Let's assume they are a state actor, Here are some things that crossed my mind:
- Citizens from this region of the world are forced to do this and it amounts to slave labor. I have empathy for their situation. What is a responsible way to report things like this?
- I try to avoid communicating with law enforcement in general, is the FBI or other US agency the only avenue to warn others?
- Without hiring this person, what exposure should we worry about? What precautions are worth taking in the future?
Thanks for your insights :)
Do the behaviors exhibited also align with other somewhat common candidate behavior like not being competent in what they say, being nervous, etc.?
This is a legit problem. They pose as American citizens or permanent residents. Sometimes even using a VPN into the US. HR folks would not catch on.
I’ve actually interviewed two of these people over the years. They somehow got through the initial screenings. It’s a bizarre experience. Most of the time there is a significant delay with silence between your question and their answer. It’s as if they’re being fed the perfect answer. Problem is they could never answer or pretended to not understand any follow-up questions.
You could always hear others in the background. One time I was given an answer that I had heard someone else in the room give just 2 minutes before.
The question that really solidified my hunch was about their location. The applicants would always claim to be from a very small town somewhere in the US. In my two experiences I happened to know a lot about those towns. The first said they “really enjoyed the mountains” when I asked what brought them to a Houston suburb. When I asked the other applicant if they had any damage from the hurricane that went through St. Augustine, FL, they replied “What hurricane?”
Now, neither of these people would have been hired even if they had stellar interviews as we do make use of background checks and verification services. This scheme really only works for third-party dev shops or desperate small companies.
I’m glad this problem is getting more attention.
They will be kinda rude and very short with you on the phone, but nonetheless, they will gather information from you, which will go into their systems and get paid attention to at some level. They seem especially interested in CN/NK/RU/IR actors, obviously.
If they were Israeli, I'd keep my mouth shut because I don't want to get in the middle of that, nor get on any radars.
Thats why I phrased the question as assuming they are a foreign agent because the due dilligence one must do is probably particular to the job and company.
The evidence however seems like it will always be more or less circumstantial unless you have the time and resources to devote to a thorough background check.
There have been similar stories recently: https://www.techtarget.com/searchSecurity/feature/How-to-spo...
https://www.wbur.org/onpoint/2025/06/12/cybersecurity-indust...
https://cloud.google.com/transform/ultimate-insider-threat-n...
https://ogletree.com/insights-resources/blog-posts/fbi-warns...
I think the npr segment was like a third party cybersecurity podcast they aired to buffer time in daytime(?)