Mar 31, 2026 · 31m · y-combinator

This Startup Catches Fraud at Scale · Y Combinator

Karine Malata · 23m spoken Jared Friedman · 5m spoken
0:00 / 0:00
▶ Watch on YouTube →

gold bands on the timeline = statements, start to end. Hover to read, click to jump. CC turns on captions

In this episode of Founder Firesides, Y Combinator Managing Partner Jared Friedman interviews Karine Mellata, Co-founder and CEO of Variance, as the company emerges from stealth with a $21 million Series A announcement. Karine discusses how Variance utilizes autonomous AI agents to automate complex fraud, compliance, and risk reviews for major enterprises while reflecting on founder resilience and AI-native engineering culture.

How this conversation actually went

Every chapter scored 0–10 on four independent dynamics. Hover any point for the reasoning behind the score. The partners hold 19.3% of the talking time here. How this is scored →

The partners as informed peer 4.6 Guest teaching 3.4 Guest disagreement 0.3 The partners pushing back 0.6
05100:0010:0020:0030:000:49–5:56 · The partners as informed peer 4/10 What Variance Does and Stealth Strategy Jared sets a collaborative tone celebrating the Series A announcement and clearly illustrates how GoFundMe fraud works. Karine explains why Variance operates in stealth to avoid tipping off bad actors.5:56–9:28 · The partners as informed peer 5/10 Broader Market Use Cases and AI Agent Architecture Jared asks about data acquisition methods and connects them to human analyst behavior. Karine outlines the three core pillars of agentic risk systems and accessing the open web.9:28–12:05 · The partners as informed peer 4/10 Technical Challenges: Ingesting Unstructured UI Data Jared pushes back on the difficulty of data ingestion by asking if it is just relational DB queries. Karine corrects him by explaining that enterprise data is scattered across legacy systems and hidden behind human-facing UIs.12:05–15:29 · The partners as informed peer 5/10 Shift from Deterministic Rules to Self-Healing AI Agents Jared guides the discussion toward agentic evolution beyond legacy rules engines. Karine details how self-healing agent architectures uncovered multi-entity state-sponsored election influence rings.15:29–20:10 · The partners as informed peer 4/10 Real-World Impact, Lean Team Leverage, and Hiring Jared and Karine discuss maintaining extreme leverage with a lean team of five engineers. Karine shares unexpected lessons regarding the necessity of human review UIs and non-technical staff using Cursor.20:10–24:57 · The partners as informed peer 5/10 Origin Story: From Apple to YC and Enterprise Sales Jared contributes context about IAC's portfolio and highlights the difficulty of landing enterprise customers before ChatGPT existed. Karine explains how their Apple fraud background earned early trust.24:57–31:10 · The partners as informed peer 5/10 Founder Crisis: Facing Adversity and Conviction in Mission Jared synthesizes how Variance differed from typical pivoting startups due to domain conviction. Karine recounts surviving a severe accident and finding renewed dedication to their mission.0:49–5:56 · Guest teaching 3/10 What Variance Does and Stealth Strategy Jared sets a collaborative tone celebrating the Series A announcement and clearly illustrates how GoFundMe fraud works. Karine explains why Variance operates in stealth to avoid tipping off bad actors.5:56–9:28 · Guest teaching 4/10 Broader Market Use Cases and AI Agent Architecture Jared asks about data acquisition methods and connects them to human analyst behavior. Karine outlines the three core pillars of agentic risk systems and accessing the open web.9:28–12:05 · Guest teaching 6/10 Technical Challenges: Ingesting Unstructured UI Data Jared pushes back on the difficulty of data ingestion by asking if it is just relational DB queries. Karine corrects him by explaining that enterprise data is scattered across legacy systems and hidden behind human-facing UIs.12:05–15:29 · Guest teaching 4/10 Shift from Deterministic Rules to Self-Healing AI Agents Jared guides the discussion toward agentic evolution beyond legacy rules engines. Karine details how self-healing agent architectures uncovered multi-entity state-sponsored election influence rings.15:29–20:10 · Guest teaching 3/10 Real-World Impact, Lean Team Leverage, and Hiring Jared and Karine discuss maintaining extreme leverage with a lean team of five engineers. Karine shares unexpected lessons regarding the necessity of human review UIs and non-technical staff using Cursor.20:10–24:57 · Guest teaching 2/10 Origin Story: From Apple to YC and Enterprise Sales Jared contributes context about IAC's portfolio and highlights the difficulty of landing enterprise customers before ChatGPT existed. Karine explains how their Apple fraud background earned early trust.24:57–31:10 · Guest teaching 2/10 Founder Crisis: Facing Adversity and Conviction in Mission Jared synthesizes how Variance differed from typical pivoting startups due to domain conviction. Karine recounts surviving a severe accident and finding renewed dedication to their mission.0:49–5:56 · Guest disagreement 0/10 What Variance Does and Stealth Strategy Jared sets a collaborative tone celebrating the Series A announcement and clearly illustrates how GoFundMe fraud works. Karine explains why Variance operates in stealth to avoid tipping off bad actors.5:56–9:28 · Guest disagreement 0/10 Broader Market Use Cases and AI Agent Architecture Jared asks about data acquisition methods and connects them to human analyst behavior. Karine outlines the three core pillars of agentic risk systems and accessing the open web.9:28–12:05 · Guest disagreement 2/10 Technical Challenges: Ingesting Unstructured UI Data Jared pushes back on the difficulty of data ingestion by asking if it is just relational DB queries. Karine corrects him by explaining that enterprise data is scattered across legacy systems and hidden behind human-facing UIs.12:05–15:29 · Guest disagreement 0/10 Shift from Deterministic Rules to Self-Healing AI Agents Jared guides the discussion toward agentic evolution beyond legacy rules engines. Karine details how self-healing agent architectures uncovered multi-entity state-sponsored election influence rings.15:29–20:10 · Guest disagreement 0/10 Real-World Impact, Lean Team Leverage, and Hiring Jared and Karine discuss maintaining extreme leverage with a lean team of five engineers. Karine shares unexpected lessons regarding the necessity of human review UIs and non-technical staff using Cursor.20:10–24:57 · Guest disagreement 0/10 Origin Story: From Apple to YC and Enterprise Sales Jared contributes context about IAC's portfolio and highlights the difficulty of landing enterprise customers before ChatGPT existed. Karine explains how their Apple fraud background earned early trust.24:57–31:10 · Guest disagreement 0/10 Founder Crisis: Facing Adversity and Conviction in Mission Jared synthesizes how Variance differed from typical pivoting startups due to domain conviction. Karine recounts surviving a severe accident and finding renewed dedication to their mission.0:49–5:56 · The partners pushing back 0/10 What Variance Does and Stealth Strategy Jared sets a collaborative tone celebrating the Series A announcement and clearly illustrates how GoFundMe fraud works. Karine explains why Variance operates in stealth to avoid tipping off bad actors.5:56–9:28 · The partners pushing back 1/10 Broader Market Use Cases and AI Agent Architecture Jared asks about data acquisition methods and connects them to human analyst behavior. Karine outlines the three core pillars of agentic risk systems and accessing the open web.9:28–12:05 · The partners pushing back 3/10 Technical Challenges: Ingesting Unstructured UI Data Jared pushes back on the difficulty of data ingestion by asking if it is just relational DB queries. Karine corrects him by explaining that enterprise data is scattered across legacy systems and hidden behind human-facing UIs.12:05–15:29 · The partners pushing back 0/10 Shift from Deterministic Rules to Self-Healing AI Agents Jared guides the discussion toward agentic evolution beyond legacy rules engines. Karine details how self-healing agent architectures uncovered multi-entity state-sponsored election influence rings.15:29–20:10 · The partners pushing back 0/10 Real-World Impact, Lean Team Leverage, and Hiring Jared and Karine discuss maintaining extreme leverage with a lean team of five engineers. Karine shares unexpected lessons regarding the necessity of human review UIs and non-technical staff using Cursor.20:10–24:57 · The partners pushing back 0/10 Origin Story: From Apple to YC and Enterprise Sales Jared contributes context about IAC's portfolio and highlights the difficulty of landing enterprise customers before ChatGPT existed. Karine explains how their Apple fraud background earned early trust.24:57–31:10 · The partners pushing back 0/10 Founder Crisis: Facing Adversity and Conviction in Mission Jared synthesizes how Variance differed from typical pivoting startups due to domain conviction. Karine recounts surviving a severe accident and finding renewed dedication to their mission.

speaking balance: gold is the partners, purple is the guest (3 minute bins)

0:00 · the partners 54.6% · guest 45.4%0:00 · the partners 54.6% · guest 45.4%3:00 · the partners 27.5% · guest 72.5%3:00 · the partners 27.5% · guest 72.5%6:00 · the partners 2.6% · guest 97.4%6:00 · the partners 2.6% · guest 97.4%9:00 · the partners 25.3% · guest 74.7%9:00 · the partners 25.3% · guest 74.7%12:00 · the partners 8.9% · guest 91.1%12:00 · the partners 8.9% · guest 91.1%15:00 · the partners 16.6% · guest 83.4%15:00 · the partners 16.6% · guest 83.4%18:00 · the partners 6.5% · guest 93.5%18:00 · the partners 6.5% · guest 93.5%21:00 · the partners 12% · guest 88%21:00 · the partners 12% · guest 88%24:00 · the partners 20.1% · guest 79.9%24:00 · the partners 20.1% · guest 79.9%27:00 · the partners 26.9% · guest 73.1%27:00 · the partners 26.9% · guest 73.1%30:00 · the partners 5% · guest 95%30:00 · the partners 5% · guest 95%
Sharpest disagreement ▶ 9:57 Rebuttal of simplistic database ingestion premise

Karine directly counters Jared's assumption that data ingestion is straightforward database extraction with 'I wish it was this simple' and explains real-world fragmentation.

Hardest push from the partners ▶ 9:57 Jared challenges the complexity of unstructured data

Jared interrupts to probe whether the data ingestion challenge is overstated, asking why they cannot simply query relational databases directly.

Biggest teaching moment ▶ 10:04 Karine educates on scraping human UIs for enterprise data

Karine breaks down why fraud data is locked behind multiple disjointed internal dashboards, forcing them to deploy headless browser agents to capture UI data.

The partners hold their own ▶ 4:39 Jared breaks down GoFundMe disaster fraud dynamics

Jared demonstrates sharp domain comprehension by articulating the exact sequence of opportunistic fake fundraisers following high-profile crises.

the scores for every segment, with the reasoning behind each
ChapterTopicThe partners as informed peerGuest teachingGuest disagreementThe partners pushing backWhy
What Variance Does and Stealth Strategy 4300 Jared sets a collaborative tone celebrating the Series A announcement and clearly illustrates how GoFundMe fraud works. Karine explains why Variance operates in stealth to avoid tipping off bad actors.
Broader Market Use Cases and AI Agent Architecture 5401 Jared asks about data acquisition methods and connects them to human analyst behavior. Karine outlines the three core pillars of agentic risk systems and accessing the open web.
Technical Challenges: Ingesting Unstructured UI Data 4623 Jared pushes back on the difficulty of data ingestion by asking if it is just relational DB queries. Karine corrects him by explaining that enterprise data is scattered across legacy systems and hidden behind human-facing UIs.
Shift from Deterministic Rules to Self-Healing AI Agents 5400 Jared guides the discussion toward agentic evolution beyond legacy rules engines. Karine details how self-healing agent architectures uncovered multi-entity state-sponsored election influence rings.
Real-World Impact, Lean Team Leverage, and Hiring 4300 Jared and Karine discuss maintaining extreme leverage with a lean team of five engineers. Karine shares unexpected lessons regarding the necessity of human review UIs and non-technical staff using Cursor.
Origin Story: From Apple to YC and Enterprise Sales 5200 Jared contributes context about IAC's portfolio and highlights the difficulty of landing enterprise customers before ChatGPT existed. Karine explains how their Apple fraud background earned early trust.
Founder Crisis: Facing Adversity and Conviction in Mission 5200 Jared synthesizes how Variance differed from typical pivoting startups due to domain conviction. Karine recounts surviving a severe accident and finding renewed dedication to their mission.

Statements from this episode (14)

Assertion Open · timeframe Mar 2026
Friedman: Variance emerges from stealth with $21M Series A
“We are announcing that Variance is coming out of stealth and announcing their twenty-one million dollar Series A, and I am really excited to be here with Karine, the co-founder of Variance.”
Jared Friedman Mar 31, 2026 ▶ 0:15
Assertion Supported
Mellata: Variance Reviews GoFundMe Fundraisers and Fortune 50 Seller Verifications
“We've been working with GoFundMe, for instance, to review all of their fundraisers at scale, some Fortune 50 for verifying all of their sellers and complex UBO verifications, and today coming out of stealth.”
Karine Malata Mar 31, 2026 ▶ 1:04
Assertion Supported
Mellata: GoFundMe uses Variance AI agents for fraud and sanctions compliance
“So Variance is used to verify, for instance, if a fundraiser is going to be built for A military operation, for instance, or if you're building a fundraiser for a crisis that you were not part of, which would be fraudulent, well, GoFundMe sort of has the respo…”
Karine Malata Mar 31, 2026 ▶ 3:17
Insight
Mellata: Automating KYC and KYB Requires Only Three Core Building Blocks
“There's really only three building blocks that you need. So you have the compliance documents, the standard operating procedure, so what the company deems As necessary to verify at the onboarding level or at any other parts of the life cycle of that entity. On…”
Karine Malata Mar 31, 2026 ▶ 7:51
Disclosure
Mellata: Variance agents can scrape legacy human review UIs via browser
“So at the moment, the way to integrate with variants can be reverse ETL, API, but very recently we've been awarded this third way, which is spinning up a browser, opening up a really old review tool that was built for a human, pulling that data, and then reaso…”
Karine Malata Mar 31, 2026 ▶ 11:29
Insight
Mellata: AI Agents Eliminate the Need for Specialized Fraud Classifiers
“You don't need a classifier anymore because AI agents are able to read a set of standard operating procedure and reason over an image or reason over sort of unstructured data and know that this is possibly chargeback fraud. You don't need a specialized classif…”
Karine Malata Mar 31, 2026 ▶ 13:42
Assertion Not checkable as stated
Mellata: Variance detected state-sponsored election fraud for a Fortune 500 client
“And throughout the elections, because our AI agents had access to the context of entities in relation to other entities, so How does this user fit into all of the other users that we're looking at? We were able to detect really complex fraud rings of especiall…”
Karine Malata Mar 31, 2026 ▶ 14:40
Assertion Not checkable as stated
Mellata: Variance operates with 12 total employees and five software engineers
“So we're 12 we have five software engineers, so we've been, we've remained very, very lean.”
Karine Malata Mar 31, 2026 ▶ 16:30
Insight
Mellata: AI agent triage leaves a complex 1% requiring investigative dashboards
“What we found out is that because AI agents are able to take on the simplest part of the workflow, so they're able to triage 99% of cases, that one percent is usually going to be the most complex cases that need to be reviewed by a human, and you need a really…”
Karine Malata Mar 31, 2026 ▶ 17:11
Opinion
Mellata: Variance's five engineers output software equivalent to 25 people
“I would say we're five, but I think in terms of software output, we're probably closer to a 25 people team.”
Karine Malata Mar 31, 2026 ▶ 19:16
Assertion Not checkable as stated
Mellata: Variance's non-technical CSM ships features autonomously with Cursor
“Our customer success manager, who's entirely non-technical, but interfaces with enterprise customers on a day-to-day basis, now gets to take on feature requests, especially the simple ones, directly give them to Cursor, a Cursor agent, and then directly be abl…”
Karine Malata Mar 31, 2026 ▶ 19:41
Assertion Not checkable as stated
Mellata: IAC was Variance's first enterprise customer
“Our first customer was a company called IAC. They're a publicly traded company.”
Karine Malata Mar 31, 2026 ▶ 22:25
Assertion Not checkable as stated
Mellata: OpenAI model upgrades cut Variance's pilot costs tenfold
“As we were running this pilot for this first customer, sort of OpenAI was coming out with new models in the middle of the pilot, which was changing, one, our cost structure by a 10 x factor, but also was changing our performance quite a lot.”
Karine Malata Mar 31, 2026 ▶ 24:17
Assertion Not checkable as stated
Mellata: Variance's revenue doubled consecutively in July and August 2024
“I think during that month, our revenue was doubling within the month and then doubling the month after.”
Karine Malata Mar 31, 2026 ▶ 25:21
Made with StarZero

Turn any episode into a week of clips.

This entire site, over 300 episodes transcribed, diarized, checked and made playable, runs on the StarZero media pipeline. Drop in your own episode and the podcast clipper finds the moments worth sharing, cuts them, captions them, and reframes them for every feed.