AI Deepfake Job Interview Scams: How to Spot Fake Candidates & Fake Employers

In February 2026, a cybersecurity company called Evoke AI nearly hired a deepfake. The candidate looked professional on camera, answered technical questions competently, and passed multiple interview rounds. Only when the hiring team asked the candidate to turn their head to the side did the illusion break—the AI-generated face glitched, revealing the deception.

This is not an isolated incident. The FBI has issued warnings about deepfake job interview fraud. Okta has detected over 6,500 cases of North Korean IT workers using fake identities to get hired at Western companies. HR Dive reports that a convincing fake candidate can be created in just 70 minutes.

The threat runs both ways. Job seekers are also being targeted by fake employers using deepfakes to conduct fraudulent interviews, steal personal information, and run advance-fee scams.

Here is what you need to know to protect yourself—whether you are hiring or job hunting.

The Rise of Deepfake Job Fraud

Fake Candidates Targeting Employers

Why it happens: Nation-state actors (particularly North Korea) use deepfakes to get remote jobs at tech companies. Once hired, they gain access to internal systems, steal intellectual property, or simply collect a salary that funds illicit activities.

Real cases in 2026:

• KnowBe4, a major security awareness company, discovered they had hired a deepfake employee
• Okta identified over 6,500 fraudulent job applications linked to North Korean operatives
• Multiple security firms report a surge in AI-assisted application fraud

How it works:

1. Scammer creates a fake identity with AI-generated photos
2. Uses deepfake software during video interviews to appear as someone else
3. May use voice cloning to match the fake persona
4. Once hired for remote work, accesses company systems

Fake Employers Targeting Job Seekers

Why it happens: Scammers pose as recruiters from legitimate companies to steal personal information, conduct advance-fee fraud, or install malware.

Common tactics:

• "You've been selected for an interview" emails from spoofed company domains
• Video interviews where the "hiring manager" is a deepfake
• Requests for SSN, bank details, or payment for "background checks"
• Fake job offers requiring equipment purchases that are never reimbursed

How to Detect a Deepfake in a Video Interview

For Employers Interviewing Candidates

The Head Turn Test: Ask the candidate to slowly turn their head 90 degrees to each side. Current deepfake technology struggles with profile views—the face may warp, glitch, or show unnatural artifacts.

The Hand Test: Request the candidate to hold their hand in front of their face, then move it away. Deepfakes often fail to properly reconstruct the face behind occluding objects.

Lighting Challenge: Ask the candidate to change the angle of their light source (turn on a lamp from a different direction). Real faces respond naturally to lighting changes; deepfakes may show inconsistent shadows.

Active Liveness Checks:

• Ask for random, unexpected movements: "Touch your right ear with your left hand"
• Request they hold up a specific object (today's newspaper, a random household item)
• Have them write something on paper and show it to the camera

Technical Indicators:

• Unnatural blinking patterns (too frequent or too infrequent)
• Mismatched lip sync, especially on complex words
• Blurry or distorted areas around the hairline and face edges
• Inconsistent skin texture or lighting on the face vs. neck/ears
• Audio-video sync issues

Process Safeguards:

• Require government ID verification before final hiring decisions
• Conduct at least one interview with camera on throughout
• Use identity verification services that detect deepfakes
• Have multiple team members independently assess the candidate

For Job Seekers Evaluating Employers

Verify the Company:

• Check the company's official website for the job listing
• Call the company's main number (from their website, not the email) to verify the recruiter
• Search LinkedIn for the interviewer's profile—do they have a history?

Red Flags in Video Interviews:

• Interviewer refuses to turn on camera or camera "malfunctions"
• Pressure to make quick decisions
• Requests for personal financial information early in the process
• Interview scheduled on platforms you've never heard of
• "Hiring manager" appearance seems artificial or movements are unnatural

Never Provide:

• SSN or national ID numbers before a verified job offer
• Bank account information for "direct deposit setup" before you've started
• Payment for equipment, training, or background checks
• Copies of ID documents over email

Secure Document Sharing During the Hiring Process

Both employers and candidates need to share sensitive documents during hiring: resumes, ID copies, offer letters, contracts. This creates opportunities for interception and fraud.

For Employers:

• Don't send offer letters as plain email attachments
• Use password-protected document links that expire after a set time
• Verify the candidate's identity through multiple channels before sharing sensitive information

For Candidates:

• Be cautious about where you send your resume and personal details
• If sharing sensitive documents, use encrypted or password-protected methods
• Consider using services like LOCK.PUB to share documents with expiring, password-protected links

Example: Instead of emailing a copy of your ID directly to a recruiter you've never met in person, upload it to a secure link that requires a password and expires in 24 hours. Share the link via email and the password via a separate channel (e.g., text message after you've verified the phone number).

What to Do If You Suspect a Deepfake Scam

For Employers:

1. Do not proceed with the hiring process
2. Document all interactions and evidence
3. Report to the FBI's Internet Crime Complaint Center (IC3)
4. Alert your security team and HR department
5. Consider notifying industry peers if you identify a pattern

For Job Seekers:

1. Stop all communication with the suspected scammer
2. Do not send any money or personal information
3. Report to the FTC at reportfraud.ftc.gov
4. Report to the platform where you found the job listing
5. If you've already shared personal information, monitor your credit and consider a fraud alert

The Future of Hiring Verification

As deepfake technology improves, so must verification methods. Companies are beginning to adopt:

• Biometric verification services that detect AI-generated faces
• Liveness detection built into interview platforms
• Blockchain-based credential verification for education and work history
• In-person verification requirements for high-security positions

Until these become standard, vigilance is your best defense. Trust your instincts—if something feels off about an interview, it probably is.

Key Takeaways

If You're Hiring	If You're Job Hunting
Use the head turn and hand tests	Verify company through official channels
Require liveness checks	Never pay for "background checks"
Verify identity before final hire	Don't share SSN before verified offer
Use expiring, protected document links	Share documents via secure, expiring links
Report suspicious candidates to IC3	Report scams to FTC

The job market is challenging enough without AI-powered fraud. Whether you are hiring or hunting, take the extra minutes to verify who you are really talking to.

Secure your document sharing →