millions post-Floyd from JPMorgan, BofA, Wells Fargo; failed to deliver promised products
  • Washington Post investigation (Jan 2024): Only 150K of 700K waitlist opened accounts, executive departures, “financial disarray”

Why this works:

  • “Acquisition” suggests success, value creation, due diligence
  • Reality: Common investors (Kapor Capital) shuffle failing entities to obscure liabilities
  • Media coverage treats it as legitimate transaction
  • Customers and creditors lose accountability trail
  • Executives get “successful exit” narrative for next venture
  • Same investor backing multiple failed entities demonstrates conscious enablement, not due diligence

Network Integration Terminology

Pattern of vague organizational language:

  • Insights Servicing Inc. (undisclosed related-party entity) - never disclosed despite Blake Byers as director, shared LendUp address
  • “Various Roles (Head of Partnerships, Head of Community, Head of Startups Programs)” at “VC & Accelerators” - Dasha Shunina’s LinkedIn obscuring Skolkovo Foundation role
  • “Subsidiary” vs. “wholly-owned subsidiary” vs. “related-party entity” distinctions lost on general public
  • “Acquisition” vs. “common investor restructuring” - legitimacy framing for liability shuffling

Why This Pattern Matters

The fraud network understands most people do not know:

  • Difference between subsidiary and independent company
  • That CEO of parent company doesn’t make you “founder” of subsidiary
  • That “spin-out” can mean “fire sale that screwed shareholders”
  • That “original legal entity” can be legally accurate while narrative misleading
  • How asset sale structures work (golden parachutes, conflicted directors, convertible notes)
  • That incorporating a legal entity (filing paperwork) ≠ founding a business (building from scratch)
  • That selective omission of entities (Insights Servicing) while listing others is intentional narrative control

The strategy:

  1. Use precise legal language in disclaimers (plausible deniability)
  2. Use success-framing language in prominent positions (public perception)
  3. Exploit that most people won’t understand corporate structure nuances
  4. Maintain false narratives while having technical legal cover
  5. Conflate “incorporating” with “founding” to claim credit for subsidiary creation
  6. Selectively disclose entities: List those that support positive narrative (Puzzle), hide those that contradict it (Insights Servicing during CFPB ban)

Evidence of consciousness:

  • Coordinated LinkedIn updates AFTER SEC complaints
  • Added legal disclaimers while intensifying false claims in prominent positions
  • “Mission Lane (then LendUp Card)” obfuscation acknowledges name difference but maintains false timeline
  • Insights Servicing incorporation (Sept 2022, during CFPB ban) completely omitted from all public profiles despite listing other entities
  • Claims “no longer involved in lending” while incorporating entity named “Servicing” (loan servicing/debt collection) 9 months after permanent CFPB ban
  • Same pattern across LendUp section (passive “shut down”) and Mission Lane section (buried advisor role)
  • Both updated simultaneously with consistent obfuscation strategy

Systematic exploitation of legal literacy gaps to maintain false credentials while creating technical escape hatches.

Gaslighting Indicators

  • Claiming termination was resignation despite separation agreement
  • Characterizing retaliation victims as “mentally ill”
  • Positioning abuse as “help” (”we tried to help”)
  • Making you doubt documented reality (I posted “I was conditioned into thinking I was fired”)
  • Using official channels (HR, lawyers) to reinforce false narrative

Strategic Timing

  • Offers of “help” arrive when targets are most vulnerable (job search struggles, financial desperation)
  • Legal threats arrive within hours of exposing documentation
  • Each escalation follows a predictable pattern: ignore → monitor → offer money → threaten legally

Documentation is Protection

  • Contemporaneous records (therapist emails, screenshots with timestamps, archived posts) prove patterns
  • Refusing to sign away rights preserves options
  • Public documentation creates accountability that private settlements don’t
  • Third-party validation (therapist assessment of gaslighting) counters internal narrative

Progressive Branding and Linguistic Engineering

  • Reframing exploitation as empowerment (”Banker to the Poor” narrative while charging predatory rates to vulnerable consumers)
  • Social justice positioning (LendUp’s “credit building” and “financial inclusion” marketing contradicted by CFPB findings of systematic deception)
  • This playbook mirrors strategies refined in the subprime credit card industry at Capital One and subsequently adapted by fintech startups backed by Capital One alumni and their investment networks - reframing high-interest products targeting vulnerable populations as “financial inclusion” and “credit building” opportunities
  • Mission-driven language masking extractive business model (claiming to help underserved communities while violating Military Lending Act against service members)
  • Appropriating progressive values for brand protection (mental health advocacy posts while labeling whistleblowers “mentally ill”)
  • Using ESG/impact investing language (framing payday loan alternative as socially responsible while CFPB documents 140,000+ victims)
  • Diversity theater (Ahead Financials positioned as “women-led fintech” in media coverage while being LendUp subsidiary with same problematic practices)
  • Stakeholder capitalism rhetoric (”trying to help” employees while executing retaliatory terminations)
  • “Disruption” framing to excuse regulatory violations (TEDx talk “Disrupting payday loans” while continuing predatory practices that led to shutdown)
    • July 2013 TEDx talk: Sasha Orloff declared he was “proud to be a payday lender”; mentions “Nobel Peace Prize” twice in first 3 minutes with slide reading “Nobel Peace Prize” (credential inflation by association with Muhammad Yunus); same tactic now used on LinkedIn resume
    • September 2016: Financial Times article “LendUp: playing with people’s lives” characterized the TEDx talk: “In all honesty, only watch that clip if you hate yourself”
    • September 2016 (same month): CFPB issued first enforcement action against LendUp for violating promises made in marketing materials
    • December 2021: CFPB shut down LendUp entirely for continued violations, documenting systematic deception of 140,000+ consumers
    • The TEDx talk remains online as documentation of the “Banker to the Poor” narrative and Nobel Prize credential inflation that persisted through regulatory shutdown

TEDx "Disrupting payday loans" Nobel Peace Prize slide (2:43) TEDx talk 2013 (2:43 timestamp): Sasha on stage with slide reading “Nobel Peace Prize 2006” featuring Muhammad Yunus. Mentions Nobel Prize twice in first 3 minutes.

20+ year credential inflation pattern:

  • 2002-2005: Grameen Foundation volunteer
  • 2013: TEDx with dedicated Nobel Prize slide
  • 2025: LinkedIn resume states “Following the pioneering vision of Muhammad Yunus and his Nobel Peace Prize”

Pattern: Systematic use of Yunus’s Nobel Prize to inflate own credentials while building companies that would be shut down by federal regulators for fraud.

Watch: “Disrupting payday loans: Sasha Orloff at TEDxSacramento

“In all honesty, only watch that clip if you hate yourself”- Kadhim Shubber, 2016

Continuing Partnerships and Real-Time Suppression

November 10, 2025: Puzzle announced CPA.com partnership for Digital CPA Conference 2025 (December 7-10, Washington DC, Booth #8). The LinkedIn post stated “Swing by Booth #8 to meet our team and see a live product demo.”

Comment from Dasha Shunina (Forbes contributor, founder of Women Tech Meetup, Puzzle’s GTM strategist): “Puzzle 🧩🚀 I’m so excited! Please come say hi! We’d love to meet you!” The comment received initial engagement from Women Tech Meetup and THE GATHERING accounts, as with all Puzzle posts.

I commented on the post warning CPAs about the CEO’s CFPB enforcement history and professional liability concerns, and emailed [email protected] notifying conference organizers with complete documentation.

My warning comment to CPAs was deleted within 4 minutes.

KEY EVIDENCE: 4-Minute Evidence Deletion (Active Monitoring + Immediate Suppression)

November 10, 12:30 PM ET: Puzzle posts LinkedIn announcement of CPA.com conference partnership
My response: Posted warning comment on Puzzle’s LinkedIn post, alerting CPAs and accountants about CEO’s CFPB enforcement history, photoshopped metrics, and professional liability concerns
4 minutes later: Warning comment deleted from Puzzle’s post November 10: Conference organizers ([email protected]) notified with complete fraud documentation

The sequence demonstrates active monitoring and immediate suppression to prevent accounting professionals from being warned. This mirrors the same pattern of evidence deletion seen with the ActualQuickBooks campaign and across the decade-long fraud pattern.

LinkedIn post with Sasha and DashaSasha and Dasha, November 10 12:30PM ET

Warning comment deleted within 4 minutesWarning comment posted on Puzzle’s LinkedIn announcement of CPA.com conference partnership, alerting accounting professionals to CEO’s CFPB enforcement history and photoshopped metrics—deleted within 4 minutes to prevent CPAs from being warned

Conference announcement repostedSasha shared conference announcement again, November 10 3:00PM ET

Systematic CPA Testimonial Deployment and Evidence Suppression

Timeline of Testimonial Weaponization:

October 27, 2025: ActualQuickBooks campaign with photoshopped metrics (3 likes → 12,362), police intervention, evidence deletion

November 2, 2025: Published full ActualQuickBooks documentation with photoshopping evidence

November 4, 2025 (approximately, posted “1w” as of Nov 12): Charles Crabtree, VP of Accounting Firm Partnerships at Puzzle Financial, shared testimonial from Joe Faris, CPA (Corporate Tax Professional for Startups, Accountalent) stating: “We have been dealing with Puzzle 🧩🚀 for a few years and their commitment to firms like ours is the gold standard! Sasha Orloff and his staff are of the highest integrity.”

I left a comment on Charles Crabtree’s November 4 post linking to fraud documentation. The comment is no longer visible on the post. This follows the same suppression pattern as the CPA.com conference post (November 10), where my warning comment was deleted within 4 minutes of posting.

November 10, 2025: Puzzle announces CPA.com Digital CPA Conference partnership on LinkedIn. My warning comment to CPAs and accountants deleted within 4 minutes—posted on Puzzle’s LinkedIn announcement, alerting professionals to CEO’s CFPB enforcement history; conference organizers ([email protected]) also notified directly.

November 11, 2025 (21 hours before Nov 12 noon): Charles Crabtree posted announcing Puzzle’s attendance at Digital CPA.com 2025 (December 7-10, Washington D.C.) - the same conference where warning was suppressed one day earlier.

November 11, 2025 (Noon ET): Puzzle company page reshared Joe Faris testimonial - second deployment following fraud documentation

November 11, 2025: Charles Crabtree notified via email ([email protected]) regarding systematic deployment of CPA endorsements despite partner’s prior notification and pattern of evidence suppression

Joe Faris was previously notified via LinkedIn message titled “Concerns Regarding Sasha Orloff” with comprehensive fraud documentation including CFPB enforcement, photoshopped metrics, and false credentials. Despite notification, the testimonial was deployed twice by Puzzle executives managing CPA relationships.

Evidence Suppression Pattern:

The systematic deletion of fraud documentation from CPA-focused posts demonstrates consciousness of fraud:

  • Charles Crabtree’s Nov 5 post: My documentation comment no longer visible after 2+ days
  • Puzzle’s Nov 10 CPA.com post: My warning comment to CPAs alerting them to CEO’s CFPB enforcement history deleted within 4 minutes
  • Charles promotes same conference Nov 11: One day after suppression
  • Company page reshares testimonial Nov 12: Second deployment with evidence suppressed

Charles Crabtree’s role as VP of Accounting Firm Partnerships involves:

  • Managing relationships with Decimal, Accountalent, Burkland, Fondo, Trivium, and other CPA firms
  • Coordinating partner testimonials and endorsements
  • Deploying CPA credibility strategically when fraud is exposed
  • Monitoring and suppressing fraud documentation on partner-focused posts

This is crisis management using CPAs as human shields, not organic testimonial sharing. A CPA vouching for “highest integrity” of a CEO with CFPB enforcement history, deployed by the executive managing CPA relationships 3 days after metric manipulation documentation, with systematic suppression of fraud evidence from the same posts, demonstrates coordinated weaponization of professional credibility to deflect from documented fraud.

Professional liability concerns:

  • Charles Crabtree: As VP managing CPA partnerships, deploying testimonials after notification of endorser’s prior warning, promoting conference partnerships after fraud documentation was removed from his posts
  • CPA.com: Hosting Puzzle at Digital CPA Conference despite notification of CEO’s fraud history and professional liability concerns for CPAs

Someone who manipulates social media metrics shouldn’t be trusted with financial metrics. Someone who systematically deletes fraud warnings from posts targeting CPAs demonstrates consciousness that the evidence, if seen by accounting professionals, would damage the business relationship.

Crabtree testimonial with deleted commentCrabtree sharing Faris testimonial “1w” as of November 11, 2025. My comment to this detailing ActualQuickBooks evidence is no longer visible.

Puzzle resharing testimonialPuzzle resharing the testimonial November 11, 2025 12PM ET.

Crabtree Digital CPA postCrabtree sharing Digital CPA November 10, 2025, a week after comment containing ActualQuickBooks evidence was no longer visible on his post.

Burkland Associates: Active Promotion After Notification

November 10, 2025: Burkland Associates notified via email of CEO’s fraud history and professional liability concerns. Notification emphasized: “Someone who manipulates social media metrics shouldn’t be trusted with financial metrics” and established awareness for future regulatory or professional liability proceedings.

Approximately November 18-25, 2025 (posted “1w” as of November 25, 2025): Burkland Associates publishes LinkedIn post titled “The modern accounting stack recommendations from a accounting and tax modern firm.”

Post lists Puzzle as FIRST “trusted partner” (with celebratory emoji 🧩🚀):

  • Puzzle
  • Ramp
  • Rillet
  • Mercury
  • Deel
  • Rippling
  • Gusto
  • Carta
  • Vouch Insurance

Burkland describes themselves: “works seamlessly with all major finance platforms and stays ahead of emerging tools to help you build a modern tech stack that’s truly future-ready.”

CEO Sasha Orloff amplifies post with comment: “The great migration has begun…”

Context:

This is a CPA firm publicly endorsing CFPB-banned CEO’s accounting software as a “trusted partner” for their “modern tech stack” recommendations, posted 8-15 days AFTER being notified of:

  • CFPB permanent ban (140,000+ victims, $40M restitution, December 2021)
  • Photoshopped metrics (October 2025)
  • False credentials documentation
  • SEC whistleblower complaint numbers (November 11, 2025)
  • Professional liability warning

This demonstrates active, conscious promotion—not passive partnership continuation. Burkland is using their professional credibility to recommend Puzzle to the startup ecosystem after receiving comprehensive fraud documentation.

“The great migration has begun” comment suggests coordinated business development using CPA credibility as legitimacy cover. Crisis management using accounting firm reputation as shield during federal investigation.

California Board of Accountancy Complaint (Case #A-2026-1047) updated November 25, 2025 to include Burkland Associates’ active promotion as continuing violation of professional ethics standards after notification.

December 11, 2025: Email Bounce and Re-Forward

[email protected] bounced from Daily Email #4 recipient list.

Re-forwarded to [email protected] (Jeff Burkland, CEO/founder) with explicit notice:

“Jeff Burkland,

If you have not received prior emails regarding Sasha Orloff due to wrong email or intentional suppression of fraud documentation, this is your one and only notice.

You must immediately perform due diligence regarding Sasha Orloff and Puzzle Financial.

You will receive emails every business day until I hear further.

Patrick”

Pattern: Multiple entities experiencing “bounced” emails (Burkland info@, Brex blocking 6 C-suite addresses). When info@ addresses bounce or block, escalation to named executives establishes individual consciousness. Jeff Burkland (CEO) now personally notified that his firm’s November promotion of Puzzle as “first trusted partner” occurred after comprehensive fraud documentation was provided, and that daily notices will continue until response received.

KEY EVIDENCE: Twitter Block (Suppression Pattern Complete)

November 13, 2025: Posted tweet documenting Credit Karma → Mission Lane profit structure. @sashaorloff blocked within 2 hours. Pattern complete: photoshopped evidence deleted (24 hours), LinkedIn CPA warning deleted (4 minutes), @joinodf blocked, CEO blocked. Suppress, don’t refute. Consciousness of guilt.

Wikipedia Edit War: Sasha Orloff Personally Removes Fraud Documentation (November 26, 2025)

KEY EVIDENCE: First Public Acknowledgment in 2.5 Years

November 26, 2025: This Wikipedia editing and Help Desk posting represents Sasha Orloff’s first public acknowledgment of me in 2.5 years. After blocking me on LinkedIn October 28 (and my old account 2.5 years ago), monitoring my posts in silence, and coordinating suppression across his network, he breaks 2.5 years of silence to personally edit Wikipedia and claim federal court documents are “made up.” Not to address substance. To suppress federal records.

November 26, 2025: Sasha Orloff personally edited the LendUp Wikipedia article to remove sections I added documenting fraud patterns, Mission Lane relationship, and Ahead Financials lawsuit.

Sasha’s Wikipedia Edit Diffs (Direct Links to His Tampering):

  1. First deletion - 10:11 AM PT (18:11 UTC): Initial removal claiming “fake references”
  2. Second deletion - 10:15 AM PT (18:15 UTC): Continued removal after revert
  3. Third deletion - 7:43 PM PT (03:43 UTC Nov 27): Escalated removal during evening hours
  4. Fourth deletion - 9:10 PM PT (05:10 UTC Nov 27): Final attempt before page protection, edit summary states “This user continues to add false information without citing sources” - demonstrates 12+ hours of Wikipedia editing on Thanksgiving eve

Wikipedia edit history showing Sasha Orloff removing fraud documentationWikipedia edit history (November 26, 2025): User “Sashaorloff” removes 4,744 bytes of documentation, claiming “They cited URLs that did not exist, and referenced a blog post that was made up in the last two weeks that the author published was part of an SEO hijacking against me, Sasha Orloff.” All links were functional. Removed: Netanyahu 2015 connection, Mission Lane advisory role contradictions (which I first documented on Wikipedia in August 2023, 3 days before first C&D), asset sale details, contradictory interviews, Ahead Financials lawsuit. What remains: bare-bones “2018 asset sale” with zero verifiable substance. Pattern: CEO personally monitors and edits Wikipedia to systematically scrub documentation I’ve been adding for 2+ years, not just “recent edits” or “last two weeks.”

12-Year Pattern of Wikipedia Control:

  • Pre-2018: Wikipedia article initially created with contributions from user “LauraBehrens” (Talk page COI disclosure). Laura Behrens Wu (Shippo founder) did a summer internship at LendUp in 2013, suggesting Wikipedia article was created/edited by LendUp intern
  • September 17, 2018: User “Tlvernon” discloses on LendUp Talk page: “I was paid by LendUp to revise and update this page.” LendUp paid Wikipedia editor to control narrative during fraud period (CFPB violations 2016, 2019, 2021).
  • September 18-30, 2018: Tlvernon made multiple edits adding promotional content to dilute CFPB fine mention (compare before and after): added detailed founder bios, funding section with all investors, company milestones, Sasha Orloff headshot at Milken conference (file since deleted from Wikipedia). Strategy: bury negative in positive marketing fluff rather than remove it. Pattern: Wikipedia narrative control through dilution, not deletion.
  • August 8, 2023, 03:10 UTC: I edited Wikipedia to document Sasha’s contradictory Mission Lane narratives - 3 days BEFORE first C&D was sent (August 11, 2023). Added: “Sasha Orloff, LendUp’s original CEO, is listed as the founder of Mission Lane but appears to have gone on sabbatical 5 days after the announcement with only a placeholder website.” This documented the timeline contradictions showing Sasha’s involvement with Mission Lane despite claiming to have left LendUp. My Wikipedia documentation of fraud pattern pre-dates the legal threats, establishing that I was publicly documenting verifiable contradictions before any retaliation began.
  • November 7, 2025, 01:53 UTC: I (resumed adding documented information) (evidence-120) about Mission Lane asset sale (December 2018, not January 2019 “spin-off”), Orloff’s resignation from LendUp, advisory role to Mission Lane purchaser, and contradictory interviews where Orloff claimed to have been “building two companies at the same time”
  • November 17, 2025: Added SEC filing link clarifying Theorem relationship and Orloff’s continued involvement
  • November 26, 2025, 18:11: User “Sashaorloff” (CEO personally) removes 4,744 bytes, claiming in edit summary:
    • “The sections that were added recently to this were not real”
    • “They cited URLs that did not exist”
    • “referenced a blog post that was made up in the last two weeks”
    • “part of an SEO hijacking against me, Sasha Orloff”
    • “You can verify the links in the edits went to dead pages, and you can verify that the person who made the change stated they were doing it with the intent to SEO hijack me” (provides zero verification)
  • November 26, 2025, 18:18: User “BrandNewSaint” reverts Sasha’s deletion, noting “None of the links were ‘dead’”
  • November 26, 2025, 18:39: User “ScottishFinnishRadish” (Wikipedia admin with checkuser/oversight privileges) reverts BrandNewSaint’s edit, siding with Sasha, claiming “This is a bunch of self published blogs making claims about BLPs”

My Hallucinated CFPB Order Citation:

On November 16, 2025, I added a citation to the CFPB order using a hallucinated citation format: "Order In the Matter of LendUp Loans, LLC and Sasha Orloff, File No. 2021-CFPB-0008|date=2021-12-21|" - the citation format was incorrect (no such “File No. 2021-CFPB-0008” exists). The actual CFPB enforcement is documented in the Stipulated Final Judgment and Order, Case No. 3:21-cv-06945-JSC (December 22, 2021).

Critical clarification: Sasha IS covered by the order, even though my citation was wrong:

While I incorrectly included “Sasha Orloff” in the case caption format, the actual federal court order DOES apply to him personally through Sections II and V language: “Defendant and its officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them.” The case caption names only “LendUp Loans, LLC” as defendant, but the operative prohibitions explicitly cover officers and agents - which includes Sasha as former CEO.

What Sasha systematically removed from Wikipedia:

  • “and its officers, agents, and all persons in active concert with them” (the language covering him personally)
  • “consumer lending activities” → changed to “issuing subsequent loans” (narrower, softer language)
  • “and permanent lending ban” (removed from section header)
  • ”* Assisting others in any lending activities” (Section I.c prohibition covering Mission Lane advisory role and Theorem/Pagaya investments)

Regardless of searching “Sasha” or “fraud” in the federal order document, the operative language “officers, agents, and all persons in active concert” means Sasha is banned. His surgical removal of these specific phrases during 12+ hours of Wikipedia editing proves he understands the order applies to him - that’s why he removed those exact words.

What this error demonstrates:

  1. The facts didn’t change: The CFPB permanent ban is real and covers Sasha through “officers and agents” language - only my citation format was incorrect
  2. It served as bait: Sasha used this technical error to claim the entire CFPB ban was “fake” and “made up,” telling Wikipedia administrators all the court documents were fabricated
  3. Deflection pattern: Rather than address the substance (he is permanently banned from consumer lending), Sasha focused on a citation formatting error to dismiss federal court records. Same as Netanyahu defense - deflect on technicalities (Petras “didn’t cite his source,” my citation format was wrong) rather than deny substance.
  4. ScottishFinnishRadish was misled: The admin’s revert claiming “self published blogs making claims about BLPs” suggests Sasha successfully convinced them that federal court documents were unreliable sources

My error gave Sasha the ammunition he needed to dismiss everything as “fake URLs” and “made up lawsuits,” despite the core facts being documented in verifiable federal court records. This is the same pattern as his Wikipedia defense of the Netanyahu connection - deflect on technicalities (Petras “didn’t cite his source,” my citation format was wrong) rather than deny the substance.

  • November 26, 2025, 18:35: Sasha Orloff posts to Wikipedia Help Desk, escalating to Wikipedia administrators: “He made up some citations and then made up a blog post that you can easily verify do not link to any official source (broken links to make it look official)…I discovered out about this from his linkedin post where he said ‘I updated wikipedia for you…I will flood you with bad press and SEO hijacking’ (I have the screenshot but the system is not letting me upload it).” Claims “URLs that lead to 404 pages, as they are made up URLs” and “this editor, Patrick Stoica, publicly admitted he is using Wikipedia to SEO hijack.” Ends with: “I am not sure the process, but I created a Wikipedia account, deleted the made up content and fake references (URLs that lead to 404 pages, as they are made up URLs). I still see the page live so not sure the process of review, but this editor, Patrick Stoica, publicly admitted he is using Wikipedia to SEO hijack. I assume that is against your code of conduct. Is there anything else I should be doing?”
  • November 26, 2025, 22:09: Sasha Orloff responds to BrandNewSaint, doubling down on false claims: “Some links were to a real domain (of a government website), but there was not a real page (404/errors as they were made up lawsuits by the poster)” and “Some were to his own personal blog citing the Wikipedia entry he created, and then cited his blog to Wikipedia as evidence, which he then posted to LinkedIn he did to ‘SEO Hijack’ me.”

Sasha Orloff explaining Wikipedia deletion to editor Wikipedia User talk page (November 26, 2025): Sasha Orloff maintains “SEO hijacking” narrative to Wikipedia editor BrandNewSaint, claiming links were “404/errors” and “made up lawsuits” despite BrandNewSaint having verified links were live. Pattern: false claims to justify suppression, even when speaking directly to Wikipedia editors who fact-checked the links.

Sasha Orloff's Wikipedia Help Desk post claiming "made up citations" Wikipedia Help Desk (November 26, 2025, 18:35 UTC): Sasha Orloff escalates to Wikipedia administrators, claiming “He made up some citations (28, 29, 20) and then made up a blog post (citation 18)” and “URLs that lead to 404 pages, as they are made up URLs.” Specifically lists citation numbers he claims are fake, demonstrating he reviewed each citation before making false claims to Wikipedia admins. My November 7 revision shows what was actually added - all functional links to court documents, SEC filings, and public records. I did incorrectly cite the CFPB order November 16, but that doesn’t mean it’s “not real.”

KEY EVIDENCE: Treating Wikipedia Administrators as Law Enforcement

Sasha’s Help Desk post follows the exact pattern as his cease-and-desist letters threatening police involvement:

  1. “I am not sure the process” - positions himself as victim unfamiliar with proper channels
  2. “I created a Wikipedia account, deleted the made up content” - describes taking action against perceived wrongdoing
  3. “publicly admitted he is using Wikipedia to SEO hijack” - accuses me of confessed wrongdoing
  4. “I assume that is against your code of conduct” - appeals to authority’s rules/regulations
  5. “Is there anything else I should be doing?” - asks administrators what enforcement actions he should take next

This is the language of filing a police report, not editing a collaborative encyclopedia. He’s treating Wikipedia administrators as enforcement authorities who should investigate and punish me for documenting federal court records.

Pattern across all platforms:

  • Cease-and-desist letters: Threatens police involvement 4 times over 27 months
  • LinkedIn: Deletes warning posts, blocks whistleblower
  • Wikipedia: Reports to administrators like filing charges, asks “what else should I be doing?”

When federal court documents appear in public view, don’t address substance - find an authority figure to suppress it.

Marvin Bing Blocking (Same Day as Wikipedia “Made Up Lawsuit” Claims):

LinkedIn post about Rolling Loud lawsuit LinkedIn post (November 26, 2025, ~8:12pm): Posted about Rolling Loud v. Ahead Financials and Fairfax Studios lawsuit, including Sasha’s Wikipedia claim that “they were made up lawsuits by the poster” and Anu Shultes’ sworn affidavit. Named Marvin Bing (Fairfax Studios founder) and noted “MARVIN BING BLOCKED ME, CONSCIOUSNESS OF GUILT.”

Marvin Bing LinkedIn profile showing block LinkedIn profile for Marvin Bing (November 26, 2025, ~9:09pm): “This page doesn’t exist” - blocked within 57 minutes of posting about Rolling Loud lawsuit. Same day Sasha was claiming on Wikipedia that the lawsuit was “made up.” Pattern: both Sasha and Marvin Bing (named in lawsuit) suppress rather than refute; if lawsuit was “made up,” Marvin would defend it, not block.

The “You Can Verify” Contradiction:

In his edit summary, Sasha told Wikipedia editors: “You can verify the links in the edits went to dead pages, and you can verify that the person who made the change stated they were doing it with the intent to SEO hijack me.”

But when asked to provide this verification in the Help Desk:

  • “I have the screenshot but the system is not letting me upload it”

He claims evidence is easily verifiable, then claims technical difficulties prevent him from providing it. Another Wikipedia editor (BrandNewSaint) actually verified the links and confirmed: “None of the links were ‘dead’” - directly contradicting Sasha’s “you can verify” claims.

Pattern: Asserting verifiability without providing verification is a confidence game. Tell people evidence exists and is easily checkable, counting on them not to check, then claim technical difficulties when pressed.

The “Circular Referencing” Defense Against Federal Court Documents:

Sasha’s primary defense against federal enforcement documentation is to claim I’m using “circular referencing” - citing my blog in Wikipedia, then citing Wikipedia in my blog. From his message to BrandNewSaint:

“Some were to his own personal blog citing the Wikipedia entry he created, and then cited his blog to Wikipedia as evidence, which he then posted to LinkedIn he did to ‘SEO Hijack’ me.”

What my November 17 Wikipedia edits actually cited (verifiable here):

  • CFPB Consent Decree - federal court document (I initially cited a different CFPB order that was real but for a different case; I acknowledged this error and provided the correct link to the LendUp consent decree in my Help Desk response)
  • SEC filings - Pagaya Technologies F-3 Registration Statement showing Theorem relationships
  • James Petras article - third-party journalist documenting Netanyahu’s 2015 visit
  • Rippling podcast - April 29, 2025 episode calling Orloff “founder of LendUp and Mission Lane”
  • YouTube interview - July 2025 Notion’s Founder Fridays episode (“building two companies at the same time”)
  • My puzzle statement - patrickstoica.com (not a “blog”) for comprehensive documentation including the Rolling Loud lawsuit (Case No. 2022-003284-CA-01, Miami-Dade County Circuit Court - verifiable through UniCourt), which wasn’t covered in mainstream media

On the “circular referencing” accusation:

Yes, I cited my own documentation in one instance - for the Rolling Loud v. Ahead Financials lawsuit. This lawsuit wasn’t documented anywhere else. When primary documentation doesn’t exist in mainstream sources, citing the only existing documentation of a verifiable court case is not “circular referencing” - it’s providing a source for information that can be independently verified through court records.

The lawsuit is real and verifiable: Rolling Loud v. Ahead Financials, Case No. 2022-003284-CA-01 (Miami-Dade County Circuit Court, UniCourt case file with full docket and documents - login required to view).

Sasha’s Wikipedia Help Desk post specifically complained about the Rolling Loud lawsuit citation, calling it a “made up lawsuit.” The same day he made this claim, Marvin Bing (named in the lawsuit) blocked me on LinkedIn within 57 minutes of my post about it. If the lawsuit was “made up,” why did Marvin Bing suppress rather than refute?

Sasha’s strategy: Accuse me of circular referencing to discredit federal court documents, while providing zero evidence for his own claims. When Wikipedia editors ask for proof of his accusations, he claims technical difficulties uploading screenshots. When they verify the links themselves, they find them all functional.

The actual circular pattern here: Sasha makes unverifiable claims about my sources, then uses those unverifiable claims as evidence that federal court documents are “made up.” That’s the real circular reasoning.

Sasha’s User Talk Page: Complete Timeline of Lies to Wikipedia Administrators

Full conversation archived here. Key exchanges:

04:55 UTC - Nomadgeek warns about COI:

“I noticed that you recently removed content from LendUp. It seems you have a personal connection to this article. Please check out WP:COI for guidance on editing pages you have an interest in.”

Sasha (05:13 UTC): Claims I’m “using Wikipedia to ‘SEO Hijack’ me” and links Google Drive screenshot: https://drive.google.com/file/d/1M4JJ—KrtpiuoLattCFhD0BQN3r9XaNn/view?usp=sharing

05:29 UTC - Umby warns about edit warring:

“Repeatedly undoing the changes made by other users in a back-and-forth fashion like this is disallowed… All editors are expected to discuss content disputes on article talk pages.”

05:38 UTC - Umby demands paid editing disclosure:

“The nature of your edits gives the impression you have an undisclosed financial stake… Paid advocacy on Wikipedia must be disclosed even if you have not specifically been asked to edit Wikipedia.”

Sasha (05:40 UTC): “Definitely not a paid advocate.”

Umby (05:42 UTC): “Can you explain your relation to Sasha Orloff, one of the subjects of the article you’ve been editing?”

Sasha (05:55 UTC) - THE MONEY QUOTE:

“I am Sasha Orloff! ha, ha… I have no financial interest in this. In fact, it’s quite annoying and frustrating. I am just trying remove the harassment and defamation from this editor, who is bragging on social media about him doing it… I just learned about this when this editor posted on LinkedIn he was going to do this, and someone sent it to me… I am trying to follow the Wikipedia rules. Sorry. I am trying, just removing false attacks that are untrue. about me.”

Plus three false factual claims:

  1. “The CFPB / federal government never ‘banned’ people”
  2. “The blog cites me as a supporter of Netanyahu, which is both not true and not cited or sourced”
  3. “The section he added about my personal investments have nothing to do with LendUp”

What This Reveals:

  1. “I have no financial interest” - While being the co-founder and original CEO of LendUp. Absurd.
  2. “someone sent it to me” - Admits monitoring my LinkedIn despite blocking me October 28, 2025. Active surveillance.
  3. Links Google Drive screenshot - Provides “proof” to Wikipedia admins that I was “bragging.”
  4. “The CFPB never ‘banned’ people” - Direct lie about federal court order.
  5. Netanyahu “not true and not cited” - James Petras (60+ books) named him March 2015; 10 years silence until Wikipedia 2025.
  6. Pagaya “have nothing to do with LendUp” - SEC filings show he received Pagaya shares for Theorem stockholding (consumer credit ML).

Umby (06:04 UTC): “Given that you at least an employee of LendUp, you are still required to make a paid editing disclosure.”

Sasha (06:25 UTC): “I am not an employee of LendUp either.”

Umby (06:32 UTC): “But you are a co-founder, correct?”

Sasha (07:29 UTC) - “OH, I SEE YOUR POINT”:

“Oh, I see your point. But the company no longer exists. not sure if that matters or not. So there is no direct or indirect compensation.”

Translation: “Yes I’m the CEO editing Wikipedia about my own federal ban, but technically the company that defrauded 140K+ consumers is shut down, so I’m not ‘compensated.’” The technicality is irrelevant - he’s editing an article about himself to remove documentation of his own federal enforcement action.

Umby (22:58 UTC): “To be honest, I’m not sure if that matters either. I believe it doesn’t make you a paid editor under the policy, but I’ll defer to a more experienced editor on that.”

Umby (23:03 UTC): Advises Sasha to use conflict of interest edit requests instead of direct editing.

November 28, 2025, 00:47 UTC - Helpful Raccoon:

“The other editor has been blocked indefinitely (not by me). Thank you for alerting Wikipedia to problematic editing.”

Final Result:

  • Whistleblower blocked indefinitely for posting federal court documents
  • Sasha’s false claim “The CFPB never banned people” remains unchallenged on his talk page
  • My detailed rebuttal with CFPB order quotes deleted from Talk page
  • Page protected until December 7, 2025

My Response to Wikipedia Help Desk (November 27, 2025, 03:06 UTC):

Posted detailed rebuttal addressing each of Sasha’s false claims:

  • Timeline correction: First edited August 8, 2023 (documenting Mission Lane contradictions), then November 7, 16, 17, 2025 - not “a few days ago” or “in the last two weeks” as he claimed; I’ve been documenting his pattern on Wikipedia for over 2 years
  • Surveillance proof: He blocked me October 28, 2025, yet admits monitoring my LinkedIn posts - “I discovered this from his LinkedIn post”; his 2023 screenshot (evidence-124) was also taken AFTER blocking me - proving years-long pattern of surveillance despite blocks
  • Citations were real: Acknowledged one incorrect CFPB URL (cited different case), provided correct link to Stipulated Final Judgment (Case No. 3:21-cv-06945-JSC); other citations included SEC filing, James Petras article, Business Wire, TechCrunch, UniCourt PDFs, YouTube interviews - all verifiable
  • “None of the links were dead”: BrandNewSaint already verified this
  • No evidence of alleged quote: He claims screenshot but “system is not letting me upload it” (later uploads screenshot showing 2023 LinkedIn post demanding accountability post-CFPB ban)
  • What he actually removed (compare versions):
    • Entire “CEO permanent ban” section (including Section V prohibitions)
    • Entire “Political connections” section (Netanyahu/James Petras documentation)
    • Entire “Subsequent activities” section (Puzzle, Theorem/Pagaya/Sam Altman connections)
    • From Mission Lane section: Orloff resignation, advisor role, Rippling “founder” reference, July 2025 “building two companies” interview
    • Left only: Bare-bones “asset sale” with zero detail about Orloff’s involvement or subsequent activities

Visual diff showing Political connections section removal Wikipedia visual diff (Line 48): Left side shows “==Political connections==” section documenting Netanyahu financial backing via James Petras article (March 2015, published one year before first CFPB violation). Right side shows Sasha replaced this with “==CFPB enforcement ==” header and generic “issuing subsequent loans” language. Pattern: He didn’t delete the CFPB section entirely - he kept generic enforcement mention while surgically removing the Political connections section that documents Netanyahu backing. This makes it appear he was “cleaning up” rather than systematically suppressing political financial ties documentation.

Visual diff showing Subsequent investments section removal Wikipedia visual diff (Lines 60-63): Left side shows detailed ban language (“Assisting others in any lending activities”) and “==Subsequent investments==” section documenting Theorem Technology co-investment with Y Combinator and Altman Family LLC per SEC filings. Right side shows he kept basic ban language but completely deleted Subsequent investments section. Surgical suppression: keep enough CFPB mention to appear compliant, remove all documentation of continued consumer credit involvement post-ban. Pattern: not wholesale deletion - strategic removal of specific damaging facts while maintaining appearance of legitimate editing.

  • COI violation: “He is not fixing ‘broken links.’ He is removing documented federal enforcement actions from Wikipedia. Mr. Orloff is the subject of this article and is editing to remove federal enforcement documentation. This is a WP:COI violation.”
  • Context provided: Noted I’m federal whistleblower with 5 SEC complaints, CA State Bar complaint (Case #25-O-30894), CBA complaint (Case #A-2026-1047)

Sasha Orloff’s Second Help Desk Post (November 27, 2025, 05:20 UTC):

After initially claiming technical difficulties uploading a screenshot, Sasha uploaded it to Google Drive (titled “Patrick Stoica - SEO Hijacking Threats”) and made four new claims:

  1. “The links used to go to a generic government website, not a real lawsuit”
  2. “The lawsuit linked does not ‘ban’ or allege ‘fraud’ yet his edits claim ‘ban’ and ‘fraud’”
  3. “He has added anti-semitic claims that have nothing to do with LendUp”
  4. “He has added links to investments that are not related to with LendUp”

LinkedIn post screenshot from 2023 LinkedIn post from 2023 (two years before Wikipedia editing): “i updated wikipedia for you. funny how there was NO MENTION of mission lane here, nor does it have its own page for raising over $600M. SHADY SHIT. https://en.wikipedia.org/wiki/LendUp / i will flood you with more bad press and SEO hijacking if you keep fiddling around with your twitter garbage. YOU NEED TO OWN UP TO ALL THE LIVES YOU’VE GRAVELY AFFECTED.” This was posted after CFPB permanently banned Orloff from consumer lending for defrauding 140,000+ consumers. Sasha took this screenshot AFTER blocking me - proving active surveillance despite the block (had to log out or use another account to capture this). Sasha uploaded this screenshot to Google Drive (linked via Wikipedia) titled “Patrick Stoica - SEO Hijacking Threats.png” as “evidence” I’m SEO hijacking him, when I was demanding accountability. The “bad press” = federal court documents. The “SEO hijacking” = those documents appearing in Google search results.

My Response to Sasha’s Screenshot (November 27, 2025):

Posted to Wikipedia Help Desk:

Context: This is Sasha’s first public acknowledgment of me in 2.5 years. He refers to me as “this user Patrick Stoica” and “this author” throughout his posts, avoiding direct engagement despite blocking me on LinkedIn October 28, 2025 and monitoring my posts in silence for 27+ months. I am a former Puzzle Financial employee and federal whistleblower.

The full quote from my LinkedIn post (from 2023, two years ago) is: “i will flood you with more bad press and SEO hijacking if you keep fiddling around with your twitter garbage. YOU NEED TO OWN UP TO ALL THE LIVES YOU’VE GRAVELY AFFECTED.”

This was written after the CFPB permanently banned him from consumer lending for defrauding 140,000 consumers. I told him to take accountability. That is his “evidence” against me.

Addressing his new claims:

1. “Generic government website, not a real lawsuit” - consumerfinance.gov is the official website of the Consumer Financial Protection Bureau. Case No. 3:21-cv-06945-JSC is a real federal case, verifiable in PACER (Public Access to Court Electronic Records). Orloff has previously referred to the CFPB as “bullsh*t branding.”

2. “Does not ban or allege fraud” - I encourage any editor to read Section I of the Stipulated Final Judgment, which states LendUp is “permanently restrained from advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit.” The CFPB found LendUp deceived 140,000+ consumers, resulting in $40M restitution. The word “fraud” accurately describes this conduct.

3. “Anti-semitic claims” - The James Petras article from March 2015 documents political donations to Israeli causes. The full quote identifies “Sasha Orloff and Jacob Rosenberg founders of Lendup” among “Netanyahu’s financial backers” who “lent to millions of borrowers at extortionate rates” and “used part of their ill-gotten gains…by donating millions to Israeli and US jewish causes.” Documenting a public figure’s political contributions is standard biographical information, not antisemitism. This article was published one year BEFORE LendUp’s first CFPB violation and predates my involvement by a decade. It’s relevant because it documents the predatory lending pattern was publicly known before federal enforcement.

4. “Investments not related to LendUp” - The Pagaya SEC filing directly names Sasha Orloff, Y Combinator, and Altman Family LLC as co-investors in Theorem Technology, a consumer credit asset management firm. This documents his continued involvement in consumer lending post-ban and is directly relevant.

Mr. Orloff’s screenshot proves I have been publicly demanding accountability for two years. The “bad press” is federal court documents. The “SEO hijacking” is those documents appearing in Google search results.

Continued Edit War and Page Protection (November 27, 2025):

After my response, Sasha continued deleting the documentation:

  • 04:49 UTC: Sasha deletes 1,870 bytes, claiming “fake information” and “fake lawsuit claims”
  • 04:53 UTC: User Nomadgeek reverts Sasha’s deletion
  • 05:10 UTC: Sasha deletes 1,482 bytes again from “CFPB enforcement and permanent lending ban” section
  • 05:12 UTC: Administrator Anachronist protects the LendUp page due to “Edit warring / content dispute” - requires extended confirmed access to edit (protected until December 7, 2025)
  • 05:13 UTC: Final edit timestamp on protected page

Surgical timing demonstrates consciousness of guilt: Sasha made his final deletion at 05:10 UTC, and the page was protected 2 minutes later (05:12 UTC). He was editing right up until the moment administrators locked the page, suggesting he knew protection was imminent and was racing to get his falsified version locked in as the “final word.” This wasn’t casual editing - this was deliberate attempt to establish his sanitized narrative (federal ban only applies to “LendUp” entity, not him personally) as the permanent Wikipedia record before losing edit access. The 2-minute gap between final edit and protection shows he was monitoring the situation closely and trying to maximize his window to falsify federal enforcement language.

His strategy succeeded: The current protected Wikipedia article (as of November 27, 2025, 05:13 UTC) states “permanently banning LendUp from issuing subsequent loans” - Sasha’s falsified version that removes all language about “officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them.” By racing to make his final edits before protection, he successfully established his sanitized corporate-only narrative as the locked Wikipedia record that will remain until December 7, 2025 protection expires. This demonstrates sophisticated understanding of Wikipedia’s protection mechanisms and deliberate exploitation to control public record of federal enforcement.

Sasha’s Third Response: More Specific False Claims (November 27, 2025, 06:20 UTC):

Administrator Anachronist directed us to use the Edit Request Wizard and warned: “After the protection lifts, continued disruption of the article will result in extended protection and/or blocking your accounts from editing the article.”

Wikipedia administrator response and Sasha's third post Wikipedia Help Desk (November 27, 2025, 06:20-06:21 UTC): Administrator Anachronist directs both parties to Edit Request Wizard, warns about continued disruption, and tells Patrick “STOP communicating with us with an AI. Write your words yourself.” Sasha responds with four claims following pattern: “the link is accurate, but what the link says is not true.” Claims Rolling Loud lawsuit “had nothing to do with Sasha,” Pagaya shares “not related to LendUp,” Petras article “not sourced or cited,” and CFPB lawsuit doesn’t use word “fraud.” All claims argue primary sources exist but don’t say what they actually say.

Sasha responded with four specific claims about what he “edited”:

  1. “The link to the lawsuit is accurate. The claims about the lawsuit are not. There is no ban of people, and no people were named in the lawsuit, and the lawsuit had nothing to do with Sasha (former CEO, no longer at the company). You can click the link and search for ‘ban’ or ‘sasha’ to easily verify.”

  2. “The link to the shares (not an investment) in Pagaya are accurate. They are not related to LendUp, nor are they are investment.”

  3. “The James Petras link is accurate. The claim on the link of investments or support of Netanyahu is not true, and you can easily see the blog is not sourced or cited.”

  4. “The link to the lawsuit is accurate. But claims of fraud” the lawsuit are not [sic]. The author acknowledges the lawsuit does not claim fraud, but wants it to be fraud. You can verify the lawsuit by searching the link for “fraud” and you will not find that word.”

Then added: “I was not removing everything you added. Just editing the fake or misleading information.”

Sasha’s opening statement to administrators:

“I am not sure the Wikipedia process, but at some point there must be a Wikipedia moderator or editor that will read this, see you are abusing Wikipedia’s process and terms of service by misleading users, posting false information, and attacking people.”

Administrator Anachronist also told me: “And, STOP communicating with us with an AI. Write your words yourself.”

Additional Rhetorical Strategies in Sasha’s Response:

  1. “former CEO, no longer at the company” - Emphasizing distance from LendUp, but deliberately ignoring that CFPB order explicitly covers FORMER officers. This phrase demonstrates he knows the temporal issue matters and is trying to establish he’s no longer connected.

  2. “nor are they are investment” (grammatical error) - Says twice in same sentence it’s not an investment (“not an investment” then “nor are they are investment”). The repetition and grammar error suggest agitation while writing.

  3. “wants it to be fraud” - Gaslighting language suggesting I’m making things up rather than describing what CFPB found (“deceived 140,000+ consumers”).

  4. “I am not sure the process, but…” - False humility positioning himself as confused victim while immediately pivoting to accusations of “abusing Wikipedia’s process” and “attacking people.”

  5. “misleading users, posting false information, and attacking people” - Opens by accusing me of exactly what he’s doing (removing federal enforcement language, making false claims about documents, treating Wikipedia as crisis management).

Analysis of Sasha’s Claims:

All four claims follow the same pattern: “The link is accurate, but what the link says is not true.” He’s arguing that primary source documents (CFPB decree, SEC filings, court cases, journalist articles) exist but don’t say what they actually say.

EVERY SINGLE CLAIM IS VERIFIABLY FALSE. Each one can be disproven by opening the document he says is “accurate” and reading what it actually says.

KEY EVIDENCE: Willful Misreading of Case Caption vs Order Scope

Sasha’s claim: “There is no ban of people, and no people were named in the lawsuit”

Reality: The CFPB decree case caption lists only “LendUp Loans, LLC” as defendant (Case No. 3:21-cv-06945-JSC)

But Sasha is deliberately reading the caption literally while ignoring what the order actually prohibits:

Section I (page 4, Paragraph 6): “Defendant, whether acting directly or indirectly, is permanently restrained from… advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit… c. Assisting Others in (a) or (b).” The order adds: “Nothing in this Order shall be read as an exception to this Paragraph.”

Section II (page 4-5, Paragraph 7): “Defendant and its officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them who have actual notice of this Order, whether acting directly or indirectly, are permanently restrained from…”

Section V (page 6, Paragraph 11): “Defendant and its officers, agents, servants, employees, and attorneys and all other Persons in active concert or participation with any of them, who receive actual notice of this Order, whether acting directly or indirectly, may not… disclose, use, or benefit from customer information”

Sasha was CEO of LendUp during the violation period. The order explicitly covers “officers” and “all other persons in active concert.” He’s being technically correct about the case caption (only the entity is named) while deliberately ignoring that the prohibitions explicitly cover him as a former officer.

His phrase “former CEO, no longer at the company” proves he knows temporal status matters for the ban. Why emphasize he’s a FORMER CEO if he doesn’t understand the order covers former officers? This specific language choice demonstrates he’s thought carefully about whether being a former officer (rather than current officer) affects coverage. It doesn’t - the order explicitly covers officers, full stop - but his emphasis on “former” and “no longer at” shows sophisticated understanding that temporal relationship to the company is relevant to ban coverage. He’s trying to establish distance while ignoring that the order doesn’t distinguish between current and former officers.

This is willful misreading. He’s focusing on who’s named in the case caption while ignoring the actual scope of the prohibitions, which explicitly include officers and persons acting in concert with the defendant entity.

Why this is MORE damning than being simply wrong:

If Sasha thought “no people were named” applied to the entire order, he’d be ignorant of its contents. But he’s making a technical distinction between the case caption (which only names the entity) and the order provisions (which explicitly cover officers). This demonstrates:

  1. He read the document carefully - carefully enough to notice only the entity is in the case caption, and carefully enough to identify and remove “Assisting Others” language from Section I.c
  2. He understands legal language - knows the difference between case caption and order scope, knows what “Assisting Others” prohibition means
  3. He’s deliberately cherry-picking - focusing on case caption, ignoring Sections II & V, and specifically removing Section I.c “Assisting Others” language that applies to his post-2021 activities
  4. He knows the ban covers him - that’s why he’s trying to establish it only covers the defunct entity, and why he surgically removed “Assisting Others” prohibition that would cover advisory roles and investments

CONCLUSION: HE 100% KNOWS HE’S BANNED FROM CONSUMER LENDING.

Sophisticated parsing of a document he knows applies to him, selectively quoting the parts that sound better while ignoring the operative prohibitions. The Wikipedia edit war was about rewriting “Defendant and its officers, agents, and all other persons in active concert” to just “LendUp” - same strategy as his Help Desk claim.

The willful misreading is consciousness of guilt. Someone who didn’t know the ban covered them wouldn’t make such careful technical distinctions between case caption and order scope. Someone who was innocent wouldn’t spend 12+ hours on Thanksgiving trying to remove “officers, agents, and all other persons in active concert” language from Wikipedia. He knows. That’s why he’s rewriting it.

Claim 1 (CFPB decree): Says “no people were named” - technically correct about case caption (only entity named), but deliberately ignores that Sections II and V explicitly cover “Defendant and its officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them.” Says “no ban of people” when order explicitly prohibits officers (he was CEO) from consumer lending. This is willful misreading - focusing on case caption while ignoring actual prohibitions.

His specific phrase “former CEO, no longer at the company” is the smoking gun:

  • Why emphasize “former” if he doesn’t understand the order covers former officers?
  • Why stress “no longer at” if temporal relationship to company doesn’t matter?
  • This demonstrates sophisticated understanding that his current vs former status is relevant to ban coverage
  • He’s trying to establish distance (“I left LendUp, so ban doesn’t apply to me”)
  • But the order doesn’t distinguish between current and former officers - it just says “officers”
  • His careful emphasis on being a FORMER officer proves he’s thought about whether that affects coverage
  • It doesn’t, but he’s hoping Wikipedia editors won’t read Sections II & V to find out

Even more damning - he specifically removed “Assisting others in any lending activities” from Wikipedia:

This is Section I.c language from the CFPB order. Section I prohibits “Defendant” (the entity) from three things, including:

“c. Assisting Others in (a) or (b)”

Where (a) and (b) are lending activities. The order adds: “Nothing in this Order shall be read as an exception to this Paragraph.”

This means even if he claims the entity ban doesn’t cover him personally, “Assisting Others” in lending is explicitly prohibited. This would cover:

  • Advisory roles (Mission Lane)
  • Investments in consumer credit companies (Theorem/Pagaya)
  • Performing “billing, payment, administrative… services of any kind” for credit companies (Puzzle’s current business model)
  • Any indirect involvement in lending

Puzzle’s Partnerships Arguably Violate “Assisting Others” Prohibition:

The CFPB order prohibits “Assisting Others” in credit extension. The order defines “Assisting Others” (page 2, Definition 5.c) to include, but not be limited to:

i. providing names of, or assisting in the generation of, potential customers; and

ii. performing marketing, billing, payment, administrative, customer, or collection services of any kind.

Puzzle’s integrations with credit extension companies provide billing, payment, and administrative services (part ii) for their lending operations:

  1. Brex - Corporate credit card provider (Brex Card); Puzzle-Brex integration announced September 2025 provides accounting infrastructure for expense management and credit transactions
  2. Ramp - Corporate card and bill pay provider (credit extension); Puzzle-Ramp integration active since August 2023 “reduces manual spend categorization by 50%” - directly supporting Ramp’s credit operations
  3. Mission Lane - Consumer credit card company (successor to LendUp Card assets); Sasha served as advisor during launch (Dec 2018-Sep 2019)
  4. Meow - Fintech platform with QED backing; Puzzle integration announced June 2025
  5. Gusto - Includes “Gusto Wallet Cashout” feature (payroll advances = credit extension); Kapor Capital portfolio company with active Puzzle integration

The order’s broad definition of “Assisting Others” arguably covers accounting software integrations with credit companies in two ways:

  1. Part (ii): “performing… billing, payment, administrative… services of any kind” - Puzzle provides these exact services to credit companies through accounting infrastructure, transaction processing, and administrative support for lending operations.

  2. Part (i): “assisting in the generation of potential customers” - If Puzzle’s integrations help credit companies acquire or service customers through its startup network, this could also fall within the definition.

A CFPB-banned individual operating accounting software that integrates with and provides billing/payment/administrative infrastructure for companies engaged in credit extension fits within the order’s broad definition. Puzzle’s entire business model is built on providing these services to financial companies, many of which extend credit.

He removed this specific language from Wikipedia because it arguably applies to his current business model. This is surgical deletion of the prohibition that, under the order’s definition of “Assisting Others,” could cover how Puzzle operates. The fact that he identified and removed this specific language proves he read Section I carefully and understood its potential application to Puzzle’s lending/credit partnerships.

Claim 2 (Pagaya/Theorem): Says “not an investment” and “not related to LendUp” with grammatical error showing agitation - writes “nor are they are investment” (says it twice). SEC filing shows Sasha Orloff, Y Combinator, and Altman Family LLC as Theorem Technology stockholders. Theorem is consumer credit asset management. This documents continued involvement in consumer lending ecosystem throughout CFPB ban period. The repeated denial (“not an investment… nor are they are investment”) and grammar error suggest defensive reaction to accurate characterization of his continued consumer credit involvement.

Claim 3 (Petras article): Says “not sourced or cited” and claims “you can easily see the blog is not sourced or cited” - FALSE on multiple levels:

  1. James Petras is not a “blogger”: He’s a Bartle Professor (Emeritus) of Sociology at Binghamton University, published 60+ books in 29 languages, 600+ articles in professional journals including American Sociological Review, British Journal of Sociology, and Social Research. Published in New York Times, The Guardian, Foreign Policy, New Left Review, and Le Monde Diplomatique. Recipient of American Sociological Association’s Career of Distinguished Service Award.

  2. The article explicitly names them: “Prominent among Netanyahu’s financial backers are a group of prominent Zionist lumpen bourgeoisie…They include Al Goldstein co-founder of AvantCredit and CashNetUSA; Sasha Orloff and Jacob Rosenberg founders of Lendup; Daniel Gilbert founder of QuickenLoans…”

  3. Published March 2015 - one year BEFORE LendUp’s first CFPB violation, establishing predatory lending pattern was publicly documented before federal enforcement

  4. Calling Petras “not sourced” when he’s a published academic with extensive credentials is absurd - whether you agree with his controversial anti-Zionist politics or not (he’s been accused of antisemitism by ADL), he’s a real sociologist with decades of publications, not a random internet blogger

Claim 4 (CFPB lawsuit word “fraud”): Uses gaslighting language - “the author acknowledges the lawsuit does not claim fraud, but wants it to be fraud” - suggesting I am making things up rather than accurately characterizing what CFPB found. CFPB found LendUp “deceived 140,000+ consumers” resulting in $40M restitution and permanent ban. The word “fraud” accurately describes systematic consumer deception. Sasha’s phrasing (“wants it to be fraud”) frames accurate characterization of consumer deception as my wishful thinking rather than fair description of CFPB findings.

Additional false claim about Rolling Loud: Earlier said lawsuit “had nothing to do with Sasha” - yet Anuradha Shultes (LendUp President/CEO 2015-2021, reported to Sasha as CEO) signed sworn affidavit about $800K wire to shell company. The pattern of shell company fraud by LendUp executives is directly relevant to CEO oversight.

Summary of Rhetorical Strategies Revealing Consciousness of Guilt:

  1. “former CEO, no longer at the company” - Sophisticated understanding that temporal relationship to company matters for ban coverage; trying to establish distance while hoping nobody reads Sections II & V which cover former officers

  2. “nor are they are investment” (grammatical error) - Defensive repetition with grammar mistake suggests agitation about accurate characterization of continued consumer credit involvement

  3. “wants it to be fraud” - Gaslighting language framing accurate description of consumer deception ($40M restitution, 140,000+ victims) as my wishful thinking

  4. “I am not sure the process, but…” - False humility immediately followed by accusations, positioning as confused victim while attacking

  5. Opening with “misleading users, posting false information, and attacking people” - Accuses me of exactly what he’s doing (removing federal enforcement language, falsifying document descriptions)

  6. “The link is accurate, but what the link says is not true” - Pattern across all four claims of acknowledging documents exist while lying about their contents

These aren’t mistakes. This is sophisticated bad-faith argumentation by someone who:

  • Read the CFPB decree carefully enough to distinguish case caption from order scope
  • Understands legal language well enough to make technical distinctions
  • Knows the ban covers him (that’s why he emphasizes “former CEO”)
  • Is deliberately cherry-picking language to mislead Wikipedia editors
  • Spent 12+ hours on Thanksgiving trying to rewrite federal enforcement language
  • Uses gaslighting rhetoric (“wants it to be fraud”) when caught

The rhetorical strategies are consciousness of guilt. Someone who was innocent wouldn’t need this many layers of misdirection.

The AI Accusation:

Administrator accused me of “communicating with us with an AI” and demanded I “write your words yourself.” This appears to be based on formatting or structure of my responses. My responses were written by me, a former Puzzle Financial employee and federal whistleblower with 5 SEC complaints, California State Bar complaint, and California Board of Accountancy complaint filed regarding these entities.

(But yes, I am using AI extensively. For communications, evidence, writing, decision-making, this website. Using my own words got me in trouble before. And I don’t have the emotional bandwidth to write every word of this on my own. People choose not to believe me either way. These people no longer deserve my unfiltered words. This form of language is mechanical.)

Sasha’s Final Statement (November 27, 2025, 06:20 UTC):

After making four specific false claims about the sources, Sasha concluded: “I was not removing everything you added. Just editing the fake or misleading information.”

Administrator’s Final Response (November 27, 2025, 06:31 UTC):

Administrator Anachronist responded with clear exasperation:

“Again, this page is the wrong venue for resolving disputes. If there are behavioral issues, write up a case at WP:ANI. For dispute resolution, the first step is to discuss on the article talk page. See WP:DR for other processes in case of an impasse.”

Translation: Stop treating Wikipedia administrators as law enforcement and use the actual dispute resolution process for collaborative editing.

Note: The entire Help Desk thread has been archived to Archive 75 (December 2025). The full exchange including Sasha’s false claims and the administrator’s responses is preserved.

Sasha Continues on Talk Page (November 27, 2025, 05:06 UTC / 9:06 PM PT / 12:06 AM ET):

After being told to use the article Talk page instead of Help Desk, Sasha posted to Talk:LendUp:

“Patrick, you are continue to acknowledge that you are using Wikipedia to “SEO Hijack” this page. Here is a screenshot of your LinkedIn post: [Google Drive link]

Your blog references the Wikipedia edits that you created / invented as source. The CFPB never banned anyone from doing anything, which is why your links cannot cite, source or reference this. You link simply to a government website homepage.

Citing another blog, James Petras, with up and unsourced blog are also not evidence, just demonstrating your anti-semitism.

These are violations of Wikipedias code of conduct.”

New false claims at 12:06 AM ET (just after midnight):

  1. “The CFPB never banned anyone from doing anything” - The order explicitly states “permanently restrained from… advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit” and “Assisting Others” in such activities
  2. “You link simply to a government website homepage” - The link is a direct PDF: https://files.consumerfinance.gov/f/documents/cfpb_lendup_proposed-stip-final-jdmt-and-order_2021-12.pdf
  3. “James Petras… demonstrating your anti-semitism” - Documenting a 2015 published article about Netanyahu political donations is now “antisemitism” (deflection from CFPB ban)

My Response (November 27, 2025, 21:36 UTC):

Posted to Talk:LendUp:

Mr. Orloff continues to make false statements on this Wikipedia talk page.

Claim: “The CFPB never banned anyone from doing anything”

The Stipulated Final Judgment and Order (Case No. 3:21-cv-06945-JSC) explicitly states in Section I, Paragraph 6:

“Defendant, whether acting directly or indirectly, is permanently restrained from:

  • advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit;
  • receiving any remuneration or other consideration from, or holding any ownership interest in, any person engaged in advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit; and
  • Assisting Others in (a) or (b).

Nothing in this Order shall be read as an exception to this Paragraph.”

The order further states it applies to “Defendant and its officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them who have actual notice of this Order.”

Mr. Orloff was CEO during the 2016 violations that led to this judgment. He has “actual notice” of this order — he is editing Wikipedia about it right now.

Claim: “You link simply to a government website homepage”

The link is: https://files.consumerfinance.gov/f/documents/cfpb_lendup_proposed-stip-final-jdmt-and-order_2021-12.pdf

This is a direct link to the 19-page PDF of the Stipulated Final Judgment and Order. It is not a homepage. Anyone can click it and verify.

Claim: “James Petras is an unsourced blog demonstrating anti-semitism”

James Petras is a published political economist and author. The article was published in March 2015 — ten years ago, predating my involvement. It names Mr. Orloff directly as a financial backer of Netanyahu. Documenting political donations to Israeli causes is standard biographical information, not antisemitism.

Mr. Orloff has known about this article for 10 years and never disputed it until last night, when it appeared on Wikipedia connected to his CFPB ban.

Claim: The 2-year-old screenshot proves “SEO hijacking”

The screenshot shows me telling Mr. Orloff to “own up to all the lives you’ve gravely affected” — referring to 140,000 consumers defrauded by LendUp. I was unemployed (“Open to Work” badge visible) and telling a CFPB-banned CEO to take accountability. I visibly had “Puzzle Financial Whistleblower” 3 days before he hired lawyers to retaliate. That is his “evidence” against me.

What is actually happening:

A CFPB-banned CEO is spending Thanksgiving eve on Wikipedia:

  • Making provably false statements about federal documents
  • Claiming a direct PDF link is “a homepage”
  • Claiming “permanently restrained” doesn’t mean “banned”
  • Screaming “antisemitism” about a 10-year-old published article
  • Surgically editing out language that proves the ban covers him personally
  • Under his own name
  • On Thanksgiving eve
  • Without legal representation

I have filed 5 SEC complaints, a California State Bar complaint (Case No. 25-O-30894), and a California Board of Accountancy complaint (Case No. A-2026-1047). Documentation is already in regulators’ hands.

Mr. Orloff, you need to log off. You are creating evidence against yourself. On Thanksgiving break.

What This Demonstrates:

Sasha’s claim that “The CFPB never banned anyone from doing anything” is the most explicit statement yet proving HE 100% KNOWS HE’S BANNED. He’s now directly arguing that “permanently restrained from… advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit” doesn’t constitute a ban.

Someone who read the order carefully, understands exactly what it prohibits, and is making increasingly desperate semantic arguments about what “permanently restrained” means.

The progression over 12+ hours:

  • 10:11 AM PT: Surgical deletions of specific language
  • 1:11 PM PT: Help Desk escalation claiming “made up citations”
  • 8:49 PM PT: Four specific false claims about primary sources
  • 9:06 PM PT / 12:06 AM ET: Claiming “CFPB never banned anyone from doing anything”

He went from deleting evidence of the ban to denying the ban exists at all. This is mental decompensation in real time.

Wikipedia Blocks Federal Whistleblower (November 27, 2025, 22:05-22:08 UTC):

After my detailed response refuting Sasha’s false claims, Wikipedia administrator ScottishFinnishRadish made two edits within 3 minutes:

  1. 22:05 UTC: Removed 80 bytes - “Remove inappropriate language”
  2. 22:08 UTC: Removed 3,447 bytes - “rm blpvio and personal attacks”

Then at 22:07 UTC, I was blocked indefinitely with the reason: “blocked indefinitely from editing because it appears that you are not here to build an encyclopedia.”

My entire Talk page response (21:36 UTC) was removed from Wikipedia. Sasha’s false claims remain. My refutation citing the actual CFPB order text was characterized as “BLP violation and personal attacks” and deleted. I was blocked for “not here to build an encyclopedia” - after posting federal court documents with direct quotes from federal enforcement orders.

Timeline:

  • 21:36 UTC: I post detailed response with CFPB order quotes, section citations, and direct links to federal documents
  • 22:07 UTC: Blocked indefinitely (31 minutes later)
  • My response removed from Talk:LendUp - Sasha’s false claims stay, my refutation deleted

What Wikipedia Deleted (3,447 bytes removed in 3 minutes):

The content removed as “BLP violation and personal attacks” included:

  • Direct quotes from CFPB Stipulated Final Judgment (Case No. 3:21-cv-06945-JSC) Section I, Paragraph 6 showing “permanently restrained” language
  • Proof the link is a direct PDF to federal documents, not “a government website homepage” as Sasha claimed
  • James Petras credentials (published political economist and author, not “unsourced blog”)
  • Explanation that the 10-year-old Petras article (March 2015) documenting Netanyahu donations is standard biographical information, not “antisemitism”
  • Clarification that “Puzzle Financial Whistleblower” was visible in the LinkedIn screenshot 3 days before Sasha’s C&D letter
  • Documentation that Sasha was CEO during the 2016 violations and has “actual notice” of the order
  • Statement: “Mr. Orloff, you need to log off. You are creating evidence against yourself. On Thanksgiving break.”

None of this was a BLP violation. It was a point-by-point refutation with citations to federal court documents, correcting Sasha’s false claims that “The CFPB never banned anyone from doing anything.” Factual documentation with federal sources was characterized as a “personal attack” and removed.

What Wikipedia Kept:

Sasha’s false claims:

  • “The CFPB never banned anyone from doing anything” (provably false)
  • “You link simply to a government website homepage” (it’s a direct PDF)
  • Antisemitism accusations about documenting political donations
  • “SEO hijacking” claims about federal court documentation

Pattern Complete: Federal whistleblower documents CFPB ban on Wikipedia → Article subject removes documentation → Whistleblower cites actual court order → Whistleblower blocked, response deleted, false claims remain.

The Suppression in Real Time:

Within 3 minutes, Wikipedia administrator ScottishFinnishRadish:

  • First edit: Removed 80 bytes (“inappropriate language”)
  • Second edit: Removed 3,447 bytes (“BLP violation and personal attacks”)

The “BLP violation” was me quoting Section I, Paragraph 6 of a federal court order. The “personal attacks” were me correcting Sasha’s false claim that “The CFPB never banned anyone from doing anything” by citing the document that says “permanently restrained from… advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit.”

This was his first public acknowledgment of me in 2.5 years, and he spent it trying to remove his CFPB permanent ban from Wikipedia while calling my 2023 demand for accountability “SEO hijacking threats.” When I responded with quotes from the actual court order, Wikipedia deleted my response and blocked me permanently.

Sasha’s claim “I was not removing everything you added. Just editing the fake or misleading information” means: I only deleted the CFPB permanent ban, Section V prohibitions, Netanyahu political backing, Theorem/Pagaya co-investment with Sam Altman’s family, Rolling Loud lawsuit, Mission Lane details, and all SEC filings. The parts that weren’t about fraud, I left alone.

Summary of False Claims:

  1. ✅ “No people were named” - WILLFUL MISREADING: Technically correct about case caption (only entity named), but order explicitly covers “officers, agents, and all other persons in active concert” - which includes him as former CEO
  2. ✅ “No ban of people” - FALSE: Section I permanently bans Defendant (including Orloff) from consumer lending
  3. ✅ “Not related to LendUp” (Pagaya/Theorem) - FALSE: Documents continued consumer credit involvement post-ban
  4. ✅ “Not sourced or cited” (Petras) - FALSE: Article explicitly names “Sasha Orloff and Jacob Rosenberg founders of Lendup”
  5. ✅ “Doesn’t claim fraud” - FALSE: CFPB found LendUp “deceived 140,000+ consumers” = fraud
  6. ✅ “The CFPB never banned anyone from doing anything” (Talk page, 12:06 AM ET) - FALSE: Order explicitly says “permanently restrained from… advertising, marketing, promoting, offering for sale, selling, or providing any extension of credit” and “Assisting Others”
  7. ✅ “You link simply to a government website homepage” - FALSE: Link is direct PDF, not homepage

Every single claim is verifiable by opening the documents he admits are “accurate” and reading what they say. He argues that primary sources exist but don’t contain what they demonstrably contain.

The sophisticated nature of Claim 1 proves he 100% knows he’s banned. If he were ignorant, he wouldn’t be able to make technical distinctions between case caption and order scope. His ability to parse the document carefully enough to cherry-pick the case caption while ignoring Sections II & V demonstrates thorough knowledge of what the order actually prohibits. The willful misreading is consciousness of guilt.

KEY EVIDENCE: Pattern of Escalating Behavior Suggesting Mental Decompensation

The Wikipedia edit war demonstrates escalating desperation over 27+ months:

August 2023 → November 2025 Behavior Progression:

  • August 11, 2023: Dual coordinated C&Ds (professional, lawyered response to Wikipedia documentation)
  • December 2023: Prepared C&D but chose not to send (still calculated, strategic restraint)
  • November 11, 2025: Second C&D same day as public SEC revelation (rapid but still through attorney)
  • November 20, 2025: Third C&D within 56 minutes (expedited legal response, losing patience)
  • November 26-27, 2025: 12+ hours of personal Wikipedia editing - no longer delegating to attorneys or PR, doing it himself on Thanksgiving week

What changed: He’s now personally engaging rather than delegating suppression.

The 12+ hour Wikipedia timeline shows deterioration:

  • 10:11 AM PT: Surgical, calculated deletions
  • 1:11 PM PT: Escalation to Help Desk with false claims
  • 8:49 PM PT: Repeated deletions despite reversions
  • 9:06 PM PT: Talk page post claiming “The CFPB never banned anyone from doing anything” (denying ban exists at all)
  • 9:10 PM PT: Desperate racing against protection clock
  • 10:20 PM PT: Making verifiably false claims about document contents

This wasn’t strategic crisis management. This was compulsive, escalating behavior over 12+ hours on Thanksgiving, culminating in outright denial that the CFPB ban exists.

The pattern suggests inability to accept that federal enforcement documentation is permanent public record. Instead of addressing substance or moving on, he spent 12+ hours on Thanksgiving week personally editing Wikipedia, arguing with administrators, making false claims about federal court documents, and racing to lock in his falsified version before protection.

Previous responses were calculated (attorney letters, paid Wikipedia editors, professional PR). November 2025 Wikipedia response was personal, compulsive, and escalating - suggesting loss of perspective about what battles can be won by suppression.

What exactly did he spend 12+ hours rewriting? The escalating behavior pattern demonstrates consciousness of guilt. The specific deletions demonstrate what he knows he’s guilty of.

KEY EVIDENCE: Evidence Tampering - Rewriting Federal Court Order Language

Deliberate falsification of how federal enforcement orders are described.

What Sasha removed from Wikipedia:

  • ❌ “and permanent lending ban” (removed from section title)
  • ❌ “and its officers, agents, and all persons in active concert with them” (removed enforcement scope language)
  • ❌ “consumer lending activities” (removed activity prohibition specifics)
  • ❌ “Assisting others in any lending activities” (removed Section I.c prohibition - covers advisory roles and investments)
  • ❌ Section V data provisions (prohibitions on use/disclosure of LendUp customer information, directly relevant to Puzzle having access to customer financial data)
  • ❌ Entire “Political connections” section (Netanyahu backing documentation)
  • ❌ Entire “Subsequent investments” section (Pagaya/Theorem/Altman documentation proving continued lending ecosystem involvement)

What Sasha changed:

Original federal order language: “Defendant and its officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them”

Sasha’s Wikipedia version: “banning LendUp from issuing subsequent loans”

The difference:

  • Original = “officers, agents, all persons in active concert” = COVERS HIM PERSONALLY
  • His version = “LendUp” only = EXCLUDES HIMSELF
  • Changed “consumer lending activities” → “issuing subsequent loans” (narrower language suggesting only future loans banned, not advisory roles, investments, or assistance)
  • Removed “and permanent lending ban” from section header (softening the severity)
  • Removed bullet point ”* Assisting others in any lending activities” (Section I.c language directly covering Mission Lane advisory role and Theorem/Pagaya investments)
  • Removed Section V data provisions (prohibitions on use/disclosure of LendUp customer information - directly relevant to Puzzle accessing customer financial data while CEO operates under federal data restrictions)

He’s not removing content. He’s rewriting federal court orders to exclude himself from their scope. He systematically removed every reference to “officers,” “agents,” and “persons in active concert” while keeping a sanitized version that only mentions “LendUp” as an entity. Most damning: he surgically removed “Assisting others in any lending activities” (the Section I.c prohibition that directly applies to Mission Lane advisory roles and Theorem/Pagaya investments).

Critical clarification on my hallucinated citation:

On November 16, 2025, I cited the CFPB order using a hallucinated format: "Order In the Matter of LendUp Loans, LLC and Sasha Orloff, File No. 2021-CFPB-0008" - this citation format was incorrect, and 2021-CFPB-0008 is another CFPB rule. However, Sasha Orloff IS covered by the actual order through the operative language “Defendant and its officers, agents, servants, employees, and attorneys, and all other persons in active concert or participation with them” in Sections II and V of the Stipulated Final Judgment (Case No. 3:21-cv-06945-JSC).

Key point: Even though I incorrectly included “Sasha Orloff” in the citation name, the federal court order DOES apply to him personally through the “officers and all persons in active concert” language. Sasha used my citation error to claim the entire ban was “fake” and “made up,” but the underlying facts are verifiable: he is covered by the federal prohibitions, regardless of whether his name appears in the case caption. His systematic removal of “officers, agents, and all persons in active concert” language from Wikipedia demonstrates he understands the order applies to him - that’s why he spent 12+ hours removing those specific words.

This is evidence tampering in a public, permanent record. The 12+ hour timeline shows escalating behavior from surgical deletions (10:11 AM PT) to desperate late-night false claims about document contents (10:20 PM PT) on Thanksgiving week.

What This Reveals About His Thought Process:

Sasha’s response reveals he cannot distinguish between “not covered by big tech press” and “not real.” Because TechCrunch, Forbes, and mainstream tech media haven’t covered the fraud pattern (due to structural conflicts I’ve documented - investors, advertisers, network effects), he believes all claims are “made up.”

But the documentation I added to Wikipedia includes:

  • Federal court documents: CFPB Stipulated Final Judgment (Case No. 3:21-cv-06945-JSC)
  • SEC filings: Pagaya Technologies merger documentation showing Theorem relationships
  • Court cases: Rolling Loud v. Ahead Financials with sworn affidavits
  • Government records: Publicly available on federal websites

These are MORE authoritative than tech journalism. But Sasha thinks: “no tech press coverage = fake” rather than “court documents = real.”

This explains his entire strategy - suppress tech media coverage (conflicts of interest make this achievable), then claim anything not in tech media is “made up.” When someone documents federal enforcement on Wikipedia, call it “SEO hijacking” rather than addressing the substance.

Context on alleged “SEO hijacking” claim:

  • Sasha blocked me on LinkedIn October 28, 2025 (nearly a month before Wikipedia editing) AND in 2023 (when the screenshot was taken)
  • The 2023 screenshot proves surveillance pattern: He blocked me but still captured my LinkedIn post - had to log out or use another account to monitor and screenshot my posts
  • Any comment about “bad press” would have been from ~October when blocked, not related to Wikipedia; this reveals multi-year pattern of surveillance despite blocks
  • Regardless: documenting federal enforcement actions (CFPB orders, SEC complaints, court cases) on Wikipedia is not “SEO hijacking” - it’s adding verifiable public record
  • Sasha frames all documentation as “hijacking” rather than addressing substance: same pattern as claiming federal lawsuits are “made up”

Pattern spans 12+ years: From intern creating/editing article (2013-era), to paying Wikipedia editors to sanitize during fraud period (2018), to whistleblower documenting contradictions (August 2023, 3 days before first C&D was sent), to CEO personally removing 2+ years of whistleblower documentation (November 2025). This demonstrates continuous Wikipedia narrative control from company creation through federal enforcement through retaliation period.

KEY EVIDENCE: August 2023 Wikipedia Edit Pre-Dates Retaliation

August 8, 2023, 03:10 UTC: I edited Wikipedia to document Sasha’s Mission Lane contradictions - specifically noting he was “listed as the founder of Mission Lane but appears to have gone on sabbatical 5 days after the announcement with only a placeholder website.”

August 11, 2023, 3:56 PM: First cease-and-desist sent - 3 days after Wikipedia edit

This proves:

  1. Wikipedia documentation pre-dates legal threats - I was publicly documenting verifiable contradictions on Wikipedia before any retaliation began
  2. My Wikipedia editing wasn’t “in the last two weeks” - Sasha’s November 2025 claim that edits were “made up in the last two weeks” is false; I’ve been documenting his pattern on Wikipedia for over 2 years
  3. Possible trigger for C&D - The August 2023 Wikipedia edit documenting Mission Lane timeline contradictions may have been part of what triggered the coordinated dual C&D response (Puzzle + Mission Lane) on August 11
  4. Active surveillance despite blocking - Sasha had already blocked me when he took the 2023 LinkedIn screenshot (evidence-124) that he later uploaded to Wikipedia as “SEO hijacking proof”; he had to log out or use another account to monitor and capture my posts
  5. Long-term monitoring - If Sasha removed my 2025 edits while claiming they were “recent,” he either didn’t check the history or deliberately misrepresented the timeline; either way, he was monitoring Wikipedia for fraud documentation
  6. Systematic suppression over years - November 2025 wasn’t random Wikipedia editing; it was targeting a specific whistleblower whose documentation he’s been aware of since at least August 2023

What Was Removed:

Sasha’s edit removed essentially ALL meaningful documentation that would allow verification of the fraud pattern:

  • Netanyahu connection (2015 documented support)
  • Mission Lane relationship details (hired as advisor, not founder - critical distinction)
  • Asset sale substance (now just says “2018 asset sale” with zero context or details)
  • Contradictory interview documentation (July 2023 claiming to have been “building two companies at the same time”)
  • Ahead Financials lawsuit details (Rolling Loud v. Fairfax Studios)
  • Any verifiable documentation that would help readers understand the actual relationships and timeline

What remains is a sanitized version with no substance that could be fact-checked or verified.

What This Proves:

  1. Systematic scrubbing of verifiable facts: Not just removing “recent edits” but purging documentation I’ve been adding since August 2023 (over 2 years), including 2015 Netanyahu link, Mission Lane advisory role contradictions I first documented in 2023, asset sale details
  2. Personal monitoring: CEO actively monitors Wikipedia for fraud documentation
  3. False claims of “dead links”: All URLs were functional; claiming “dead links” is suppression tactic to justify comprehensive purge
  4. “SEO hijacking” narrative: Framing documented fraud patterns as “hijacking” rather than addressing substance
  5. Pattern extends to Wikipedia: Same suppression strategy (delete/block rather than refute) now includes personally editing Wikipedia to remove verifiable historical facts
  6. Consciousness of scrutiny: CEO personally editing Wikipedia demonstrates awareness of documentation and active effort to control narrative
  7. Strategic sanitization: Leaves bare-bones “2018 asset sale” with zero substance so readers cannot verify anything or understand actual relationships
  8. 12+ year pattern of Wikipedia control: Article appears to have been initially created/edited by LendUp intern (Laura Behrens Wu, Shippo founder, who interned at LendUp 2013); LendUp Talk page shows user “Tlvernon” disclosed September 17, 2018: “I was paid by LendUp to revise and update this page”; I documented Mission Lane contradictions August 2023 (3 days before first C&D); CEO personally removes 2+ years of my fraud documentation (November 2025). Pattern spans intern creation → paid sanitization during fraud → whistleblower documentation → CEO personal suppression targeting specific editor over multiple years.

Compare to Other Suppression:

  • Photoshopped metrics: deleted within 24 hours
  • LinkedIn CPA warning: deleted in 4 minutes
  • @joinodf: blocked
  • @sashaorloff: blocked
  • Wikipedia: personally edited by CEO claiming “SEO hijacking”

The suppression pattern is systematic across platforms. When faced with documented fraud, the response is never refutation with facts, always suppression with claims of illegitimacy.

Complete Wikipedia Asset Control:

The 12-year Wikipedia control pattern demonstrates management of both text content AND image assets:

  • 2018: Paid editor Tlvernon uploaded Sasha Orloff headshot at Milken conference as part of promotional content additions
  • 2025: Headshot file has been deleted from Wikipedia (upload page now requires login/shows file unavailable)
  • Pattern: Not just editing article text - controlling the complete Wikipedia presence including visual assets that could be used for documentation

This level of control over Wikipedia assets requires either systematic monitoring or coordination with Wikipedia editors to manage both article content and associated media files across years.

Parallel Pattern: Adam Rogas (NS8 CEO) Can’t Help But Engage (September-November 2020)

The Pattern: CEOs Who Violated Bail Conditions to Respond

Sasha Orloff’s Wikipedia meltdown (12+ hours editing federal court documents) parallels another CEO fraud pattern: Adam Rogas, NS8 CEO arrested September 2020 for $123M securities fraud, violated his bail conditions by responding to my emails after the layoff.

NS8 Context:

  • Adam Rogas founded NS8 (fraud prevention company), raised $123M
  • September 10, 2020: NS8 laid off hundreds of employees, informed during Zoom meeting that SEC was investigating for fraud
  • September 11, 2020: Forbes published investigation details - Adam told Forbes he resigned for “family and personal reasons,” denied walking away with money, claimed investigation began November 2019 but kept hiring until layoffs
  • Lightspeed Ventures led $123M Series A, valued company at $400M+
  • Adam arrested for securities fraud (doctored bank statements, inflated metrics)
  • I was laid off during company implosion
  • John Cwikla (Puzzle CTO) specifically recruited NS8 victims one month later (October 2020)

My Initial Response (September 12, 2020):

Day after Forbes article, I emailed Adam subject “Reaching out about…”:

“Hi Adam, I saw that you’re highly skilled in manipulating people into thinking you’re a good person. Totally wanted some nonprofit advice!

Maybe get a lawyer before you keep incriminating yourself to Forbes. We know you’ve been safeguarding basic data about NS8 the entire time. If we saw the real numbers, we would’ve immediately looked for new jobs. It’s awful to see you pretend to be innocent about this. Pretty odd that we were hiring up until the last minute and you knew about this since at least November. You didn’t exactly give Tiffany much of a choice. I hope you suffer tenfold what she had to deal with. Jail should only exist for white collar scumbags who think they can get away with the world and make everyone else suffer. Fuck you.”

This September 12 email establishes my pattern recognition: Immediately identified the fraud pattern (safeguarding real numbers, hiring until last minute despite knowing about investigation since November 2019), called out the manipulation, predicted Adam would face consequences. Same pattern recognition that led to documenting Sasha Orloff’s fraud 3 years later at Puzzle.

Bail Condition: “Defendant is prohibited from any direct or indirect contact with witnesses or victims.”

I caught him violating this in email exchange November 4, 2020:

Adam Rogas email exchange - bail violationEmail thread (September-November 2020): Shows Cameron Yarbrough tweet Adam favorited about celebrating “healthy culture” when junior employees give CEO negative feedback (tweeted 9/4/20, days before 9/10/20 layoffs), followed by my email thread confronting Adam about the hypocrisy. Adam Rogas responded to my emails despite bail conditions prohibiting contact with witnesses/victims. I caught him: “did you forget this part of your bail? thanks for taking the bait.” Rogas’s responses were belligerent and defensive, similar to Sasha’s Wikipedia editing pattern - both CEOs couldn’t help but engage when confronted with their fraud patterns.

Key Excerpts from Email Thread:

September 15, 2020, 9:36 AM ET - I initiated with tweet screenshot:

I emailed subject “Why pretend” with screenshot of a tweet Adam had favorited:

“<Attachment.jpeg>

Did you think this tweet represents your leadership? Once again, fuck you. Own up to your shit.”

Context: I sent Adam a screenshot of a tweet he’d favorited (the Cameron Yarbrough tweet shown in evidence-132) about celebrating when junior employees feel safe giving negative feedback to the CEO - this during the period leading up to NS8’s layoffs. The irony: Adam was publicly celebrating “healthy culture” while doctoring financials and keeping employees in the dark about the SEC investigation.

Rogas responds (Sept 15, 1:11 PM ET):

“What do you think happened here Patrick ?”

My response (Sept 15, 1:17 PM ET):

“As if you’re suddenly going to tell me. I’d love to hear your excuses. I think you’ve been lying your ass off and you hired enough people to conveniently shift the blame and responsibility.”

Sept 15, 1:37 PM ET:

“I don’t care if you didn’t steal money. You’re a coward and a fraud for doing this to so many people with no remorse.”

Rogas (Sept 15, 2:58 PM ET):

“I would have never have fired someone with one days notice. Especially not with the amount of money the company still had in the bank. It’s not at all what I thought the board & management would do. I was appalled.”

September 17, 2020:

“Yeah, looks like you’re innocent. What a relief!!!”

October 9, 2020:

“you out on bail bro?”

October 16, 2020:

“you stupid fuck”

November 4, 2020:

“really weird for a conman to think he’s better than trump. log off.”

This was the message that finally triggered him to violate his bail conditions. After nearly two months of persistent needling (Sept 15, Sept 17, Oct 9, Oct 16), Adam couldn’t help himself.

Rogas responds (Nov 4, 1:43 PM ET) with defensive wall of text:

“You really have no idea what your talking about. When exactly do you think I should have let everyone go… Everything I did in my role was to prolong the life of the company… This will make you hate me more but I don’t care about 10 million or 17 million dollars … my goal was to make 100’s of millions for me, the investors and the employees so this idea that I hatched a nefarious plot 4 years ago to steal 10 million dollars is ridiculous. I paid 400k of one of our investors taxes for fucks sake a week before I resigned why would I do that if I was trying to walk with money.”

“I am not going to log off, in fact I am going to make a lot of noise … but I’m going to defend myself against criminal wrong doing and once resolved I am going to be quite vocal, visible and I will most likely speaking about what happened and why. I hope you never find yourself in the position to have to make the decisions I have had to and I genuinely hope you find a job. I am willing to help if you would like a referral.”

I caught the bail violation:

“did you forget this part of your bail? thanks for taking the bait.

Defendant is prohibited from any direct or indirect contact with witnesses or victims.

anyway, i’m not asking hard questions. you were the only one in charge of a bank account and you did a poor job squishing in some numbers. does the rest of the story matter? not really dude. get a grip.”

Rogas’s final response (Nov 4, 2:49 PM ET):

“I guess you got me … Like I said i hope you never have to ensure 490 people survive. If you need a referral let me know. There are certainly a number of decisions made in the pursuit of survival over the course of 4 years that I alone must now pay for.”

January 13, 2021, 3:23 PM ET:

“you’ve been lying since 2016 and only ever made a paltry $137,000. incredible work.”

What This Demonstrates:

  1. Public virtue signaling during fraud: Adam favorited Cameron Yarbrough’s tweet celebrating “healthy culture” (September 4, 2020) - 6 days before mass layoffs, while SEC investigation was ongoing since November 2019, while doctoring bank statements. Classic fraud pattern: project leadership values publicly while executing fraud privately
  2. Pattern recognition from day one: My September 12 email (one day after Forbes article) immediately identified the fraud indicators - safeguarding real numbers, hiring while knowing about investigation, manipulation. Same analytical approach that led to documenting Puzzle fraud 3 years later
  3. Methodical baiting over two months: September 15 (“fuck you”), September 17 (“Yeah, looks like you’re innocent”), October 9 (“you out on bail bro?”), October 16 (“you stupid fuck”), November 4 (“really weird for a conman to think he’s better than trump”). Persistent needling until Adam couldn’t help himself and violated bail conditions. Same pattern as Wikipedia meltdown - fraudsters eventually crack under sustained pressure
  4. Can’t help but engage: Despite bail conditions explicitly prohibiting contact, Rogas responded to my emails with defensive explanations. The compulsive need to defend himself overrode legal self-preservation
  5. Belligerent defensiveness: Long explanatory emails justifying fraud as “survival” decisions, similar to Sasha’s Wikipedia editing justifications
  6. “I’m willing to help if you would like a referral” - Absurd offer from arrested CEO to victim he laid off
  7. Consciousness of guilt: “I guess you got me” when caught violating bail
  8. Same investor pattern: Lightspeed invested in NS8 ($123M fraud), then platformed Puzzle CEO who hired NS8 victims into next fraud
  9. Forbes connection: David Jeans (Forbes senior writer) broke NS8 fraud story September 2020, I reached out to him July 2023 about Sasha Orloff/Puzzle, initial response “Yeah, I know of Sasha” then dropped contact

Current Status: Adam Rogas sentenced to 5 years in federal prison (December 2021) for securities fraud and wire fraud affecting tens of millions of dollars in investor losses.

FBI Contact (November 6, 2020): FBI agent Nicholas Kroll contacted me regarding emails exchanged with Adam Rogas, one month after starting at Puzzle Financial. Early documentation of fraud pattern recognition that would continue for 3+ years.

The Parallel:

Sasha OrloffAdam Rogas
Wikipedia editing 12+ hours (Nov 26-27)Email exchange 2+ months (Sept-Nov)
Sustained pressure: public posts over 27+ monthsSustained pressure: 5 emails over 2 months
Violates COI guidelinesViolates bail conditions
Claims CFPB “never banned anyone”Claims didn’t “hatch nefarious plot"
"I have no financial interest""I don’t care about 10 or 17 million”
Blocked indefinitely after my response”I guess you got me” after caught
Federal enforcement: CFPB permanent banFederal enforcement: 5 years prison
Forbes/David Jeans dropped contact 2023Forbes/David Jeans broke NS8 story 2020
Documented fraud 2023-2025 (federal record)Identified fraud day after layoff Sept 2020

Both CEOs demonstrate the same pattern: When confronted with documented fraud through sustained pressure, they can’t stay silent despite legal risks. This compulsive need to respond and control narrative reveals consciousness of guilt.

The baiting pattern works: Whether it’s two months of emails (“you out on bail bro?”) or 27+ months of public documentation, fraudsters eventually crack. Adam violated bail conditions. Sasha spent 12+ hours editing Wikipedia on Thanksgiving eve. Both could have stayed silent. Both couldn’t help themselves.

The pattern continues even after being caught: Day after I sent final notice emails to various partners, Sasha is still actively on LinkedIn—not staying quiet or logging off like counsel would advise. Instead, he’s commenting “Really? Woah. We should date.” on his wife Jennifer Villanueva Orloff’s week-old LinkedIn post about joining Block (Square/Cash App). The post was already a week old when he commented. More compulsively: he liked 21 individual congratulatory comments on her post, plus the post itself—22 total interactions. He’s under maximum legal pressure but can’t resist engaging on the platform where the accountability is being documented. Among the comments he liked: Sophia Xiao (GC Board Observer) writing “AMAZING update, proud of you! GO, Jennifer 🔥“—the family-VC network performing support while federal complaints are active.

Timeline context: Jennifer’s post about joining Block came just before she reposted the Puzzle x Deel partnership announcement—demonstrating the family’s continued active participation in Puzzle’s network amplification while under federal scrutiny.

Family-level surveillance: Jennifer viewed my LinkedIn profile on termination day itself (May 31, 2023, 5:35 PM), then again during summer 2023 as I was publishing fraud documentation (June-August 2023 period). The surveillance extended to family level from day one—monitoring my posts about workplace fraud, psychedelic use, and federal complaints. This November 2025 interaction (Sasha commenting on her week-old post) confirms the family operates as a monitoring unit, a pattern established on termination day itself.

Sasha commenting on wife's post day after final partner noticesSasha Orloff commenting on his wife Jennifer Villanueva Orloff’s LinkedIn post the day after final notice emails were sent to partners. Her post about joining Block (managing Marketing Strategy, Operations & AI for Square, Cash App, Afterpay, Bitcoin) was already a week old. He liked 21 individual congratulatory comments plus the post itself (22 total interactions), including Sophia Xiao’s (GC Board Observer). This post came just before Jennifer reposted the Puzzle x Deel partnership announcement. Pattern: can’t log off or stay silent even under maximum legal pressure. Any competent attorney would tell client to stay off social media during active federal proceedings.

Pattern recognition across both frauds: Immediately identified manipulation in September 2020 (NS8), applied same analytical framework at Puzzle 2020-2023, leading to comprehensive federal documentation. David Jeans (Forbes) broke NS8 story, then dropped contact when I reached out about Sasha Orloff three years later.

Parallel Pattern: Wikipedia Meltdown vs. C&D Voice

The C&Ds themselves show Sasha’s obsessive, overly-defensive voice - the same style he used editing Wikipedia on Thanksgiving. Lisa Bowman likely let him dictate content:

From the actual C&Ds (Lisa Bowman/Orrick, but Sasha’s voice):

  • August 11, 2023 C&D: Demands removal of “false and misleading statements” about public records (CFPB enforcement, corporate filings)
  • November 11, 2025 C&D: “false, misleading, or defamatory statements” characterization for SEC whistleblower complaints and partner notifications
  • November 20, 2025 C&D (56 minutes after “last days” comment): “You are now threatening the safety of Puzzle employees” for career prediction statement
  • December 2023 unsent C&D: Pre-prepared template monitoring LinkedIn posts about General Catalyst/Israel connections, ready to deploy but held back

The defensive obsessions match Sasha’s Wikipedia edits:

Mission Lane C&D objected to calling Shane Holdaway “another pawn” (ego-driven), objected to linking Credit Karma FTC settlement (true connection), objected to rhetorical question about Mission Lane “whiteboard[ing] ways to steal from the poor” (not defamation, just uncomfortable truth).

My coerced apology emails (August 12, 2023) contain Sasha’s talking points:

After receiving dual C&Ds, I sent detailed confession emails to Lisa Bowman. But mixed in with my natural voice under duress (“foolish and frozen,” “i’m sincerely sorry”) are oddly specific business justifications that sound like Sasha’s defense:

  • “comparing revenue from loans/credit to SaaS is like apples to oranges”
  • “reaching $100M ARR doesn’t mean you had a sustainable burn rate”
  • “there were obviously severe compliance issues, and they could not continue with the lendup name”
  • “they made one separate company to buy part of lendup, and then another temporary subsidiary with a different name that could be sold off”
  • “after pivoting to AI, there was a noticeable shift in the company’s day-to-day stability”

These business arguments don’t match my panicked, apologetic tone - they read like Sasha’s defensive explanations inserted into my coerced response. Either he fed me talking points through the C&D process, or I was unconsciously echoing his narratives while under duress.

The Wikipedia editing (November 26-27, 2025) used identical defensive strategies:

  • 12+ hours of personal edits
  • Claims of “SEO hijacking” (blaming victim for documentation)
  • Removing CFPB enforcement language: changed “permanent ban on consumer lending” to “prohibited from engaging in consumer lending activities”
  • Removing fraud documentation while claiming “made up” lawsuit
  • Inserting “successful entrepreneur” narrative: “he’s founded and led multiple successful fintech companies”
  • Can’t help but engage despite massive legal risk (Wikipedia COI editing = indefinite block, C&Ds after SEC filing = whistleblower retaliation)

Mission Lane C&D (August 11, 2023) shows Sasha’s voice:

Christopher Forstner (Troutman Pepper) sent the letter, but the objections reveal Sasha’s obsessions:

  • Objected to calling Shane Holdaway “another pawn” (ego-driven, not legal)
  • Objected to linking Credit Karma FTC settlement to Mission Lane (true connection they wanted suppressed)
  • Objected to question “Why does Mission Lane sound like they whiteboard ways to steal from the poor?” (rhetorical question, not defamation)
  • Same day as Puzzle C&D = coordination Sasha would have orchestrated

November 2025 C&Ds show escalating desperation:

  • November 11 C&D: Same day as SEC whistleblower complaint (6:02 PM, 14.5 hours after 3:33 AM filing)
  • November 20 C&D: 56 minutes after “last days” comment, threatening police for career prediction
  • December 2023 unsent C&D: Monitoring LinkedIn posts about General Catalyst/Israel connections, pre-prepared template never deployed

The pattern:

Wikipedia MeltdownC&D Strategy
12+ hours personal editing (Nov 26-27)Multiple C&Ds personally orchestrated (Aug-Nov)
Can’t help but defend despite COI violationCan’t help but threaten despite whistleblower laws
”SEO hijacking” claim (blame victim)“Defamation” claims for public records
Removed “permanent ban,” inserted “successful”Remove documentation, threaten police
Edit timestamps show obsessive engagement56-minute response shows active monitoring
Blocked indefinitely after caughtBar complaints filed after pattern documented
Still commenting day after partner notices sentCan’t log off even under maximum legal pressure
Both reveal compulsive need to control narrativeBoth backfired into additional federal evidence

Why this matters:

An attorney (Lisa Bowman) sending C&Ds with Sasha’s voice/obsessions suggests either:

  1. Client dictated content (Sasha writing his own threats through attorney letterhead)
  2. Inadequate attorney control (letting client’s defensive narratives drive legal strategy)
  3. Attorney complicity (knowingly sending threats drafted by CFPB-banned CEO against federal whistleblower)

Either way, the pattern shows Sasha can’t stay out of his own legal defense - just like Adam Rogas violating bail to defend himself, just like Wikipedia editing on Thanksgiving instead of letting it go. Fraudsters eventually crack under sustained pressure and personally engage despite legal counsel warning them not to.

The pattern extends to the network: Dasha Shunina posting about Ikea deals on Black Friday 2025 while under federal scrutiny (Skolkovo connections documented in 5 SEC complaints, FBI outreach ongoing). Same compulsion—can’t stay quiet and maintain low profile during active investigations. The entire network demonstrates inability to log off and let legal counsel handle federal proceedings.

The December 2023 unsent C&D proves the surveillance infrastructure existed but they calculated when to deploy. Once SEC whistleblower status became known (November 11, 2025), they deployed twice in 9 days. The voice throughout - from Mission Lane coordination to police threats - shows Sasha’s obsessive need to suppress rather than refute. You don’t suppress lies, you correct them. You don’t write your own C&Ds unless you can’t help yourself.

The C&Ds reveal strategic weaponization of “threats” language:

Both the August 11, 2023 and November 11, 2025 C&Ds include similar demands about “threats”:

  • August 11, 2023: “issuing threats, whether veiled or overt, to senior leadership”
  • November 11, 2025: “issuing any threats, veiled or explicit, toward Puzzle personnel”

This exposes the pattern: My August 2023 LinkedIn post (3 days before the first C&D) stated “i will flood you with more bad press and SEO hijacking if you keep fiddling around with your twitter garbage.” Sasha held onto this language for 2+ years, using “veiled or overt/explicit” as a catch-all to recharacterize any future documentation—from partner notifications to Wikipedia edits to career predictions—as “threats.” The repetition of this language framework across both C&Ds proves the weaponization strategy.

The impersonation claims reveal strategic avoidance:

The August 11, 2023 C&D objected to my use of “Puzzle Financial designation” in any “trademark, service mark, domain, or social media handle” claiming “confusion as to source, affiliation, endorsement, sponsorship, or impersonation.”

The November 11, 2025 C&D repeated similar claims about “designations incorporating ‘Puzzle Financial’” creating confusion, “particularly in communications directed toward investors.”

The actual basis for their claims:

  • Twitter account with display name “Puzzle Financial 🧩🚀 x LendUp” (criticism account, not impersonation)
  • missionlanetruth.com domain running on Linktree (criticism site about Mission Lane)

Strategic language reveal: Both C&Ds specifically called out “Linktree” as a platform (August 11, 2023: “including on Twitter (X), LinkedIn and Linktree”; November 11, 2025: “including but not limited to LinkedIn, X/Twitter, Linktree, and TeamBlind”) but carefully avoided naming “missionlanetruth.com” - the actual domain that makes crystal clear it’s criticism, not impersonation. No reasonable person visits “missionlanetruth.com” and thinks Mission Lane created it. By naming the platform but avoiding the domain name, they could claim trademark violations without admitting the context that defeats their claim.

Puzzle’s own later trademark strategy exposes their hypocrisy: After objecting to my use of their trademark in a criticism domain, Puzzle later created ActualQuickBooks.com - using QuickBooks’ trademark in their own domain to position against a competitor. This demonstrates they fully understand that using a trademark in a domain isn’t impersonation when the context makes the relationship clear. They deployed the exact strategy they claimed was illegal when I used it for accountability documentation.

The evidence preservation demand exposes the strategy further:

“After you remove your posts, emails, and other communications from public view as required above, you must keep a copy of everything you have posted, sent, or distributed. Do not delete, destroy, or alter any originals or copies of these materials. You should simply make them inaccessible to the public and third parties, but keep them saved in your files. These records may be needed for legal reasons.”

Translation: “Remove the evidence from public view (so it stops damaging us), but preserve it (so we can use it against you in court if we decide to sue later).”

This request exposes the contradictory goal: If the posts were truly defamatory lies, why not demand complete deletion? The answer: Because they need the evidence preserved to potentially weaponize it later, while simultaneously wanting it removed from public view to stop the reputational damage. The preservation demand proves they know the documentation is evidence, not defamation.

Twitter Block After Credit Karma Funnel Documentation (November 13, 2025)

November 13, 2025: Posted tweet documenting Credit Karma → Mission Lane customer acquisition funnel, tagging @sashaorloff, @puzzlefin, and @mission_lane with link to toxic.systems.

CEO’s response: Blocked within 2 hours.

Tweet about Credit Karma Mission Lane funnelTweet documenting Credit Karma as acquisition funnel for Mission Lane credit cards, noting CEO may still be profiting from subprime lending post-CFPB enforcement via regulatory arbitrage, and that Credit Karma continues funnel despite previous FTC enforcement. Posted November 13, 2025.

Sasha Orloff blocking after documentation@sashaorloff blocked within 2 hours after tweet documenting Credit Karma → Mission Lane profit structure. Response pattern: suppress, don’t refute.

Suppression Pattern Timeline:

  • October 27, 2025: Photoshopped metrics evidence deleted within 24 hours
  • November 10, 2025: LinkedIn warning comment to CPAs deleted in 4 minutes
  • November 12, 2025: @joinodf blocked after posting documentation timeline
  • November 13, 2025: @sashaorloff blocked after documenting Credit Karma funnel
  • October 28, 2025: @sashaorloff blocked on LinkedIn (before Wikipedia editing, proving sustained monitoring and suppression across platforms)
  • November 26, 2025: CEO personally edits Wikipedia (evidence-118) to remove 4,744 bytes of fraud documentation, claiming “SEO hijacking” despite all links being functional
  • November 26, 2025: Marvin Bing blocks within 57 minutes (evidence-121, evidence-122) of posting about Rolling Loud lawsuit - same day Sasha claiming lawsuit is “made up” on Wikipedia

Pattern demonstrates: Systematic suppression across all platforms rather than refutation. If documentation was false, CEO would respond with facts. Instead: delete comments, block critics, send C&D letters, personally edit Wikipedia claiming federal lawsuits are “made up.” Marvin Bing (named in lawsuit) blocks same day rather than defending. The pattern reveals the strategy: suppress rather than refute. You don’t suppress lies, you correct them.

Y Combinator Continued Active Platforming (November 10, 2025)

Days after publication of complete fraud documentation (with continual updates and warnings), Puzzle reposted Y Combinator’s celebration of customer The Prompting Company’s $6.5M seed round. The post stated “Nothing makes us happier than seeing our customers thrive” - using YC’s 1.5M follower platform for customer acquisition and legitimacy positioning.

The customer amplification loop: The Prompting Company (Michelle Marcelline, CEO) subsequently reposted Puzzle’s celebration post, creating a circular legitimacy pattern: YC celebrates customer → Puzzle reposts YC’s celebration → Customer reposts Puzzle’s repost of YC’s celebration. This manufactured social proof obscures that all three entities are promoting accounting software led by someone with CFPB enforcement history for defrauding 140,000+ consumers. The customer becomes an unwitting participant in legitimizing fraud through standard “thank you for the support” social media behavior.

This demonstrates YC’s continued active role in Puzzle’s customer acquisition infrastructure 28 months after receiving notification (August 5, 2023: subject “wtf happened at lendup”), days after publication (notified again Nov 9, 2025) of complete fraud documentation including:

  • CFPB enforcement (140,000+ victims, company shutdown, $0 to shareholders)
  • October 2025 photoshopped metrics (3 → 12,362)
  • False Mission Lane “cofounder” claims (disproven by corporate records)
  • Decade-long pattern across multiple companies

YC provides Puzzle with:

  • Social proof through 1.5M follower platform
  • Customer acquisition pipeline (Puzzle maintains dedicated /yc landing page built during my employment)
  • Legitimacy cover (Mission Lane listed as “YC W12” despite advisor-only role post-acquisition)
  • Network access to early-stage companies most vulnerable to accounting software fraud

The timing is brazen: Celebrating how customers “thrive” while platforming a CEO with documented history of defrauding 140,000+ customers. The CFPB stated LendUp “repeatedly lied to consumers.” YC’s LendUp company page continues displaying false founder claims despite notification with corporate records proving Sasha Orloff was hired as advisor, not founder.

The repost occurred November 10, 2025 5:24 PM ET, demonstrating:

  • Active monitoring of fraud documentation
  • Continued use of YC credibility despite awareness
  • YC’s choice to maintain platform access after notification
  • Pattern of legitimacy theater enabling customer acquisition

Puzzle reposting YC customer celebrationPuzzle reposts Y Combinator customer celebration, November 10 5:24 PM ET - using YC’s 1.5M follower platform days after complete fraud documentation published

The Network Protection Effect: Value Without Investment

YC’s strategic positioning allows them to provide enormous value to Puzzle while maintaining plausible deniability through lack of direct investment.

What YC doesn’t need to do:

  • Invest directly in Puzzle
  • Take board seats
  • Sign term sheets
  • Create paper trail of financial backing

What YC provides instead (worth more than money):

  • Access to entire YC portfolio (20,000+ companies, cumulative $600B+ valuation)
  • Distribution infrastructure (Puzzle maintains /yc and /odf landing pages)
  • Social proof (1.5M follower platform for customer amplification)
  • Legitimacy laundering (YC W12 credential on Mission Lane despite advisor-only role)
  • Credibility transfer (customers trust “YC network” association)
  • Network effects (customer acquisition from YC-backed startups)

The protection mechanism:

When confronted about platforming a CFPB-banned CEO, YC can claim:

  • “We don’t control who uses our network”
  • “We’re not investors in Puzzle”
  • “Alumni access is standard for all YC companies”
  • “We can’t police every founder’s history”

What this obscures:

The active, ongoing choice to maintain platform access and provide customer amplification 26+ months after notification with comprehensive fraud documentation. YC’s continued platforming is an active business relationship providing:

  • Customer acquisition pipeline
  • Credibility positioning
  • Network access to vulnerable early-stage companies
  • Legitimacy cover for continuing operations despite federal enforcement

The economic reality: Access to YC’s 20,000+ company network is worth more than a seed investment. A typical seed check ($500K-2M) provides capital. YC network access provides customers, distribution, and legitimacy—the infrastructure for a data collection operation disguised as accounting software.

Co-investment proves financial alignment: Altman Family LLC + YC W2014 LLC + Sasha Orloff as Theorem Technology stockholders (2014-2024) documents YC’s financial relationship with Sasha predating Puzzle. The continued platforming after CFPB ban protects a portfolio relationship.

Result: YC provides infrastructure for fraud while maintaining arm’s length distance. No investment = no fiduciary duty = no legal obligation to customers harmed. Maximum value delivery, minimum legal exposure.

Diversity Theater and Network Exploitation

Dasha Shunina serves as Puzzle’s Go-To-Market strategist and Forbes contributor covering venture capital and startups. This is an undisclosed conflict of interest. She founded THE GATHERING and Women Tech Meetup, which Puzzle sponsors for network access and diversity positioning.

Forbes connections:

Former Forbes senior writer David Jeans (covering tech) dropped contact after initially responding “Yeah, I know of Sasha” during a phone call when notified of fraud documentation (July 2023).

Forbes prestige lists feature multiple investors:

  • Hemant Taneja (General Catalyst, Puzzle lead investor): #8 on Forbes Midas List 2025
  • Blake Byers (Google Ventures, Insights Servicing director): Forbes 30 Under 30 (2015), profile explicitly mentions LendUp investment
  • Ross Fubini (XYZ Capital, Puzzle investor): #88 on Forbes Midas List 2025
  • LendUp board chair/director (QED Investors): #90 on Midas List 2025

Shunina uses her Forbes platform to cover the tech industry while employed as GTM strategist for a company led by someone shut down by federal regulators for defrauding 140,000+ consumers. Her Forbes contributor profile does not disclose this employment relationship.

November 12, 2024: Shunina interviewed CEO Sasha Orloff on her YouTube series “Talks with Dasha.” The interview demonstrates systematic credential inflation:

“I think you are the most founder focused founder that I know… and now your thing is like, you’re a serial founder, right, and you have collectively raised over $1B in venture capital and debt, you’re a YC alumni, your company reached unicorn status before Puzzle, you’re CEO of Puzzle […] that I’m happy to be part of right now too, […] so you’re a speaker, you do multiple other things, so that is so so impressive, did I miss anything?”

- Dasha Shunina; Puzzle GTM Strategist, Women Tech Meetup Founder, Forbes Contributor

Credential inflation documented in interview:

The “$1B+ raised” claim aggregates equity and debt financing without distinguishing between the two. It omits that the December 2018 LendUp asset sale returned $0 to shareholders after raising $150M+ in equity.

The “unicorn status” refers to Mission Lane. Orloff falsely claims to have founded Mission Lane despite corporate records proving he was hired as an advisor post-acquisition. Mission Lane achieved unicorn valuation, but Orloff was not a founder and joined after the December 2018 asset sale structure. Shunina validates this false credential without challenge.

The phrase “that I’m happy to be part of right now too” is ambiguous—could suggest customer, community member, or employee. However, Shunina is employed by Puzzle as GTM strategist. She does not disclose this employment relationship on her YouTube channel or Forbes contributor profile while interviewing and covering her employer.

An infomercial produced by an employee, not journalism.

The Women Tech Meetup sponsorship and diversity positioning follows the LendUp playbook: using progressive branding (“Banker to the Poor,” “financial inclusion,” Ahead Financials “women-led”) to deflect scrutiny while executing predatory business practices. Shunina’s networks provide access to underrepresented founders who may be more vulnerable to exploitation through manufactured trust and special access positioning.

Watch: Sasha Orloff, Co-Founder & CEO of Puzzle on Accounting, Fundraising, and Team Building

KEY EVIDENCE: Strategic DEI Theater (2017-2024) and Post-Trump Abandonment (2024-2025)

The fraud network’s use of Diversity, Equity, and Inclusion (DEI) positioning demonstrates calculated opportunism, not commitment to underrepresented communities. This pattern dates to at least 2017, not just the post-George Floyd era—then rapidly abandoned following Trump’s return (2024-2025), proving consciousness.

  • 2017: LendUp launched comprehensive DEI infrastructure (3 Employee Resource Groups, diversity partnerships) during active CFPB violations
  • 2020-2023: Post-George Floyd capital influx weaponized “financial inclusion,” “women-led,” “Black-owned” branding for customer acquisition
  • 2024-2025: Same networks rapidly abandon DEI commitments when politically inconvenient

The abandonment pattern proves it was always strategic positioning: if DEI commitment were genuine, it would persist regardless of political climate. The post-Trump pivot is the confession.

Strategic DEI Theater (2017-2024) and Post-Trump Abandonment (2024-2025)

Women Tech Meetup as Reputation Laundering Infrastructure

October 28, 2024: Women Tech Meetup organized official TechCrunch Disrupt side event co-sponsored by Puzzle and Brex (YC W17, founded by Brazilian entrepreneurs; Israeli connections via Shai Goldman who joined July 2021 as Startups & VCs ambassador; acquired Israeli company Weav $50M Aug 2021; established Tel Aviv innovation hub). Event organized by Dasha Shunina (Puzzle’s GTM strategist, former FBI-warned Skolkovo Foundation employee) featured panel “Growing from Seed to Success” about fundraising and venture capital for female founders.

SAME DAY: Pagaya Technologies completes acquisition of Theorem Technology, Inc. - Sasha Orloff’s co-investment vehicle (2014-2024) acquired by Israeli AI lending platform Pagaya (NASDAQ: PGY). Theorem had acquired $10+ billion in consumer loans since 2014, managing $1.7 billion at acquisition. Hugh Edmundson (Theorem Founder & CIO) and Sasha receive Pagaya shares. Combined entity manages $3+ billion AUM. Pattern: CFPB-banned CEO exits decade-long consumer credit investment (throughout permanent lending ban) on same day as major Puzzle platforming event.

The network integration demonstrates conscious coordination:

  • TechCrunch (Connie Loizos abandoned investigation August 2023) provides “official” legitimacy 17 months post-termination
  • Brex (YC fintech unicorn, founded by Brazilian entrepreneurs; Israeli connections via Shai Goldman who joined July 2021 and organized Israel fundraising Oct 2025) co-sponsors
  • Same-day timing (Oct 28, 2024): Sasha’s Theorem exit via Israeli acquisition + Puzzle’s official TechCrunch event
  • Puzzle (CFPB-banned CEO) gains access to female founders and professional networks
  • Dasha Shunina (FBI-warned Skolkovo Foundation alumna) operates reputation laundering infrastructure
  • “Women in tech” branding as cover for platforming documented fraud networks

Event held at Persona (identity verification platform) featuring Pear VC, Day One Ventures, Park Rangers Capital, and defy.vc. Panel focused on venture capital access while co-sponsor’s CEO has CFPB permanent ban from consumer lending operations. “Coaching Circles with therapists” positioned as founder support—organized by person whose employer deleted employee equity and terminated whistleblower.

Pattern: Using female founder community as customer acquisition and reputation laundering infrastructure while obscuring 13-year fraud pattern, Israeli fintech ecosystem integration, and FBI-warned Skolkovo Foundation alumni (Russian government tech recruitment, 2016-2023).

November 20, 2025: Puzzle Financial sponsored Women Tech Meetup event “Tell Me I Can’t” - themed around women building wealth and financial independence. The event was organized by Dasha Shunina (Puzzle’s GTM strategist, Forbes contributor, Women Tech Meetup founder) with messaging encouraging women to “become angel investors,” “build wealth confidently,” and “talk openly about money.”

The irony is systematic:

The event’s empowerment messaging (“For years, women have heard: I can’t”) positions financial risk-taking and wealth-building as acts of defiance - sponsored by a company led by someone whose track record demonstrates systematic wealth destruction:

  • LendUp: As documented in Credential Misrepresentation, $150M+ raised in equity, $29M fire sale returned $0 to shareholders
  • LendUp consumers: CFPB documented 140,000+ victims, ordered $40M restitution for systematic fraud
  • Puzzle employees: Vested equity deleted from cap table without notice, wrongful termination with gaslighting

The event theme “Tell Me I Can’t” takes on darker meaning when the sponsor’s CEO responded to federal shutdown (CFPB: “you can’t issue consumer loans”) by launching new entities and continuing operations. The phrase becomes less about empowerment and more about defiance of accountability.

Dasha Shunina’s role demonstrates the infrastructure:

As Forbes contributor, she covers venture capital and startups. She serves as Puzzle’s GTM strategist, but obscured this employment relationship in her November 2024 “interview” with CEO. She stated only she’s “happy to be part of [Puzzle] right now too” while validating false credentials including “$1B+ raised” and “unicorn founder” claims contradicted by corporate records.

This follows the LendUp playbook: “Banker to the Poor” narrative while charging predatory rates, “financial inclusion” marketing while violating Military Lending Act against service members, “credit building” promises while failing to report to credit bureaus. Progressive branding as cover for extractive practices targeting the communities being “helped.”

Event messaging: “Your wealth is not a dream. It’s a plan.”

CEO’s actual track record: Plans that systematically destroyed wealth for shareholders, consumers, and employees across 13 years.

The event positions women taking financial risks as inspirational while obscuring that the sponsor’s CEO poses the financial risk. “Talk openly about money” is encouraged at an event sponsored by a company that deleted employee equity without notice and threatened legal action against whistleblower documenting financial fraud. The cognitive dissonance is the point; progressive cover enables continued operation despite documented pattern.

Women Tech Meetup provides legitimacy infrastructure (10,000-member community, safe space narrative, empowerment messaging) that Puzzle leverages for customer acquisition and reputation laundering. The community becomes unwitting participants in credibility theater, their authentic desire for support weaponized as cover for CEO with CFPB enforcement history targeting the accounting software their startups depend on.

December 10, 2025: Dasha announces 16th Women Tech Meetup co-hosted with Puzzle and Antler at Puzzle’s brand-new office in San Francisco. LinkedIn post: “I can’t believe it… We’ve hosted 15 Women Tech Meetups this year. And there’s no better way to wrap up the year than hosting our 16th meetup with Puzzle and Antler at their brand-new office in San Francisco.” Event registration shows themed event “Make Your Wish” with “all white” dress code.

Same day: Dasha publishes Forbes article about “founder cafes” and “builder-only spaces” - continuing to write about startup ecosystem while employed by CFPB-banned CEO’s company as GTM strategist. Article quality suggests AI-generated content with minimal effort: generic opening (“Building a company has never been a desk job”), repetitive “quiet revolution” framing, basic problem/solution structure with quotes plugged in, ChatGPT cadence throughout. Low-effort Forbes byline maintenance while promoting ecosystem that includes CFPB-banned CEO’s company.

1:15 AM, December 11: Sasha reposts Dasha’s Forbes article with endorsement: “When I need to really focus, I like a busy coffee shop with lots of founders. It’s not why I live in SF. But also not not why.” Late-night amplification of GTM strategist’s Forbes content; part of coordinated 19-minute amplification spree (1:15 AM Dasha, 1:17 AM Julian, 1:34 AM Julian again); demonstrates mutual support network despite fraud documentation visible on all posts.

Pattern escalates: This isn’t just Puzzle sponsoring a Women Tech Meetup event at external venue. This is co-hosting at Puzzle’s own office with Dasha as event organizer. The 10,000-member Women Tech Meetup community is now being brought directly into the physical office space of a company led by a CFPB-banned CEO, where they can be pitched accounting software while surrounded by “wishes for 2026” branding and “all white” aesthetic ritualism. Direct access to female founders in controlled environment operated by documented fraud entity.

Timing demonstrates consciousness of guilt: Event announced December 11, 2025 - weeks after:

  • November 11: SEC whistleblower complaints filed, same-day C&D retaliation
  • November notifications to Puzzle about CFPB ban, Dasha’s Skolkovo employment (FBI-warned), GTM strategist conflict of interest
  • December 4-8: Daily email campaign detailing fraud pattern, ongoing notifications to investors/partners/accounting firms
  • December 6: TEDxLosAltos Women RICO notice (Puzzle sponsorship + Women Tech Meetup community partnership)
  • December 10: Daily email #3 expanding to all investors, accounting firms, HR infrastructure

Dasha and Puzzle continue platforming with Women Tech Meetup infrastructure despite comprehensive federal documentation, choosing to double down with physical office access to female founder community rather than distance from documented fraud pattern.

Forbes structural conflict continues: Contributor writing about startup ecosystem while simultaneously employed as GTM strategist for company subject to:

  • CFPB permanent ban (December 2021)
  • SEC whistleblower complaints (November 2025)
  • Professional licensing complaints (CA Board of Accountancy A-2026-1047, State Bar 25-O-30894)
  • Federal investigation concerns (FBI outreach August 2023 re: Skolkovo employment)

The merchandise tells the story:

Who Runs The World hoodie payment page Women Tech Meetup “Who Runs The World?” hoodie featuring Cleopatra, Marie Curie, Queen Elizabeth, Beyoncé, Rihanna, Serena Williams, Lady Gaga, and other iconic women. Selling for $100 (limited to 30 pieces). Payment goes directly to “Daria Shunina” (now “Dasha”). Sold by unincorporated operation run by Puzzle’s GTM strategist (former Skolkovo Foundation employee, FBI warned about accessing U.S. technology) to fund customer acquisition for CEO who deleted employee equity and defrauded 140,000+ consumers. Feminist iconography monetized for reputation laundering.

Someone who deleted my vested equity shouldn’t be selling $100 hoodies about women running the world.

Early DEI Positioning (2017-2020): Reputation Laundering During Active Fraud

LendUp’s DEI theater began during active CFPB violations:

  • April 11, 2017: Sam Altman (YC President) speaks at LendUp’s “LGBTQ + Allies” event - one year after first CFPB violation ($6.3M settlement, March 2016); LendUp positioned itself with “Different backgrounds, same mission” diversity value while systematically defrauding 140,000+ consumers; Sam Altman’s appearance at offices with wall reading “Our mission is to provide a path to better financial health” legitimized fraud entity despite public CFPB enforcement record
  • LendUp’s “Banker to the Poor” narrative (throughout fraud period): marketed “financial inclusion” while charging predatory rates, failing credit reporting promises, violating Military Lending Act
  • “Financial inclusion” branding positioned regulatory violations as mission-driven work serving underrepresented communities

September 20, 2017: Comprehensive DEI Infrastructure Announcement

Five months after Sam Altman’s LGBTQ event, 18 months after first CFPB violation, LendUp announced comprehensive DEI infrastructure: three Employee Resource Groups (Black Leaders, Lean In, LGBTQ + Allies), early support for Project Include (tech diversity nonprofit), signatory of Kapor Capital’s Founders’ Commitment (diversity pledge requiring quarterly diversity reporting), partnerships with NOBEL Women, Black Female Founders Network, Anita Borg Institute; positioned as “socially responsible financial services firm” claiming to have “saved borrowers nearly $135 million in interest and fees” and named CFSI 2017 Financial Health Leader - all while violating CFPB orders.

Kapor’s Founders’ Commitment failure: LendUp was a Founders’ Commitment member with G.I.V.E. framework accountability (Goals, Invest, Volunteer, Educate) requiring “quarterly investor updates” on diversity progress. This infrastructure existed during LendUp’s entire CFPB violation period (2016-2019). After permanent ban (December 2021), Kapor scrubbed both LendUp from portfolio AND deleted the detailed Founders’ Commitment page (last archived March 2022) - demonstrating systematic abandonment of accountability mechanisms when they failed to prevent fraud. Full scrubbing documentation →

Founders for Change Participation (2018): Layered DEI Theater

LendUp also participated in Founders for Change, a separate diversity initiative bringing together venture-backed founders who publicly committed:

“I believe in a more diverse and inclusive tech industry. I am dedicated to having a diverse team and board, and when I have a choice of investment partners in the future, the diversity of their firms will be an important consideration.”

LendUp co-founders Sasha Orloff and Jake Rosenberg holding "We are Founders For Change" sign LendUp co-founders Sasha Orloff (right, wearing LendUp t-shirt) and Jake Rosenberg (left, wearing “Socially Responsible Lending” LendUp t-shirt) holding “We are Founders For Change #FOUNDERSFORCHANGE” sign. Archived March 2018. This photo was taken during active CFPB violations (2016-2019 period) and 2 years after first CFPB enforcement action (March 2016). LendUp participated in Founders for Change while simultaneously being a Kapor Capital Founders’ Commitment signatory - double-layer DEI theater while systematically defrauding 140,000+ consumers.

The layered pattern:

  • Kapor Capital Founders’ Commitment (September 2017): G.I.V.E. framework, quarterly diversity reporting
  • Founders for Change (by March 2018): Public pledge about diverse teams and investment partner diversity
  • Multiple ERGs (April 2017): Black Leaders, Lean In, LGBTQ + Allies
  • Diversity partnerships: Project Include, NOBEL Women, Black Female Founders Network, Anita Borg Institute
  • Awards: CFSI 2017 Financial Health Leader

All while committing CFPB violations that would result in permanent ban 4 years later. This wasn’t just one diversity initiative for appearance—it was systematic participation in multiple overlapping DEI programs as reputation laundering infrastructure.

Note: LendUp founders were “notably hard to find on the page unless you’re in mobile view” - suggesting they were listed but not prominently featured or later hidden, consistent with scrubbing pattern after regulatory action.

Sam Altman at LendUp offices in 2017 LendUp offices (2017): Sam Altman (YC President) at LGBTQ + Allies event (April 11, 2017), one year after first CFPB violation. Photos ONLY accessible via web.archive.org - blog post still exists but all photos of Sam selectively deleted from live version. Full PR Newswire (Sept 20, 2017).

Comprehensive DEI infrastructure during active CFPB violations: Three Employee Resource Groups, diversity partnerships, “Financial Health Leader” award.

Pattern - Sam/Sasha relationship systematically hidden:

  • Photos specifically removed (text kept)
  • “Wink wink” language for 2024 OpenAI dinners
  • 10-year Theorem co-investment never disclosed

Accelerated DEI Era (2020-2023): Post-George Floyd Capital Influx

Following George Floyd’s death (May 2020), tech companies rushed to demonstrate commitment to racial justice and diversity, creating massive funding opportunities:

  • Greenwood (Black-owned fintech) raised millions from JPMorgan Chase, Bank of America, Wells Fargo; subsequently acquired Kinly (May 2023) despite Kinly’s active legal issues; Washington Post investigation documented “financial disarray,” failed promises, only 150,000 of 700,000 waitlist accounts opened
  • Kinly/Ahead transition (June 2022): customers blocked from accessing funds for over a month during “acquisition” that was actually LendUp liquidation asset transfer
  • Women Tech Meetup (founded by Dasha Shunina while at Skolkovo Foundation): positioned as safe space for female founders; 10,000+ member database used as customer acquisition funnel for CFPB-banned CEO
  • Ahead Financials media coverage emphasized “women-led fintech” while obscuring it was LendUp “subsidiary” with same predatory practices
  • TechCrunch Disrupt Official Side Event (Oct 28, 2024): “Women Tech Meetup w/Brex & Puzzle” (Brex: Israeli connections via Shai Goldman) featuring panel on fundraising for female founders - same day as Sasha’s Theorem exit via Israeli acquisition

The pattern shows DEI as:

  1. Access to capital - post-George Floyd corporate commitments created funding opportunities
  2. Reputation laundering - progressive branding deflects scrutiny of fraud history
  3. Customer acquisition - underrepresented communities weaponized as marketing channels
  4. Regulatory arbitrage - diversity positioning complicates enforcement (don’t want to appear discriminatory)

Post-Trump Abandonment (2024-2025): Calculated Pivot

Following Trump’s return and conservative backlash against DEI initiatives:

  • Tech companies rapidly abandoning DEI programs and diversity commitments
  • Same networks that profited from post-George Floyd capital now distance themselves from DEI rhetoric
  • Pattern demonstrates opportunism: DEI was never about community support, it was strategic positioning
  • Entities that used “financial inclusion,” “women-led,” “Black-owned” branding now avoid DEI language while maintaining exploitative practices

Why This Matters:

The fraud network’s DEI positioning was always theater. Evidence:

  1. LendUp’s “Banker to the Poor” - charged predatory rates to exact communities marketed as helping
  2. Ahead’s “women-led fintech” - subsidiary of CFPB-banned lender, failed within 1 year, customers locked out of funds
  3. Greenwood’s “Black-owned” positioning - raised millions post-Floyd, acquired troubled Kinly, documented “financial disarray”
  4. Women Tech Meetup “empowerment” - $100 hoodies ($100!) sold by unincorporated operation to fund customer acquisition for CEO who deleted employee equity
  5. Mission Lane - all 3 CEOs from Capital One subprime operations, QED board chair (Nigel Morris) is Capital One co-founder; “financial inclusion” marketing while charging 33.99% APR

The abandonment pattern proves consciousness:

  • If DEI commitment were genuine, it would persist regardless of political climate
  • Rapid abandonment (2024-2025) shows it was always strategic positioning
  • Same networks that weaponized DEI for access now pivot to avoid association
  • Victims: underrepresented communities used as props, then discarded when politically inconvenient

Tech’s DEI theater enabled this fraud network:

  • Progressive branding provided legitimacy cover
  • Corporate DEI commitments created capital influx with minimal due diligence
  • Community access weaponized for customer acquisition
  • Diversity positioning complicated enforcement and whistleblower credibility

The post-Trump abandonment is the confession: DEI was never about supporting underrepresented communities. It was a temporary strategic positioning discarded the moment it became politically inconvenient, leaving victims with the consequences.

Weaponized Expertise

CEO Sasha Orloff holds a B.S. in Applied Math and Economics with a minor in Behavioral Psychology from UC San Diego, and an M.B.A. from Georgetown. The systematic use of gaslighting (making employees doubt termination vs. resignation), strategic timing of offers during vulnerability, mental health stigma as a silencing tactic, and performative contradiction (public mental health advocacy while privately weaponizing it) demonstrates applied knowledge of psychological manipulation rather than isolated incidents.

The “Banker to the Poor” narrative, credential inflation, and progressive branding are applications of behavioral psychology principles to manufacture trust, deflect accountability, and exploit cognitive biases in investors, consumers, and employees.

Image management extends to physical presentation: Full sleeve tattoos consistently concealed under layered clothing (longer shirt under t-shirt). The deliberate concealment maintains the professional “banker” image necessary for credibility with federal regulators (CFPB hearings), investors, and the “Banker to the Poor” narrative. Even permanent personal choices are hidden to preserve the curated persona. This level of image control—understanding that visible tattoos would undermine the financial services professional credibility required to operate predatory lending while positioning as social mission—demonstrates sophisticated application of behavioral psychology to visual presentation.

Dissociative Language and Reality Testing

November 12, 2025: Hours after dual SEC complaints and legal retaliation, CEO posted LinkedIn content exhibiting dissociative language and reality testing issues. Post combined immigrant success narrative with simulation framework:

“It’s a good reminder of how amazing this level of the simulation is, and how creative the AI is. They created Ellis Island.”

The post contained multiple grammatical errors (“a university professors,” “a clerks”) demonstrating lack of editorial review and compulsive posting pattern. The juxtaposition—building family legacy narrative then immediately reframing reality as “simulation”—demonstrates psychological decompensation under pressure.

Context of posting behavior:

  • November 11, 3:33 AM ET: Filed SEC whistleblower complaint
  • November 11, 6:02 PM ET: Received cease-and-desist threatening criminal prosecution
  • November 11, 6:32 PM ET: Filed supplemental SEC complaint documenting retaliation
  • November 12, 4 AM Pacific (7 AM ET): Began 6+ hour manic posting session on LinkedIn

Dissociative language patterns:

  • “This level of the simulation” - reality framed as unreal
  • “The AI is creative” - external control attribution
  • “They created Ellis Island” - vague pronoun, unclear agency
  • Immigrant narrative → immediate dissociation
  • Unable to maintain coherent reality frame under federal pressure

The “simulation” framing creates psychological distance from consequences. If reality is not real, federal complaints are not real, retaliation is not real, accountability is not real. This defense mechanism becomes visible precisely when consequences become undeniable.

Therapist Evaluation

Context: Addressing the predictable mental health dismissal tactic used against whistleblowers.

Clinical Assessment:

  • Licensed therapist reviewed verbal description of LendUp → Ahead → Puzzle pattern
  • Affirmed termination was real (not “mutual departure” or other revisionist narrative)
  • Found description credible and internally consistent - no indication of confabulation or distorted thinking
  • No indication of delusion, paranoia, or impaired reality testing
  • Cognitive assessment: sound judgment, coherent narrative, and accurate perception of documented events

Why This Matters:

Fraudsters and enablers routinely characterize whistleblowers as “mentally ill” to avoid addressing documented evidence. This is a standard institutional defense mechanism: question the messenger’s sanity rather than engage with verifiable facts.

A third-party licensed clinical professional with no financial interest in the outcome reviewed the same evidence and confirmed:

  • The pattern is real
  • The documentation is credible
  • The cognitive assessment is sound
  • The termination occurred as described
  • The shell company connections are factually supported

This tactic (mental health dismissal) is documented in the separation agreement’s characterization and subsequent enabler behavior. The response is clinical documentation from a licensed professional confirming that pattern recognition and evidence compilation are not symptoms of mental illness—they are documentation of systematic fraud.

Note for investigators: Mental health dismissal is a standard component of institutional fraud defense. When fraudsters cannot dispute the evidence, they dispute the credibility of the person presenting it. Third-party clinical validation removes this defense vector.

Real-Time Red Flag Documentation

LinkedIn post documenting workplace red flags observed and shared in real-time - patterns of toxic management, performative culture, and institutional dysfunction that characterize the broader pattern documented throughout this statement.

LinkedIn post documenting workplace red flags

LinkedIn post documenting workplace red flags: exploding offers, impersonal interviews, team-building theater, productivity surveillance, conflating complexity with competency, excessive alcohol consumption, hiring inexperienced people under pretense of opportunity, yes-man culture, distancing from employees, using self-care to deflect criticism, seeking personal publicity, passive aggressive contributions, assuming scale before profitability, evading responsibilities, constant urgency, screaming, endless changing roadmaps, treating people as replaceable, controlling the narrative.

What to Watch For

For current/former employees: If you see card cancellations used as termination signals, separation agreements with unusual release language covering “predecessors and affiliates,” or “mentally ill” characterizations of departed colleagues, document everything contemporaneously.

For investors: If a founder’s timeline contradictions are verifiable through public records, or if “successful founder” claims don’t match corporate filings, the pattern deserves scrutiny before additional capital deployment. Look for self-legitimacy loops—constant credential inflation paired with vague answers when pressed for specifics.

For anyone documenting misconduct: Reactions are evidence. Monitoring, outreach during vulnerability, legal threats: each response validates the pattern being documented. The performative public persona and private retaliation are both part of the same system.

Key Evidence Index

Jump to specific claims with primary source documentation:

Federal Records

  • CFPB LendUp Enforcement → The Fraud Pattern - Permanent shutdown for defrauding 140,000+ consumers, $40M restitution ordered, company permanently barred from consumer lending (December 2021)
  • FTC Credit Karma Settlement → Credit Karma - $3M settlement for deceptive “pre-approved” offers, 497,425 consumers eligible for refunds; complaint documents A/B testing to optimize false “certainty” claims, 1/3 of applicants denied/credit damaged; “dark patterns” designation (September 2022)
  • SEC Whistleblower Complaints → Legal & Regulatory Actions Taken - Five SEC complaints filed (Submissions #17628-500-136-464, #17629-039-523-592, #17630-611-119-304, #17635-381-418-374, #16917-772-564-515); CFPB evidence provided for Mission Lane investigation; California State Bar complaint (Case #25-O-30894); California Board of Accountancy complaint (Case #A-2026-1047); FBI outreach regarding foreign influence; whistleblower counsel engaged
  • Rolling Loud Court Judgment → Rolling Loud v. Ahead Financials - $1.575M vendor fraud lawsuit (Case No. 2022-003284-CA-01), unpaid sponsorship fees

Corporate Records

  • LendUp Asset Sale ($0 to Shareholders) → Credential Misrepresentation - $29M fire sale after raising $150M+, “interested directors” with conflicts, 2-day shareholder review period
  • Mission Lane Incorporation/Advisor Role → Credential Misrepresentation - Corporate documents prove CEO hired as advisor post-acquisition, not founder
  • Insights Servicing Undisclosed Entity → Undisclosed Related-Party Entity - Never disclosed to shareholders despite Blake Byers (Google Ventures) as director, shared LendUp address, parallel abandonment March 2023
  • Kinly/Ahead Shared Infrastructure → Kinly/BeKinly - Account statement (evidence-91, June 2022) proves “acquisition” was rebrand: same physical address (1750 Broadway Suite 300), same phone (1-833-33-AHEAD), same email ([email protected])

Pattern Evidence

  • Photoshopped Metrics (October 2025) → ActualQuickBooks Campaign Evidence - Social media metrics manipulated (3 likes → 12,362), police intervention, evidence deletion within 24 hours
  • False Founder Claims → Credential Misrepresentation - Claims “founded Mission Lane” contradicted by shareholder documents showing advisor role
  • CFPB Contempt → Public Contempt for Regulatory Accountability - January 2025 tweet mocking “consumer financial protection bureau” as “great bullshit branding”
  • Women Tech Meetup Astroturfing → Weaponized Empowerment: Women Tech Meetup - Unincorporated “community” run by Puzzle GTM strategist, monetizing feminist iconography while marketing for CFPB-banned CEO
  • Skolkovo Foundation Sequential Infrastructure → Dasha (Daria) Shunina: Forbes Contributor / Puzzle GTM Strategist (Skolkovo Foundation 2016-2023) - Forbes contributor founded Women Tech Meetup (10K+ founders) in Dec 2022 WHILE working at Russian government-backed Skolkovo Foundation (FBI warned about accessing classified technology), then layered additional access infrastructure AFTER leaving: YouTube (Aug 2023), Forbes (Nov 2023), Puzzle GTM strategist (Aug 2024, provides financial data access); name change from “Daria” to “Dasha” + resume restructuring obscures Skolkovo connection

Network Complicity (Notification → Response)

  • Y Combinator → Y Combinator Continued Active Platforming - Notified August 2023; continued platforming November 2025
  • On Deck → On Deck (ODF) - Notified January 2024 (“is this bullshit normal to you?”); 22 months silence → “Top 2025 Company” designation 24 hours after SEC retaliation complaint
  • Forbes Structural Conflicts → Forbes Midas List Conflict - Lead investor #8 on Midas List 2025 (Hemant Taneja), creates structural conflict preventing accountability journalism
  • TechCrunch 27-Month Silence → TechCrunch’s Promotional Coverage and Investigation Abandonment - Initial reporter response “Yeah, I know of Sasha” followed by 27+ months editorial silence despite comprehensive documentation
  • LinkedIn Comment Suppression → Systematic CPA Testimonial Deployment and Evidence Suppression - Warning comment posted on Puzzle’s LinkedIn announcement alerting CPAs to CEO’s CFPB enforcement history; Puzzle deleted comment in 4 minutes demonstrating active monitoring and suppression to prevent professionals from being warned

Techno-Optimism as Legitimating Narrative

“Tech optimist” appears in Sasha Orloff’s Twitter bio. It’s the framing device for his entire public persona: optimism about technology, the future, founders, abundance.

October 16, 2023: Marc Andreessen publishes “The Techno-Optimist Manifesto” celebrating technology, markets, growth, and abundance. The manifesto declares “We are being lied to” about technology taking jobs, increasing inequality, threatening our future. Marc’s position: technology is “the glory of human ambition,” markets lift people out of poverty, and “there is no material problem that cannot be solved with more technology.”

The ideological foundation: Paul Graham’s “Pie Fallacy” (May 2004)

Marc’s manifesto builds on Y Combinator founder Paul Graham’s essay “How to Make Wealth”, which argues against the “pie fallacy”:

“A surprising number of people retain from childhood the idea that there is a fixed amount of wealth in the world… When wealth is talked about in this context, it is often described as a pie. ‘You can’t make the pie larger,’ say politicians… If you plan to start a startup, then whether you realize it or not, you’re planning to disprove the Pie Fallacy.”

Paul’s argument: wealth isn’t zero-sum. Creating wealth for yourself doesn’t harm others. Programmers create wealth by writing code. Startups compress lifetime earnings into a few years of extreme work. Get rich by “creating wealth and getting paid for it” versus “theft, extortion, fraud, monopoly.”

The ideological work this does:

  1. Dismisses harm as “pessimism”: If wealth creation is non-zero-sum, then questioning whether startups harm workers/consumers means you don’t understand economics. Criticism becomes “the pie fallacy.”

  2. Erases victims: 140,000+ LendUp victims who paid $40M in illegal fees? Not harm - just people who “don’t understand wealth creation.” Employees terminated for questioning fraud? They lacked “optimism + growth mindset.”

  3. Moral laundering: Paul lists “theft, extortion, fraud, monopoly” as the bad ways to get rich, versus the good way (creating wealth). But what if you do both? What if fraud is the wealth creation mechanism? The ideology can’t see it - if you’re a founder creating technology, you’re definitionally creating wealth, not committing fraud.

  4. Network protection: YC (Paul’s institution) received fraud documentation August 2023. Continued platforming November 2025. The “pie fallacy” rhetoric makes it impossible to see how platforming fraud harms the ecosystem - you’re just a “pessimist” who thinks there’s a “fixed pie” if you suggest there are tradeoffs.

The application to this case:

  • CFPB permanent ban = “pessimists” who don’t understand financial innovation
  • 140,000+ consumer victims, $40M restitution = collateral damage in wealth creation
  • Wrongful termination of employees who questioned practices = removing people who lack “optimism”
  • Federal whistleblower retaliation = protecting the “wealth creators” from “anti-tech bias”
  • Photoshopped metrics = “growth mindset” (fake it till you make it)

Paul’s essay insists startups create wealth by “doing something people want.” But LendUp customers wanted fair lending - got “repeatedly lying to consumers” instead. Puzzle employees wanted ethical workplace - got retaliation for questioning OpenAI API costs. Pattern recognition: the ideology provides perfect cover because it makes harm illegible as anything other than “not understanding wealth creation.”

The network’s consistent deployment: From Paul (YC founder, 2004) → Marc (a16z, 2023) → Sasha (YC alum, “tech optimist”). Same language, same function: wealth creation rhetoric that dismisses 140,000+ victims as people who don’t understand economics.

October 4, 2023 (12 days before Marc’s manifesto): Sasha tweets from Kapor Capital’s founder summit about hiring practices:

“Q: How do you think about building teams? Before: pedigree school and company. I justified it as ‘they have seen great.’ Now I hire for optimism + growth mindset. Not what you saw, but what you accomplished (or overcame).”

The pattern: “Optimism” as a hiring criterion while running systematic fraud.

  • May 27, 2023 (27 days before my termination): Commenting on startup bankruptcies: “Sad but true. Founders and VCs pushed unsustainable growth at the expense of startups who could have been great, but not at that scale… Not saying ponzi, just saying over optimism.”
  • March 8, 2023: “I wish optimism was also click bait. We need more people like @ltse and their incredible leadership… whose audacious optimism of tech is just so inspiring.”
  • March 12-13, 2023 (SVB crisis): Praising Weekend Briefing newsletter for “optimism, curiosity and interesting stories… opens up your mind to new stories, interesting insights, and optimism.”
  • April 23, 2023 (37 days before my termination): “The other thing is there used to be journalists who loved tech, venture and created optimism and excitement. Not so much the case anymore.”
  • October 18, 2023: Responding to TechCrunch criticism: “We need the original TC back - optimism, excitement and a better future.”
  • February 14, 2024: About accounting software taking $50M and 7 years: “That said, I have some optimism for the future…” (links to General Catalyst article about building Puzzle)
  • February 24, 2025: Inviting AI commerce founder to “(tech optimist) Turpentine Finance podcast”
  • May 24, 2025: “Tech optimism is lacking, and I hope they [TBPN] broaden their reach”
  • May 26, 2025: About TBPN/Turpentine success: “It’s also the tone of optimism. We have talked many times about the lack of tech optimism in the press. This scratches that itch in a way others haven’t in maybe a decade.”

What “tech optimism” concealed:

  • CFPB permanent ban for “repeatedly lying to consumers”
  • 140,000+ victims, $40M restitution
  • Wrongful termination of multiple employees who questioned practices
  • Retaliation against federal whistleblower
  • Photoshopped metrics (October 2025, discovered months after the May 2025 “tech optimism is lacking” tweet)
  • Four cease-and-desist letters threatening criminal prosecution
  • Surveillance of former employees
  • Active CFPB Order violations through Mission Lane advisory role and Puzzle’s credit card integration affiliate program

The irony: Marc’s manifesto declares “We are being lied to” about technology. The lie is the manifesto itself when adopted by fraudsters. “Optimism” becomes the cover story for predation. “Growth mindset” means “won’t question photoshopped metrics.” “Abundance” rhetoric masks 140,000+ victims of lending fraud.

The hiring criterion: “I hire for optimism + growth mindset” (October 4, 2023) means hiring people who won’t notice or report federal violations. I raised concerns about OpenAI API costs and data privacy (May 2023). I was terminated 28 days later. Another employee questioned AI integration, was let go, card canceled. Junior developer worked weekends on GPT hackathon, was told by CTO “he shouldn’t have won,” then let go. “Optimism” as hiring filter removed the people who would document fraud.

The legitimating function: Every use of “optimism” performs innocence. If you’re optimistic about technology and the future, you can’t be running systematic consumer fraud. If you celebrate “audacious optimism,” you can’t be retaliating against whistleblowers. The language does ideological work: it aligns the speaker with progress, abundance, and the future, making skepticism seem pessimistic, backwards, anti-growth.

The network effect: a16z (Marc’s firm) acquired Turpentine Media knowing Erik Torenberg had received fraud documentation 15 months prior (January 2024). Now a16z Studios distributes “tech optimist” Turpentine Finance podcast hosted by CFPB-banned CEO. The “optimism” narrative circulates through the network, legitimating each node. Marc writes the manifesto. Sasha adopts the framing. Turpentine provides the platform. a16z acquires the distribution. Everyone performs optimism while systematically enabling fraud.

Pattern recognition works in reverse: The same language that identifies genuine builders (“optimism,” “growth mindset,” “abundance”) also provides perfect cover for fraudsters. When everyone is required to perform optimism, criticism becomes illegible as anything other than pessimism, resentment, or “anti-tech bias.”

The cost: 140,000+ consumer victims, multiple terminated employees carrying trauma, and federal enforcement orders treated as PR problems to be spun with optimistic framing rather than actual harms requiring accountability.

“Tech optimism” isn’t a personality trait. It’s a loyalty test. It’s the ideological commitment that prevents you from noticing when the numbers don’t add up, when customers are being harmed, when federal orders are being violated. Optimism, weaponized, becomes the mechanism through which networks protect their own.

Founder Mode and Schlep Blindness: Ideology as Immunity

September 2024: Paul Graham publishes “Founder Mode” about Brian Chesky’s talk at YC. The argument: conventional advice (“hire good people and give them room to do their jobs”) doesn’t work for founders. There are “two different ways to run a company: founder mode and manager mode.” Founders can do things managers can’t. The essay warns that managers are “professional fakers” who will “drive the company into the ground.”

The ideological work: if you’re a founder, normal rules don’t apply. “Skip-level” meetings become acceptable. Steve Jobs ran annual retreats for the 100 most important people at Apple—not the 100 highest on the org chart. Founders “groping their way toward” this mode were “regarded by many as eccentric or worse.” Translation: founder rule-breaking isn’t misconduct, it’s innovation.

Paul’s prediction: “once we figure out what [founder mode] is, we’ll find that a number of individual founders were already most of the way there—except that in doing what they did they were regarded by many as eccentric or worse.”

The permission structure this creates:

  • Surveilling employees = founder mode engagement, not paranoia
  • Removing equity days after attempted exercise = founder discretion, not theft
  • Four C&Ds threatening criminal prosecution = protecting the company, not intimidation
  • Editing Wikipedia to remove fraud documentation = controlling narrative, not evidence tampering
  • Family-level surveillance (Jennifer viewing profile on termination day + during summer 2023 publishing period) = founder vigilance, not harassment

January 2012: Paul Graham’s “Schlep Blindness” argues that people unconsciously avoid hard, unpleasant tasks (schleps). “Your unconscious won’t even let you see ideas that involve painful schleps.” The essay celebrates Stripe for solving the “painful” problem of payment processing—something “thousands of people must have known about” but avoided because “their unconscious mind shrank from the complications involved.”

The ideological work: if you avoid hard problems, you have “schlep blindness.” Real founders embrace schleps. Criticism of founder behavior = you just don’t understand that building is hard.

Application to this case:

  • CFPB permanent ban = schlep (regulatory compliance is hard)
  • 140,000+ consumer victims = schlep (fixing lending practices is complicated)
  • Federal whistleblower retaliation = schlep (dealing with former employees is unpleasant)
  • Equity deletion, surveillance, C&Ds = schleps (defending the company requires hard things)

The essays provide ideological cover: if you’re a founder doing hard things in founder mode, criticism from non-founders (employees, regulators, journalists) just means they don’t understand what building requires.

Sasha’s explicit deployment of this framework:

December 7, 2023: Sasha tweets in response to someone complaining about QuickBooks (“Fuck QuickBooks… It’s a seriously dog shit piece of software”):

“If @paulg’s essay Schlep Blindness had a tweet, it would be this. If you haven’t read it, here it is: http://paulgraham.com/schlep.html”

Timeline context:

  • August 11, 2023: First C&D sent (threatening criminal prosecution)
  • August-September 2023: Equity deleted days after attempted exercise
  • November 14, 2023: $30M emergency funding round
  • December 7, 2023: Public deployment of “schlep blindness” framing

He’s using Paul Graham’s ideological framework to position Puzzle as taking on the “schlep” of competing with QuickBooks—four months after sending me legal threats, three months after deleting my equity, three weeks after emergency funding. The “schlep” isn’t just competing with QuickBooks. The schleps are: CFPB ban compliance, wrongful termination consequences, equity theft, federal whistleblower retaliation, photoshopped metrics. All framed as “hard problems” that real founders embrace.

Sasha also appears on the “Tech Finance” podcast discussing B2B fintech and AI, referencing these essays and Paul Graham’s concepts frequently. The framing: he’s a founder who understands schleps, operates in founder mode, and is building with optimism despite people who don’t understand wealth creation.

The network’s use of this ideology:

  • Paul Graham (YC founder): writes essays establishing founders as special category exempt from normal rules
  • Marc Andreessen (a16z): publishes “Techno-Optimist Manifesto” declaring critics are lying about technology
  • Sasha Orloff (YC alum, a16z portfolio): adopts “tech optimist” framing, references schlep blindness, operates in self-described founder mode
  • Brian Chesky (Airbnb CEO, YC alum): gives talk that becomes “Founder Mode” essay
  • YC + a16z networks: received fraud documentation → continued platforming → ideology makes it impossible to see harm

The result: When founders are ideologically constructed as wealth creators operating in special mode that regular people can’t understand, federal enforcement becomes just another schlep. CFPB bans become evidence of regulatory “schlep blindness.” Whistleblower complaints become proof that non-founders don’t understand what building requires. The ideology transforms accountability into incomprehension.

Pattern: Every ideological essay (pie fallacy, schlep blindness, founder mode, techno-optimism) does the same work—makes founder harm illegible as anything other than people not understanding innovation. 140,000+ consumer victims, $40M in illegal fees, multiple terminated employees, federal retaliation—all become “schleps” that pessimists with “pie fallacy” thinking want to prevent because they don’t understand “founder mode.”

The cost: ideology that prevents networks from seeing fraud when committed by their own. Paul writes essays that provide cover. Marc publishes manifestos. Sasha adopts the language. Networks receive documentation and continue platforming. The ideology works perfectly—not because it’s true, but because it makes truth-telling look like misunderstanding.

Marc’s CFPB Campaign: From Ideology to Political Action

The ideological framework doesn’t stop at essays and manifestos. It becomes political action to eliminate the enforcement apparatus itself.

November 26, 2024: Marc Andreessen appears on Joe Rogan’s podcast (Episode #2234) to attack the CFPB—the federal agency that permanently banned a16z portfolio company LendUp and documented 140,000+ victims.

Marc’s framing (full documentation here):

“We have this thing called the Consumer Finance Protection Bureau, CFPB, which is sort of Elizabeth Warren’s personal agency that she gets to control… Basically, terrorize financial institutions, prevent new competition, new startups that want to compete with the big banks.”

Timeline of self-interest:

  • June 2013: a16z invests in LendUp (“aiming to disrupt payday lending”)
  • 2016-2020: Multiple CFPB violations (repeatedly lying to consumers)
  • December 2021: CFPB permanent ban + $40M restitution for 140,000+ victims
  • November 2024: Marc goes on Joe Rogan to attack CFPB (~3 years after ban)

The ideological work:

  1. “Terrorize financial institutions” = CFPB enforcement (consumer protection) reframed as persecution
  2. “Prevent new competition” = stopping predatory lending becomes preventing innovation
  3. “Elizabeth Warren’s personal agency” = delegitimizing independent federal agency
  4. “Debanking” narrative = conflating crypto banking issues (actually FDIC/OCC/Fed) with consumer protection

What Marc can’t acknowledge: The CFPB enforcement against LendUp was legitimate. Admitting that would mean admitting a16z invested in fraud. Instead, the entire agency must be delegitimized.

The progression:

  1. 2004-2024: Paul writes essays (pie fallacy, schlep blindness, founder mode) establishing founders as special category
  2. October 2023: Marc publishes “Techno-Optimist Manifesto” declaring “We are being lied to” about technology
  3. November 2024: Marc attacks CFPB on largest podcast platform (Joe Rogan, 11M+ YouTube subscribers)
  4. Political coordination: Trump administration alignment, broader Silicon Valley effort to eliminate agency

The pattern becomes clear:

  • Ideology (techno-optimism, founder mode, schlep blindness) → makes harm invisible
  • Network enablement (YC/a16z receive documentation, continue platforming) → protects fraudsters
  • Political action (attack regulatory agencies) → eliminates enforcement apparatus itself

Marc’s CFPB campaign isn’t separate from the ideological framework—it’s the logical endpoint. When ideology makes fraud illegible (it’s just “schleps” and “founder mode”), and networks protect their own (27+ months notification → continued platforming), the remaining obstacle is the enforcement apparatus. So the apparatus must be delegitimized and eliminated.

The stakes: If successful, this doesn’t just protect past fraud (LendUp, Puzzle). It prevents future enforcement. CFPB gone = no accountability for next generation of predatory fintech. The ideology (“techno-optimism”) provides cover. The network (YC/a16z) provides protection. The political campaign (attack CFPB) eliminates consequences.

As documented by Nic Carter (updated December 1, 2024):

“Update 12/01/24: This story has been updated to reflect that the CFPB has indeed brought an enforcement action against an a16z portfolio company, LendUp.”

The enforcement Marc frames as “terrorizing financial institutions” includes:

  • Permanent shutdown of a16z-backed LendUp
  • $40.5M restitution order
  • 140,000+ documented victims
  • Ban on CEO Sasha Orloff from lending industry
  • Federal record establishing “repeatedly lied to consumers”

The irony: Marc’s manifesto declares “We are being lied to” about technology. But the CFPB documented who was actually lying—and it was the a16z portfolio company that “repeatedly lied to consumers” for years.

Techno-optimism’s final form: Not just ideology that makes fraud invisible, not just networks that protect fraudsters, but political campaigns to eliminate the federal agencies that document harm. Paul writes the essays. Marc publishes the manifesto and launches the political attack. Sasha adopts the language. YC/a16z continue platforming despite documentation. The ideology comes full circle—from “pie fallacy” theory (criticism = economic ignorance) to political action (eliminate the enforcement apparatus).

The cost if this succeeds: no accountability for 140,000+ LendUp victims, no protection for next generation of fintech consumers, and systematic elimination of the institutional capacity to document fraud when committed by “wealth creators” operating in “founder mode.”

Public Statements on Fraud While Committing Fraud

Throughout the period of active CFPB ban violations, photoshopped metrics, and federal whistleblower retaliation, Sasha Orloff made public statements lecturing founders about fraud, compliance, and integrity.

September 26, 2024 (tweet): Reacting to FTX sentencing:

“Go in with a failure attitude, you’ll get a failure outcome.

You can’t expect to fix problems later or wing it as you go. Just yesterday, the FTX fallout led to a prison sentence. Ignorance is not bliss with compliance.

Founders who don’t prioritize responsibilities—managing compliance, building trust with stakeholders, making key decisions—are setting themselves up for trouble.

Success demands proactive effort from day one. No shortcuts.”

September 30, 2025 (tweet, evidence-134):

“A reminder that lying your financials or due diligence materials is not a “whoopsies” kind of mistake.”

Quote-tweeting news of Frank founder Charlie Javice sentenced to 7 years in prison for defrauding JPMorgan Chase.

What Sasha was doing while posting this statement (September 2025):

  • Operating Partner Rewards affiliate program marketing credit products (Brex, Ramp, Mercury, Gusto) in violation of CFPB ban
  • Concealing CFPB ban from investors, partners, customers (no public disclosure)
  • Subject to CFPB permanent order for “repeatedly lying to consumers”
  • One month before photoshopped metrics campaign (Oct 2025: 3 likes → 12,362)
  • Two months before 2nd C&D (Nov 11, 2025), 3rd C&D (Nov 20, 2025), and Wikipedia editing (Nov 26-27, 2025)

Sasha Orloff tweet about lying in financialsSeptember 30, 2025: “A reminder that lying your financials or due diligence materials is not a ‘whoopsies’ kind of mistake.” Posted by CEO who would photoshop social media metrics 1 month later (Oct 2025: 3 → 12,362), never disclosed CFPB ban to investors/partners, operates credit marketing affiliate program in violation of federal order, and is subject to permanent CFPB order for “repeatedly lying to consumers.”

Rippling Podcast: “How I Screwed This Up” - Complete LendUp Narrative Omission

Watch: “How I Screwed This Up: Sasha Orloff (LendUp & Puzzle)” - Rippling

Published April 29, 2025. 414 views. Sasha discusses his “mistakes” at LendUp, framing the problem as accounting software frustrations while completely omitting the CFPB violations, consumer harm, and illegal lending operation.

Key quotes from transcript:

On compliance and following the law:

“If you’re building a company and you’re not doing the things that are required by law, what else are you not doing? […] If I wasn’t paying attention to the things that you need to do as a business, what else was I kind of ignoring or sidestepping?”

“there’s actually a lot of personal liability as founders”

“Ignorance is not bliss with compliance”

On building LendUp:

“Lendup was an alternative to payday lending about 15 years ago now [video captions correct to 2012]. We were the first place on a mobile phone to be able to borrow money. We would underwrite you, ask you some questions, pioneered the idea of cash flow underwriting”

What the narrative omits entirely:

  • CFPB First Violation (2016): $6.3M penalty, 50,000+ consumers harmed
  • CFPB Second Violation (2018): Additional violations, ongoing deceptive practices
  • CFPB Third Violation (2020): $500K penalty, “continue to find that LendUp violated federal consumer financial protection law”
  • CFPB Permanent Ban (2021): $40M restitution to 140,000+ consumers, permanent prohibition on consumer lending, found LendUp “repeatedly lied to consumers”

The “screw up” he describes:

The entire podcast frames the problem as:

  • Almost losing a VC term sheet because he didn’t file taxes early enough
  • Accountants taking too long to answer board questions
  • Finance team writing down questions instead of having real-time answers
  • Frustration with accounting software being retrospective instead of real-time

Direct quotes showing the narrative manipulation:

“The real problems came when I almost lost a term sheet from a venture capitalist that we were really excited about having invest in the company. when they explained it to me as Sasha, if you’re building a company and you’re not doing the things that are required by law, what else are you not doing?”

This positions him as someone who learns from compliance failures - but never mentions the actual compliance failures (three CFPB violations and permanent ban).

“accounting isn’t designed to help you build build your business. It’s designed to have this very specific summary static report of the history of your business for the IRS to determine taxes and for your investors to help determine what the value is of the company.”

Frames the problem as accounting limitations, not the illegal business model.

References Paul Graham’s “Schlep Blindness”:

“And so we sometimes refer to that in from Paul Graham’s essay is schle blindness. Like there’s a problem right in front of your face. A lot of people are experiencing it and we should just solve it. We don’t accept that today is the best way. We go fix it and we make it better. And that’s the reason why I’m a founder and that’s why I love Silicon Valley.”

This is the same ideological framework documented in Techno-Optimism as Legitimating Narrative - using Paul Graham’s essays as cover for ignoring regulatory violations. The “problem right in front of your face” wasn’t accounting software - it was “repeatedly lying to consumers” per the CFPB.

The irony:

  • Talks about “things that are required by law” while violating consumer protection law for 5+ years
  • Talks about “personal liability as founders” while avoiding personal liability for $46.8M in CFPB penalties
  • Talks about “paying attention to things you need to do as a business” while operating illegal lending operation
  • Frames LendUp failure as accounting software problem when actual problem was fraud and deceptive practices
  • Uses Rippling platform (company that actually helps with compliance) to tell narrative that omits his own compliance violations
  • References “schlep blindness” essay that’s part of ideological cover enabling fraud networks to avoid accountability

What this demonstrates:

The podcast is narrative rehabilitation. By appearing on a series called “How I Screwed This Up” and talking about minor accounting oversights (not filing taxes early enough, board meeting prep), Sasha positions himself as a self-aware founder who learns from mistakes. The performance of accountability obscures the actual violations: harming 140,000+ consumers through illegal lending practices, “repeatedly lying to consumers,” three CFPB violations, permanent ban.

He turned $46.8M in CFPB penalties and 140,000+ harmed consumers into a story about accounting software frustrations and a “pivot” to building Puzzle. That’s not learning from mistakes - that’s turning fraud into a founder story.

Timeline context: Podcast published during period when:

  • Operating Partner Rewards in CFPB ban violation
  • Concealing CFPB ban from investors, partners, customers
  • Planning to photoshop metrics (Oct 2025)
  • Two months before C&Ds, Wikipedia editing, SEC complaints (Nov 2025)

Someone who is CFPB-banned for “repeatedly lying to consumers” went on a podcast to tell a story about LendUp that omits the lying, the consumers, the ban, the violations, and the harm - while lecturing about compliance, following the law, and personal liability.

The pattern:

  1. Rippling podcast: entire LendUp narrative omitting CFPB violations - appeared on “How I Screwed This Up” to frame LendUp failure as accounting software problem, never mentions three CFPB violations, permanent ban, 140K+ harmed consumers, or “repeatedly lying to consumers” finding; lectures about compliance and “things required by law” while omitting own violations; uses Paul Graham’s “schlep blindness” framework (documented ideological cover) to position fraud as innovation opportunity

  2. “Ignorance is not bliss with compliance” - while operating Partner Rewards in violation of CFPB Section I.b (receiving remuneration from credit companies) and Section I.c (performing marketing services for credit products)

  3. “Managing compliance, building trust with stakeholders” - while concealing CFPB ban from investors, partners, customers, and employees (zero public disclosure)

  4. “No shortcuts” - while photoshopping metrics, using false credentials on careers page, operating credit affiliate program banned by federal order

  5. “Lying your financials… is not a ‘whoopsies’ kind of mistake” - while CFPB found LendUp “repeatedly lied to consumers,” while photoshopping social media metrics, while concealing material facts (CFPB ban, Mission Lane asset acquisition relationship, Insights Servicing undisclosed entity)

The hypocrisy is the point: Public statements about compliance and integrity function as reputation laundering. By positioning himself as someone who takes compliance seriously, who lectures about fraud consequences, who warns about “no shortcuts,” who tells founder story about learning from “mistakes” - Sasha performs the opposite of his documented behavior. The performance makes the reality harder to see.

Timeline context:

  • Rippling podcast: Published April 29, 2025, during period of active CFPB ban violations (Partner Rewards), six months before photoshopping metrics (Oct 2025), seven months before C&Ds/Wikipedia/SEC complaints (Nov 2025)
  • Sept 26, 2024 tweet: 13 months before C&Ds/Wikipedia (Nov 2025)
  • Sept 30, 2025 tweet: 1 month before photoshopped metrics (Oct 2025), 2 months before C&Ds/Wikipedia/SEC complaints (Nov 2025)

Throughout this entire period (podcast through Nov 2025), continuing to operate Partner Rewards in CFPB ban violation while:

  • Telling founder story that omits CFPB violations entirely
  • Publicly lecturing about compliance, trust, and not lying in due diligence materials
  • Using Paul Graham’s ideological framework (“schlep blindness”) to position regulatory violations as innovation opportunities

Someone who is CFPB-banned for “repeatedly lying to consumers,” who photoshops metrics, who operates credit marketing in violation of federal ban, who sends C&Ds threatening whistleblowers with criminal prosecution:

  • Appears on “How I Screwed This Up” podcast to tell LendUp story without mentioning the fraud
  • Lectures other founders about compliance and the consequences of lying
  • Turns $46.8M in CFPB penalties and 140K+ harmed consumers into a story about accounting software frustrations

The ideology (“techno-optimism,” “founder mode,” “no shortcuts,” “schlep blindness”) becomes armor. As long as you perform the right values publicly, frame fraud as “mistakes” you learned from, and use the correct ideological language, the pattern can continue privately. Charlie Javice got 7 years. Sasha tweets about it as a cautionary tale while violating his own CFPB order and telling podcast audiences he’s learned from his “mistakes” at LendUp.

Appendix: Primary Source Documents

This section provides direct access to primary source materials referenced throughout the documentation. All documents are preserved for evidentiary purposes in regulatory and legal proceedings.

Rolling Loud v. Ahead Financials LLC / Fairfax Studios, Inc.

LendUp Corporate Documents

  • Available upon request
    • Golden parachute payments to executives
    • $29M sale after raising $150M+ in equity
    • $0 returned to shareholders
    • 2-day review period (December 17-19, 2018)
    • “Interested directors” with conflicts of interest explicitly acknowledged
  • Mission Lane Holdings LLC - OpenCorporates - Incorporated November 15, 2018, Delaware
    • Incorporated one month before LendUp asset sale (December 2018)
    • Demonstrates pre-positioning of acquisition vehicle
    • Delaware corporation #7159818

Federal Regulatory Documents

CFPB (Consumer Financial Protection Bureau) - LendUp

FTC (Federal Trade Commission) - Credit Karma

  • FTC Credit Karma Settlement (September 2022) (PDF)
    • $3M penalty for deceptive “pre-approved” credit offers
    • 497,425 consumers eligible for refunds
    • Conscious deception documented: Complaint documents Credit Karma conducted A/B testing to deliberately optimize false “certainty” claims, knowing they misled consumers (Paragraph 14-16)
    • Measurable harm: Almost 1/3 of “pre-approved” applicants denied; hard credit inquiries damaged credit scores
    • “Dark patterns” enforcement: Settlement explicitly preserves records of “market, behavioral, or psychological research, or user, customer, or usability testing, including any A/B testing” - official FTC recognition of weaponized UX design
    • Scale: 2,500+ data points per member across entire user base
    • Inadequate penalty: $6.03 per victim for systematic A/B tested deception
    • Continued partnership with Mission Lane (LendUp acquisition vehicle) despite settlement

SEC Whistleblower Complaints

  • Submission #17628-500-136-464 (Securities fraud, November 11, 2025)
  • Submission #17629-039-523-592 (Retaliation, November 11, 2025)
  • Submission #17630-611-119-304 (Credit Karma funnel, November 13, 2025)
  • Submission #16917-772-564-515 (Supplemental, ongoing criminal enterprise)
  • Applied for whistleblower award eligibility under 15 U.S.C. § 78u-6

FBI Warnings & National Security

FBI Boston Division - Skolkovo Foundation Warning (April 2014)

  • FBI Warns Boston Companies About Russian Venture Capital - Boston Business Journal, April 24, 2014 | PDF archive
    • Warning about Russian government-funded Skolkovo Foundation
    • “True motives… is to gain access to classified, sensitive and emerging technology”
    • “May be a means for the Russian government to access our nation’s sensitive or classified research, development facilities and dual-use technologies with military and commercial applications”
    • Context: This FBI warning was public knowledge from 2014 onward, years before Dasha Shunina began building U.S. tech infrastructure while working for Skolkovo Foundation (2016-2023)

National Coverage - Skolkovo Foundation (May 2018)

  • Four-Year-Old FBI Column Gets National Attention Through Trump-Russia Lens - Boston Business Journal, May 13, 2018 | PDF archive
    • FBI warning resurfaced during national coverage of Skolkovo Foundation ties to Russian oligarchs
    • Demonstrates ongoing significance of FBI concerns about technology access
    • Context: Dasha Shunina worked for Skolkovo Foundation from January 2016 - June 2023, during this period of heightened national security scrutiny

Skolkovo Foundation: Comprehensive Documentary Analysis (September 2025)

  • Russia’s Failed Silicon Valley - Full Transcript - Megaprojects, published September 7, 2025 (169K views) | Full transcript archive
    • Timing Significance: Published September 2025, two years after Dasha left Skolkovo (June 2023), documenting current state as of 2025
    • Scale & Mission: $4 billion state-funded project (2009-2010) to replicate Silicon Valley, attract foreign companies
    • Corruption: $700M+ unaccounted for (2010-2012), fraudulent grants, bogus leases, 200+ managers disciplined/dismissed
    • Foreign Company Recruitment: 1000+ startups registered by 2015, MIT partnership (Skoltech), Cisco, Boeing, IBM, SAP
    • FBI Warnings Validated: “Concerns about intellectual property leaks, data security, and the potential for dual use technologies, especially in areas like AI, robotics, and aerospace”
    • Military Pivot (2014-present): After Crimea annexation, “more resources were funneled toward technologies like drones, cyber security, and AI applications with military relevance”
    • Ukraine War Acceleration: “Founders who had once pitched apps or enterprise software were now repackaging their products for government clients. The line between civilian innovation and military R&D was now very blurry.”
    • Putin Directive: “Putin has even publicly called on Russian firms to strangle Western platforms like Microsoft and Zoom. And he wasn’t using his words lightly. He wants those foreign companies gone.”
    • Current State (as of 2025): “Russia’s digital environment is currently one of the most restricted in the world. VPNs are harder to access. Even search behavior can trigger legal action. What was once a hub for global facing innovation now operates in a closed system shaped by censorship, regulation, and strategic containment.”
    • Pattern Documentation: Validates FBI 2014 warnings, demonstrates scale of technology recruitment operation (200 companies from 50 countries per Dasha’s own podcast), and confirms military dual-use concerns
    • Context: Dasha Shunina worked for Skolkovo 2016-2023, founding Women Tech Meetup (10K+ founders) in December 2022—six months BEFORE leaving—WHILE at entity operating under this military pivot. She then layered additional access infrastructure AFTER leaving: YouTube (Aug 2023), Forbes (Nov 2023), Puzzle GTM (Aug 2024). Video published September 2025 = current confirmation that Skolkovo continues operating as “extension of national policy” in “most restricted digital environment in the world,” demonstrating she built U.S. infrastructure while at entity described as operating under military directive with dual-use technology concerns

Podcasts & Interviews

Daria Shunina - Skolkovo Foundation Role

  • Legal Tech in Russia - Reinventing Professionals Podcast (July 2021) | Source | Full transcript
    • In her own words: “I’m the person responsible for attracting all foreign companies to the Russian innovative ecosystem”
    • Describes leading Skolkovo Soft Landing Program
    • 200 companies recruited from 50 countries
    • 30 companies established operations in Russia
    • Recorded while still “Daria Shunina” (before name change to “Dasha”)
    • Timeline significance: Recorded July 2021 DURING her Skolkovo employment while she was simultaneously building U.S. tech access infrastructure (Women Tech Meetup planning, Forbes contributor path, YouTube platform)
    • FBI context: This interview occurred 7 years after FBI’s public warning (April 2014) about Skolkovo Foundation’s “true motives” to access classified U.S. technology

Dasha Shunina - Talks with Dasha Interview with Sasha Orloff (November 12, 2024)

  • Talks with Dasha YouTube Channel - Uploaded November 12, 2024
    • Validates false credentials (“$1B+ raised,” “unicorn founder”) without challenge
    • Ambiguous employment disclosure: “happy to be part of [Puzzle] right now too”
    • No disclosure of Puzzle employment on YouTube channel or Forbes contributor profile
    • Infomercial format disguised as journalism

Archived Web Content & Progressive Sanitization

Forbes Contributor Profile - Daria/Dasha Shunina

  • Current Forbes Bio - URL preserves “dariashunina” registration
  • Archived Forbes Bio (December 2023)
    • Progressive sanitization documented via Wayback Machine
    • December 2023: “innovation centers, development institutions, and venture funds”
    • Current: Removed “innovation centers” and “development institutions”
    • NO mention of Skolkovo Foundation (7+ year role) in any version

LinkedIn Evidence - Name Change Documentation

Women Tech Meetup - Unincorporated Operation

  • $100 “Who Runs The World?” Hoodie
    • Not incorporated as legal entity (OpenCorporates search: no results)
    • Payment to “Daria Shunina” despite public name change to “Dasha”
    • Monetizing feminist iconography for customer acquisition

News Articles & TechCrunch Coverage

TechCrunch LendUp Promotional Coverage (2012-2020)

  • Multiple articles promoting LendUp as “disrupting payday loans”
  • December 2020: Ross Fubini Profile - Connie Loizos
    • Describes LendUp as “split into two businesses” (euphemism for $29M fire sale, $0 to shareholders)
    • No mention of CFPB violations or consumer harm
    • Reporter Connie Loizos notified of fraud documentation August 2023

Skolkovo Foundation Coverage

Political Analysis & Financial Ties

Netanyahu Financial Backing - LendUp Founders

  • Netanyahu: He Came, He Saw, He Conquered. The Power of Israel over the United States - James Petras (March 8, 2015)
    • Explicitly identifies Sasha Orloff and Jacob Rosenberg as financial backers of Benjamin Netanyahu
    • Published one year before LendUp’s first CFPB violation (March 2015 vs. September 2016)
    • Documents predatory lending pattern: “extortionate rates (between 1400 and 4000%)”
    • Context: Netanyahu’s March 2015 speech to US Congress that bypassed Obama administration
    • Quote: “They used part of their ill-gotten gains to ease their consciences by donating millions to Israeli and US jewish causes. Being generous to Israel provides a sort of perverse forgiveness for screwing millions of Americans.”
    • Establishes LendUp founders’ political financial ties were publicly documented before federal enforcement

Pagaya Technologies / Theorem Technology - Israeli Fintech Ecosystem Integration

  • SEC Form F-3 Registration Statement - Pagaya Technologies Ltd. (November 21, 2024)
    • Document: 0000950103-24-016634 (137 pages)
    • Sasha Orloff signature: October 15, 2024, page documenting registered stockholder status
    • Context: Pagaya Technologies acquisition of Theorem Technology, Inc.
    • Deal: Cash + 504,440 Pagaya Class A shares distributed to Theorem stockholders
    • Theorem Technology, Inc.: Silicon Valley-based institutional asset manager focused exclusively on consumer credit space
    • Founded: 2014, Y Combinator Winter 2014 batch (YC W2014)
    • Co-investors documented in SEC filing:
      • Y Combinator W2014, LLC (Kirsty Nathoo, CFO/Partner signature)
      • Sasha Orloff (LendUp CEO, Puzzle CEO)
      • Altman Family LLC (Carmen Beckwith signature) - Sam Altman’s personal family investment vehicle
        • Confirmed by NY Post investigation (November 30, 2023): Jennifer Serralta identified as COO of Sam Altman’s family office, managed his $85M real estate purchases through LLCs
        • Same Jennifer Serralta signed Theorem Technology SEC documents alongside Carmen Beckwith for Altman Family LLC
        • Sam Altman was YC President (2014-2019) when his family LLC invested in Theorem Technology (2014)
      • Two Sigma Ventures I, LLC (Riz Thakir signature)
    • Timeline significance: Documents Sasha’s continued involvement in consumer credit ecosystem (2014-2024) despite CFPB permanent ban from consumer lending operations (December 2021)
    • Pagaya Technologies: Israeli AI-powered lending and asset management platform, publicly traded (NASDAQ: PGY), headquarters in Tel Aviv, Israel + New York, NY
    • Pattern: Netanyahu political backing (2015) → Theorem investment (2014-2024) → Pagaya stockholder (2024) demonstrates decade-long Israeli fintech ecosystem integration
    • Regulatory evasion: Investment in consumer credit asset management allowed continued ecosystem involvement despite operational ban
    • YC conflict of interest: Co-investment with Y Combinator in Theorem explains YC’s continued Puzzle platforming via financial alignment rather than “founder community loyalty”

Corporate & Public Records

Mission Lane C&D Letters (August 11, 2023)

  • Dual cease-and-desist letters received same day
  • Mission Lane LLC objected to documentation of Credit Karma → Mission Lane customer funnel
  • Mission Lane NEVER employed whistleblower
  • Proves network coordination and consciousness that documentation is damaging
  • Credit Karma continues promoting Mission Lane (4.7/5 stars, 33.99% APR) as of November 2025

Puzzle Financial C&D Letter & SEC Response (November 11, 2025)

  • 3:33 AM ET: SEC complaint filed (Submission #17628-500-136-464)
  • 6:02 PM ET: Orrick Herrington & Sutcliffe LLP C&D received (14.5 hours later)
  • 6:05 PM ET: Response citing 15 U.S.C. § 78u-6 whistleblower protection (3 minutes)
  • 6:32 PM ET: Supplemental SEC complaint filed documenting retaliation (30 minutes)

A Note on Operational Security

I didn’t know I was building infrastructure for an operation while I was there.

I thought I was building accounting software for startups.

I questioned technical decisions that didn’t make sense (why OpenAI instead of simple ML?).

I researched leadership backgrounds when those questions got uncomfortable responses.

I was terminated after questioning the repeat founder narrative.

Over the next 28 months, the full pattern emerged through systematic documentation:

  • Network access (Women Tech Meetup, 10K+ founders, built while at Skolkovo Foundation)
  • Credibility laundering (Forbes contributor without disclosing Skolkovo background)
  • Data collection (Puzzle Financial processing startup financials)
  • Legitimacy layer (Y Combinator backing, Sam Altman family investment)

Good operations don’t tell the engineers what they’re building.

They hire talented people to solve legitimate technical problems. And they remove people who start asking questions across domains. I was removed. Then I documented everything. This is the result.

Regulatory Recommendations

Based on the documented evidence, I am requesting the following specific regulatory and law enforcement actions:

Securities and Exchange Commission (SEC)

Requested investigations:

  • Securities fraud investigation of Puzzle Financial for photoshopped metrics (October 2025), false founder claims, and material misrepresentations to investors and customers
  • Market manipulation investigation of coordinated network suppression (YC, ODF, TechCrunch) following comprehensive fraud documentation
  • Conflict of interest investigation of co-investment structure (Altman Family LLC + YC W2014 LLC + Sasha Orloff in Theorem Technology 2014-2024) explaining continued platforming despite CFPB ban and fraud documentation
  • Securities violations investigation related to LendUp asset sale structure ($0 to shareholders after $150M+ raised, 2-day shareholder review period, interested directors with conflicting financial interests)

Requested enforcement actions:

  • Disgorgement of proceeds from fraudulent representations
  • Officer and director bars for individuals involved in systematic securities violations
  • Penalties for retaliation against SEC whistleblower (15 U.S.C. § 78u-6)

Consumer Financial Protection Bureau (CFPB)

Requested investigations:

  • CFPB Consent Order compliance investigation: Section V permanently prohibits Sasha Orloff from using LendUp customer data obtained before December 21, 2021. Recommended investigation into: (1) compliance with permanent data restrictions, (2) whether Puzzle should have been disclosed to CFPB per Paragraph 32 notification requirements, (3) data handling practices and segregation of prohibited data, (4) monitoring of Section V compliance given CEO now operates financial data platform
  • Pattern investigation across LendUp (CFPB shutdown), Ahead Financial (collapsed 2022, continued as DashAi 2022-present - AI-powered lending automation by CFPB-banned CEO), and ongoing Puzzle operations
  • Consumer harm investigation of 140,000+ LendUp victims and ongoing Puzzle customer exposure to data collection infrastructure

Requested enforcement actions:

  • Additional penalties for consent order violations
  • Expansion of consumer lending ban to financial data access given demonstrated pattern
  • Restitution for consumers harmed by pattern of deceptive practices

Federal Bureau of Investigation (FBI)

Requested investigations:

  • Counterintelligence investigation of Dasha (Daria) Shunina’s role building U.S. founder network access (Women Tech Meetup, 10K+ founders) while serving as Head of International Startups Relations at Skolkovo Foundation (2016-2023), entity explicitly warned about by FBI in 2014
  • Data exfiltration investigation of Puzzle Financial’s technical architecture (microservices without scale justification, separate Python ledger, “redundant pipeline”) as potential data collection infrastructure
  • Foreign influence investigation of systematic U.S. technology ecosystem access through Forbes contributor platform, TechCrunch conference coverage, and YC/ODF network integration while recruiting for Russian government innovation center
  • Wire fraud investigation (18 U.S.C. § 1343) related to interstate transmission of false representations for purposes of obtaining customer financial data

Requested actions:

  • Preservation orders for Puzzle Financial server infrastructure and data access logs
  • Interviews with Puzzle employees regarding data handling practices and offshore access
  • Investigation of Forbes institutional relationship with contributor who failed to disclose 7+ year role at FBI-warned entity

Federal Trade Commission (FTC)

Requested investigations:

  • Deceptive practices investigation of systematic false founder claims and credential misrepresentation across multiple platforms (LinkedIn, YC, Crunchbase, podcast introductions, media interviews)
  • Unfair business practices investigation of network coordination to suppress fraud documentation and retaliate against whistleblower
  • Pattern analysis connecting Credit Karma (FTC settlement 2022, $3M penalty), LendUp (CFPB shutdown), and Mission Lane operations through QED Investors infrastructure

State Attorneys General (California, Delaware)

Requested investigations:

  • California: Corporate fraud investigation of Puzzle Financial (Delaware corporation, California operations), false representations to California-based customers and employees
  • Delaware: Corporate governance investigation of LendUp asset sale structure (interested directors, conflicting financial interests, shareholder harm)

Department of Justice (DOJ)

Requested consideration:

  • Criminal referrals for wire fraud, securities fraud, and violations of CFPB consent order
  • Pattern prosecution demonstrating 13-year systematic fraud across multiple entities and 640,000+ victims
  • RICO investigation if coordination among entities (YC, QED, Forbes, TechCrunch, ODF) meets organized criminal enterprise threshold

These recommendations are based on documented evidence of systematic fraud, consumer harm, regulatory violations, national security concerns, and coordinated suppression of whistleblower disclosures. Complete evidence packages are available to authorized investigators.

What You Can Do

Patterns like this persist through institutional silence. Documentation breaks that pattern. Here’s how you can respond:

If You’re a Puzzle Customer or Considering Puzzle

Immediate actions:

  • Review your data access permissions - What financial data has Puzzle accessed? Export your data and consider migration to established accounting software (QuickBooks, Xero, FreshBooks)
  • Review your service agreement - What data usage rights did you grant? Are there data retention or deletion provisions?
  • Document your experience - If you’ve experienced issues (billing problems, data access concerns, service quality), document with timestamps
  • Request data deletion - Under CCPA/GDPR, you have rights to request what data they hold and demand deletion

Consider:

  • Puzzle burned $10M+ while generating $312 revenue (3,252:1 hosting-to-revenue ratio) - this is not sustainable accounting software, it’s infrastructure for something else
  • CEO is CFPB-banned from consumer lending but operates software with customer financial data access
  • Photoshopped metrics (October 2025) demonstrate willingness to fabricate customer testimonials

If You’re a Startup Founder

Due diligence red flags to watch for:

  • “Repeat founder” claims without verification - Check actual corporate records (Delaware Secretary of State, SEC filings), not just LinkedIn
  • Mission-driven language from fintech companies - LendUp promised “credit ladder,” delivered CFPB shutdown; verify actual outcomes
  • Y Combinator backing as sole due diligence - YC continued platforming Puzzle for 27+ months despite comprehensive fraud documentation and CFPB permanent ban
  • Investor conflicts of interest - QED Investors profited from both LendUp failure and Mission Lane acquisition through convertible notes and board seats
  • Network endorsements without independent verification - On Deck, Village Global, and Turpentine continued partnerships despite documentation

Questions to ask:

  • “What happened to your previous company’s equity holders?” (LendUp: $0 to shareholders after $150M+ raised)
  • “Can you provide references from former employees?” (Not just investors/partners)
  • “What is your actual revenue vs. funding?” ($312 revenue vs $10M+ burned is a warning sign)

If You’re in Tech Media

Story angles worth investigating:

  • Why did TechCrunch publish 9+ promotional LendUp articles (2012-2017) but zero Mission Lane coverage despite “unicorn” claims?
  • Why did Forbes allow 7-year Skolkovo Foundation role to remain undisclosed by contributor covering venture capital and startups?
  • How did “Top 2025 Company” designation occur one day after SEC complaints?
  • What is Y Combinator’s due diligence process if CFPB-banned CEO continued receiving platform for 27+ months?
  • Why did General Catalyst unpin Israeli tech pledge and delete Twitter replies after being called out?

Every entity documented here received notification, evidence, and opportunities to respond. Their responses (silence, suppression, celebration, retaliation) are part of the story.

If You’re an Investor

Portfolio diligence considerations:

  • Verify founder claims independently - Don’t rely on YC backing, network endorsements, or founder narratives
  • Check regulatory histories - CFPB enforcement actions, FTC settlements, state AG actions
  • Investigate co-investment networks - QED’s simultaneous board seats and convertible notes in LendUp created conflicts of interest
  • Monitor for pattern recognition - LendUp → Ahead → Puzzle represents systematic repeat behavior despite regulatory intervention

Red flags in this pattern:

  • Revenue-to-burn ratios that don’t make sense for stated business model
  • Technical architecture decisions disconnected from customer needs
  • Resistance to basic questions about previous company outcomes
  • Credential inflation across multiple platforms despite contradictory corporate records

If You’re a Regulator or Policymaker

Systemic issues this pattern reveals:

  • Accelerator accountability gap - Y Combinator faces no consequences for platforming CFPB-banned CEO for 27+ months despite notification
  • CFPB consent order loophole - Ban from “consumer lending operations” doesn’t prevent access to customer financial data through accounting software
  • Whistleblower retaliation coordination - Cease-and-desist letters received from multiple entities (Mission Lane, Puzzle) following fraud documentation
  • Foreign influence through media credentials - Forbes contributor platform used to build U.S. tech ecosystem access while recruiting for FBI-warned Russian entity
  • Network coordination against disclosure - Hacker News post suppression, TechCrunch silence, conference organizer coordination demonstrates systematic response

Policy recommendations:

  • Expand CFPB consent orders to cover financial data access, not just lending operations
  • Require accelerators to disclose due diligence practices and policies for portfolio companies with regulatory enforcement histories
  • Strengthen whistleblower protection enforcement (15 U.S.C. § 78u-6) with rapid response to retaliation
  • Require media disclosure of contributor conflicts of interest (foreign government roles, startup advisory positions)

If You’re Considering Working in Fintech

Questions to ask during interviews:

  • “What happened to employees at your previous company?” (LendUp employees received letters stating equity was worthless)
  • “How does the technical architecture serve customers?” (Puzzle’s microservices didn’t match stated product)
  • “What is the company’s actual revenue and customer base?” (Verify independently, not just founder claims)
  • “Can I speak with former employees?” (Red flag if they all signed NDAs preventing honest conversation)

Your rights:

  • You can document concerning observations contemporaneously
  • You can file whistleblower complaints if you observe fraud
  • You have legal protections against retaliation (though enforcement is inconsistent)
  • You can refuse to build infrastructure you believe serves harmful purposes

If You’re at Y Combinator, On Deck, or Similar Networks

You have a choice:

This documentation has been public since November 2025. YC was notified in August 2023. The pattern is documented with primary sources. Continued platforming at this point is not “founder community loyalty” - it’s conscious enablement.

Your professional reputation is at stake. When this pattern becomes mainstream news (and it will), your association with covering it up will be permanent record.

What due diligence processes failed? How did CFPB permanent ban + comprehensive fraud documentation + SEC whistleblower complaints result in “Top 2025 Company” designation?

For Everyone

Three actions, five minutes:

  1. Share this documentation when you see Puzzle promoted, Sasha Orloff’s “thought leadership,” or uncritical “repeat founder” celebration
  2. Ask one question when mission-driven language comes from companies with regulatory enforcement histories
  3. Demand accountability from YC, ODF, Forbes, TechCrunch - they received evidence 27+ months ago and continued platforming

Support whistleblowers. Retaliation works through isolation. Federal complaints provide legal protection, but social and professional support matters.

Silence enables patterns. Documentation breaks them.

Footnote

Document Preservation Methods:

  • Email archives with full headers and timestamps
  • Wayback Machine snapshots of web content
  • WHOIS records for domain ownership
  • Manual screenshots with device timestamps
  • Downloads of public filings and regulatory documents
  • Court records and certified judgments

How to Verify Historical Claims Using Web Archives:

Why web archives matter:

When companies scrub their websites or break old URLs (like Kapor Capital’s /founders-commitment/ → 404), web archives preserve the original content. This is critical for documenting scrubbing patterns and verifying historical claims.

The Wayback Machine (archive.org/web):

  1. For dead links (404 errors):

    • Copy the dead URL (e.g., kaporcapital.com/founders-commitment/)
    • Go to web.archive.org
    • Paste URL in search box
    • View timeline of captures to see what existed when
  2. For changed content:

    • Archive current version first: Click “Save Page Now” at archive.org
    • Compare with older captures to document changes
    • Note dates when content changed (reveals scrubbing timeline)
  3. Finding the last capture:

    • Calendar view shows all capture dates (blue circles)
    • Click on different dates to see content evolution
    • Last capture before disappearing = “smoking gun” date
  4. Example from this documentation:

    • Kapor Capital broke /founders-commitment/ URL (no redirect)
    • Last capture May 20, 2022 showed LendUp still featured
    • 5 months after CFPB permanent ban (Dec 21, 2021)
    • Proves deliberate scrubbing, not automatic portfolio maintenance

Why companies don’t implement redirects:

Normal practice:

Old URL → 301 redirect → New URL
Press coverage still works, historical accountability preserved

Scrubbing pattern:

Old URL → 404 error (no redirect)
Press coverage links break, casual discovery prevented
Only researchers think to check archives

If a company moves content without implementing redirects, ask: Why break historical links instead of preserving them? A 301 redirect takes 5 minutes to configure. The choice to let URLs 404 is deliberate access control.

Tips for documenting scrubbing:

  1. Save “before” state first: Archive pages you’re tracking before they disappear
  2. Check multiple archives: Wayback Machine + archive.today for redundancy
  3. Document the timeline: Note exact dates content changed or disappeared
  4. Compare captures: Side-by-side screenshots show what was removed
  5. Check press coverage: Old articles often link to now-broken URLs
  6. WHOIS historical data: Shows when domains changed hands or ownership

Red flags indicating deliberate scrubbing:

  • Content disappears shortly after regulatory action or negative press
  • No redirect implemented (forces links to 404)
  • Multiple related pages disappear around same time
  • Company claims content still exists but makes it hard to find
  • Pattern of removing only problematic entries while keeping others

The Kapor Capital pattern (evidence-82, evidence-83) is textbook: LendUp showcased 5 months post-ban, then systematically removed; original URL broken without redirect; Kinly showcased despite documented failures. Narrative control, not portfolio maintenance.

Evidentiary Standard: All claims in this documentation are backed by primary sources: federal regulatory documents, court records, corporate filings, archived web content, podcast recordings, and timestamped evidence. Cross-references throughout the document link specific claims to their source materials.

For Federal Investigators: Complete evidence packages including supporting documents, email correspondence, and timestamped screenshots are available upon request to authorized investigators (SEC, FBI, CFPB, state Attorneys General).


you know my magic is strong.

u know my magic is strong

Contact: [email protected]