Is your next hire who they say they are?
Stolen identities, fake referees and deepfake interviews are now real hiring risks. With the candidate’s consent, we verify their identity documents, CV claims and referees, and flag fake-applicant red flags before you hand over access to your systems.
candidate profiles worldwide will be fake by 2028, Gartner predicts. 6% of 3,000 candidates surveyed admitted interview fraud.
Source: Gartner, 31 July 2025US companies, including Fortune 500 firms, hired North Korean IT workers in one scheme using 68 stolen identities, generating over US$17M.
Source: US Department of JusticeUS employers hit by another remote IT worker scheme charged in October 2026, using stolen or fabricated ID documents and “laptop farms”.
Source: DOJ, N.D. Ohio, 13 Oct 2026The FBI warned of deepfake video, voice spoofing and stolen personal data used to interview for remote IT roles with access to sensitive data.
Source: FBI IC3 PSAWhat we check
- Identity document authenticity review and guidance for a live selfie / liveness match on a video call you run (we don’t store biometrics)
- Employment history checks: we contact past employers through independently found company contact details, not numbers the candidate supplies
- Education claims verified directly with the institution or its official verification service
- Referee verification: is the referee real, at the company they claim, reachable via the company switchboard? We flag fake referees (free webmail, VoIP-only numbers, no trace at the company)
- Public online footprint review for impersonation and fake-applicant red flags (recycled photos, brand-new profiles, CV text copied from others, mismatched locations)
- Deepfake interview red-flags checklist for your interviewers
- A written factual report. You make the hiring decision.
What we don’t do
- No criminal record checks: we refer you to an ACIC-accredited body (AU), DBS umbrella body / Disclosure Scotland / AccessNI (UK), or the NZ Ministry of Justice (candidate applies)
- No credit checks or drug tests: use a licensed provider
- No checks without the candidate’s written consent
- No social media “character” profiling or anything about protected characteristics (age, religion, health, etc.)
- No verification of US candidates (see below)
- We don’t decide whether you hire anyone
Deepfake interview red flags
- Lip movement out of sync with audio; coughs or sneezes that don’t match the video (FBI IC3)
- Refuses to turn the camera on, or the camera “breaks” at key moments
- Can’t do simple live actions: turn their head side-on, pass a hand across their face, hold ID next to their face
- Long pauses as if reading answers, or a different voice on a follow-up call
- Asks for the work laptop to be shipped to a different address than on their ID
- Wants pay to a third party, crypto, or a payroll account in someone else’s name
Candidate consent required
We only check candidates who have given written consent. Copy this template, adapt it with your adviser, and have the candidate sign it. It’s general information, not legal advice.
CANDIDATE CONSENT TO PRE-EMPLOYMENT VERIFICATION
I, [candidate full name], have applied for the role of [role] with [company] ("the Employer").
I consent to the Employer and its service provider ImposterWatch (operated by Cloud Investments FZE, United Arab Emirates) collecting and using my personal information to verify:
- my identity document(s) and that I am the person applying;
- the employment history, qualifications and education I have stated;
- the referees I have provided, and contacting them and my past employers/institutions;
- publicly available online information relevant to whether my application is genuine.
I understand that:
- this is not a criminal record, credit or drug check;
- my information will be used only for this verification, kept securely, shared only with the Employer, and deleted within 90 days of the report unless the law requires otherwise;
- my information may be processed outside my country (including in the UAE);
- I can ask to see and correct information held about me, and I can withdraw consent at any time by writing to the Employer (this does not affect checks already done).
Signed: ____________________ Date: ____________
Email: ____________________Hiring in the US?
We don’t verify US candidates, because doing so would make us a consumer reporting agency under the Fair Credit Reporting Act (FTC). Use an FCRA-compliant screening company and follow the FTC’s employer guidance (stand-alone disclosure, written authorization, pre-adverse and adverse action notices) and any state or city fair-chance rules. The consent template and red-flag checklists on this page are free to use.
US$79 per candidate
One-off payment. Available for hires in Australia, New Zealand, the UK and the UAE.
Book an Employee CheckQuestions
Why do you need the candidate’s consent?
Privacy laws in every market we serve (Australia’s APPs, NZ Privacy Act 2020, UK GDPR, UAE PDPL) require candidates to be told what is collected and why, and our checks involve contacting third parties about them. We only proceed with documented written consent.
Why don’t you check US candidates?
Under the US Fair Credit Reporting Act, a business that assembles background information for an employer’s hiring decision is a consumer reporting agency, with strict obligations (FTC). We are not a CRA, so for US hires we provide our free toolkit (consent template, ID/liveness and deepfake-interview checklists, referee checklist) and recommend an FCRA-compliant screening company. Your FCRA disclosure, authorization and adverse-action steps then apply through that company.
How long does it take?
We aim for 3 to 5 business days after we receive consent and documents. It depends on how quickly employers, institutions and referees respond; we’ll tell you if anything is delayed.
What does it cost?
US$79 per candidate, one-off, through Stripe checkout.
Who runs ImposterWatch?
Cloud Investments FZE, United Arab Emirates.