Deel spy affidavit drops: CEO allegedly paid Rippling employee €5K/month for corporate espionage

Summary

Deel CEO Alex Macedo allegedly orchestrated corporate espionage against Rippling by recruiting a Rippling employee to spy on the payroll and HRIS company, according to a signed affidavit released this week. The spy arrangement began in September 2024 and unraveled when Rippling set a honeypot Slack channel designed to prove Deel's involvement.

Macedo pitched the scheme directly, invoking James Bond to make it sound appealing. He worked with his father Philippe (Deel's CFO and chairman) and the COO to manage the operation. Communications moved to Telegram to avoid detection. They created code words such as "send that watch to London" for payment coordination and routed cryptocurrency payments through a centralized exchange, creating a permanent blockchain trail.

The compensation was notably low: €5,000 per month, or roughly €60,000 annualized. A doctor's entry-level salary in Ireland exceeds that figure. If even one or two Rippling client contracts switched to Deel as a result of the intelligence, the intelligence would have been worth tens of millions of dollars over time. The spy also reported on Rippling's top talent and which executives were considering leaving.

Deel's in-house lawyer, Asif, actively participated. When the spy stumbled into the honeypot Slack channel where Rippling's chief revenue officer was waiting, Asif suggested the spy's family flee to Dubai that night. He offered reassurance that Rippling was lying and spent 45 minutes to an hour on a Telegram call with the spy's wife to convince her the allegations were fabricated.

The spy's family urged him to cooperate with Rippling. After receiving a text message saying "the truth will set you free," he flipped and recognized that protecting Deel was harming his family. He is now cooperating with Rippling under a signed affidavit that carries criminal penalties if false.

Deel has not publicly responded. The case is currently civil but could escalate to criminal charges. Rippling used its own payroll product to catch the spy, a fact likely to become central to its marketing.

Deel has executed phenomenally and built one of the most impressive revenue ramps in the last decade, which suggests desperation was not obvious. Both companies operate in a market vast enough that Rippling and Deel could each capture hundreds of millions of dollars in annual recurring revenue by taking share from legacy providers like ADP and Paycom without resorting to espionage. Yet the operation suggests either strategic desperation or recklessness at the executive level.

Alex Macedo, Philippe, and the COO will face pressure to step down, though whether criminal charges materialize remains unclear. Deel's shareholders face secondary legal exposure. If they pay Rippling a settlement without disclosing this liability to investors, they could face securities fraud claims. The company sits between two liabilities: keeping Rippling happy with a large settlement or keeping shareholders happy by fighting the claim. Both paths carry legal risk.

Most Deel customers likely remain unaware of the scandal and have no incentive to rip out their HRIS system. Rippling sales teams have the clearest competitive opening in company history.