The State of HR Identity Fraud Detection

Prior to day one, HR leaders claim ownership of identity risk in 53% of cases while IT and security teams claim 17%

Resolving a fraudulent-hire incident takes a minimum of one to three weeks

47% of enterprise identity-based attacks are discovered manually: 22% via coworker reports, 15% via internal audits, and 10% via external notifications

Nearly 90% of HR leaders report heightened concern over hiring fraud

There is an unmonitored 90-day window between hiring and onboarding

Fraudulent hires average nearly six days of unmonitored access before discovery

24% of organizations spend one to three months fully resolving a single fake hire

Approximately 60% of identity verification and MFA budgets are authorized reactively following a security breach

51% of IT teams rely on coworker reports to identify fraudulent hires

98% of HR executives have encountered candidate fraud

42% of organizations detect hiring fraud only after day one of employment

Organizations take an average of four to six days to uncover hiring fraud when it is detected after day one

98% of fake hires have active corporate credentials and internal network access by the time they are uncovered

Automated security tools catch 53% of enterprise identity-based attacks

Once credentials are created, Security and IAM claim 55% of identity risk while HR claims 15%

HR technology directors report 41% confidence in catching fraud compared with 53% confidence across all HR leaders

HR technology directors average eight days to uncover an impostor

68% of fraudulent hires are uncovered through human observation and intuition after bypassing initial screening