How Do You Verify Employment? Methods, FCRA Rules, and Penalties

To verify employment, collect the worker’s signed authorization along with their full legal name, Social Security number, and employer details, then either pull a report from an automated payroll database such as The Work Number, contact the employer’s HR department directly, or gather pay stubs, W-2s, and IRS tax transcripts. Which route you take depends on how fast you need an answer, whether the employer participates in an automated system, and whether you are working through a consumer reporting agency, which triggers Fair Credit Reporting Act obligations. Here is how to verify employment cleanly, and what the law expects of you along the way.

What to Gather Before You Contact Anyone

A verification request goes nowhere without accurate identifying information and a written release. Ask the applicant for:

  • Full legal name as it appears on payroll records, including any prior last names.
  • Social Security number, which most employers and databases use to match records.
  • Employer name, job title, and approximate start and end dates.
  • A signed authorization releasing the employer to share information with you.

Mortgage lenders typically document this with Fannie Mae Form 1005, the Request for Verification of Employment. The borrower signs it to authorize disclosure, and the employer fills in base pay, overtime, bonuses, commissions, and year-to-date earnings.1Fannie Mae. Standards for Employment Documentation Landlords, hiring managers, and government agencies use their own forms, but the fields are similar.

The Four Ways to Verify Employment

Automated Payroll Databases

The Work Number, operated by Equifax, is the largest automated employment and income verification database in the United States. Participating employers upload payroll data, and authorized verifiers pull reports showing job title, hire date, salary, and employment status without ever contacting the employer. Results usually come back within minutes. Pay-as-you-go pricing starts at $69.75 per report, with enterprise pricing varying by contract.2The Work Number. Pricing

Direct Contact With the Employer

When an employer doesn’t participate in an automated database, contact HR directly by phone, email, or fax. Larger companies often have a dedicated verification line or a third-party vendor handling incoming requests. Direct contact lets you ask specific questions, such as whether the person is still active, their pay frequency, or whether they hold a full-time or part-time role. Confirm you’re speaking with an authorized representative before exchanging personal data, and send written requests by encrypted email or secure fax rather than plain email, which exposes Social Security numbers and salary figures to interception.

Response times for direct contact usually run two to four business days. If nothing comes back after three, follow up by phone.

Payroll Documents From the Applicant

When employer contact is slow or unavailable, documents from the applicant serve as supporting evidence. Recent pay stubs show employer name, pay period, gross earnings, and tax withholdings. W-2 forms confirm prior-year wages. Fannie Mae requires that any pay stub used for mortgage verification be dated no earlier than 30 days before the initial loan application date and include year-to-date earnings.1Fannie Mae. Standards for Employment Documentation

IRS Tax Transcripts

Lenders and government agencies sometimes verify income straight from the IRS. Form 4506-C (IVES Request for Transcript of Tax Return) lets a borrower authorize a designated third party to receive their tax return transcript, showing most line items from the filed return.3IRS. IVES Request for Transcript of Tax Return A wage and income transcript can also pull 1099 data, useful for contract or freelance income. The IRS must receive Form 4506-C within 120 days of the taxpayer’s signature or the request is rejected. Electronically filed returns are generally available for transcript requests within two to three weeks; paper-filed returns take six to eight weeks.4Internal Revenue Service. Transcript Availability

Verifying a Self-Employed Applicant

Self-employed applicants have no employer to call, so verification runs through tax documents. Sole proprietors file Schedule C (Profit or Loss from Business) with Form 1040, showing gross income, business expenses, and net profit.5Internal Revenue Service. About Schedule C (Form 1040), Profit or Loss from Business (Sole Proprietorship) Form 1099-NEC reports nonemployee compensation from a specific client but only reflects what that one client paid, so it’s a partial picture.

When applicant-supplied documents aren’t enough, lenders typically pull transcripts through Form 4506-C to cross-check the income reported on the application against what the applicant reported to the IRS.3IRS. IVES Request for Transcript of Tax Return Most mortgage underwriters ask for at least two years of returns to establish a reliable income trend.

Running the Request and Keeping the Record

Once you have authorization and identifying information, submit the request through the employer’s preferred channel. For The Work Number and similar services, that means setting up a verifier account, entering the Social Security number and employer code, and paying the per-report fee. For direct requests, send the completed form through a secure channel.

When the verification comes back, save the report or signed form in the applicant’s file along with the date received and the name of the person or service that provided the data. Financial institutions handling customer information are subject to the Gramm-Leach-Bliley Act’s Safeguards Rule, which requires an information security program with administrative, technical, and physical protections for sensitive data.6Federal Trade Commission. Gramm-Leach-Bliley Act

FCRA Rules When You Go Through a Verification Service

The Fair Credit Reporting Act kicks in whenever you obtain verification through a consumer reporting agency, meaning a company that regularly assembles or evaluates consumer information and furnishes reports to third parties.7Office of the Law Revision Counsel. 15 USC 1681a – Definitions; Rules of Construction Services like The Work Number qualify. The FCRA doesn’t apply when one employer simply calls another and gets an answer directly, without a third-party intermediary.

Written Disclosure and Consent

Before you order a consumer report for employment purposes, including hiring, promotion, or retention decisions, give the applicant a clear written notice, in a standalone document, that a report may be obtained. The applicant must then authorize the report in writing.8Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports Burying the disclosure inside a longer employment application does not meet the standalone-document requirement, and skipping it is one of the most common FCRA violations.

Accuracy Responsibility

Consumer reporting agencies must follow reasonable procedures to ensure the maximum possible accuracy of the information in their reports.9Office of the Law Revision Counsel. 15 USC 1681e – Compliance Procedures If a report shows the wrong job title, incorrect dates, or wages belonging to someone else, the agency, not the employer, is on the hook for record accuracy.

Adverse Action: The Two-Step

If you decide not to hire, promote, or lend to someone based partly or entirely on a consumer report, the FCRA requires a specific two-step process before the decision is final.

First, before taking the action, give the applicant a copy of the report and a written summary of their FCRA rights.8Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports This lets them review the report and flag errors before you finalize anything.

Second, after taking the action, send a formal notice that includes:

  • The name, address, and phone number of the consumer reporting agency that furnished the report.
  • A statement that the agency didn’t make the decision and can’t explain why the action was taken.
  • Notice that the person can get a free copy of the report and dispute inaccurate or incomplete information with the agency.

Skipping either step creates FCRA liability even when the underlying information was accurate.

What Employers Will and Won’t Share

No single federal law dictates what an employer must disclose in response to a verification. In practice, most companies stick to objective facts: dates of employment, job title, and sometimes salary. Sharing subjective information such as performance ratings or reasons for termination can expose the employer to defamation claims if the information is inaccurate or misleading, so many follow a neutral reference policy that confirms only rehire eligibility. Detailed performance reviews, disciplinary records, and medical information are almost always withheld. Medical history disclosures are separately restricted by the Americans with Disabilities Act, which limits sharing of disability-related information to narrow circumstances.

Salary History Bans

Roughly half the states and several major cities prohibit employers from asking job applicants about their prior pay. In those places, an employer verifying employment for hiring purposes generally cannot request or use salary information from a prior employer, even if the applicant volunteers it. Coverage varies: some bans apply only to government employers, others to all private-sector hiring.

Non-Discrimination in Lending Verifications

When verification supports a lending decision, the Equal Credit Opportunity Act adds another layer. Creditors cannot discount an applicant’s income because it comes from part-time work, public assistance, retirement benefits, or any other source tied to a protected characteristic such as age, sex, or marital status.10eCFR. Part 1002 Equal Credit Opportunity Act (Regulation B) A lender can evaluate whether income is likely to continue, but it cannot reject an applicant simply because the earnings come from a non-traditional arrangement.

If the Verification Record Is Wrong

If you’re the person being verified and you find errors in records held by a consumer reporting agency, you can dispute them directly with the agency. The agency must reinvestigate and either correct or delete the information within 30 days.11Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy If you provide additional supporting information during that window, the agency may take up to 15 extra days, but only if the disputed data has not already been found inaccurate or unverifiable.

File the dispute in writing with the agency, not the former employer. Include your full name, Social Security number, the specific item you believe is wrong, and supporting documentation such as pay stubs or a corrected employment letter. The agency must notify the data furnisher of the dispute and report the results back to you in writing.

Penalties for Getting FCRA Compliance Wrong

The FCRA creates two tiers of civil liability. For willful noncompliance, such as pulling a consumer report without the applicant’s written consent, the affected person can recover actual damages or statutory damages between $100 and $1,000 per violation, plus punitive damages and attorney’s fees.12Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance

For negligent noncompliance, such as botching the adverse action steps through oversight, the person can recover actual damages and attorney’s fees, but not punitive damages.13Office of the Law Revision Counsel. 15 USC 1681o – Civil Liability for Negligent Noncompliance Anyone who obtains a consumer report under false pretenses or without a permissible purpose faces the higher of actual damages or $1,000, plus potential punitive damages.12Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance The exposure reaches employers, lenders, landlords, and anyone else who uses consumer reports, which is why the disclosure, consent, and adverse action steps are worth doing precisely.