Background Check Documents: What Employers Need to Verify

Background checks are one of the most consequential steps in any US hiring process, and the documents you collect — or fail to collect — determine both your legal exposure and the reliability of your screening results. This guide covers every document category employers routinely need, the federal and state rules that govern each one, and the procedural safeguards required to stay compliant in 2026.

What documents do employers need for a background check

Most employers combine documents from at least four categories: identity verification, employment eligibility, consent and disclosure forms, and role-specific credential records. The exact combination depends on the position, industry, and the states where the employer operates.

At a minimum, virtually every US employer must collect a government-issued photo ID and a completed Form I-9 before a new hire's third business day of work. Any employer using a third-party consumer reporting agency (CRA) — which includes most commercial background check vendors — must also collect a standalone written disclosure and signed authorization under the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq.

The single most common compliance failure is combining the FCRA disclosure with the job application or onboarding packet. Under FTC guidance on the FCRA, the disclosure must stand alone on a separate document before you obtain a consumer report.

Form I-9: the employment eligibility foundation

Form I-9, issued by U.S. Citizenship and Immigration Services (USCIS), is not optional. The Immigration and Nationality Act (INA), 8 U.S.C. § 1324a, requires every US employer to complete it for every new hire, regardless of the employer's size or the worker's citizenship status. Non-compliance carries civil penalties of up to $27,894 per unauthorized worker for knowing violations.

The employee completes Section 1 on or before the first day of paid work, attesting to their identity and immigration status. The employer completes Section 2 within three business days by physically examining original documents from the following lists.

Acceptable I-9 documents by list

An employee presents either one List A document, or one List B document plus one List C document. Employers must accept any document combination that appears genuine on its face. Requesting specific documents — for example, asking all employees of a particular nationality to present a Green Card — constitutes document abuse under 8 U.S.C. § 1324b, enforced by the Department of Justice.

E-Verify

E-Verify is an electronic system operated by USCIS that cross-checks Form I-9 data against Department of Homeland Security and Social Security Administration records. It is mandatory for federal contractors under FAR clause 52.222-54, and state-mandated for all employers in Arizona, Alabama, Mississippi, South Carolina, and several others. E-Verify supplements the I-9 — it does not replace physical document examination.

FCRA-governed background checks: required documentation

When an employer orders a consumer report (criminal history, credit history, employment verification, or any combination) through a third-party CRA, three documents are required before and after the report is obtained.

Before the report:

1. A standalone written disclosure informing the applicant that a consumer report may be obtained.
2. A separate written authorization signed by the applicant.

After the report, if adverse action is contemplated:

3. A pre-adverse action notice, together with a copy of the report and the FTC's "Summary of Your Rights Under the FCRA." The applicant must receive a reasonable period — typically five business days — to respond before a final adverse action notice is issued.

Skipping any of these steps exposes employers to statutory damages of $100–$1,000 per violation, plus punitive damages and attorneys' fees under 15 U.S.C. § 1681n. Class actions in this area are common and frequently settled in the tens of millions of dollars.

Criminal background check documents and 2026 law changes

Criminal background checks do not require the applicant to produce documents. Instead, the employer (or its CRA) searches court records using the applicant's full legal name, date of birth, and Social Security Number. However, the legal framework around how and when employers may use criminal records is shifting rapidly.

The EEOC's 2012 Enforcement Guidance on the Consideration of Arrest and Conviction Records requires an individualized assessment: employers must consider the nature of the crime, its relation to the job, and the time elapsed before making an adverse decision. Treating all criminal records as automatic disqualifiers violates Title VII.

Three significant state-level changes take effect in 2026:

• Washington State Fair Chance Act (effective July 1, 2026): All criminal history inquiries — including questions on applications — are prohibited until after a conditional offer of employment. Mandatory individualized assessment documentation must accompany any withdrawal of a conditional offer.
• Virginia Clean Slate Law (effective July 1, 2026): Certain misdemeanors are automatically sealed after seven years and certain felonies after ten years. Sealed records cannot appear on consumer reports, meaning employers will no longer see them even if they existed previously.
• DC Clean Slate Law (began January 2026): Covers arrest records without conviction and some misdemeanors after ten years. Employers operating in the District must ensure their CRAs exclude sealed records.

Employers with multi-state hiring programs should audit their criminal check procedures before July 2026 to confirm their CRA is suppressing records that are sealed or restricted under applicable state law.

Education and credential verification documents

The applicant typically provides diplomas, transcripts, or professional license numbers. The employer or its vendor then independently verifies these claims against authoritative sources.

For academic credentials, the National Student Clearinghouse (NSC) covers more than 3,600 US colleges and universities and is the standard source for degree verification. For foreign credentials, NACES-member evaluation services provide equivalency assessments.

For professional licenses — nursing, teaching, financial advising, law, engineering — each state maintains its own licensing board database. Many offer free public lookups. Employers in regulated sectors should verify the license number directly against the board's registry rather than relying solely on the applicant's copy of the certificate.

Our analysis of 65,000+ HR dossiers found a 6.1% fake diploma rate across all industries reviewed. Automated verification reduced processing time by 83% compared to manual checks, while achieving a 94.8% fraud detection recall rate. If your current process relies on reviewing applicant-supplied copies, that gap is where credential fraud enters.

CheckFile's document verification platform integrates directly with NSC and state registry sources, flagging discrepancies in real time so HR teams can act before an offer is finalized rather than after.

Credit history checks

Credit background checks are permitted under federal law but governed by the FCRA, and their use must be job-relevant. The EEOC and FTC joint guidance cautions against blanket credit check policies because of their potential disparate impact on protected classes. Positions with direct fiduciary responsibility — finance, treasury, senior accounting roles — typically justify credit review. Administrative or entry-level roles generally do not.

Several states and municipalities further restrict credit checks in employment: California, Colorado, Connecticut, Hawaii, Illinois, Maryland, Nevada, New York, Oregon, Vermont, and Washington all limit when credit history may be used. Employers must consult applicable state law before ordering credit reports for any position.

Drug testing

Drug testing is governed by a patchwork of state laws rather than a single federal statute. Federal contractors and safety-sensitive positions (DOT-regulated transportation, aviation, rail) are subject to mandatory federal drug testing programs. For all other employers, state law controls.

Cannabis testing is the fastest-changing area. California, New York, and New Jersey now prohibit most pre-employment cannabis testing for non-safety-sensitive roles. Other states permit it but prohibit adverse action based solely on a positive cannabis test if the employee holds a valid medical authorization. Employers should confirm their drug testing policy is current for every state in which they hire before each screening cycle.

Social Security Number trace

An SSN trace is typically the first step in any background check. It returns address history linked to the SSN provided, which determines which state and county court records the CRA should search. The trace itself is not a verification of identity — it is an investigative tool used to scope the criminal search. The SSN is collected as part of the FCRA authorization process.

Putting the documentation together: a practical checklist

Before making a conditional offer or initiating screening, verify you have the following in place:

• Standalone FCRA disclosure (separate document, not embedded in an application)
• Signed FCRA authorization from the applicant
• State-specific addenda where required (California, New York, and Minnesota have additional notice requirements)
• Form I-9 completion timeline tracked (day 1 for Section 1; day 3 for Section 2)
• E-Verify case initiated if required by contract or state law
• Applicant-provided SSN, full legal name, and date of birth for background search
• Credential documents collected (diplomas, license numbers) with independent verification planned
• Drug test authorization if applicable

If the background check returns information that may affect the hiring decision, do not skip the pre-adverse action step. Issue the pre-adverse notice, attach the report, wait a reasonable period, then issue a final adverse action notice if you proceed. This two-step process is mandatory under the FCRA and frequently litigated.

Privacy and data handling

The United States has no single federal equivalent to the GDPR. Privacy obligations come from the FCRA (for consumer reports), sectoral laws such as HIPAA (healthcare), state laws including the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), and others. Under CCPA, California employees and job applicants have the right to know what personal information is collected and to request its deletion under certain circumstances.

Employers should limit retention of background check documents to the period required by applicable law. EEOC regulations recommend retaining hiring records for at least one year from the date of the personnel action; federal contractors may face longer retention obligations.

For questions about data handling obligations in your sector, the FTC's business guidance on consumer reports is a practical starting point.

---

Frequently Asked Questions

How long does a background check take in the US?

Most standard background checks are completed within two to five business days when the applicant's information is accurate and the jurisdictions searched maintain electronic records. Multi-state criminal checks, federal court searches, or checks involving counties that still use paper records can extend that timeline to two weeks or longer. International employment verifications frequently take three to four weeks.

What documents does an applicant need to provide for a background check?

The applicant typically provides a government-issued photo ID, their Social Security Number, full legal name, date of birth, and addresses for the past seven years. For education or credential verification, the applicant may also provide diploma copies or professional license numbers. The employer's FCRA authorization form captures most of this information in a single step.

Can an employer run a background check without the applicant's consent?

No. Under the FCRA, a consumer report obtained from a CRA requires both a standalone written disclosure and the applicant's written authorization before the report may be ordered. Obtaining a consumer report without authorization is an FCRA violation regardless of what the report shows.

Do ban-the-box laws mean employers cannot ask about criminal history at all?

Ban-the-box laws delay — not prohibit — criminal history inquiries. Most require that employers wait until after a conditional offer before asking about or running criminal records. The laws vary significantly by state and municipality. Washington State's 2026 Fair Chance Act is among the broadest, requiring mandatory individualized assessments for any withdrawal of a conditional offer based on criminal history.

How should employers handle sealed records that appear in a background check report?

If a CRA reports a sealed or expunged record that should not appear under applicable state law, the employer should not rely on that record in the hiring decision and should notify the CRA of the inaccuracy. The applicant has the right to dispute the record directly with the CRA. Using a sealed record as a basis for adverse action can expose the employer to both FCRA liability and state civil rights claims.

---

Related reading: HR Document Verification: Diplomas and Right to Work — Right to Work Check: Employer Compliance Guide

CheckFile helps HR and compliance teams verify credentials, employment history, and identity documents at scale. Learn more about our verification platform or explore enterprise security standards and pricing.