Digital identity checks help you confirm that the person you’re hiring is genuinely the person behind the application. For global HR teams, that matters more as recruitment becomes increasingly remote and cross-border.
The real challenge is deciding where identity verification sits in the hiring process, how much assurance is appropriate, and whether the process works consistently across different markets.
I used to think identity was one of the more straightforward parts of pre-employment screening.
You ask for the appropriate documents, check them and move on.
Global recruitment has changed my view.
Today, a candidate can apply from one country, interview with a hiring manager in another and join a team spread across several more. They may never enter an office before their first day.
That makes one assumption increasingly risky: that because we have spoken to someone several times on video, we know who they are.
We don’t necessarily.
According to The Times, in June 2026, more than 700 suspected North Korean bots applied for remote-working roles at a large UK bank. The applicants reached initial virtual interviews before being identified as suspicious.
On the surface, they looked credible.
Alfie Whattam, CEO of Alfa AI, told The Times that many of the candidates had polished CVs, gave technically strong answers and presented convincing video interviews. Alfa’s system began finding connections between the applicants, including repeated language, shared device characteristics, manipulated video and discrepancies in location data.
The incident raises a question every business with remote workers should now be asking:
How certain are you that the person receiving access to your systems is actually the person you hired?
For HR leaders, identity deserves more attention than it often gets.
What is a digital identity check?
A digital identity check verifies an individual’s identity electronically, usually using official identity information and documents such as a passport or national identity card.
Depending on the check, that can include establishing a candidate’s name and date of birth, assessing the validity of their identity document and checking whether the person presenting it matches the document holder.
For me, the most useful way to think about identity verification is as the anchor for everything that comes afterwards.
If I am going to verify your employment history, qualifications or criminal record, I first want confidence that I know whose history I am checking.
Veremark’s identity checks can sit within a wider pre-employment screening process so that HR teams can establish identity alongside other relevant checks.
Where is the identity gap in remote recruitment?
One of the weaknesses I see in remote hiring is what I think of as the identity gap.
We can spend hours assessing someone’s competence while spending surprisingly little time establishing their identity.
A candidate might complete three video interviews, an assessment and a meeting with a senior leader. By that stage, everyone feels familiar with them.
Familiarity is useful in recruitment. It is not identity assurance.
That distinction matters even more as tools for manipulating images and video improve. ENISA’s work on remote identity proofing has identified impersonation and face-presentation attacks as risks that verification systems need to account for.
My advice to HR teams is to ask a very basic question: At what exact point in our recruitment process do we formally establish who this person is?
If nobody can answer that confidently, there is probably a gap in the process.
When should you verify a candidate’s identity?
I prefer to do it early in formal pre-employment screening.
Once the candidate has reached the appropriate stage and you have the necessary lawful basis for processing their information, establishing identity gives subsequent checks a firmer foundation.
Think about the order. You could spend days confirming someone’s employment history and qualifications, only to discover later that there is a discrepancy with the identity attached to the application.
Starting with identity reduces that risk. It also helps HR teams make clearer decisions about what screening comes next. Depending on the role, that might include employment history verification, education checks, criminal record screening or sanctions checks.
The level of screening should reflect the role and the access that person will have.
Someone handling financial approvals or sensitive customer data may justify a different level of assurance from someone with very limited system access.
That is one of the more important lessons in global screening: consistency does not have to mean giving every candidate exactly the same checks. It means applying a clear rationale.
Digital identity checks are not the same for every country
One mistake I have seen organisations make is designing a screening policy at headquarters and then expecting every country to follow exactly the same process.
The intent can be consistent. The mechanics often cannot.
Identity documents differ between jurisdictions. Data protection requirements vary. Immigration processes vary. The types of checks an employer can lawfully perform may also change from one market to another.
For global employers, the aim should be a common standard of assurance with local processes that respect the rules in each country.
Veremark supports screening in more than 180 countries, allowing employers to manage international background checks across multiple markets through a common screening process.
That can make administration easier, although HR teams still need to understand what is lawful and appropriate in the location where they are hiring.
Identity verification is not confirmation of right to work
This is one of the distinctions HR teams need to be particularly clear about.
An identity check asks: Is this person who they claim to be?
A right to work check asks: Does this person have permission to undertake this employment in this country?
In the UK, employers have specific duties for checking a person’s right to work before employing them. Home Office guidance sets out several permitted routes, including prescribed digital processes for eligible candidates.
Digital right to work checking also operates within a defined certification framework. As of July 2026, GOV.UK maintains a register of certified digital verification services, and the current supplementary code requires digital right to work identity checks to meet specified confidence levels.
The practical lesson is simple: completing an identity check does not automatically mean your right to work obligations have been satisfied.
Veremark provides a separate right to work checking service for employers managing this requirement.
What happens when biometric verification is involved?
This is where I would want HR teams to slow down and understand exactly what their provider is doing.
Some digital verification processes use facial images or other biometric information to establish whether the person completing a check matches an identity document.
That can provide stronger identity assurance, but it also brings additional data protection considerations.
Some regulatory bodies, such as the ICO in the UK, state that biometric data used to uniquely identify an individual is special category data under data protection law. Organisations need both a lawful basis and an appropriate condition for processing it. This is something I would ask a prospective screening provider directly.
What biometric information are you processing? Why is it needed? Where is it stored? How long is it retained? Who has access to it?
HR does not need to become the technical owner of identity technology. We do need to understand what we are asking candidates to hand over.
What happens if employers skip identity verification?
The main risk is uncertainty around everything that follows.
An employment reference tells you about the person named in the reference.
A qualification check tells you that a qualification belongs to the person in the institution’s records.
Without enough assurance that your applicant is that same individual, there is still an unresolved question.
The risk continues after the offer.
A remote employee may receive a laptop, email credentials, customer information and access to internal systems without ever meeting a colleague physically.
That is why I increasingly see identity as something HR, information security and compliance teams should discuss together.
Recruitment owns a large part of the candidate journey. Security owns much of what happens when that person receives access. Identity sits across both.
What should HR leaders ask about their current process?
If I were reviewing a global screening programme, I would begin with a handful of practical questions.
Where exactly do we establish identity? What level of assurance are we getting? Are recruiters following the same process? Which countries require a different approach? Does the candidate understand what we are collecting and why?
I would also look at what happens when something does not match.
A discrepancy does not automatically mean fraud. Names can be transliterated differently between languages. People change names. Documents expire. Records can contain errors.
Your escalation process should be able to distinguish between a reasonable discrepancy and something that genuinely warrants concern. That is an area where good HR judgement still matters. Automation can flag the issue. Someone still needs to interpret it fairly.
My view: identity deserves a more deliberate place in global hiring
The biggest shift for me is that identity verification can no longer sit quietly at the administrative end of recruitment.
Global hiring has made recruitment easier in many ways. It has also removed some of the physical cues employers historically relied on.
We can hire someone without meeting them, onboard them without bringing them into an office and give them access to company systems from another country.
Our screening processes need to reflect that reality.
Digital identity checks give employers a way to establish greater confidence in who they are hiring. They work best when HR understands what is actually being verified, where the technology has limits and what local rules apply.
The question I would encourage every global HR leader to ask is very simple:
Before we verify everything a candidate says about themselves, have we properly verified who they are?
If the answer is unclear, that is where I would start.
How long do digital identity checks take?
Timing depends on the type of identity check, the country and whether the candidate submits the required information correctly.
Some simple identity checks can return within hours, while Veremark’s 100-point identity check is 1 to 3 days.
Screening often happens at the point when a candidate has accepted an offer and everyone wants the process to move. A delayed check can affect a confirmed start date, payroll preparation or system access.
For HR, visibility is just as valuable as speed. I would rather know exactly where a check stands than spend my afternoon sending follow-up emails asking for an update.
What should you look for in an identity checking provider?
I would start with coverage and the actual verification being carried out.
Ask which identity documents are supported in the countries where you recruit. Check whether the service assesses document authenticity, verifies the person presenting it, or simply collects a copy.
Then look at the candidate experience.
Identity verification involves asking someone to share highly sensitive personal information at a point when they are still forming an opinion of your organisation. Instructions need to be clear, the process should work well on the devices candidates actually use, and personal information needs to be handled appropriately.
For international hiring, local requirements matter as well. Data protection rules, acceptable documents and employment screening requirements differ between countries. A global process still needs to account for those differences.
Where should digital identity checks sit in the hiring process?
Usually near the beginning of formal pre-employment screening.
Once a candidate has reached the stage at which checks are appropriate and the necessary consent has been obtained, confirming identity creates a sensible foundation for everything that follows.
That is how I would approach digital identity checks as an HR professional. I would not treat them as another administrative box to tick. I would use them to answer the first question that the rest of the screening process depends on: Are we checking the right person?
For global employers, getting that answer early makes the rest of the hiring decision far easier to trust.