We talked to some recruiters recently and they essentially said atleast 1 step of the hiring process must be in person unless a valid reason can be made. i.e. single mother taking care of child going through a divorce backed up by a court record.
One fun thing to do is stress test their GPU / CPU out during part of a coding exam. (Only do this for 99% confirmed cases) This can slow the deepfake software down so much that it starts looking messed up and obvious. Securing employee onboarding with KYE IAM is also critical. Most of these people don't put much effort on the 360 review of an applicant and verifications beyond video calls spot them early on. There are countless solutions to the problem so you need to be creative. These applicants think they are next level fakes, but a lot can be spotted a mile away.