Federal Law (FCRA)
The Fair Credit Reporting Act (FCRA) establishes the federal minimum requirements for employment background checks, including disclosure and authorization requirements, consumer rights, and the adverse action process. Many states impose additional requirements that employers must also follow.
Read FCRA OverviewAdditional Compliance Requirements
Beyond the FCRA, several sources determine the requirements for a compliant financial services screening program.
FDIC and NCUA
Federal law bars people convicted of certain offenses from working at an insured bank or credit union without written consent.
FINRA
Member firms investigate registration applicants, verify Form U4 against public records, and submit fingerprints.
NMLS
Mortgage loan originators are licensed or registered through NMLS with an FBI fingerprint check and a credit report.
State Regulations
State insurance and banking licensing, plus limits on criminal history use, credit reports, and adverse action timing.
Recommended Screening Components
Background check components depend on the regulator, the registration a role carries, and its access to customer money.
| Position |  SSN Trace |
 Address History |
 Form I-9 |
 Live Scan |
 County Criminal |
 National Criminal Database |
 Federal Criminal |
 Employment History |
 Education Verification |
 Credential Verification |
 Credit Reports |
 Civil Records |
 Global Watchlists |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Teller / Branch Staff | |||||||||||||
| Personal Banker | |||||||||||||
| Mortgage Loan Originator | |||||||||||||
| Registered Representative | |||||||||||||
| Investment Adviser Staff | |||||||||||||
| Insurance Producer | |||||||||||||
| Operations / Back Office | |||||||||||||
| Compliance and Risk |
Fingerprints are required for registered representatives and for mortgage loan originators, and a credit report is required for licensing an originator through NMLS. Form I-9 is required for every hire in the United States.
Determined by regulator expectations, fidelity bond conditions, and firm policy. Credit reports and global watchlist screening appear across nearly every role here, which is unusual among industries.
Notes on This Package
Fingerprints do not replace a court search. An FBI fingerprint check returns what state repositories have submitted, and repositories are incomplete in predictable ways. Final dispositions are frequently missing, so a record can show an arrest with no outcome attached. Firms that rely on fingerprints alone end up with records they cannot act on, which is why county searches usually run alongside them.
The registration record is public. BrokerCheck, the SEC adviser database, and NMLS Consumer Access publish employment history, disciplinary actions, customer complaints, and regulatory findings under a person’s name. Anyone can search them, including applicants checking themselves. Very little of that information appears in a standard background report, and none of it appears in a criminal search.
Form U4 is a disclosure form the firm has to verify. The applicant discloses criminal, regulatory, civil, and financial history, and the firm confirms it against public records within 30 calendar days of filing. A discrepancy found afterward requires an amended filing. This makes screening part of a regulatory filing obligation rather than a private hiring decision.
Credit reports have a defined role here. Bankruptcies, liens, and judgments are disclosable on Form U4, and a credit report is required for NMLS licensing. State laws restricting employment credit checks generally include an exception for financial institutions or for positions with financial responsibility, though the exceptions are written differently in each state. Check the State Laws Overview for the states where you hire.
Disqualification and Consent
Financial services is one of the few industries where a past conviction can bar a person from employment as a matter of federal law. It is also one where the bar can be lifted.
What the banking bar covers
Federal law prohibits an insured bank or credit union from employing anyone convicted of a criminal offense involving dishonesty, breach of trust, or money laundering, or who entered a pretrial diversion program for such an offense, without written consent from the regulator. It reaches employees, officers, directors, and anyone else participating in the institution’s affairs. The institution is required to make a reasonable, documented inquiry into an applicant’s history to avoid hiring a barred person.
What the 2022 amendments removed
The Fair Hiring in Banking Act narrowed the bar considerably, and the FDIC’s conforming rule took effect on October 1, 2024. Categories of offenses now fall outside it entirely, including certain older offenses, offenses committed at age 21 or younger after a waiting period, and a defined set of minor offenses. Expunged, sealed, and dismissed records are also excluded. A great deal of published guidance still describes the pre-2022 standard, so material written before this change overstates who is disqualified.
Consent, waivers, and eligibility
A bar is not always permanent. The institution or the individual can apply to the FDIC for written consent, and certain cases qualify for automatic approval without an application. Insurance carries a parallel structure, where a person barred by federal law from the business of insurance may seek written consent from the state insurance regulator. In securities, a person subject to statutory disqualification may seek relief through an eligibility proceeding. Each of these is a real path, and each takes time.
Beyond General Financial Services
Requirements differ by regulator, and a single company can sit under several at once.
| Broker-Dealers | Registered people are fingerprinted, disclosed on Form U4, and verified against public records. Form U5 records the reason for a prior termination and is reviewable by a hiring firm, which has no equivalent anywhere else in employment screening. |
| Mortgage Lending | Originators at a bank register through NMLS, while originators at an independent lender must be licensed, which adds testing, education, a credit report, and criminal history standards. The same job carries different requirements depending on the employer. |
| Insurance | Producers are licensed by each state where they sell, and most states fingerprint applicants. Federal law separately bars people convicted of felonies involving dishonesty or breach of trust from the business of insurance without written consent. |
| Fintech and Payments | Money transmitter licensing carries its own background requirements for owners and key personnel. Companies operating through a bank partner also inherit that bank’s vendor standards, which commonly specify components and re-screening intervals. |
Screening Considerations
Documented Inquiry
Insured institutions must make a reasonable, documented inquiry into an applicant’s history. The regulation does not list searches, so the firm defines the method in writing and keeps a record showing the inquiry happened for each hire.
Fingerprint Results and Coverage
Fingerprint checks return what state repositories hold, and missing dispositions are common. A result showing an arrest without an outcome usually needs a court search to resolve before it can support any decision.
Form U4 Verification
Verification runs against public records and must be complete within 30 calendar days of filing. Employment history on the form covers 10 years, which is longer than most standard packages verify.
Credit Reports and State Restrictions
State restrictions on employment credit checks generally carve out financial institutions or financially responsible positions. The exceptions are drafted differently in each state, and some require the position to meet a definition rather than simply sit at the company.
Registration and Disciplinary History
Public registration databases hold customer complaints, regulatory actions, terminations, and financial disclosures. These records sit entirely outside the court system and outside the reports a CRA delivers, so they require a separate lookup.
Ongoing Disclosure
Registered people carry a continuing obligation to report new events, and firms amend filings when they learn of them. Some firms run periodic checks to support this, which requires its own disclosure and authorization covering the period of employment.
Adverse Action With a Regulatory Bar
When a consumer report contributed to the decision, the FCRA process applies even where a regulator’s bar makes the outcome unavoidable. A statutory disqualification does not remove the obligation to send the notices and allow a response.
Vendors and Bank Partners
Institutions extend screening standards to service providers through vendor agreements, and fintech companies operating under a bank partnership inherit those terms. The standard is set by the institution and applied by the vendor to its own staff.
Common Questions
Does a felony bar someone from banking?
Only convictions involving dishonesty, breach of trust, or money laundering trigger the federal bar, and several categories are now excluded. An unrelated felony does not automatically disqualify anyone.
Can a banking bar be lifted?
Yes, through written consent from the regulator, which the institution or the individual can apply for. Some cases qualify for automatic approval without an application.
Do fingerprints replace a criminal search?
No. Fingerprint results depend on what states submitted, and dispositions are often missing. Court searches fill those gaps and confirm outcomes.
Which searches does the regulation require?
None by name for banks, which must make a reasonable documented inquiry. Securities firms have a floor of reasonably available public records, with the composition left to the firm.
Are credit checks allowed here?
Generally yes. States restricting employment credit checks usually except financial institutions or financially responsible positions, and one is required to license a mortgage loan originator.
Is BrokerCheck a background check?
No. It publishes what was reported to the regulator, including complaints and disciplinary actions. It contains no criminal record search and is not a consumer report.
Do bank originators need a license?
They register through NMLS rather than license. Originators at independent lenders must be licensed, which adds testing, education, and criminal history standards.
What does Form U5 show?
The reason a prior firm ended someone’s registration, filed by that firm. A hiring firm reviews it, which is a source of termination information that exists in no other industry.
Related Positions
For the package that applies to a specific role rather than the industry as a whole:
Firms advising clients without holding their funds or executing transactions are covered under Professional Services, where licensing boards set the standard.
Worth Knowing
The Rules Name the Bar, Not the Search
Federal law says who a bank cannot hire, and the bank has to check each applicant and keep the records of what was checked. Securities firms have to search public records at a minimum. No rule says which searches to run, which counties to cover, or how far back to go. Each firm decides that and has to explain the decision to its regulator.