Topic starter
16/09/2026 9:21 am
TL;DR: Candidate fraud has touched 98% of HR executives, while 68% of fraudulent hires are discovered only after human observation and intuition, and 98% have already received active corporate credentials before detection, according to HYPR research. The core issue is a broken onboarding-to-access handoff that leaves identity assurance, HR, and security operating on different timelines.
Editorial analysis by NHI Mgmt Group, based on content published by HYPR: “Nearly All Fraudulent Hires Gain Active Corporate Credentials Before Detection, HYPR Research Finds”.
By the numbers:
- 98% of HR executives have encountered candidate fraud.
- 68% of fraudulent hires are uncovered through human observation and intuition.
- 98% of fake hires have already received active corporate credentials and internal network access before detection.
Key questions
Q: What breaks when fraudulent hires can receive credentials before detection?
A: The joiner lifecycle breaks.
Q: Why do fake hires bypass automated controls so often?
A: Automated controls usually watch for technical compromise, not whether the person entering the system is genuine.
Q: How can teams tell whether onboarding fraud controls are actually working?
A: They should look for falling fake-account creation, lower incentive leakage, fewer bot attempts reaching full registration and less legitimate-user abandonment.
Practitioner guidance
- Map the hiring-to-access handoff Document every control point from candidate screening through account issuance, and identify where HR, IAM, and security currently make independent trust decisions.
- Require pre-provisioning identity verification Block the creation of production credentials until the person has passed the strongest available identity proofing and approval workflow for the role.
- Instrument day-one access reviews Add an automated review on first login or first-day account activation so any mismatch between onboarding evidence and access can be halted quickly.
Bottom line: Fraudulent hires exploit a governance gap between employment screening and access provisioning, not just a weakness in HR vetting.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
16/09/2026 9:21 am
Identity assurance fails when hiring and access provisioning are treated as separate controls. The article shows a broken handoff between recruitment, onboarding, and IT account creation. That separation lets impostors move from candidate status to authenticated user status without a single authoritative trust decision. The practitioner lesson is that employee identity is not verified until the system of record and the system of access agree.
A question worth separating out:
Q: Who should own fake-hire risk once credentials are issued?
A: Ownership must shift from HR alone to a shared identity governance model that includes IAM and security before access is created. Once the account exists, the problem is no longer only candidate fraud. It is an active access-risk issue that needs revocation authority and lifecycle accountability.
👉 Read our full editorial: Fraudulent hires often gain corporate access before detection