The CryptoCaRLo
Due Diligence Framework
A practical framework for investigating companies, platforms, investments, business opportunities, and financial programs before making an important decision.
Independent thinking · Better questions · Verifiable evidenceBefore I Said Yes
Watch the documentary that shows how I investigated a significant financial opportunity before attaching my name, reputation, time, and resources to it.
Watch the DocumentaryThis framework is not designed to tell you what decision to make. It is designed to help you slow down, separate evidence from opinion, identify unanswered questions, and reach your own informed conclusion. It can reduce risk, but no checklist can eliminate risk or guarantee a successful outcome.
Understand the Opportunity
Before judging an opportunity, make sure you can clearly explain what it is, what it does, and where the money comes from.
What Is Being Offered?
- Can you explain it in plain language?
- What product, service, platform, or program is involved?
- What problem does it claim to solve?
- Who is the intended customer or user?
Where Does the Money Come From?
- What activity produces revenue or returns?
- Is real value being created?
- Could the business survive if recruiting stopped?
- Are payments supported by actual business activity?
The Plain-Language Test
- If the explanation depends entirely on jargon, excitement, or secrecy, keep investigating.
- If you cannot explain it to another beginner, you may not understand it well enough yet.
- Complexity should never be used to hide basic facts.
Investigate the Leadership
A credible leadership team should leave a verifiable trail and should be willing to answer difficult questions.
Identity and Track Record
- Can the founders and executives be independently identified?
- Does their claimed background match public records?
- What have they built, managed, or led before?
- Are past failures, disputes, or sanctions explained honestly?
Accessibility and Conduct
- Will leadership appear live in person or on a real video call?
- Do they welcome difficult questions?
- Are answers direct, specific, and consistent?
- Do they use pressure, defensiveness, or scripted talking points?
Verify the Company
Registration alone does not prove legitimacy, but a legitimate operation should have a legal, operational, and physical footprint that can be examined.
Legal Structure
- Where is the company registered?
- Does the legal entity match the promoted name?
- Who owns or controls the entity?
- Are records current and independently verifiable?
Physical and Operational Presence
- Is there a real office or operating location?
- Can occupancy or business activity be confirmed?
- Are staff, systems, and operations visible?
- Is the address more than a mailbox or virtual office?
History and Consistency
- How long has the company operated?
- Has it repeatedly changed names or jurisdictions?
- Do older documents match current claims?
- Are explanations consistent across official materials?
Professional Communication
- Are policies, fees, risks, and restrictions clearly written?
- Do official materials contradict one another?
- Does the company correct errors transparently?
- Can you find clear support and contact information?
Check Compliance and Documentation
Do not assume that a certificate, license number, registration, audit, or legal opinion means more than it actually does.
Registration vs. Authorization
- Is the company merely registered—or authorized for the exact service being offered?
- Which authority issued the record?
- What activities does it actually cover?
- Can it be verified on the authority's own website?
Warnings and Enforcement History
- Are there active warnings, sanctions, lawsuits, or investigations?
- Does the warning refer to the same legal entity?
- What evidence supports the allegation?
- Has the company responded with verifiable documentation?
Audits and Independent Reviews
- Who performed the audit or review?
- Is the firm independently verifiable?
- Is the actual report available?
- What exactly was examined—and what was not?
Terms, Contracts, and Risk Disclosures
- Read the full agreement before sending money.
- Identify withdrawal rules, fees, lockups, and termination clauses.
- Look for unilateral change provisions.
- Never rely only on a presentation or verbal promise.
Test the Financial Model
Attractive numbers are not evidence. Understand the assumptions, the source of returns, the risks, and whether the mathematics remain sustainable over time.
Revenue and Payout Sustainability
- Do payouts exceed what the underlying activity could realistically generate?
- Are older participants paid mainly from new participant money?
- What happens if growth slows?
- Are results dependent on ideal assumptions?
Recruiting and Compensation
- Can someone receive value without recruiting?
- Is there a genuine product or service?
- Does the compensation plan survive basic arithmetic?
- Are recruitment rewards larger than customer-based revenue?
Fees, Withdrawals, and Liquidity
- What fees are charged and when?
- Can withdrawals be tested with a small amount?
- Are delays explained clearly?
- Can withdrawal rules change without notice?
Independent Calculation
- Run the numbers yourself.
- Test conservative, moderate, and poor-outcome scenarios.
- Include all fees and possible losses.
- Do not confuse a projection with a promise.
Examine Technology and Security
The exact checks depend on the opportunity. Crypto, forex, AI, software, and payment platforms each have different technical risks.
Technology Claims
- Can the technology be demonstrated?
- Is there evidence beyond marketing language?
- Who built and maintains it?
- Are limitations and failure scenarios disclosed?
Security and Custody
- Who controls customer funds or digital assets?
- What protections exist against theft, fraud, or misuse?
- Are security incidents disclosed?
- What happens if the platform closes or access is lost?
Specialized Checks When Applicable
- Crypto: smart-contract audits, token supply, wallet controls, liquidity, and on-chain activity.
- Forex or trading: broker regulation, account ownership, custody, trading records, and withdrawal testing.
- AI or software: data privacy, security controls, technical capability, and dependence on third-party systems.
Observe the Community and Culture
Culture reveals what official presentations often hide. Pay attention to how people behave when questions, delays, disagreements, or problems arise.
Healthy Signs
- Education is encouraged.
- Risks are discussed openly.
- Members can disagree respectfully.
- Questions are answered without humiliation or pressure.
Warning Signs
- Critics are attacked instead of answered.
- Urgency is used to prevent investigation.
- Leaders discourage independent research.
- Loyalty is valued more than truth.
Conduct Your Own Personal Investigation
Documents matter—but direct observation can reveal things that websites and presentations cannot. Go as far as reasonably possible before making a significant commitment.
How to Evaluate Reviews, Forums, and “Scam Alert” Sites
Positive and negative reports can both contain useful information. Both can also contain errors, bias, missing context, or repeated claims that nobody independently verified.
Separate the specific allegation from emotional language and broad conclusions.
Look for original records, documents, transactions, filings, or direct statements.
Compare the evidence, record what remains unknown, and avoid borrowing someone else's certainty.
Record What You Know—and What You Do Not Know
Evidence Supporting the Opportunity
- What has been independently verified?
- Which claims have supporting documents?
- What have you personally observed?
- Which strengths appear durable?
Concerns and Unanswered Questions
- What remains unclear?
- Which answers depend on trust rather than proof?
- What could cause loss or failure?
- What information is still missing?
Your Personal Risk Test
- Can you afford the financial loss?
- Can you afford the damage to your reputation?
- Would you still proceed if the best-case outcome never happens?
- Are you deciding from evidence—or from excitement, fear, loyalty, or pressure?
Your Decision Does Not Have to Be “Yes” or “No” Today
The Three Rules I Live By
Due diligence is never overnight.
Some opportunities fall apart after five minutes of investigation. Others—especially polished ones—require weeks or months of layered research. Take your time. Ask better questions. Verify independently. Then make your own decision.
Watch Before I Said YesEven an opportunity that passes every check can still fail because of mismanagement, market changes, fraud, poor execution, technology failure, or circumstances nobody anticipated. Due diligence reduces risk. It does not eliminate it.
