Joonko CEO's $27M Fraud Plea: The Forgery Came Post-Close

A $27 Million Securities Fraud Plea in the Southern District of New York
Ilit Raz, the founder and former chief executive of AI-powered diversity recruiting startup Joonko Diversity, Inc., pleaded guilty on September 11, 2026 to one count of securities fraud before U.S. District Judge Alvin K. Hellerstein in the Southern District of New York. The count carries a maximum sentence of 20 years in prison, and the Justice Department confirmed that sentencing will be scheduled at a later date. Law360 reported the plea the same day.
The government's theory is that Raz induced investors to put in approximately $27 million across two priced rounds: roughly $10 million in a Series A on or about June 1, 2021, and roughly $17 million in a Series B on or about June 2, 2022, using false statements about Joonko's customers, forged purchase orders, and a fabricated bank statement.
But here is the part the headlines are missing. The forged bank statement described in the superseding indictment is dated on or about April 3, 2023 — roughly ten months after the Series B closed. The document that anchors a federal criminal case was not produced for a data room during a live round. It was produced during the ordinary business of reporting to investors who had already wired their money.
What the Indictment Says Raz Actually Sent Investors
The alleged mechanics are unusually concrete, and that concreteness is what makes the case instructive for anyone raising private capital.
According to the superseding indictment, Raz made false representations about the number and identity of Joonko's customers, fabricated a bank statement depicting an average balance of over $5,000,000, and transmitted fictitious purchase orders bearing forged signatures from entities that had no business relationship with Joonko.
Three categories of artifact, all of them standard in a venture process:
- Customer counts and named logos. The slide every AI company puts in a deck, and the slide investors reconcile least rigorously.
- Bank statements. Treated by most investors as a self-authenticating document because it appears to come from a third party.
- Purchase orders and signed contracts. The proof point that converts a pipeline number into revenue in an investor's model.
Federal prosecutors unsealed the original indictment on June 11, 2024, and charged securities fraud and wire fraud at that time. Joonko itself had filed for Chapter 11 bankruptcy weeks earlier, on May 24, 2024, in the U.S. Bankruptcy Court for the District of Delaware, Case No. 24-11007-MFW.
The Distinction Founders Get Wrong: A Private Round Is Still a Securities Offering
Many founders operate on an unstated assumption that a Reg D round sold to sophisticated venture investors sits outside the securities laws in any practical sense. There is no registration statement, no prospectus liability, no public shareholders. The exemption feels like immunity.
It is not. The exemption relieves you of registration. It relieves you of nothing else.
Section 10(b) and Rule 10b-5 apply to every purchase or sale of a security, registered or exempt. So does Securities Act Section 17(a). The SEC charged Raz under both in its parallel civil action, SEC v. Ilit Raz, No. 24-civ-4466 (S.D.N.Y.), filed June 11, 2024, seeking a permanent injunction, disgorgement with prejudgment interest, civil money penalties, and a permanent officer-and-director bar. That civil action remains pending.
Note the two figures, because they are not the same number and should not be conflated. The DOJ criminal case describes approximately $27 million induced across the Series A and Series B. The SEC civil complaint alleges defrauding investors of at least $21 million. Different pleadings, different scopes, different burdens of proof.
The officer-and-director bar deserves particular attention from anyone who thinks of securities exposure as purely financial. A permanent bar ends a career in operating leadership at any public company. Disgorgement can be paid. A bar cannot.
Capital Formation Risk Lives in the Reporting Cadence, Not the Data Room
Here is the structural lesson for anyone raising or managing private capital.
The venture diligence process is adversarial by design. Investors hire counsel, run reference calls, and commission market checks. Founders know they are being examined and behave accordingly. Post-closing investor reporting is the opposite: monthly or quarterly updates, prepared under time pressure by a small finance function, reviewed by no one outside the company, sent to investors who have already committed and who read them in a hurry.
That asymmetry is where the April 3, 2023 date matters. The fabricated bank statement in the Joonko indictment postdates the last priced round by roughly ten months. Whatever pressure produced it, it did not arise in a term-sheet negotiation.
What this changes about how capital is raised
Investor updates are offering documents in waiting. A false statement in a quarterly update becomes securities fraud the moment it is relied upon in a bridge note, a SAFE, an extension round, or a secondary sale. Very few companies apply any review process to them.
Bank verification is becoming standard. Sophisticated venture investors increasingly request read-only banking access or direct institutional confirmations rather than a PDF supplied by the company. Founders should expect this and should not read it as a sign of distrust.
Named customers require executed contracts. If a logo appears on a slide, someone should be able to produce a signed agreement with that entity on request. That is a records discipline question, and it belongs to the finance and operations function, not to the fundraising deck.
What Your Leadership Team Should Decide This Quarter
None of this requires a compliance department. It requires four decisions that a founder, CFO, or board chair can make in a single meeting.
Controls on outbound investor communications
- Designate one owner for investor-facing numbers. Customer count, ARR, cash balance, and runway come from one system of record, and one named person signs off before anything is sent.
- Require source documents for financial figures. Bank balances come from a statement pulled directly by the institution, never a reformatted or re-typed version.
- Keep a logo register. Every customer name used in external materials maps to an executed agreement with a date and a signatory.
Board and investor-side governance
- Put investor-update accuracy on the board agenda annually. The board should ask who prepares updates, who reviews them, and what the source of each headline metric is.
- Check your D&O policy for the fraud carve-out. Directors and officers coverage generally excludes indemnity for deliberate fraud once it is adjudicated, and advancement of defense costs can be clawed back. The Joonko estate pursued civil recovery against Raz in the Delaware bankruptcy, which is the ordinary sequence when a company fails after alleged misstatements.
- Fix disclosure gaps before the next raise, not during it. Correcting a prior overstatement in a quiet quarter is a business problem. Correcting it inside a live round with a signed term sheet is a legal one.
Founders building AI companies face a particular version of this risk, because the gap between a pilot, a paid contract, and a renewable customer is easy to compress in a deck and hard to defend later. Getting the representations right from the first priced round is the job of startup counsel, and it is far cheaper than repairing them.
Key Takeaways
- A guilty plea to one securities fraud count carries up to 20 years. Raz pleaded guilty on September 11, 2026 before Judge Hellerstein in the Southern District of New York; no sentencing date has been set.
- The criminal and civil figures are different numbers. DOJ describes approximately $27 million induced across a roughly $10 million Series A and a roughly $17 million Series B; the SEC civil complaint alleges at least $21 million, and that case remains pending.
- Exempt offerings carry full antifraud liability. Rule 10b-5 and Securities Act Section 17(a) apply to private rounds exactly as they apply to registered ones, and the SEC is seeking a permanent officer-and-director bar.
- Post-closing reporting is the live exposure. The fabricated bank statement described in the indictment is dated on or about April 3, 2023, roughly ten months after the Series B closed.
- Documentation discipline is the cheapest control available. A logo register tied to executed contracts and a single owner for investor-facing metrics prevent most of what turns a bad quarter into a federal case.
The Joonko case is not a story about an exotic fraud scheme. It is a story about ordinary startup artifacts — a customer slide, a bank statement, a purchase order — used dishonestly, in the period when nobody was checking. Companies raising priced rounds generally need their investor-reporting controls and their customer representations reviewed before the next term sheet is signed, not after diligence begins. That is the kind of work FinTech Law does for founders and boards, and you can start that conversation here.
FinTech Law's private fund counsel team advises on the requirements described above.
This blog post is for informational purposes only and does not constitute legal advice. No attorney-client relationship is formed by reading this content. If you need legal advice, please contact a qualified attorney.