Ghost in the Hiring Machine - How to Spot Fake Personas

The talk opens with the risk of fake remote hires. The speakers describe a 2024 KnowBe4 case where a candidate using a stolen US identity and an AI-enhanced photo passed four video interviews, then had a laptop shipped to a laptop farm that let an overseas operator work from inside the country. Job-market pressure and deepfake tools make such personas easier to build.

The middle covers techniques and two cases. A European rental fraud involved forged identity documents, which were flagged in the EU's Prado database only after the fact. A second case began with a CV, an email address and a LinkedIn photo. Early searches stalled, but rerunning a reverse image search later found a Facebook profile under a different name, matching the identity an HR investigation had uncovered. The talk also surveys US public records, such as business registries, licensing boards and federal court filings, noting which are paid or restricted.

The closing part covers legal limits, including the Fair Credit Reporting Act, stricter California rules, anti-discrimination concerns and GDPR data minimization, and suggests separating data collection from hiring decisions. Practical checks include reverse image searches, verifying credentials at source, confirming shipping addresses and checking archived team pages. The speakers end by urging attendees to audit their own exposure through private profiles, registry opt-outs, aliases and stripped EXIF data.