A DOJ Probe, Spy Allegations, and Compliance Questions: Why Deel's Legal Problems Matter for EOR Buyers

When the U.S. Justice Department starts asking questions about your employer of record (EOR), it’s a red flag you can’t afford to ignore.

Deel is facing a reported federal criminal investigation tied to allegations of corporate espionage against rival Rippling. For a company trusted with payroll, employment records, compliance obligations, and sensitive workforce data, that kind of scrutiny changes the buying conversation from “Which vendor has the best features?” to “Which vendor can we actually trust?” 

Rippling vs. Deel: From lawsuit to criminal probe

According to reporting by The Wall Street Journal and The New York Times, the U.S. Department of Justice has opened a criminal investigation into allegations that Deel participated in a corporate espionage operation targeting rival HR technology company Rippling. The reported probe follows explosive allegations that a Rippling employee secretly collected internal information and passed it to Deel as part of a covert intelligence-gathering effort.

These allegations emerged from Rippling’s 2025 lawsuit filed in California, which accused Deel of orchestrating a long-running campaign to obtain confidential information about its competitor's customers, pricing, sales strategy, product development, and internal operations, according to Rippling and Bloomberg Law. 

At the center of the case is Keith O'Brien, a payroll compliance manager in Rippling's Dublin office, according to reporting from The New York Times, TechCrunch,  SFGATE and Calcalist.

While the trade-secret lawsuit is being litigated in federal court in California, many of the allegations involving O'Brien emerged through related proceedings before the Irish High Court. 

According to a sworn affidavit filed in Ireland and related Irish court proceedings, O'Brien allegedly accessed internal company systems and shared sensitive business information with Deel executives. Rippling alleges the activity continued for months and involved hundreds of internal channels and documents.

The lawsuit became dramatically more serious when O'Brien submitted an affidavit describing his alleged relationship with Deel. In it, O'Brien claimed he was recruited to provide information from inside Rippling, received compensation for doing so, and communicated through encrypted channels designed to conceal the arrangement, according to reporting from TechCrunch. 

In subsequent California court filings, Rippling argued that Deel effectively acknowledged paying O'Brien, while disputing the purpose of those payments. Rippling seized on the admission as evidence supporting its espionage allegations, while Deel has maintained that the payments were lawful and unrelated to any effort to obtain confidential information from a competitor. 

The Slack “honeypot” that blew the case open 

Rippling's allegations read less like a typical software dispute and more like a corporate espionage thriller. The company discovered suspicious activity after creating a trap designed to identify who was accessing information they shouldn't have been, according to court filings and reporting from The New York Times and SFGATE. Rippling alleges that information from a specially created Slack channel was accessed shortly after its existence became known to only a small group of people, helping investigators narrow their focus. The company later accused O'Brien of accessing hundreds of internal channels and documents containing sensitive competitive information.

The allegations drew additional attention because they were accompanied by a sworn affidavit filed in Ireland from O'Brien, according to Calcalist. This later became the subject of a reported federal criminal investigation, according to The Wall Street Journal. Together, those developments elevated the dispute far beyond a typical commercial lawsuit between competitors. What might have been dismissed as routine startup litigation is now a case being watched across the HR technology industry. 

Deel has denied the allegations and maintains that it didn’t direct or participate in corporate espionage. However, the claims haven’t disappeared under judicial scrutiny. Federal courts have allowed significant portions of Rippling’s lawsuit to move forward, including claims involving trade secret misappropriation and racketeering allegations. While those rulings don’t establish liability, they indicate that the court found sufficient grounds for the claims to proceed rather than dismissing them outright.

Deel has also gone on the offensive, filing its own lawsuit against Rippling and accusing its rival of engaging in an anti-competitive campaign designed to damage Deel's reputation, interfere with customer relationships, and weaponize litigation for competitive advantage. Those claims remain disputed, but they underscore how far the conflict has escalated beyond an ordinary business disagreement into one of the most closely watched legal battles in HR technology. 

Deel’s courtroom drama is now buyer risk 

Those allegations are particularly significant because of the role Deel plays in the global employment ecosystem. Trade secret disputes are common in Silicon Valley. Racketeering allegations and reports of a federal criminal investigation are not.

EOR providers operate at the intersection of payroll, compliance, tax administration, employment law, benefits, and workforce management. Their customers routinely share sensitive information about employees, compensation structures, hiring plans, expansion strategies, and internal operations. In many cases, an EOR becomes one of the most trusted third-party vendors inside an organization.

That’s why the Rippling litigation has attracted so much attention. The case involves allegations of unauthorized access to confidential business information and claims that sensitive data was obtained through improper means. Whether those allegations are ultimately proven true remains for the courts to decide, but the nature of the claims has forced a broader conversation about governance, oversight, and corporate culture.

The Rippling case isn’t Deel's only legal problem

The Rippling case also isn’t the only legal controversy to hit Deel. The company has faced a separate federal lawsuit in Florida accusing it of enabling money laundering and sanctions evasion tied to payments for a former customer. Deel has denied those allegations as well, and at least some fraud-based claims have been dismissed. But for buyers, the biggest issue is the pattern of serious allegations involving compliance, international payments, risk controls, and corporate conduct.

That matters because EOR buyers are outsourcing critical employment infrastructure. Allegations involving trade-secret theft, racketeering claims, sanctions-related compliance questions, and reported federal criminal scrutiny create a level of legal and reputational risk buyers can’t ignore. 

Red flags for companies evaluating Deel

Procurement teams increasingly evaluate vendors based on legal exposure, regulatory history, compliance controls, security standards, and reputational risk alongside product capabilities. The more serious the allegations become, the harder they are to separate from the purchasing decision.

The legal battle has also generated a steady stream of damaging headlines for Deel. News organizations including The Wall Street Journal, The New York Times, TechCrunch, Axios, Bloomberg Law, SFGATE, and Calcalist have all reported on various aspects of the dispute, amplifying scrutiny of the company and its leadership. Even if Deel ultimately prevails on some or all of the claims, the reputational damage associated with allegations of trade-secret theft, covert intelligence gathering, and federal criminal scrutiny is difficult for any company to ignore.

Four questions every EOR buyer should ask

Before you trust any EOR provider with payroll, employee data, and global compliance, ask these questions:

How does the provider handle legal and compliance risk?
Ongoing lawsuits don't automatically disqualify a vendor. But they should prompt deeper questions about governance, internal controls, and how the company responds to allegations.

How does the provider protect sensitive customer data?
An EOR has access to payroll information, employee records, hiring plans, and other confidential business data. Ask what safeguards exist to protect that information—and what accountability measures are in place if something goes wrong.

How transparent is the provider about legal issues and risk?
Look beyond marketing materials. Ask about ongoing litigation, regulatory investigations, and any compliance issues that could affect your business relationship.

Would you be comfortable defending this vendor choice to your executive team?
Choosing an EOR isn't just a software purchase. It's selecting a long-term employment partner. Make sure you're evaluating governance, trust, and operational risk alongside product features and pricing.

If you’re evaluating EOR providers today, you don’t have the luxury of waiting years for the legal process to play out. Ask the hard questions now so you can decide whether you’re comfortable trusting Deel with payroll, compliance, employee data, and global operations while these cases play out. Because once an EOR has your payroll, compliance, and employee data, vendor risk becomes business risk. 

Sources

Sorkin, Andrew Ross, et al. “Rippling Sues Deel, a Software Rival, over Corporate Spying.” The New York Times, 17 Mar. 2025, www.nytimes.com/2025/03/17/business/dealbook/rippling-deel-corporate-spy.html. Accessed 26 June 2026.

Winkler, Rolfe. “Exclusive | Justice Department Opens Criminal Probe into Deel Spy Allegations.” The Wall Street Journal, 23 Jan. 2026, www.wsj.com/us-news/law/justice-department-opens-criminal-probe-into-silicon-valley-spy-allegations-9afe1eec. Accessed 26 June 2026.

Clark, Kate, and Ellen Huet. “The Spying Scandal Rocking the World of HR Software.” Bloomberg, 10 June 2025, bloomberg.com/news/features/2025-06-10/spying-scandal-spirals-between-billion-dollar-startups-rippling-deel. Accessed 26 June 2026.

Poritz, Isaiah. “Rippling to Advance Corporate Espionage Suit against Deel.” Bloomberg Law, 13 Feb. 2026, news.bloomberglaw.com/litigation/rippling-to-advance-corporate-espionage-lawsuit-against-deel. Accessed 26 June 2026.

Primack, Dan. “Rippling and Deel Fracas Pulls in a Third “Unicorn.” Axios, 21 May 2025, www.axios.com/2025/05/21/rippling-deel-global-partners. Accessed 26 June 2026.

Bort, Julie. “The Affidavit of a Rippling Employee Caught Spying for Deel Reads like a Movie.” TechCrunch, 2 Apr. 2025, techcrunch.com/2025/04/02/the-affidavit-of-a-rippling-employee-caught-spying-for-deel-reads-like-a-movie. Accessed 26 June 2026.

Bort, Julie. “The Rippling/Deel Corporate Spying Scandal May Have Taken Another Wild Turn.” TechCrunch, 23 Jan. 2026, techcrunch.com/2026/01/23/the-rippling-deel-corporate-spying-scandal-may-have-taken-another-wild-turn. Accessed 26 June 2026.

Bort, Julie. “Deel Scores a Lawsuit Win, but Not against Rippling.” TechCrunch, 19 Aug. 2025, techcrunch.com/2025/08/19/deel-scores-a-lawsuit-win-but-not-against-rippling. Accessed 26 June 2026.

Council, Stephen. “SF Tech Company Claims It Caught Rival in “Brazen” Spying Attack.” SFGATE, 17 Mar. 2025, www.sfgate.com/tech/article/sf-tech-company-spy-hid-in-bathroom-rival-alleges-20226709.php. Accessed 26 June 2026.

CTech. “Deel “Spy” Avoids Punishment as Irish Court Targets Company’s CEO and Legal Team.” Ctech, 10 Apr. 2025, www.calcalistech.com/ctechnews/article/rkllhdrrye. Accessed 26 June 2026.

CTech. “Justice Department Opens Criminal Investigation into Deel Over Espionage Allegations.” Ctech, 23 Jan. 2026, www.calcalistech.com/ctechnews/article/s1jroxz8zg. Accessed 26 June 2026.

People Center, Inc. d/b/a Rippling and Rippling Ireland Ltd. v. Deel, Inc., et al. Order. U.S. District Court for the Northern District of California, No. 3:25-cv-02583, 13 Feb. 2026. https://rippling2.imgix.net/ripplingvdeel_breyer_opinion.pdf. Accessed 26 June 2026. 

O'Brien, Keith. Stamped Affidavit of Keith O'Brien. High Court of Ireland, Commercial Intellectual Property & Technology List, Record No. 2025/1289P, 1 Apr. 2025. DocumentCloud, https://www.documentcloud.org/documents/25877605-stamped-affidavit-of-keith-obrien-1-april-2025-redacted/. Accessed 26 June 2026. 

“Federal Court Rejects Deel’s Ploy to Evade American Justice.” Rippling, 2025, www.rippling.com/blog/federal-court-rejects-deels-ploy-to-evade-american-justice. Accessed 26 June 2026.

“New Banking Records Prove Deel Paid Thief Who Stole Trade Secrets from Rippling.” Rippling, 2025, www.rippling.com/blog/new-banking-records-prove-deel-paid-thief-who-stole-trade-secrets-from-rippling. Accessed 26 June 2026.

“Deel’s “Watchman” Refuses to Cooperate and Will Hide Overseas Too.” Rippling, 2025, www.rippling.com/blog/deels-watchman-refuses-to-cooperate-and-will-hide-overseas-too. Accessed 26 June 2026.

“Deel Admits Spy Was Paid for Living Expenses and Sourcing Luxury Watches.” Rippling.com, 2025, www.rippling.com/blog/deel-admits-it-paid-spy-in-new-defense. Accessed 26 June 2026.

“Deel’s Counterclaims against Rippling.” Deel.com, 2026, www.deel.com/blog/deel-files-lawsuit. Accessed 26 June 2026.