If your standard hiring packet still includes a credit check for every applicant, your background screening process may now be illegal in a dozen states. In April 2026, New York became the eleventh state to broadly prohibit employers from requesting or using credit history in hiring, joining California, Colorado, Connecticut, Hawaii, Illinois, Maryland, Nevada, Oregon, Vermont, and Washington — plus cities like New York City and Chicago that have had their own bans for years. And even where credit checks remain legal, the federal Fair Credit Reporting Act (FCRA) imposes a strict sequence of disclosures and notices that trips up small employers constantly.
Nearly half of employers use credit reports somewhere in hiring, according to a 2023 Urban Institute estimate. If yours is one of them, here is how to tell whether you can keep doing it, which roles still qualify for an exception, and the federal steps you owe every applicant regardless of state law.
Why Credit Checks Became a Legal Minefield
The policy argument is straightforward: lawmakers increasingly view credit history as a record of economic hardship — medical debt, a layoff, a divorce — rather than a measure of honesty or job performance. A candidate who missed payments during a rough patch may be perfectly trustworthy handling your register, but a blanket credit screen filters them out before the interview. That concern has driven a steady wave of state restrictions over the past fifteen years, and the trend is accelerating: New York's statewide ban took effect in April 2026, and federal legislation to restrict the practice nationally gets reintroduced regularly.
For a small business, the practical risk is not a headline-grabbing lawsuit. It is quieter than that: a rejected applicant files a complaint with the state labor agency, or disputes a report you never showed them, and suddenly you are explaining a process you inherited from a screening vendor's default package years ago. The fix is a deliberate, documented policy — which roles get screened, under which exception, and with which notices.
Where Employment Credit Checks Are Restricted
As of 2026, eleven states restrict or prohibit the use of credit history in employment decisions:
- California, Colorado, Connecticut, Hawaii, Illinois, Maryland, Nevada, Oregon, Vermont, and Washington — the original ten, each with its own scope and exception list.
- New York — effective April 2026, an amendment to the state Fair Credit Reporting Act bars employers from requesting or using consumer credit history in hiring, compensation, promotion, and termination decisions, with narrow exceptions.
On top of that, several cities add their own rules. New York City has banned most employment credit screening since 2015 under the Stop Credit Discrimination in Employment Act. Chicago restricts the practice as well. And many states that have no credit-check ban still regulate background screening generally, so "my state isn't on the list" is not the end of the analysis.
Two things to note about this list. First, it grows: every legislative session brings new proposals, and multi-state employers should assume the most restrictive rule among the states where they hire. Second, the bans generally cover both applicants and current employees — you cannot run credit checks at promotion or retention time either, unless an exception applies.
When You Can Still Check: The Job-Related Exceptions
Every ban has exceptions, and they follow a consistent logic: credit history is permitted only where the job genuinely involves financial trust. The exact wording varies by state, but the common exempt categories are:
Positions with financial authority or access
Most states allow credit checks for roles that involve handling cash, accessing bank accounts, signing company checks, processing payments, or exercising fiduciary authority. New York's law, for example, preserves checks for positions with significant financial authority, reportedly tied to managing assets above a threshold, as well as roles where a check is required by law or by a financial regulator.
Law enforcement and security-clearance roles
Peace officers, positions requiring a federal or state security clearance, and jobs where employees must be bonded under law are routinely exempt.
Access to trade secrets and sensitive data
Several states — including New York — exempt positions with regular access to trade secrets or nonpublic personal information, recognizing that financial distress can be a fraud risk factor in narrow, high-access roles.
Practical rules for using an exception
- Tie the check to the duties, not the department. "Everyone in finance gets screened" is weaker than "this role approves wires over a set amount." Document which duties trigger the exception for each job description.
- Apply it consistently. Screening some candidates for a role but not others invites discrimination claims even when the check itself is lawful.
- Re-verify when duties change. A promotion into an exempt role is a new decision — run the process fresh rather than relying on a report pulled years ago at hire.
- Coordinate with your vendor. Tell your background screening provider which positions are exempt and instruct them not to return credit data for everyone else. Several employment attorneys flagged this as the first cleanup step after New York's ban took effect.
If no exception fits, stop running the check in that state. There is no small-business carve-out: the bans apply whether you have five employees or five thousand.
The FCRA Steps You Owe Everywhere
State bans decide whether you may pull a credit report. The federal Fair Credit Reporting Act decides how — and it applies in all fifty states whenever you use a third-party consumer reporting agency for employment screening. The Federal Trade Commission's employer guidance lays out a sequence with no shortcuts:
1. Standalone disclosure, before you order anything
Give the applicant a clear written disclosure that you may obtain a consumer report for employment purposes. This must be a standalone document — not buried in the job application, not bundled with a liability waiver or state-law acknowledgments. Courts have penalized employers for "extraneous information" in the disclosure, so keep it to one purpose on one page.
2. Written authorization from the applicant
Get the applicant's written permission before procuring the report. The authorization may be combined with the disclosure document, but the disclosure itself must stay clean. Keep the signed copy in the hiring file.
3. Pre-adverse-action notice, before any negative decision
If the report might lead you not to hire (or to rescind an offer, deny a promotion, or terminate), you must first give the applicant:
- A copy of the consumer report you relied on
- A copy of the CFPB's "Summary of Your Rights Under the FCRA"
- A notice that you are considering adverse action
Then wait. The statute sets no fixed number of days, but the FTC expects a reasonable period — five business days is the widely used benchmark — so the applicant can review the report and dispute errors. Credit reports contain mistakes at a meaningful rate, and this waiting period is the applicant's only chance to catch one before it costs them the job.
4. Final adverse-action notice, after the decision
If you proceed with the negative decision, send a final notice stating:
- That adverse action was taken based in whole or in part on the report
- The name, address, and phone number of the reporting agency (which did not make the hiring decision and cannot explain it)
- That the applicant has the right to a free copy of the report within 60 days and the right to dispute its accuracy
The EEOC layer: disparate impact
Even a fully FCRA-compliant credit check can draw scrutiny from the Equal Employment Opportunity Commission if it screens out protected groups at a higher rate without a demonstrated business necessity. The EEOC has pursued this theory against employers whose blanket credit screening had a disparate impact. The defense is the same discipline described above: limit checks to roles where financial history is genuinely job-related, apply the policy consistently, and consider individualized assessment rather than automatic disqualification over a score cutoff.
Mistakes Small Employers Make Most Often
Bundling the disclosure into the application. The single most litigated FCRA issue. If your disclosure shares a page with anything else — an at-will acknowledgment, a liability release, state notices — split it out.
Skipping pre-adverse action because the decision feels obvious. A bankruptcy or collection account does not excuse the two-step notice process. Send the pre-adverse packet, wait, then decide.
Running informal credit checks yourself. Pulling a candidate's credit through a personal account, asking about debts in the interview, or "just Googling" financial history can violate both the FCRA and state bans while creating a paper trail of exactly what you considered. If you need the information lawfully, go through a compliant vendor with authorization.
Using stale reports. A report pulled at hire says nothing about today. Re-screening for a promotion or retention decision needs fresh authorization and fresh notices — and in ban states, a fresh look at whether any exception applies.
Assuming the vendor handles compliance. Screening companies provide reports; the disclosure, authorization, and notice obligations are yours. Audit what your vendor returns for each role against your exception list at least annually.
Forgetting remote hires. If you hire remotely into a ban state, that state's law typically follows the employee. A Texas company hiring a remote worker in Illinois must follow Illinois restrictions for that hire.
What This Has to Do With Your Books
Hiring compliance and bookkeeping intersect in two practical ways. First, the roles most likely to qualify for a credit-check exception — cash handling, payment processing, bookkeeping itself — are exactly the roles where you also need segregation of duties: the person who approves payments should not be the person who reconciles the bank account. A credit check is one control; separation of financial duties is the control that works every day, and it costs nothing to design into a small team.
Second, keep the paper trail clean. Background screening fees are an ordinary deductible hiring expense — book them to a hiring or HR expense account rather than burying them in general office costs, so you can see what compliant hiring actually costs per role. And retain signed authorizations, disclosure copies, and adverse-action notices with your hiring records: if a dispute arises two years later, "we followed the process" only persuades if you can produce the documents.
Keep Your Hiring and Your Books Defensible
Credit screening in 2026 is a narrow tool, not a default step: barred outright for most roles in eleven states and several major cities, permitted only for financially sensitive positions under specific exceptions, and wrapped in FCRA notice requirements everywhere else. Audit your screening package against the rules above, document which roles qualify and why, and make the disclosure-authorization-notice sequence automatic rather than ad hoc.
As you tighten up hiring compliance, give the same discipline to the financial records behind it. Beancount.io provides plain-text accounting that gives you complete transparency and control over your financial data — no black boxes, no vendor lock-in. Get started for free and see why developers and finance professionals are switching to plain-text accounting.
