Identity fraud is increasingly starting before a new hire’s first day on the job, according to Specops, the identity and access management division of Outpost24, which has launched a new tool aimed at verifying new employees from their first password to their first service-desk call.
The launch of Specops Secure Onboarding comes as artificial intelligence makes impersonation increasingly cheap and scalable. The company cited the 2026 Verizon Data Breach Investigations Report, which highlighted North Korean fake-worker schemes that used an estimated 15,000 stolen identities to secure jobs at target organisations.
Onboarding built for speed, not verification
Specops said onboarding processes at most organisations were designed for speed rather than identity assurance, leaving IT teams provisioning access for people they have never met. Temporary passwords and service-desk requests typically assume a new hire’s identity rather than verify it, creating an exposure window that traditional access controls do not address.
Under the new system, new employees set their own first Active Directory password through a secure enrolment link and verify their identity using biometric liveness detection checked against a government-issued ID, with support for more than 16,000 document types across 254 countries. Service-desk caller verification is built into existing ITSM workflows such as ServiceNow and Jira.
AI is accelerating impersonation risk
Specops pointed to separate data from Sift showing AI now assists more than 82 per cent of phishing emails, underscoring how generative tools have lowered the skill barrier for identity-based attacks. Specops protects more than 3,000 organisations across 65 countries and maintains a database of more than 5.5 billion compromised passwords updated daily.
The launch reflects a broader shift among enterprise security teams toward treating hiring and onboarding as an extension of the identity perimeter, rather than a purely HR-owned process, as AI-enabled fraud pushes verification earlier in the employee lifecycle.



Share your thoughts