What Is a Ghost Employee?
A ghost employee is a person on the payroll who does not actually work for the company. The three classic forms:
- Fabricated identities — a fake person with a real-looking SSN and documents, added to the payroll and paid every cycle.
- Former employees left on the books — a terminated worker whose payroll record was never removed; an insider with payroll access collects the checks.
- Insider additions — a payroll administrator, bookkeeper, or manager adds a real or invented person and diverts their pay.
The pattern is almost always the same: small amounts per check, many checks, and little scrutiny of the payroll register. Most ghost employees are only discovered during an audit — or when the fraudster leaves the company and the payments abruptly stop.
Why 2026 Is Different: Frankenstein IDs
Synthetic identity fraud has been evolving for a decade, but the current generation is harder to catch than ever. "Frankenstein IDs" combine pieces of real data:
- A real SSN — frequently a minor's (unused credit file) or a deceased person's number, so it validates against real databases.
- An AI-generated face — a synthetic photo that passes biometric liveness checks because it is a coherent, photorealistic face, just not a real person's.
- Forged documents with real data — doctored IDs and records that use real names and numbers, so manual review sees everything it expects to see.
The result is an identity that no longer fails the old red flags. It has a valid SSN, a matching-looking face, and documentation. It only fails when the employer verifies the identity against live, authoritative sources — which is the entire point of pre-hire digital verification. See the full synthetic identity guide.
The Cost of Getting It Wrong
Ghost employees drain real cash every pay cycle — often for years before discovery.
Up to $27,894 per unauthorized worker on top of the stolen amounts.
Audit findings, tax exposure, and liability for the identity misuse itself.
Ghost schemes are usually run by someone with payroll access — turn the access into the control.
Stopping Ghost Employees: The Verification Stack
- Verify identity before the first paycheck — document verification, live checks against authoritative sources, and right-to-work confirmation for every new hire.
- Reconcile the payroll register — compare the payroll file against the active staff list and HR records; every name should match a real, present employee.
- Audit quarterly — and immediately after any payroll administrator leaves or changes role.
- Separate duties — the person who adds employees to payroll should not be the only person who reviews the payroll register.
The full walkthrough is in the payroll audit guide, and the penalty reference covers the exposure side.
Frequently Asked Questions
What is a ghost employee?
A ghost employee is a person on the payroll who does not actually work for the company — either a fabricated identity, a terminated employee left on the books, or a real person added by an insider. Payroll keeps paying, and the fraudster keeps collecting.
How common is ghost employee fraud?
Estimates consistently put ghost employee fraud in the billions of dollars per year across U.S. employers. It is the classic insider fraud: small numbers per check, many checks, and little scrutiny.
What are the I-9 penalties for hiring unauthorized workers?
Under current DHS penalty schedules, employers face civil penalties per unauthorized worker: up to $2,789 for paperwork violations, and from $698 up to $27,894 for knowingly employing an unauthorized worker depending on the offense count.
What is a Frankenstein ID?
A synthetic identity built from pieces of real data — a legitimate SSN (often a minor's or a deceased person's), an AI-generated face that passes liveness checks, and forged or doctored documents. The identity looks real because its components are real.
How do employers stop ghost employee fraud?
Verify every new hire before the first paycheck: identity document verification, right-to-work checks, payroll-file reconciliation, and periodic audits of the active roster against actual staff.
How often should payroll be audited for ghost employees?
At minimum quarterly, and immediately after any payroll administrator leaves the company or changes roles — turnover in payroll roles is when ghost employees most often appear.
Verify Every New Hire Before the First Paycheck
Digital identity verification catches fabricated and synthetic identities at the door.
Verify with EmployerChecks