Named a Leader: 2026 Gartner® Magic Quadrant™ for Identity Verification
The problem
What is candidate fraud?
Candidate fraud is any attempt to win a job or contract under a false or misrepresented identity. It includes resume fraud, interview impersonation, deepfaked video, synthetic identity fraud, and employment identity fraud run at scale by organized groups, including the North Korean IT worker operations US employers have been warned about.
Remote hiring fraud runs on a name, a resume, and a face on a screen, and North Korean IT worker fraud is built on all three. One US laptop farm placed operatives at 300+ companies. Proxy interviews and fake interview sessions beat recruiter judgment, while candidate fraud detection replaces it with a deterministic identity check.
Generative tools now produce a polished resume, a cloned voice, and a real-time face swap in one afternoon. Resume fraud detection built to catch typos and date gaps misses all three. Candidate fraud detection works at the identity layer, where threat actors can't fake a government record or a live face.
The solution
Candidate fraud detection by 1Kosmos
Candidate fraud detection verifies that a job applicant is who they claim to be before they are hired. It catches resume fraud, interview impersonation, proxy interviews, deepfaked video, and synthetic identity fraud, including North Korean IT worker schemes, preventing data breaches, insider access, and payroll paid to a fake employee. The candidate fraud detection process runs in four checks, completed from any smartphone or browser in under a minute:
Document verification
The candidate scans a government-issued ID. 1Kosmos validates it against 4,000+ supported document formats and government records.
Liveness detection
A live scan confirms a real, physically present person; deepfake detection flags injected video, virtual cameras, and face swaps.
Biometric matching
The live scan is compared to the ID photo. Candidates either match their document or they don't, with no confidence score to interpret.
Duplicate identity detection
The same face applying under different names gets flagged before it reaches an interview, payroll, or systems.
Document forgery check
Each ID is inspected for forgery, tampering, and photocopy artifacts before it passes as valid proof of identity.
Reusable identity credential
A passed verification issues a reusable credential to the an identity wallet, so every later login and re-verification runs on the same verified evidence.
Global candidate fraud detection for every worker type
Coverage spans 194 countries and 4,000+ document formats, so global candidate fraud detection runs identically for an offshore contractor, a BPO agent, and a local full-time hire, making remote hiring verification a single flow instead of a country-by-country process.
The same check delivers proxy interview detection and flags candidate impersonation for roles that never set foot in an office, exactly where fraudulent applicants concentrate and where fake employee detection would otherwise begin only after payroll starts.
Once a candidate becomes a hire, the same verified identity carries into employee identity verification behind every login.
Recognized & certified
FAQs
Candidate fraud detection identifies applicants who misrepresent their identity during hiring: fake candidates, deepfakes, proxy interviewees, and synthetic identities. 1Kosmos performs detection at the identity layer by validating a government-issued ID and matching it to a live biometric scan before an applicant reaches interviews, systems, or payroll.
A background check confirms history for the identity a candidate claims: employment, education, criminal records. Candidate fraud detection confirms the claimed identity belongs to a real, present person in the first place. Run detection first, so the background check investigates the right person.
Deepfake candidate detection relies on liveness detection during the verification session. It analyzes micro-movements, depth, and texture in real time to confirm a physically present person and to flag injected video, virtual cameras, and the AI-generated faces deepfake job applicants rely on. That performs deepfake interview detection before the interview, at the point where the fraudulent applicant has to prove an identity.
Yes. Biometric matching ties the verified applicant to their government ID, and employee onboarding verification confirms the person who accepted the offer is the person who applied and interviewed. Interview impersonation depends on no one ever comparing a live face to a document; a stand-in can pass a conversation, and can't pass a biometric match against someone else's ID.
North Korean IT worker fraud places state-directed operatives into remote roles through fake employee schemes, using stolen or synthetic identities and US-based facilitators running laptop farms. The scheme depends on no employer ever matching a live face to a government record. Verifying every remote candidate against a government-issued ID and live biometrics breaks that dependency before credentials exist.
I-9 compliance requires that work-eligibility documents look authentic. IAL2 identity proofing under NIST 800-63 requires evidence the person presenting the documents is their real owner. 1Kosmos completes both in one step: document checks support I-9 workflows while liveness detection and biometric matching clear the IAL2 bar.