Stopping AI-powered attacksBeginnerLesson 1304 min read

Fake job candidates and hiring fraud

AI can polish a fake CV, and someone else can sit the interview. Fake job offers also target people looking for work. Learn the checks that protect both sides.

✦ Ask the tutor🧪 Lab · 20 min📝 Lesson test
Lesson in motion

In 60 seconds

Fake job candidates and hiring fraud

AI can polish a fake CV, and someone else can sit the interview. Fake job offers also target people looking for work. Learn the checks that protect both sides.

1/5
In simple words
Imagine a cricket trial where one boy sends his older cousin to bat in his place. The coach picks the cousin, but the younger boy turns up on the team. Companies can face the same trick, so they check who is really there, before and after they hire.
Hiring fraud works in two directions. Fake candidates try to get hired using false identities or false skills. Fake employers use fake job offers to cheat people who are looking for work. AI helps both.

Fake candidates

  • AI-polished CVs: a CV written to match every keyword in the job post, with made-up projects or employers.
  • Stand-ins: a different, more skilled person sits the video interview. The real hire turns up later.
  • Deepfake or filtered video: a face or voice changed during the interview.
  • Hidden help: someone off-camera, or an AI tool, feeds answers live.
  • Remote-worker identity fraud: people using stolen or false identities to get remote jobs, sometimes to gain access to company systems and data.
Note
Security agencies in several countries have warned about people using false identities to get remote IT jobs. Not every odd interview is fraud; nervous people and bad internet are common. The aim is fair, consistent checks for everyone, not suspicion of particular groups.

Checks that protect the organisation

  1. 1

    Verify identity

    Check official ID through a proper process, and make sure the same person appears at every stage.
  2. 2

    Live, interactive interviews

    Ask follow-up questions about their own past work. Ask them to explain their thinking. Include at least one stage in person or with a trusted verification step where possible.
  3. 3

    Background and reference checks

    Contact references through official company numbers, not only the ones on the CV. Verify education and past employment where your process allows.
  4. 4

    Check at joining

    Confirm that the person who joins is the person who interviewed. Match bank account, address and ID details.
  5. 5

    Least access for new joiners

    Give only the access needed for the first tasks. Add more over time. Watch for unusual activity early on.
Watch out
Background checks and ID verification involve personal data. Follow India's Digital Personal Data Protection Act 2023 and your company's policies: collect only what you need, explain why, and store it securely. Talk to your HR or legal team for the rules that apply to you.

Fake job offers that target applicants

Criminals also pose as recruiters from real companies. AI helps them write convincing job posts, offer letters and chat messages. Common signs:
  • A fee for registration, training, equipment or 'security deposit'.
  • An offer without a real interview, or only a chat on WhatsApp or Telegram.
  • Pay that seems too high for simple work, such as 'liking videos' or 'rating products'.
  • Email from a free email address or a lookalike domain instead of the company's real one.
Do this
Protect your own company's name: publish on your careers page how you recruit, that you never charge candidates any fee, and which email domain your recruiters use. This helps applicants spot fakes that use your brand.
Try this. Look at your organisation's careers page. Does it say that you never ask for money and which email domain recruiters use? If not, suggest adding it.

Watch and read more

Lab

A hiring-integrity checklist for one role, covering interview, joining and first month.

~20 min

The problem

Pick one role your organisation hires for (or a made-up one, like a remote software developer at a small IT services company).

  1. List the hiring stages from application to the end of the first month.
  2. For each stage, add one check that confirms the same real person is involved and their claims are true.
  3. Write the access the new joiner gets on day 1, and what they must wait for.
  4. Write 3 lines for your careers page that help applicants avoid fake job offers using your name.

You are done when

Hard questions

Try to answer before you reveal. If you can answer these, you understood the lesson.

Q1How do you balance fraud checks with a fair, welcoming hiring process?Reveal

Apply the same checks to every candidate, explain them in advance, collect only the data you need, and give people a way to raise concerns. Don't treat accents, nervousness or poor internet as fraud signs. Good checks focus on verifiable facts (identity, references, live skills) rather than impressions.

Q2Why is 'least access' still important even after strong hiring checks?Reveal

No hiring check is perfect, and honest people's accounts can be phished later. Least access limits what anyone, or any stolen account, can reach. It turns a potential disaster into a smaller, contained problem, and makes unusual activity easier to spot.

Please sign in to continue.

Questions people ask

Is it fair to ask candidates to turn off background filters in video interviews?

Yes, if you ask everyone the same way and explain why. Be respectful: some people use blurred backgrounds for privacy at home. A simple, consistent request for clear video during key stages is reasonable.

Can we use AI tools to detect AI-written CVs?

Be careful. Many honest candidates use AI to improve their CV, and detectors make mistakes. A polished CV is not fraud. Focus on verifying claims: ask about the work, check references, and test skills live.

What should we do if we find a new hire is not who they claimed to be?

Limit their access at once, preserve records, and involve HR, legal and security together. Don't confront them alone. Your legal team can advise on reporting to the police.

Someone is using our company name in fake job offers. What can we do?

Post a clear warning on your website and social media, report the fake accounts to the platforms, and report the fraud at cybercrime.gov.in. Tell applicants how to verify real openings.

Lesson test

5 questions. Get 3 right (60%) to pass and complete this lesson.

Sign in to take the test and save your progress