Can AI help someone pass a job interview under a fake identity?
YesYes. Fraudsters, most prominently North Korean IT workers, have used AI to doctor ID photos, pass technical interviews and keep jobs they could not do alone.
First shown: Jul 23, 2024. Security firm KnowBe4 disclosed it had hired a North Korean operative who used a stolen US identity and an AI-enhanced stock photo and passed four video interviews. (CyberScoop)
What it means
Remote hiring rests on documents, video interviews and skills tests. AI can help fake all three: altering the photo on a stolen ID, polishing a resume, answering technical questions and, once hired, doing the actual work.
In July 2024 KnowBe4 said a remote engineer it had hired was a North Korean persona using a stolen identity and an AI-enhanced stock photo; the person passed background checks and four video interviews and was caught only when malware appeared on the company laptop. Microsoft reported in June 2025 that North Korean workers use tools such as Faceswap to put their pictures onto stolen documents and have tried voice-changing software. Anthropic reported in August 2025 that operatives who could not write basic code used Claude to pass coding assessments and do the job.
AI is an accelerant, not the whole scheme. These operations also rely on stolen identities, laptop farms and human handlers, and the scheme predates chatbots. How often AI-assisted fakes get through is not measured; Gartner predicts that by 2028 one in four candidate profiles worldwide will be fake.
The evidence ladder
Every capability on this site is graded on the same five steps, from a single demonstration to real-world consequences.
| Step | Status | When | Evidence |
|---|---|---|---|
| Demonstrated shown at least once | yes | Jul 23, 2024 | KnowBe4 hired a North Korean persona who used a stolen US identity and an AI-enhanced photo and passed four video interviews and background checks. (CyberScoop) |
| Reproduced independently repeated | yes | Aug 27, 2025 | Anthropic found North Korean operatives using Claude to complete coding assessments and deliver work at technology companies, after Microsoft's June 2025 report on AI-altered ID photos. (Anthropic) |
| Accessible available to ordinary people, or criminals | yes | Jun 30, 2025 | The tools involved are ordinary: Microsoft names Faceswap and voice-changing software alongside general chatbots. (Microsoft Threat Intelligence) |
| Reliable works most of the time for a defined task | unknown | No success rate has been published; Gartner predicts that by 2028 one in four candidate profiles worldwide will be fake. (Gartner) | |
| Consequences real-world use or harm documented | yes | Jun 30, 2025 | Wages from the scheme fund North Korea in breach of sanctions; Microsoft suspended 3,000 known Outlook/Hotmail accounts created by North Korean IT workers. (Microsoft Threat Intelligence) |
From the record
- KnowBe4 found its new remote engineer was a North Korean operative with an AI-enhanced photo after malware appeared on his work laptop; it says no data was lost. (CyberScoop)
- Microsoft and Anthropic documented North Korean IT workers using AI to fake ID photos, pass interviews and do the work at Western firms. The case file → (Microsoft)
What it means for you
A video interview and a clean background check no longer prove a remote hire is who they say. The identities used in these schemes are often stolen from real people.
What to do
- Verify identity through a trusted stepFor remote roles with system access, check ID documents through a trusted service and consider an in-person or notarised step.
- Check where equipment shipsFraudulent hires often ask for laptops to go to an address that does not match their stated home.
- Start new hires with limited accessRestrict access for new remote staff until identity and work patterns are confirmed.
- Freeze your creditIf your personal data has leaked, a credit freeze makes it harder for someone to use your identity.
Questions people ask
Has a company actually hired someone using AI to fake their identity?
Yes. KnowBe4 disclosed in July 2024 that it hired a North Korean operative who used a stolen identity and an AI-enhanced photo.
Can AI do the job once someone is hired?
Partly. Anthropic reported in August 2025 that operatives who could not write basic code used Claude to deliver technical work.
Are deepfake faces used live in job interviews?
Microsoft said in June 2025 it had not observed combined AI voice and video used first hand by North Korean IT workers, but warned it could happen.
Related
Sources
- CyberScoop on KnowBe4's fake IT worker (July 2024)
- Microsoft on North Korean remote IT workers (June 2025)
- Anthropic threat report (Aug 2025)
- Gartner press release (July 2025)
Spot an error or something out of date? Tell us; corrections are made and logged. Written with AI assistance from public sources; every fact checked and approved by Colin Balfe. General information, not legal, medical or financial advice.