Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Employers can reduce fraudulent remote IT hiring by verifying a worker’s identity at multiple stages, confirming credentials directly with their original sources, controlling equipment and system access, and checking for suspicious changes throughout employment. A U.S. shipping address or a successful video interview alone does not prove that the person hired is the person who will do the work.
What fraudulent remote IT hiring can involve
The FBI’s July 23, 2025 advisory describes schemes in which facilitators help people appear to be eligible remote workers. They may provide U.S. internet connections and company laptops, enable remote desktop access, reship laptops overseas, set up financial or job-site accounts, attend interviews, or create front businesses. Some U.S.-based facilitators receive a share of the proceeds. That makes staffing, device delivery, and account setup part of the hiring threat model—not merely administrative details.
In October 2023, the FBI, IC3, and Republic of Korea agencies also warned about indicators such as reluctance to appear on camera or meet in person, inconsistencies in appearance, time, or location, apparent cheating during tests, and online profiles that do not match a résumé. Address and payment changes can warrant scrutiny, too. These are reasons to verify further, not proof of fraud or grounds for assumptions based on nationality.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →This employer-focused threat is different from consumer-facing work-from-home scams. In the latter, a supposed employer may ask an individual to pay cryptocurrency to unlock a job; the FBI’s June 2024 alert addresses that separate type of scam.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Build verification into every stage of hiring
Before interviews: establish consistent checks
- Define identity and credential checks for remote IT roles, then apply them consistently to employees, contractors, and candidates referred by staffing firms.
- Verify employment history and education with the named employer or school directly. Do not rely only on documents or contact details supplied by an intermediary.
- Set expectations for live video or in-person identity checks and create a documented process for resolving discrepancies.
- For staffing firms and outsourced IT work, ask for written screening procedures and retain the ability to verify the named worker directly. Supplier screening is not a substitute for checking the individual who will receive access.
During interviews and onboarding: confirm the person
- Inspect identity documents and compare names, photographs, contact details, and claimed location for consistency. The FBI recommends checking the identity during interviews, onboarding, and employment—not just at one point.
- When possible, meet in person. For virtual interviews, require video, keep the background unobscured, and ask reasonable questions about location. Apply local employment and privacy requirements to any location checks.
- Compare the person in the interview with the person who begins work and with the person seen in later meetings. A successful interview does not establish that the interviewee will perform the job.
- If policy and applicable law allow, capture a reference image for later comparison. The allied 2023 guidance recommends keeping records, including recordings; that recommendation does not settle jurisdiction-specific consent, access, or retention rules. Set and document those rules with employment counsel and privacy specialists before recording or retaining interview material.
Equipment and access: close the handoff gaps
- Send company devices only to a verified address. Investigate requests to use a different address and require additional documentation when appropriate; a domestic address by itself does not establish who will use the device.
- Complete background checks before granting system access. The FBI’s 2025 advisory states: “Do not grant access to any systems until the background check is completed.”
- After checks are complete, provide only the permissions and data needed for the role. Allied guidance also recommends limiting administrative privileges and restricting unauthorized remote-access tools.
During employment: verify changes and watch for patterns
- Confirm changes to bank accounts, payment methods, addresses, and contact details through a separate, previously verified channel.
- Investigate shared banking information, unusual virtual-currency payment requests, repeated address changes, or identity details that do not remain consistent.
- Monitor for anomalous access and unauthorized remote-control software. Train HR, hiring managers, IT, and security staff on the relevant indicators and a clear escalation path; ask staffing providers to train their teams as well.
- If suspicious activity emerges, preserve relevant records and follow the FBI advisory’s direction to contact an FBI field office or IC3.
How to assess warning signs without treating them as proof
Evaluate indicators in context and look for inconsistencies across independent checks. A changed address may have a legitimate explanation; a profile mismatch may reflect an outdated page. The practical response is to pause the relevant step, verify the claim through a trusted channel, document the outcome, and escalate unresolved discrepancies under a consistent policy. No single interview technique or screening measure is established as a way to detect every impersonation.
The FBI and allied agencies recommend a proportionate, documented process. Review it with employment counsel and privacy specialists for the jurisdictions where candidates and workers are located, particularly for identity-document handling, interview recordings, background checks, and retention of personal data.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What the public cases show—and what they do not
U.S. Department of Justice case announcements illustrate that the harm can include compromised identities, company losses, and remediation work. These figures are allegations or case-specific descriptions, not a representative estimate of how often employers are affected:
| Case figure | What DOJ reported | How to interpret it |
|---|---|---|
| More than 300 companies | In its May 16, 2024 announcement, DOJ said court documents described schemes that defrauded over 300 U.S. companies. | A figure tied to the cases described in that announcement, not an estimate of all affected employers. |
| More than 60 U.S. persons’ identities | In the same May 16, 2024 announcement, DOJ said identities of more than 60 U.S. persons were compromised in the Chapman-related cell. | Specific to that cell; it does not establish the total number of identities involved in all schemes. |
| At least $6.8 million | In the May 16, 2024 announcement, DOJ said the scheme allegedly generated at least this amount for overseas IT workers. | An allegation about that scheme, not a typical or average employer loss. |
| More than $943,069 in salary payments and more than $1 million in remediation costs | In a release updated May 6, 2026, DOJ attributed these amounts to court documents in a separate case involving more than 64 companies. | Case-specific amounts; they should not be treated as a general loss estimate. |
The May 16, 2024 DOJ release quoted Principal Deputy Assistant Attorney General Nicole M. Argentieri, head of the Criminal Division, saying: “The charges in this case should be a wakeup call for American companies and government agencies that employ remote IT workers.” The statement accompanied charges; it is not a finding about the prevalence of the conduct. The reviewed official sources do not establish a representative workforce-wide prevalence rate.
Quick Recap
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Official guidance and related alerts
- FBI: North Korean IT Worker Threats to U.S. Businesses (July 23, 2025)
- FBI/IC3 and Republic of Korea agencies: Additional Guidance on the Democratic People’s Republic of Korea Information Technology Workers (October 18, 2023)
- U.S. Department of Justice: Charges and Seizures Brought in Fraud Scheme (May 16, 2024)
- U.S. Department of Justice: Two U.S. Nationals Sentenced for Facilitating Fraudulent Remote IT Worker Schemes (updated May 6, 2026)
- FBI/IC3: Scammers Defraud Individuals via Work-From-Home Scams (June 4, 2024)
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
