The hiring process has undergone a radical transformation. No longer content with simply reviewing resumes and conducting standard interviews, employers now demand facial biometric scans, scrutinise email creation dates, and even ask candidates to point webcams at electrical outlets to prove their physical location. This technological overhaul reflects a crisis: the deluge of bogus applications flooding recruitment pipelines worldwide, many now generated or enhanced by artificial intelligence.
The scale of the problem has become impossible to ignore. According to data from Greenhouse, a recruiting software provider, more than a third of approximately 1,230 headhunters and hiring managers surveyed report spending half their workweek filtering through what they describe as "spam and junk" submissions—many of them AI-generated. Companies face a dual threat: applicants using stolen identities or fabricated credentials to secure positions, and more sophisticated schemes involving deepfakes and impersonation. The business case for intervention is stark. Checkr, a background-check firm, found that roughly 23% of surveyed US companies experienced hiring fraud losses exceeding US$50,000 in the past year due to delayed projects, compliance issues, and the costs of rehiring. For one in ten respondents, losses surpassed US$100,000.
The incidents driving this arms race range from unsettling to alarming. Hiten Sheth, an analyst at Gartner Inc, documents cases where candidates used deepfakes to impersonate others during video interviews, with one recruiter discovering their hire was an entirely different person on the first day of work. Another company discovered their remote worker, whom they believed was based in North America, actually resided on a different continent. Gartner projects that by 2028, one in four job applications will be fraudulent—a trajectory that would fundamentally reshape recruitment across industries.
Technology companies are capitalising on this crisis. Clear, known primarily for its airport expedited-access service, has expanded its digital-identity division to help recruiters verify applicants using photo identification and public records databases. The company initially resisted this pivot but found clients were voluntarily using its biometric facial-scanning technology to vet remote workers post-hire. Similarly, Persona, another identity-verification firm, has made candidate screening one of its fastest-growing services. Their platform can detect suspicious patterns: newly created email addresses, computer clocks set to different time zones than claimed locations, VPN usage designed to obscure location, and IP addresses jumping geographically faster than human travel allows. In one documented case, Persona identified a prospect impersonating a Coinbase employee using information plagiarised from the employee's LinkedIn profile.
The methodology differs fundamentally from traditional background checks. Rather than requesting basic personal information and consent forms after hiring decisions approach finalisation, these new systems interrogate digital signals from the moment applications arrive. Persona's chief executive officer Rick Song argues that the distinction is crucial: "Background checks are fundamentally about the past. The real risk is that you aren't even the person that you claim to be." This reframing has triggered increasingly invasive screening practices. At a Society for Human Resource Management conference last month, recruiters described what Stephen Dwyer, president of the American Staffing Association, characterised as "stalking" candidates through biometric tools and IP address tracking—measures that would be unthinkable in traditional hiring frameworks.
The practical implementation has become peculiar, even absurd in places. Recruiters now ask video interview participants to turn their webcams toward nearby electrical outlets to verify they are physically in the United States. Equinix, the data centre giant, requires applicants to present government-issued photo identification during video interviews and prohibits virtual backgrounds. These demands reflect genuine concerns but also illustrate how desperation to prevent fraud is reshaping the candidate experience. Susan Dietrich, owner of Pittsburgh-based Tops Staffing, now combines AI tools and phone interviews to verify identities and cross-check claims. She reports candidates fabricating multiple years of work experience in months between job applications and listing skills they demonstrably lack during phone conversations. The additional vetting, she acknowledges, "is really sucking up a lot of time," creating new inefficiencies even as companies attempt to eliminate fraudulent ones.
The urgency intensified following revelations about state-sponsored infiltration. The US Justice Department disclosed last year that North Korean operatives had breached more than 100 American companies by obtaining remote IT positions using fraudulent identities and resumes. NBCUniversal, Nike, and Boeing all unwittingly hired North Korean nationals posing as American workers—a disclosure that elevated hiring fraud from a nuisance to a national security concern. That revelation rippled through corporate America, pushing even companies sceptical of invasive vetting procedures toward adoption.
The economic pressure on job seekers has amplified the fraud problem. The median unemployed worker now spends 11 weeks searching for employment, up from 10 weeks a year prior, according to US Labor Department data. In response, some candidates resort to extreme measures: impersonating others, deploying chatbots in interviews, or using AI to enhance qualifications beyond recognition. More than 40% of employers hiring temporary workers now deploy some form of identity-verification software, according to the first Staffing Industry Analysts survey on the topic, which included responses from more than 120 companies.
Daniel Chait, chief executive officer of Greenhouse, frames the technological evolution as straightforward adaptation. "Technologies now being used draw from well-tested, decades-old cybersecurity employed in airports, voting systems, military and government applications," he explained, "but applying them to ordinary job applications turns out to be quite simple—no more complicated than taking a selfie on your phone." This accessibility matters. Biometric facial-scanning and IP-address analysis no longer require expensive specialised infrastructure; they integrate directly into existing recruitment platforms.
Yet the societal implications remain contested. Ernest Stephens, a talent-acquisition manager at Seattle Public Utilities, characterises falsified information as "one of the greatest threats," forcing his organisation to implement "a lot of changes" to hiring procedures—though he declined to specify details citing security concerns relevant to a public utility. The shift suggests a broader reimagining of privacy expectations in employment relationships. Candidates now routinely submit to verification procedures their counterparts a decade ago would have found dystopian. Holly Priestner, chief people officer at Place, a real estate company that implemented Clear-based identity verification seven months ago, noted that "we learned some things the hard way." The platform flags hundreds of potentially suspicious applications daily, though the human cost of processing false positives remains opaque.
For Malaysian and Southeast Asian readers, this trend carries particular relevance. As regional labour markets increasingly integrate with global hiring platforms, the pressure to adopt these technologies will spread. Freelancers and remote workers seeking positions with international companies will encounter these demands. The question of how privacy regulations—particularly those addressing biometric data—will evolve in response to employer demands remains unresolved. Malaysia's Personal Data Protection Act will face pressure as international employers push local candidates through verification procedures originally developed for North American and European markets. The hiring fraud crisis, while genuinely serious, risks creating a surveillance infrastructure that permanently reshapes employment relationships far beyond its original security purpose.
