Resume fraud is an epidemic. Studies consistently show that 70% of job applicants misrepresent themselves on their CVs. Not little white lies — significant distortions. Inflated job titles. Extended employment dates to cover gaps. Degrees from universities they barely attended. Entire employment histories fabricated from scratch.
As an employer, you have likely felt the sting. The candidate who interviewed brilliantly but turned out to be incompetent. The "senior engineer" who could not pass a basic coding test. The "MBA graduate" whose degree came from a diploma mill.
The traditional CV is broken. It is a self-reported document with no verification body, no chain of custody, and no cryptographic integrity. Anyone can write anything on a PDF. Most employers lack the time and resources to verify every claim. So they take their chances and hope for the best.
There is a better way. It is called the .vpcg file format, and it is the most important advancement in candidate verification since the invention of the background check.
What Is a .vpcg File?
.vpcg stands for Verified Professional Credential Graph. It is a digital file format designed specifically for structured, verifiable professional data. Think of it as the difference between a handwritten IOU and a bank-issued certified cheque. Both are promises, but only one is backed by a verifiable system.
Every .vpcg file contains a candidate's complete professional profile — work history, education, certifications, skills, portfolio links, and references — but unlike a PDF resume, every claim in a .vpcg file carries a cryptographic signature. This signature, embedded in the file's header as #VPCG-SIG#, acts as a tamper-proof seal.
If anyone — the candidate, an employer, a third party — alters even a single character of the verified data, the signature breaks. The file becomes invalid. The alteration is immediately detectable.
Why PDF and DOCX Cannot Compete
PDF and DOCX were designed for document layout, not data integrity. Here is what they lack and what .vpcg provides natively:
Cryptographic verification: A PDF can be edited by anyone with a PDF editor. There is no audit trail, no signature check, no way to know if the contents have been altered. A .vpcg file uses a signed hash chain that makes any tampering instantly evident.
Structured data: A PDF is a visual representation. When you receive a PDF resume, your applicant tracking system has to parse it — and parsing is notoriously unreliable. Dates get garbled. Section headers get missed. Skills get dumped into "other" buckets. A .vpcg file is structured XML with a defined schema. Every field maps cleanly to your ATS. No parsing errors. No data loss.
Verification chain: When a candidate submits a PDF resume, the employer has no way to know which claims have been verified and which are self-reported. A .vpcg file encodes the verification status of every field. Verified claims carry a green checkmark at the data level. Unverified claims are flagged. Employers know instantly what has been checked and what has not.
The #VPCG-SIG# Protocol
The heart of the .vpcg system is the VPCG-SIG protocol. When a candidate's credentials are verified — either by RemoteTask Online or by an authorised verification partner — the verifier generates a cryptographic signature that is embedded in the file. This signature covers the entire verified dataset.
When an employer receives the file, their validation tool reads the signature and checks it against the current content. If the content matches the signature, the file is valid. If there is any mismatch, the file has been tampered with.
The protocol uses industry-standard hashing algorithms. There is no proprietary magic here — just solid, well-understood cryptography applied to a problem that has needed solving for decades.
Why This Matters for Employers
If you are hiring, the .vpcg format saves you three things you cannot afford to waste: time, money, and trust.
Time: The average background check takes three to five business days. A .vpcg verification takes seconds. You upload the file, the system validates the signature, and you instantly know whether the candidate's claims have been independently verified.
Money: A bad hire costs, on average, 30% of the employee's annual salary. Multiply that across a team of twenty, and you are looking at hundreds of thousands of dollars in wasted recruitment costs, training expenses, and lost productivity. .vpcg verification eliminates the most common cause of bad hires: credential fraud.
Trust: When you hire a candidate with a verified .vpcg file, you are not taking their word for it. You are relying on an independent verification chain that can be audited at any time. That peace of mind is invaluable.
The Future Is Verified
We believe that within five years, the PDF resume will be as obsolete as the floppy disk. The market is already moving in this direction. Large employers are starting to require structured, verifiable credential data from all applicants. Industry consortiums are forming around verification standards.
RemoteTask Online is proud to be at the forefront of this movement. Our proprietary VPCG generator and validator tools are available to all candidates and clients, and we are working on open-sourcing the specification so that the entire industry can benefit.
The CV is dead. Long live the .vpcg file.
Want to learn more about how .vpcg verification protects your hiring process? Talk to our team.