Honestly if you don't know a person IRL I wouldn't do unpaid work like that. You're basically unprotected as a cofounder, so there's an incentive for people to be unscrupulous. Maybe make a deal to pay money into an escrow account that goes back to the company if you get signed as an official cofounder.