Resume verification process: a step-by-step guide for 2026

A polished resume takes a candidate ten minutes and an AI tool to produce. Checking whether it is true takes a lot longer.

Skip the check and you risk a bad hire, a fake identity or a compliance problem. Run it badly and good candidates drop out.

This guide shows the resume verification process step by step. You will see what to check, where to check it, which legal rules apply and how a skills test closes the gap.

TL;DR:

• The resume verification process runs in eight steps, from consent and identity checks to employment, education, licence and reference checks.
• Each claim has its own source of truth and its own turnaround time.
• Legal rules differ across the US, UK, EU and India, so get consent first.
• When something does not match, ask the candidate before you reject.
• A skills test is the fastest way to check what the candidate can actually do.

What is the resume verification process?

The resume verification process is a structured set of checks that confirms the facts on a candidate's resume against independent sources. A typical process covers identity, employment history, education, professional licences, references and skills, and ends with a documented pass, hold or fail for each claim.

Resume verification answers one question for each line on the resume: is there evidence outside the resume that this is true? Evidence means a record held by someone other than the candidate, such as an employer's payroll data, a university registrar, a licensing board or a scored skills test.

A copy of a certificate sent by the candidate is a starting point, not evidence.

Most teams split the work in two. Light checks (identity, a skills test, a quick look at public profiles) happen before or during interviews. Formal checks that need consent and a third party (employment, education, licences, references) happen after a conditional offer.

Is resume verification the same as a background check?

Resume verification is one part of a background check, not the whole of it. Resume verification confirms the claims a candidate made.

A full background check can also look at things the candidate never claimed, such as criminal records, credit history or driving records, and those checks carry their own legal rules.

The background check glossary entry covers the wider check in more detail.

Why does resume verification matter more in 2026?

Resume verification matters more in 2026 because false claims and fake candidates are now common, and generative AI makes a polished but untrue resume cheap to produce. The share of hiring teams that have seen falsified details is high, and identity fraud has moved from rare to routine for remote roles.

• Falsified details are the norm, not the exception. The First Advantage 2026 Global Workforce Trends Report found that 76% of hiring professionals have encountered falsified employment details, 45% have dealt with candidate identity misrepresentation, and 89% plan to add screening and identity verification within two years.
• Some fake candidates are a security threat. The FBI has warned that North Korean IT workers use stolen identities and paid facilitators to get remote jobs at US companies. It recommends layered identity checks across the whole employment lifecycle.

A wrong hire is also expensive in plain cost terms. Our guide to the cost of a bad hire breaks down where the money goes.

What should the resume verification process check?

The resume verification process should check every claim that would change the hiring decision if it turned out to be false. For most roles that means six things: identity, employment history, education, professional licences, references and job skills.

Each one has a different source of truth.

Not every role needs every check. A licensed nurse needs a licence check on day one.

A software engineer needs a coding test far more than a transcript. Decide the checks per role family once, write them into the job requisition, and apply them to every candidate for that role so the process stays fair.

What are the steps in the resume verification process?

The resume verification process runs in eight steps: define the checks for the role, collect consent, verify identity, test skills, verify employment, verify education and licences, check references, then review and decide. Cheap, fast checks come first, so expensive third-party checks are only spent on finalists.

1. Define the checks for the role. List the claims that matter for this job and the source for each. Put it in the requisition so recruiters do not improvise.
2. Collect consent and disclose. Tell candidates in writing what you will check and get their written permission before any third party runs a check. In the US this disclosure must be a stand-alone document.
3. Verify identity. Match a government ID to the person who applies, interviews and joins. For remote roles, repeat the face match at the assessment and the interview so the same person shows up each time.
4. Test the skills the resume claims. Give finalists a short, role-based test. A candidate who lists "advanced Excel" or "Python" either solves the task or does not.
5. Verify employment history. Confirm dates, job titles and, where the employer allows it, rehire eligibility for at least the last two or three roles.
6. Verify education and licences. Confirm the degree title, institution and year with the registrar or a clearinghouse, and check any required licence with the issuing board.
7. Check references. Speak to former managers with the same structured questions for every candidate. Ask for specific examples, not opinions.
8. Review, decide and document. Record a pass, hold or fail for each claim, give the candidate a chance to explain any mismatch, and keep the record.

Pro tip: Run step 4 before steps 5 to 7. A skills test takes under an hour and costs far less than a third-party check, so candidates who cannot do the work leave the process before you pay to verify their past.

How do you verify employment history?

Employment history is verified by confirming three facts with each former employer: the start and end dates, the official job title, and whether the person is eligible for rehire. Use a source the candidate did not give you, such as the employer's main switchboard, its HR inbox or an employment database.

• Use a database first. Services such as The Work Number return many verifications instantly, with a permissible purpose and the candidate's consent.
• Find contact details yourself. Never call the number on the resume. Look up the company, call the main line and ask for HR or payroll.
• Ask closed, factual questions. "Can you confirm the job title and dates for this person?" gets an answer. "Was this person good?" usually gets a policy refusal.
• Expect limits. Many employers confirm only dates and title. Treat that as a confirmation of those facts, not as a red flag.
• Log every attempt. Note who you spoke to, when, and what they confirmed. A clear record protects you if a decision is later challenged.
• Check that the employer exists. A company with no registration, no address and no web history is a reason to ask the candidate for payslips or tax records.

For contract and remote work, ask for the agency or end client as well as the employing company, and verify both.

How do you verify education and professional licences?

Education is verified with the institution that awarded the degree, not with a certificate the candidate uploads. In the US, the National Student Clearinghouse verifies degrees and enrollment for most colleges in a single request.

• Check the exact award. Confirm the degree title, major and graduation year. "Attended" and "graduated" are different claims.
• Check accreditation. If you do not know the institution, confirm it is accredited. Diploma mills issue real-looking paper for degrees that were never earned.
• Plan for international degrees. Foreign qualifications need the institution's registrar or a credential evaluation service. Allow 5 to 15 business days and start early for roles where the degree is a legal requirement.
• Verify licences at the source. Nursing, medicine, law, accounting, engineering and financial roles have public registers run by the licensing body. Check status, expiry date and any disciplinary actions.

Only verify education when it matters for the role. If the job does not require a degree, a skills test tells you more than a transcript does.

How do skills tests verify what a resume claims?

Skills tests verify a resume by checking claims against performance instead of against records. Records prove that someone held a title or earned a degree.

A role-based test shows whether they can do the work today, which is the claim the hiring decision actually rests on.

Resume claims about skills are the easiest to inflate and the hardest to check by phone. No former employer will confirm that someone is "advanced in SQL".

A 30 to 40 minute test with real tasks will. Testlify's test library has 3,500+ tests across technical, functional, cognitive and language skills, and the AI test builder can turn a job description into a role-specific assessment.

A test only verifies anything if the right person takes it. Testlify includes 20+ proctoring checks, from webcam snapshots and tab tracking to AI assistance detection, and offers photo ID verification with face match, so the identity from step 3 carries through to the test.

The anti-cheating and proctoring page lists the full set.

Key takeaway: Records verify a candidate's past. A proctored skills test verifies the present. A complete resume verification process needs both.

What legal rules apply to resume verification?

Legal rules for resume verification depend on where the candidate lives and who runs the check. Three ideas hold almost everywhere: get consent, collect only what the role needs, and give candidates a chance to respond before you act on what you find.

United States: FCRA

The Fair Credit Reporting Act (FCRA) applies when a third-party screening company runs the checks. The FTC's guidance for employers requires a written disclosure in a stand-alone document and the candidate's written permission. It also requires a pre-adverse action notice with a copy of the report and the "Summary of Your Rights", then a final adverse action notice.

United States: timing

Formal checks should run after a conditional offer. Many states and cities have fair chance (ban the box) laws that restrict criminal history questions until then. Post-offer timing also lowers disability discrimination risk.

United Kingdom: right to work

UK employers must check right to work before employment starts. Use the Home Office's employer's guide to right to work checks, which covers manual, online and digital identity checks.

UK and EU: GDPR

Verification data is personal data under GDPR. Tell candidates why you collect it, keep only what the role needs, and set a retention period.

India: consent and the DPDP Act

Background verification in India is common and usually run by third-party agencies after the offer. Under the Digital Personal Data Protection Act, collect clear consent and use the data only for the stated purpose.

Regulated roles

Healthcare, finance, transport and education often have extra mandatory checks, such as licence checks or prior employer safety records. Check sector rules before you write the process.

This section is general guidance, not legal advice. Have counsel review your consent forms and adverse action letters.

How long does resume verification take?

Resume verification usually takes 3 to 10 business days from consent to decision when checks run in parallel. Identity checks and skills tests finish the same day; employment and reference checks take the longest because they depend on other people replying.

Start international education checks and slow employers first, and run everything else alongside them. Set a five-business-day limit on each third-party reply, then escalate or ask the candidate for alternative evidence such as payslips, tax forms or offer letters.

What should you do when verification finds a discrepancy?

A discrepancy is a reason to ask, not an automatic rejection. Many mismatches have a simple cause, such as a company rename, an internal title that differs from the HR system, or a month rounded up.

Others are material lies. The process should tell the two apart fairly.

1. Check your own data first. Confirm you contacted the right employer, entity and dates.
2. Ask the candidate. Share what you found and ask for an explanation or documents. Give a clear deadline.
3. Judge materiality. A rounded month is not the same as an invented degree, a false licence or a different person at the interview.
4. Follow the legal steps. If a screening report drives the decision in the US, send the pre-adverse action notice, wait a reasonable period (often five business days), then send the adverse action notice.
5. Record the outcome. Note the claim, the evidence, the candidate's answer and the decision.

If you find a lie after the person has started, the playbook changes: secure access, document, then speak to the employee with HR and legal present. Our guide to detecting fake resumes covers post-hire fraud in detail.

Which red flags should trigger a closer look?

Red flags are signals to verify a claim more deeply, not proof of a lie. Look for patterns rather than single oddities.

• Dates on the resume that differ from the candidate's public profiles or application form.
• Senior titles that do not fit the length of the career, or employers that cannot be found anywhere online.
• A resume that mirrors the job description word for word, with no project names, team sizes or results.
• References who can confirm dates but cannot describe a single piece of the candidate's work.
• A candidate who claims expert skill but cannot explain a basic concept in a live conversation or test.
• A different face, voice or location between the application, the test and the interview.

The reference check best practices guide has a full question set for step 7.

How do you run resume verification at scale?

Resume verification at scale works when the checks live inside the hiring workflow instead of in a recruiter's inbox. TA Ops teams that hire in volume set the checks per role, trigger them automatically at each stage, and track a few numbers.

• Screen resumes on evidence. An AI resume screener gives each resume an explainable match score against the role, so recruiters spend their time on the candidates worth verifying.
• Automate the skills step. Send the role's test automatically when a candidate passes screening, with score thresholds that move people to the next stage. Testlify connects to 100+ ATS and HRIS tools, so results sync back to the candidate record.
• Keep identity continuous. Match the same face and ID at the test, the interview and onboarding, not only once.
• Track four numbers. Time from consent to decision, discrepancy rate by check, candidate drop-off during verification, and checks per hire. A rising discrepancy rate for one source or job board is worth a closer look.

Add the skills step to your process. Verify candidate identity, assess job relevant skills early, and reserve third party checks for finalists while keeping a clear record of every hiring decision. Book a demo to see how Testlify combines role based assessments with advanced proctoring to help you make more confident hiring decisions.

Frequently asked questions (FAQs)