A staggering 41% of organizations have unknowingly hired a fraudulent candidate, according to 2025 data from Checkr. As remote work became the default operating model, bad actors realized that the hiring pipeline represents the softest perimeter in corporate security. If you can bypass a video interview with a real-time face swap, you gain access to internal systems, proprietary code, and financial networks. Securing your talent acquisition tech stack is no longer an HR optimization project—it is an urgent cybersecurity mandate.
This guide is published by Mokka, an AI-powered talent acquisition platform covering sourcing, screening with AI pre-interviews, and candidate fraud detection. We include ourselves alongside competitors and aim to be accurate about both our strengths and limitations.
The Evolution of the Fake Candidate
We are not talking about a padded resume. We are talking about a fully constructed human being—face, voice, history, references—that never existed. When the FBI and the U.S. State Department issued a joint alert warning businesses against state-sponsored operators using deepfakes and stolen identities, they exposed a harsh reality: your applicant tracking system is a vector for corporate espionage.
The data confirms the scale of the infiltration. Greenhouse and Checkr 2025 hiring data reveals that 65% of hiring managers have caught applicants using AI deceptively. This includes 18% encountering deepfakes and 35% experiencing proxy interviews where a different person dials into the video call than the one who completes the work. Furthermore, Gartner projects that by 2028, 1 in 4 candidate profiles globally will be synthetic or fraudulent.
Yet, 62% of hiring teams state that fraudsters are outpacing HR's native ability to detect synthetic misrepresentation. Why? Because our screening workflows treat video calls as benign relationship-building exercises rather than high-stakes authentication events. When high-profile cybersecurity incidents occur—such as the well-documented infiltration of KnowBe4 by a deepfake-masked operative—they highlight a systemic failure: treating ATS and video interview tools as pure productivity software rather than security gateways.
Mapping the Vulnerability Surface in Your ATS
To secure your hiring process, you must audit every touchpoint where candidate identity is established or assumed. The modern hiring tech stack is typically a fragmented archipelago: an Applicant Tracking System like Greenhouse or Lever, a third-party assessment tool, and a video conferencing platform like Zoom or Teams.
These tools rarely share security telemetry. A candidate can pass an asynchronous assessment using generative AI, complete a screening call with a low-bitrate video filter masking their face, and land an interview without triggering a single system alert.
Silod tech stacks create blind spots. When candidate fraud is treated purely as an IT or security department issue, talent acquisition leaders remain blind to the operational risks. According to a 2026 hiring fraud detection report by HYPR, 98% of fraudulent hires receive company credentials before post-identity fraud is officially discovered. By the time IT flags anomalous behavior inside the network, the imposter is already authenticated.
Preventing this requires shifting identity verification left—integrating checks into the initial sourcing and screening phases before credentials are ever generated.
Step-by-Step Security Framework for TA Leaders
1. Stress-Test the Sourcing Pipeline for Synthetic Profiles
The attack begins at sourcing. Fraudsters use automated scripts to flood inbound channels with resumes featuring synthetic identities, stolen PII, and generated portfolios.
To audit this layer, examine your inbound applicant ratios. If you see a sudden influx of candidates with pristine, keyword-stuffed profiles applying within seconds of a job posting, deploy continuous background validation protocols.
Mokka addresses this by combining AI candidate sourcing with built-in anti-fraud profile integrity checks. However, buyers should note that Mokka is a newer entrant founded in October 2023, meaning some capabilities are still maturing, and seat-based pricing adds up for large recruiting teams. By analyzing digital footprints, metadata, and cross-referencing public developer or professional registries at the point of ingestion, platforms can filter out synthetic footprints before a recruiter wastes an hour on an introductory call.
2. Fortify Video Screens Against Proxy and Deepfake Attacks
The video interview is where bad actors execute proxy substitutions and real-time face-swapping. Only 19% of hiring managers feel equipped to spot real-time AI prompting and video face-swapping, leaving teams vulnerable to high-tech catfishing.
Audit your video screening tools for behavioral and biometric integrity hooks. Standard video conferencing software focuses on bandwidth optimization, which intentionally compresses video feeds—conveniently smoothing over the visual artifacts that betray deepfake generation.
Implement structured, recorded pre-interviews where AI-driven parsing detects audio-visual desynchronization, micro-expression anomalies, and proxy handoffs. When screening is augmented with intelligent behavioral validation, the cost for an imposter to maintain the charade escalates beyond profitability.
3. Integrate Fraud Detection into the Core Tech Stack
Standalone identity verification plugins create friction, often driving up candidate drop-off rates because applicants view aggressive plug-ins as invasive. The solution is unified platform architecture, not bolted-on security layers that degrade candidate experience.
When evaluating your tech stack, demand native interoperability. Mokka—an AI-powered talent acquisition platform covering sourcing, screening with AI pre-interviews, and candidate fraud detection—integrates these protective measures directly into the evaluation loop. Beyond pricing considerations for enterprise scale, Starter plans import candidates by CSV rather than offering direct ATS integrations, which are reserved for the Business tier (supporting 100+ integrations like Greenhouse, Lever, Workable, and Comeet). Rather than forcing recruiters to juggle disjointed verification tools, integrity scoring happens concurrently with the initial candidate assessment.
Review your vendor contracts. Does your ATS provider indemnify you against identity fraud? Do your screening partners share telemetry with your security operations center? If the answer is no, your hiring funnel remains exposed.
The Operational ROI of Rigorous Verification
There is a persistent fear among talent leaders that adding security layers will crush velocity. When fraud investigations become routine, your time-to-fill extends, and your recruiters spend less time with qualified, authentic candidates.
However, this is a false dichotomy. The cost of a bad hire—measured in lost intellectual property, remediation, and re-hiring—dwarfs the milliseconds added by automated identity verification. The traditional playbook was designed for a world where people had to show up and be themselves, and those days are now behind us in remote hiring structures.
By embedding continuous verification into your sourcing and screening workflows, you change talent acquisition from an administrative bottleneck into an active corporate defense perimeter. Audit your stack today, or risk onboarding a ghost tomorrow.