Six Ways to Screen for Candidate Fraud in 2026

Hiring fraud is no longer a fringe concern. In a single analyzed hiring pipeline, security researchers found that 1 in 343 applicants had infrastructure linked to North Korean fraud operations, and 1 in 4 of those used deepfake technology during the video interview.⁽¹⁰⁾ The FTC reports that job scam and hiring fraud losses exceeded $501 million in 2024, up from just $90 million in 2020.⁽⁶⁾ For IT leaders and hiring managers filling technical roles, the risk is especially high. Remote interviews, contract engagements, and hard-to-verify niche skills create exactly the conditions fraudulent candidates exploit most.

Bridgeview’s candidate fraud resource hub covers the full scope of this problem, including detection tools, risk frameworks, and escalation protocols. This post focuses on six actionable detection methods any hiring team can apply immediately, plus a breakdown of which fraud types are rising fastest and what a fraudulent hire actually costs your organization.

Why Is Candidate Fraud Getting Worse?

41% of IT, cybersecurity, risk, and fraud leaders say their company has already hired and onboarded a fraudulent candidate, according to GetReal Security research published in Security Magazine in February 2026.⁽²⁾ That figure reflects a problem that has accelerated quickly. A few years ago, fabricating a professional identity required significant resources. Now, AI tools have dropped that barrier to near zero.

Generative AI lets bad actors produce polished resumes, credible LinkedIn profiles, and convincing certification screenshots in minutes. Deepfake video tools let a proxy candidate appear on a video call wearing someone else’s face. These aren’t hypothetical risks. Greenhouse’s 2025 Workforce and Hiring Report found that 22% of job seekers now use bots to automatically apply to roles, and 28% use AI to generate fake work samples.⁽³⁾ Applications per recruiter jumped 412% on the Greenhouse platform alone.

The FBI issued an updated advisory in January 2025 confirming that North Korean IT workers are using AI face-swapping technology during video interviews and have escalated to data extortion, stealing proprietary code and credentials after gaining insider access.⁽⁷⁾ The DOJ followed in February 2025 with the indictment of 14 North Korean nationals for a scheme generating at least $88 million over six years through fake IT worker identities. By June 2025, federal searches had uncovered 29 laptop farms across 16 states and confirmed that North Korean operatives had infiltrated more than 300 U.S. companies.⁽⁸⁾

The fraud surge tracks almost perfectly with the remote hiring boom. When organizations shifted to fully distributed interviewing, they removed the physical checkpoints that previously made identity fraud difficult. A candidate who shows up in person with ID is very different from one who appears as a polished video thumbnail. Remote and contract hiring concentrates fraud risk precisely because the verification layer most hiring managers relied on for decades, physical presence, simply isn’t there anymore.

What Types of Candidate Fraud Are Hiring Teams Facing?

59% of hiring managers suspect candidates are using AI tools to misrepresent themselves, and 62% believe job seekers now exceed employers in AI-based identity fabrication, according to Checkr’s survey of 3,000 U.S. hiring managers published in September 2025.⁽⁴⁾ Fraud has diversified well beyond padded resumes. The threat now spans seven distinct categories, each carrying different levels of risk and different detection requirements.

Proxy interviews are a growing concern. 31% of hiring managers have personally interviewed candidates later revealed to have used fake identities, and 35% confirmed a proxy attended a virtual interview in their organization.⁽⁴⁾ Greenhouse data adds more texture: 47% of candidates embellish qualifications, and 32% claim AI skills they don’t actually have.⁽³⁾ Once a proxy hire clears screening and gains system access, the damage extends well beyond a simple bad hire.

For a full breakdown of each fraud type, including detection signals and risk mitigation steps for each, see Bridgeview’s candidate fraud resource hub.

Which Industries Are Most Targeted?

Finance accounts for 35.45% of hiring fraud cases, IT for 30.43%, and healthcare for 15.41%, according to Yardstik’s 2025 hiring fraud analysis.⁽⁵⁾ These three sectors together represent more than 80% of documented incidents. The concentration is not coincidental. All three involve privileged system access, sensitive data, and roles where verifying niche credentials from the outside is genuinely difficult.

IT roles are disproportionately targeted for a few specific reasons. Contract and staff augmentation engagements involve shorter tenure expectations, which lowers the perceived risk for a fraudulent candidate trying to collect a few months of income. Remote work is the norm, not the exception. And many technical certifications and niche skills, such as cloud architecture or specialized security frameworks, are genuinely hard for a non-technical hiring manager to probe with confidence.

Six Ways to Screen for Candidate Fraud

Only 19% of hiring managers report extreme confidence in their ability to catch fraudulent applicants, according to Checkr’s 2025 survey of 3,000 U.S. managers.⁽⁴⁾ That gap is widening fast. Analysis of 19,368 technical interviews conducted between July 2025 and January 2026 found that 38.5% of tech candidates showed signs of AI cheating, with the rate jumping from 9% in July 2025 to 45% by September, a threefold increase in under three months. Critically, 61% of detected cheaters still passed the interview score threshold without additional detection mechanisms.⁽¹¹⁾ These six methods address the failure points that let fraud through.

Live Skill Validation with Unpredictable Scenarios

Assign a real problem from your current backlog rather than a generic coding test or case study. Fraudulent candidates relying on proxy support struggle with follow-up questions that build on their previous answers in real time. Asking “now walk me through how you’d adapt that solution if the data volume doubled” exposes coached responses quickly.

Structured Reference Checks with Verification Layers

Call references directly using the company’s published main number, not a number the candidate provides. Ask specific questions about actual projects, team size, and the technical stack used. Vague, high-level answers from a reference who can’t recall specifics are a meaningful signal worth investigating further.

Behavioral Interviews with Situation-Specific Probing

Ask candidates to walk through a specific failure from their most recent role, then follow up with questions requiring technical detail. AI-coached candidates typically have polished, high-level answers ready. They tend to struggle when pressed for the kind of granular, contextual detail that only comes from actually doing the work.

Video Verification with Liveness Detection

Request government-issued photo ID during a live video session and cross-check it against the application. Watch for lighting inconsistencies, unnatural blinking patterns, or audio-video sync problems that can indicate deepfake tooling. Pindrop’s case analysis found that 79% of candidates who engaged in assessment fraud had their cameras off during technical portions of the interview.⁽¹⁰⁾ A simple camera-on, ID-verification requirement separates the confident from the evasive.

Background Screening Tied to Hiring Stage Gates

Run credential verification and employment history checks before extending any offer, not after. Staging background checks at key decision points rather than treating them as a final formality reduces the cost of discovering fraud late in the process, when offer letters are signed and onboarding is already scheduled.

Fraud-Aware Onboarding and Continuous Monitoring

The first 90 days are your best opportunity to catch fraud that cleared earlier screens. Monitor access patterns, verify credentials directly against issuing institutions, and establish clear escalation protocols for when inconsistencies surface post-hire. Fraud discovered at 30 days costs far less than fraud discovered at 12 months.

These six methods map directly onto the six-step screening process Bridgeview uses on every technical search: eligibility screening, resume and profile review, structured assessment, video screening, fraud-risk review, and hiring manager shortlist.⁽¹²⁾ Each stage is designed to catch what the previous one might miss. No single method catches everything, but layering them reduces the gaps that fraudulent candidates rely on.

What Does Hiring Fraud Actually Cost?

23% of hiring managers reported losses exceeding $50,000 in the past year from hiring or identity fraud, and 10% reported losses exceeding $100,000, according to Checkr’s 2025 survey.⁽⁴⁾ Those figures cover direct financial losses. They don’t capture the full cost, which includes what happens when a fraudulent hire gains legitimate system access to your environment.

FTC data shows that job scam losses grew from $90 million in 2020 to more than $501 million in 2024, a more than fivefold increase in four years.⁽⁶⁾ That trajectory reflects AI-enabled fraud entering the hiring funnel at scale, not isolated incidents.

The downstream costs that don’t appear in financial loss reports are often the most damaging. A fraudulent hire in a network engineer or cloud administrator role may have full access to production systems, sensitive client data, and internal documentation before anyone questions their credentials. The real cost includes incident response, security audits, legal exposure, and the disruption to a team that trusted someone who wasn’t who they claimed to be. SHRM estimates that replacing a mis-hire costs between 50% and 200% of annual salary, and that calculation doesn’t factor in the security exposure window.⁽⁹⁾

Job scam and hiring fraud losses grew from $90 million in 2020 to more than $501 million in 2024, a more than fivefold increase in four years. The FTC attributes much of this acceleration to AI-enabled identity fabrication entering the hiring funnel at scale. (FTC via Moody’s KYC, 2025)⁽⁶⁾

How a Fraud-Aware Hiring Partner Changes the Equation

Most hiring teams are evaluating candidates against job requirements. A fraud-aware hiring partner is also evaluating candidates against fraud patterns, and those are two very different lenses. Bridgeview runs every technical search through a six-step screening process built specifically to catch what a resume alone can’t.⁽¹²⁾

Eligibility screening and resume and profile review filter out mismatches on location, work authorization, and consistency before a candidate advances. Out of every 200 applicants, this stage alone rules out 57%.⁽¹²⁾ Structured assessment and video screening apply live, unpredictable evaluation that proxy candidates and AI-coached responses struggle to survive. Fraud-risk review is a dedicated stage of its own, not an afterthought bolted onto the interview, which is why 23% of late-stage candidates still get flagged here even after clearing everything before it.⁽¹²⁾ Only candidates who clear all five stages reach the final one: hiring manager shortlist.

From an initial pool of 200 resumes, that process typically narrows to about 11 truly viable candidates, roughly 5.5%.⁽¹²⁾ For teams scaling remote tech hiring, this kind of layered verification isn’t optional. It’s the standard that separates organizations that catch fraud early from those that discover it after the damage is done.

Frequently Asked Questions