The new scale of identity fraud in the hiring process
Application fraud has shifted from isolated exaggeration to industrialised identity fabrication. As AI tools automate résumé writing, portfolio generation and even interview impersonation, the risk profile of every candidate identity in your funnel has changed, especially in remote and hybrid work environments. For talent acquisition operations, candidate identity verification in hiring is no longer a compliance afterthought but a core screening control that shapes both trust and pipeline velocity.
Onrec’s Hiring Trends Report 2024, which surveyed hiring managers across multiple sectors, states that 31% of them have interviewed at least one person using a fabricated identity (Onrec, “Hiring Trends Report 2024”). That finding shows that traditional background checks and CV screening are already behind the curve. Keyword matching, résumé parsing and basic background screening were built to validate employment history, not to verify identity or detect synthetic digital identity constructs that combine stolen social security numbers with AI-generated work narratives. When AI can fabricate an entire employment identity in minutes, employers who still rely on manual checks at the offer stage are effectively inviting identity fraud into late hiring and onboarding steps where the cost of failure is highest.
The spectrum now runs from routine résumé optimisation, through embellished background data, to full identity theft and live interview stand-ins using deepfake video or voice. In one recent 2023 case reported by a European financial services employer, a candidate passed skills tests and reference checks over a three-week process, only for a final-stage video interview to reveal mismatched facial features compared with earlier ID images, leading to withdrawal of the conditional offer. Healthcare providers and government contractors are also reporting rising verification check volumes as they respond to regulatory pressure around identity verification and background checks, yet many still bolt these checks onto the end of the hiring process. That late timing punishes legitimate candidates with slow onboarding, while doing little to stop a determined fraudulent candidate identity from reaching final interview or even conditional employment offers.
Why legacy ATS workflows miss fabricated candidates
Most Applicant Tracking Systems were designed to move candidates through requisitions, not to verify identity or run dynamic identity checks at the application stage. Standard workflows optimise for time to fill and recruiter productivity, so they treat identity verification and background check steps as downstream compliance tasks owned by HR or third-party screening vendors. That design choice leaves a structural blind spot where identity fraud can flourish long before any formal background screening or legal employment identity validation occurs.
Résumé parsing engines and rule-based screening filters excel at ranking candidates, yet they rarely interrogate whether the person behind the digital identity is real, present and authorised to work. They match skills keywords, not government-issued identifiers, and they score experience, not whether a digital wallet or other digital identity artefact belongs to the same person who appears on video. When interview impersonation services can pair a real background check from one individual with a different candidate in a remote work interview, the old assumption that background checks equal verified identity no longer holds.
Leading vendors such as Greenhouse, SmartRecruiters and Workday Recruiting are now adding native identity check and verification check integrations, but TA Ops teams still need to re-engineer workflows to avoid extra friction. The goal is to insert early identity checks and background checks that are almost invisible to most candidates, using passive digital signals and data validation rather than heavy document uploads. Well-configured ATS automation, as outlined in guidance on top automation tools for managing candidates in ATS, can route higher-risk profiles to enhanced identity verification while allowing low-risk candidates to progress with minimal additional screening. A practical benchmark is to auto-flag 5–10% of applicants for stepped-up checks while keeping median time-to-verify under 24 hours for the remaining candidate pool.
Progressive verification: sequencing trust without killing candidate experience
TA leaders facing rising identity theft and identity fraud need a progressive verification strategy that treats trust as a staged asset, not a one-time gate. The principle is simple: verify identity and candidate identity gradually as the hiring process advances, using light-touch digital identity checks early and reserving intensive background screening for finalists. Done well, this approach protects both employers and candidates by aligning the depth of identity verification with the level of employment risk and the sensitivity of data or financial services access involved.
In practice, progressive verification starts with low-friction digital checks at application, such as email and phone validation, IP and device fingerprinting, and basic identity check cross-referencing against known fraud patterns. As candidates move to assessments or live interviews, systems can trigger a verification check that uses government-issued ID comparison, liveness detection and social security validation, ideally through a secure digital wallet flow that keeps personal data encrypted. Finalists then undergo full background checks and background screening, including employment identity confirmation, criminal record checks where legal, and targeted screening for roles with access to sensitive financial data or regulated onboarding. A simple KPI set might include the percentage of candidates verified at each stage, the share of applicants auto-flagged for enhanced checks, and a time-to-verify target of under 15 minutes for basic checks and under two business days for full screening.
To implement this without damaging candidate experience, TA Ops teams can follow a simple flow: first, explain at application that identity checks will be staged and summarise what will happen when; second, run silent, low-friction checks in the background and monitor drop-off rates; third, request stronger verification only when candidates reach later stages, such as pre-offer or final interview; and finally, give clear status updates so people know why information is being requested and how long each step should take. The candidate experience impact hinges on sequencing and transparency, not on whether you run identity checks at all, because 71% of legitimate candidates who drop out cite process length or technical difficulty rather than the existence of verification itself. TA Ops managers can use insights from building an effective HR tech stack for a seamless candidate experience, such as those discussed in HR tech stack design for candidate experience, to orchestrate identity verification, hiring onboarding and background check tools inside one coherent process. As autonomous AI agents begin to participate in recruiting workflows, a question raised in analysis of the AI-driven candidate experience on the future of AI in candidate experience, the organisations that win will be those that treat identity, verification and trust as core product features of their hiring process, not as after-sales compliance.