How to Prevent Fraudulent Hires: 98% Use Company Credentials

Post Views: 5

98% of fraudulent employees obtain organizational credentials before detection, highlighting a critical vulnerability in enterprise identity security.

A Critical Vulnerability in Enterprise Identity Security

A critical vulnerability in enterprise identity security has been identified, stemming from a 90-day gap between the hiring process and onboarding procedures, according to HYPR’s State of HR Identity Fraud Detection report. Bojan Simic, CEO of HYPR, emphasized that malicious actors no longer require network breaches, as they can bypass remote interviews and obtain legitimate credentials directly from IT departments.

“Human intuition is not a security control,” Simic stated. “While skeptics may cite low reported fraud numbers, the absence of dedicated verification technology leaves the industry unaware of the true scale of the issue. Current data underrepresents the extent of compromised personnel within organizations.”

Fraud Detection Remains Inconsistent

Ninety-eight percent of HR leaders have encountered candidate fraud, yet 96% believe their organizations would identify it. When fraud evades initial screening, impostors can access corporate credentials and internal networks before being flagged. The report outlines that screening, interviews, onboarding, active employment, and technical assessments serve as primary detection points. However, organizations typically identify an average of 2.2 checkpoints during fraud incidents, indicating fragmented and disconnected verification processes.

Identity Verification Tools Face Limitations

Despite the prevalence of synthetic agents and AI-generated candidates, recruitment platforms and applicant tracking systems have begun integrating identity verification and anti-fraud features into application and screening stages. However, third-party security solutions detect only 53% of identity-based and AI-driven threats. The remaining cases rely on manual discovery through employee reports, internal audits, and external alerts. Even with automated controls in place, nearly half of threats require manual intervention.

Sector-Specific Confidence Gaps

Leaders responsible for identity and hiring technologies expressed lower confidence in their organizations’ ability to detect fraud. The IT and telecommunications sector, despite its technical expertise, relies heavily on manual observation. The education sector exhibits the largest disparity between concerns about hiring fraud and confidence in existing defenses. In contrast, manufacturing and utilities report high levels of both concern and confidence, attributed to in-person hiring and face-to-face identity checks. The sales, media, and marketing sectors stand out as the only group where confidence surpasses concern, with a reliance on employee-driven fraud reporting.

Pre-Hire Identity Risk Ownership Gaps

The responsibility for pre-hire identity risks is often ambiguously defined in practice, despite clear documentation. HR typically manages recruitment, while IT and security teams intervene once credentials are issued. This transition period lacks a defined owner, creating opportunities for attackers to exploit the handoff. The exposure persists even after hiring, particularly when fraud is detected post-credential issuance.

Financial and Operational Consequences

Resolving a hiring fraud incident typically requires one to three weeks, incurring financial and operational costs through delayed hiring, backfilling, productivity loss, security exposure, compliance risks, and team disruption. By the time post-hire identity fraud is uncovered, 98% of fraudulent employees have already accessed company credentials. In response, organizations have implemented an average of 2.52 measures per incident, including identity verification technologies. However, identity security investments often remain reactive, with 60% of identity verification and multi-factor authentication spending triggered by breaches rather than proactive measures.