Every Fraudulent Employee We’ve Ever Found Passed a Background Check

Here’s a sentence that should bother every security and HR leader reading this: every fraudulent employee we’ve ever found passed a background check. Most of them made it through identity verification too.

That gap has become a business risk with a price tag. Thousands of fraudulent workers are pulling hundreds of millions of dollars out of U.S. payrolls. And they’re getting through the same hiring processes most companies still trust completely.

The identity gap is easy to exploit and getting easier

It’s too easy to co-opt a real identity. Too easy to build a persona around it. Too easy to write a resume that lands at the top of an AI screener’s results. Too easy to use generative AI to get through a video interview, or to buy documentation convincing enough to support a fabricated background.

None of this requires sophistication anymore. It requires access to tools that are cheap, widely available, and improving every quarter. A stolen social security number, a generated headshot, a polished resume, a coached interview performance. Put those pieces together and you have a persona convincing enough to clear a background check and an identity verification process, because both were built to confirm documents, not to confirm people.

In their Future of Work Trends 2026 report, Gartner estimates that by 2030, 25% of candidate profiles will be fake. That’s not a distant risk. It’s already showing up in interview rooms: they also note 13% of job seekers report using generative AI in real time during interviews. The organizations catching this problem are the exception, not the rule.

This isn’t only a hiring problem

It’s tempting to file this under “recruiting’s problem to solve.” It isn’t. The same gap that lets a fabricated candidate through the front door shows up again later, in different forms.

When an insider threat investigation raises questions about an employee, identity is often the fastest lens to apply: does this person’s digital footprint hold up, independent of their behavior on the network? When a security team discovers signs of nation-state infiltration, for example a cluster of DPRK-affiliated workers using shared infrastructure, the question isn’t limited to the person already flagged. It extends to every other sensitive role that might share the same exposure.

In each of these cases, the underlying question is the same one we ask at the point of hire: is this person consistent, traceable, and real? Organizations that only ask that question during recruiting are leaving the other two-thirds of the employment lifecycle unexamined.

Why traditional tools miss identity fraud

Background checks and identity verification aren’t broken. They’re just answering a narrower question than most people assume. They confirm that a document is legitimate, that a record exists, that a name matches a database entry. What they don’t do is cross-reference a person’s claimed history against independent sources to see whether the whole picture holds together.

Identity is the new firewall

There’s a phrase circulating in security circles that captures where this is heading: identity is the new firewall. The idea is straightforward. For years, organizations built their defenses around a perimeter, assuming that what was inside the firewall could be trusted and what was outside couldn’t. Distributed workforces and remote hiring have eroded that assumption. Now the perimeter isn’t a network boundary. It’s the identity of every person who has access to your systems, your data, and your people.

That reframing matters for both security and people leaders, because it turns identity from a hiring formality into a shared responsibility. Security teams have spent years building programs to see threats outside their networks. HR teams have spent years refining how they evaluate candidates. Neither can solve this alone, and neither should have to.

It’s also why we built a product specifically to close this gap. We call it Identity Integrity, and the name is deliberate. If identity is the new firewall, then integrity, whether that identity holds up under scrutiny, is what you’re actually defending.