How would they fake it? Their own identity claims would need to be cryptographically signed.
Sign up an account with a randomly generated names to be the boss. Sign up other accounts with randomly generated names to be the employees. Have the boss vouch the employees work for him.