Employment Decisions

Bust Out Fraud: When a Legitimate Business Is Turned Into a Weapon

Bust‑out fraud is one of the most damaging forms of business fraud. Unlike schemes that rely on fictitious companies or obviously forged documentation, bust‑out fraud exploits real businesses with real credit histories, turning legitimacy itself into the fraudster’s most powerful tool.

We recently found records involving a bust‑out scheme while performing research in connection with a commercial lending transaction. While the specific circumstances are confidential, the pattern was familiar and increasingly common across industries.

What Is Bust‑Out Fraud?

Bust‑out fraud occurs when an individual or group gains control of an existing business, builds or exploits its creditworthiness, and then rapidly incurs debt with no intent to repay. Once the credit is exhausted, the perpetrators disappear, leaving lenders, vendors, and partners with the losses.

What makes bust‑out fraud especially dangerous is that it often looks like normal business activity, until it’s too late.

How Bust‑Out Fraud Typically Works

A classic bust‑out scheme unfolds in recognizable stages:

  1. Acquisition or Control
    The fraudster purchases a business, installs themselves as an officer, or otherwise gains operational control, sometimes through seemingly legitimate mergers, management changes, or filings.
  2. Quiet Period / Credit Grooming
    For months (or longer), the company operates normally. Bills are paid on time. Credit limits may even be modestly increased. The goal is to reinforce trust.
  3. Rapid Credit Expansion
    Once confidence is established, the business applies for additional loans, vendor credit, leases, or financing, often simultaneously and across jurisdictions.
  4. Cash‑Out Phase
    Assets, inventory, or loan proceeds are diverted. Payments suddenly stop. Executives resign or become unreachable.
  5. Collapse
    The company folds, files for bankruptcy, or simply goes dark, leaving creditors scrambling to unwind what happened.

Real‑World Examples of Bust‑Out Fraud

While every scheme differs in execution, the following examples illustrate common variants.

  • Example 1: The “Too Smooth” Acquisition

A mid‑sized services firm is acquired by a new holding company. The new leadership existing staff and contracts in place, pays vendors promptly, and even invests modestly in marketing. Within a year, the company secures multiple six‑figure credit lines, followed by a sudden wave of equipment purchases and short‑term loans. Three months later, the business defaults across the board and leadership vanishes.

  • Example 2: Vendor Credit Exploitation

A long‑standing distributor with excellent payment history begins placing unusually large orders with multiple suppliers at once, negotiating extended terms. The inventory is resold quickly, often below market, to generate immediate cash. Vendors discover the fraud only after invoices go unpaid and bankruptcy filings appear.

  • Example 3: Identity Leverage Across Borders

A legitimate company with international operations is acquired by new principals. Corporate records are updated in multiple jurisdictions. The firm then secures financing in countries where credit checks rely heavily on corporate registration rather than beneficial ownership. The debt accumulates rapidly and enforcement becomes complicated once the entity dissolves.

Why Bust‑Out Fraud Is Hard to Detect

Bust‑out fraud often evades traditional fraud controls because:

  • The business already exists
  • Credit histories appear legitimate
  • Documentation is often technically correct
  • Early behavior reinforces trust rather than raising alarms

In many cases, the change in intent, not the change in structure, is what transforms a normal business into a fraud vehicle.

Final Thoughts

Bust‑out fraud exploits legitimate businesses and may remain concealed without thorough due diligence. In this instance, background screening identified prior involvement by the loan applicants in a bust‑out scheme, underscoring the value of a risk‑based review in identifying fraud risks before material exposure occurs.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

The Quiet Risk in Background Screening: How Compliance Drift Takes Hold

Compliance failures aren’t usually the result of one big mistake. Instead, they happen through a compliance drift–the slow, quiet decoupling of your written policies from the ever-changing laws and daily operations. In background screening, “standing still” is the fastest way to fall out of compliance.

Why Programs Drift

Your policy might be static, but the world around it isn’t. Drift happens because:

  • Regulations move faster than handbooks: state and local Ban-the-Box, credit check, or salary history laws sometimes change quarterly, or even monthly, not annually.
  • Operational shortcuts become the norm: recruiters under pressure to hire may skip steps or run screens early, creating “shadow processes” that bypass legal safeguards.
  • Tech updates rewrite your rules: vendors update platforms and data sources; if you haven’t reviewed your settings lately, your software might be making decisions your policy doesn’t authorize.
  • Growth outpaces governance: M&A activity and remote hiring across new borders often introduce legacy risks that never get fully integrated or vetted.

The Warning Signs

Is your program drifting? Watch for these red flags:

  • “That’s how we’ve always done it”: the most dangerous phrase in compliance.
  • Policy ghosting: your manual references vendors or tools you no longer use.
  • Inconsistency: similar roles are being screened using different packages or criteria.
  • The “exception” rule: you have more undocumented “rush” hires than standard ones.

How to Anchor Your Program

To stop the drift, move from passive administration to active governance.

  1. Assign an Owner: Compliance shouldn’t be “implied.” One person must own the bridge between Legal, HR, and the Vendor.
  2. Audit the Workflow, Not Just the Paper: Don’t just read the policy; watch a recruiter or HR actually initiate a screen. Gaps often hide in the clicks, not the text.
  3. Sync with Your Vendor: Regular check-ins and platform reviews are essential to ensure that the search strategies, screening packages, configurations, data sources, and decision tools still align with your policy and risk tolerance.

The Bottom Line: Compliance drift is silent until it’s deafening. If you aren’t actively managing the gap between what your policy says and what your business does, you’re already behind.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Applicant Data Poisoning: Can You Trust What You See?

For years, employers relied on a candidate’s digital footprint as an honest record. Resumé databases and automated “scrapers” created a convenient digital paper trail that made hiring fast.

That era is over. A trend called Data Poisoning is allowing job seekers to manipulate or completely manufacture their professional identities using AI. When a past can be rewritten with a single prompt, automated screening tools lose their footing.

The result? A hiring ecosystem where digital signals can no longer be taken at face value.

The Anatomy of a Digital Lie

AI has turned the professional past into a sandbox. Data poisoning typically falls into three categories:

  • Scrubbing the Past: AI “cleanup” tools erase years of unprofessional content or rewrite profiles in seconds to fit a new narrative.
  • Fabricating Histories: Generative AI creates flawless resumés, invented career trajectories, and portfolios for companies that never existed.
  • Forging Identities: Sophisticated “synthetic” personas now use deepfake selfies and manipulated IDs to bypass basic automated verification.

The Cure: Traditional Direct-Source Verification

Direct-source verification, which is the hallmark of a traditional, rigorous background check bypasses manipulated digital footprints by going straight to the origin.

  • Employment: Verify titles, dates, and details directly with HR or the payroll department, and not LinkedIn or through contact information supplied by the applicant.
  • Education: Confirm degrees and attendance with the registrar of the issuing institution, and check to ensure that the school is accredited.
  • Licenses: Validate credentials through real-time checks with official licensing boards.

Spotting the “Too Perfect” Candidate

AI-generated profiles often lack the “messy” markers of a real career. The red flags typically include social profiles with no organic history or recent bulk edits, and overly generic, AI-polished language that lacks specific local or industry context.

The Bottom Line: Don’t Just Scan–Verify

Data poisoning isn’t a theoretical risk; it is an active strategy used to bypass automated filters. In an era where anyone can rewrite their digital past, the strongest hiring decisions don’t come from a faster algorithm–they come from confirming what is real at the source.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

The Hiring Line: Work Authorization, Sponsorship, and E-Verify

You have 10 open roles and 100 applicants, and you want to know now who can actually work. But in the eyes of the law, curiosity can look a lot like discrimination. To protect your company, you need to know exactly where the “No-Go” zone begins.

The Pre-Offer “No-Go” Zone

Until you’ve extended a formal offer, your curiosity is legally capped. Federal guidance (under the INA) is a “two-question only” territory.

You CAN ask:

  1. “Are you legally authorized to work in the United States?”
  2. “Will you now or in the future require sponsorship for employment visa status?”

You CANNOT ask:

  • “Are you a U.S. citizen?”
  • “What is your visa type?” (H-1B, L-1, etc.)
  • “Can I see your Green Card or Passport?”
  • “Where were you born?”

Digging into citizenship or requesting documents too early is considered a discriminatory hurdle. Unless you fall under a narrow exception, it’s a fast track to a DOJ audit.

The Narrow Exception

There are limited situations when you can ask about citizenship upfront. This only applies if a law, executive order, or government contract requires it. Examples include:

  • Federal jobs: specific roles requiring U.S. citizenship.
  • Export controls: positions dealing with ITAR/EAR (defense and high-tech) where access is restricted by nationality.
  • Security clearances: roles that require a “Secret” or “Top Secret” stamp from the government.

E-Verify is for Post-Offer Only

E-Verify is a web-based system operated by the USCIS that electronically compares a new hire’s Form I-9 information with DHS and SSA records to confirm work authorization. It’s free and voluntary for most employers, although mandatory for certain federal contractors and by some states as a condition of business licensing or employment practices. Employers must create an account and sign a Memorandum of Understanding (MOU) with DHS and SSA before using E Verify.

Here’s the E-Verify flow:

  • Employee accepts an offer
  • Employee completes Form I-9
  • Employer enters I-9 data into E Verify
  • System checks the data against SSA and DHS records
  • Employer receives results

What Can Background Screening Companies Do?

Background screening companies must follow the same pre‑offer rules as employers, meaning they cannot check, request, or verify citizenship, visa type, or immigration status.

After a conditional offer, they can help verify work authorization only by reviewing the documents the employee provides for Form I‑9 and running E‑Verify, providing they are registered as an E‑Verify Employer Agent and the employer is enrolled. (Employers must still sign the MOU with the DHS and remain legally liable for any compliance slip-ups.) ‑

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Politics in Employment Screening

As political expression becomes increasingly visible online, employers face a difficult question: Does political activism have a place in personnel decisions? While much of this information is publicly accessible, its use in hiring is governed by a complex web of federal, state, and local laws. Employers must carefully distinguish between protected political expression, criminal conduct, and in limited circumstances where political contributions may create regulatory compliance obligations.

Screening for Cultural Fit Based on Politics

Using political views or lawful participation to assess a cultural fit is a risky strategy. While federal law does not explicitly protect political affiliation for private-sector employees, many states (such as California, New York, and Colorado) and local jurisdictions do. Even in “at-will” states without specific political protections, using political beliefs as a filter can inadvertently create a discrimination claim. This occurs if political views correlate with protected characteristics like race, religion, or national origin.

Lawful Political Activity vs. Criminal Conduct

Peaceful rallies, advocacy, volunteering, and public expression are generally protected by state-level “off-duty conduct” laws. If an individual engages in rioting, vandalism, assault, or trespassing for example, an employer may consider the criminal offense. The focus must remain on the illegal act, regardless of whether it was motivated by a political cause. When evaluating such criminal history, employers must still adhere to “Fair Chance” or “Ban-the-Box” laws, which dictate when and how employers can ask about a candidate’s record.

When Political Donations Matter

In the financial sector, political screening is not just a choice—it is often a regulatory requirement. Under SEC Rule 206(4)-5, certain political contributions by “covered associates” can trigger a two-year ban on the firm receiving compensation from government clients. To remain compliant, firms may conduct political contribution reviews for relevant roles. These reviews typically cover the previous two years (or six months for certain new associates). This screening must be used strictly for regulatory compliance, not to vet a candidate’s personal ideology.

 Bottom Line

Political screening can be a legal minefield. When handled with precision, background screening supports regulatory obligations; when handled poorly, it invites discrimination lawsuits.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Googling Job Applicants: Legal? Yes. Risky? Yes.

In today’s hiring landscape, it’s almost second nature for employers to type an applicant’s name into Google or check out their social media. If the information is public, it must be fair game, right?

Not exactly. While you can look, doing so without a structured process can expose your organization to significant legal and compliance risks.

Public Information Is Accessible But Comes With Hidden Liability

Employers may view publicly available online content without obtaining specific authorization. However, a simple search can unintentionally reveal protected characteristics such as age, race, religion, disability status, or pregnancy. Once discovered, this information could fuel discrimination claims if the applicant later challenges a hiring decision. The principle is simple: what’s seen can’t be unseen, and that creates risk.

Private Accounts Are Off-Limits

No employer should ever:

  • Request social media passwords
  • Ask applicants to access private accounts
  • Send “friend” requests to gain entry
  • Ask for screenshots of private content

In California, these actions are illegal under Labor Code § 980. Many other states have enacted similar protections.

FCRA Applies If Using An Outside Service

If an employer hires any third-party service to review an applicant’s online presence, the process becomes a consumer report under the Fair Credit Reporting Act (FCRA).That means employers must:

  • Provide a standalone written disclosure
  • Obtain written authorization
  • Follow pre-adverse and adverse action procedures before rejecting based on the report

Ignoring FCRA obligations is one of the most common and expensive hiring pitfalls.

Best Practices To Reduce Risk

To protect your organization and ensure a fair, compliant hiring process:

  • Create a structured, consistent process for any online screening.
  • Use a “firewall” between the person viewing online content and the final decision-maker.
  • Limit reviews to public, job-related information only.
  • Document your screening approach and maintain it across roles.
  • Apply the same process to all candidates to avoid disparate treatment.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Your Next Hire Is Online. Here’s How to Screen Them Legally.

Social media screening is legal, but only if done right. Here are the essentials.

Federal nondiscrimination laws still apply.
Anything that reveals protected characteristics (race, religion, disability, age, pregnancy, etc.) cannot influence a hiring decision.

Using a third‑party screener? That triggers the FCRA.
Employers must provide a standalone disclosure, get written authorization, and follow pre‑adverse and adverse‑action steps. Accuracy rules also apply and the CFPB is enforcing them more aggressively.

28 states restrict employer access to personal social media.
Most ban requesting login credentials, requiring applicants to log in on the spot and demanding they add HR as a “friend.” In some states, even asking for a username may create risk.  

Public vs. private content matters.
Employers may review public posts but accessing private content without permission can violate the federal Stored Communications Act.

NLRA protections apply online.
Employees’ posts about wages or working conditions may be protected concerted activity. Don’t treat them as negative findings.

California adds extra compliance layers.
ICRAA and CCRAA impose stricter disclosures when using third‑party screeners.

Best Practices

Use a consistent, documented process focused ONLY on job‑related behaviors (e.g., threats, fraud, harassment). Keep decision makers away from protected information. Never request access credentials. Stick to public content. And follow the FCRA if a third-party is involved.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Bankruptcy Records: Credit Reports Erase Them But Employment Background Checks Find Them

Many people assume that once a bankruptcy drops off their credit report, it disappears everywhere.

Not true. And this difference matters, especially for employers and job seekers.

Credit Reports Follow Standard FCRA Time Limits

Under the Fair Credit Reporting Act (FCRA), national consumer reporting agencies (TransUnion, Experian, Equifax) must remove bankruptcies after specific time periods:

  • Chapter 7: reportable for up to 10 years
  • Chapter 13: typically removed after 7 years, sometimes sooner
    Once these limits are reached, credit bureaus delete the record entirely, meaning they cannot provide it for any purpose, including employment screening.

Employment Background Checks Work Differently

Employment screening companies are also consumer reporting agencies under the FCRA, but they don’t rely solely on credit bureaus. They frequently pull records directly from the courthouse, which may contain older bankruptcy filings long after the credit bureaus deleted them.

Under the FCRA’s $75,000 salary exception, employment background check companies may report adverse information with no time limit. So if a bankruptcy exists in public court records, it may still appear on an employment background check even though it no longer appears on a credit report.

State Reporting Laws Add Another Layer

Several states have their own rules on how long bankruptcy records may be reported in employment background checks–specifically California, Colorado, Kansas, Maryland, Massachusetts, Montana, New Hampshire, New Mexico, New York, Texas, and Washington. California, for example, prohibits reporting a bankruptcy that is more than 10 years old measured from the date of the relief order, unless a narrow exception applies.

Bottom Line

A bankruptcy “dropping off” your credit report does not guarantee it disappears from employment background checks. Different rules, different timelines.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Can Employers Charge Job Applicants for Their Background Check?

When candidates apply for a job, they expect a thorough screening process: interviews, reference checks, and often a formal background check. But can an employer require a job applicant to pay for their own background check?

The answer is more nuanced than a simple yes or no. It depends on state law, federal wage-and-hour rules, and how the background check is conducted.

Federal Law: No Direct Prohibition, but Important Limits

At the federal level, there is no law that explicitly prohibits an employer from requiring applicants to pay for a background check. The Fair Credit Reporting Act (FCRA) regulates how background checks must be conducted but it does not regulate who must pay for the screening.

However, the federal Fair Labor Standards Act (FLSA) does impose limitations once a person becomes an employee. Employers cannot deduct background check costs if doing so would reduce the individual’s pay below the minimum wage for that workweek. While this usually applies to employees, not applicants, it still influences how some states treat pre‑employment expenses.

State Laws: The Deciding Factor

State legislation determines whether an employer can charge job seekers for the cost of a background check. And many states say no. These include: California, Louisiana, Minnesota and Vermont.

In states without specific prohibitions, employers may legally require applicants to pay for background checks as long as the practice does not violate any other wage, consumer protection, or hiring transparency rules.

Should Employers Charge Applicants?

Even in states where charging applicants is legal, many employers avoid it for several reasons:

  • Competitive Disadvantage

Requiring applicants to pay, especially lower‑wage candidates, may shrink an employer’s talent pool.

  • Perception and Candidate Experience

Applicants may view the request as unfair or predatory, damaging employer reputation.

  • Administrative Burden

Collecting fees, issuing reimbursements, and maintaining compliance increases operational complexity.

 

  • Equity Concerns

Cost‑shifting disproportionately impacts economically vulnerable job seekers.

For these reasons, most employers see background check costs as part of doing business.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

New Year, New Rules: Recap of What’s Coming in 2026 in Employment Screening

2026 marks a series of newly enacted laws taking effect across the country. Employers must adapt quickly to ensure compliance and maintain fair hiring practices. Below are the most significant changes taking effect this year.

District of Columbia: Second Chance Law (Effective January 1, 2026)

  • Automatic sealing of decriminalized offenses (such as pre-2015 marijuana convictions) and various older convictions.
  • Petition avenues for sealing additional convictions.
  • Employers are not permitted to access or act on any records sealed under this new law.

Philadelphia: Criminal Record Screening Amendment (Effective January 6, 2026)

  • Look-back periods cut; only felonies within the past 7 years and misdemeanors within the last 4 years are eligible for consideration, while minor offenses (summaries/infractions) are entirely excluded.
  • Requires “pre-adverse action notices” over a ten-day candidate response period, and robust documentation, even extending the 90-day protection against adverse action following protected activity.

New York State: Credit-Check Ban (Effective April 18, 2026)

  • Employers, including staffing firms, cannot request or use any “consumer credit history” for hiring, promotion, compensation, or other employment decisions, unless a statutory exemption applies.
  • This statewide ban aligns with New York City’s Stop Credit Discrimination in Employment Act (SCDEA), extending similar protections across the entire state.
  • The expansive definition of “credit history” covers credit reports, scores, credit accounts, and payment histories and, similar to the SCDEA, it likely prohibits searches of public records for bankruptcies, judgments, and tax liens unless an exemption applies.

Washington State: Fair Chance Enhancements (Effective July 1, 2026)

  • Employers with 15+ employees must wait until “after extending a conditional job offer” to inquire about criminal history; this rule extends to all employers by January 1, 2027.
  • Arrests, juvenile convictions, and non-conviction adult records are off-limits in hiring decisions. Only relevant adult convictions may be considered and only with a documented legitimate business justification, accompanied by a written notice and at least two business days for a candidate’s response.

Virginia: Clean Slate Law (Effective July 1, 2026)

  • Numerous misdemeanors and low-level felonies will be “automatically sealed” disappearing from standard background checks.
  • Employers and screening vendors are expressly barred from reporting or considering such sealed convictions in hiring decisions

San Francisco: Updated Fair Chance Poster

The City and County of San Francisco issued a revised version of its Fair Chance Ordinance (FCO) notice poster, replacing the prior version released in 2023. The updates include changes to official contact information and a Vietnamese-language translation, in addition to English, Spanish, Chinese, and Tagalog. The updated poster can be found here.

 

Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

Go to Top