Employee onboarding fraud: where should identity verification sit?

TL;DR: Recruitment fraud is now part of the attack surface, and Gartner says identity verification delivers the most value at Select or Hire, when access is about to be granted and fraudulent hires can still be stopped before they enter the network. Placement, not just capability, is the governance decision that determines whether verification reduces risk or adds friction.

NHIMG editorial — based on content published by 1Kosmos: Preventing employee onboarding fraud with identity verification

Questions worth separating out

Q: How should organisations place identity verification in the hiring process?

A: Organisations should place identity verification as late as possible without sacrificing control, ideally at Select and at minimum at Hire.

Q: Why do early-stage hiring checks often fail to stop onboarding fraud?

A: Early-stage checks fail because Attract and Engage contain too many candidates and too little identity signal.

Q: What do security teams get wrong about interview-stage identity signals?

A: They often treat device, phone, and liveness signals as independent verdicts instead of evidence that must be correlated.

Practitioner guidance

• Move verification to the decision point that matters Run full identity verification at Select when operationally possible, and make Hire the minimum acceptable fallback before credentials are issued.
• Correlate candidate signals across systems Join interview, device, phone, and document signals into a single review path so anomalies can be interpreted together rather than in isolation.
• Treat deepfake checks as probabilistic evidence Use deepfake detection as one input to a broader candidate risk assessment, not as a standalone decision engine.

What's in the full article

1Kosmos's full article covers the operational detail this post intentionally leaves for the source:

• How Gartner maps verification value across Attract, Engage, Assess, Select, and Hire.
• The specific device, phone, and deepfake signal examples used in interview-stage risk detection.
• Why signal correlation across the recruitment stack matters more than any single control.
• Operational guidance on when to verify at Select versus when to fall back to Hire.

👉 Read 1Kosmos's analysis of identity verification placement in hiring →

Employee onboarding fraud: where should identity verification sit?

Explore further

View Full Forum →  |  NHI Foundation Course →