Artificial intelligence is transforming recruitment. It accelerates sourcing, helps match candidates to roles and can automate routine screening tasks. But the same generative tools that speed up hiring are also enabling a new form of deception: AI-generated CV fraud.

Resumes, qualification certificates, employment histories, and even referee statements can now be plausibly fabricated with minimal effort. For HR teams, the growing sophistication of these falsified materials means traditional screening approaches are no longer sufficient on their own. Organisations must adapt by combining technology with common sense, robust verification and clear policies that manage the risk of synthetic credentials.

Generative AI makes it easy to produce polished documents and plausible narratives. A fabricated CV can list credible job titles, realistic project summaries, and tailored achievements that pass an initial human glance. Fake qualification certificates can replicate logos, signatures and formatting. AI can even craft convincing reference emails or LinkedIn recommendations that corroborate invented experience. The result is that the initial cues HR professionals relied on, professional language, consistent formatting and confident presentation, are less reliable as indicators of authenticity.

Hiring someone with falsified credentials is not merely an HR embarrassment. It can carry substantial business risk. Employees in technical, financial, compliance or safety-critical roles who lack the skills they claim expose the company to operational failures, regulatory breaches, financial loss and reputational damage. Even in non-critical roles, fraud undermines trust and morale, and replacing a mis-hire wastes time and money. At senior levels, the stakes are even higher: a single bad hire can lead to harmful strategic decisions, weak governance or corrupted procurement processes.

In response, many organisations have turned to automated screening platforms that themselves use AI to flag inconsistencies or anomalies. These tools are valuable for triage, but they cannot be the only line of defence. Automated systems can produce false positives and negatives; they can be gamed if fraudsters understand their heuristics, and they do not replace human judgment. HR teams need a layered approach: use technology to scale checks, but back every positive hire with independent, human-led verification.

HR should immediately treat résumés and certificates as starting points, not proofs. There is reason to be cautious about accepting certified copies of any documents because an unreliable commissioner of oaths has been known to certify a copy of a copy of a document.

Biographical details, ID numbers and identity documents must be verified against national records and in South Africa, this would be verification against Department of Home Affairs records. Identity validation reduces the risk of entirely fabricated personas.

Always verify critical claims through independent, reliable sources, using the original qualification documentation, and confirm professional registrations. A reliable background screening company would not only provide these services, but they would also contact previous employers using verifiable sources rather than relying solely on referee email addresses supplied on an application form.

Instead of accepting emailed references at face value, ensure that your background screening company calls referees, asks open-ended behavioural questions, and seeks specific examples of past performance. Where a candidate’s online footprint is thin relative to their claimed experience, this should prompt closer verification. A social media risk assessment would assist with all online verifications, including LinkedIn.

Practical assessments, technical tests, work samples, and structured interviews can provide objective evidence of competence, and skill assessments can also be conducted. For roles that require certifications or licences, official confirmation from the issuing authority must be verified. For creative or technical roles, demonstrable work that can be validated for authorship or ownership should also be requested.

Executive and high-risk appointments should be subject to enhanced due diligence: deep reference checks, forensic background investigations, financial and directorship checks, and, where appropriate and lawful, lifestyle and conflict of interest reviews. The asymmetry of risk at senior levels justifies the extra scrutiny.

Any form of screening programme must be implemented transparently and lawfully. Informed consent must be obtained from candidates for all background checks to ensure screening is proportionate to the role and complies with data protection laws such as POPIA in South Africa. Documented decisions and verification records must be securely retained for the required period so hiring decisions can be defended if questioned.

Technology should be used as an ally, not a crutch. As AI-driven detection tools are improving, document analysis can flag suspicious materials at scale, but it should be remembered that these tools merely prioritise manual checks.  Do not outsource judgment entirely to an algorithm. Combine automated signals with human investigation and independent verification to form a resilient process.

AI-generated CV fraud is a growing threat in a labour market that prizes speed as well as talent. HR teams that rely solely on presentation or automated heuristics will be vulnerable. The remedy is a balanced, layered approach that pairs technological triage with human verification, role-appropriate testing and lawful due diligence. Organisations that adapt their screening practices not only reduce fraud risk but also protect operational integrity and reputational capital.

At a time when generations of hiring decisions are being accelerated by technology, the most important tool remains careful, evidence-based judgment.