Tofu's Fraud API is enterprise-grade applicant identity verification for hiring platforms and security teams — detect fake candidates, deepfakes, and North Korean IT worker schemes with a single API call.

Trusted by recruiting and security teams at leading companies.





Fraud detection layer for recruiting platforms.
Stop bad actors from spamming your customers with fake applications. Give recruiters on your platform full visibility into candidate authenticity.
Seamless integration.
Designed to fit naturally into existing hiring workflows. Connect in minutes via API, ATS integration, or Chrome Extension.
Always-on protection.
Tofu's fraud engine plugs directly into your pipeline — running automatically at every stage so your team only sees verified candidates.
Purpose-built fraud detection infrastructure that scales with your platform — from identity verification to deepfake analysis.
Detect
North Korean IT worker schemes
Identify known patterns, device fingerprints, and IP inconsistencies specifically linked to nation-state fraud rings.
Fake resumes & deepfakes
Catch AI-generated identities, synthetic media, and script-based mass applications instantly.
Cross-reference intelligence
Validate applicant claims against millions of real-world data points specific to the employment sector.
Scale
99.9% API uptime
Reliable infrastructure that scales with your platform without breaking a sweat.
< 200ms low-latency
Real-time responses designed for instant user feedback and automated decision-making.
SOC 2 security first
SOC 2 Type II compliant* and built with data privacy at the core of every decision.
Analyse
Network effects
When a bad actor is flagged by one Tofu customer, they are instantly recognized across our entire network.
Real-time scoring
Receive a simple risk score and detailed fraud reasons payload in milliseconds to power automated decision-making.
Device & IP fingerprinting
Go beyond basic location checks with deep scrutiny of VPNs, proxies, and device emulation used by fraud farms.
Purpose-built fraud detection infrastructure that scales with your platform — from identity verification to deepfake analysis.
Book a demoDetect
North Korean IT worker schemes
Identify known patterns, device fingerprints, and IP inconsistencies specifically linked to nation-state fraud rings.
Fake resumes & deepfakes
Catch AI-generated identities, synthetic media, and script-based mass applications instantly.
Cross-reference intelligence
Validate applicant claims against millions of real-world data points specific to the employment sector.
0.0%
API Uptime
<0ms
Response Latency
SOC 2
Type II Compliant
0M+
Verifications Monthly
Scale
99.9% API uptime
Reliable infrastructure that scales with your platform without breaking a sweat.
< 200ms low-latency
Real-time responses designed for instant user feedback and automated decision-making.
SOC 2 security first
SOC 2 Type II compliant* and built with data privacy at the core of every decision.
Analyse
Network effects
When a bad actor is flagged by one Tofu customer, they are instantly recognized across our entire network.
Real-time scoring
Receive a simple risk score and detailed fraud reasons payload in milliseconds to power automated decision-making.
Device & IP fingerprinting
Go beyond basic location checks with deep scrutiny of VPNs, proxies, and device emulation used by fraud farms.
Insights, research, and updates on applicant fraud.

The checks that break a face-swap work, and asking a real candidate to do them is awkward. What to do in the moment, what to write down, and where detection software saves everyone the weirdness.

Background check companies are now selling fraud detection. They have the distribution. Here's why they don't start with more information on your applicants than anyone else.

What Lithic and Tailscale got out of fraud checks that show up where recruiters already work, and why the place a fraud flag lands decides whether anyone uses it.