Background Check Red Flags: An Employer's Guide

A background check red flag is any material mismatch between what a candidate claimed and what primary sources — past employers, universities, courts, and registries — actually confirm. Not every discrepancy is disqualifying: many turn out to be clerical errors or honest memory lapses. What matters is whether the gap is deliberate, relevant to the role, and repeated across checks.

Getting this judgment right is worth the effort. An estimated 40–50% of resumes contain some inaccuracy or exaggeration, so most HR teams will face a discrepancy sooner rather than later. At the same time, a bad hire can cost up to 30% of the employee's first-year potential earnings — which is exactly why employee background check services exist in the first place. The goal is not to reject every candidate with an imperfect file. It is to separate the trivial from the material, and to do so in a way that is fair, documented, and legally defensible.

The 7 Most Common Red Flags in Sri Lankan Hiring

Across employment, education, criminal, identity, reference, and sanctions checks, discrepancies tend to fall into seven recurring patterns.

1. Unexplained employment date gaps

The candidate's CV shows continuous employment, but the previous employer confirms different start or end dates — sometimes leaving months unaccounted for. Short gaps are common and usually innocent: notice periods, garden leave, family responsibilities, or simply rounding “March” to “January.” The concern arises when a long gap appears to have been deliberately papered over, because candidates sometimes stretch dates to conceal a dismissal or a short, failed stint at another company. Dedicated employment verification confirms dates, titles, and reasons for leaving directly with each past employer, so you are comparing the claim against the record rather than guessing.

2. Inflated job titles or responsibilities

“Head of Finance” turns out to have been “Senior Accounts Executive.” Title inflation is one of the most frequent findings in verification work, partly because titles genuinely vary between companies — a “Manager” in a five-person firm may carry less scope than an “Executive” in a large conglomerate. The material question is whether the candidate claimed authority, team size, or budget responsibility they never held, especially when your role depends on that experience.

3. Unaccredited or fake qualifications

Education discrepancies range from harmless — a slightly misremembered graduation year — to serious: degrees from unaccredited “degree mills,” altered certificates, or qualifications the institution has no record of awarding. Because a forged certificate can look entirely convincing, education verification goes to the source: the university registrar or examinations department, plus a check on the institution's own accreditation status.

4. Undisclosed criminal records

A criminal record surfacing on a check is not automatically disqualifying — but a criminal record the candidate was asked about and denied is a different matter, because the dishonesty compounds the underlying finding. Relevance matters too: a decades-old minor offense has little bearing on most roles, while a fraud conviction is directly material for anyone handling money, data, or vulnerable people.

5. Address mismatches

The address on the application does not match what an identity check or field visit confirms. Often this is mundane — the candidate recently moved, or listed a permanent family address while boarding near work, which is common in Sri Lanka. It becomes a red flag when the candidate cannot explain the mismatch, or when it forms part of a wider pattern of identity inconsistencies.

6. Poor or evasive references

A referee who declines to comment, gives only dates of employment when asked open questions, or contradicts the candidate's account is a signal worth noting — though a cautious reference alone is weak evidence, since many companies have policies restricting what staff may say. Two or more independently lukewarm or contradictory references, however, deserve serious weight.

7. Sanctions or watchlist matches

Global sanctions and watchlist screening occasionally returns a match against the candidate's name. Many of these are false positives caused by common names, which is why a potential match must be resolved against date of birth and identity documents before any conclusion is drawn. A confirmed match, on the other hand, is among the most serious findings a report can contain, particularly for finance and compliance-sensitive roles.

How Serious Is It? A Severity Framework

Use the table below as a first filter. The pattern is consistent: discrepancies are usually minor when they are small, explainable, and irrelevant to the role — and material when they are deliberate, role-relevant, or repeated.

A Fair 4-Step Response Process

When a discrepancy appears, resist the urge to decide on the spot. A structured response protects the candidate from an unfair rejection and protects you from a rushed hire — or a rushed withdrawal you later regret.

1. Document the finding. Record exactly what was claimed, what the source confirmed, and where the two differ. Keep the verification report and your notes together; if the decision is ever questioned, this record is your defense.
2. Notify the candidate. Tell them a discrepancy was found and describe it specifically. Vague accusations (“something came up in your background check”) invite panic, not clarification.
3. Give a clarification window. Allow the candidate a reasonable period to respond with an explanation or supporting documents. Many discrepancies dissolve at this stage — a company that changed names, a maiden name on a certificate, an institution's own record-keeping error.
4. Decide and record the rationale. Weigh the explanation against the severity framework above, decide, and write down why. A one-paragraph rationale turns a gut call into a defensible decision.

Legal and Fairness Considerations Under the PDPA

Background verification is lawful in Sri Lanka, but there is no single dedicated “background check” law. The process is governed primarily by the Personal Data Protection Act (No. 9 of 2022), which treats the information gathered during screening as personal data. In practice, that means candidate consent must be obtained before any checks begin, the data you collect should be limited to what the role genuinely requires, and findings should be stored securely and shared only with those involved in the hiring decision.

Fairness is also self-interested: a clarification window is not just courteous, it is how you avoid rejecting a good candidate over a source's clerical error. Getting consent language and data handling right from the start is easier than retrofitting it — our pre-employment screening checklist covers the consent and documentation steps to complete before any check is ordered.

When to Walk Away — and When to Hire Anyway

After clarification, most decisions fall into one of two clear zones.

Walk away when: the candidate fabricated a qualification or an entire employment record; they denied a criminal record they were directly asked about; a sanctions match is confirmed against their verified identity; or their explanation for a material discrepancy shifts each time you ask. In each of these cases the issue is no longer the original finding — it is that you cannot trust what the candidate tells you.

Hiring anyway can be reasonable when: the discrepancy is small and the candidate's explanation checks out; the issue is old, disclosed, and unrelated to the role; or the source itself made the error. A candidate who volunteers an honest explanation for an employment gap is often demonstrating exactly the integrity the check was designed to test.

How Professional Verification Reports Present Discrepancies

A professional report does not simply stamp a candidate “pass” or “fail.” It presents each finding with an evidence trail: what the candidate claimed, what the source confirmed, who the source was, and when they were contacted. That source attribution is what lets you run the four-step process above with confidence — you can show the candidate precisely what was found and where it came from.

It is also why quality control matters. Ontriq's background verification services in Sri Lanka put every report through dual-analyst quality control, which is how we maintain 98%+ report accuracy — and complete multi-check cases are still delivered within 7 working days, with progress visible in a real-time case tracking portal. If you are building your screening program from scratch, our step-by-step guide on how to do background checks on employees in Sri Lanka explains which checks to run for each role and in what order.

Found a discrepancy you are unsure how to handle — or want reports that make these calls easier? Talk to the Ontriq team, call +94 77 999 6940, or email info@ontriq.com for a confidential discussion.