Background checks vs identity verification: what each one proves

Each of the three checks answers its own question.

• A background check asks: what does the record say about the person with these details? It looks at history such as work, education and criminal records1.
• Identity verification asks: is the person in front of us the genuine owner of the identity they are presenting? NIST describes this step as confirming that the applicant is the genuine owner of the presented evidence2.
• Form I-9 asks: is this new hire who they say they are, and are they authorized to work in the United States? USCIS describes the form as used to verify the identity and employment authorization of individuals hired for employment in the United States3.

None of them replaces the others. The sections below explain what each does well, where the gaps are, and how to run them in one process without collecting more data than you need.

A background check gives an employer information it could not easily gather alone. The joint guidance from the EEOC and the FTC lists the kinds of background an employer may look at, including work history, education, criminal record, financial history, medical history and use of social media1. For many roles, especially those involving money, vulnerable people or regulated work, that history is exactly what the employer needs to know.

Background checks also come with well established protections for applicants. When an employer uses a company in the business of compiling background information, the Fair Credit Reporting Act applies, and the FTC sets out the steps1:

1. Tell the applicant you may use the information, in a written notice in a stand-alone format.
2. Get the applicant's written permission to do the background check.
3. Before taking adverse action, give the applicant a copy of the report and a summary of their rights under the FCRA.
4. After the decision, tell the applicant they were rejected because of information in the report and that they have a right to dispute its accuracy.

The same guidance reminds employers to apply the same standards to everyone, regardless of race, national origin, color, sex and other protected characteristics1. Those rules make background checks a mature, accountable part of hiring.

Partly. A background check confirms that a set of personal details, such as a name, date of birth and identification number, belongs to a real person, and it reports the history attached to those details. What it does not usually establish is that the applicant on the video call is that person.

That difference matters when someone applies with a stolen identity. The details are real, so they resolve to a real person, and that person may have a clean record and a genuine work history. In 2022 the FBI reported complaints about the use of stolen personal information to apply for remote positions, alongside voice spoofing and possible deepfakes during online interviews4. The same warning notes that pre-employment background checks discovered that information given by some applicants belonged to another individual4. Background checks caught some cases, which is useful, but the check could only flag the cases where the record did not fit.

Organised schemes are designed to fit. In a June 2025 announcement, the US Department of Justice said one North Korean IT worker scheme compromised the identities of more than 80 US persons to obtain remote jobs at more than 100 US companies, and that defendants provided false identification documents containing a mix of stolen and fraudulent identity information5. Our guide to North Korean IT worker schemes covers these cases in more depth.

NIST's identity proofing model makes the distinction explicit. It separates validation, which confirms that evidence is genuine, authentic and accurate, from verification, which confirms that the applicant is the genuine owner of that evidence2. A background check is strong on the first and is not built for the second. That second step is what identity verification adds.

Form I-9 is a legal requirement in the United States. USCIS says all US employers must properly complete Form I-9 for every individual they hire for employment in the United States3. It checks identity and work authorization, but its timing places it after the hiring decision.

• The employee must complete Section 1 no later than their first day of employment, and an employer may not ask someone who has not accepted a job offer to complete it6.
• The employer must complete Section 2 within three business days of the date employment begins, examining documents to see that each reasonably appears to be genuine and relates to the person presenting it7.
• Employers enrolled in E-Verify and in good standing may use an alternative procedure to examine documents remotely, which includes reviewing copies and holding a live video interaction with the employee8.

So Form I-9 cannot help during interviews, because it may not start until an offer is accepted. By then, a proxy interviewer may already have done the interviews, and the person who arrives on day one could be someone else. Identity verification during hiring fills that earlier window.

Keep the two processes separate. A hiring-stage identity check should not be used as a substitute for Form I-9, and it has no reason to ask about citizenship or immigration status. Its job is narrower: confirming that the candidate is a real person who owns the ID they show.

This guide is general information, not legal advice. Background check, privacy and employment eligibility rules vary by country and state, so confirm your process with counsel.

Background check

Answers what the record says about the person with these details. It often runs after a conditional offer, uses the details the applicant supplies, and in the US is governed by the FCRA when a background screening company prepares it1.

Identity verification

Answers whether the applicant is the real owner of the ID they present, and whether the same person is applying under more than one identity. It fits best at the shortlist stage, before the interviews that decide an offer. It uses an ID document and, usually, a face match with a liveness check, which brings in biometric privacy rules. Our guide to identity verification in hiring covers consent, data minimisation and the alternatives a candidate should be offered.

Form I-9

Answers whether a new hire is authorized to work in the US. It happens on and just after the first day, uses the documents listed on the form, and is required for every hire3.

Used together, the three checks cover the full hiring timeline without asking any one of them to do a job it was not designed for. A practical sequence looks like this:

1. Application. Look for low-cost warning signs, such as reused contact details or copied résumés. The FBI advises cross-checking HR systems for other applicants with the same résumé content or contact information9. Our guide on how to spot a fake job candidate lists more.
2. Shortlist. Ask shortlisted candidates to verify their identity, with consent, and a non-biometric option for anyone who prefers one.
3. Offer. Run the background check with the FCRA disclosure and written permission, and follow the adverse action steps if needed.
4. First day. Complete Form I-9 on time, and consider a short identity re-check so the person who starts is the person you interviewed. The FBI recommends identity verification during interviewing, onboarding and throughout employment9.

A few rules keep this fair. Run each check at the same stage for every candidate in a role. Send any failed or unclear result to a person for review rather than rejecting automatically, and give the candidate a way to explain or try another route. Collect only what each step needs, and do not copy ID images or biometric data into systems that do not need them.

Background screening providers, I-9 tools and identity verification each have their own place, and most hiring teams will use more than one. The useful question is which gap each one covers in your process.

Elsin covers identity verification only. It is not a background check and it does not handle Form I-9 or employment eligibility. Shortlisted candidates check their ID and face on their own phone after agreeing, face data stays on the phone, and the result lasts 12 months at every employer on Elsin. It is free for candidates, offers a human ID review instead of a face scan, and sends any signal to a person for review. The page for candidates explains what they see.