The Ultimate “Used Car” Check: Why Due Diligence Matters

Think about the last time you bought a used car. You probably didn’t just hand over a stack of cash because the seller said it ran perfectly. You popped the hood, checked the mileage, and maybe even paid a mechanic to make sure the engine wasn't going to blow up on your drive home.

In the corporate world, this exact same process is called due diligence

Before one company buys another, they have to do their homework. It’s a systematic, deep-dive investigation to verify that the buyer is actually getting what they’re paying for. The goal is simple: find the skeletons in the closet before you sign the contract. That means digging through everything, tax returns, employee contracts, tech stacks, and workplace culture.

 

Why M&A is a Dangerous Game

When companies merge or buy each other out (Mergers and Acquisitions), the stakes are astronomically high. We are talking millions, sometimes billions, of dollars.

Historically, these deals are incredibly risky. Studies show that a staggering 70% to 90% of mergers fail. Often, the buyer signs the paperwork only to discover massive hidden debts or broken technology. Skipping due diligence is essentially corporate suicide. A thorough investigation is the only way a company can spot deal-breakers early, negotiate a lower price, or just walk away entirely.

To understand just how catastrophic skipping the details can be, we just need to look at one of the most embarrassing corporate blunders in recent history.

 

The Target: Frank and the $175 Million Mirage

In the summer of 2021, JPMorgan Chase, the largest and arguably most sophisticated bank in the U.S., wanted to attract younger, college-aged customers.

Enter Frank, a startup founded in 2017 by an ambitious young entrepreneur named Charlie Javice. Frank was essentially an online tool designed to help students breeze through complicated government financial aid forms. To JPMorgan, buying Frank looked like the ultimate shortcut to building lifelong banking relationships with Gen Z.

 

The Pressure to Compete: Racing Bank of America

But why did a massive institution like JPMorgan invest with such a rushed approach instead of conducting a thorough and careful breakdown of the business? The primary reason was Bank of America. At the time, JPMorgan was trying to compete directly with Bank of America, which was already making significant strides in capturing the younger demographic. This fierce rivalry created an intense pressure to secure the college-aged market quickly, pushing JPMorgan's executives to speed through the acquisition process and ultimately overlook critical warning signs.

During negotiations, the startup's entire valuation hinged on a single metric: its user base. Javice confidently told JPMorgan executives that Frank had a highly engaged audience of 4.25 million college students.

JPMorgan took the bait. They agreed to buy Frank for $175 million, thinking they were getting millions of new customers for a steal.

 

There was just one problem: It was a complete lie. In reality, Frank had fewer than 300,000 actual users. The company possessed barely 7% of the audience it claimed.

 

"The $18,000 Fake-Out"

 

When JPMorgan’s massive 350-person due diligence team started poking around, they asked Javice for the underlying customer data to verify her claims. Knowing the deal would instantly collapse if they saw the real numbers, Javice panicked.

First, she asked her own engineering director to fabricate the data. When he refused, she went rogue. She hired an outside data science professor and paid him about $18,000 to write a script that combined real first and last names to generate millions of completely synthetic student identities.

 

She handed this master list of fake humans over to JPMorgan.

 

Incredibly, the deception worked. The bank's army of experts reviewed the spreadsheets and completely failed to realize the data was entirely made up. The $175 million deal closed in September 2021. Javice pocketed tens of millions of dollars and landed a cushy job as a Managing Director at the bank.

 

The Unraveling

The victory lap didn't last long. Trouble started the second JPMorgan actually tried to use their shiny new toy.

 

The bank’s marketing team fired off a promotional email to a test group of 400,000 Frank customers. The results were hilariously bad:

- 70 of the emails bounced back because the addresses didn't exist.

- Only 28 were successfully delivered.

- Out of 400,000 supposed users, exactly 103 people clicked the link.

 

JPMorgan immediately knew they’d been scammed. Since they now owned the company, they scoured Frank's internal servers and quickly found the smoking gun: the email chain between Javice and the professor, outlining the $18,000 fake-data scheme in plain text.

 

Prison and the $100 Million Legal Loophole

The fallout was nuclear. JPMorgan shut Frank down and sued Javice, while the federal government slapped her with criminal charges. In the spring of 2025, a jury convicted her of massive fraud, resulting in a federal prison sentence of over seven years.

 

A judge also ordered Javice and her partner to pay $287 million in restitution. But here is where the story gets even crazier: that massive figure included the original purchase price plus over $100 million in legal fees that JPMorgan was forced to pay.

 

Why did the bank have to pay for the trial.

 

Because of a massive failure in legal due diligence. Under standard corporate law, companies often have to cover the legal defense of their executives. JPMorgan’s lawyers failed to write a specific "fraud exception" into the purchase contract. As a result, the bank was legally obligated to foot the bill for the criminal defense lawyers fighting against them.

 

The Real Lesson: Trust, but Verify

"It was a massive failure of imagination and a huge lesson in the dangers of trusting without verifying."

The collapse of the Frank acquisition is a permanent, incredibly expensive reminder of why due diligence exists. JPMorgan was fooled by a founder with a fake spreadsheet because they checked to see if a list of names existed, but they never checked to see if those names belonged to real human beings.

 

The big takeaways for any business

 

- Never grade your own homework:If a company's entire value relies on digital users, hire independent, third-party tech auditors to stress-test the data.

- Close the legal loopholes: Contracts need to be ironclad, specifically protecting the buyer from intentional fraud so they don't end up funding a scammer's legal defense.

 

At the end of the day, due diligence isn't just boring corporate paperwork. It is the ultimate protective shield. As businesses rely more heavily on digital data, verifying that data isn't just a formality, it’s survival.