How do I spot an AI-generated candidate without slowing down every placement?

You do not screen every candidate the same way. Build a risk tier. High-risk roles (regulated industries, remote-only, direct client access) get live video verification and ID checks. Low-risk temp roles get lighter screening. The goal is to catch the fakes where the liability is highest, not to add friction to your entire pipeline.

Who is liable if my firm places a fake candidate with a client?

You are, in most cases. Your client hired you to vet talent. If a fabricated identity lands a badge, a laptop, and access to patient records or financial systems, that is your name on the placement. Check your contracts and your E&O coverage now, before it happens. Most staffing agreements put verification squarely on the agency.

Do I need to buy new software to fight this, or can I fix it with process?

Start with process. Live video verification, government ID matching, and a documented screening checklist stop most of the volume fraud today. Add tooling like deepfake detection or liveness checks when your placement volume in regulated industries justifies the spend. Do not buy a platform before you know your own risk tiers.

The Fake Candidate Playbook for Staffing Firms

GoodTime just named AI-fabricated candidates the top hiring threat of 2026, ahead of talent shortages. Gartner says 1 in 4 profiles will be fake by 2028. Here is the playbook to protect your placements and your liability.

AI-fabricated candidates are now the number one hiring threat of 2026. That is not my opinion. GoodTime's 2026 Hiring Insights Report ranked it above talent shortages, above budget, above everything else. Gartner projects that by 2028, one in four candidate profiles will be fake.

Read that again. One in four. If you place 200 people a year, that is 50 profiles built to fool you.

For most industries this is an annoyance. For staffing firms it is a liability problem with your name on it. You are the one telling a hospital, a bank, or a law firm that this person is real and qualified. When the person is neither, the fallout lands on you first.

Why staffing firms are the softest target

Fraudsters follow the path of least resistance. Staffing firms are built for speed. You move candidates fast because clients pay for speed. That same speed is the gap the fake candidate playbook is designed to exploit.

Here is what the fraud actually looks like in 2026:

Fabricated identities. A real resume stitched to a stolen or synthetic identity. The skills check out. The person does not exist.
Deepfake video interviews. A live face swap or voice clone that passes a Zoom screen. The candidate you approved is not the person who shows up to work.
Proxy interviews. One skilled person interviews. A different, cheaper person does the job. Common in remote tech and offshore placements.
AI-inflated resumes. Not fully fake, but padded with skills and history the candidate cannot back up. Harder to catch, easier to ignore.

The remote-first shift made all of this easier. Nobody shakes a hand anymore. The whole relationship runs through a screen, and screens lie.

The liability you are carrying right now

Pull your standard client contract. Read the section on candidate qualification and verification. In most staffing agreements, verification is your job. You warranted that the candidate is who they say they are.

Now picture the healthcare placement. A fabricated identity gets a badge and access to patient records. Or the finance placement with a synthetic identity touching client accounts. Or the legal temp who never passed the bar but the AI resume said otherwise.

When that unravels, your client does not care how sophisticated the fraud was. They care that you vouched for a fake. You lose the placement, the client relationship, and possibly the contract. In regulated industries you may face a compliance investigation on top of it.

This is the part firms miss. The cost is not one bad placement. It is the trust that took you years to build with that client, gone in a week.

The four-layer defense

You do not fix this with one tool or one policy. You build layers, so a fake that slips past one layer gets caught by the next. Here is the structure that works.

Layer 1: Risk-tier your roles

Not every placement carries the same exposure. Sort your roles into tiers this week.

High risk: Regulated industries, remote-only roles, positions with system or data access. These get full verification.
Medium risk: Onsite professional roles with limited access. Standard verification.
Low risk: Short-term onsite labor with supervision. Light verification.

This keeps you from drowning your whole pipeline in friction. You spend your verification budget where the liability actually lives.

Layer 2: Verify the human, not just the resume

Government ID matched against a live face is the single strongest control you have today. Ask candidates in high-risk tiers to hold their ID up on a live video call and match the face. Simple. Effective. Most fraud operations will not clear this step.

Add liveness checks for remote roles. These confirm you are talking to a live person, not a looped recording or a static image behind a filter.

Layer 3: Watch for the tells

Train your recruiters to spot the signs. AI fraud leaves fingerprints if you know where to look.

Audio that lags a half-second behind the lips on video.
A candidate who avoids turning their head or moving their hands.
Refusal to switch to a different platform on short notice.
Perfect resume answers that fall apart on a follow-up question the candidate did not prepare for.
Contact details that do not match anything verifiable online.

Ask one unscripted question mid-interview. A face-swap tool handles a rehearsed script. It struggles with a surprise.

Layer 4: Document everything

Write down what you checked and when. If a fake ever gets through, your documentation is the difference between a defensible process and a negligence claim. Keep the ID match records. Log the verification steps. Time-stamp it.

This also protects you with clients. When you can show a hospital exactly how you verified their new hire, you are no longer just a vendor. You are the firm that takes this seriously while your competitors wing it.

Turn the threat into your pitch

Every firm faces this. Most are doing nothing. That is your opening.

Your clients are reading the same reports you are. They are nervous. A firm that walks in with a documented verification process becomes the safe choice. You are not selling speed anymore. You are selling certainty, and certainty commands a premium.

I have watched firms lose deals on price and win them on trust. In a market where one in four profiles is fake, trust is the whole game.

Do this week

Pull your last 20 placements in regulated industries. For each one, answer a single question: could you prove today that the person you placed is who they claimed to be? Write down which ones you cannot verify. That list is your risk exposure, and it is the first thing to fix before the number becomes a lawsuit.

If that list scares you, it should. And it means you already know where to start.

The Fake Candidate Playbook: How to Harden Your Pipeline Against AI-Generated Fraud