Former NS8 CEO Faked Bank Statements to Defraud Investors of $123 Million: Due Diligence Relied Solely on Founder-Provided Reports

Who Gets Targeted

The victims were primarily Silicon Valley and East Coast venture capital firms and high-net-worth investors, including prominent institutions like Lightspeed Venture Partners and AXA Venture Partners, who collectively invested approximately $123 million. Their psychological vulnerabilities were threefold: first, the 'sector halo'—a company dedicated to anti-fraud is the last place one expects to find fraud; second, 'growth worship'—fearing missing out on triple-digit annual revenue growth, they compressed due diligence cycles; third, 'document superstition'—treating financial statements and bank statements provided directly by the founder as independent evidence without bypassing management to conduct third-party confirmations with banks and customers. Ultimately, beyond the loss of principal, some employees saw their stock options become worthless, and the company entered bankruptcy liquidation in 2020.

骗局怎么运作

• Step 1: Packaging the sector identity. NS8 claimed to be an e-commerce anti-fraud SaaS, using a technical narrative of 'helping others identify fake transactions' to gain trust. Partners and investors naturally lowered their guard, as no one assumes a company that detects fraud would systematically commit it.
• Step 2: Forging underlying vouchers. According to the SEC complaint, between January 2018 and June 2020, Rogas tampered with NS8's bank statements every month, inflating account balances and collection records before exporting and sending them to the company's finance department.
• Step 3: Industrialized production of financial statements. The finance department, unaware of the fraud, prepared financial statements based on the tampered statements, inflating revenue and customer numbers, giving the fake data the camouflage of being 'produced by internal company processes.'
• Step 4: Targeted feeding to investors. These financial reports were used in multiple funding rounds. Rogas raised over $123 million based on them, and according to the U.S. Department of Justice, he personally cashed out approximately $17.5 million, creating a 'fake data—real cash—personal pocket' closed loop.
• Step 5: The cycle of concealment and collapse. To maintain the growth narrative, new statements had to be forged monthly to cover old holes. In June 2020, the board discovered the cash depletion; Rogas subsequently admitted to the fraud in an internal meeting and resigned, and the company quickly fell into bankruptcy proceedings.

红旗信号（看到这些快跑）

• 🚩 The founder or CEO unilaterally controls the original sources of bank statements and financial data; the finance team never directly logs into online banking for verification, only processing files received downstream.
• 🚩 The high revenue growth disclosed by the company is clearly inconsistent with operational metrics such as cash flow, headcount, and cloud resource consumption; the burn rate is far lower than what the reported revenue would imply.
• 🚩 The company refuses or delays arranging direct confirmations between investors and the bank, and does not allow spot checks of real customer contracts and payment records.
• 🚩 The founder cashes out large sums from personal accounts between funding rounds and compresses due diligence timelines using excuses like confidentiality or competitive closing pressures.
• 🚩 The absence of an auditor or the use of an obscure, small firm that fails to issue a standard unqualified opinion for years, preventing the board from obtaining raw financial data not handled by management.

真实案例

• On September 17, 2020, the U.S. Department of Justice and the SEC took synchronized action: Rogas was arrested at Las Vegas airport, charged with securities fraud and wire fraud. Official reports stated he used fake financial data to raise over $123 million for NS8, with personal gains of approximately $17.5 million.
• In November 2021, Rogas pleaded guilty to securities fraud charges. In 2023, a federal court sentenced him to prison and ordered restitution. The SEC civil lawsuit was settled with another executive (excluding the co-founder) on a 'neither admit nor deny' basis.
• In August 2026, the Delaware Bankruptcy Court made a key determination regarding the bankruptcy trustee's claims in Drivetrain v. Rogas. According to Law360, the judge ruled that Rogas owes at least $68 million. In the same month, the Second Circuit Court of Appeals issued a ruling on the SEC v. Rogas case (Case No. 25-35), with accountability proceedings continuing to this day.
• In September 2020, the U.S. Department of Justice and the SEC took synchronized action: The NS8 co-founder and former CEO was arrested in Las Vegas, charged with securities fraud and wire fraud. Official reports stated he used fake bank statements and revenue records to raise approximately $123 million in a June 2020 Series A round, with personal gains of at least $17.5 million. (Source: https://www.securityweek.com/ceo-cyber-fraud-prevention-firm-ns8-charged-fraud/)
• In September 2020, according to Vice, the NS8 co-founder used forged financial statements to raise $123 million, with about $17.5 million flowing into his own pockets. U.S. prosecutors called him a 'fox guarding the henhouse,' and he was arrested following a joint investigation by the FBI and the SEC. (Source: https://www.vice.com/en/article/founder-of-anti-cyber-fraud-company-charged-with-fraud/)

Official Stance

• On September 17, 2020, the U.S. Attorney's Office for the Southern District of New York announced the arrest and indictment of the NS8 founder and former CEO for forging bank statements to defraud investors of over $123 million.
• On September 17, 2020, the SEC filed a civil lawsuit against Rogas (Case No. 20-cv-07628), alleging that he systematically forged bank statements to inflate revenue and customer counts between January 2018 and June 2020.
• On August 6, 2026, the U.S. Court of Appeals for the Second Circuit issued a ruling on the SEC v. Rogas case (Case No. 25-35), upholding the accountability framework related to the fraudulent activities in the case.
• On August 11, 2026, the U.S. Bankruptcy Court for the District of Delaware issued an opinion in Drivetrain v. Rogas, determining that he is liable for at least $68 million in damages requested by the bankruptcy trustee.

How to Protect Yourself

• ✅ Conduct penetrating confirmations before investing: Bypass management and send requests directly to the bank to verify account balances and transaction history, and spot-check the top ten customers to ensure contracts, invoices, and payment records match.
• ✅ Verify the data production chain: Ask who obtains the bank statements and through what channels. Require the financial system to connect directly to online banking to pull data, and be wary of any original vouchers forwarded manually by the founder.
• ✅ Cross-verify operational metrics: Use third-party observable data such as cloud bills, customer service ticket volumes, and hiring scale to infer the reasonableness of revenue. A long-term divergence between growth curves and resource consumption is a red flag.
• ✅ Set up protections in the transaction structure: Insist on phased funding, board-appointed independent financial oversight, and completion of audit confirmation before closing. If signs of fraud are discovered, immediately initiate shareholder derivative lawsuits or report to securities regulators.