Announcing our $5M seed roundLearn more

Well-done Tofu

Thoughtfully prepared ideas and releases from and by our team.

What to do the moment you suspect a deepfake in an interview, by Joseph Mallia
Recruiting Identity Fraud

What to do the moment you suspect a deepfake in an interview

The checks that break a face-swap work, and asking a real candidate to do them is awkward. What to do in the moment, what to write down, and where detection software saves everyone the weirdness.

Being a great background check company doesn't make you a great fraud detection company, by Jason Zoltak
Recruiting Identity Fraud

Being a great background check company doesn't make you a great fraud detection company

Background check companies are now selling fraud detection. They have the distribution. Here's why they don't start with more information on your applicants than anyone else.

Why we put fraud flags inside your ATS, by Joseph Mallia
ATS and API fraud detection

Why we put fraud flags inside your ATS

What Lithic and Tailscale got out of fraud checks that show up where recruiters already work, and why the place a fraud flag lands decides whether anyone uses it.

Inside the daily life of a North Korean IT worker: the training pipeline, multiple identities, monthly quotas, laptop farms, and what it means for hiring.
Recruiting Identity Fraud

A Day in the Life of a North Korean IT Worker

Inside the daily life of a North Korean IT worker: the training pipeline, multiple identities, monthly quotas, laptop farms, and what it means for hiring.

When a bad hire becomes an insider threat
More from Tofu

When a bad hire becomes an insider threat

A North Korean IT worker becomes an insider threat the day they are hired. How the access escalates to code theft and extortion, and how to stop it before the o

Why one North Korean IT Worker is rarely just one
More from Tofu

Why one North Korean IT Worker is rarely just one

Find one North Korean IT worker and there are usually more. Here is how they get hired, and where to look for the rest.

The Collaborator Model: People Who Rent Out Their Names
More from Tofu

The Collaborator Model: People Who Rent Out Their Names

Some hiring fraud passes every background check because nothing in it is fake. Inside the collaborator model behind North Korean IT worker schemes.

Your Hiring Checks Verify Documents, Not People
More from Tofu

Your Hiring Checks Verify Documents, Not People

Every hiring check verifies paperwork, not people. When documents cost $30 on the dark web, that distinction is how 170,000 fake applications got through.

What Is Candidate Seat Swapping, and How Do You Detect It?
More from Tofu

What Is Candidate Seat Swapping, and How Do You Detect It?

Seat swapping fraud hides because each round looks normal on its own. The signal only appears when you compare rounds. Here's how to catch it.

Why Deepfake Detection for Hiring Needs Multiple Signals
Recruiting Identity Fraud

Why Deepfake Detection for Hiring Needs Multiple Signals

Deepfake candidates can slip past a single detection check. See why catching them in hiring takes multiple independent signals, with real scores from Tofu.

Your Hiring Funnel Has a Deepfake Problem
Applicant fraud in recruiting

Your Hiring Funnel Has a Deepfake Problem

Why deepfake and seat-swap detection became non-negotiable in hiring, what we're seeing in interviews, and how we built our own model for it.

The Hiring Fraud Supply Chain: From Stolen Identities to Laptop Farms

The Hiring Fraud Supply Chain: From Stolen Identities to Laptop Farms

Stolen identities, verification mules, deepfakes, laptop farms. Inside the seven-stage supply chain that turns a hiring fraud operation into a 183x return.

OFAC Hiring Compliance: How Deepfake Detection Stops Sanctions Fraud
More from Tofu

OFAC Hiring Compliance: How Deepfake Detection Stops Sanctions Fraud

OFAC hiring compliance with deepfake detection stops sanctions fraud before violations occur. Learn how to verify identities and prevent penalties.

Introducing Deepfake Detection & Interview Swapping
Applicant fraud in recruiting

Introducing Deepfake Detection & Interview Swapping

Real-time deepfake detection for interviews is here. Learn how Tofu identifies impersonation fraud, why organized teams are running deepfake interviews, and how

Deepfake Detection: Fraud in Remote Hiring
More from Tofu

Deepfake Detection: Fraud in Remote Hiring

How deepfake and proxy interviewers get through remote video interviews, the red flags recruiters miss, and the detection methods that catch them.

AI Resume Screening: How to Detect Fraud and Hire Faster
More from Tofu

AI Resume Screening: How to Detect Fraud and Hire Faster

How AI resume screening can flag fake applicants as well as rank real ones, what standard ATS filters miss, and where fraud checks fit in.

Scammers Are Stealing Recruiter Identities, and It Proves What We've Been Saying
Recruiting Identity Fraud

Scammers Are Stealing Recruiter Identities, and It's Connected to Candidate Fraud

Cloned recruiter profiles, deepfake candidates, and a hiring system built on unverified identity. Inside the two-sided fraud problem reshaping recruiting.

The True Cost of a Bad Hire: Fraud Detection Methods That Stop Security Incidents Before Day One
More from Tofu

The True Cost of a Bad Hire: Fraud Detection Methods That Stop Security Incidents Before Day One

What a bad hire costs when the person is a fraud, from wasted recruiting time to insider risk, and the detection steps that stop it before day one.

How to Review Resumes for Fraud: Detection and Prevention Guide
More from Tofu

How to Review Resumes for Fraud: Detection and Prevention Guide

How to spot a fake resume: red flags in content and formatting, metadata checks, cross-referencing LinkedIn, and verifying work history.

Fraud Score: A Complete Guide for Businesses
More from Tofu

Fraud Score: A Complete Guide for Businesses

Learn how your fraud score works - IP detection, device fingerprinting, recruiting fraud prevention, and risk scoring explained.

First-Party Fraud Explained: A Detection and Prevention Guide
More from Tofu

First-Party Fraud Explained: A Detection and Prevention Guide

How to detect and prevent first-party fraud, where a real identity is used with deceptive intent, in hiring and in finance.

OFAC Sanctions liability

OFAC Sanctions Liability: The Cost of a Bad Hire

OFAC operates on strict liability. Pay a sanctioned worker without knowing it, and every paycheck is a separate violation. One hire can mean $4.9M+.

How Do Deepfakes Work? Understanding the Technology and Preventing Fraud
More from Tofu

How Do Deepfakes Work? Understanding the Technology and Preventing Fraud

How deepfakes are made with GANs and other neural networks, and the detection methods that catch them in hiring and business fraud.

How Fraudulent Applicants Are Targeting Your Security Team
More from Tofu

How Fraudulent Applicants Are Targeting Your Security Team

How fraudulent applicants use deepfakes, synthetic identities, and state-sponsored IT worker schemes to get hired onto security teams.

AI Recruiting has a fraud problem
More from Tofu

AI Recruiting Has a Fraud Problem

Deepfakes, assessment cheating, and state-sponsored operatives are getting past manual hiring checks. How AI recruiting fraud works and how to catch it.

Hiring fraud costs companies far more than a bad hire — it drains recruiter time, erodes hiring manager trust, slows pipelines, and pushes away real talent.
Recruiting Identity Fraud

What Hiring Fraud Actually Does To Your Company

Hiring fraud costs companies far more than a bad hire — it drains recruiter time, erodes hiring manager trust, slows pipelines, and pushes away real talent.

The Complete Guide to Applicant Fraud Detection

The Complete Guide to Applicant Fraud Detection

Applicant fraud has doubled in a year. Learn how fake resumes and deepfake interviews slip through, and why fraud detection at the point of application matters.

IT Worker fraud has an identity problem
Recruiting Identity Fraud

IT Worker Fraud Has an Identity Problem

Fraudsters are stealing real professional identities to pass interviews. Our analysis of 67,000 IT worker fraud cases shows how it works and what to watch for.

Resume Fraud Detection Needs a Human Score
Applicant fraud in recruiting

Resume Fraud Detection Needs A Human Score

The best resume fraud detection tools analyze the digital trail of an applicant. Applicant fraud detection must go beyond email, phone and IP address analysis.

applicant fraud detection
ATS and API fraud detection

Tofu + Gem: Applicant Fraud Detection in Gem's Product Suite

Stop fake candidates with Tofu’s applicant fraud detection, now embedded in Gem. Prevent deepfakes and identity fraud at the top of your recruiting funnel

Why companies need a good applicant fraud detection strategy
Applicant fraud in recruiting

Why companies need a good applicant fraud detection strategy

New data from Tofu shows applicant fraud detection is now essential. Learn about the explosion in fraud, the "Impersonation Era," and how to evaluate a vendor.

State of Applicant Fraud Detection

A note on the state of applicant fraud

A co-authored blog post between Matt Hoffman, Partner at M13 and Jason Zoltak, CEO of Tofu, discussing applicant fraud in tech recruiting and hiring.

Applicant fraud: why now and how to stop it

Applicant fraud: why now and how to stop it

Last week I wrote about Tofu’s pivot, a change towards building a powerful Agentic-AI recruiting platform that equips companies with better data,