Remote hiring gives employers access to talent across the country—and sometimes around the world. However, it also creates opportunities for applicants to conceal their identities, fabricate qualifications and gain unauthorized access to company systems.

Recent federal cases show that remote hiring fraud is no longer a theoretical risk. Criminal organizations have successfully used stolen identities, fraudulent documents and sophisticated technology to obtain jobs with American companies.

A Remote Hiring Scheme Targeted More Than 100 Companies

In April 2026, the U.S. Department of Justice announced the sentencing of two American facilitators who helped North Korean information technology workers pose as U.S.-based applicants.

According to the Justice Department, the scheme:

  • Compromised the identities of more than 80 people
  • Obtained remote positions at more than 100 American companies
  • Generated more than $5 million in revenue
  • Caused employers at least $3 million in legal, investigative and system-remediation costs
  • Used hundreds of company-issued computers hosted at U.S.-based “laptop farms”

The facilitators received computers at American addresses and configured them for remote access. Consequently, the overseas workers appeared to employers and company networks as though they were working from within the United States.

This scheme affected companies of all sizes, including several Fortune 500 businesses and a defense contractor. Read the Justice Department’s April 2026 announcement.

Why Traditional Hiring Procedures May Not Be Enough

A criminal background check remains an important part of a responsible hiring program. Nevertheless, it cannot independently prove that the person participating in a remote interview is the person whose information appears on the application.

For example, an applicant using someone else’s identity might provide a name, date of birth and Social Security number belonging to a real person with no criminal record. A criminal search could return no reportable records because the search examined the identity presented—not necessarily the individual behind the computer.

Therefore, employers should treat identity confirmation, credential verification and criminal-record research as separate but complementary parts of the screening process.

Warning Signs of Possible Remote Hiring Fraud

The FBI has identified several warning signs associated with fraudulent remote applicants. Employers should pay particular attention to:

  • Inconsistent names, addresses or contact information
  • Multiple applicants using similar résumés, telephone numbers or email addresses
  • Voice-over-IP telephone numbers reused across applications
  • Sudden requests to change an address or payment method during onboarding
  • Applicants who cannot clearly discuss their education or employment history
  • Unusual terminology, formatting or unexplained inconsistencies on a résumé
  • Resistance to live video interviews or requests to keep the camera off
  • Differences between the person interviewed and the person who appears during onboarding
  • Requests to ship company equipment to an address unrelated to the employee’s reported residence
  • Unauthorized remote-access software installed on company equipment

The FBI has also warned that fraudulent applicants may use artificial intelligence, face-swapping tools and other technology during video interviews. Review the FBI’s remote IT worker guidance.

One warning sign does not automatically establish fraud. However, several inconsistencies should prompt additional verification before the employer provides equipment, credentials or access to sensitive systems.

How Employers Can Strengthen Remote Hiring

Employers do not need to abandon remote hiring. Instead, they should add safeguards that connect the applicant’s identity, qualifications and work location throughout the hiring process.

Confirm information at multiple stages

Compare the information supplied during the application, screening, interview, onboarding and payroll processes. Names, addresses and other identifying information should remain consistent unless the applicant provides a reasonable and documented explanation.

When appropriate, employers may also consider adding an identity verification service to their remote hiring process.

Conduct live, structured interviews

Ask applicants specific questions about prior positions, projects, education and job responsibilities. Additionally, involve more than one company representative when interviewing candidates for positions with access to sensitive systems or confidential information.

Verify education and employment history

Contact schools and former employers through independently verified sources. Do not rely solely on telephone numbers, email addresses or websites supplied by the applicant.

Professional employment, education and reference checks can reveal:

  • Institutions that cannot confirm attendance or graduation
  • Employers that have no record of the applicant
  • Incorrect dates of employment
  • Inflated positions or responsibilities
  • Credentials issued by questionable or nonexistent organizations

Review address and identity-related information

A Social Security number trace can help identify names and addresses historically associated with the information provided. However, an SSN trace does not prove identity by itself. Employers should use it as one part of a broader screening process.

Maintain control over company equipment

Ship computers only to verified addresses. Furthermore, record device serial numbers, restrict unauthorized remote-access software and monitor unusual login activity.

For sensitive positions, use least-privilege access. Employees should receive only the system permissions required to perform their jobs.

Review staffing and contractor relationships

Companies may face additional risk when third-party staffing firms handle recruiting and onboarding. Therefore, employers should confirm that vendors follow documented identity, credential and screening procedures.

The FBI specifically recommends that companies verify the hiring practices used by third-party staffing firms and audit those practices regularly.

A Background Check Should Include More Than a Database Search

No single search can eliminate hiring risk. A strong screening program uses several sources to identify inconsistencies and confirm an applicant’s history.

Depending on the position and applicable law, an employer may consider:

Employers should select searches based on the position’s duties, access and level of responsibility.

Remember the FCRA

When an employer obtains a background report from a consumer reporting agency, the federal Fair Credit Reporting Act generally requires the employer to provide a clear disclosure and obtain written authorization before ordering the report.

Additionally, if the employer may deny employment or take another adverse action based on the report, it must follow the required pre-adverse and final adverse-action procedures. These steps give the applicant an opportunity to review and dispute potentially inaccurate information.

Employers can review Global Data Fusion’s compliance information and the Federal Trade Commission’s background-check guidance for additional information.

Employers should also apply screening procedures consistently and avoid making decisions based on protected characteristics.

Background Screening and Employment Eligibility Serve Different Purposes

Employers must also follow Form I-9 requirements. Those enrolled in E-Verify must follow the program’s procedures for new hires.

However, employment-eligibility verification and a background investigation serve different purposes. E-Verify compares Form I-9 information with government records to confirm employment authorization. It does not replace criminal-record research, employment verification, education verification or a comprehensive fraud-prevention process. Learn more from E-Verify.

Build Layers Into Your Hiring Process

Remote hiring fraud succeeds when employers treat each stage of hiring as an isolated task. A résumé goes to recruiting, identification goes to human resources, equipment goes to information technology and payment information goes to payroll—without anyone comparing the complete picture.

A layered screening process connects those pieces.

Global Data Fusion helps employers develop position-appropriate screening programs that may include criminal-record searches, Social Security number traces, employment and education verifications, federal court searches, motor vehicle records and other relevant research.

A background check cannot prevent every form of fraud. Nevertheless, combining careful screening with consistent identity, onboarding and cybersecurity controls can help employers identify warning signs before an applicant receives access to company equipment, systems or sensitive information.

Contact Global Data Fusion to review your organization’s remote-hiring and background-screening process.

This article provides general information and is not legal advice. Employers should consult qualified counsel regarding their specific obligations.