The Importance of Background Checks: 25+ Types, Process & Global Rules (2026)

What if the senior hire you just promoted fabricated half their resume?

It happens more than employers realize. A 2023 ResumeLab survey found 70% of workers have lied on a resume; ResumeBuilder puts it at 24%, with 64% of those saying it helped them advance. First Advantage's 2022 report found discrepancies in 11.2% of employment claims, even when candidates knew a check was coming.

So 95% of US employers now screen before a final offer. But "run a background check" means something different in every market. The US searches county by county. India has no national criminal database, so screening runs through district courts and local police. Germany bars conviction questions unless the role requires it. Brazil's labour courts have awarded damages against employers who screened roles that didn't justify it.

This guide covers the check types used worldwide, what each reveals, how the rules shift by country, and how to screen without creating the exposure you were avoiding.

What is a background check?

A background check is the process employers use to verify a candidate's identity, qualifications, and history before finalising employment.

Depending on the market, it draws from government identity databases, court systems, police records, credit bureaus, provident fund and social security records, universities, previous employers, and international sanctions lists. Depth depends on the role, the industry, and, more than most employers expect, the country.

Most employers run checks after a conditional offer but before the start date. Increasingly, screening extends across the whole employment lifecycle rather than stopping at hire.

Two terms are worth separating early. Background check, or BGV (background verification), is the umbrella term used interchangeably across most markets. Pre-employment screening refers specifically to checks run between conditional offer and start date. See our glossary entry on background verification for a quick reference.

Why are background checks important for employers?

We have supported global onboarding for 300+ companies, and a missed verification is one of the most common reasons an otherwise solid hire unravels inside the first 90 days.

Background checks protect against seven distinct categories of risk, each large enough to justify the cost on its own.

Catching resume fraud and credential inflation

The First Advantage discrepancy rates above are the baseline. Real cases go further. Coverage in HR Dive and the University of North Carolina Policy Office documents cases such as former Walmart spokesperson David Tovar, who resigned after a due-diligence check uncovered a fake college degree he had used for nearly two decades.

In markets like India, the specific fraud patterns differ but are no less common: fake experience letters from shell consultancies, inflated designations, degrees from unaccredited institutions, and overlapping employment during claimed notice periods. To know more, read our guide on the most common hiring mistakes.

Avoiding negligent hiring and negligent retention liability

Employers can be held directly liable when an employee causes harm and reasonable care was not taken during hiring. A related doctrine, negligent retention, applies when an employer learns of a danger after hiring and keeps the person in the same role anyway.

The doctrine is strongest in the US, where damages routinely run into six and seven figures, but analogous duty-of-care exposure exists in the UK, Australia, Canada, and India. A documented paper trail of due diligence is the cleanest defence against either claim. See related context in our guide to co-employment risks.

Workplace safety: violence, theft, and fraud

Criminal and court record checks filter applicants whose history suggests a risk of workplace violence, theft, or fraud. This matters most in healthcare, financial services, transportation, education, and any role with access to vulnerable people, cash, or sensitive data.

The right screen at the right depth keeps the work environment safe for everyone already inside it.

Protecting brand and reputation

A single high-profile bad hire can undo years of brand building. Background checks are a quiet form of brand protection that pays for itself many times over, and catching a problematic profile before the offer keeps your company off the wrong news cycle.

Regulatory and licensing compliance

In regulated sectors, screening is not optional risk management. It is a licence condition. UK financial services firms operate under FCA fit-and-proper requirements. Indian BFSI and fintech employers screen against RBI and SEBI expectations. US healthcare employers must check the federal OIG exclusion list or lose Medicare and Medicaid reimbursement eligibility.

Data protection compliance

This is the newer risk, and it cuts the other way: the check itself is now a regulated activity. GDPR, India's DPDP Act, Singapore's PDPA, and Brazil's LGPD all govern how you collect candidate data, what you may look at, how long you keep it, and what consent must say. Nearly 47% of employers say they are uncertain their current process complies with all applicable laws. See our glossary entry on data protection policy for the internal governance side.

Reducing the cost of bad hires

SHRM reports the total cost of a bad hire can reach $240,000 in extreme cases, while the US Department of Labor estimates a bad hire costs up to 30% of first-year earnings. CareerBuilder puts the average direct loss at $14,900 to $17,000, and notes that 74% of employers admit to at least one.

A few hundred dollars of upfront screening is the cheapest insurance you will ever buy. See our cost-per-hire breakdown for the full economics.

Types of background checks: the complete list

Most employers know five or six check types. There are more than twenty-five in active commercial use, and the ones you have never heard of are often the ones that catch the problem.

Here is the full landscape, grouped by what each category is actually trying to establish.

Identity and documentation checks

These establish that the person is who they say they are. Every other check in the program is anchored to identity, so getting this wrong makes every downstream report unreliable.

Address verification barely registers in US screening but is a core deliverable in India and much of Southeast Asia, where it runs either as a physical field visit by a verifier or digitally against utility, bank, or telecom records. It surfaces candidates who do not live where they claim, which is a genuine fraud signal in high-volume hiring.

Employment history checks

These establish that the candidate did the jobs they claim, when and where they claim.

A resume with clean, contiguous dates is easy to fake. A gap check reconstructs the timeline from independent records rather than accepting the candidate's own account of it. In India, cross-referencing UAN contribution history against a claimed timeline resolves most of this in a single pull. For how this fits the wider process, read our full-cycle recruiting guide.

Education and credential checks

These establish that the qualifications are real and were actually earned.

Verification routes vary sharply by market. India increasingly uses the National Academic Depository and DigiLocker. The US relies heavily on the National Student Clearinghouse. The UK uses HEDD. Many other markets still require direct institutional outreach, which is where turnaround goes from days to weeks. See our employee onboarding glossary entry for how this fits the broader workflow.

Criminal, court, and legal record checks

These establish whether there is a legal history relevant to the role. This is where jurisdiction matters most, because the same check is routine in one country and unlawful in another.

The single biggest misconception in global screening is that a national criminal check exists everywhere. It does not. Several countries make criminal records available only to the individual, not to an employer, meaning the compliant route is asking the candidate to obtain and produce their own certificate. In the US, the National Sex Offender Public Website is a standard supplementary source.

Financial and integrity checks

These establish financial exposure and conflicts of interest.

Health, safety, and role-specific checks

Digital and ongoing checks

Which checks does your role actually need?

The right check for the wrong role is still the wrong check, so always match scope to actual responsibilities.

For how screening scope connects to headcount planning, see our strategic workforce planning guide.

Background checks by country: what is possible and what is restricted

Screening scope is set by local law, not by your global policy. This is the section most global hiring teams get wrong.

United States

Governed by the Fair Credit Reporting Act, EEOC guidance, and a growing layer of state and city law. Criminal records are searched county by county, at state level, and federally, since no unified national database exists.

Available checks include identity and SSN trace, criminal, employment, education, credit (restricted), motor vehicle records, and drug screening.

Key constraints: standalone written disclosure and authorisation are required, the two-step adverse action process is strict, ban-the-box laws apply in 37+ states and 150+ cities, credit-check use is restricted in California, New York, Illinois, Colorado, and others, and salary history questions are banned in many jurisdictions.

Lookback: civil records, tax liens, bankruptcies, and credit history are capped at seven years federally. Convictions are reportable indefinitely under federal law but capped at seven years in California, New York, Massachusetts, and others.

United Kingdom

Governed by the DBS framework, the Rehabilitation of Offenders Act 1974, UK GDPR, and the Data Protection Act 2018.

Criminal records come in three tiers. Basic covers unspent convictions and is available for any role. Standard covers spent and unspent convictions but only for eligible roles. Enhanced adds police intelligence and, optionally, barred lists. Scotland uses Disclosure Scotland and the PVG scheme, and Northern Ireland uses AccessNI.

A Right to Work check is mandatory for every hire, via share code or document check. For security and financial services roles, BS 7858 is the sector standard, requiring a full five-year employment history reconstruction with no unexplained gaps.

The key constraint is that requesting a higher-level DBS check than the role legally warrants is itself a breach.

European Union

Governed by GDPR, where criminal conviction data sits under Article 10 and can only be processed under official authority or where specifically authorised by national law. In practice this limits criminal checks to roles where national legislation explicitly permits them. Blanket criminal screening across a European workforce is not lawful.

In Germany, employers may ask about criminal history only where the role genuinely requires it, the Fuhrungszeugnis is obtained by the candidate, the BDSG imposes strict limits on employee data processing, and works council consultation may be required.

In France, Labour Code Article L.1221-6 requires that any information sought have a direct and necessary link to the job. Criminal checks are limited to specific regulated professions, and the CNIL actively sanctions overreach, including social media screening.

Across the EU, identity, employment, education, and reference checks are generally fine. Credit and criminal checks are the constrained ones.

India

Governed by the Digital Personal Data Protection (DPDP) Act 2023 and the DPDP Rules 2025, with the Data Protection Board now operational and compliance phasing in through 2027.

There is no single national criminal database. Screening runs through district and high court record searches, increasingly via eCourts data, plus police verification at the local station, which can take two to four weeks.

Distinctive checks include address verification (physical or digital), EPFO and UAN employment history, PAN and Aadhaar-based identity verification, DIN and MCA directorship checks, and industry fraud-database checks in BFSI and IT. UAN records are the strongest employment and dual-employment evidence available in any market, because they reflect actual employer contributions that the employee cannot alter.

The key constraint is consent. It must be free, specific, informed, unambiguous, and unbundled, so a clause buried in the offer letter no longer works. Notice must name the data, the purpose, and the retention period, and candidate data must be deleted once the hiring purpose is served. Private employers must use the offline or paperless Aadhaar e-KYC route as an approved Offline Verification Seeking Entity rather than collecting raw Aadhaar numbers.

Singapore

Governed by the Personal Data Protection Act, overseen by the PDPC, alongside TAFEP fair-employment guidelines. Criminal records are not publicly accessible to employers, and the Certificate of Clearance is obtained by the individual in limited circumstances.

The PDPC restricts collection of full NRIC numbers, so collect only what is necessary and justifiable. Identity, employment, education, reference, work pass status, and credit checks for financial roles are all available.

Australia

Criminal records are checked through a National Police Check via ACIC-accredited providers. Role-specific requirements include state-based Working with Children Checks and VEVO for work rights. Governed by the Privacy Act 1988, alongside spent convictions schemes that vary by state.

Canada

Criminal records are checked via RCMP and CPIC through local police, with a Vulnerable Sector Check for roles involving children or vulnerable adults. Governed by PIPEDA plus provincial privacy law in Alberta, British Columbia, and Quebec. Credit checks are restricted in several provinces, and human rights codes limit the use of criminal history.

Brazil

Governed by the LGPD plus labour court precedent. Brazilian labour courts have consistently held that criminal background checks are unlawful for most roles and have awarded moral damages against employers who ran them without role-specific justification. They are permitted only where the role genuinely warrants it, such as cash handling, security, or in-home work. Identity via CPF, employment, education, and reference checks remain available.

Middle East and other markets

In the UAE, a Good Conduct Certificate is standard, alongside MOFA attestation of educational certificates, a distinct requirement that catches employers by surprise. In the Philippines, NBI Clearance is the standard criminal check. Japan has strong privacy norms and very limited employer access to criminal records. Mexico has no employer-accessible national criminal database, and the carta de no antecedentes penales is obtained by the individual.

For the wider picture on entering new markets, read our global expansion strategy guide.

What background checks do not show

Standard background checks generally do not reveal:

• Sealed records, since court-sealed cases are not visible to employers
• Expunged convictions, which are legally erased and do not appear
• Juvenile records, protected in most jurisdictions
• Military records, which require a separate, specifically requested check
• Arrests without conviction, restricted or prohibited in many jurisdictions
• Spent convictions, which fall off UK Basic checks under rehabilitation rules
• Minor infractions such as parking tickets and minor civil matters
• Records from countries the candidate lived in but you did not search, which is the most common real-world blind spot

Anyone hiring for a sensitive role should know exactly where the official report stops. See our glossary entry on disciplinary action for how to handle the grey areas internally.

How long does a background check take?

Timelines vary far more by country than by check type.

Set candidate expectations at five business days for domestic hires and two to three weeks for cross-border ones. The single biggest driver of delay is a candidate who submits incomplete details, not the check itself. To see this in practice, read our EOR onboarding best practices and our remote team management guide.

How to run a background check step by step

Each stage exists for a specific compliance or risk reason, and skipping any of them creates legal exposure.

1. Define scope by role, not by habit. Build a screening matrix mapping role families to check packages. A blanket policy where everyone gets everything is expensive and, in the EU and Brazil, unlawful.
2. Make a conditional offer first. Running checks before an offer is legally riskier in the US and out of step with best practice almost everywhere. See our employment contracts guide for what the offer should include.
3. Obtain specific, informed, unbundled consent. This is now the highest-frequency compliance failure globally. The FCRA requires standalone written disclosure and authorisation. The DPDP Act requires itemised consent naming the data, the purpose, and retention. GDPR requires a lawful basis, and for employees consent is often not the right one, because it is not considered freely given in an employment relationship.
4. Verify identity first. Every downstream check is only as good as the identity it is anchored to. See our glossary on what defines an employee globally.
5. Verify employment history. Contact previous employers or use a verification service to confirm titles, dates, responsibilities, and reasons for leaving. In India, cross-check against UAN records.
6. Verify education and credentials. Confirm degrees, certifications, and licences with the issuing institutions or verified third-party services. To see how this integrates with hiring software, read our talent acquisition software guide.
7. Run criminal and court record checks through in-country networks rather than database-only searches, following the local legal route for that market.
8. Conduct structured reference checks using the same questions and criteria for every candidate, and document the conversations.
9. Apply individualised assessment to any adverse finding. Consider the nature of the offence, time elapsed, and relevance to the role. This is explicit EEOC guidance in the US and good practice everywhere. See our guide to employee classification for related compliance context.
10. Follow the adverse action process. In the US this means a pre-adverse action notice with a copy of the report and a summary of rights, a reasonable dispute window of typically five business days, and then a final adverse action notice. Skipping either step is one of the most common sources of class-action exposure. Give candidates a right of reply in every market, whether or not local law requires it.
11. Set retention and deletion rules. Under the DPDP Act, GDPR, and LGPD, holding candidate data indefinitely is itself a violation. Delete once the hiring purpose is served. To know more, read our EOR data security guide.

For the full compliance picture, see our HR legal compliance best practices.

Common red flags on a background check

Common findings include:

• Criminal or court records directly relevant to the role
• Employment dates that do not reconcile with independent records such as provident fund, social security, or tax filings
• Unexplained gaps the candidate cannot account for
• Overlapping concurrent employment
• Fabricated or unverifiable degrees, or degrees from unaccredited institutions
• Experience letters from companies with no verifiable existence
• Undisclosed directorships or competing business interests
• Sanctions, politically exposed person, or watchlist hits
• Multiple traffic violations for driving roles
• Negative or evasive references from direct supervisors
• An address that cannot be verified

Every flag deserves an individualised assessment before action. A discrepancy is a question to ask, not automatically a reason to withdraw an offer. See our contractor onboarding guide for how to handle borderline calls during onboarding.

Are background checks a one-time process?

Increasingly, no.

People's circumstances change after hire. Finance, healthcare, transportation, and government contracting roles routinely require periodic rescreening. Many employers now run light annual rescreens with deeper checks every two to five years, or on promotion into a sensitive role.

Continuous monitoring against criminal, sanctions, and licence databases is becoming the standard for high-trust roles. Each rescreen still requires its own consent and its own lawful basis, because a consent signed at hire does not cover a check run three years later. To know more, read our guide on EOR risk management.

How to choose a background screening provider

Ten criteria that matter:

1. In-country verification networks, not database-only searches. Database-only criminal checks miss recent and local records and create real legal exposure.
2. Coverage in the countries you actually hire in, since global coverage claims often thin out fast outside the US and UK.
3. Documented compliance workflows per jurisdiction, covering FCRA adverse action, DPDP consent and retention, and GDPR lawful basis.
4. Accreditation such as PBSA membership, plus local equivalents where they exist.
5. ATS and HRIS integrations including Greenhouse, Workday, Lever, BambooHR, and Darwinbox.
6. Configurable packages by role and country, not one global bundle.
7. Data security credentials including SOC 2 Type II and ISO 27001, with demonstrable cross-border transfer controls.
8. Transparent SLAs with visibility into what is pending and why.
9. Candidate experience and dispute support, because screening is part of your offer experience.
10. All-inclusive pricing with no hidden per-check fees.

Pick the provider that matches your risk profile and your hiring map, not the cheapest one. For built-in screening alongside employer of record onboarding, see our pricing page and our EOR vendor selection guide.

Background checks for global and remote hires

Across the 2,000+ employees we have onboarded for 300+ growth-stage and enterprise clients, cross-border hiring is where employers struggle most with background checks.

The recurring problems:

• Criminal records are not available to private parties in many jurisdictions, so the compliant route is candidate-obtained certificates
• Education records need in-country networks, since most institutions will not respond to a foreign employer
• Employment verification stalls where prior employers are small, informal, or closed
• Consent, transfer, and retention rules differ sharply from FCRA norms, and in the EU consent is frequently the wrong legal basis
• Data transfer restrictions mean reports cannot always move freely back to a headquarters jurisdiction
• Timeline expectations set on US norms break down in markets where police verification takes a month

A specialist partner with in-country presence removes friction that otherwise scales badly. To know more, read our guide on paying international employees.

How Wisemonk helps with background checks

Wisemonk is an India-native EOR. We help companies hire, manage, pay, and onboard global teams through a full-stack platform covering employer of record services, contractor management, managed payroll, and freelancer payments.

Trusted by 300+ global companies to manage 2,000+ employees and over $20M in monthly payroll, we run background verification for every hire we onboard: identity and address verification, education and employment validation, EPFO and UAN employment history, court record and police verification, sanctions screening, and credential verification, with consent and retention workflows built to DPDP, GDPR, and FCRA standards.

Our local teams run verifications directly with universities, employers, and government agencies, so reports are accurate and defensible rather than database-only.

Wisemonk holds a 4.8/5 rating on G2, and pricing starts at $99 per employee per month with no separate background check fees on most packages. You can also see our reviews from clients across startups, SMBs and scaleups, enterprises, and software agencies.

We are one of the strongest EOR providers in India. We know Indian employment law, payroll, and statutory compliance because it is what we work on every day, and we are planning our expansion into future markets such as the US and the UK.