Employee Identity Verification: 7 Proven Best Practices for Employers

A hiring manager at a regional healthcare staffing firm recently shared this: she almost onboarded a contractor using a stolen Social Security number. The paperwork was flawless, the references checked out, and nothing felt off until the SSN trace came back tied to someone who had died three years earlier.

That’s the hiring environment employers are operating in right now. Identity fraud during hiring is no longer a rare edge case. Industry research shows only three in five companies run identity checks as part of pre-employment screening, and one in six employers who do screen say they’ve already caught identity fraud during the process. Everyone else is building their entire screening programme on an assumption rather than a verified fact.

That assumption is expensive. Here’s how to replace it with something solid.

What Employee Identity Verification Actually Is

Employee identity verification is the process of confirming that a candidate really is the person they claim to be, using data points like their Social Security number, government-issued ID, date of birth, and address history.

It’s the foundation on which everything else gets built. Before you can trust a criminal record search, an employment history check, or a credit report, you need confidence that the name, date of birth, and SSN on file actually belong to the person you’re hiring.

In practice, this typically begins with an SSN Address Trace and Validation Search. This search surfaces name variations and aliases, confirms address history, and flags inconsistencies that deserve a closer look before the hiring process moves forward. Depending on the provider, it can also include document authentication and biometric checks, comparing a live photo against a government-issued ID.

Then there’s the legal layer: confirming someone is eligible to work in the United States through Form I-9 and E-Verify. This isn’t optional. Federal law requires it, and getting it wrong carries real penalties.

Skip any of this, and every other check in your screening programme inherits the same blind spot.

What Skipping It Actually Costs

The risks here are specific and expensive. A criminal record search run against the wrong identity gives you false confidence, not protection. An employment history check tied to a fabricated name tells you nothing useful. A drug test administered to someone using a stolen SSN protects nobody.

HireRight’s 2025 Global Benchmark Report found that more than three-quarters of employers uncovered candidate discrepancies in the past year, with nearly two in five finding at least one discrepancy in every twenty candidates screened. Generative AI tools have made fabricated credentials and altered IDs harder to spot visually, and the FTC logged over a million identity theft reports last year alone.

Federal investigators have also documented organised schemes in which overseas operatives used fabricated identities, doctored documents, and AI-assisted video calls to land remote roles at hundreds of U.S. companies. Most employers will never face something that elaborate. But it’s a useful reminder that identity fraud in hiring has moved well beyond someone fudging a few dates on a resume.

Employee identity verification is one of the cheapest insurance policies in your entire hiring process. It costs far less than a single bad hire and takes far less time than untangling the fallout.

How It Fits Into an Advanced Background Check Programme

Employee identity verification isn’t a competing line item next to your criminal background check or employment verification. It’s what makes all of those searches trustworthy in the first place.

An advanced background check programme treats identity verification as the entry point, then layers in criminal record searches, civil records, employment and education verification, and professional licence checks on top of a confirmed identity.

A basic check runs a name through a database and hopes for the best. An advanced background check verifies who that name actually belongs to first, then builds a full picture from there. Employers who treat employee identity verification as the foundation end up with screening results they can actually rely on. A background check that can’t be trusted is worse than no check at all, because it creates false confidence instead of real protection.

7 Best Practices Every Employer Should Follow

1. Make it the first step, not an afterthought. Run employee identity verification before anything else in your screening order. If the identity behind a criminal search is wrong, a clean result doesn’t mean much.

2. Pair it with a complete advanced background check. Identity verification confirms who someone is. An advanced background check builds criminal history, employment verification, and education verification on top of that confirmed identity. Treat them as one decision, not two separate ones.

3. Work with a PBSA-accredited screening partner. Accreditation from the Professional Background Screening Association means a provider has been independently audited against strict standards for compliance, data security, and verification practices. It’s a meaningful signal when you’re trusting a partner with this part of your hiring process.

4. Stay inside FCRA and state compliance lines. Employee identity verification touches consumer reporting law the moment you pull an SSN or a background data source. Disclosure, authorisation, and adverse action requirements under the Fair Credit Reporting Act apply, and several states layer additional rules on top.

5. Verify the document, not just the data field. A name, date of birth, and SSN that match a database is a good start. Document-level checks confirming a government ID is genuine and unaltered catch what data-matching alone misses. This matters more every year as fraudulent documents become harder to spot visually.

6. Apply it across the full employee lifecycle. Identity verification isn’t a one-time event at the point of hire. Promotions, transfers into sensitive roles, and periodic re-verification for regulated positions all deserve a fresh look.

7. Layer in industry-specific checks where they matter most. Healthcare, transportation, financial services, and education all carry extra credentialing requirements on top of standard identity checks. A hospital verifying a nurse’s identity needs that confirmation before a license verification means anything.

Mistakes That Quietly Undermine the Process

Running this check once and never revisiting it is one of the most common errors. Roles change. Risk changes. An employee promoted into a position handling sensitive customer data deserves a fresh look, not a free pass based on a check from three years ago.

Treating a database match as the whole story is another. A name, SSN, and date of birth lining up in a system doesn’t rule out a stolen identity. Document-level verification catches what a clean data match can hide.

Then there’s the compliance trap: running employee identity verification without proper disclosure and authorisation under the FCRA. The verification itself is legitimate, but a flawed process around it creates real legal exposure.

And the mindset trap: treating identity verification as a cost centre rather than a risk management tool. Employers who see it that way tend to cut corners exactly where they can least afford to.

What to Look for in a Provider

You don’t need a local office to get this right. Most reputable providers run identity verification and advanced background check programmes nationwide through secure, cloud-based platforms, which typically means faster turnaround and broader database access than a strictly local shop.

What actually matters is whether your provider understands the compliance landscape you’re operating in: your state’s background check laws, your industry’s regulatory requirements, and the realities of hiring in your specific market. A construction company in Texas and a hospital network in California are screening against very different compliance backdrops, even if the underlying SSN trace and I-9 process look similar on paper.

When evaluating providers, look for PBSA accreditation, transparent FCRA compliance practices, and a track record in your specific industry. A screening partner that’s responsive and compliant beats one that’s simply nearby.

Employers Choice Screening is PBSA-accredited, integrates with leading ATS platforms, and pairs employee identity verification with advanced background check programmes built around your actual risk profile rather than a one-size-fits-all template.

FAQs

1. What is employee identity verification?

Confirming a candidate is genuinely who they claim to be using SSN traces, government ID checks, and address history before any other screening proceeds.

2. How is it different from a regular background check?

A regular check assumes the identity is accurate; employee identity verification confirms it first, so every search that follows is actually reliable.

3. Is it required by law?

Form I-9 and E-Verify are federally required; broader identity verification is considered best practice and is mandatory in several regulated industries.

4. How long does it take?

SSN trace results typically return within minutes to a few hours; bundled with a full advanced background check, total turnaround is usually one to three business days.

5. Does it require candidate consent?

Yes. FCRA requires written disclosure and authorisation before running any consumer report-based identity or background check.

6. What happens if a flag comes up?

It means a closer look is needed, not automatic disqualification. FCRA adverse action procedures apply if the finding ultimately affects a hiring decision.

7. Can it be run by existing employees?

Yes, and it often should be for promotions, role changes, or periodic compliance reviews in regulated sectors.

8. How much does it cost?

A standalone SSN trace is typically low-cost; a full package including I-9/E-Verify and document checks varies by volume. Request a quote for exact pricing.