Ghost employees are fictitious workers added to a company's payroll by insiders who then divert the salary payments to themselves. The fraud is remarkably simple to execute and notoriously difficult to detect using traditional controls. According to the Association of Certified Fraud Examiners, occupational fraud costs organizations an estimated 5% of annual revenue globally, and payroll fraud — including ghost employees — accounts for a significant share of that total. In 2025, the median loss from a single payroll fraud scheme was $100,000, with many cases running into the millions before discovery.

How Ghost Employee Schemes Work

The mechanics of a ghost employee scheme are disturbingly straightforward. An HR administrator, payroll manager, or department head with access to the payroll system creates a new employee record using fabricated personal details — or, in more sophisticated schemes, using stolen identity information from real individuals. The ghost employee is assigned a role, a salary, and a bank account controlled by the fraudster.

Because the ghost employee never physically appears at the workplace, the scheme depends on the fraudster's ability to suppress or bypass controls that would normally detect the absence. In organizations with weak onboarding verification, the ghost employee's identity is never independently confirmed. In organizations with poor segregation of duties, the same person who creates the employee record also approves payroll runs.

The fraud can persist for months or even years. In one widely reported case, a U.S. government agency discovered 11 ghost employees on its payroll, totaling $1.2 million in fraudulent payments over a three-year period. In another, a UK-based company identified a payroll manager who had created seven fictitious employees over five years, diverting more than £900,000.

Why Traditional Controls Fail

Traditional payroll controls are not designed to catch ghost employees. Segregation of duties helps — requiring different people to create employee records and approve payroll — but it is not foolproof. Headcount reconciliation, where HR compares the payroll register against a list of known employees, is effective in theory but rarely performed rigorously in practice. Manual audits are expensive, infrequent, and reactive.

The fundamental weakness is that traditional controls verify the process rather than the person. They confirm that a payroll record exists and that the correct approvals were obtained, but they do not confirm that the employee behind the record is a real, uniquely identified human being who actually works for the organization.

Biometric Identity Verification as a Countermeasure

Identity verification powered by biometric matching closes the gap that ghost employee schemes exploit. When every new hire must complete a live biometric verification — capturing a government-issued ID and a live selfie that is compared against the ID photo — it becomes impossible to add a fictitious person to the payroll without a real, verified identity behind the record.

The verification creates a biometric anchor for each employee record. If an insider attempts to create a ghost employee, the platform will require a live verification session that the fictitious person cannot complete. If the insider attempts to use a stolen identity, duplicate detection algorithms will flag the anomaly.

Some organizations go further by implementing periodic re-verification during payroll cycles. Before each payroll run, a random or risk-based sample of employees is required to complete a brief biometric check — confirming that the person receiving the salary is the same person who was verified at onboarding. This approach makes long-running ghost employee schemes virtually impossible to sustain.

Real-World Impact

A financial services firm with 3,000 employees implemented biometric onboarding verification and periodic payroll re-verification in 2025. Within the first quarter, the system flagged two employee records that could not be verified — both turned out to be ghost employees created by a mid-level HR coordinator. The total fraudulent payments recovered exceeded $340,000.

A logistics company operating across 12 countries deployed identity verification as part of a broader HR & Peopletech modernization initiative. The platform's duplicate detection capability identified three instances where the same identity had been used to create employee records in different subsidiaries — a scheme that had been running undetected for over two years.

These cases illustrate a consistent pattern. Organizations that verify the person, not just the paperwork, detect ghost employee fraud faster and prevent future occurrences entirely.

Building a Ghost-Proof Payroll

Eliminating ghost employee risk requires a combination of technology and process discipline. The technology component is straightforward — integrate identity verification into the onboarding workflow so that every new hire is biometrically verified before their first payroll run. Pair this with automated background checks to confirm employment history and credit checks to flag financial risk indicators.

The process component requires ensuring that no single individual can both create an employee record and approve payroll without an independent verification step. When biometric verification serves as that independent step, the control is stronger than any manual approval chain.

Ghost employees thrive in environments where identity is assumed rather than proven. Modern verification technology eliminates that assumption entirely. Get started with deepidv and make payroll fraud a problem of the past.