On April 15, the U.S. Department of Justice announced the sentencing of two U.S. nationals in U.S. v. Wang in the U.S. District Court for the District of Massachusetts for operating so-called laptop farms that enabled North Korean operatives to obtain remote information technology jobs at more than 100 U.S. companies using stolen American identities.[1]
The scheme, which shuffled at least 80 stolen American identities through fraudulent employment at these companies over several years, generated over $5 million in illicit revenue and exposed the employing companies to cybersecurity breaches, export control violations and reputational harm.
While the facts are striking, the broader lesson for U.S. employers is more consequential: Identity fraud in hiring, especially in remote environments, is no longer hypothetical — it is an active and evolving threat.
This article examines why virtual hiring is particularly vulnerable to fraudulent activity by wrongdoers who are posing as prospective employees, discusses common warning signs that employers miss and offers practical steps to mitigate risk.
How Remote Work Eliminates Traditional Verification Controls
Remote hiring removes in-person touchpoints that historically served as informal verification mechanisms, such as physical presence and in-office onboarding. Without these in-person hallmarks, fraudsters are able to exploit:
In the DOJ’s case against the U.S. nationals, victim employers shipped corporate laptops to U.S.-based...
In the week since the body of teenager Nolan Wells was found off Mississippi’s Horn Island, investigators have revealed little about how he died, leaving social media speculation to fill the void. ...