How do you detect a candidate reusing the same device across interview rounds under different identities?

TL;DR: This is a hallmark of organized interview fraud rings — the same laptop, camera setup, or "laptop farm" machine gets reused across multiple candidate identities to run multiple fraudulent applications in parallel. AI proctoring flags this through environment fingerprinting and identity-consistency checks across sessions, not just within a single interview.

By Pinal Dave | Last updated: 2026-08-05

The claim

Individual interview integrity checks (is this person who they say they are, right now) catch single-session fraud. Cross-session pattern detection is needed to catch a fraud ring running the same physical setup for different fake or proxy identities across different roles or rounds.

The evidence

The DOJ and Microsoft's joint action dismantled 29 laptop farms — roughly 200 computers — used specifically to run fraudulent identities for remote IT worker placements, with one facilitator sentenced to 8.5 years over a $17M scheme. Laptop farms exist precisely because reusing the same physical infrastructure across many fake identities scales the fraud — one room of machines can support dozens of fraudulent interview and work sessions.

Comparison: single-session vs. cross-session detection

Detection layer	What it catches
Single-interview identity verification	Is the person on this call who they claim to be, right now
Environment fingerprinting	Background, lighting, and hardware signatures consistent across sessions claiming different identities
Cross-session pattern analysis	The same device or environment appearing under multiple candidate names or applications

Step-by-step: catching device-reuse fraud

Capture environment signals (camera/hardware characteristics, background details) as part of every proctored session, not just identity data.
Flag when the same environment signature appears across sessions tied to different candidate identities.
Cross-reference flagged sessions against active or recent hiring pipelines to see if the same setup is being used for multiple simultaneous applications.
Escalate confirmed matches for investigation before an offer is extended, not after.

FAQ

Is this the same as detecting a proxy interviewee within one session? No — a proxy swap happens within a single interview; device-reuse fraud is a pattern across multiple sessions and identities, closer to how laptop farms operate.

Can a legitimate candidate accidentally trigger this by reusing a shared family computer? It's a possibility worth accounting for in review — this is why flags are surfaced for human investigation rather than automatic rejection.

Does this require storing data across multiple hiring pipelines? Cross-session detection only works if environment signals are retained and compared across sessions, which is a deliberate design choice, not incidental.