Fake Candidates, Deepfakes and Interview Fraud: How to Verify a Candidate Without Damaging Trust

How can employers verify candidates without damaging trust?

Employers can verify candidates by using a transparent, consistent and proportionate screening process. This can include live interviews, structured skills assessments, direct employment checks and secure identity verification at the appropriate stage.

Candidates should be told:

• What information will be checked
• Why verification is necessary
• When the verification will happen
• How their information will be protected
• What they can do if a record is incorrect

Candidate verification should protect the company without treating every applicant as suspicious.

What is candidate fraud?

Candidate fraud happens when someone deliberately provides false information, hides important details or misrepresents their identity to secure employment.

It may involve:

• Using a stolen or fake identity
• Exaggerating skills or responsibilities
• Providing false qualifications
• Inventing employment history
• Hiding the candidate’s real location
• Asking another person to complete an assessment
• Using a proxy during an interview
• Receiving unauthorised AI assistance
• Manipulating video or audio using deepfake technology
• Having one person interview while another person performs the job

Candidate fraud is different from an honest error. A spelling mistake, an outdated profile or a small difference in employment dates does not automatically mean that someone is committing fraud.

Employers should investigate inconsistencies fairly before reaching a conclusion.

Why is candidate fraud increasing?

Remote and cross-border recruitment allows companies to access a much larger international talent pool. However, it can also make identity and experience verification more complicated.

Interviews, assessments, document submissions and onboarding may all happen online. Candidates might never enter a company office before receiving equipment or access to business systems.

Artificial intelligence has also made it easier to:

• Create professional-looking CVs
• Generate fake portfolio content
• Produce realistic profile photographs
• Rewrite employment histories
• Answer interview questions in real time
• Alter voices or video
• Create false company websites
• Produce fake references and documents

Gartner reported that 6% of 3,000 surveyed candidates admitted participating in interview fraud, either by posing as another person or having someone else represent them. Gartner also predicts that one in four candidate profiles worldwide could be fake by 2028. Gartner candidate fraud research

These risks do not mean remote hiring should stop. They mean remote hiring processes must become more structured and secure.

What are the most common types of candidate fraud?

Identity fraud

Identity fraud occurs when a person applies using someone else’s identity or provides false identity information.

The person shown in the application, attending the interview and completing the work may not be the same individual.

This can create serious risks when an employee receives access to:

• Customer information
• Proprietary code
• Financial systems
• Blockchain wallets
• Cloud infrastructure
• Confidential business documents
• Intellectual property
• Company equipment

Inflated experience

Some candidates add tools, projects or responsibilities they did not personally handle.

A candidate may use the correct technical keywords but be unable to explain:

• Their personal contribution
• Why a particular technology was selected
• How the system was designed
• What problems occurred
• How results were measured
• What happened after deployment

Inflated experience is especially difficult to detect when CVs have been professionally rewritten using AI.

Interview proxy fraud

Interview proxy fraud happens when another person completes an interview or technical assessment on behalf of the applicant.

In some cases, one person may attend the interview while someone else provides answers through a separate device, messaging platform or hidden audio connection.

Deepfake interview fraud

Deepfake technology can alter or generate someone’s appearance or voice during an online interview.

Possible warning signs may include:

• Unnatural delays between speech and facial movement
• Inconsistent lighting around the face
• Strange visual edges during movement
• Repeated audio delays
• A voice that changes noticeably
• An inability to perform simple live movements naturally

However, these signs are not proof of fraud. Poor internet connections, accessibility needs, camera quality and background effects can produce similar issues.

Recruiters should never reject someone based only on appearance, accent, eye contact or video quality.

Location misrepresentation

A candidate may claim to live in a country where they are not actually based.

Location matters because it can affect:

• Employment eligibility
• Tax obligations
• Payroll
• sanctions compliance
• Data access
• Working hours
• Equipment delivery
• Employment classification
• Local labour laws

The FBI has warned that fraudulent remote IT workers have used stolen identities, false locations and “laptop farms” to obtain employment and access company systems. In one 2025 enforcement action, the reported schemes affected more than 100 US companies. FBI remote IT worker warning

Why traditional CV screening is no longer enough

A CV tells an employer what a candidate claims to have done. It does not independently verify that the information is true.

AI can now produce a highly polished CV containing:

• Relevant keywords
• Strong achievement statements
• Technical terminology
• Professionally written summaries
• Role-specific responsibilities
• Convincing cover letters

This makes keyword matching less reliable.

Employers need to combine CV review with structured conversations, job-relevant evidence and proportionate verification.

The objective is not to catch candidates making minor mistakes. It is to confirm that the person is who they claim to be and can perform the work required.

How can employers verify candidates fairly?

1. Explain the verification process early

Tell candidates about the company’s verification requirements before requesting sensitive information.

A clear notice might explain that the company verifies identity, employment history and qualifications for security and compliance purposes.

Transparency reduces anxiety and makes verification feel like a normal part of the recruitment process.

2. Apply the same standards consistently

Verification requirements should be based on the role’s risk level, not a recruiter’s personal suspicion.

For example, stronger checks may be appropriate for positions involving:

• Financial authority
• Sensitive customer information
• Production infrastructure
• Administrative system access
• Cryptocurrency or digital assets
• Intellectual property
• Security operations

Candidates applying for comparable roles should go through comparable checks.

3. Compare information across stages

Recruiters should check whether the information remains consistent across:

• The CV
• Application form
• LinkedIn or professional profile
• Portfolio
• Screening interview
• Technical interview
• Reference check
• Background verification
• Employment documentation

A difference does not automatically prove fraud. Ask the candidate for an explanation before making a decision.

4. Use live, structured interviews

A live conversation helps confirm communication ability, motivation and understanding.

Recruiters should ask every candidate a consistent set of questions while allowing follow-up questions about their specific experience.

Useful questions include:

• What part of this project did you personally own?
• Why did you choose that approach?
• What was the most difficult technical problem?
• What failed, and how did you respond?
• How did you test your work?
• What result did the project produce?
• What would you change if you did it again?

People with genuine experience can usually explain the context, decisions, trade-offs and lessons behind their work.

5. Use job-relevant skills assessments

A practical assessment can provide stronger evidence than a CV.

Depending on the role, this may include:

• Reviewing an existing piece of code
• Explaining a system architecture
• Diagnosing a realistic technical problem
• Evaluating an AI-generated answer
• Reviewing a smart contract for possible risks
• Preparing a short commercial case
• Discussing a previous work sample

Assessments should be relevant and reasonably short. Employers should avoid asking candidates to complete unpaid work that could be used commercially.

6. Verify previous employment and qualifications directly

Where appropriate and legally permitted, contact previous employers or educational institutions using independently confirmed contact information.

Do not rely only on phone numbers or email addresses supplied in a document.

The FBI recommends cross-checking identity information and verifying previous employment and education directly with the relevant organisations. FBI guidance for businesses

7. Conduct identity verification at the correct stage

Identity verification is usually more appropriate for finalists or candidates receiving a conditional offer than for every early-stage applicant.

Where required, employers may use a reputable identity-verification provider to compare:

• A government-issued identity document
• A live image or video
• Candidate contact details
• Employment eligibility
• Relevant address or location information

Only collect information that is necessary. Candidates should understand how their data will be stored, used and deleted.

Employers must follow applicable privacy, employment and anti-discrimination laws in every country involved.

8. Confirm continuity during onboarding

Verification should not stop immediately after the offer.

The person who attends onboarding, receives the equipment and accesses company systems should match the verified hire.

Helpful controls may include:

• A live onboarding meeting
• Secure equipment delivery
• Multi-factor authentication
• Role-based system access
• Limited initial permissions
• Security training
• Monitoring for unusual access patterns
• Clear reporting procedures

These controls protect the business without placing the entire responsibility on recruiters.

What should employers avoid?

Candidate verification can damage trust when it becomes secretive, invasive or inconsistent.

Employers should avoid:

• Accusing someone before verifying the facts
• Secretly recording interviews where consent is required
• Requesting identity documents too early
• Collecting information unrelated to the role
• Keeping candidate documents longer than necessary
• Using facial appearance, accent or eye contact as proof of fraud
• Treating candidates from certain countries more suspiciously
• Relying entirely on automated fraud-detection tools
• Making a final decision without human review
• Refusing to let candidates correct inaccurate information

Technology should support recruiter judgement—not replace it.

How can employers protect candidate trust?

Trust improves when the verification process is clear and respectful.

Be transparent

Explain what will be checked and why.

Be proportionate

Match the level of verification to the risk and responsibility of the role.

Protect candidate data

Limit access to sensitive documents and store them securely.

Allow candidates to respond

If information does not match, give the candidate an opportunity to explain or correct it.

Keep humans involved

Automated tools can identify possible inconsistencies, but trained people should review the information and make the final decision.

Verify the employer too

Fraud works in both directions. Candidates also face fake recruiters and fraudulent job advertisements.

The US Federal Trade Commission advises candidates to confirm job opportunities through official company contact details before sharing sensitive information. FTC job-scam guidance

Companies should use official email domains, maintain accurate career pages and provide candidates with verified recruiter contact details.

How can specialist recruitment reduce remote-hiring risk?

A specialist recruitment partner can add structured human screening before candidates reach the hiring manager.

For IT, AI and Web3 recruitment, this may include:

• Confirming candidate identity and location
• Evaluating relevant project experience
• Checking technical depth
• Reviewing employment history
• Speaking with passive candidates directly
• Identifying inconsistent information
• Coordinating references
• Supporting cross-border market research
• Advising on realistic compensation
• Maintaining clear candidate communication
• Presenting a smaller, more relevant shortlist

A specialist recruiter should not simply forward CVs. The value comes from understanding the role, evaluating the market and providing better evidence for each candidate presented.

Secure hiring does not have to feel hostile

Fake candidates, deepfakes and interview fraud are real concerns, particularly in remote technology hiring.

However, an aggressive or secretive screening process can discourage genuine candidates and damage the employer’s reputation.

The most effective approach combines:

• Clear communication
• Structured interviews
• Skills-based evaluation
• Proportionate identity checks
• Direct verification
• Secure onboarding
• Human judgement
• Respect for candidate privacy

The goal is not to remove trust from recruitment.

It is to build trust on verified information.

Build a trusted cross-border talent pipeline

Nindar supports IT, AI and Web3 companies through specialist recruitment, executive search, recruitment process outsourcing and talent mapping.

We help organisations identify, engage and evaluate cross-border talent while keeping the hiring experience professional, transparent and human.

Looking for qualified IT, AI or Web3 talent? Contact Nindar to discuss a more focused and trusted recruitment process.

Frequently asked questions

How can you tell if a job candidate is fake?

Check whether their identity, employment history, professional profiles, portfolio and interview answers are consistent. Use direct employment verification, live interviews and job-relevant skills assessments before reaching a conclusion.

What is interview proxy fraud?

Interview proxy fraud occurs when another person completes an interview or assessment for the applicant or secretly provides answers during the process.

Can deepfakes be used during job interviews?

Yes. AI can manipulate video or audio during remote interviews. However, technical problems can appear similar, so possible warning signs should lead to further verification rather than an immediate rejection.

Should every candidate complete identity verification?

Not necessarily. Verification should be proportionate to the position and normally introduced at the finalist or conditional-offer stage. Requirements must follow applicable laws.

How can companies verify remote employees?

Companies can combine live interviews, identity checks, employment verification, structured assessments, secure equipment delivery and controlled system access.

Does candidate verification harm the candidate experience?

It can if the process is secretive, inconsistent or invasive. Clear explanations, limited data collection, human review and an opportunity to correct errors can protect candidate trust.

Can employers ban AI during interviews?

Employers can define when AI is permitted, but the rules should be clearly communicated. For roles requiring AI proficiency, it may be useful to assess both independent skills and the candidate’s ability to use AI responsibly.

What is the safest way to hire cross-border technology talent?

Use a structured process that confirms identity, skills, employment history, work location and legal hiring requirements. A specialist cross-border recruitment partner can help reduce application noise and improve candidate evaluation.