Background Checks Explained: Types, Costs and How They Work

Most people searching for a “background check” in the UK are actually looking for one of several very different checks: a criminal record check through the Disclosure and Barring Service (DBS), a Right to Work check, an identity verification, a credit check or a sector-specific screening standard. Which one you need depends entirely on the role, and getting the level wrong creates problems for both the employer and the candidate. This guide sets out each type, who can request it, what it shows and how the process works.

What a background check actually covers in the UK

There is no single “background check” product in the UK. Employers assemble a bundle from separate building blocks, each with its own legal basis:

• Criminal record check: Basic, Standard or Enhanced DBS check in England and Wales, with equivalents in Scotland and Northern Ireland
• Right to Work check: a legal duty on every employer, run through the Home Office online service or original documents
• Identity verification: confirming the candidate is who they claim to be, usually before any other check
• Adverse credit check: bankruptcy, county court judgments and similar records, used mainly in financial services
• DVLA check: licence validity and endorsements for driving roles
• Sector screening: standards such as BPSS for government work or BS7858 for the security industry

A common mistake is assuming one check covers everything. A DBS certificate says nothing about immigration status, and a Right to Work check says nothing about criminal records. Most compliant hiring processes run at least two or three of these in parallel.

Types of DBS checks

The Disclosure and Barring Service (DBS) issues criminal record certificates at four levels in England and Wales. Many applicants still say “CRB check” when they mean a DBS check; current levels, eligibility and fees are set out on GOV.UK DBS guidance (source accessed 2026-09-14).

The dividing line between levels is set by the Rehabilitation of Offenders Act 1974 and the exceptions to it. Roles not listed in those exceptions qualify only for a Basic check, no matter how senior or sensitive the employer considers them.

Standard DBS check

A Standard DBS Check shows all convictions and cautions that are spent and unspent, as recorded on the Police National Computer (PNC). In other words, it lifts the “spent” protections of the Rehabilitation of Offenders Act 1974 entirely, but only for roles where Parliament has decided that level of disclosure is justified.

Standard checks are common in financial services, particularly for roles regulated by the Financial Conduct Authority, and in parts of the legal and accountancy professions. The application must be submitted by the employer or a registered body on the employer’s behalf: a candidate cannot order a Standard check on themselves. Employers should also have a written policy on how they assess disclosed information, since having a conviction does not automatically bar someone from a role.

Enhanced DBS check

An Enhanced DBS Check includes everything a Standard check shows, plus one extra element: any information held locally by police forces that a chief police officer reasonably believes is relevant to the role and should be disclosed. This “other relevant information” is why Enhanced certificates can occasionally contain material that surprises applicants, such as allegations that never led to a conviction.

Enhanced checks are reserved for positions that involve close contact with children or vulnerable adults, or other roles specifically listed in the exceptions order. Where the role amounts to regulated activity, the check must also include the Child and Adult Barred Lists, which record people who are legally barred from such work. Employers in healthcare, education, social care and charities working with children will almost always need this top level.

What a DBS check shows, level by level

The practical difference between levels is easier to see with examples of what does and does not appear.

Basic: unspent convictions only

A Basic certificate lists convictions and conditional cautions that are not yet “spent”. A conviction becomes spent after a rehabilitation period set by the Rehabilitation of Offenders Act 1974, and that period depends on the sentence received, not on the offence category alone. A fine, for example, becomes spent much sooner than a custodial sentence. Once spent, the conviction does not appear on a Basic certificate, and the candidate is legally entitled not to mention it.

Standard: the full record on the PNC

A Standard certificate shows the complete record of convictions, cautions, reprimands and warnings held on the Police National Computer (PNC), including spent ones. It does not include local police intelligence or allegations. For a candidate with a caution from a decade ago, the difference between a Basic and a Standard check is significant: the caution is invisible on one and fully visible on the other.

Enhanced with barred lists

An Enhanced certificate with barred lists adds two things to the Standard content: the “other relevant information” held by police forces, and confirmation of whether the applicant appears on the Child and Adult Barred Lists. Barred list status is binary: either the person is barred from regulated activity with that group or they are not. Employers in regulated activity are legally required to check this before allowing someone to start work.

DBS check costs and processing times

DBS fees are set by the government and published on GOV.UK, where the current amount for each level is listed. Fees are reviewed periodically, so anyone budgeting for a recruitment round should check the current figures rather than rely on older quotes. The DBS Update Service carries a separate annual subscription, also published on GOV.UK.

On timing, the honest answer is that it depends. Online applications generally move faster than paper ones, and the biggest delays usually come from incomplete identity documents or from applications that need to be referred to police forces for the “other relevant information” stage. The DBS publishes its current average processing times by level on GOV.UK, and those averages are the most reliable planning figure available. Employers with urgent start dates should build in buffer time rather than promise a certificate date to a candidate.

DBS Update Service

The DBS Update Service solves a specific problem: a paper certificate is a snapshot of one day, and employers have no way of knowing whether anything has changed since. For an annual subscription, the applicant can keep their certificate “live” online. With the applicant’s permission, a new employer can then run a status check that confirms whether any new information has been added since the certificate was issued.

For candidates, the practical benefit is portability: one check can support multiple roles instead of a fresh application for every employer. For employers in sectors with high staff turnover, such as care agencies and supply teaching, the Update Service often pays for itself in reduced administration. Note that the service must be joined within a set window after the certificate is issued, and it only covers checks at the same level or lower.

Right to Work checks

The Right to Work Check is the one background check that is a legal duty for every employer in the UK, regardless of role or seniority. Employing someone who does not have the right to work carries a civil penalty, and employers can only defend themselves against that penalty by showing they carried out a compliant check before the person started work.

There are two accepted routes. The preferred one is the Home Office online service: the candidate generates a share code, the employer enters it along with the candidate’s date of birth, and the system returns the person’s photo and immigration status in real time. The alternative is a manual check of original documents, following the Home Office lists of acceptable documents. For candidates with time-limited permission, the employer must carry out follow-up checks, and the Home Office can notify employers when permission is due to expire.

Two points trip employers up regularly. First, a Right to Work check must happen before the first day of work, not at some later point in onboarding. Second, a DBS certificate is not evidence of right to work: the two checks are entirely separate, and passing one says nothing about the other.

Disclosure Scotland, PVG and Access NI: the same job, three agencies

Criminal record checks in the UK are run by three separate agencies, one for each legal jurisdiction. A check issued in England and Wales is not automatically valid for a role in Scotland, so employers recruiting across borders need to know which agency applies.

Disclosure Scotland operates the Protecting Vulnerable Groups (PVG) scheme, which is the Scottish equivalent of barred list checking: anyone doing regulated work with children or protected adults in Scotland must be a PVG scheme member. Access NI mirrors the DBS structure for Northern Ireland, with its own application process and its own fee schedule. Each agency sets its own fees and updates them periodically, so check the current amounts on each agency’s official page before budgeting for a multi-country recruitment campaign.

Self-employed DBS checks: a worked example

Self-employed people face a specific restriction that surprises many of them, so it is worth walking through a realistic scenario.

Situation. A freelance IT contractor is offered a six-month contract with a bank. The bank’s compliance team asks for a criminal record check. The contractor assumes they need an Enhanced check because the client is a bank.

Steps. First, the contractor checks what level the role actually qualifies for. Standard and Enhanced checks can only be requested by an eligible organisation, and a self-employed person cannot countersign their own application at those levels. In practice, the contractor has two routes: ask the end client (or the recruitment agency acting for it) to request the check if they are an eligible registered body, or apply directly for a Basic DBS Check on the GOV.UK service, which anyone can do. The contractor applies online for the Basic check, verifies their identity with the required documents, pays the fee, and waits for the certificate to arrive by post.

Result. The Basic certificate arrives showing unspent convictions only, which in this case means none. The bank’s compliance team accepts it alongside the contractor’s other screening. The lesson: the level of check follows the legal eligibility of the requesting organisation, not the seniority of the client. If a role genuinely requires a Standard or Enhanced check, someone in the chain must be registered to request it, sometimes through an Umbrella Body that countersigns applications on behalf of organisations that are not registered with the DBS themselves.

Identity verification checks

Every background check starts with identity, and the UK has been moving this step online. For Right to Work checks, the Home Office online service verifies identity digitally through the share code route. For DBS applications, the DBS publishes identity checking guidance that sets out which combinations of documents are acceptable, and digital identity providers can now be used for some routes.

For employers, the practical rules are simple: verify identity before submitting any other check, use original documents or an approved digital route rather than photocopies, and record what was checked and when. A criminal record check run against the wrong identity is worthless, and mismatches between the name on an identity document and the name on an application are one of the most common causes of processing delays.

Adverse credit and financial checks

An adverse credit check looks at a candidate’s financial history through credit reference agencies: county court judgments, bankruptcies, individual voluntary arrangements and records of defaulted accounts. It requires the candidate’s consent, and it is entirely separate from the DBS system.

These checks matter most in financial services. Firms regulated by the Financial Conduct Authority must assess the fitness and propriety of people in senior roles under the Senior Managers and Certification Regime (SMCR), and financial soundness is part of that assessment. Insurance companies, firms handling client money and roles with access to payment systems also commonly use credit checks. Outside regulated sectors, employers can only justify a credit check where it is relevant to the role, and they should say so in advance rather than springing it on a candidate during onboarding.

Background checks by industry

Which checks are mandatory depends heavily on the sector. The matrix below maps the most common combinations.

Two of these deserve a note. BPSS is a baseline screening standard rather than a legal licence: it is the minimum expected for many government and defence contracts, and higher levels of security clearance build on it. BS7858 is the British Standard for screening people in security environments, and it goes further than a DBS check by adding employment history verification and financial checks. Both are layered on top of the criminal record check, not substitutes for it.

Social media and adverse media screening

Some employers also screen candidates’ public social media presence and open-source news coverage, sometimes called adverse media screening. There is no statutory framework for this in the way there is for DBS checks, which means the legal constraints come from UK GDPR, data protection principles and employment law rather than from a dedicated screening regime.

Done properly, this kind of screening is documented, proportionate and disclosed to the candidate: the employer states what will be searched, who will review the results and how findings will be assessed. Done casually, it means a hiring manager scrolling a candidate’s personal profiles and making decisions on irrelevant information, which creates discrimination risk. Employers who need this layer are best served by a written policy and, where volume justifies it, a specialist screening provider rather than ad hoc manual searches.

Time spent abroad: what a DBS check will not show

A DBS check searches UK records only. The Police National Computer (PNC) holds convictions and cautions from UK courts and police forces, and it knows nothing about a candidate’s years spent living in another country. Employers who need coverage of overseas periods have to ask the candidate to obtain a police certificate from each relevant country, often called a certificate of good conduct.

The process varies by country, and documents issued abroad frequently need legalisation before a UK employer can rely on them. If you are a UK resident who has been asked by a foreign authority or employer for proof of your UK criminal record, the document you need is an ACRO Police Certificate, which is a different product from a DBS check. Conversely, if you need a police certificate from a country where you previously lived, the route is usually that country’s police authority, and our guide to the police clearance certificate explains how that works. For the United States specifically, the process runs through the FBI, covered in our guide to the FBI background check. Foreign-issued certificates used in the UK often also need apostille legalisation, which is the core service described on the Apostille & Document Legalisation Servic homepage.

Choosing the right combination

For most hires, a compliant baseline looks like this: a Right to Work Check before day one, identity verification before anything else, and a Basic DBS Check unless the role specifically qualifies for a higher level. Add a DVLA Check for driving, adverse credit for regulated financial roles, and the relevant sector standard (BPSS, BS7858 or barred list checking) where the industry requires it. The single most useful habit for employers is to map each role to its required checks in advance, in writing, so that every candidate for the same role gets the same screening. That protects candidates from over-checking, protects employers from under-checking, and makes the whole process predictable for everyone involved.

See also

• Our Partner Programme
• ACRO Police Certificate: Application and Legalisation for Use Abroad
• Certified Translation for UK Visa Applications