Some high-level advice is listed here: https://ofac.treasury.gov/media/923131/download?inline

I run outsourcing agency, we work with US clients and have seen lots of fake applications (different degree of sophistication), so far we have either rejected them right away, or we were able to filter them during (remote) interviews.