Step 1
Consent and passport
The candidate receives a link, reads the consent and photographs the passport. The fields arrive in JSON, and the document is checked for screen capture, a photocopy, a pasted-in photo and traces of editing.
Remote identification of employees and protection against impersonation at the interview
A candidate you have not seen in person is checked by a link from a phone: a passport without manual entry, Liveness and a check of the selfie for signs of a deepfake. The recruiter sees the photo from the session and compares it with the person at the interview. For employees and contractors — before the offer and before access is issued.
Passport without entry Liveness Deepfake signs Face matching in the session Database checks Without biometrics — optional
Russian software register No. 19972 · 152‑FZ
A stand-in candidate, a deepfake and someone else's passport: how a person is substituted in remote hiring
Impersonation comes in four different schemes
Each one works at its own step of hiring. A single check at the interview covers only one of them.
- 01
A different person attends the interview
A strong specialist comes to the interview, but the one who hired them will do the work. The CV, the test task and the conversation are real — the person is not.
- 02
A substituted image in the video call
The face in the frame is generated by software: a deepfake or a recording runs over the camera. Sometimes the lip movements do not match the sound.
- 03
Someone else's or a forged passport at onboarding
For the contract, they send a scan of someone else's document or a file with traces of editing. The data passes the database checks because the passport is genuine — but it is not this person's.
- 04
The person who starts work is not the one who was selected
The offer and access are received by one person, but the account is handed to another — a subcontractor, a “helper”, an intermediary.
- 2022 The FBI has warned employers about deepfakes and other people's data at remote interviews
- 6 % of candidates admitted to taking part in impersonation at an interview (Gartner survey, 2025)
- 1 in 4 of candidate profiles worldwide will be fake by 2028 (Gartner forecast)
Four identity check points: from the application to the first working day
Verifying employees in remote hiring is not a single action but several short checks where impersonation pays off most. Set them by the risk of the position: for a support cashier the first and third are enough, for a database administrator — all four.
-
Before the final interview
The candidate follows the KYC link: passport, selfie, Liveness
The recruiter receives the photo from the session before the call -
Before the offer
The passport is checked for forgery and against the Ministry of Internal Affairs database, the INN — by the passport
Data for the contract arrives as fields, with no retyping -
Before access is issued
A repeat session on the first working day
The face is matched against the first check -
On a change of device or a password reset
The same short check instead of a call to support
Access is returned to the person who received it
A check by link before the offer: passport, Liveness and face in one session
The candidate does not need to install an app or come to the office: the link opens in the phone's browser. The check runs before the video call or right after it — outside the video link, so it does not detect image substitution in Zoom.
Step 2
Selfie and Liveness
Phone camera only; a ready-made file cannot be uploaded. Liveness checks that a live person is in front of the camera, the selfie is checked for signs of a deepfake and screen capture, and the face is matched against the photo in the passport.
Step 3
Report for the recruiter
Session status, passport data, the Liveness result and the photo from the session. If the face did not match across the steps, the session is marked as suspicious. The decision is up to the recruiter and the security service.
Online interview: what the interviewer notices and what is checked outside the video link
-
Signs of substitution in the frame
The lips do not match the sound, the face “floats” when the head turns or a hand passes in front of it, a cough does not match the picture. This is a reason for a check by link, not a conclusion of fraud: a poor connection may also be to blame.
-
Compare with the photo from the check
Before the call, open the report: the photo from the session and the passport data. The interviewer can compare them with the person on the screen — this is a human decision, not an algorithm's.
-
Do not ask for the passport on camera
A screenshot of a passport from a video call means extra personal data in correspondence and recordings, and a forgery cannot be seen on it. The candidate uploads the document by the link, where it is checked.
-
What NeuroVision does not do
We do not connect to Zoom, Telemost or Teams and do not analyse the call or the voice. The check takes place in the widget or by link — before the interview, after it or on the start date.
How attacks on face verification work — presentation, video stream injection, deepfake — is described on the page deepfake protection in verification.
Remote hiring and biometrics: what the Labour Code, 152‑FZ and 572‑FZ require
The law allows hiring remotely, and leaves the face check to the employer's choice and the person's consent. Below is a retelling of the rules as of October 2026: a guide for a conversation with a lawyer, not a legal opinion.
The retelling is simplified: the Labour Code as amended on 25.05.2026, 572‑FZ as of 28.12.2024, 152‑FZ as of October 2026; check the current versions in ConsultantPlus. How to sign a remote contract if the employee has no electronic signature is on the page electronic signatures and certification authorities; how to protect biometrics is in the article “How to ensure the protection of personal and biometric data in KYC processes”.
- What to put in the policy
Labour Code
Labour Code, Art. 312.2, 312.3, Part 1 Art. 86, cl. 3 and 6.
Remote contract
- A remote work contract can be concluded by exchanging electronic documents (Part 1 Art. 312.2 of the Labour Code)
- The employer signs it with an enhanced qualified electronic signature, the employee — with an enhanced qualified or non-qualified one (Part 1 Art. 312.3 of the Labour Code)
- The employee may present the passport and other documents for hiring in electronic form, and the employer may require notarised paper copies of them (Part 3 Art. 312.2 of the Labour Code)
Candidate data
- Information about the candidate is obtained from the candidate; from third parties — after notification and with written consent (cl. 3 Part 1 Art. 86 of the Labour Code)
- From 1 September 2025, consent to the processing of personal data is drawn up separately from other documents (Part 1 Art. 9 of 152‑FZ)
- A decision about a candidate cannot be based solely on automated processing: a suspicious session is reviewed by a human (cl. 6 Part 1 Art. 86 of the Labour Code)
- A route without biometrics
Consent to biometrics and impersonation
152‑FZ, Art. 9, 11; Labour Code, cl. 11 Part 1 Art. 81; Criminal Code, Art. 159, 327.
Consent to biometrics
- A face image used to establish identity is biometrics; it is processed only with written consent, except in the cases of Part 2 Art. 11, and hiring is not among them (Parts 1–2 Art. 11 of 152‑FZ)
- A person is not obliged to provide biometrics — keep a route without it (Part 3 Art. 11 of 152‑FZ; the block above)
- Consent to the face check is shown before the camera — in your form or on the start screen of the link
A forged document and impersonation
- Presenting forged documents when concluding a contract is grounds for dismissal (cl. 11 Part 1 Art. 81 of the Labour Code)
- Using a knowingly forged document is a criminal offence (Part 5 Art. 327 of the Criminal Code); theft by substituting identity is fraud (Art. 159 of the Criminal Code)
- NeuroVision records signs of document forgery and face substitution in the session report; the employer classifies the violation and decides about the employee
- A check outside the video link
572‑FZ restrictions
572‑FZ, cl. 2 Part 2 Art. 1, Art. 15, Part 4 Art. 16.
572‑FZ restrictions
- Organisations are prohibited from processing biometrics used for identification in their own systems, except for collection for placement in the Unified Biometric System (cl. 1 Part 1 Art. 15 of 572‑FZ)
- Biometrics for authentication may be processed only for matching against the Unified Biometric System under the conditions of Art. 16, and stored for no longer than 10 days (cl. 2–3 Part 1 Art. 15 of 572‑FZ)
- A company may confirm a person's action by biometrics through the system of an accredited organisation, with their consent (Part 4 Art. 16 of 572‑FZ)
Matching with a human involved
- The law does not apply to matching performed not by a system but by an authorised official (cl. 2 Part 2 Art. 1 of 572‑FZ)
- A recruiter who personally compares the photo from the session with the person at the interview is closer to this exception than an automated decision. Whether your scheme qualifies is for a lawyer to decide
- How 572‑FZ applies to a repeat face check is described on the page on face authentication routes
A remote onboarding policy: what to set before the offer, at signing and after
A check works when it has a place in the process: who sends the link, what to do with a suspicious session, who issues access. Set this out in an internal act — your lawyer prepares the text.
- A list of positions where an identity check is mandatory before the offer; for the rest — at the recruiter's discretion
- Consent to data processing — as a separate document (Part 1 Art. 9 of 152‑FZ)
- Consent to the face check — separately and with a route without biometrics (Art. 11 of 152‑FZ)
- Who reviews it: the recruiter or the security service
- The retry period and what to tell the candidate
- The passport — in electronic form from a verified session, other documents under Art. 65 of the Labour Code — from the employer's list; when notarised paper copies are needed (Art. 312.2 of the Labour Code)
- Employer — QES, employee — QES or non-qualified signature (Part 1 Art. 312.3 of the Labour Code)
- A paper copy of the contract — on the employee's application (Part 2 Art. 312.2 of the Labour Code)
- Full name and details in the contract — from the recognised passport, without retyping
- Access to systems — after a repeat check on the first working day; who confirms the issue
- Repeat — on a change of device, a password reset, or a suspected account handover
- Storage period for the photo and session data — by purpose (Part 7 Art. 5 of 152‑FZ)
- Candidate rejected — destroy their data
- Employer — the step is taken by the employer: the recruiter, the security service, the lawyer
- NeuroVision — the step is covered by a NeuroVision check: passport data, the session result
- Labour Code — the basis is in the Labour Code
- 152‑FZ — the basis is in the personal data law
Five mistakes companies make in remote hiring
A check only at the interview
Impersonation comes later
One person passed the interview, a second signed the contract, a third got access. A check before the offer without a check before access covers half of the schemes.
A passport as a screenshot in a chat
Extra data, and a forgery cannot be seen
A scan from a messenger cannot be checked for editing and screen capture, yet it stays in the recruiter's correspondence. The document — only by the link where it is checked.
Biometrics without a choice
A refusal is not a reason to reject
A candidate has the right not to give biometrics. If the face check is the only route, there is a risk of a dispute. Keep a route without it.
An automatic refusal
A human decides
A session marked “suspicious” is a reason to recheck, not a refusal: Liveness also fails in poor light or with an old camera.
Recording the interview “just in case”
A video of a face is data too
Recording a call without a purpose and consent means extra personal data. For an identity check, the photo from the session and the report are enough.
572‑FZ
The face — by consent
If a candidate has refused the face check: four routes without biometrics
-
Only the document and databases
A passport by link without a selfie: document anti-fraud, validity against the Ministry of Internal Affairs database, the INN. This does not cover impersonation — supplement it with an interview where HR sees the document in the candidate's hands.
-
In-person attendance
Signing the contract at the office, at a partner's or at a regional branch. The face is matched with the passport by an employee — this is not automated processing.
-
The employee's electronic signature
A qualified signature is issued by an accredited certification authority after establishing identity — in person or with a new-generation foreign passport. A contract signed with it confirms who signed it.
-
Through the Unified Biometric System
If a person has biometrics in the Unified Biometric System, the law provides for confirmation through an accredited organisation — with their consent and without the employer storing biometrics. The conditions and procedure are set by 572‑FZ; how this route works in your scheme is for a lawyer to decide.
Set the route without biometrics in the policy: a refusal of the face check must not in itself become a refusal of employment.
IT, call centres, outstaffing and EOR: where impersonating an employee costs the most
A check is needed where a remote employee gets access to code, customer data or money. The wider the access, the more check points.
-
IT companies and product teams
- Developers and DevOps get access to code and infrastructure on the first day
- A check before the offer and before access is issued
- Links with companies and conflicts of interest — from the databases, on the candidate screening page
-
Call centres and support
- The operator sees customers' personal data
- Mass hiring — up to 1 000 links at a time
- A repeat check on a change of workplace
-
Development outsourcing and outstaffing
- The client accepts a specialist they did not interview
- A check before the start on the project, the report — by agreement and with the specialist's consent
- Repeat — when a specialist is replaced
-
EOR, contractor management and contractor platforms
- Foreign passports — 195+ countries and territories
- A contractor under a civil-law contract or a self-employed person — NPD status on the self-employed page
- A re-check before payout
-
Banks, fintech and insurance
- Employees with access to accounts and customer data
- A face check plus lists and sanctions
- Business reputation requirements — on the candidate screening page (the link is in the “IT companies” card)
-
The first working day: a repeat check before access is issued
The scheme “one person interviewed, another works” becomes visible only after the offer. A short session before access is issued shows that the account is received by the same person.
-
A short session without a passport
On the first working day the employee takes only a selfie and Liveness by link. The face is matched against the first check; the document is not needed a second time.
-
Access — after the result
The security service issues keys, a VPN and accounts once the session has passed. If the face did not match, — a human review, not a block.
-
On a change of device and password
The same check instead of a call to support: a new laptop, a two-factor authentication reset, restoring access after a holiday.
-
Without constant monitoring
The check — at the moment of the event, not filming the employee throughout the day. There is no screen tracking or camera-based time recording on this page.
Checks for remote hiring: catalogue and prices
Include in the set only what the position needs and what is stated in the candidate's consent. Payment is for completed sessions and requests, with no subscription fee.
Passport and other documents
Without manual entry, with a forgery check.
- OCR · anti-fraud
Russian passport recognition
The passport is recognised from a photo: the full name, date of birth, series and number, date of issue arrive as JSON fields without retyping. Document anti-fraud is included in the “Document” package.
from 16 ₽
Learn more - 195+ countries and territories
Foreign national's passport
Recognition of foreign nationals' passports — for foreign specialists and contractors, with a document forgery check.
from 16 ₽
Learn more - other documents from the list
An additional document in the session
A second document in the same session — from the list of recognised documents.
10 ₽
Learn more - Police · SMEV
Validity of a Russian passport
The authenticity and validity of a Russian passport through the interagency interaction system. It catches expired, replaced, lost and invalid documents and verifies that the passport was issued to this particular person.
5 ₽ / check
Learn more
Selfie and Liveness
Camera only, no file upload. With the candidate's consent.
- phone or laptop camera
Active and passive Liveness
A check that a live person is in front of the camera, not a photo, a screen or a video. The mode is selected in the scenario.
in a package from 29 ₽
Learn more - selfie check
Signs of a deepfake and screen capture
The selfie is checked for signs of a deepfake and screen capture; the check is not performed in a video call.
in the package
Learn more - within the session
Face matching with the passport photo
The face in the selfie is compared with the photo in the passport from the same session.
in the package
Learn more - the employee's first check
A repeat session with a reference
A repeat check before access is issued: the face is matched against the employee's first check.
from 29 ₽
Learn more
Passport data against databases
In detail — on the candidate screening page.
- Federal Tax Service
INN by passport
Determining the tax number from the passport data. It unlocks the checks that need precise identification of the person — with no namesakes.
5 ₽ / check
Learn more - Federal Bailiffs Service
Enforcement proceedings
Active enforcement proceedings from the bailiffs' database: the amounts owed, the claimants, the type of recovery and an estimate of how close the person is to bankruptcy given their total debts.
5 ₽ / check
Learn more - Ministry of Internal Affairs · FSIN · FSSP
Wanted-persons lists of the Ministry of Internal Affairs, the Federal Penitentiary Service and the Bailiffs Service
The federal wanted list of the Ministry of Internal Affairs, the wanted lists of the Federal Penitentiary Service and the Federal Bailiff Service — by full name and date of birth. Each database is a separate check.
5 ₽ per database
Learn more - checks on a Russian passport
Basic package of checks on a Russian passport
A basic set of checks on a Russian passport in one run.
50 ₽
Learn more
Financial and management positions
By full name and date of birth.
- Rosfinmonitoring
The list of terrorists and extremists
Screening against the list of people involved in extremist activity or terrorism. A mandatory check under 115-FZ.
5 ₽ / check
Learn more - OFAC · EU · UK · UN
International sanctions lists
Screening against the consolidated lists of OFAC (USA), the European Union, the United Kingdom and the UN. Every match carries a similarity score and a flag if it was triggered by an alias.
5 ₽ / check
Learn more - international database
Compliance screening: PEP and sanctions
International screening against politically exposed persons and their associates, sanctions lists and adverse media — for management and financial positions.
36 ₽
Learn more - Police
The police register of controlled persons
A check on a foreign national against the register of controlled persons that the police have kept since February 2025: people who have lost the legal grounds to stay in Russia. Russian citizens do not need the check — by law they are not in the register.
5 ₽ / check
Learn more
How much it costs to check a remote candidate
A fixed price per session, with no subscription fee. One session is one person: the passport, selfie and Liveness are done in one go.
- Enable
Document
from 16 ₽ per session
A passport without manual entry and document anti-fraud, without the selfie step. For candidates who chose the route without biometrics.
-
Passport recognition and anti-fraud, Liveness, a selfie check for signs of a deepfake and screen capture, face matching in the session. For a check before the offer and before access is issued.
- Get a quote
Extended
on request
Document, Liveness and database checks in one session: passport validity, INN, wanted lists, the basic package of checks on a Russian passport for 50 ₽.
A database check — 5 ₽, an additional document in the session — 10 ₽, PEP compliance screening — 36 ₽. The session price falls with volume. Test access — on request.
Connection: a link from the applicant tracking system, a widget on the careers site or the API
A recruiter with a dozen candidates a week will manage with links from the personal account. A hiring service or an EOR platform needs the widget in the application form and the API.
- KYC link
- Web SDK
- WebView
- REST API
Test access — on request.
Payment per session.
Why IT companies and remote work services choose NeuroVision
Remote hiring needs a check that the candidate can pass in a couple of minutes from a phone and the recruiter will understand without training.
Document, Liveness and face in one session
The candidate opens one link, and you receive a verified passport, the Liveness result and a photo against which you can compare the person at the interview.
There is no need to assemble a solution from several vendors and reconcile their responses.
Russian software register
The platform is listed in the Russian software register under No. 19972.
Remote hiring glossary: remote employee, Liveness, stand-in interview
A short guide to the concepts that come up when a candidate or employee is not seen in person.
- Remote employee
- An employee who performs their job function outside the employer's office and interacts with the employer over the internet. A contract with them can be concluded by electronic documents.
- Remote employee
- Stand-in interview
- An interview that is taken in place of the candidate by another, stronger person.
- Proxy interview
- Deepfake
- A face image or video created or altered by a neural network so that it looks real.
- Deepfake
- Video stream injection
- Replacing the camera image with a recording or generated video through a virtual camera or an emulator.
- Video injection
- Liveness
- A check that a live person is in front of the camera, not a photo, a screen, a mask or a video.
- Liveness detection
- KYC session
- A single check of one person: document, selfie, Liveness and a result with a common identifier.
- KYC session
- Reference session
- A person's first check, against which the face is matched in later checks.
- Reference session
- NQES
- An enhanced non-qualified electronic signature: created with a key and makes it possible to identify the signatory. An employee may sign a remote contract with it.
- Advanced electronic signature
- Biometric personal data
- Information about a person's physiological characteristics by which their identity is established — for example, a face image.
- Biometric data
- Employer of record (EOR)
- A company that formally employs a worker and pays them, while they work for another company.
- Employer of record
Read also
Deepfakes, video stream substitution and biometrics protection — in our blog.
446 13
KYC, AML and Digital Identification
Deepfakes in KYC: Detecting Face Spoofing and Protecting Video Verification
518 29
KYC, AML and Digital Identification
How Video Streams Are Spoofed in KYC: The Architecture of Attacks via Emulators, Virtual Cameras, and Video Stream Injection
148 28
Anti-Fraud, Liveness and Deepfake Protection
What Is a Deepfake: How It Works, Why It’s Dangerous for Business, and How to Protect Yourself (2026)
162 25
KYC, AML and Digital Identification
Liveness Detection: What It Is, How Liveness Checks Work, and Where Businesses Need It
Frequently asked questions about remote identification of employees
Send the candidate a KYC link before the final interview: they photograph the passport, take a selfie and pass Liveness. Before the call, open the report and compare the photo from the session with the person on the screen. The decision is made by the interviewer, not by an algorithm.
No. We do not connect to the video link and do not analyse the call. The check takes place by link or in the widget: phone camera only, Liveness and a selfie check for signs of a deepfake and screen capture.
With the candidate's written consent and with a route without biometrics for those who refuse. Assess with a lawyer before launch the 572-FZ restrictions on processing biometrics in a company's own systems and whether your scheme falls under them.
Offer a route without biometrics: a check of the document only, signing the contract in person or with an electronic signature, confirmation through the Unified Biometric System. A refusal of biometrics must not in itself become a refusal of employment.
Yes, a remote work contract can be concluded by exchanging electronic documents: the employer signs it with a qualified signature, the employee — with a qualified or non-qualified one. The employee may send the passport in electronic form, and the employer may request notarised copies.
Presenting forged documents when concluding a contract is grounds for dismissal under the Labour Code, and using a forged document is a criminal offence. A check by link helps to notice a forgery and a face mismatch before onboarding.
To make sure that access goes to the person who was selected. A short session on the first working day — a selfie and Liveness without a passport — is matched against the first check.
A few minutes from a phone: open the link, photograph the passport, take a selfie and pass Liveness. No app to install.
Yes. We recognise passports of 195+ countries and territories. For foreigners working in Russia — the Ministry of Internal Affairs register of controlled persons; for self-employed contractors — a check of NPD status on the self-employed page.
A database check answers what is known about the person with this passport: debts, courts, wanted lists. An identity check answers whether this is the same person and whether they are alive in front of the camera. For remote hiring, both are usually needed.
The storage period is set in the check scenario, and the data placement conditions are fixed in the contract. The data of a rejected candidate is deleted.
Document, selfie and Liveness — from 29 ₽ per session, document only — from 16 ₽, a database check — 5 ₽. There is no subscription fee, test access — on request.
We will select a check for your remote hiring
Tell us whom you hire remotely, how many candidates a month and where your recruiters work. We will suggest where to place the check and give you test access.
Can't put your request into words? Book a call and our team will contact you at a convenient time
Book a call
The company is included in the register of IT companies and the register of personal data operators of the Russian Ministry of Digital Development.
Address: Moscow, Presnenskaya Embankment 12 — Moscow City business centre, Federation Tower. Nearest metro stations: Delovoy Tsentr and Mezhdunarodnaya.
