For staffing agencies and small recruiting teams
Some applicants now use AI-written histories, borrowed identities and face-swap video. Drop in a resume and the contact details they gave you. You get the specific things worth confirming, the evidence behind each one, and the exact steps to check them.
The checker
The resume is read and checked on this device. With lookups on, only the domains and GitHub username listed below are sent to public services. Close the tab and it is gone.
How it works
Every flag comes with the evidence we saw and a concrete way to confirm it. We favor signals that are cheap to verify and fair to honest applicants.
Throwaway email domains, domains that do not exist or cannot receive mail, brand-new custom domains, phone numbers that cannot be read or are in the reserved fiction range, and contact details on the resume that do not match what you were given.
LinkedIn and GitHub links that are not real profile URLs, handles that clearly name someone else, missing GitHub accounts, and very new accounts behind senior claims. Plus a 30-second ownership check you can run live.
Unfilled template text, chatbot replies pasted in by accident, hidden instructions aimed at AI screeners, job descriptions copied word for word, and impossible timelines like more years of a tool than it has existed.
Text hidden in the PDF at an unreadable size, and author fields that name a different person. Read on your device.
Text that asks to be paid into someone else's account or in crypto, to ship a work laptop to someone else, or offers to keep it online for remote access. These follow published FBI and Microsoft guidance.
A video call with a hand wave in front of the face (with an accommodation path), live one-time codes to their email and phone, follow-ups only the real person can answer, and employer checks you do yourself.
These are unfair, unreliable, or both. We only compare the name you typed with the name on the resume, profile and file, for consistency.
Why no "AI-written" score: detectors misclassified over half of essays by non-native English writers as AI-generated in a Stanford study, and using AI to polish a resume is normal. Liang et al., Patterns, 2023.
Privacy, plainly
The resume is read and checked inside your browser. It is not uploaded to us and we do not store it. When you close or clear the tab, it is gone.
Pricing
Planned pricing, not on sale yet. The checker is free during early access. Join the waitlist to hear when paid plans open. No card needed.
$0
$19/month
$59/month
Questions
No. It does not search criminal, credit or court records. It runs in your browser, and LumeGrid never receives candidate data. It looks at what the candidate gave you plus the few public lookups listed above, and points out what to confirm with them. We built it so that it is not a background check service, but we are not your lawyer. If you need a background check, use an FCRA-compliant screening company with the candidate's written consent.
Do not. A flag means "ask about this." Typos, a friend's resume template, a second email address or a VoIP number all have honest explanations. Ask the candidate, run the verification step, and decide on what you confirm. Apply the same checks to every candidate for the same role.
No. It catches careless and document-level fakes. It cannot detect a careful stolen identity from documents alone, which is why every report ends with the same live verification steps. See our method and test results, including what it missed.
No. It does not analyse video. It gives you live checks you can run yourself: a visible background and a slow hand wave in front of the face (from FBI guidance), a side profile, and one-time codes to their email and phone.
Offer an equivalent check, such as an in-person meeting or a supervised ID check, when a candidate asks because of a disability or religious practice. Do not count the request against them.
The resume stays on your device. With public lookups on, your browser sends the email and portfolio domains to Cloudflare DNS, the email domain to its registry's RDAP server, and the GitHub username to GitHub. Nothing else leaves this device. Full privacy notice.