What is Background Verification (BGV)?

Background verification (BGV) is the process of checking a job candidate's identity, education, employment history, and records against source data before they join, to confirm that what they claimed matches what the issuing authorities hold. Core checks close in seven to fifteen working days and cost 1,500 to 3,000 rupees (about 18 to 36 US dollars) per candidate. Since the Digital Personal Data Protection Rules were notified in November 2025, consent is no longer a formality: the employer stays accountable for how that data is collected, shared, and deleted.

What does a background verification cover?

Most employers run a core package, then add deeper checks for senior, regulated, or high-risk roles.

• Identity: matching Aadhaar, PAN, passport, or driving licence against issuing authority records.
• Address: confirming current and permanent addresses by digital proof or a physical field visit.
• Education: confirming degrees with the issuing institution, or instantly against a DigiLocker or APAAR record.
• Employment history: confirming employers, dates, and designation with past employers, or from EPFO records tied to the candidate's Universal Account Number.
• Dual employment: one UAN runs for life, so provident fund contributions from two employers in the same month are evidence of moonlighting.
• References: structured calls with named former managers to validate role, performance, and conduct.
• Criminal record: district court and police database searches, subject to consent and local law.
• Credit, drug, and watchlist screening: used selectively for fiduciary, regulated, and cross-border roles.

How long does each check take, and how often does it fail?

Turnaround depends on how digitised the source is. Discrepancy rates are white-collar findings from AuthBridge's Workforce Fraud Files, H1 FY26.

Overall, AuthBridge recorded 4.33 percent discrepancies in white-collar hiring and 5.61 percent in gig hiring. A full package with criminal records costs 2,000 to 5,000 rupees (about 24 to 60 US dollars).

How does background verification work in India?

BGV is usually run by a specialist vendor and triggered once the offer is accepted.

• Consent: the candidate signs a specific written consent naming the checks, the vendor, and the retention period.
• Document collection: government IDs, education certificates, prior relieving letters, and salary slips.
• Verification at source: the vendor contacts universities, employers, and courts directly, or queries EPFO, UIDAI, and DigiLocker rails.
• Case classification: each check closes as clear, discrepant, or insufficient. Insufficient means the source did not respond, and is not a failure.
• Report and disposition: the employer, not the vendor, decides whether to clarify, proceed, withdraw the offer, or terminate under the contract.

Because core checks take seven to fifteen working days, many employers let a candidate join on probation with the report still open.

What does the DPDP Act require for BGV consent?

The DPDP Act 2023 and the Rules notified in November 2025 changed what a valid BGV consent looks like, with most obligations landing by mid-May 2027.

• Consent must be specific: free, informed, and given by a clear affirmative act, with an itemised notice. A broad clause in an offer letter is not enough.
• Candidates sit outside the employment exemption: Section 7(i) refers to a data principal who is an employee, so pre-employment BGV is safer run on consent under Section 6.
• Liability stays with the employer: appointing a BGV agency outsources the work, not the responsibility for a breach.
• Breaches are reportable: candidates must be told without delay, and the Data Protection Board given a detailed report within 72 hours.
• Files cannot be kept indefinitely: access, correction, erasure, and withdrawal of consent all survive the hiring decision.

Pre-employment vs post-employment BGV

Timing changes the remedy available to the employer, not the checks themselves.

• Pre-employment: runs after the offer, before joining. An adverse finding means withdrawing the offer, at no notice or severance cost.
• Post-employment: runs during probation or as a periodic re-check. The remedy is termination under the contract, which carries notice period and settlement obligations.

Why does BGV matter?

• Hiring risk: fabricated degrees, overlapping employment, and undisclosed terminations are the common findings, and a document review catches none of them.
• Client and audit requirements: enterprise customers and ISO 27001 or SOC 2 audits expect BGV evidence for anyone with system or data access.
• Cost of a bad hire: removing someone before joining costs only the offer; removing them after onboarding costs notice, settlement, and rehiring.
• Data protection exposure: a BGV file is a concentrated set of identity documents, and mishandling it is itself a reportable breach.

A good BGV programme is proportionate: run the checks the role justifies, tell the candidate what is verified and how long it is kept, and decide discrepancies against a written policy.