Identity Fraud in Indian Hiring: How Fake Candidates Are Fooling Employers in 2026
India sees over 1 in 5 background checks return discrepancies. Here's how identity fraud happens, which industries are most at risk, and the specific verification steps that catch fraudulent candidates before they're onboarded.
PN
Priya Nair
Head of Product, Truvixx
12 June 20268 min read
India's hiring market is growing at a pace that background verification infrastructure has not kept up with. An estimated 20–22% of background checks conducted in India return at least one significant discrepancy — a figure that has risen every year since 2020. These aren't just formatting errors or dates that don't match. A meaningful portion represent deliberate identity fraud: candidates submitting falsified documents, synthetic identities, or borrowing credentials from real individuals.
For most employers, the discovery happens too late — after onboarding, after access is granted, sometimes after significant damage has been done. This guide breaks down exactly how identity fraud happens in the Indian hiring context, which industries are being targeted most aggressively, and the layered verification approach that stops fraudulent candidates before they start.
The Four Most Common Identity Fraud Patterns in Indian Hiring
1Aadhaar number duplication. Candidates obtain the Aadhaar numbers of relatives, neighbours, or purchased identity data and present them as their own. Without biometric or OTP-based verification, a printed Aadhaar card is trivially forgeable. The photo can be swapped; the 12-digit number can be paired with any name and photo in a digitally edited document.
2Employment history inflation. Candidates fabricate tenures at companies that no longer exist, at companies with weak HR verification processes, or at companies where a colluding 'reference' confirms false employment. The most sophisticated versions use registered shell companies with actual GST numbers and PAN cards to create convincingly verifiable fake employers.
3Degree certificate forgery. Counterfeit degree certificates — particularly from regional universities and deemed universities — are available for as little as ₹500–₹2,000 in several major Indian cities. These are printed with holograms, embossed seals, and authentic-looking registration numbers. Without direct university or DigiLocker verification, many employers cannot detect them.
4Proxy interview fraud. A more sophisticated variant where one individual clears the interview process and another reports to work — or where the same individual presents different identity documents at interview versus onboarding. This pattern has become more common in technical hiring where remote interviews reduced in-person verification checkpoints.
The ghost employee problem
A specific fraud variant that affects payroll: candidates who clear background checks, get onboarded, but are never physically present — either because they are working multiple full-time jobs simultaneously or because the 'employee' is a synthetic identity used to siphon payroll. This is increasingly common in remote-first hiring.
Which Industries Are Most at Risk?
Identity fraud in hiring is not evenly distributed. Certain industries face dramatically higher rates of fraudulent applications, driven by the value of access those roles provide.
BFSI (Banking, Financial Services, Insurance): Roles with access to customer accounts, transaction systems, or underwriting data are prime targets. Verified fraud rates in BFSI BGV runs frequently exceed 30% for front-line roles.
Logistics and last-mile delivery: High-volume hiring under time pressure creates gaps. A driver with a falsified licence and fabricated address verification can be onboarded within hours in uncontrolled processes.
IT and tech outsourcing: Proxy interview fraud is highest here. Candidates use intermediaries to clear technical rounds, then either report personally or use the access for data theft.
Healthcare: Falsified nursing credentials and medical degrees represent a public safety threat beyond commercial risk. Verification against NMC/NCI registers is non-negotiable but often skipped.
Staffing agencies: The volume-first model incentivises speed over verification rigour, and the distributed nature of placement makes it harder to catch identity discrepancies before assignment.
Why Aadhaar Alone Is Not Sufficient Identity Verification
Aadhaar is India's most ubiquitous identity document and a natural starting point for identity verification. But accepting a printed Aadhaar card as proof of identity — even with a selfie match done manually — is insufficient for any role with meaningful access. Here's why:
Printed and digitally-edited Aadhaar cards are trivially available. The document's visual design is widely reproduced and the QR code can be regenerated with matching data.
Without OTP-based Aadhaar e-KYC (which requires the actual registered mobile number), or biometric match through a licensed AUA, there is no way to confirm that the person presenting the Aadhaar is its registered holder.
Aadhaar confirms identity — it does not confirm the candidate's criminal history, employment history, educational credentials, or address continuity. Identity verification is one layer, not the whole verification picture.
What Aadhaar OTP verification actually confirms
A successful Aadhaar OTP e-KYC confirms: (a) the 12-digit number exists in UIDAI's database, (b) the registered mobile number matches, and (c) the demographic data (name, DOB, address) on UIDAI's record matches what the candidate provided. It does NOT confirm the person's photo match unless biometric authentication is added.
The Verification Layers That Actually Stop Identity Fraud
Stopping identity fraud requires layered verification — no single check catches every pattern. The following sequence covers the main fraud vectors:
1Government ID verification with liveness check. Aadhaar OTP e-KYC plus a real-time liveness detection selfie match (not a static photo comparison). The selfie match should run against the UIDAI demographic photograph, not the submitted document.
2PAN verification. Confirm the PAN number is linked to the correct name and date of birth via the Income Tax database. A mismatch between Aadhaar demographics and PAN records is a high-confidence fraud signal.
3Employment verification via HR and payroll records. Don't rely on manager references. Verify with the HR department directly, request payroll confirmation, and cross-check dates against EPF/ESIC contribution records. EPF records are objective and cannot be fabricated.
4Education verification via DigiLocker or direct institution API. DigiLocker-verified documents carry a digital signature from the issuing institution. Direct API integrations with universities (available for many central universities and IITs/NITs) are the gold standard.
5Address verification with physical visit. For high-trust roles, a physical address visit by a local field agent — not just document collection — confirms that the candidate actually lives where they claim. Fraudulent candidates frequently use addresses of vacant properties or cooperative relatives.
6Criminal records check via court databases. Court record checks covering the candidate's states of residence and employment, cross-referenced against police verification databases where available.
The Cost of Getting It Wrong
The direct cost of a bad hire from identity fraud ranges from 3–5x the annual salary of the role, accounting for fraud losses, investigation costs, legal action, regulatory penalties, and reputational damage. For roles with customer data access, a single fraudulent hire can trigger data breach liability under the DPDP Act 2023, with penalties up to ₹250 crore for significant violations.
More critically: the indirect cost of a culture in which fraud is possible — and known to be possible — is near-impossible to quantify. It erodes trust at the customer level, the investor level, and within the organisation itself.
The highest-leverage change most employers can make today
If you can only improve one thing: replace manual Aadhaar document review with API-based Aadhaar OTP e-KYC plus a liveness selfie match. This single step eliminates the most common identity fraud vector — fake printed ID cards — with minimal friction for genuine candidates.
Building a Fraud-Resistant Hiring Process
The companies with the lowest fraud rates share a common characteristic: verification is treated as a non-negotiable process step, not an optional HR task that happens to exist. Specifically, this means:
Offer letters are conditional on completed verification — not issued before checks are initiated.
Access to systems, data, or physical premises is not granted until identity verification is confirmed.
The same verification standard applies to lateral hires, contractors, and third-party staff — not just full-time employees.
Discrepancy responses have a documented escalation path rather than being decided ad-hoc by the hiring manager.
Verification results are retained per the DPDP Act schedule and not deleted until the defined retention period ends.
Identity fraud in hiring is not a new problem — but the sophistication of the techniques being used has increased significantly as document forgery has become cheaper and remote hiring has removed in-person checkpoints. The answer is not paranoia; it is a systematic, layered verification process that makes fraud economically unviable for the candidate while remaining fast and frictionless for the majority who are exactly who they say they are.