返回列表 发表时间:2022-02-16    浏览次数:766

一个令人惊讶的背景检查漏洞以及如何关闭它

第三方背调的一项新功能身

想象一下,你是一名侦探,就像 Lisbeth Salander 或 Columbo。

一位在人力资源部门工作的女性雇佣你是为了了解她是如何设法雇佣一名犯罪策划者的,尽管她进行了背景调查的黄金标准。

你能猜到他是怎么做到的吗?

他谎报自己的身份。

这不是虚构的例子。如今 ,身份盗窃 如此普遍,不需要策划者就可以关闭这种开关。

(而且,是的,我意识到这会成为一个糟糕的侦探故事。)

关键是,背景调查假定所提供的身份是真实的。

正如我们稍后将看到的,几乎没有任何就业筛选公司会在候选人进行背景调查之前对他们的信息进行足够的验证。

这意味着大多数背景调查都存在重大漏洞。

SSN 跟踪是不够的

背景调查公司会根据您提供的姓名、地址和 SSN 对您的候选人进行“SSN 追踪”。虽然这听起来像是可以抓住身份窃贼的东西,但通常不会。

这是因为 SSN 跟踪仅返回两件事:与 SSN 关联的名称和地址。

虽然 SSN Trace 可以捕捉到公然编造 SSN 的人,但它不会捕捉到使用他们在网上购买或从亲戚那里借来的身份的人。

提供的姓名和地址属于该 SSN,它们不一定属于填写表格的人。

即使 SSN 跟踪返回您认为错误的信息,您也几乎无法证明这一点。你能做的最好的就是看他们的身份证。但你怎么知道那是真的?

 在候选人接受工作机会之前,您无法进行E-Verify 。到那时你已经拒绝了其他候选人。

这是一个日益严重的问题

每年有数以千万计的身份被盗,这使得 候选人在背景调查中使用被盗身份变得越来越普遍去年,有关身份盗用的 20 起投诉中,有 1 起 与使用被盗身份找工作的人有关。

以最近的一个案例为例 ,其中一名妇女在背景调查中使用了另一名妇女的姓名、出生日期、驾驶执照号码和社会安全号码,以隐藏以前的盗窃罪。当她因挪用雇主的钱而被捕时,这个诡计就暴露了。

随着在线购买这些信息变得越来越容易,预计将来会看到更多这样的案例。

份验证同时使用基于知识的身份验证和照片身份验证来解决问题。学到更多。

第三方背调 方式:身份验证

我们推出了一项名为身份验证的新功能来帮助解决这个问题。它的工作原理是验证候选人提供的个人详细信息是否确实属于他们。  

这个过程是这样工作的。候选人在填写个人信息进行背景调查的同时完成身份验证。

我们使用他们的 SSN 来生成一些只有 SSN 所有者应该知道的问题。这些问题与您在线获得信用评分时被问到的问题相同。

有时,候选人会忘记问题的答案。在这种情况下,我们使用第二种方法来验证他们的身份。

候选人被要求自拍和身份证照片。我们的机器学习技术可验证 ID 是否有效并与候选人的照片相匹配。

拥有两种验证方法可以让我们为候选人提供更好的体验,因为他们只需完成最少的必要步骤即可获得完全验证。


GoodHire’s a new feature, Identity Verification, uses both knowledge-based authentication and photo ID verification to solve the problem. Learn more.


Imagine that you’re a detective, like Lisbeth Salander or Columbo.

A woman who works in HR hires you to find out how she managed to hire a criminal mastermind, even though she ran the gold-standard of background checks.

Can you guess how he did it?

He lied about his identity.

This isn’t a fictional example. With identity theft being so common these days, it doesn’t take a mastermind to pull off this kind of switch.

(And, yes, I realize this would make an awful detective story.)

The point is, background checks assume that the identity provided is genuine.

As we’ll see in a moment, almost no employment screening companies do enough to verify candidates’ information before they run the background check.

This means most background checks have a major loophole.

SSN Trace Isn’t Enough

Background check companies run an “SSN Trace” on your candidates based on the name, address, and SSN provided. While this sounds like something that would catch Identity thieves, it often doesn’t.

That’s because an SSN Trace returns only two things: names and addresses associated with the SSN.

While SSN Trace can catch someone who blatantly made up an SSN, it won’t catch people using identities they’ve bought online or borrowed from a relative.

The name and address provided belong to that SSN, they just don’t necessarily belong to the person who filled out the form.

Even if an SSN Trace comes back with information you think looks wrong, there’s little you can do to prove it. The best you can do is look at their ID. But how do you know that’s real?

You can’t do E-Verify until the candidate has accepted the job offer. And by then you’ve turned down your other candidates.

It’s A Growing Problem

Tens of millions of identities are stolen each year, making it increasingly common that candidates are using stolen identities on background checks. Last year, 1 out of 20 complaints about identity theft were related to someone using a stolen identity to get a job.

Take this recent case in which a woman used another woman’s name, birthdate, driver’s license number, and Social Security number on her background check to hide previous theft convictions. The ruse came to light when she was arrested for embezzling money from her employer.

As buying this information online has become easier and easier, expect to see more cases like this in the future.

The GoodHire Way: Identity Verification

We’ve launched a new feature called Identity Verification to help solve this problem. It works by verifying that the personal details your candidates provide actually belong to them.  

The process works like this. Candidates complete the identity verification at the same time they fill out their personal information for the background check.

We use their SSN to generate a few questions only the SSN’s owner should know. These are the same kind of questions you’re asked when you get your credit score online.

Sometimes, a candidate will forget the answer to a question. In that case, we use a second method to verify their identity.

The candidate is asked to take a selfie and photo of an ID. Our machine-learning technology verifies that the ID is valid and matches the photo of the candidate.

Having two methods of verification lets us provide a better experience for candidates because they’ll only have to complete the minimum necessary steps to get fully verified.


电子屏-04.png