Free guide

Fake job applicants and deepfake interviews: how employers can spot them

Stolen identities, deepfake video interviews and stand-in interviewers are hitting remote hiring. The warning signs, practical checks before you hire, and how to verify a candidate with their consent.

Remote hiring has made it easier for fraudsters to get jobs under someone else’s name. Some use stolen identities and fake CVs. Some use deepfake video or voice tools in interviews. Others pay a stand-in to do the interview for them, then someone else turns up to do the job. The risk isn’t only a bad hire: a fake employee can be handed laptops, logins and customer data.

How big is the problem?

  • The FBI warned in 2022 of an increase in complaints about deepfakes and stolen personal information being used to apply for remote IT, programming and database roles, some with access to customer data and financial information (FBI IC3).
  • In a 2Q25 Gartner survey of 3,000 job candidates, 6% admitted to interview fraud: posing as someone else, or having someone else pose as them. Gartner predicts that by 2028, one in four candidate profiles worldwide will be fake (Gartner).
  • In October 2026 the US Department of Justice announced charges in a North Korean remote IT worker scheme that affected more than 70 US companies (US DOJ). The FBI says most of the names and addresses these workers give employers come from stolen identities, and that they also pay people to sit interviews on their behalf (FBI IC3).

Three ways fake applicants get through

1. Stolen or borrowed identities. The applicant uses a real person’s name, date of birth and documents. The FBI notes that some victims only found out when pre-employment background checks showed the details belonged to someone else (FBI IC3). Because the identity is real, a basic check on the name alone can pass.

2. Deepfake video and voice. Face-swap and voice tools let someone appear as a different person on camera. The FBI says complaints describe lip movements that don’t match the audio, and coughs or sneezes that don’t line up with what’s on screen (FBI IC3).

3. Proxy (stand-in) interviewers. A skilled person does the interview, then a different person does the job. The FBI says organised groups pay people to interview on someone else’s behalf, to appear on camera and even to use their own social media and professional networking accounts for applications (FBI IC3).

Warning signs during hiring

  • The camera won’t turn on, or “breaks” at key moments.
  • Video and audio out of sync, blurring around the face when they move, or odd lighting on the face.
  • Long pauses before answers, as if they’re reading or being fed lines.
  • A different voice, accent or level of skill on a second call.
  • A brand-new or very thin online profile, or photos that appear elsewhere under another name.
  • CV text that matches other people’s CVs word for word.
  • Referees who use free webmail addresses, only answer on mobile or internet numbers, or can’t be found at the company they name.
  • After the offer: asking for the work laptop to go to a different address from their ID, wanting pay sent to someone else’s account or in crypto, or frequently changing bank accounts and addresses (FBI IC3).

Practical checks before you hire

  1. Start with written consent. Tell the candidate what you will check and why, and get it in writing. In the US, if you use a third-party background report for a hiring decision, the Fair Credit Reporting Act requires a stand-alone written notice and the candidate’s written permission, plus extra steps before and after any adverse decision (FTC).
  2. Check ID against the face on camera. Ask them to hold their photo ID next to their face on a live video call you run. Then ask for simple live actions: turn side-on, pass a hand across the face, read out a word you choose.
  3. Ask unscripted follow-ups. Dig into details from their CV: a project, a manager’s name, a tool they used. Proxy interviewers and fed answers struggle with fast, specific follow-ups.
  4. Verify history and referees yourself. Find the past employer’s main number on their own website and ask for the referee by name. Don’t rely on phone numbers or emails the candidate supplies. Confirm qualifications with the institution or its official verification service.
  5. Look at their online footprint. Reverse image search their profile photo and check how old their profiles are. See our guide to reverse image searching a photo; the same steps work for candidate photos.
  6. Use more than one check. The FBI says these schemes can’t be reliably spotted with a single sign and recommends layered checks throughout employment, such as multiple forms of ID and live verification (FBI IC3). It also warns against relying on name “ban lists”, which can block real applicants and harm identity theft victims.
  7. Check again on day one. Make sure the person who starts is the person you interviewed, and ship equipment only to the address on their verified ID.
  8. Use licensed providers for criminal and credit checks. These are regulated in most countries. Use an accredited or licensed screening company, and in the US an FCRA-compliant one.

Keep it fair

Most applicants are genuine, and the FBI notes that aggressive controls risk false positives that harm legitimate applicants (FBI IC3). Apply the same checks to every candidate for a role, stick to facts relevant to the job, and never screen on protected characteristics such as age, religion, health or ethnicity.

If you think you’ve found a fake applicant

  1. Pause the process and don’t send equipment or system access.
  2. Keep records: the CV, emails, phone numbers, interview recordings (if you were allowed to record) and any ID provided.
  3. If someone’s identity has been stolen, remember they are a victim too.
  4. Report it. In the US, file a complaint with IC3; elsewhere, report to your national cybercrime or fraud agency.

Get help verifying a candidate

Our Employee Check verifies a candidate’s identity documents, employment history, qualifications and referees, and reviews their public online footprint for fake-applicant red flags, using AI-powered tools and direct contact with employers and institutions. It needs the candidate’s written consent (a free template is on the page). We don’t do criminal record or credit checks; we refer those to licensed screening firms. Because of the FCRA, for US hires we provide our free checklists and recommend an FCRA-compliant screening company. You make the hiring decision. Related: lookalike domain examples and fake invoice email scams.

Questions

How can you tell if a video interview is a deepfake?

The FBI says complaints describe lip movement that doesn’t match the audio, and coughs or sneezes that don’t line up with the video. Ask the candidate to do simple live things, like turn their head side-on or pass a hand in front of their face, and be wary if the camera keeps “failing”. No single sign proves it, so combine checks.

Can I check a candidate without telling them?

You shouldn’t. Privacy laws in most countries require you to tell candidates what you collect and why, and contacting referees and past employers about someone needs their consent. In the US, background reports used for hiring fall under the Fair Credit Reporting Act, which requires a written notice and the candidate’s written permission.

Does ImposterWatch do criminal record or credit checks?

No. Those are referred to licensed or accredited screening providers in each country. Employee Check covers identity, CV claims, referees and the public online footprint.

Is a stand-in interviewer the same as a deepfake?

Not quite, but both mean the person you hire may not be the person you interviewed. A proxy interviewer is a real person who interviews on the applicant’s behalf. Checking ID on camera at the interview and again on day one helps catch both.

Verify a candidate before you hand over access

ImposterWatch Employee Check verifies a candidate’s identity documents, CV claims and referees and reviews their public online footprint for fake-applicant red flags, all with the candidate’s written consent. Criminal record and credit checks are referred to licensed screening firms.

See Employee CheckGet the consent template

More guides

General information only, not legal or financial advice. ImposterWatch is operated by Cloud Investments FZE (UAE) and is not a background check or private investigator service.