Employers pulling a consumer credit report on a job candidate are walking straight into one of the most heavily regulated corners of pre-employment screening. The FCRA, passed in 1970, sets strict rules on disclosure, authorization, and what happens when a credit report leads to a negative hiring decision. On top of federal law, at least 11 states (including California, Colorado, Connecticut, Illinois, Maryland, and Washington) have passed laws restricting or banning credit checks for most jobs. Using credit reports in hiring isn't wrong in most contexts, but doing it without understanding the rules creates liability faster than most employers realize.
When Employers Actually Use Credit Reports The legitimate use cases are narrow: roles that handle cash or client funds (bank tellers, financial advisors), roles with access to financial systems (controllers, finance leaders), and roles with security clearance requirements. Courts and regulators are skeptical of credit checks for other positions because the correlation between personal credit and job performance is weak, and adverse-impact risk runs through race, age, and disability status.
Even where credit checks are legally permitted, using them consistently across candidates (not just one) is critical to avoid disparate-treatment claims.
The FCRA Process for Employment Credit Checks Three steps have to happen in order. First, give the candidate a clear, standalone written disclosure that a credit report may be obtained. Second, get the candidate's written authorization before pulling the report. Third, if the report leads to an adverse decision, provide a pre-adverse action notice with a copy of the report and a summary of rights, wait a reasonable period (typically 5 business days), then provide a final adverse action notice if the decision stands. Skip any of these and you're in FCRA violation territory, with statutory damages of $100 to $1,000 per violation plus attorney fees.
Can Employers Use Credit Scores Specifically? Technically yes, practically rarely. The report shows the underlying credit history but doesn't include the FICO score unless ordered separately. Most employers ask for the report, not the score, since using a score without a documented business justification invites scrutiny.
State Restrictions and the FCRA Plus State Laws Puzzle States with credit check restrictions carve out exceptions for specific role types, usually financial or fiduciary. The exceptions don't always match. California allows credit checks only for specific positions named in Labor Code 1024.5. Colorado bans them for most jobs under the Employment Opportunity Act. Each state has its own notice and authorization requirements layered on top of FCRA. Employers with candidates in multiple states need state-by-state compliance, not a single federal form.
Building a Pre-Employment Credit Check Process That Complies Four practices. First, document the business justification for each role where credit checks are used; an annual review of this list catches positions that no longer warrant the check. Second, use a compliant FCRA disclosure template reviewed by counsel since the standalone-disclosure requirement is the most-litigated FCRA compliance failure. Third, integrate adverse-action workflows into your onboarding and background-check vendor so timing and documentation are consistent. Fourth, audit usage by discrimination metrics annually to catch adverse-impact patterns early.
Use all of this alongside your broader payroll and classification processes so the background-check data doesn't create downstream compliance holes. The Federal Trade Commission maintains FCRA guidance for employers at ftc.gov/business-guidance , and the Consumer Financial Protection Bureau's FCRA rules are at consumerfinance.gov/rules-policy/regulations/1022 . The EEOC's enforcement guidance on credit-based hiring and adverse impact is at eeoc.gov/laws/guidance .