HYPR research highlights widespread hiring fraud and detection gaps

New research from HYPR reveals that hiring fraud is a near-universal problem for HR leaders, with 98% reporting encounters with fraudulent candidates, as detailed in Channel Insider. Despite this prevalence, a significant security concern lies in how these fraudulent hires are detected, with 68% ultimately being uncovered through human observation and intuition after bypassing initial automated screening processes.

Threat actors are increasingly using generative AI, voice cloning, and synthetic profiles to bypass pre-hire screening and infiltrate corporate payrolls. When fraudulent candidates do slip through, they often go undetected for extended periods, with less than 3% flagged on the same day. Nearly a third take one to three days to surface, 45% require four to six days, and 20% remain undetected for up to three weeks.

A critical gap identified is the unmonitored period between hiring and onboarding, exacerbated by fragmented zero-trust controls. This allows fraudulent hires an average of nearly six days of unmonitored access before discovery, with resolution taking one to three weeks, and in some cases, up to three months. Only 53% of identity-based attacks are caught by third-party security tools, and HR technology directors report below-average confidence in fraud detection.

This presents an opportunity for channel partners to address identity security gaps beyond traditional MFA and access management, by helping customers integrate identity verification, onboarding, and ongoing monitoring into a continuous security model.

Source: Channel Insider