The Fake Candidate Is Already in Your Pipeline.
What if the person behind the CV isn’t the person behind the screen?
AI has made recruitment faster, more automated and, in many ways, more efficient. But it has also made it easier to create convincing identities, manipulate interviews and misrepresent qualifications.
Fake candidates are no longer just a theoretical risk. They’re becoming a real challenge for Talent, HR and Security teams, and one that many organizations are only beginning to talk about.
“Deepfake candidates are infiltrating the job market at a crazy, unprecedented rate.”
— Vijay Balasubramaniyan, CEO of Pindrop — CNBC, July 2025
The scale of the problem in 2026
41% of IT, cybersecurity and risk leaders confirmed their organization had already hired and onboarded a fraudulent candidate.Checkr, “The Hiring Hoax” survey of 3,000 managers, 2025 — thehirehub.ai59% of hiring managers suspect candidates of using AI tools to misrepresent themselves during the hiring process.Sherlock AI / Checkr, 2026 — withsherlock.ai25–30% of flagged interview sessions showed fraudulent activity, according to InCruiter’s deepfake detection technology, nearly double what experienced human interviewers had previously identified.InCruiter deepfake detection launch findings, early 2026 — cxotoday.com1 in 4 candidate profiles worldwide will be fake by 2028, according to Gartner, a trajectory that is already visible in 2026 hiring data.Gartner, Top Trends for Talent Acquisition, October 2025 — personneltoday.comExperian’s 2026 Future of Fraud Forecast named deepfake job candidates one of the top five fraud threats of the year. Gartner warns that by the end of 2026, roughly 30% of enterprises will find their standard identity verification tools can no longer reliably distinguish a real face from a deepfake.→ Experian 2026 Future of Fraud Forecast · Gartner, 2026 — blog.theinterviewguys.comHow it works: different forms of Fake Candidates
Understanding how fraud operates is the first step to detecting it. In 2026, three methods dominate:
- Deepfake video interviews. Real-time face-swap software overlays a synthetic or stolen face onto a live video feed, with synced eye movement and lip animation. Voice cloning tools replicate tone and accent using as little as 30 seconds of audio. Security firm Pindrop demonstrated this live on CBS News in 2025, transforming a reporter’s face in real time during a Zoom call. Deepfake fraud attempts in hiring jumped 1,300% from 2023 to 2024.
→ Lloyd Staffing, April 2026 · Pindrop / CBS News, 2025 — lloydstaffing.com
- Proxy interviews and identity kits. One qualified individual interviews on behalf of multiple unqualified applicants, a practice known as “proxy interview rings”. Dark web marketplaces now sell complete identity kits: stolen personal data, AI-generated LinkedIn profiles, fabricated resumes and fake credentials, packaged as a ready-to-deploy fraud service. CodeSignal found that cheating on technical assessments doubled in one year, from 16% to 35% by early 2026.
→ The Interview Guys, May 2026 · CodeSignal data — blog.theinterviewguys.com
- AI-inflated credentials and work samples. 28% of candidates admit to using AI to generate fake work samples, according to the 2025 Greenhouse Workforce and Hiring Report. Fabricated portfolios, altered certifications and AI-written technical submissions are now common enough that 62% of hiring professionals acknowledge that candidates are better at faking than HR teams are at detecting.
→ Greenhouse Workforce & Hiring Report, 2025 · Sherlock AI, 2026 — greenhouse.com / withsherlock.ai
The real cost of a fake candidate
Hiring fraud is not just an HR problem. It is a business risk with financial, operational and legal consequences.
In documented cases, fraudulent hires have exfiltrated proprietary codebases, accessed client databases, compromised financial systems and exposed companies to sanctions liability. The US Department of Justice announced coordinated nationwide actions in June 2025 against North Korean IT worker schemes, including searches of 29 laptop farms across 16 states. The FBI has documented over 300 US companies that unknowingly hired North Korean operatives using AI-generated identities. Amazon’s chief security officer disclosed in late 2025 that the company had blocked more than 1,800 suspected state-affiliated applicants since April 2024.
→ DOJ coordinated actions, June 2025 · FBI warning · Amazon CSO disclosure, late 2025 — nysba.org / natlawreview.com
The financial toll at company level is substantial. Research shows 23% of companies reported losses exceeding $50,000 annually from fraudulent candidates, while 10% lost over $100,000 in a single year before accounting for investigation costs of $15,000–25,000 per incident, legal fees and the productivity impact of a bad hire.
→ The Hire Hub, April 2026 — thehirehub.ai
There is also a legal exposure that is only beginning to be tested in courts. The National Law Review warned in January 2026 that employers who fail to implement identity verification controls, given widespread public FBI warnings, may face negligent hiring liability when fraudulent employees cause harm.
→ National Law Review, January 2026 — natlawreview.com
How to detect it: what actually works
Most standard hiring processes were not designed to catch this type of fraud. The following measures are being adopted by organisations that have taken the risk seriously in 2025 and 2026:
- Move identity verification earlier. Check identity at application or pre-screen stage, not after a hiring decision has been made. Document authentication, cross-referencing LinkedIn against email domains and independent background checks create friction that most fraudulent candidates cannot overcome.
- Design interview moments that are hard to fake. Ask candidates to perform unpredictable live actions, reposition the camera, hold up an ID, respond to a technical question without preparation time. Security firm Palo Alto Networks found that it takes as little as 70 minutes for someone with no image manipulation experience to create a deepfake capable of passing a video interview. Simple disruptions break most current tools.
→ Palo Alto Networks finding — blog.theinterviewguys.com
- Reintroduce human checkpoints for sensitive roles. Google and McKinsey both reintroduced mandatory in-person interviews for certain roles in 2025 specifically to counter AI fraud. The EU AI Act’s August 2026 deadline mandates human oversight for high-risk employment AI, reinforcing that “human-in-the-loop” hiring is becoming the baseline expectation, not the exception.
→ Wall Street Journal, mid-2025 · EU AI Act guidance — natlawreview.com
- Cross-validate at multiple stages. Verify the same information independently at application, interview and offer stage. Inconsistencies in contact details, IP location, video metadata and reference verification are the most reliable signals. Only 19% of hiring managers are currently confident their process would catch a fraudulent applicant.
→ Checkr, 2025 — huntress.com
Recruiters are becoming the first line of defence
HR teams aren’t expected to become cybersecurity experts. But recruiters are often the first people who interact directly with a potentially fraudulent candidate.
That means they may also be the first to notice that something doesn’t add up.
The goal isn’t to turn every recruiter into a fraud investigator. It’s to give them the knowledge to recognise warning signs, know when to ask more questions and understand when to escalate the situation to Security, IT or Legal.
The more informed the recruiter, the earlier the organisation can respond.
Want to learn more about this?
We will explore this and more at Fake Candidates in the Age of AI on October 14
→ Porsche Digital Barcelona
© Babel Profiles · www.babelprofiles.com · Barcelona
