TESTIMONIALS

โ€œReceived the latest edition of Professional Security Magazine, once again a very enjoyable magazine to read, interesting content keeps me reading from front to back. Keep up the good work on such an informative magazine.โ€

Graham Penn
ALL TESTIMONIALS
FIND A BUSINESS

Would you like your business to be added to this list?

ADD LISTING
FEATURED COMPANY
Education

Qualifications fraud in age of AI

by Mark Rowe

Qualifications fraud is real, and evolving; artificial intelligence is making fake documents such as diploma certificates faster and cheaper to make, and more convincing than ever. But itโ€™s not all doom and gloom, because opportunity exists to make solutions. Thatโ€™s according to a webinar by the verification service Prospects Hedd, that ran during International Fraud Awareness Week 2025.

In sum, the service makes the case that fakes generated by AI are increasing; which implies the need for employers and universities to work together more on verification; though it noted the UK doesnโ€™t have such a โ€˜routine mechanismโ€™, and hence without a โ€˜trust frameworkโ€™, AI can exploit any gap. โ€œThey arenโ€™t abstract questions any more,โ€ said Jake Shumilin of Hedd.

Opening the talk on Zoom for Hedd was Chris Rea, head of strategic relationships, who related a survey of larger employers. Most of the biggest graduate recruiters are doing checks on applicants; but until every degree credential is checked, whether for a graduate to go into further study or employment, โ€˜the opportunity for fraud is going to be there as wellโ€™. He welcomed that Hedd was seeing an improvement in verification best practice; but so was the capacity for fraud, he added: โ€œThereโ€™s a lot of work on our plates collectively.โ€ That was a theme of the hour; that fake college and university documents are not just an issue for higher education, but for screening agencies and the employers who may hire through them.

For not only are ย screening firms seeing fake or exaggerated CVs, entire fake reference houses are (for a fee) making up documents, and AI is allowing that at scale and of high quality, Chris Rea said.

He quoted excuses why, employers say, they might not verify what an applicant says; that a degree is not relevant to a job advertised; or the check is too expensive, or too time-consuming; or, an employer might say โ€˜ I know we shouldโ€™. In Heddโ€™s experience, Chris Rea went on, when an employer has been โ€˜burnedโ€™ by an applicant with a fraudulent degree, it becomes a matter of absolutely having to check. As he added, if education is important enough for a graduate to invest time and money and effort into, itโ€™s important enough to check.

 

Diploma mills

He passed over to Michael Hilton, senior account director who reiterated that checking has got better in recent years; but, as he showed, AI is behind an โ€˜infrastructureโ€™ of โ€˜diploma millsโ€™ that affect every country. The UK gets targeted by such โ€˜millsโ€™ because of the reputation of UK universities, among the worldโ€™s leaders. Hilton related the example of a โ€˜millโ€™ brought to Heddโ€™s attention by a UK university that was having its documents, transcripts and certificates sold online. The website was selling diplomas from 150 countries (from Algeria to the UAE). He mentioned America, France, and Australia and New Zealand as some of the places whose institutionsโ€™ educational qualifications are easier to verify. For some regions, itโ€™s harder. Perhaps ten years ago, it was difficult for the fraudster to get the correct registrarโ€™s signature and watermark on a document; now, if someone has posted such a document online, AI can use that to produce a โ€˜like for likeโ€™ that can be difficult for the naked eye to verify. A โ€˜millโ€™ may claim itโ€™s only offering replacement that a buyer has lost; or that itโ€™s selling novelties from made-up unis. In reality itโ€™s selling qualifications for hundreds or thousands of dollars (and offering various ways to pay). Indeed, he showed how you can ask such a โ€˜millโ€™ for a 2:2 bachelorโ€™s degree in a particular subject, and the website gave the price of $488. Once bought, those documents can assist in an application for a visa, or job. While in Hiltonโ€™s example Hedd notified the sector body Universities UK, and the Department for Education, and the Office for Students, and the UK policeโ€™s Action Fraud opened a report, he admitted that the website will trade again under a different name, eventually. ย He summed up: โ€œIt isnโ€™t just a UK problem, itโ€™s a global problem.โ€

 

Solutions

Hilton handed over to Jake Shumilin, product manager at Hedd. He set out how technology can make verification easier (and fraud harder). Verification, he said, is still very manual and an email-based process. Hence moves towards โ€˜digitally portableโ€™ qualifications; and verification checks made against the same records that universities used, done in real time. He argued for authorised secure data exchange as the best defence against convincing AI-created fake documents โ€“ because AI canโ€™t fake whatโ€™s on an โ€˜authoritative sourceโ€™, a uni or sector bodyโ€™s database. ย This does require collaboration, between countries and between universities, employers and screeners, because as Shumilin said, student information systems, screening platforms and employersโ€™ workflows โ€˜all speak in slightly different languagesโ€™, and fraudsters exploit those gaps. Hence a trend towards consistent data standards; and methods of exchange; and a definition of what a verified credential means. Where verification is inconsistent, AI can step in he warned, and create โ€˜plausible imitationsโ€™. As he put it, a digital credential is only as trustworthy as the data in the system behind it. The prospect is of such a credential thatโ€™s portable (by the holder) and trustworthy. Australia and Canada have such things; the European union is piloting a digital credential โ€˜walletโ€™; however, the UK unfortunately does not have an equivalent.

 

 

Not only tech

As Shumilin went on, itโ€™s not only a question of tech. Universities, employers and screening agencies should not assume that the others are doing all thatโ€™s needed; he described the verification of qualifications as โ€˜a shared risk spaceโ€™, given that some 1.3m graduates enter the UK job market each year. Industry and professional bodies, he argued, should adopt minimum verification standards for their members. He pointed to a survey by the counter-fraud trade association Cifas, that found minorities admitted to lying about a degree to an employer; and to saying that exaggerating about your grades was reasonable.

 

About Hedd

Prospects Hedd offers a verification service, that checks degrees from a UK university. Itโ€™s part of Jisc, which offers cyber security and other IT services to UK higher education, such as a AI maturity toolkit, for Jisc members to look at their general AI use, responsibly. Visit www.jisc.ac.uk/innovation/artificial-intelligence. And www.hedd.ac.uk.

Related News

  • Education

    Cranfield professor

    by Mark Rowe

    Prof Mark Westwood, pictured, has been appointed the new Director of Theme forย Defenceย and Securityย at Cranfield University. He will takeย up his post on…

  • Education

    AUCSO Benchmarking Report

    by Mark Rowe

    The Association of University Chief Security Officers (AUCSO) has launched its Benchmarking Report 2025. It’s the first study of security operations across…