The Strange New World of Hiring People Who Don’t Even Exist
Can I be vulnerable for a second? This is my safe space, right??
Well, it’s time for me to tell you about my biggest snafu of 2026.
I fell prey to hiring fraud.
Yup. There it’s out there!!! It’s like a weight has been lifted off my chest. And now I can tell you EVERYTHING I learned throughout the process and how you can avoid this in the future.
Once I shared my story with a few friends I learned I’m not alone… One HR team had a candidate who interviewed virtually and secured the job and then when it was time to show up in-person a completely different person showed up.
When did HR turn into an Adventures of Mary-Kate & Ashley film? We’re basically detectives sorting through fraud daily at this rate.
The question I keep going back to is, WHO the hell is actually doing this, and WHY?
I did some research and here’s what I found about the WHO:
- Some people are getting coached on it directly: Discord servers teaching candidates how to fake credentials and get through background checks clean
- Some of this is organized crime: actual rings using stolen identities to get hired at real companies for data access, or something worse
- Some of it is proxy interviewing: one person does the interview, a totally different person shows up to do the job
Don’t believe me?? I brought you some receipts!
By the numbers: 2,500 HR leaders are companies > 1000+ employees shared
- 34% encountered resume or credential fabrication
- 29% encountered document fraud
- 20% encountered interview fraud, including proxy interviews or AI-assisted impersonation
Sooo, its defff happening…
The part that stresses me out more than any of this? My first thought was yet another thing to add to HR’s plate. Now I have to build a whole separate fraud-detection process from scratch!!! Turns out that’s not actually true, more on that shortly.
Now… onto the why this is happening!! I think a big force is because the tools to pull it off have gotten dramatically easier to use!
AI opened every floodgate at once. Candidates can generate a polished resume in 30 seconds flat, clone a voice, run an entire interview through a deepfake filter, or mass-apply to hundreds of roles with one tweaked prompt.
I’ve heard from other HR leaders about candidates who submitted identical cover letters down to the typo, or new hires whose reference calls sounded way too oddly rehearsed.
Every one of these stories starts the same way: it looked completely normal until, suddenly, it didn’t!
📣 Only 31% of HR leaders feel confident in their current fraud prevention, and 45% admit their controls are partial at best. That’s kinda a big deal…
But remember how I said fraud prevention doesn’t have to be its own separate thing? It’s not! The identity and document checks CAN catch this stuff early and plug into your existing screening process you’re already running. Same workflow, one more layer, no extra headcount required.
But here’s the part that’s easy to forget when you’re heads-down fixing your internal process: candidates are watching how you handle all of this too.
Sorry to add one more layer to this all (gestures wildly around).
The same research found that 39% of HR leaders are already worried that AI in hiring will erode candidate trust, and another 25% aren’t even sure.
😬 Here’s the thing about heavy-handed screening: it’s not just a risk of letting the wrong person in. You could lose some of the right people too! Slow, repetitive, invasive, pick your poison, and your best candidates could easily decide this opportunity is NOT for me. Feeling surveilled before day one? Not exactly the welcome candidates want…
So yes, we’re absolutely living in a scam-and-fraud era, professionally speaking.
It’s the “North Korean IT worker” headlines you may have seen at some point, but it’s also the contractor who’s actually three different people rotating shifts, or the “senior engineer” whose portfolio was generated the morning of the interview.
Now, I don’t want you to spiral into an existential crisis over it (I already did that for you, you’re welcome), so today I want to cover a few small habits you can make that will catch most of it before it ever becomes your problem!
Just A Photo ID Isn’t Cutting It Anymore
Most hiring processes were built for a world where proving your identity meant a photo ID and maybe a firm handshake.
That world’s long gone, babe.
If your only identity check happens right before an offer, you’re basically leaving the front door open and hoping nobody tries the handle!
You need to build identity verification into the process earlier! The good news is, it doesn’t have to slow anything down OR feel like a hassle for candidates. It could mean something like live video checks at the interview stage (a selfie, matched instantly to their ID), document verification that catches a doctored ID, or a simple policy that flags when personal details (birthdate, SSN, address) shift mid-process.
The person who shows up for the technical interview should be the same person who shows up on day one, which sounds obvious, but even still, sooo many processes have zero mechanisms for confirming that, which is exactly the gap fraud walks right through!
Ask yourself honestly: at what point in your current process would you catch someone swapping their identity mid-stream?
If the answer is “probably never,” you’ve got your starting point!
💡Checkr’s breakdown of why identity verification is no longer optional makes the full case for moving this upstream instead of bolting it on at the end.
Tighten the Workflow For Your Riskiest Roles
It’s probably worth noting that not every role carries the same exposure!
High-volume, high-turnover, or access-sensitive roles (e.g. finance, IT, anything touching customer data) are where fraud loves to hide. Some people will be quick to also say what about remote roles?? TBH, it’s not really about remote roles themselves… It’s remote interviewing, skipping that live, in-person or live-video gut check, that opens the door to fraud, because the process moves fast and nobody’s got the bandwidth to slow down and double-check every applicant. Anti-remote work folks might try to throw that in there as a reason for work to all be in-person, just remember there’s no data that proves that!!
That means you have to standardize what a red flag means for your team.
Some examples might include:
🚩 Inconsistent info across documents
🚩 Reluctance to turn on a camera
🚩 A reference who sounds suspiciously like the candidate reading off a script
🚩 Interview answers that sound rehearsed word-for-word
🚩 A resume timeline that doesn’t match the LinkedIn timeline
🚩 An identity verification check that comes back inconsistent or fails outright
You have to write these down somewhere, so it’s not just your gut doing the detective work!
There needs to be a formally documented process that your whole team can run the same way, every time.
Think about it this way…your fastest-moving, highest-volume req is also your least-supervised one!
If your customer support or warehouse roles hire dozens of people a month with three-day turnaround times, that’s exactly where a stolen identity or a fabricated credential slips through, simply because nobody has made time to look twice.
And just so we’re clear, a red flag list only works if your whole team actually uses it and knows where to find it!
If your recruiter catches something weird but doesn’t know whether to flag it or ignore it, you can’t realistically expect any consistency.
The good news: this isn’t something you have to build and maintain by hand. A solid background check partner lets you set up the workflow once per role, IDV triggers automatically at the right stage, and your team doesn’t have to think about it.
Get everyone looking for the same things, the same way, every single time…otherwise, you’re just hoping someone’s gut is having a good day.
Build Your Response Plan BEFORE You Need It
Unfortunately, catching fraud mid-process is only half the job!
What happens next is where most orgs freeze. 🥶
Who reviews the flagged case? How fast? What’s the actual decision tree?
Without answers ready ahead of time, a legitimate fraud case can sit in limbo for a WEEK, all while a candidate’s start date and your own credibility hang in the balance.
The absolute worst time to build a response plan is when you’re in dire need of one.
Lock in your answers now, while you’re calm, instead of scrambling for them the moment your gut is already screaming.
Luckily for you, I have a simple little checklist that can help set the foundation:
✅ Define who owns fraud review (HR, legal, security, or all three).
✅ Set an SLA for how fast a flagged case gets a decision.
✅ Document your red flags so the whole team is watching for the same things.
✅ Standardize candidate communication so people fully understand why they’re being asked for extra verification.
✅ Track it the same way you track time-to-hire, so you actually know if it’s working.
✅ Make sure your mindful of the compliance implications because there are laws in play here!
Don’t sleep on the candidate experience part of this, either!
A legit candidate who gets flagged and then ghosted by your process for two weeks is gonna tell everyone how weird your hiring felt, even if you were right to double-check them.
Fast, clear communication protects your employer brand just as much as it protects you from a bad hire.
Yes, speed is important for catching fraud, but it also keeps you from fumbling good people during your hiring process.
Checkr’s guide to background check compliance walks through this exact problem, how to build one workflow that catches identity fraud without turning into a compliance headache PLUS how other HR teams built theirs out. Steal their homework!
Stop Playing Detective on Every Application
A lot of HR teams seem to be fighting 2026-level fraud with 2015-level tools.
A gut check or quick Google search was never built to catch a synthetic identity or a voice clone, and expecting your recruiters to be human lie detectors on top of everything else on their plate sets them up to lose.
So I have to ask…how many of your open reqs right now are being screened by nothing more than vibes? 👀
This gets expensive real fast if it’s left unchecked!
A fraudulent hire in a customer-facing or access-sensitive role is a headache, but it’s also a security incident, and depending on the role, a legal one too.
Every hour your team spends manually chasing a suspicious application is an hour not spent building your actual team, and every case that slips through chips away at how much your leadership trusts the hiring process to begin with.
This is the gap Checkr was built to keep closed and monitored! 🤓
Instead of your team playing detective on every application, Checkr’s identity verification and fraud detection tools do the digging automatically, flagging common red flags like a mismatched ID or a manipulated document, then clearing the candidates who are exactly who they say they are. And those fraud detection tools work right in sync with the background checks you run on final candidates — so you have one workflow, one audit trail, and one seamless candidate experience for the real ones.
Your recruiters get their time back, and your process gets its trust back!
It’s basically the difference between investigating solo with a flashlight and having a full unit backing you up.
Now, you can stop worrying about becoming the FBI when you have the right gadgets handling the boring, repetitive detective work, so you can focus on hiring great people. Case closed!
