You’ve heard of catfishing in online dating. Now it’s showing up in the workplace.
But instead of someone pretending to be someone else on a dating app, imagine hiring a person who isn’t who they claim to be.
The resume looks legitimate.
The LinkedIn profile looks legitimate.
The interview goes well.
The background check comes back clean.
And then you discover that the person you hired isn’t the person whose identity you verified.
This isn’t science fiction. It’s becoming a very real challenge for employers.
When “Who Are You?” Becomes a Business-Critical Question
Candidate fraud has evolved well beyond exaggerating a job title or adding a few extra skills to a resume.
Organizations are now dealing with identity theft, synthetic identities, AI-generated images, deepfake video, AI-assisted interviews, fraudulent credentials and even proxy candidates—people who interview or complete assessments on behalf of someone else.
The consequences can be significant.
Consider healthcare. A person misrepresenting their professional credentials isn’t simply a hiring problem. If someone represents themselves as a nurse without the appropriate education or license, the potential consequences can extend directly to patient safety.
And the problem isn’t limited to healthcare.
In 2025, Pennsylvania authorities charged a woman accused of using multiple aliases and false identities to obtain nursing positions despite not holding a medical license. The allegations included the use of multiple Social Security numbers and false identities to obtain short-term nursing roles.
The stakes can also be much broader than credentials.
In 2024, cybersecurity company KnowBe4 publicly disclosed that it had inadvertently hired a North Korean IT worker using a stolen U.S. identity. The company conducted multiple video interviews, a background check and reference verification. The individual successfully passed those traditional controls because the identity itself belonged to a real person.
The organization ultimately detected suspicious activity shortly after the employee received a company computer—and contained the situation within minutes of the security alert.
The lesson isn’t that KnowBe4 didn’t perform due diligence.
The lesson is that traditional due diligence wasn’t designed to answer the question that mattered most: Is this the person whose identity we’re validating?
A Background Check Isn’t the Same as Identity Verification
This distinction is becoming increasingly important for Talent Acquisition and HR leaders.
A traditional background check may verify information associated with an identity—employment history, education, criminal records, professional credentials and other data points.
But what happens when a fraudster uses a real person’s identity?
The information can check out.
The Social Security number can be valid.
The employment history can belong to a real person.
The references can appear legitimate.
The background check can come back clear.
And yet the candidate sitting across from you may still be someone else.
That’s why organizations need to begin thinking about candidate verification as a layered process, rather than a single background check at the end of the hiring journey.
AI Has Changed the Game
Artificial intelligence is making this problem more difficult—and simultaneously providing new tools to fight it.
Generative AI can help fraudulent candidates create polished resumes, compelling professional profiles, realistic photographs and highly tailored responses to interview questions.
Deepfake technology can take the problem one step further.
A candidate can potentially manipulate video or audio to appear to be another person. A proxy candidate can participate in an interview. AI can assist with real-time answers during assessments and interviews.
Pindrop, for example, has reported detecting deepfake candidates during live interviews and has documented coordinated hiring attempts involving deepfakes and other forms of deception.
That means the old assumption that “I saw them on camera, so I know who they are” is no longer sufficient.
Seeing and hearing a candidate doesn’t necessarily prove identity.
The Technology Is Getting Smarter
The good news is that organizations don’t have to rely solely on human intuition.
New identity and fraud-detection technologies are emerging that can help organizations evaluate signals such as:
- Government-issued identification
- Biometric or facial verification
- Liveness detection
- Device and IP information
- Geographic inconsistencies
- Identity and credential matching
- Digital identity signals
- Video and audio manipulation
- Deepfake indicators
- Behavioral patterns
- Duplicate or coordinated candidate activity
Importantly, no single technology should be viewed as a silver bullet.
The most effective strategy is likely to be layered identity assurance, where multiple signals are evaluated throughout the candidate lifecycle.
And that’s an important distinction.
The goal isn’t necessarily to determine whether a candidate is “real” or “fake” based on one algorithm.
The goal is to identify anomalies that deserve additional verification.
Talent Acquisition Can’t Solve This Alone
There’s another challenge hiding underneath candidate fraud: Who owns it?
Recruiting typically sees the candidate first.
IT and cybersecurity are responsible for protecting systems and access.
HR may own onboarding and employee records.
Legal and Compliance may become involved when fraud, regulatory requirements or employment risks arise.
Security may be concerned about the possibility of an individual gaining access to sensitive systems.
The result can be an organizational gap where everyone has a piece of the problem—but nobody owns the entire candidate identity lifecycle.
That needs to change.
Candidate identity should be treated as a cross-functional business process, with clear ownership, escalation procedures and defined responses when something doesn’t look right.
Don’t Let Your Hiring Process Become the Front Door for Fraud
The candidate experience matters. Speed matters. Efficiency matters.
But so does knowing who you’re bringing into your organization.
As AI makes it easier to create convincing identities, resumes, images, voices and video, organizations need to rethink where identity verification belongs in the hiring process.
It shouldn’t be an afterthought.
It shouldn’t happen only after an offer.
And it shouldn’t be viewed as solely an HR problem.
Identity verification is becoming part of the foundation of a modern hiring strategy.
The question isn’t whether candidate fraud will become more sophisticated.
It’s whether your organization will be prepared to recognize it before the candidate becomes an employee.
At AB Global, we believe the future of hiring requires both a great candidate experience and greater confidence in candidate identity. The organizations that build identity verification into their talent processes now will be better positioned to protect their people, their customers and their business as the threat continues to evolve.
