TL;DR: Hiring fraud now exploits synthetic identities, deepfakes, and remote onboarding gaps to bypass point-in-time checks, and 1Kosmos cites FTC losses rising from $90 million in 2020 to more than $501 million in 2024, alongside Google Mandiant reporting more than 60 compromised identities. Static verification fails when identity must remain trustworthy after hiring, not just at the application stage.
Editorial analysis by NHI Mgmt Group, based on content published by 1Kosmos: “Addressing AI-Enabled Hiring Fraud: The Remote Work Identity Challenge”.
By the numbers:
- Financial losses from job and employment scams rose from $90 million in 2020 to more than $501 million in 2024, according to 1Kosmos.
Key questions
Q: What breaks when hiring identity is only checked once at onboarding?
A: A single onboarding check cannot prove that the same person will remain the trusted user after hire.
Q: Why do remote hiring processes make identity fraud easier to scale?
A: Remote hiring reduces physical verification and increases reliance on documents, video, and asynchronous review.
Q: How should security teams stop hiring fraud from turning into access abuse?
A: Security teams should treat hiring as an identity assurance workflow, not a recruitment event.
Practitioner guidance
- Strengthen pre-hire identity proofing Require authoritative identity evidence before offer acceptance, not just document review or interview confidence, so the organisation binds the applicant to a verifiable person before onboarding.
- Connect onboarding to lifecycle identity assurance Carry the same verified identity from hiring into account issuance, authentication, and sensitive transaction approvals so downstream controls inherit a trusted identity foundation.
- Review remote interview trust assumptions Reassess whether video interviews, self-attestation, and automated screening are doing detection work they were never designed to do, especially when AI-generated personas are plausible.
Bottom line: Hiring fraud now exploits the gap between recruitment trust and access trust, which makes the problem a workforce identity issue rather than a simple HR screening issue.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Point-in-time identity verification is the wrong control boundary for hiring fraud: the article shows that the real problem is not whether a candidate can pass a single check, but whether the organisation can maintain assurance after the hire. Remote interviews, automated screening, and rapid onboarding all assume the identity signal is stable across the workflow. When the actor is deceptive from the start, that assumption collapses and the workforce identity programme inherits the fraud. The practitioner conclusion is that identity proofing must be treated as a lifecycle control, not a recruitment filter.
A few things that frame the scale:
- U.S. fraud losses are projected to reach $40 billion by 2027.
A question worth separating out:
Q: How should organisations reduce the chance that a fraudulent hire becomes an insider threat?
A: Link identity proofing to the full workforce lifecycle, including account creation, authentication, and sensitive approvals. A fraudulent hire becomes dangerous when the organisation gives them durable trust after a weak entry check. The best defence is to make the same identity evidence available whenever the person asks for access or performs a high-risk action.
👉 Read our full editorial: Hiring fraud exposes the limits of point-in-time identity checks