Jan. 15, 2026

Dub's COO, Brett: Why “Move Fast” Breaks Fintechs

Dub's COO, Brett: Why “Move Fast” Breaks Fintechs
Spotify podcast player iconApple Podcasts podcast player iconYouTube podcast player icon
Spotify podcast player iconApple Podcasts podcast player iconYouTube podcast player icon

In this episode of Risk and Reason, Eli Wachs sits down with Brett Chereskin, COO of Dub, to unpack how real fintechs think about risk, fraud, and operational discipline at scale. Drawing on his background in military intelligence and aviation, Brett shares why incentivized growth attracts fraud, how attackers probe systems before striking at scale, and why early stage companies must calibrate risk based on what they can actually monitor. The conversation explores mission driven leadership, prudent risk taking, and why operations is often the most underrated competitive advantage in fintech.

Chapters

(0:00) Incentives, Growth, And Fraud Tradeoffs
(1:03) From Military Intelligence To Fintech Operations
(4:28) Aviation Lessons On Risk, Buffers, And Failure
(8:43) Why Operations Is A Startup Superpower
(14:55) Mission Command And Prudent Risk
(18:30) Scaling Fraud And Compliance The Right Way
(29:35) Rapid Fire: Metrics, Discipline, And Dub’s Advantage

Follow Brett Chereskin

LinkedIn: https://www.linkedin.com/in/brettchereskin/
X (Twitter): https://x.com/bchereskin

Follow Eli Wachs
LinkedIn: https://www.linkedin.com/in/eliwachs/

Check out Footprint
https://www.onefootprint.com

Footprint helps fintechs and banks verify identity, prevent fraud, and manage compliance with end-to-end onboarding and risk infrastructure.

00:00 - Fraud Guardrails And Incentives Debate

01:02 - Welcome And Brett’s Path To Fintech

02:11 - North Atlantic Flight And Risk Math

06:13 - Why Operations Is The Startup Backbone

10:42 - From Army To Affirm: Finding The Ops Gap

14:52 - Mission Command And Prudent Risk

18:10 - Calibrating AML, KYC, And Growth Levers

22:05 - Incentives Attract Fraud And How Attacks Scale

25:15 - Building A Security Foundation Early

27:27 - Becoming The Target And Defense Tactics

30:12 - Discipline Through Hands-On Support

32:46 - Closing Remarks And Next Steps

WEBVTT

00:00:00.320 --> 00:00:05.519
Let 's make sure we put a buffer into the minimum account deposits to prevent ACH fraud.

00:00:05.519 --> 00:00:14.000
Let's spend this next month and a half integrating footprint, for instance, versus building the next new feature that can drive viral growth.

00:00:14.000 --> 00:00:17.839
Even something along the line of, hey, do we want to use incentivized onboarding?

00:00:17.839 --> 00:00:21.839
The minute you start giving away even a dollar, fraudsters will come knocking.

00:00:21.839 --> 00:00:23.280
And they'll come knocking in mad.

00:00:23.280 --> 00:00:24.640
We actually had that conversation.

00:00:24.640 --> 00:00:31.920
Hey, do we want to offer like 20 brokerage dollars if somebody refers somebody or if somebody like signs up?

00:00:31.920 --> 00:00:36.560
And it's immediately, the minute you do that, you're going to pay the price.

00:00:36.560 --> 00:00:40.399
And then they're going to start testing you, and then they're going to attack you all at once.

00:00:40.399 --> 00:00:41.600
I thought that affirms.

00:00:41.600 --> 00:00:43.359
Like attacks don't attack them once each easy.

00:00:43.359 --> 00:00:47.119
It might be some penetrating attack that they're trying to figure out, like vulnerabilities.

00:00:47.119 --> 00:00:50.079
And then once they find it, they go quiet for like months.

00:00:50.079 --> 00:00:50.880
Boom.

00:00:50.880 --> 00:00:56.079
10,000 people all came in to the exact same thing, and now you're upside down and didn't have enough time to show it off.

00:01:02.560 --> 00:01:06.239
Welcome back to the Risk and Reason podcast.

00:01:06.239 --> 00:01:08.959
I'm thrilled to have Brett joining us today.

00:01:08.959 --> 00:01:13.280
We've known each other for, I'm going to generously say a couple of years by now.

00:01:13.280 --> 00:01:14.640
That may or may not be true.

00:01:14.640 --> 00:01:16.079
But it feels like that.

00:01:16.079 --> 00:01:18.719
At least I've been annoying you on Slack for that long.

00:01:18.719 --> 00:01:21.439
Brett has a really cool background.

00:01:21.439 --> 00:01:23.519
You spent, I want to say 12 years in the U.S.

00:01:23.519 --> 00:01:33.840
Army and have worked at some of the most iconic fintech companies that have scaled tremendously, such as a firm leading operations internally.

00:01:33.840 --> 00:01:39.040
Most recently, you are the COO of Dub, which is the fastest growing investment platform.

00:01:39.040 --> 00:01:42.079
I think I recently saw 13th on the App Store.

00:01:42.079 --> 00:01:46.239
If Steven's LinkedIn posts are to be believed.

00:01:46.239 --> 00:01:51.920
So really a tremendous career, but I want to turn it over to you because I'm sure I missed a bunch of it.

00:01:51.920 --> 00:01:57.680
Tell us about how how did you get into the world of fintech and ops and everything in between?

00:01:58.480 --> 00:02:01.359
Yeah, I think thanks for the introduction.

00:02:01.359 --> 00:02:03.120
It's been quite some time.

00:02:03.120 --> 00:02:07.200
We've been going back and forth and uh we're almost at the uh finish line there.

00:02:07.200 --> 00:02:11.280
Um but yeah, uh as you mentioned, the military.

00:02:11.280 --> 00:02:19.680
Uh so my my time in the military, I was military intelligence officer that was also an aviator, so I flew intelligence aircraft.

00:02:19.680 --> 00:02:23.919
Part of that was uh, you know, there's that you know, going two paths here.

00:02:23.919 --> 00:02:28.400
One is operations, like military folks are typically operations first.

00:02:28.400 --> 00:02:31.759
Um as a commissioned officer, I led organizations.

00:02:31.759 --> 00:02:40.879
I was uh in special operations leading uh you know development of a drone uh unit and asset, uh, all the way to flying reconnaissance missions in Afghanistan.

00:02:40.879 --> 00:02:52.319
But that comes with the operational side, but also the security and uh kind of you know, how do we uh, you know, just the military intelligence side of things, keep a close eye on that stuff.

00:02:52.319 --> 00:02:58.719
So as it relates to my movement into fintech, um, aviation also is a very regulated industry.

00:02:58.719 --> 00:03:02.960
It is very much about compliance for the sake of staying alive.

00:03:02.960 --> 00:03:07.919
Uh finance is much more compliance for keeping people's uh monetarily safe, right?

00:03:07.919 --> 00:03:10.400
And preventing crimes, uh monetary crimes.

00:03:10.400 --> 00:03:14.159
So I think there's there's good overlap between those industries.

00:03:14.159 --> 00:03:15.759
Um, kind of a unique story.

00:03:15.759 --> 00:03:31.919
I was offered a fellowship at a firm for uh uh recently transitioning uh veterans that were trying to find civilian jobs and ended up uh having a unique opportunity to work directly directly with Max Levchin and some of the senior executives over there.

00:03:31.919 --> 00:03:36.159
That was an incredible like growth opportunity as my first job out of the army.

00:03:36.159 --> 00:03:49.439
And then from there um honed my my skills and uh Steven, the CEO and founder of Dub, found me when I was getting ready to go on to my next thing, and uh and that's the story, and now I'm here.

00:03:49.439 --> 00:03:55.759
So uh yeah, kind of a ideological, logical step in the right direction towards this industry.

00:03:56.240 --> 00:03:57.759
We're we're gonna touch on all of this.

00:03:57.759 --> 00:04:10.159
Now you you told me a story when we got dinner recently uh about I may mess it up, but you were flying a very slow aircraft and the headwind was so strong.

00:04:10.159 --> 00:04:22.560
Uh I I could be off, but I believe that you were trying to go across the pond and you had to kind of turn around, but your radio was jammed, so you you had to get some Air Canada plane to tell Nova Scotia that you're coming in.

00:04:22.560 --> 00:04:24.959
I I hope I'm directionally right here.

00:04:24.959 --> 00:04:27.199
Uh what was that like?

00:04:28.000 --> 00:04:39.279
Yeah, so uh the aircraft I flew, for those that know aviation, was like a variant on the King Air, which is a propped airplane that is not designed to fly across the Atlantic Ocean.

00:04:39.279 --> 00:04:40.959
So I was stationed in Germany.

00:04:40.959 --> 00:04:49.199
We needed to bring it to New Jersey, and essentially we had to like pedal jump across the North Atlantic in the middle of the winter to get this thing reset.

00:04:49.199 --> 00:04:59.040
And we were flying between uh we ended up landing in Greenland, which is a unique place to hang out, uh, got fuel and was trying, we're trying to get to St.

00:04:59.040 --> 00:05:11.759
John, Canada, but we had this 110-knot headwind, and you know, when you get to that part of the the aviation world, you actually report on like the crossings of latitude and longitude.

00:05:11.759 --> 00:05:24.959
So we're kind of trying to give the next crossing point that we're about to hit um to uh you know Maine is like it's like the uh the air traffic controller that's like in that region.

00:05:24.959 --> 00:05:34.240
And we couldn't get a hold of him, so we heard an Air Canada flight on VHF, and we're like, hey, can you just let you know the center know that we're we're about like eight hours out to our next reporting point?

00:05:34.240 --> 00:05:39.439
And the the pilot is like, How are you eight hours out from talking to me right now?

00:05:39.439 --> 00:05:41.040
Like, how fast you're going?

00:05:41.040 --> 00:05:44.240
It's like uh ground speed of about a hundred miles per hour.

00:05:44.240 --> 00:05:46.639
He's like, What kind of aircraft are you?

00:05:46.639 --> 00:05:48.319
And we're like, Oh, we're a king air.

00:05:48.319 --> 00:05:52.720
He's like, Why are you in the North Atlantic in a king air going that slow?

00:05:52.720 --> 00:05:57.120
And we're like, uh, we're the we're an army crew, and they're like, he was like, Oh, that explains it.

00:05:57.120 --> 00:06:09.519
And he passed it along with his satcom, but it was uh it was one of those funny moments where you know you're doing something a little bit crazy, but it reinforced the crazy when other airline pilots are just asking you what the hell you're doing up there.

00:06:09.680 --> 00:06:16.720
So uh it was a it was a good venture what are you doing in the cockpit of an eight-hour uh like 200-mile flight?

00:06:17.199 --> 00:06:20.720
Calculating your fuel over and over and over again.

00:06:20.720 --> 00:06:29.199
So essentially, like if it got if it got too windy, if the headwind was too strong, you end up hitting like the point of no return, right?

00:06:29.199 --> 00:06:33.680
So we were constantly calculating manually and digitally over and over again.

00:06:33.680 --> 00:06:38.800
Are we going to cross that point of no return with high levels of confidence?

00:06:38.800 --> 00:06:42.800
Like we we put in a buffer, but like you can never control the environment.

00:06:42.800 --> 00:06:46.639
So ultimately, there was and what's your altitude in this?

00:06:46.639 --> 00:06:50.639
We're I think we were flying at like 30, 34,000 feet.

00:06:50.639 --> 00:06:53.120
Um, so we're up there, pressurized aircraft.

00:06:53.120 --> 00:06:54.639
We're we're playing up.

00:06:54.639 --> 00:06:58.079
And then we were actually also hunting for lower headwinds.

00:06:58.079 --> 00:07:00.720
So when you're up that high, you can actually maybe drop down.

00:07:00.720 --> 00:07:09.120
But here's the paradox: you come down further, you might lose the headwind, but your burn rate increases because engines are optimized at you know higher altitudes.

00:07:09.120 --> 00:07:11.439
So boy, we're going way off topic.

00:07:11.439 --> 00:07:14.160
Well, I'm teaching you about the uh aeronautical uh principles.

00:07:14.639 --> 00:07:17.199
We're gonna we're gonna no fun intended land the plane.

00:07:17.199 --> 00:07:20.959
Uh my final detour here, have you have you seen the show The Rehearsal?

00:07:20.959 --> 00:07:22.560
I have not.

00:07:22.560 --> 00:07:29.600
Okay, I'll I'll pitch you on this offline, but it's a show, a comedic show about uh the relationship of airline pilots, so I'm curious.

00:07:29.600 --> 00:07:33.120
Um but when when you we'll we'll we'll we'll we'll come in here.

00:07:33.120 --> 00:07:36.240
You you're doing you're doing spec you're doing spec ops.

00:07:36.240 --> 00:07:58.000
Um you I I think that what I've taken away from having the the chance to speak with people like you, people like Kelly Deckerson, who who come from an army background, there's this appreciation for ops in a way of I've heard Kelly talk about, you know, he was on a battlefield in Iraq and the tanks were positioned in a way that saved people's lives just because of ops and the training.

00:07:58.000 --> 00:08:09.040
Uh I think ironically, when you go to Silicon Valley, ops are like the people who you have to bring in to to make sure you're staying on top of things.

00:08:09.040 --> 00:08:13.759
Uh could you maybe talk about kind of the appreciation that you develop for ops?

00:08:13.759 --> 00:08:18.160
Because I've increasingly seen as we've grown, ops is actually what makes companies go up a lot more.

00:08:18.160 --> 00:08:26.240
I actually think that ops are the the areas that you didn't even realize that by building this function from zero to one, you will get so much alpha.

00:08:26.240 --> 00:08:39.519
But I think the I I I think it's this interesting thing where it it wasn't seen as sexy versus when you speak to people who are truly flying planes uh and launching drone programs in Kandahar, they'll actually tell you that that ops is the root of everything.

00:08:39.519 --> 00:08:42.720
So uh how how do you kind of think about that?

00:08:43.120 --> 00:08:53.039
Yeah, I think you know, the biggest like so the the typical like thing that people say is like, hey, we're too lightweight, we're too lean to worry about operations right now.

00:08:53.039 --> 00:08:56.879
Let's let's build, let's find product market fit, especially early stage startups.

00:08:56.879 --> 00:09:02.879
They love to tout that they are flexible and they can pivot on a dime.

00:09:02.879 --> 00:09:18.399
And the coming from the military, operations is the lifeblood of the organization because in a large organization, the you know, the military is huge and it's filled with people, and it's it's difficult to communicate.

00:09:18.399 --> 00:09:23.440
In the fog of war, it's difficult to communicate even tactically sometimes.

00:09:23.440 --> 00:09:27.200
So, like, what is the the what are the two things?

00:09:27.200 --> 00:09:30.320
There's actually three things that really tie it together.

00:09:30.320 --> 00:09:49.519
When when all else goes and fails, it's your mission, your values, and the operational overlay, or the SOPs, or the common language spoke through action that ties an organization together and makes them succeed when stuff gets tough.

00:09:49.519 --> 00:09:58.000
And when I'm thinking about a startup, while it's not this giant organization, it is the fog of war.

00:09:58.000 --> 00:09:59.600
That's where I equate a startup to.

00:09:59.600 --> 00:10:00.480
You're in a fog of war.

00:10:00.480 --> 00:10:06.879
You might not always be able to communicate with each other, you might lose slight context at the nooks and crannies of what's going on.

00:10:06.879 --> 00:10:10.720
Something stops happening, no one's covering it, and you don't know what's going on there.

00:10:10.720 --> 00:10:20.080
And that's where I think uniquely, like Stephen recognized as he was building dub, he's like, I want a strong operational culture.

00:10:20.080 --> 00:10:25.759
And like he indexed on that by hiring me early in the trajectory of the company.

00:10:25.759 --> 00:10:42.399
And I think a lot, I'm not saying I'm personally responsible for any of this, but us all being dedicated to what the operational overlay does to the people, the clarity of mission and vision, and the ability to keep a few people doing a lot.

00:10:42.399 --> 00:10:53.759
Like we have hundreds of thousands of open brokerage accounts, we have hundreds of thousands of users, we have a million different things happening at any given moment.

00:10:53.759 --> 00:10:59.679
And without an operationally sound organization of, you know, we're currently only like 25, 26 people.

00:10:59.679 --> 00:11:01.679
We couldn't do that, right?

00:11:01.679 --> 00:11:07.279
It just becomes quickly hazardous, and we've built a stable core.

00:11:07.279 --> 00:11:12.000
And I think another thing to call out here is like operations also is the foundation that you could build on.

00:11:12.000 --> 00:11:24.080
And I think being able to build on this foundation is what's giving uh dub the legs and the ability to kind of navigate market conditions, navigate private markets, navigate fundraising.

00:11:24.080 --> 00:11:31.679
It's just there's a ton of inputs and just having that foundation to kind of pivot off of is really what's important here.

00:11:31.679 --> 00:11:36.240
Yeah, and I'm also trying to like not a number of complicated things too here.

00:11:36.240 --> 00:11:39.440
So that's always another topic that we should probably delve into.

00:11:40.240 --> 00:11:41.440
We we definitely will.

00:11:41.440 --> 00:11:50.080
What was it like going from spinning up drones to uh working with Max Lovchkin uh at a firm?

00:11:50.080 --> 00:11:52.639
What was that transition like?

00:11:52.639 --> 00:11:55.600
What got you interested in that as well?

00:11:56.080 --> 00:12:01.759
Yeah, so I I eventually I started, I was like employee like I think under 200 at a firm.

00:12:01.759 --> 00:12:06.799
It was early, it was 2017, and I knew nothing about tech.

00:12:06.799 --> 00:12:08.720
I knew nothing about startups.

00:12:08.720 --> 00:12:13.679
I was just like, how do I make as much money as I was making as a major in the army?

00:12:13.679 --> 00:12:17.919
And if that checked the block and I got to live somewhere cool like San Francisco, I went for it.

00:12:17.919 --> 00:12:19.919
And I took a huge risk.

00:12:19.919 --> 00:12:26.720
I actually, during this fellowship, I had to like leave my wife in Florida to like help like close up the house and sell it and move it.

00:12:26.720 --> 00:12:33.919
But ultimately, um I realized I got in there, I was like, okay, none of these people are very operational.

00:12:33.919 --> 00:12:39.120
Um I think like, and it kind of gave me an identity crisis, to be honest.

00:12:39.120 --> 00:12:40.960
I I was like this generalist.

00:12:40.960 --> 00:12:47.360
Like I love to I love to comment that people in the military, when you become a senior officer, you become a general.

00:12:47.360 --> 00:12:53.600
And like that term comes from the fact that you become the most senior generalist in the military, right?

00:12:53.600 --> 00:12:55.440
There's a reason behind that term.

00:12:55.440 --> 00:13:01.360
And I think officers in the military in general are generalists, they're an inch deep and a mile wide.

00:13:01.360 --> 00:13:14.320
And I realized there's nobody like that, maybe other than the exec, some of the executives that were pretty like head on a swivel, very clearly understanding all the business inputs, the technology inputs, the customer inputs, and bringing it together.

00:13:14.320 --> 00:13:19.519
So when I looked at this at the microcosm, I was working on like new markets for enterprise.

00:13:19.519 --> 00:13:24.000
And I was like, wow, there's a lot of people that don't know what's going on.

00:13:24.000 --> 00:13:29.200
And I made it my mission to make sure the right people had the right information at the right time.

00:13:29.200 --> 00:13:31.440
Like, that's operations 101, right?

00:13:31.440 --> 00:13:34.960
That's that's building a drone unit, that's deploying to combat.

00:13:34.960 --> 00:13:40.399
It's it's the the idea of building a team of people that have the same mission.

00:13:40.399 --> 00:13:44.960
So when we got like, hey, we want to work with United, there's an RFP out here.

00:13:44.960 --> 00:13:52.480
I was like, okay, let me understand what everybody needs to know, when they need to know it, and why they need to know it, and let me get that done.

00:13:52.480 --> 00:13:56.559
And I and I remember I kicked off like this, like we called it like the enterprise deal desk.

00:13:56.559 --> 00:14:00.480
It started with a whole bunch of reluctant people being like another meeting.

00:14:00.480 --> 00:14:08.799
And in three months, it became like the execs were in the room, and the they were actually like, hey, we need to kick some people out of here.

00:14:08.799 --> 00:14:12.320
Like, this is more of like a high-level like strategy discussion.

00:14:12.320 --> 00:14:14.799
Like, let's limit it to like one person per function.

00:14:14.799 --> 00:14:19.919
And like it be it, I didn't advertise it, I didn't ask people to come.

00:14:19.919 --> 00:14:23.440
Uh, one lawyer hears that it's like they're getting the information they never got.

00:14:23.440 --> 00:14:36.080
Ops found out that from the support side, they were getting like an early read on the new clients coming through the pipeline, and it all synthesized into like this really meaningful function of like information delivery and collaboration.

00:14:36.080 --> 00:14:42.320
And people started getting ahead of the power curve, and we became better at expanding on new markets, right?

00:14:42.320 --> 00:14:45.039
And taking on enterprise clients for the first time.

00:14:45.039 --> 00:14:46.480
So that was a transition.

00:14:46.480 --> 00:14:50.320
It literally went from I don't have an MBA, I didn't have any experience doing this.

00:14:50.320 --> 00:14:55.200
I had experience getting people the right information at the right time and having people work together, right?

00:14:55.360 --> 00:14:57.120
So direct correlation.

00:14:57.120 --> 00:15:04.559
And I like this concept a lot in that I think we often say the constraint, why can't we just hire more engineers or more salespeople?

00:15:04.559 --> 00:15:05.600
It's information.

00:15:05.600 --> 00:15:10.639
It's we we it's only so scalable to train people in the things that they need to know.

00:15:10.639 --> 00:15:20.240
When you think about that transition, is there like a leadership lesson of this is how the army thought about distilling information that you're able to bring to the enterprise deal desk?

00:15:21.279 --> 00:15:29.519
Yeah, I think one thing that I I love and I bug the hell out of people about this, especially leaders, is this idea of mission command.

00:15:29.519 --> 00:15:31.919
And this is army doctrine like 101.

00:15:31.919 --> 00:15:44.159
And mission command is essentially the underlying mechanism for which military leaders distribute and organize the vision of what needs to get done.

00:15:44.159 --> 00:15:46.000
And it essentially consists of a few things.

00:15:46.000 --> 00:15:53.200
One is uh the mission that you have to really clarify the end state mission and goals.

00:15:53.200 --> 00:16:10.960
Um, it's a lot, I always say end state management is the key to execution because it stops you in your tracks from telling people how to do it, but it tells you you're telling them what you want to see done, and it lets them solve it at the most tactical, lowest level possible.

00:16:10.960 --> 00:16:21.919
So, like as a drone commander, is like we need to build, we like for me, it was like we need to provide this many hours of intelligence, surveillance, and reconnaissance over this geography by this date.

00:16:21.919 --> 00:16:25.840
Like that was my commander's intent, right?

00:16:25.840 --> 00:16:32.000
How I did it, there's a million functions, and all the different individual functions will have a way of solving that.

00:16:32.000 --> 00:16:35.679
So, like, you need that to kind of, you know, your end state.

00:16:35.679 --> 00:16:46.559
So if you can clarify the your end state and your vision and then orchestrate that through a shared framework of values, um, that's what mission command is.

00:16:46.559 --> 00:16:56.000
And like you also have to some things, like little buzzwords from the doctrine, it's like you have to be able to delegate uh to the lowest level possible.

00:16:56.000 --> 00:17:00.240
You have to be able to, you need to be willing to take prudent risk.

00:17:00.240 --> 00:17:03.679
And I always, and this is relevant to this, prudent risk.

00:17:03.679 --> 00:17:08.880
It is risk that is acceptable to the mission.

00:17:08.880 --> 00:17:15.599
Uh and you have, and as a commander, that one of the most important things is calibrating your prudent risk-taking capability.

00:17:15.599 --> 00:17:17.440
So what it boils down to is judgment.

00:17:17.440 --> 00:17:22.960
Like you have to have good judgment, you have to have good values, and you have to have a clear vision.

00:17:22.960 --> 00:17:29.200
And if you can communicate those three things and then build in pretty systemic feedback cycles, you win.

00:17:29.200 --> 00:17:31.519
And this is how your radio goes dead.

00:17:31.519 --> 00:17:33.119
Your soldiers know exactly what to do.

00:17:33.119 --> 00:17:39.920
Because they're not asking for what's next, they know exactly what the end state of the that mission is, including we call branches and sequels.

00:17:39.920 --> 00:17:41.839
What happens if we get to the end?

00:17:41.839 --> 00:17:42.480
You do this.

00:17:42.480 --> 00:17:45.440
If we don't get to the end, we branch here, right?

00:17:45.440 --> 00:17:49.920
So these are like very hardcore doctrinal terms that I'm bringing up.

00:17:50.319 --> 00:17:52.640
I I like this concept of prudent risk.

00:17:52.640 --> 00:18:05.200
Uh, you know, you probably see many different types of fraud uh not the attacks, like people who are trying to take advantage of your platform a different way.

00:18:05.200 --> 00:18:09.759
You know, we say if you want to get rid of all fraud, you can just let nobody on the platform.

00:18:09.759 --> 00:18:10.640
It's very easy.

00:18:10.640 --> 00:18:13.680
Um obviously there needs to be some type of toggle.

00:18:13.680 --> 00:18:17.599
How do you think about what is the right level of risk that you take on?

00:18:17.599 --> 00:18:29.359
Obviously, at the end of the day, nothing's in a theoretical vacuum, and everybody's, whether they're aware of it or not, are taking on a form of risk, but how do you actually try to measure that and say this is actually a good risk for us to take?

00:18:30.240 --> 00:18:32.559
Yeah, this is actually one of the hardest.

00:18:32.559 --> 00:18:46.880
Um, this not only to like AML, KYC stuff, risk calibration and is like the heart of what an executive is designed to do.

00:18:46.880 --> 00:18:49.920
Because there's no like hard and fast answer.

00:18:49.920 --> 00:18:55.759
It is completely a judgment call uh based off of experience and knowledge.

00:18:55.759 --> 00:19:12.480
And if you would uh you know, that's why execs wear a heavy burden because they they essentially have to sit there and it goes to business risk, it goes to you know spending on marketing, how much do we want to spend before we get clear like ROI?

00:19:12.480 --> 00:19:16.160
How much, like, how like we don't have attribution, how do we go?

00:19:16.160 --> 00:19:28.640
So ultimately, like orchestrating risk, like first off, when it comes to like AML, KYC, onboarding, compliance, um, it's very important that you don't just look at it through a vet like a stovepipe.

00:19:28.640 --> 00:19:29.920
You're looking across the business.

00:19:29.920 --> 00:19:33.279
What how what is the stance of risk across your entire business?

00:19:33.279 --> 00:19:44.240
And where does this kind of financial crimes AML stack on running out of runway?

00:19:44.240 --> 00:19:46.559
Or you know, we we're an investment platform.

00:19:46.559 --> 00:19:49.599
There's a million other aspects of risk that we have to deal with.

00:19:49.599 --> 00:19:51.680
We're also a registered investment advisor.

00:19:51.680 --> 00:20:07.599
There's we're managing risk across multi facets, but ultimately, when we first were kicking this thing off, um, we wanted To only take on as much risk as we would feel that we are capable of monitoring at any given time.

00:20:07.599 --> 00:20:10.720
So, and I'll break this down more specifically.

00:20:10.720 --> 00:20:20.079
Like, if we were taking risk on who we were letting on the platform, we could only take on as many people as we could manually monitor every day, right?

00:20:20.079 --> 00:20:25.759
And so, as we built better monitoring systems, we could take on more people.

00:20:25.759 --> 00:20:38.400
And then we were like, okay, let's add redundant systems to our onboarding platform to give us an extra layer of confidence that who we're getting, there's a lower probability.

00:20:38.400 --> 00:20:45.200
So, like everything was a mathematical equation of like the probability is going down as we scale up.

00:20:45.200 --> 00:20:56.480
And essentially that's like manual coverage to begin with, automated checking and redundancies, and then there's audits, and then it's essentially um live testing.

00:20:56.480 --> 00:20:58.319
Like now we're we're live for six months.

00:20:58.319 --> 00:20:59.839
How many failures have we had?

00:20:59.839 --> 00:21:01.440
How many known failures, right?

00:21:01.440 --> 00:21:12.960
We have to assume there's unknown failures occurring, but then being able to like quantify the known failures against a known quantity of acceptable like pass-throughs is is where it really kind of honed itself.

00:21:13.279 --> 00:21:14.640
And it continues to this day.

00:21:14.640 --> 00:21:21.519
It's a toggle.

00:21:21.519 --> 00:21:25.039
And by that, or like a I'm sorry, like a a lever.

00:21:25.039 --> 00:21:27.920
And by that I mean you know, some people can view it very much in a vacuum.

00:21:27.920 --> 00:21:36.400
I think this is a pretty fair way to say, you know, hey, like we can move this up or down, but are we a freemium product or are we a subscription?

00:21:36.400 --> 00:21:48.319
Uh or are we letting people deposit with a chime account or Cash App, or are we restricting this to a bank account we linked or something like a card we use with 3DS?

00:21:48.319 --> 00:22:07.599
It also brings into focus this idea of you know risk in Teams from a KYC perspective, uh is a higher level, like can almost be thought of as a higher level conversation because it does directly impact product and the acting kind of product people are leading it.

00:22:07.599 --> 00:22:22.559
Um how crowd, I guess when you think about all those different levers that are in there, how do you how do you try to one approach uh like the way of thinking, like, do you the there's the I'm bad with analogies, but it's the the tail wagging the dog, right?

00:22:22.559 --> 00:22:28.480
Like which one do you how how do you think about like which one should be dictating the other and like how that dance should play out?

00:22:29.440 --> 00:22:31.519
This is a this is a spicy topic, right?

00:22:31.519 --> 00:22:37.200
So we all know that as a startup growth is growth is king.

00:22:37.200 --> 00:22:39.920
It's the primary objective.

00:22:39.920 --> 00:22:55.200
And when I go and say, well, we can't let you know, things like let's raise the minimum deposit, let's make sure that the bank account that they're linking is confirmed to the name on the account.

00:22:55.200 --> 00:23:03.519
Let's make sure, like there's you know, source of funds checks, let's make sure we put a buffer into the minimum account deposits to prevent ACH fraud.

00:23:03.519 --> 00:23:15.200
Let's let's do, you know, let's let's spend these next month and a half integrating footprint, for instance, versus building the next new feature that could drive viral growth.

00:23:15.200 --> 00:23:18.000
Um yeah, right.

00:23:18.000 --> 00:23:25.119
Uh and just even something alongside the line of like, hey, do we want to use um incentivized onboarding?

00:23:25.119 --> 00:23:34.160
Well, the minute you incentivize anything, the minute you start giving away even a dollar, fraudsters will come knocking and they will come knocking in mass.

00:23:34.160 --> 00:23:36.799
So, like, we we actually had that conversation.

00:23:36.799 --> 00:23:44.960
It's like, hey, do we want to offer like $20, $20 brokerage dollars if somebody refers somebody or if somebody like signs up?

00:23:44.960 --> 00:23:50.799
And it's immediately like the minute you do that, you're gonna you're gonna pay the price.

00:23:50.799 --> 00:23:54.960
And then they're gonna start testing you, and then they're gonna attack you all at once.

00:23:54.960 --> 00:23:59.200
And like I've still I saw this at a firm, like attacks don't just happen onesie twosies.

00:23:59.200 --> 00:24:08.160
Like they might be some penetrating attacks that they're trying to figure out, like vulnerabilities, and then once they find it, they go quiet for like months, and then they just boom.

00:24:08.160 --> 00:24:13.519
10,000 people all came in, did the exact same thing, and now you're upside down and didn't have enough time to shut it off.

00:24:13.519 --> 00:24:16.319
Like it's it's dangerous.

00:24:16.319 --> 00:24:19.680
So back to your question, tail wagging the dog.

00:24:19.680 --> 00:24:27.119
I think this is I think it was unique where Steven, the CEO, was leaving leading growth and marketing.

00:24:27.119 --> 00:24:39.119
I was leading operations, and and with our compliance officer Justin, we're constantly kind of circling like what's the right levers to pull at what time.

00:24:39.119 --> 00:24:48.079
And and and then we had a CTO that came from Bumped, which is another broker dealer startup that learned a lot of the lessons on the fraud and compliance side.

00:24:48.079 --> 00:24:49.119
So he was dialed in.

00:24:49.119 --> 00:24:58.480
And I think the four of us navigated a very tumultuous first year and a half of being live, but uh we did, in my opinion, damn good.

00:24:58.480 --> 00:25:01.440
Um, we we closed up all those gaps preemptively.

00:25:01.440 --> 00:25:12.319
We've built really robust systems ahead of when most companies probably would because we understood that if we didn't have that foundation of security and trust, we could blow it up no matter how fast we grew it, right?

00:25:12.640 --> 00:25:14.400
It it all makes a lot of sense.

00:25:14.400 --> 00:25:18.000
Um I guess I'm curious, what was an adjustment?

00:25:18.000 --> 00:25:23.440
We spoke a lot about here are lessons that you're able to learn from the military and bring to the private sector.

00:25:23.440 --> 00:25:26.559
And I have more questions that we'll see in time we're manning.

00:25:26.559 --> 00:25:40.160
I'm curious on the on the other side, what was it like going from a conceptually we know a target and we're going to try to attack that target to I'm now the target and I need to try to build up the fences to prevent people from getting me?

00:25:40.880 --> 00:25:54.799
Yeah, like luckily, my time at a firm, I uh I was in the BizOps space and and I was on the commercial side prior to that, but I did work very closely with like the fraud ops team and the customer support team.

00:25:54.799 --> 00:26:09.200
And um it be it became clear that like there's a lot of organized, very, very, very smart people um trying to exploit.

00:26:09.200 --> 00:26:11.519
And I think I that helped me.

00:26:11.519 --> 00:26:19.359
That me that was like my first big transition of like I'm the predator, but now I'm the prey from going from military to like a fintech.

00:26:19.359 --> 00:26:30.240
And then um coming here, I I carried a lot of that, and like I did have a good, it was really a really healthy organization at a firm that really took it seriously.

00:26:30.240 --> 00:26:34.000
Like it was one of it was a heavy investment of the team, and they never joked around.

00:26:34.000 --> 00:26:40.720
And and I actually think it's harder at a firm than at dub because the job of a firm is to give away money, essentially.

00:26:40.720 --> 00:26:42.400
You're given loans, right?

00:26:42.400 --> 00:26:46.160
So if there's a target, that is the prime target.

00:26:46.160 --> 00:26:57.599
One thing that's good about being a retail investing app is it's kind of hard to structure um attack that's gonna be like lucrative to these people.

00:26:57.599 --> 00:27:06.559
I think the biggest one that we were seeing attempts multiple times were essentially like um you they deposit with one bank and it's essentially money laundering.

00:27:06.559 --> 00:27:09.599
They're trying to like deposit with one bank and then withdraw to another.

00:27:09.599 --> 00:27:14.000
And other than that, it was really hard like for them to walk away with cash.

00:27:14.000 --> 00:27:16.480
And then we built, there's already baked-in systems.

00:27:16.480 --> 00:27:28.799
So cognitively, I was I was primed for my firm time, and then coming here felt like I was going from like being like an absolute target to just a partial target, and a lot, but we all had good lessons learned.

00:27:28.799 --> 00:27:30.640
So we all committed to it.

00:27:30.640 --> 00:27:37.279
Like we all said, hey, we want to make sure that we were the dual path in growth with security and and fraud protection.

00:27:38.079 --> 00:27:41.359
I guess we military is famous for being disciplined.

00:27:41.359 --> 00:27:46.000
How do you think about being disciplined like when you're scaling up a startup?

00:27:46.000 --> 00:27:51.759
One of the biggest things you'll hear in the valley is you have to be disciplined about how you hire, about what product you build.

00:27:51.759 --> 00:27:53.359
You only have so many bets.

00:27:53.359 --> 00:27:55.200
How how do you think about that level of discipline?

00:27:55.200 --> 00:28:01.759
Because then it's also how do you say disciplined about your risk and compliance and making sure that that's actually scaling properly?

00:28:02.160 --> 00:28:15.440
Yeah, for okay, for the first year and a half, me and and our chief compliance officer, we answered every ticket and we approved every manual review personally.

00:28:15.440 --> 00:28:21.200
I'm talking, we didn't outsource to any contractor, we didn't hire anybody.

00:28:21.200 --> 00:28:37.279
I, if you came to dub between the dates of like when we launched to last October, I single-handedly took every like almost every KYC case, every case in general, like I was doing a thousand cases a week, but like that's how you stay disciplined.

00:28:37.279 --> 00:28:38.640
You are the process.

00:28:38.640 --> 00:28:44.079
I I physically said I'm going to be the COO of this company and B the process.

00:28:44.079 --> 00:28:46.000
And like it twofold.

00:28:46.000 --> 00:28:54.079
A, I saw the attacks happen firsthand, so I knew exactly what to look for and how to foil them and how to build for them.

00:28:54.079 --> 00:28:58.000
Two, I learned where people were heading friction with the app.

00:28:58.000 --> 00:29:06.799
So I was immediately feedback to the product because when you have the COO having to clean up a mess, that mess doesn't persist.

00:29:06.799 --> 00:29:07.599
You know what I mean?

00:29:07.599 --> 00:29:11.200
Like, we'll fix that and fix it quickly and make sure users are in a good state.

00:29:11.200 --> 00:29:20.079
So I think, and and like this is something that like our board respected and our investors are like, wait, Brett and Justin are like on support?

00:29:20.079 --> 00:29:21.839
It's like, yeah, you sure are.

00:29:21.839 --> 00:29:31.119
Because like there's no other way for me to train the next person, and you know, we're learning our hard lessons early, and that's when they're the most vulnerable, too.

00:29:31.119 --> 00:29:34.079
So even higher priority to take that action first.

00:29:35.119 --> 00:29:39.039
I have a couple of rapid fire questions for you at the end here.

00:29:39.039 --> 00:29:42.880
What's the metric that you're maybe most obsessed over?

00:29:42.880 --> 00:29:46.319
Um, and this can be about operational efficiency, it can be startup metric.

00:29:46.319 --> 00:29:49.519
Uh what do you what do you obsess most about internally now?

00:29:50.720 --> 00:29:58.799
So our for us right now, what we care the most about is how much money our users are creating.

00:29:58.799 --> 00:30:01.119
Um making, right?

00:30:01.119 --> 00:30:11.200
Like, are you like why exist, like, you know, and and we've been really, you know, the market's been up and to the right for many months, years now.

00:30:11.200 --> 00:30:22.000
Um, we're obsessing right now over like how do we ensure we continue the track record that we've provided for our users, and how do we make sure that everything we do is in their best interest?

00:30:22.000 --> 00:30:26.720
And like, this is how much over the SP 500 they've hit.

00:30:26.720 --> 00:30:33.680
This is, you know, all those investing metrics that we just we if we're not doing that, we don't deserve to be a company.

00:30:33.680 --> 00:30:34.480
We shouldn't exist.

00:30:34.480 --> 00:30:36.160
Like, we're not making the world a better place.

00:30:36.160 --> 00:30:47.440
Because our whole premise is we're democratize democratizing access to retail investing strategies that typically aren't available to those that that don't have a ton of cash.

00:30:47.440 --> 00:30:53.440
So as long as we continue to make people make their lives better, that's what I'm obsessing over, quite honestly.

00:30:54.240 --> 00:30:59.359
Tougher to manage a platoon or a uh or a team in a startup.

00:31:00.160 --> 00:31:01.200
Good question.

00:31:01.200 --> 00:31:05.359
Military folks, yeah, they're they're they're tough.

00:31:05.359 --> 00:31:16.480
It in a time of clear mission, like if we're going to combat, if we're doing something, like army's easy to manage because we all know exactly what to do.

00:31:16.480 --> 00:31:19.279
But when you give them too much free time, it's very difficult.

00:31:19.279 --> 00:31:26.799
But I would say startups are much more difficult because you have a lot more constituents to make happy.

00:31:26.799 --> 00:31:30.640
Like in the army, it's one job, do the mission, do the mission right.

00:31:30.640 --> 00:31:35.200
Uh in this startup, especially as a COO, I'm like, do we how's spend?

00:31:35.200 --> 00:31:36.880
Uh how's HR looking?

00:31:36.880 --> 00:31:38.400
How's growth?

00:31:38.400 --> 00:31:39.759
How's fraud?

00:31:39.759 --> 00:31:41.119
How's the market?

00:31:41.119 --> 00:31:45.200
How's our you know, users' financial well-being?

00:31:45.200 --> 00:31:46.960
Like, there's there's a million things.

00:31:46.960 --> 00:31:48.720
Our product, is it working?

00:31:48.720 --> 00:31:49.759
Is it up?

00:31:49.759 --> 00:31:53.920
God forbid it goes down for a second during a trading day.

00:31:54.079 --> 00:31:56.799
Like it's a different level of stress, yeah.

00:31:56.799 --> 00:32:00.880
And my final question: what do you think is dub's most unfair advantage?

00:32:00.880 --> 00:32:04.960
Or in other words, like what has you most excited about dub as we go into 2026?

00:32:05.519 --> 00:32:12.319
I think we're we're we're the first to really tap into this idea of copy trading through the lens of a brokerage.

00:32:12.319 --> 00:32:19.039
Uh, we have a compliance moat, we have a head start, you know, Robinhood's trying to do it.

00:32:19.039 --> 00:32:28.160
EToro just said they want to get into the US and start doing it, but we have the users, we have the reputation, and we're building the brand, and the brand is becoming recognizable.

00:32:28.160 --> 00:32:32.079
And you know, let's go do this, is my attitude right now.

00:32:32.079 --> 00:32:34.240
So we have nothing but opportunity.

00:32:34.240 --> 00:32:41.839
Uh we have white, white space ahead of us to grab and continue to grab, and I just want to take advantage of that.

00:32:42.640 --> 00:32:43.440
I love it.

00:32:43.440 --> 00:32:45.279
Thank you so much for joining.

00:32:45.279 --> 00:32:46.480
This is awesome.

00:32:46.480 --> 00:32:50.240
Uh I'm gonna send you clips from the rehearsal, and I'm curious your thoughts.

00:32:50.240 --> 00:32:52.240
And uh I'm sure I'll see you soon.

00:32:52.240 --> 00:32:53.519
Awesome.