Red flags when checking an individual

Identification errors and namesakes

The most frequent and most costly error in a check occurs before a single genuine signal has been found. It is called an identification error: information about another person is attributed to the subject. A court case has been found on a full namesake, a bankruptcy relates to someone with the same surname from another city, a negative publication describes a person with the same name and a similar occupation.

The more common the name, the higher the risk. Added to this are variations in spelling: transliteration under different standards, double surnames, a change of surname after marriage, a patronymic that becomes a middle name in foreign documents, abbreviations and diminutive forms. One person may appear in sources under five spellings, and five different people under one.

Confirmation of identity is built on a combination of identifiers, not on a name. Date of birth, place of birth or registration, citizenship, identification numbers where they are lawfully available, roles in companies, period of activity, connections with known persons and organisations are compared. A match on a single attribute is a hypothesis; a match on three or four independent ones is a supported conclusion.

The practical implication is direct: any finding not tied to a confirmed person must not appear in the report as a fact about that person. In careful work, such entries are set out separately, with an explicit note: name match, identity not confirmed. This is not a formality - it is precisely how a person's reputation is protected from someone else's history.

The reverse side of the same mechanism: a check may fail to find a real episode because the person appears in a source under a different spelling. Searches are therefore run across variants of the name, and a negative result is worded carefully: no information found in the sources and spellings checked, rather than "the person is clean".

Contradictions in the biography and in dates

The second layer of signals is inconsistency in time. The stated period of employment at a company does not coincide with the period when the company existed. The position named appeared in the organisation later. Two places of work overlap entirely by date, although both are stated as primary. A degree was obtained in a year when, according to other information, the person was in another country.

Two types of discrepancy should be separated at the outset. Mechanical inaccuracies - years rounded instead of months, a company's former name after rebranding, parental leave not reflected in a CV - occur constantly and mean nothing. Material discrepancies are those that change the meaning: a period of leadership that did not exist, experience attributed in a project the person had no part in, a concealed period the person is unwilling to explain.

Such matters are checked not against the CV but against independent traces: corporate registers with dates of appointment and termination of authority, publications and industry materials from that period, official company disclosures, professional registers and licences where these are maintained. A match of at least two independent sources on dates makes the episode confirmed.

The practical implication depends on the role. For a position with financial authority, an inaccuracy in the dates of a leadership role is material, because the assessment of experience in managing money depends on it. For an ordinary position the same inaccuracy may be irrelevant. A red flag is always assessed relative to the decision being taken.

A separate signal is not the discrepancy itself but the reaction to a question about it. A calm explanation with details and a willingness to show confirmation closes the question. Irritation, a change of account or a refusal to discuss the period is more informative than the original discrepancy, but this too is an observation, not proof of bad faith.

Hidden corporate connections

The third layer is connections the person did not disclose, although they relate to the subject of the decision. This concerns not personal relationships but verifiable corporate facts: a shareholding or leadership role in a company operating in the same market; participation in the structure of a counterparty with which a contract is to be concluded; a shared company with a person already in conflict with the client.

Such connections are established from official sources: corporate registers, company disclosures, court materials where the parties are named directly, public procurement and licensing records. Indirect indications - coinciding registered addresses, recurring representatives, shared telephone numbers in open records - operate as a hypothesis requiring confirmation, not as a conclusion.

Not every connection is material, only those that create a conflict of interest relative to the specific role. Participation in a company from an adjacent industry may be harmless, or it may mean that the person will be taking procurement decisions concerning a structure in which he himself has an interest. The difference is determined not by the size of the holding but by whether the interest intersects with future authority.

The practical implication for the client: a conflict of interest that has been found almost never means refusal. It means that disclosure and conditions are required - a separate representation in the contract, restrictions on participation in certain decisions, an obligation to notify of changes. A connection becomes a problem when it was withheld in response to a direct question.

A separate category is historical connections. A person may have left a structure several years ago, but the records remain. A connection that is out of date is not the same as a current one, and a proper check always states the period: when the connection arose, when it ceased and whether its cessation is officially confirmed.

Repeated bankruptcies and conflicts

The fourth layer is financial and litigation history. A single bankruptcy in an entrepreneur's biography is a common occurrence: an industry downturn, the loss of a key client, an unsuccessful project. In itself it does not indicate bad faith, and in many jurisdictions it is a normal legal procedure provided for precisely such cases.

What becomes a signal is repetition and similarity of pattern. Several companies left with unperformed obligations and wound up by the same method; a regular move into a new structure shortly before claims arise; a sequence of similar disputes with suppliers or employees. Here it is not the fact but the pattern that matters - and it is confirmed only by a body of records, not by one.

Litigation requires particular care. A claim is the fact that a claim was filed, not the fact of the circumstances set out in it. A matter discontinued or lost by the claimant is not negative information about a person at all. What matters are decisions that have entered into force, as well as the party's role: systematic participation as a defendant in claims of the same type differs from a single dispute over a contract price.

The practical significance depends on what you are deciding. For a position involving control over money and for an investment decision, financial history is critical: it shows how a person behaves with other people's obligations. For a role without financial authority the same episode may be immaterial. Proportionality matters more than completeness here.

Recency is assessed separately. An event fifteen years ago with obligations performed and an event last year with outstanding claims are different signals, even if they are formally called the same thing.

Sanctions, PEP status and regulatory events

The fifth layer is the most sensitive, because it is the one most often interpreted incorrectly. A sanctions match and PEP status are fundamentally different things with different consequences, and they must not be conflated.

Sanctions are a direct legal restriction addressed to specific persons and organisations. Official lists and consolidated resources are published by regulators, including the European Commission. The key practical problem here is the same identification error: a name match in a sanctions list is common, and a conclusion is drawn only after checking the date of birth, nationality, role and connected persons. Until that check is done, the correct wording is "a match has been found, identity not confirmed".

PEP status means only that a person is entrusted with prominent public functions, or is a close relative or associate of such a person. The FATF guidance on politically exposed persons proceeds expressly from the premise that this status is not an indication of criminal activity: it determines the need for additional measures - establishing the source of funds and wealth, enhanced monitoring - not for refusing the relationship. Automatic refusal to deal with any PEP is criticised by regulators in a number of jurisdictions as an excessive practice.

Regulatory events - orders, licence revocations, disqualifications - are assessed by stage and by substance. A decision that has entered into force carries different weight from a procedure that has been commenced; disqualification on a formal ground differs from removal of the right to manage for breach of duties.

Practical significance: this layer requires verification rather than searching. Finding a match is easy; establishing its relation to a specific person is work. A report in which a sanctions match or PEP status is presented without resolving identity and without stating the context is more dangerous than no check at all: it creates false confidence.

Unreliable degrees, positions and projects

The sixth layer concerns stated qualifications. Four typical situations arise here: a non-existent or unaccredited educational institution; a real university, but the degree is not confirmed; a position stated as higher than the actual one; participation in a project to which the person was connected, but not in the stated role.

This is verified in different ways. Education - through official registers of issued documents where such registers exist, and through the institution itself in the manner it provides for; in many countries direct verification requires the person's consent, and that limitation is observed rather than circumvented. Positions - through corporate registers, disclosures and publications of the relevant period. Participation in projects - through the client's official announcements, industry materials and contractual disclosures where these are public.

Embellished wording that is not formally a lie deserves separate attention: "headed the practice" instead of "was one of the staff in the practice", "took part in a large-value transaction" without stating the role, "worked with international clients" without specifics. This is not falsification, but it is grounds for a clarifying question - particularly where the role requires precisely the experience that has been embellished.

Practical significance: an unconfirmed qualification matters exactly to the extent that it was the basis of a decision. If a person is hired because of specific expertise, the inability to confirm it is critical. If a degree obtained twenty years ago has no bearing on the current role, its non-confirmation is a formality.

The correct wording of the conclusion is especially important here. It is correct to write "could not be confirmed from the available sources", not "the diploma is forged". The first is a verifiable statement about the result of a check, the second is an accusation requiring entirely different grounds.

Manipulation of sources and removal of context

The seventh layer concerns not the person but the information field around them. Two opposite distortions occur here, and both are equally dangerous for a conclusion.

The first is manufactured negative coverage. A series of similar publications on platforms with no editorial oversight, appearing within a short period; texts repeating one another almost word for word and citing each other in a circle; reviews written in the same style; materials timed to a transaction or an appointment. Such a picture may be a sign of a paid campaign - but it may also reflect a genuine episode that attracted attention. What distinguishes them is the presence of a primary source: a document, a decision, an official announcement.

The second is manufactured positive coverage and a cleaned-up trail. A body of similar laudatory publications crowding out the search results; the disappearance of materials that other texts had cited; profiles cleared shortly before a transaction. The removal of information is not in itself a sign of concealment and may be the lawful exercise of a person's right to data protection. It becomes a sign in combination: the disappearance of a specific episode precisely before a decision, while references to it remain in other sources.

The method is the same in both cases: find the primary source and establish dates. Ten websites that have reprinted one text are one publication, not ten confirmations. A publication citing a court decision is checked against the decision itself. If no primary source is found, the material remains an assertion by an unidentified author and is recorded with that status.

Practical significance: the client needs not a retelling of what was found but a classification. What is confirmed by a document, what is a publication with no primary source, where the appearance of materials shows signs of coordination, and what question follows from this. A campaign against a person and an actual wrongdoing look the same in search results - only verification distinguishes them.

How to rank signals by significance

Signals that have been found are of no use while they sit in a single list. What makes them useful is ranking along two independent axes: how far a signal is confirmed and how far it affects the specific decision.

The first axis is the degree of confirmation. Top level: a fact with a documentary basis - a register entry, a decision in force, an official disclosure. Middle: a reasoned conclusion drawn from several independent sources, none of which is sufficient on its own. Below that: a working hypothesis for which there are indications but no confirmation. And separately: information that cannot be verified - a closed jurisdiction, the absence of lawful access, lost documents.

The second axis is impact on the decision. Here the signal is assessed not in the abstract but in relation to the role or the transaction: does it change the answer to the question the check was carried out for. A concealed stake in a competitor is critical for a procurement director and almost irrelevant for a position with no influence over suppliers. An old bankruptcy matters for an asset manager and is neutral for a technical role.

The intersection of the two axes gives four clear zones. Confirmed and material - grounds for a decision or for the terms of a transaction. Confirmed but not material - recorded and does not interfere. Unconfirmed but potentially important - a question to be put to the person before a decision is taken. Unconfirmed and not material - noise that should not enter the conclusions at all.

The practical point is simple: a report without this classification shifts the work onto the client and is almost always read on the side of over-caution. A good check does not increase anxiety but reduces it to a specific list: this is what has been established, this is what requires explanation, this is what we do not know.

What a professional process looks like

The sequence is the same for hiring and for a transaction: the depth and the set of sources change, but not the order.

1. 01

   Defining the decision and the legal basis

   What the check is being carried out for, which role or transaction is under consideration, whether there is a lawful basis for processing information about the person and whether their consent or notification is required.

2. 02

   Identity confirmation

   Matching identifiers, name spelling variants and the period of activity before any finding is attributed to the person.

3. 03

   Stated biography

   Verification of education, positions, periods and projects against independent sources, with discrepancies recorded.

4. 04

   Corporate layer

   Roles, stakes, current and historical connections, overlaps with counterparties and parties to the transaction.

5. 05

   Financial and litigation layer

   Bankruptcies, disputes, enforcement proceedings to the extent lawfully available, with the role and stage indicated.

6. 06

   Regulatory layer

   Sanctions matches with identity resolution, PEP category and the period of public function.

7. 07

   Information layer

   Publications and allegations, with a search for the original source, dating and an assessment of source independence.

8. 08

   Weighting and marking

   Each signal is assigned a level of confirmation and an assessment of its bearing on the decision; a list of questions and limitations is drawn up.

The order does not change depending on how "bad" the first signal found looks. Identity is confirmed before interpretation, not after.

What the client receives as a result

The material must answer the client's question and withstand scrutiny - including a conversation with the person concerned.

1. 01

   Identity confirmation

   Which identifiers were used to attribute findings to the specific person, and which matches were excluded.

2. 02

   Verified chronology

   Education, positions and periods, with the source and confirmation status stated for each episode.

3. 03

   Corporate roles and connections

   Current and historical holdings and positions, overlaps with the subject of the decision, with start and end dates.

4. 04

   Financial and litigation circumstances

   Bankruptcies, disputes and claims, with the party's role, the stage and an indication of whether obligations were performed.

5. 05

   Sanctions and PEP layer

   The outcome of match resolution: what has been excluded, what has been confirmed, which category applies and the period of public function.

6. 06

   Information picture

   Publications with original sources, dates and an assessment of independence; separately - allegations without confirmation.

7. 07

   Signal matrix

   Findings marked by degree of confirmation and bearing on the decision, identifying what requires explanation.

8. 08

   Questions and limitations

   A list of questions for the person and a direct list of what could not be checked and why.

Limitations and the lawfulness of methods

Checking an individual involves their personal data, and this determines the method. In the European Union, processing requires a lawful basis under GDPR, and where legitimate interest is chosen as the basis, it is subject to a balancing test: the client's interest is weighed against the person's rights and reasonable expectations. The EDPB guidance on legitimate interest describes this test directly, and it does not become a formality because the information is technically available.

The practical conclusion: the scope of a check is limited by its purpose. Checking matters unrelated to the decision is not permitted even where they are easy to find. Private life, health, views and family circumstances are not part of a check unless they relate directly to the subject and have an independent lawful basis.

BLACKFILE works from official registers, court and regulatory materials, publications, professional registers and information provided by the client. Access to closed state databases, correspondence, geolocation and banking information is not used and is not offered under any circumstances.

• does not establish guilt and does not characterise conduct as an offence
• does not confirm the authenticity of a document in place of the issuing authority
• does not guarantee the decision of an employer, bank or counterparty
• does not collect information unrelated to the purpose of the check
• reflects the state of the sources as at the agreed date
• the absence of adverse findings is not a guarantee of good faith

What to prepare for the initial assessment

At the first stage, documents and personal data are not required - an understanding of the task is enough.

• what decision is being made: hiring, appointment, partnership, transaction, investment
• what role or authority is under consideration and what access it will carry
• the countries where the person studied, worked and conducted activity
• what is already known and what precisely gave rise to doubt
• whether there is a lawful basis for the check and whether the person's consent is required
• the deadline by which the decision must be made
• who will use the result: you, a lawyer, the board or compliance

There is no need to send passport data, scans of diplomas, banking documents or correspondence at the first stage. The set of materials is determined after the scope and the legal basis have been agreed.

Frequently asked questions

• 01

  How many red flags are enough to reject a candidate?

  Numbers do not work here. One confirmed conflict of interest directly relevant to the future authority outweighs five unconfirmed mentions. The decision is not made on the number of findings, but on what is confirmed by documents and how it affects the specific role.

• 02

  Is the person's consent required for a check?

• 03

  What should be done if a match against a sanctions list is found?

• 04

  Is PEP status a bad thing?

• 05

  Can a diploma be verified?

• 06

  How can a paid campaign be distinguished from a real episode?

• 07

  Does the absence of findings guarantee that a person is reliable?

• 08

  What should be done with a finding that the person explains differently?

A signal becomes a basis only together with confirmation

Red flags are useful precisely to the extent that they are handled carefully. An identification error presented as a finding harms the person and misleads the client. A genuine conflict of interest lost in a list of thirty insignificant mentions has no effect on the decision, although it should have.

The value of a check therefore lies not in the volume of what is found, but in how it is marked out: what is confirmed, what requires explanation, what remains a hypothesis and what cannot be established. With material of that kind a decision can be made - and explained, if need be.

Официальные источники

• EUR-LexRegulation (EU) 2016/679 - GDPRпроверено 06.08.2026

  The bases for processing personal data and the principles of minimisation and purpose limitation, which determine the permissible scope of a check on an individual.

• EDPBGuidelines 1/2024 on processing based on Article 6(1)(f) GDPRпроверено 06.08.2026

  An analysis of legitimate interest as a basis for processing and of the proportionality test against the rights and reasonable expectations of the individual.

• FATFPolitically Exposed Persons (Recommendations 12 and 22)проверено 06.08.2026

  Guidance on politically exposed persons: the status as grounds for additional measures, not as an indication of criminal activity.

• European CommissionOverview of sanctions and related resourcesпроверено 06.08.2026

  Official EU resources on restrictive measures and consolidated lists against which matches are checked.

Связанные материалы

Case

Locating a person in a high-risk situation

Confirmation of a person's identity and legal status from independent sources

• 01 /ServiceIndividual check→
• 02 /ArticleWhat a check on an individual shows before entering a partnership→
• 03 /ArticleSigns of a nominee owner in a company structure→
• 04 /ArticleWhen Enhanced Due Diligence is required→
• 05 /ServiceChecks on individuals and Background Check→