By 2028, One in Four Candidate Profiles Will Be Fake. Your Zoom Can't Detect It.

40% of Companies Don’t Verify New Hires’ Identities. No document checks, no cross-referencing with real IDs—just assuming the candidate is who they say they are because they showed up on a video call. In 2019, this was reasonable. By 2026, it isn’t.

What is Identity Fraud in Hiring and How Common is it Today?

Identity fraud in hiring occurs when the person going through your process isn’t the one who will do the job—or doesn’t exist at all. It takes three forms: impersonation (someone else attends the interview for the candidate), synthetic identity (a profile created with fabricated documents, photos, and online presence), and stolen credentials (a real person using someone else’s identity to pass screening).

Current numbers, not projections: one in six employers has already experienced identity fraud in their hiring process, and three out of ten aren’t sure if it happened to them (HireRight 2025 Global Benchmark Report, based on over 1,000 HR, risk, and talent acquisition professionals). Gartner projects that by 2028, one in four candidate profiles worldwide will be fake, and in their 2025 survey, 6% of candidates admitted to participating in interview fraud—either impersonating someone else or having someone impersonate them.

A key statistic: only 19% of hiring managers are extremely confident their process would catch fraud (Checkr, 2025). Cybersecurity firm Huntress flagged 23.2% of applicants as fraud risks over a three-month period at the end of 2025.

Why Video Interviews No Longer Prove Identity

Because the cost of creating a fake face has dropped to zero. Unit 42, the research team at Palo Alto Networks, tasked an inexperienced researcher with a five-year-old computer and free tools. In about 70 minutes, they produced several functional synthetic identities, the kind used to pass a video interview.

A real-time deepfake is a filter that replaces the face and voice during a live video call. It requires no post-editing or specialized equipment. The 2025-2026 generation of these tools is specifically designed to withstand video compression from Zoom, Meet, and Teams—meaning they are made to look worse, not better, to go unnoticed.

This isn’t theoretical. In 2024, the U.S. Department of Justice documented a scheme where over 300 American companies unknowingly hired remote IT workers operating under stolen identities. Experian ranked deepfake candidates among the top five fraud threats of 2026.

How Much Does a Fraudulent Hire Cost?

More than a bad hire, because the damage isn’t about productivity—it’s about access. The person you didn’t verify received repository credentials, access to customer data, and a corporate laptop.

Among companies reporting fraudulent hires, 23% reported losses exceeding USD 50,000, and 10% lost more than USD 100,000 (staffing industry surveys, 2026). 41% of staffing service buyers are already facing candidate fraud issues, and among large buyers, the number rises to 82%. Reported losses to the FTC from employment-related fraud jumped from USD 90 million in 2020 to over USD 501 million in 2024.

And there’s a cost not captured in any survey: restarting the process with the role vacant for another two months.

Why “Let’s Go Back to In-Person Interviews” is the Wrong Answer

It’s the most repeated advice on this topic, and it works—for companies hiring within a 40-kilometer radius. Gartner found that 62% of candidates are more likely to apply when the process includes an in-person stage, so it doesn’t even cost candidates. It costs geography.

If your engineering team is spread across three countries, requiring in-person presence to verify identity means giving up the model that allowed you to assemble that team. You’re solving a verification problem with a location tool. It’s not the right control; it’s just the only one most have at hand.

Where is Identity Fraud Really Detected?

Almost never in the interview. It’s detected in the administrative layer—the part of the process most companies consider paperwork and delegate without checks. The reason is simple: a deepfake can sustain a 45-minute call but not a coherent chain of documents.

Layer	What is Verified	When	What Fraud is Detected
Screening	Consistency of history, cross-check with online presence and verifiable references	Before the first interview	Synthetic identity, fabricated CV
Technical Evaluation	Continuity between what was solved and what can be explained live	During the process	Impersonation, proxy in the interview
Contractual	ID against contract name, declared tax residence	Before the signed offer	Stolen credentials, synthetic identity
Payment	Bank account ownership against contract identity	Before the first payment	Impersonation, organized schemes
Logistics	Equipment shipping address against declared residence	Onboarding	Worker located in another jurisdiction

None of these layers are expensive or add weeks to the process. What they add is friction in the right place: for a legitimate candidate, sending a document and confirming a bank account in their name is a ten-minute task. For a fabricated identity, it’s where the chain breaks.

In the processes we manage at WeRecruitIT in LATAM, fraud rarely survives the point where a contract needs to be signed in the name of a person with a verifiable tax residence and payment to a personal account. When the hiring model is a contractor-of-record—where a third party handles the contract, payments, and compliance—this verification is a mandatory part of the flow, not an optional step someone can skip in haste.

What Really Changed

It’s not that candidates lying is new. That’s always existed: more than three out of four companies found discrepancies in CVs in the past twelve months. What changed is that now the liar can fabricate evidence, doing so in just over an hour.

Most companies’ hiring processes were designed assuming identity was a given and competence was what needed proving. That assumption is broken. The uncomfortable part is that the solution isn’t in the stage everyone watches—it’s in the paperwork no one wants to review.