AI Deepfake Job Candidate Scam on Zoom
During live Zoom interviews, a real-time deepfake filter swaps a different person's face and voice onto the candidate's video feed, letting someone other than the actual applicant pass the screening.
Part of: AI Deepfake Job Candidate Scam
Last reviewed: 5 July 2026
Video interview calls on Zoom are treated as a strong identity check by many hiring teams, which makes the platform a direct target for real-time face-swap software designed to fool exactly that assumption.
How this scam works on Zoom
The candidate joins the Zoom interview with a deepfake filter running through a virtual camera driver, projecting a different face and sometimes a cloned voice over their real appearance and speech. Interviewers see natural-looking movement and lip sync in most conditions, especially with a stable internet connection and controlled lighting on the fake side.
Interviewers sometimes notice subtle glitches during network hiccups, quick head turns, or when an object briefly passes in front of the camera, since these moments can break the real-time rendering and reveal a mismatch between the audio and the face, or a warped frame. Because Zoom recordings are sometimes kept for HR files, the deepfake evidence can later be reviewed and confirmed after the fact if the hire raises other red flags.
Common red flags
- Video occasionally glitches or warps for a split second around the mouth or jawline, especially during fast movement
- Audio and lip movement fall slightly out of sync intermittently, more than typical call lag would explain
- Candidate avoids simple requests like waving a hand in front of their face or turning profile during the call
- Consistently poor or unstable video quality is used as an excuse to avoid clearer footage
- Background looks flat or slightly mismatched to claimed location, with virtual-background artifacts around hair or edges
- Voice tone lacks natural variation or breathing pauses typical of live speech
How to protect yourself
- Ask candidates to perform simple live actions on camera, such as a hand wave in front of the face or a quick head turn, which can disrupt real-time deepfake rendering
- Request a brief unscripted, off-topic conversation to see if responses and mannerisms feel natural under pressure
- Cross-check the candidate's identity documents against the person on screen through a separate verification step
- Record interviews (with consent, per policy) so footage can be reviewed later if other issues arise
- Be cautious of candidates who resist switching cameras, angles, or lighting when asked
- Escalate to a secondary verification call or in-person meeting before finalizing an offer for remote, access-sensitive roles
How to report it
- Report the incident to your organization's internal security and HR teams immediately
- Report suspected fraud to your national cybercrime reporting center or the FBI's IC3 if a hire proceeded
- Notify Zoom's trust and safety team if the platform's own tools were exploited to enable the deception
- Alert other hiring managers within your organization to watch for the same profile reapplying
Frequently asked questions
Can I really tell a deepfake apart on a normal video call?
It's difficult under good conditions, but asking for quick, unscripted physical movements like a hand wave across the face can expose glitches in real-time rendering that a live face genuinely wouldn't produce.
Should every remote interview include a deepfake check?
For roles with access to sensitive systems or financial controls, an additional identity verification step is worth the extra time given the growing use of these tools.