Pre-Employment Background Checks:A Complete Guide for Hiring Teams
Background checks are one of the most legally fraught parts of hiring. Done right, they protect your company and your team. Done wrong, they expose you to FCRA class actions, EEOC discrimination claims, and state-level fines. This guide covers the process from start to finish.
Most companies run background checks the way they learned from whoever ran them before. The same vendor, the same scope, the same consent form that legal approved four years ago. The problem is that background check law changes constantly. New Ban-the-Box cities, updated EEOC enforcement priorities, state-level credit check bans. What was defensible in 2021 may not be today.
According to SHRM research, more than 90% of employers conduct some form of background screening. Yet a significant portion of those same employers have consent forms, timing practices, or scope decisions that would not survive legal scrutiny. The risk is not theoretical: FCRA class actions against employers have resulted in settlements ranging from hundreds of thousands to tens of millions of dollars, with many targeting consent form defects alone.
This guide is for hiring managers and HR teams who want to run background checks correctly. It covers what to check, when to check it, how to stay compliant with federal and state law, and how to make the actual adverse action decision when something comes back. For the broader hiring context, see our hiring process guide and our post on reference checks, which should happen around the same time.
One thing worth saying upfront: background checks are not a substitute for good hiring. They catch what candidates falsify and surface risk. They do not predict performance. A clean background check on the wrong hire costs you just as much as a bad one. Pair them with structured interviews and pre-employment assessments to actually predict whether someone will succeed.
Scope
Six types of background checks and what each covers
Not every role needs every check. Scope your background screening to what is actually relevant to the position. Running a credit check on a software engineer is not just wasteful. It is discriminatory under EEOC guidance if you cannot show job relevance. Here is what each check covers and what it costs.
Felonies, misdemeanors, pending charges
Job titles, dates, reason for leaving
Degrees, dates, institutions attended
Payment history, outstanding debts, bankruptcies
Substance use panel (5 or 10 panel test)
Active license status, disciplinary actions
Criminal history checks are the most common and the most legally complex. You are not just looking for a yes/no on a criminal record. You need to assess whether the offense is relevant to the role, how much time has passed, and what evidence of rehabilitation exists. Blanket disqualification policies based on criminal history have been successfully challenged as discriminatory by the EEOC.
Employment verification catches resume fraud, which is more common than most hiring managers expect. HireRight's 2023 benchmark report found that 84% of employers uncovered a lie or misrepresentation on a resume through screening. Inflated titles, extended dates to hide gaps, and entirely fabricated employers are all common. Verifying employment history is worth doing on every professional hire.
Education verification is similar. Degree fraud happens at every level, including executive hires. When hiring for roles where credentials matter (engineering, medicine, law, finance), verify the degree directly with the institution, not just through what the candidate reports.
Credit checks belong only on roles with direct financial responsibility. CFO, controller, treasury, fraud investigation, money handling. Using them elsewhere creates legal exposure and does nothing useful for the hire.
The Process
How a compliant background check process works
Sequence matters here. The biggest legal mistakes happen because companies run checks at the wrong time or skip required steps. Follow this order exactly.
Conditional Offer
Extend offer contingent on background check results
Candidate Consent
Get written authorization on standalone FCRA form
Run the Check
Submit through accredited CRA, set scope by role
Review Results
Assess findings against job-relevant criteria only
Adverse Action (if any)
Pre-adverse notice, 5+ day waiting period, final notice
Step 1: Conditional offer first. Never run a background check before making a conditional offer of employment. The FCRA requires that checks are run in connection with employment decisions, and EEOC guidance on criminal history is clear that individualized assessment must come after the candidate is otherwise qualified. Running checks on all applicants before narrowing your pool is a class-action waiting to happen.
Step 2: Get written authorization. The FCRA requires a standalone disclosure and authorization before you run any consumer report. Standalone means a separate document, not a section buried in the job application. Many companies have paid eight-figure settlements because their consent was embedded in onboarding paperwork or contained extraneous language. If your consent form has not been reviewed by employment counsel in the last two years, get it reviewed.
Step 3: Choose your CRA carefully. Consumer Reporting Agencies (CRAs) are the vendors that run background checks. The big names include HireRight, Checkr, First Advantage, and Sterling. Under the FCRA, you need to use an accredited CRA and have a permissible purpose. Verify that any vendor you use maintains NAPBS accreditation and can provide a clear data chain of custody for their records.
Step 4: Assess job-relevant findings only. When something comes back, the question is not "does this person have a record?" but "is this specific finding relevant to this specific role?" A 10-year-old misdemeanor for someone applying to be a database engineer is different from the same record for someone who will have access to client financial accounts. Document your reasoning.
Step 5: The adverse action process is not optional. If you decide to withdraw the offer based on the background check, you must follow the FCRA two-step process. Pre-adverse notice comes first, with a copy of the report and the Summary of Rights, giving the candidate time to dispute errors. Then the waiting period (minimum five business days federally, longer in some states). Then the final adverse action letter. Skip any step and you are liable regardless of whether the underlying disqualification was justified.
Legal Compliance
FCRA, EEOC, and Ban-the-Box: what each one requires
Three bodies of law govern pre-employment background checks in the US. Understanding what each one covers and where they overlap is the difference between a defensible process and a lawsuit.
- Written disclosure on standalone document (not embedded in job application)
- Written candidate authorization before any check begins
- Pre-adverse action notice with copy of report and Summary of Rights
- Minimum 5-business-day waiting period before final adverse action
- Final adverse action letter if you proceed with rejection
- Seven-year lookback limit on most records (state laws vary)
- Running a check without a conditional offer in place
- Using credit checks for roles without financial responsibility
- Blanket policies rejecting all candidates with criminal records
- Ignoring Ban-the-Box laws in states where they apply
- Relying on database-only checks without court confirmation
- Storing background check reports beyond retention period
The Fair Credit Reporting Act (FCRA) governs the process: disclosures, authorization, and adverse action. It applies to any time you use a third-party CRA to run a background check. The FTC has enforcement authority and has brought actions against major employers for consent form defects and failure to follow adverse action procedures. The rules are specific enough that employment attorneys will tell you to treat any deviation from the letter of the law as a liability.
EEOC guidance on criminal history is about the substance of your decisions, not the process. The EEOC's 2012 guidance says that blanket exclusions based on criminal records can constitute disparate impact discrimination under Title VII because criminal records correlate with race and national origin. The guidance requires individualized assessment: nature of the offense, time elapsed, nature of the job. Practically, this means you need written criteria for what kinds of findings are disqualifying for which roles, and you need to document your assessment for each candidate.
Ban-the-Box laws are city and state laws that prohibit asking about criminal history on job applications or require you to wait until after a conditional offer before running criminal background checks. Over 35 states and 150+ cities have these laws as of 2026, and many apply to private employers, not just government contractors. SHRM maintains a state-by-state tracker that is worth bookmarking. If you hire in multiple states, your process needs to comply with the strictest applicable law.
Cost and Timing
What background checks cost and how long they take
Costs vary significantly by vendor, scope, and geography. County courthouse searches in rural jurisdictions take longer than urban ones. International verification adds time and cost for each country. These are representative ranges for US-based screening.
Basic
Criminal + SSN trace
Best for: Entry-level, hourly roles
$25-50
1-3 days
Standard
Most CommonCriminal + Employment + Education verification
Best for: Most professional roles
$60-120
3-7 days
Comprehensive
Standard + Credit + Drug + Professional license
Best for: Finance, healthcare, executive roles
$150-250
5-10 days
The standard package covering criminal history, employment verification, and education verification runs most companies $60 to $120 per hire. For a company making 50 hires a year, that is $3,000 to $6,000 annually. On the scale of a bad hire that costs 30-150% of the person's salary, background screening is cheap insurance.
The main variable in turnaround time is county courthouse searches. National database checks return in hours. County courthouse searches take 2-5 days in most jurisdictions, but can run longer for high-volume courts, courts that require manual record pulls, or courts in jurisdictions with backlogs. If you are hiring under time pressure, talk to your CRA about which counties are slow before you start and build extra time into your offer timeline accordingly.
International background checks add complexity. Employment verification in some countries requires notarized documents. Criminal records in others are not publicly accessible. For senior hires with significant international history, budget two to four weeks and use a CRA with in-country investigators rather than database-only solutions.
Decision Making
How to assess a background check finding that concerns you
Something came back on the report. Now what? The instinct is to withdraw the offer immediately, but that is exactly the wrong approach. The EEOC requires individualized assessment, and beyond legal compliance, acting impulsively here means you will lose good candidates over records that have no bearing on job performance.
My view is that the right framework has four questions. First: is the offense directly related to the job duties? A fraud conviction for someone handling money is relevant. The same conviction for someone writing code is much harder to justify as disqualifying. Second: how much time has passed? Courts have recognized that time is a meaningful factor in rehabilitation. Five years of clean behavior after an offense is different from five months. Third: what has the person done since? Employment history, education, community involvement, and character references all speak to where someone is now rather than where they were then. Fourth: what do your written criteria say?
That last question matters because consistency is how you avoid discrimination claims. If you rescind one candidate's offer for a DUI from 2018 but advance another candidate with a similar record, you need to explain the difference. Written criteria for which offenses are disqualifying for which role types, applied consistently, are your defense.
Document everything. When you make an adverse action decision, write down the specific finding, the specific job duties that make it relevant, and the specific EEOC factors you considered. If the candidate challenges the decision, that documentation is your protection.
For resume fraud discoveries, the analysis is simpler. If a candidate falsified employment history, education credentials, or professional licenses, the concern is not the specific lie but what it tells you about their character. Most companies treat any material resume fraud as disqualifying regardless of the role.
Vendor Selection
Choosing the right background check provider
The background check vendor market is consolidated around a few large players: HireRight, Checkr, First Advantage, Sterling, and ADP Screening. There are also dozens of smaller regional providers. Choosing between them involves more than comparing price lists.
NAPBS accreditation
The National Association of Professional Background Screeners accredits CRAs that meet standards for accuracy, compliance, and operational quality. Accreditation is not legally required, but it is a meaningful signal that the vendor takes data quality seriously. Non-accredited providers are more likely to return incomplete or outdated records.
Data sources and accuracy
Ask vendors specifically: what is your process when a national database returns a hit? Do you verify against county courthouse records before reporting? A vendor that reports raw database hits without courthouse confirmation is selling you speed at the cost of accuracy. Database-only searches have known error rates and can return false positives.
FCRA compliance support
Your vendor should provide compliant consent forms, adverse action notices, and Summary of Rights documents. Many CRAs now have FCRA compliance tooling built into their platforms. This does not replace legal review, but it reduces your operational burden and the chance of procedural errors.
Integration with your ATS
Background check vendors that integrate with your applicant tracking system reduce manual work and keep the audit trail in one place. If you are running checks across dozens of hires a month, manual coordination adds significant overhead. Check what integrations your current ATS supports before choosing a vendor.
Geographic coverage
If you hire internationally or across many US jurisdictions, verify that your vendor has genuine coverage in those areas. Some vendors resell international records from third parties with limited accuracy or legal standing. Ask specifically about their process for the countries and states where you hire most.
Building Your Policy
Writing a background check policy that holds up
Many companies do not have a written background check policy. They have a practice: someone calls a vendor, results come in, someone decides. That works until it does not, at which point there is no documentation showing consistent, non-discriminatory decision making.
A written policy should specify which checks are required for which role types, the disqualifying criteria for each role category (applying the job-relevance test), the adverse action process your team follows, who has authority to make adverse action decisions, how long you retain background check records, and how you handle candidates who dispute findings.
The disqualifying criteria section is where most companies need the most work. The honest answer is that these criteria should be built collaboratively between HR, the hiring manager community, and legal counsel. Legal alone will tell you to disqualify everyone. Hiring managers alone will tell you to ignore everything. The right answer is somewhere in between, based on what each role actually requires and what risks are genuine versus theoretical.
Review the policy annually or any time Ban-the-Box laws change in your hiring states. Employment law in this area moves faster than most HR teams track. Pair your background check policy review with a review of your resume screening criteria to make sure your overall screening approach is consistent and defensible.
Frequently Asked Questions
When should you run a background check in the hiring process?
After you extend a conditional offer of employment, not before. Running checks on all applicants before narrowing your pool is wasteful and creates legal exposure. The conditional offer approach also aligns with EEOC guidance, which requires individualized assessment rather than blanket pre-screening against criminal records.
Can you rescind a job offer based on a background check?
Yes, but you must follow the FCRA adverse action process. That means sending a pre-adverse action notice with a copy of the report and the Summary of Rights, waiting at least five business days for the candidate to dispute any errors, and then sending a final adverse action letter if you proceed. Skipping any of these steps exposes you to class-action litigation.
How far back do background checks go?
Federal FCRA limits most negative information to seven years for most positions. Criminal convictions can appear beyond seven years for roles with salaries over $75,000. Some states are stricter: California, New York, and Massachusetts have their own lookback limits that override federal law. Always check state-specific rules for where the candidate will work.
Are you allowed to use credit checks in hiring?
Only for roles where financial responsibility is a genuine job requirement: CFO, controller, investment advisor, or positions with direct access to cash or financial systems. Using credit checks for unrelated roles risks EEOC claims because credit history correlates with race and national origin. Eleven states restrict employer credit checks entirely.
What is Ban-the-Box and does it apply to you?
Ban-the-Box laws prohibit asking about criminal history on job applications. As of 2026, over 35 states and 150+ cities have these laws. Many require you to wait until after a conditional offer to run criminal checks. Non-compliance fines range from a few hundred to tens of thousands of dollars per violation. Check your state and city laws before setting your policy.
Should you use a national database or county-level search?
Both. National criminal databases aggregate data from across the country and surface records quickly, but they are incomplete and sometimes outdated. County courthouse searches are slower but authoritative for that jurisdiction. The best practice is to use a national database as a pointer, then confirm any hits with direct county courthouse searches before making a decision.
Resources & Further Reading
Related Guides
- How to Conduct Reference Checks That Actually Tell You Something
Reference checks and background checks work together
- Pre-Employment Testing: A Guide to Skills Assessments
Skills tests predict performance; background checks assess risk
- Hiring Process Steps: End-to-End Guide for Teams
Where background checks fit in your full hiring workflow
- Candidate Experience: How to Fix Your Hiring Funnel's Biggest Leak
Background check delays hurt candidate experience more than most teams realize
External Sources
- EEOC Guidance on Criminal Records in Employment
The definitive guidance on individualized assessment requirements
- FTC: Background Checks for Businesses
FCRA requirements explained by the enforcement agency
- SHRM Ban-the-Box State Law Tracker
Current state and city Ban-the-Box law status
- Bureau of Labor Statistics Occupational Outlook
Role-specific context for evaluating job-relevance of background findings
Streamline your entire hiring process
Prepzo connects background screening, structured interviews, and candidate tracking in one place so nothing falls through the cracks between offer and start date.
Try Prepzo free