You’ve interviewed the candidate. They were impressive. Their CV reads well, their references look solid, and your gut says yes. So you make the offer, they join, and three months later, you’re sitting across from your lawyer, wondering how you missed the fact that the last three employers on their CV don’t exist.
It happens more than anyone in HR likes to admit.
Kenya has a very specific problem with fraudulent credentials. Fake River Road certificates, certifications from universities the candidate never attended, employment histories at companies they never worked for, and job titles that were quietly upgraded between leaving and applying. These aren’t edge cases. They’re common enough that any HR professional who has been in this long enough has a story.
Reference checks are how you catch this before it costs you. Done properly, they protect you from fraud, give you a fuller picture of who you’re actually hiring, and demonstrate due diligence if a hiring decision is ever questioned.
Done poorly, which is how most Kenyan companies do them, they’re a box-ticking exercise that provides false confidence and no real protection.
Why Background Checks Matter
Background checks have never been more essential for SMEs. The tooling, expertise, and barrier of entry for fraud is now lower than ever, and anyone seated in their bedroom can draft a certificate that finds itself in your employment pipeline. Here’s why these checks matter:
Trust and Transparency
Every hire is an act of trust. Background checks don’t eliminate the need for it; they give you a factual basis for extending it. There’s a difference between trusting someone because they interviewed well and trusting someone because their identity, credentials, and history have been independently verified.
Risk Mitigation
A bad hire is expensive, and in some industries like finance and banking, it can be catastrophic. Recruitment costs, onboarding time, lost productivity, and the disruption of eventually letting someone go all add up quickly. For roles involving financial access, client relationships, or sensitive data, the stakes are even higher.
Quality of Hire.
Verifying qualifications and employment history ensures the competencies you assessed in the interview are backed by real experience, not a well-designed CV.
Reduce Turnover.
Right-fit hires stick around longer. When you confirm that a candidate’s background matches the role’s requirements, you’re already reducing the odds of a costly early exit.
International Compliance for Remote Hires.
If your business hires for clients or partners outside Kenya, background checks are often a condition of onboarding. Many UK and US companies won’t proceed without documented screening. Having a clear process makes you a credible partner in cross-border hiring.
The Legal Framework: What You Can and Can’t Do
Under Articles 31(c) and (d) of the Constitution of Kenya, every citizen has a constitutional right to privacy, and that right extends to employment contexts. The Data Protection Act 2019, which came into effect on 25th November 2019, reinforces this. Under the Act, collecting or processing personal data requires a lawful basis, and in recruitment, that basis is informed, written consent.
In practice, you must get written consent before running any check. Verbal agreement isn’t enough. You can only collect data relevant to the role; a financial history check on a receptionist is hard to justify; the same check on a CFO is entirely reasonable. Data must be stored securely, used only for the stated purpose, and candidates have the right to access and challenge it.
Ignoring these requirements doesn’t just expose you to regulatory risk. It damages trust with candidates and, if it becomes known, with the broader talent market.
Types of Background Checks
Not every role needs every check. Match the check to the risk profile of the role.
Identity Verification.
Confirming the person is who they claim to be using a valid National ID or passport. This one applies to every hire, no exceptions.
Criminal History Check.
A Certificate of Good Conduct from the DCI confirms whether a candidate has a criminal record in Kenya. Essential for roles involving children, financial responsibility, or access to sensitive assets. Applied for via eCitizen, factor two to four weeks into your timeline.
Education and Professional Qualification Verification.
Go directly to the issuing institution, the university, KNEC, or professional body. Do not rely on the certificate the candidate hands you. Call the institution. Use official verification channels. For professional qualifications like CPA or CIFA, verify with the relevant regulatory body.
Employment History Verification.
Contact previous employers directly to confirm dates, job title, and rehire eligibility. Where a previous employer can’t be reached or doesn’t exist, that is itself significant information.
Reference Checks.
A structured conversation with a previous manager about performance, working style, and development areas. Done well, it tells you things no interview ever will. Done badly, “Were they good?” “Yes, very,” it tells you nothing.
Financial Checks (Role-Dependent).
For CFOs, accounts managers, and procurement roles, a credit history check can surface undisclosed financial pressures. Sensitive, requires clear justification, and is not appropriate for general hiring.
The Step-by-Step Process
Here is a detailed step-by-step checklist you can follow next time you want to do a background check on a candidate you are hiring:
Step 1: Identify the checks you need.
Doing verification and role checks for everything just introduces friction in the hiring process and increases the cost of hiring.
Map the role, assess the risks, and build a checklist specific to the position rather than applying a blanket template to everything.
Step 2: Seek and document consent.
Your consent form should state what checks will be run, how data will be used, who will access it, and how long it will be retained. The candidate signs it. You keep it on file.
Step 3: Collect the necessary documents.
Depending on the checks, you’ll typically need some combination of: National ID or passport copy, proof of address, educational certificates, professional qualification certificates, Certificate of Good Conduct, payslips from previous employment, driving license, and, where relevant, medical or drug testing records. Only collect what you actually need; collecting documents you have no use for is a liability, not due diligence.
Step 4: Verify directly.
Contact institutions, employers, and references yourself. Don’t rely on what the candidate submits.
Step 5: Document your findings.
What was verified, what couldn’t be verified, what discrepancies were found, and what they mean in the context of the role. This is your record if the decision is ever challenged.
Step 6: Make the decision.
A background check is one input, not the final word. A fabricated degree is different from a minor date discrepancy. Apply judgment, consider relevance to the role, and document your reasoning.
Common Mistakes Kenyan Employers Make
Running verification checks on employees may seem simple at first glance, but there are complications that arise quickly and are costly to fix. Here are some mistakes you should be on the lookout for:
Running checks after the offer.
Checks should happen before a formal offer, or at a minimum as a clear condition of it. Running them after someone has already joined creates legal complications if findings require action.
Calling one reference and calling it done.
One phone call to a reference the candidate selected is not a reference check. Speak to at least two people, including a direct manager where possible, and ask structured questions.
Accepting documents at face value.
Filing away a degree certificate without verifying it is document collection, not an education check. They are not the same thing.
Applying checks inconsistently.
Running thorough checks on some candidates and not others, or varying the standard based on factors unrelated to the role, exposes you to discrimination claims.
Wrap Up on Reference Checks in Kenya
Employee background checks done properly aren’t bureaucratic. They’re how you protect your business, your team, and the people you serve from the very real risks of the Kenyan hiring market.
If you need help designing a compliant, effective process, Bridge Talent’s HR specialists are ready to help. Reach out today.
Frequently Asked Questions
Here are some questions you might have about employee background checks:
Is it legal to run a background check without telling the candidate?
No. The Data Protection Act requires informed, written consent before you collect or process any personal data. No exceptions.
Can a candidate refuse to consent?
Yes. At that point, you decide whether proceeding without the checks is acceptable given the role’s risk profile. For roles involving financial responsibility or vulnerable populations, it usually isn’t.
What do we do if we find a discrepancy?
Give the candidate a chance to explain before deciding. There can be legitimate reasons. Hear the explanation, assess it, and document your conclusion either way.
Can we use a third-party background check company?
Yes. For high-volume or senior hiring, this is often the most efficient route. Ensure they’re compliant with the Data Protection Act and that your consent form covers third-party involvement.
What if we hire someone and later discover their credentials were fraudulent?
This is a fundamental breach of contract and grounds for summary dismissal under the Employment Act. Document everything, follow a fair process, and involve HR legal counsel.
