Great Interview—but Was It the Real Candidate?

The candidate communicates confidently.

Their CV matches the vacancy. They answer every technical question correctly and perform well during the video interview.

But was the person you interviewed the person you were considering hiring?

Remote recruitment gives companies access to a much wider talent market. It also creates new opportunities for identity fraud, proxy interviews and undisclosed AI assistance.

Employers therefore need to assess two separate questions:

1. Is this the real candidate?
2. Can this person perform the work?

A strong hiring process should verify both without treating every genuine candidate with suspicion.

What Is Remote Interview Fraud?

Remote interview fraud happens when someone deliberately misrepresents their identity, location, experience or ability during a virtual recruitment process.

It can take several forms.

Fake identities

A person may apply using another individual’s name, employment history, qualifications or identity documents.

Some fraud attempts involve complete online profiles created from stolen or invented information.

Proxy interviews

A proxy interview happens when one person attends or completes an interview for someone else.

The person answering the questions may be more experienced than the candidate who will eventually join the company.

In some cases, the real candidate may be present but receive answers from another person outside the camera’s view.

AI-assisted answers

Candidates can use AI tools to generate responses, solve technical problems or receive real-time support during interviews.

Using AI is not automatically dishonest. It depends on the employer’s instructions and the purpose of the assessment.

The problem begins when the interview is intended to measure a person’s independent ability, but the candidate secretly uses tools or another person to produce the answers.

Deepfake video or altered audio

Technology can be used to change a person’s face, voice or background during a remote interview.

Not every video problem is evidence of a deepfake. Poor lighting, slow internet and older equipment can also produce unusual movements or audio delays.

Interviewers should therefore look for patterns rather than make decisions based on one visual detail.

Why Has Candidate Verification Become More Important?

Remote hiring removes many of the physical checks that happen naturally during an in-person interview.

Recruiters may never meet the candidate before equipment, credentials and access to company systems are provided.

This creates risks beyond making a poor hiring decision.

A fraudulent hire could potentially gain access to:

• Customer information
• Source code
• Financial systems
• Product roadmaps
• Intellectual property
• Internal communication
• Cloud infrastructure
• Security credentials
• Cryptocurrency wallets or digital assets

The risk is particularly important for companies recruiting remote software engineers, cloud specialists, cybersecurity professionals, AI engineers and Web3 developers.

In 2025, US authorities announced enforcement action involving remote IT workers who allegedly used compromised identities to obtain positions at more than 100 companies. The organisations affected reportedly faced data theft, financial losses and remediation costs. Reuters reported on the US Department of Justice and FBI action.

This does not mean every remote applicant should be considered suspicious. It means identity and security checks should be included in the normal recruitment process.

Warning Signs During a Remote Interview

One warning sign is rarely enough to prove that an interview is fraudulent.

However, employers may need to investigate further when several inconsistencies appear together.

Possible warning signs include:

• The person’s appearance does not consistently match their professional profile
• The candidate repeatedly refuses to use video without a reasonable explanation
• Audio and lip movements remain unusually disconnected
• The candidate appears to be listening to someone before every answer
• Technical answers sound correct but cannot be explained in simple terms
• The person cannot discuss projects listed on their own CV
• Communication style changes significantly between email, interviews and assessments
• The candidate gives conflicting information about their location or employment
• Different people appear during separate interview stages
• The candidate asks for company equipment to be delivered to an unrelated address
• The person completing the technical test appears different from the interviewee
• References, qualifications or previous employers cannot be verified

These signs should trigger a fair review—not an immediate accusation.

1. Explain the Interview Rules Clearly

Before the interview, tell candidates what is and is not allowed.

For example, explain whether they may use:

• Search engines
• Technical documentation
• Calculators
• AI tools
• Coding assistants
• Notes prepared before the interview
• Help from another person

This prevents confusion and allows every candidate to complete the assessment under the same conditions.

If AI tools are permitted, ask candidates to explain how they used them and how they checked the output.

The goal should be to understand the candidate’s judgment—not simply whether they can avoid using technology.

2. Use Consistent Identity Checks

Create a standard identity-verification process for relevant roles.

Depending on the country, role and legal requirements, this may include:

• Comparing the candidate across different interview stages
• Confirming contact details through an approved channel
• Checking relevant professional profiles
• Verifying employment and qualifications
• Using an approved identity-verification provider
• Completing formal right-to-work checks at the correct stage
• Confirming that equipment is delivered to an approved location

Identity documents should be collected only when necessary and stored securely.

Employers should also understand the privacy, employment and anti-discrimination laws that apply to their hiring locations. The NIST Digital Identity Guidelines provide a useful framework for understanding identity proofing, authentication and risk management.

3. Include More Than One Interviewer

A structured panel interview makes it more difficult for inconsistencies to go unnoticed.

Different interviewers may assess:

• Technical knowledge
• Communication
• Professional experience
• Behavioural examples
• Understanding of the role
• Team collaboration

Interviewers should use an agreed scorecard and record evidence for their ratings.

This creates a more reliable assessment than depending on one person’s impression.

4. Ask Questions About Real Experience

Candidates who genuinely completed the work listed on their CV should normally be able to explain it in detail.

Ask questions such as:

• What problem were you trying to solve?
• What was your personal responsibility?
• Which options did you consider?
• Why did you choose that approach?
• What went wrong?
• What would you do differently now?
• How did you measure the result?
• Who else worked on the project?

Follow-up questions are important.

Someone may memorise a general explanation, but it is more difficult to reproduce the decisions, problems and lessons from work they did not complete.

5. Use Live, Role-Relevant Assessments

A technical assessment should reflect the actual work required by the position.

Instead of using only a standard test, consider giving the candidate a small realistic problem and asking them to explain their thinking.

For example:

• Review a short section of code
• Diagnose a simple system problem
• Discuss a product requirement
• Identify risks in a proposed architecture
• Explain how they would improve an existing process
• Prioritise tasks in a realistic work scenario

The assessment does not always need to produce a perfect final answer.

How the candidate approaches the problem may reveal more than the result.

6. Ask the Candidate to Explain Their Work

If the candidate completes a take-home assessment, discuss it during a live follow-up interview.

Ask them to:

• Explain important decisions
• Change one part of the solution
• Identify weaknesses
• Respond to a new requirement
• Describe which tools they used
• Explain how they checked the final output

This helps distinguish genuine understanding from copied, outsourced or automatically generated work.

A candidate who used AI responsibly should still be able to explain and defend the result.

7. Keep the Process Connected

Identity fraud becomes easier when each recruitment stage is handled separately and information is not shared.

Recruiters, interviewers, hiring managers, HR and IT security teams should follow one connected process.

Record relevant information in an approved recruitment system, including:

• Interview attendance
• Assessment results
• Identity checks
• Reference checks
• Changes in contact information
• Equipment-delivery details
• Security concerns
• Final approval

Do not store copies of identity documents in personal inboxes or uncontrolled folders.

8. Verify References Properly

Do not rely only on the contact details supplied in the application.

Where appropriate, confirm that the referee is connected to the organisation they claim to represent.

Ask specific questions about:

• The candidate’s role
• Employment dates
• Main responsibilities
• Technical ability
• Working relationship
• Eligibility for rehire, where legally appropriate

References should support the overall assessment. They should not replace identity checks or skills evaluation.

9. Involve Security Before Onboarding

For roles with access to sensitive systems, candidate verification should continue into onboarding.

Before providing access, confirm:

• The employee’s identity
• Their approved working location
• The correct equipment-delivery address
• The systems required for their role
• The minimum level of access needed
• Multi-factor authentication requirements
• Security and data-protection training
• The process for reporting suspicious activity

Apply the principle of least privilege. New employees should initially receive only the access necessary to perform their responsibilities.

Additional access can be approved when there is a genuine business need.

10. Protect Genuine Candidates’ Trust

Verification should be professional, consistent and proportionate.

Avoid asking intrusive questions that are unrelated to the role. Do not make assumptions based on someone’s accent, nationality, disability, home environment or internet quality.

Explain why checks are required and how personal information will be protected.

A fair process should:

• Apply the same core checks to comparable candidates
• Use evidence instead of personal assumptions
• Allow candidates to explain technical problems
• Provide reasonable alternatives where appropriate
• Collect only necessary information
• Restrict access to verification records
• Follow applicable privacy and employment laws

The purpose is to protect the company and genuine candidates—not to create fear.

Create a Remote Candidate Verification Checklist

Stage

Verification question

Application

Does the information remain consistent across the CV, application and professional profiles?

Screening

Can the candidate explain their experience clearly?

Interview

Is the same person attending each stage?

Assessment

Are the rules about AI and external help clear?

Skills review

Can the candidate explain, change and defend their work?

References

Can relevant employment or professional details be confirmed?

Offer

Have required identity and right-to-work checks been completed?

Onboarding

Do the employee, location and equipment-delivery details match?

System access

Is access limited to what the person needs?

The checklist should be adjusted according to the role’s risk level.

A contractor receiving access to public marketing materials may not require the same controls as an engineer accessing source code, financial systems or production infrastructure.

Verify the Person and Check the Skills

A polished interview should not be the only reason to hire someone.

Employers need a connected process that confirms identity, tests relevant ability and protects company systems.

The strongest approach is simple:

1. Verify the person
2. Check the skills
3. Confirm the work
4. Control system access
5. Treat genuine candidates fairly

Remote hiring remains an effective way to access global talent. The answer is not to stop hiring remotely—it is to make verification part of good recruitment.

Find the Right Technical Talent With Nindar

Nindar helps technology, AI and Web3 companies identify and recruit specialist talent across global markets.

Through specialist recruitment, executive search, RPO and talent mapping, we help employers build structured hiring processes and assess candidates against the requirements of each role.

Need help finding verified technical professionals with relevant skills?

Contact Nindar to discuss your hiring requirements.

This article provides general recruitment and security information. Identity, privacy and employment requirements differ by country and situation. Employers should seek qualified legal, HR and cybersecurity advice where necessary.