Public reference library
Candidate Fraud Resource Archive

Government guidance, enforcement actions, investigative reporting, and practitioner research on candidate fraud and fraudulent remote IT worker operations—organized in one place.

All resources
44 resources
Fraud Prevention Community
GetReal Security
GetReal Security
June 24, 2026
Adversarial Thinking and Threat Research in a Deepfake World

GetReal Security explains how threat-led testing and adversarial research help organizations assess deepfake and identity-manipulation risk across real workflows.

GetReal SecurityRead
Government & Law Enforcement
U.S. Department of Justice
U.S. Department of Justice
May 6, 2026
Two More U.S. Laptop-Farm Operators Sentenced

The Justice Department announces its seventh and eighth U.S. facilitator sentences in five months, describing remote-access setups that made workers in China appear domestic.

U.S. Department of JusticeRead
Press & Investigations
Fortune
Fortune
April 25, 2026
Americans Are Helping North Korean Operatives Take Remote Jobs

Fortune examines the domestic facilitators, identity theft, laptop farms, and financial incentives that keep North Korea's employment-fraud operation running.

FortuneRead
Government & Law Enforcement
U.S. Department of Justice
U.S. Department of Justice
April 15, 2026
Laptop-Farm Facilitators Sentenced in $5 Million Scheme

Two U.S. nationals receive lengthy prison sentences for helping North Korean IT workers use more than 80 stolen identities to obtain jobs at over 100 companies.

U.S. Department of JusticeRead
Government & Law Enforcement
U.S. Department of the Treasury
U.S. Department of the Treasury
March 12, 2026
Treasury Sanctions Facilitators of DPRK IT-Worker Fraud

OFAC sanctions six individuals and two entities accused of helping North Korean operatives use stolen identities, fabricated personas, and fraudulent documents to target businesses.

U.S. Department of the TreasuryRead
Press & Investigations
CBS News
CBS News
March 12, 2026
U.S. Sanctions a Network Supporting North Korean Remote Workers

CBS News reports on sanctions against people and companies accused of helping North Korean operatives obtain remote work and route earnings to the regime.

CBS NewsRead
Press & Investigations
The Guardian
The Guardian
March 6, 2026
North Korean Agents Use AI to Pursue Western Jobs

The Guardian reports on Microsoft's warning that operatives use face-swapping, fabricated personas, and AI-enhanced application materials to conceal their identities.

The GuardianRead
Fraud Prevention Community
Huntress
Huntress
February 20, 2026
AI-Enhanced Candidate Fraud: What Defenders Should Know

Huntress examines the use of AI-generated resumes, manipulated identities, interview assistance, and other techniques that make fraudulent applicants harder to identify.

HuntressRead
Press & Investigations
Help Net Security
Help Net Security
February 20, 2026
Identity Marketplace Operator Sentenced for North Korean IT-Worker Scheme

Help Net Security summarizes the sentencing of Oleksandr Didenko, whose services supplied stolen identities and remote computers used by North Korean IT workers.

Help Net SecurityRead
Fraud Prevention Community
GitLab
GitLab Threat Intelligence
February 19, 2026
GitLab Threat Intelligence Reveals North Korean Tradecraft

GitLab's threat-intelligence team describes observed personas, facilitator networks, identity-manufacturing workflows, and operational links across North Korean IT-worker teams.

GitLab Threat IntelligenceRead
Government & Law Enforcement
U.S. Attorney's Office for the District of Columbia
U.S. Attorney's Office · DC
February 19, 2026
Ukrainian National Sentenced in Laptop-Farm Identity Scheme

Oleksandr Didenko received a 60-month sentence for a scheme that stole U.S. identities and sold them to North Korean workers who fraudulently gained employment at 40 companies.

U.S. Attorney's Office for the District of ColumbiaRead
Press & Investigations
The Wall Street Journal
The Wall Street Journal
February 17, 2026
A Defector Explains the Remote-Work Scam Funding North Korea

The Wall Street Journal recounts a former North Korean IT worker's experience, including quotas, overseas dormitories, borrowed identities, and the pressure to earn money for the regime.

The Wall Street JournalRead