How to spot fake references: warning signs and how to verify a referee

A fake reference almost always fails one test: you cannot reach the referee, or confirm they worked with the candidate, except through details the candidate gave you. Watch for personal mobile numbers and free email addresses with no findable company contact, referees who answer instantly and praise everything without a single specific example, and details that overlap with the candidate's or another referee's. The fix is to verify the referee before you weigh the reference: find the employer yourself, reach the person through the company, and open with questions only a real manager could answer.

This page is about catching fabricated references. For the reference questions themselves, use the reference check template; for the live call, the candidate reference call script.

What does a fake reference look like?

Fake references come in a few recognizable forms, from lazy to organized:

• A friend playing the manager. The most common: a real person, coached by the candidate, claiming a role they never had.
• The candidate themselves. A second phone number, a new email address, sometimes a disguised voice.
• A peer promoted for the occasion. A real former colleague, but presented as the candidate's manager. Not invented, still misleading.
• A fake employer. A company that exists only as a website and a phone number, with a "manager" to vouch for the candidate. In its October 13, 2026 public service announcement on North Korean IT workers, the FBI said these workers "routinely invent elaborate stories, create fake companies, and produce official documentation to lend credibility to their requests."
• A borrowed identity. The same FBI announcement says the workers pay Americans to, among other things, verify fraudulent identities and provide access to their professional networking accounts. A convincing LinkedIn profile is therefore not, on its own, proof that the person behind it is who they appear to be.

What are the warning signs of a fake reference?

No single sign proves anything. Several together are a reason to verify through a second route before you rely on the reference.

How do you verify that a referee is real?

1. Ask for the right details up front. For each referee: full name, their title at the time, the company, how they worked with the candidate and when, and permission to contact them through their employer. The reference request email templates include wording for this.
2. Find the company yourself. Use the official website and main phone number you look up, not the ones on the resume. Check that the business is registered in the state or country it claims; for UK companies, Companies House is searchable for free. For an unfamiliar company website, ICANN Lookup queries domain registration data and, according to its FAQ, can show when the registration was created; some fields may be redacted. A "ten-year-old employer" with a domain registered last month deserves questions.
3. Reach the referee through the company. Call the switchboard and ask for them by name, or email them at the company's domain. If they have moved on, ask where they work now and repeat the check there.
4. Confirm the overlap. The referee should have been at the company, in a role that could see the candidate's work, at the same time. If the company will only confirm dates, that is enough for this step.
5. Open with the relationship. Before any question about performance, ask how they know the candidate, when they worked together, and what each of their roles was. Then compare the answers with the candidate's account.
6. Write down how you verified, not just what the referee said: "reached via the main line, transferred to her extension" is evidence; "called the number provided" is not.

If you use an automated reference platform

Several reference-checking tools add technical fraud signals. Crosschq's help center describes fraud alerts that cover reference legitimacy (email and phone intelligence, work history) and suspicious activity such as shared devices, shared IP addresses and incognito or VPN browsing. HiPeople says it compares a fingerprint built from the IP address and browser and device details of the candidate and each reference. Both are vendor descriptions as of October 2026. A shared office network or VPN can produce an innocent match, so a flag is a prompt to phone the referee through their company, not a verdict.

Which questions expose a fake reference?

The best questions have answers a real manager knows without thinking and a stand-in has to invent.

The last question works best when you have the candidate's exact words from the interview to compare against. If you take screens with Interview Signal, the scorecard quotes the candidate verbatim, checked against the transcript, so you can put a specific claim to the referee rather than a paraphrase from memory.

What if the candidate can't give you a contactable manager?

Many candidates have honest reasons: the company closed, the manager left and cannot be found, the current employer does not know they are looking, they were self-employed or contracting. Do not treat these as red flags on their own. Offer alternatives and apply them to everyone in the same situation:

• A former colleague or client you can verify through their current employer.
• Employment verification for the dates and title, using how to verify employment history.
• A reference from an earlier role, plus a closer look at the recent one in the final interview.
• Work samples, a portfolio walkthrough or a short paid trial, depending on the role.
• For a current employer, a reference after the offer, with the offer conditional on it.

What should you do when you suspect a fake reference?

1. Verify through a second, independent route before forming a view. Most odd references turn out to be badly organized, not invented.
2. Ask the candidate, neutrally. "I wasn't able to reach Sam through Acme's main line. Could you give me another way to reach them, or a different reference from that role?" A genuine candidate solves this quickly.
3. Do not accuse the referee on the call. Thank them, end politely, and record what happened.
4. Decide on what you can show. A reference you could not verify is simply unverified. A reference you can show was fabricated is a misrepresentation, to be handled like any other lie in the hiring process: factually, with a chance to explain.
5. Look wider if the pattern fits. A fake reference alongside a fake employer, camera reluctance or mismatched identity details is a fraud question, not a reference question; see how to spot candidate identity fraud and North Korean IT worker red flags.

What should agencies tell the client?

Mark verification separately from content in every reference write-up. "Reference: Jordan Lee, Head of Operations at Northfield Logistics 2021-2024, reached through the company switchboard on 12 October" (an invented example) tells the client something a phone number never could. If a reference could not be verified, say so; passing on an unverified reference as checked is how an agency's credibility gets spent. Reference checks are one layer of confirming a candidate is genuine; the candidate identity verification checklist covers the others.