Fake job applicants: who sends them, how to spot them and what to do
On this page
- What kinds of fake applicants are there?
- Why are there so many more of them now?
- How do you spot fake applicants at the top of the funnel?
- How do you cut fake applications without losing real candidates?
- What fraud features do applicant tracking systems offer?
- What are the risks of filtering too hard?
- What should you do with a fake application you find?
- Questions people ask
Fake job applicants are applications that misrepresent who is applying or whether a real, interested person is behind them. They range from bot-submitted applications sent by real job seekers, through invented or stolen identities and candidates who hand the interview to someone else, to organized schemes such as North Korean IT workers seeking remote jobs. As of October 2026, Greenhouse reports that its fraud checks flagged one in four candidates for review and failed one in 33 at identity verification. Spot them by clusters of signals rather than one red flag, verify with steps every candidate gets, and never auto-reject on a software flag alone.
This page covers the application stage. What happens once a fake candidate reaches an interview is in how to spot candidate identity fraud, and the resume itself in how to spot an AI-generated or fake resume.
What kinds of fake applicants are there?
| Type | What it is | Usual motive | Where it shows |
|---|---|---|---|
| Bot-submitted applications | A real person uses an auto-apply tool or agent to send hundreds of applications | Volume; the person may not have read the job | Generic or mismatched answers, applications to unrelated roles |
| Fabricated profile | Real person, invented history: employers, titles, skills or credentials | Getting past screens they would otherwise fail | Verification, depth under follow-up questions |
| Stolen or rented identity | The application uses another real person's details, sometimes with their paid cooperation | Passing background checks; hiding location or nationality | Identity checks, profiles that do not fit the person on camera |
| Proxy candidate | A skilled stand-in does the interview; someone else does the job | Getting hired beyond their ability, or holding several jobs | Changes between rounds, or between interview and first day |
| Organized scheme | Teams applying under many personas, with helpers who receive laptops and pay | Revenue for a sanctioned state; data access; extortion | Reused contact details, laptop and payment requests, the whole funnel |
The first type is a nuisance rather than fraud: the applicant is who they say they are. The rest are deception about identity or history, and the last is a security and sanctions problem, covered in North Korean IT worker red flags.
Why are there so many more of them now?
- Applying is nearly free. Ashby's analysis of 109 million applications found applications per hire tripled from 2021 to 2024 and stayed above 300 throughout 2025; Ashby links part of the rise to fraudulent and AI-generated applications submitted by automated tools (April 2026).
- Bots apply on people's behalf. In Greenhouse's July 2025 survey of 2,200 job seekers, 22% said they use bots to apply to roles automatically, rising to 31% among Gen Z.
- Identities are for rent. The FBI said in October 2026 that North Korean IT workers pay to use facilitators' professional accounts and sometimes their identities, and buy verification accounts to pass background checks.
- The money is large. Treasury says North Korean IT worker schemes generated nearly $800 million in 2024 (March 2026).
- AI makes the materials cheap. Resumes, cover letters, headshots and profile text can now be produced in minutes, and Microsoft has documented North Korean workers using face-swap tools on identity documents and photos (June 2025).
Gartner's widely quoted prediction that one in four candidate profiles worldwide will be fake by 2028 is a forecast, not a count. More measured figures are collected in candidate fraud statistics.
How do you spot fake applicants at the top of the funnel?
Signals worth a closer look, especially in combination:
- A burst of applications to a role that normally gets few. A September 2026 joint advisory from Japanese, US, Australian and German agencies tells employers to be cautious when numerous applications arrive in short periods for such positions, and to check where possible that IP addresses roughly match the claimed residence.
- Contact details that fail. The same advisory notes that calling an applicant's number may reveal it is out of service. The FBI's January 2025 warning describes phone numbers and emails reused across resumes under different names.
- Thin or new profiles with a detailed senior history, few connections and nobody at the claimed employers who knows the person.
- Resume and profile disagree on dates, titles or photo.
- Generic answers to a role-specific application question, or the same answer across several applicants.
- Applications to many unrelated roles at your company within minutes.
Not signals: a common name, a name from another country, a career gap, or a candidate who applies to several related roles. These describe ordinary job seekers. For keeping review fast while you check, see how to screen resumes faster, and for the vocabulary of fraud types, what is interview fraud.
How do you cut fake applications without losing real candidates?
- Ask one specific question. "Which of the tools in this posting have you used in the last year, and for what?" is quick for a real candidate and hard to answer well in bulk. Avoid long essays, which AI writes easily and good candidates skip. How to write a job description that screens has examples.
- Say what verification happens. Gartner's advice to employers is to emphasize fraud detection efforts when setting expectations. A line in the posting ("we verify identity on camera before final interviews") deters schemes and costs honest candidates nothing.
- Put a short live conversation before long assessments. Fifteen minutes on camera before a take-home or a multi-round loop protects your interviewers' time.
- Turn on your ATS's fraud signals, and review the flags. See the table below.
- Verify identity at a defined stage for every candidate who reaches it; the candidate identity verification checklist sets out the steps.
- Hold agencies and referral channels to the same standard. The FBI's January 2025 warning tells employers to confirm that third-party staffing firms have robust hiring practices and to audit them.
What fraud features do applicant tracking systems offer?
Three examples, as each vendor describes them on its own site in 2026:
| Product | What it checks | Who decides |
|---|---|---|
| Greenhouse Real Talent | Fraud and spam signals, plus identity verification with CLEAR, in which candidates take a selfie matched to a government ID | Greenhouse says a failed identity verification does not automatically disqualify a candidate |
| Ashby | Optional automatic fraud detection on online applications, flagging risks such as inconsistent location, IP or email issues | Flags for the talent team to manage |
| Gem | An AI fraud detection agent that looks at resume metadata, email, phone, professional profile, IP and device data and assigns a risk level with reasons | Gem says recruiters make the final decision |
Whatever you use, treat a flag as a reason to look, not a verdict. The FBI's October 2026 guidance warns that aggressive measures risk false positives that hurt legitimate applicants, and recommends calibrating controls based on outcomes.
What are the risks of filtering too hard?
- Real candidates look odd too. People use VPNs, recent immigrants have thin local histories, and people who changed their names have mismatched records. A rule that rejects all of them rejects many real people.
- Name blocklists hurt victims. The FBI warns against relying solely on ban lists or name-based filtering, which can exclude qualified applicants and harm identity theft victims. Block phone numbers, emails and devices, not names.
- Automated rejection has legal edges. If software substantially decides who advances, rules on automated hiring tools may apply in some places; see AI hiring laws by state. This is not legal advice.
- Candidates are already wary. Only half of candidates in Gartner's early-2025 survey trusted that the jobs they applied for were legitimate. Heavy-handed checks with no explanation read like a scam.
What should you do with a fake application you find?
- Stop engaging. Close the application with a neutral message or none, in line with your usual practice.
- Look for siblings. Search your ATS for the same phone, email, resume text, portfolio or address under other names.
- Block identifiers, not names. Phone numbers, emails and device or account details.
- Report the profile to the job board or network it came through.
- Escalate organized activity. If you see signs of a scheme, such as laptops to forwarding addresses or payment to third parties, tell security and report it to the FBI at ic3.gov.
- Feed it back. Note which signal caught it, and whether an earlier step could have.
If the fake candidate got as far as an interview, the response steps are in what to do if a candidate used a proxy.
Questions people ask
How common are fake job applicants?
No one has a reliable count across all employers. Greenhouse reported in September 2026 that its Real Talent checks flagged one in four candidates for review and failed one in 33 at identity verification across more than 10.2 million checks. Gartner predicts one in four candidate profiles worldwide will be fake by 2028, which is a forecast rather than a measurement.
How can I tell if a job applicant is fake?
Look for clusters of signals: a phone number that is out of service or reused under other names, a thin or recently created profile that disagrees with the resume, a burst of similar applications to a role that normally gets few, a location that does not match where the application came from, and generic answers to role-specific questions. Then verify with a live screen and an identity check you give every candidate at that stage.
Are AI auto-apply tools a form of job application fraud?
Not in themselves. A real person using a bot to apply widely is not pretending to be someone else, though the applications may not reflect real interest or fit. In Greenhouse's 2025 survey, 22% of job seekers said they use bots to apply automatically. Role-specific application questions and a short live screen handle this better than fraud tools.
Why would someone apply for a job with a fake identity?
Mostly for the salary and the access. US agencies say North Korean IT workers use stolen and fabricated identities to get remote jobs and send most of the pay to the regime, and some have stolen data or extorted employers. Others use a fake or rented identity to pass checks they would fail, or to hold several jobs at once.