License verification is the process of confirming that a professional’s occupational license is valid, current, and free of disciplinary restrictions. In regulated fields, it is often the only check standing between a qualified practitioner and someone who has lost the right to practice. Done well, it protects employers from liability, protects the public from harm, and keeps organizations clear of regulatory penalties that carry real money.
What a Verification Check Actually Shows
A verification pulls a short list of facts that together establish standing. The basics are the license holder’s full name, unique license number, original issue date, and expiration date. These confirm identity and that the license hasn’t lapsed.
The critical field is current status. A license can show as active, inactive, expired, suspended, or revoked. Active means the holder is currently authorized to practice. Suspended or revoked means something went wrong, whether a disciplinary action, a criminal conviction, or a failure to meet continuing education requirements.
Status alone is not enough. A verification should also surface any public disciplinary history or restrictions attached to the license. A professional might hold an active license but be on probation or limited to certain types of work, and those restrictions define what the person is and isn’t allowed to do. Checking only active-versus-inactive and stopping there is one of the most common mistakes.
How Verification Is Done
Free State Board Databases
Most state licensing boards maintain publicly searchable databases where anyone can look up a professional’s license. These tools typically allow search by name, license number, or both, and return real-time data pulled from the board’s records. For a quick confirmation of status and any public disciplinary actions, these databases are the fastest option, and they are free.
Primary Source Verification
Primary source verification means confirming credentials directly with the authority that issued them, rather than relying on a copy of a certificate or a self-reported credential. The Joint Commission, which accredits hospitals and other healthcare organizations, defines it as verification by the original source or an approved agent of that source, and requires it at hire and at renewal for any license or certification needed to practice a profession.1The Joint Commission. Primary Source Verification – Definition/Requirements Acceptable methods include secure electronic verification, documented phone calls, and direct written correspondence with the licensing board.
Primary source verification is the standard in healthcare credentialing, and it also applies in aviation, engineering, financial services, and other regulated fields whenever an organization needs ironclad confirmation that a credential is legitimate.
Third-Party Verification Services
Organizations that need to verify licenses across multiple states and professions often use third-party credential verification services. These services maintain connections to licensing boards and federal databases, batch-process verifications, and produce consolidated reports. The tradeoff is cost against time. A single online lookup is free; outsourcing verification for an entire medical staff or provider network costs money but eliminates the manual work of contacting dozens of individual boards.
Continuous Monitoring Versus Periodic Checks
A one-time verification at the point of hire tells you the license was valid on that date. It says nothing about what happens six months later. A license can be suspended, revoked, or restricted at any point between scheduled re-checks. Continuous monitoring tools use automated searches against licensing databases, exclusion lists, and sanction registries to flag changes as they occur, rather than waiting for an annual or biennial review cycle. For organizations with large workforces, the shift from periodic verification to ongoing monitoring sharply reduces the window during which a problem could go undetected.
Compact Licenses: A Separate Case
Verification gets more complicated when a professional holds a multistate compact license. Interstate compacts let professionals practice across member states under one streamlined credential, but the verification process differs from a standard state board lookup.
The Nurse Licensure Compact is the largest such agreement, with 43 participating jurisdictions as of 2026.2NURSECOMPACT. Home A nurse with a multistate license issued by their home state can practice in any other compact state without obtaining a separate license. Verification must confirm not only that the license is active but also that the home state is a compact member and that no restrictions have been imposed by any state where the nurse practices.
The Interstate Medical Licensure Compact serves a similar function for physicians, spanning 43 member states and 2 U.S. territories.3Interstate Medical Licensure Compact. Interstate Medical Licensure Compact – Physician License Rather than issuing a single multistate license, the IMLC provides an expedited pathway: a physician applies through their state of principal license, and participating states can issue their own full licenses based on the compact’s verified qualifications. Verifying an IMLC-licensed physician still means checking each individual state license.
The practical takeaway: compact membership doesn’t eliminate the need to confirm status with each relevant state. A license can be active in the home state and restricted in another, and compact privileges can be revoked independently of the underlying home-state license.
Federal Exclusion and Practitioner Databases
State license verification confirms that a professional is authorized to practice. Federal exclusion screening confirms that a professional hasn’t been banned from participating in government-funded programs. These are separate checks, and running only one leaves a blind spot.
The OIG List of Excluded Individuals and Entities
The Office of Inspector General at the U.S. Department of Health and Human Services maintains the List of Excluded Individuals and Entities, a database of people and organizations barred from participating in Medicare, Medicaid, and other federally funded healthcare programs. Exclusion can result from fraud convictions, patient abuse, license revocation, or other serious misconduct. Anyone on the list cannot receive payment from federal healthcare programs for items or services they furnish, order, or prescribe.4Office of Inspector General | U.S. Department of Health and Human Services. Exclusions Program
Hiring an excluded individual is expensive. An organization that employs or contracts with someone on the exclusion list may face civil monetary penalties of up to $20,000 per item or service billed, plus damages of up to three times the amount claimed.5Office of the Law Revision Counsel. 42 USC 1320a-7a – Civil Monetary Penalties Those base amounts are adjusted upward for inflation. The OIG recommends that healthcare organizations routinely check the list for both new hires and current employees.4Office of Inspector General | U.S. Department of Health and Human Services. Exclusions Program The list is public and updated monthly, which makes ignorance a weak defense.
The National Practitioner Data Bank
The NPDB is a federal repository of reports on healthcare practitioners, including malpractice payments, adverse licensure actions, and exclusions from federal programs. Unlike the OIG list, the NPDB is not publicly searchable. Access is limited to specific entities including hospitals, health plans, state licensing boards, and certain government agencies.6National Practitioner Data Bank. NPDB Guidebook – Chapter D (Queries)
Hospitals are required by federal law to query the NPDB when any healthcare practitioner applies for medical staff appointment or clinical privileges, and again every two years for practitioners already on staff.7eCFR. 45 CFR Part 60 – National Practitioner Data Bank A hospital that skips this step is presumed to have knowledge of whatever the NPDB would have revealed, which effectively eliminates any “we didn’t know” defense if the practitioner later causes harm.8National Practitioner Data Bank. Hospitals – The NPDB
NPI Lookup Is Not License Verification
The National Provider Identifier registry maintained by CMS is a free directory of healthcare provider identification numbers, but it is not a license verification tool. The registry itself warns that “issuance of an NPI does not ensure or validate that the Health Care Provider is Licensed or Credentialed.”9NPPES NPI Registry. Search NPI Records An NPI confirms enrollment in the national identification system. It says nothing about whether a state license is active, restricted, or revoked. Treating an NPI lookup as a substitute for license verification is a shortcut that creates unnecessary exposure.
Why It Matters: What Happens If You Don’t Verify
The consequences of skipping verification stack up quickly.
Negligent hiring is the most broadly applicable risk. When an employer fails to take reasonable steps to confirm an employee’s qualifications, and that employee causes harm, the employer can be sued for negligence. Courts look at whether the employer knew or should have known about the employee’s unfitness at the time of hiring, and whether that unfitness foreseeably caused the injury. Expected diligence scales with the role: a position involving contact with patients or children demands more thorough vetting than a desk job with no public interaction. Verifying a professional license is one of the lowest bars an employer can clear, and skipping it makes a negligent hiring claim dramatically easier to win.
In healthcare, the financial penalties are specific. Billing federal programs for services provided by an excluded individual can trigger civil monetary penalties of up to $20,000 per item or service under the base statutory amount, with inflation-adjusted figures running higher.5Office of the Law Revision Counsel. 42 USC 1320a-7a – Civil Monetary Penalties Treble damages on top of per-item penalties can push total exposure into six figures for even a short period of noncompliance.
Hospitals participating in Medicare carry additional obligations. Federal regulations require that the medical staff examine the credentials of all eligible candidates for medical staff membership before recommending appointment, in compliance with state scope-of-practice laws and the hospital’s own bylaws.10eCFR. 42 CFR 482.22 – Condition of Participation: Medical Staff The hospital must also ensure that all personnel are licensed or meet other applicable standards required by state or local laws.11eCFR. 42 CFR Part 482 – Conditions of Participation for Hospitals A facility that fails these requirements risks losing Medicare certification, Joint Commission accreditation, or both. For a hospital that depends on Medicare reimbursement, either loss can be existential.
Health plans that credential providers without proper verification face their own regulatory consequences, including potential loss of accreditation and breach of contract with government payers. And for professionals themselves, practicing without a valid license is treated as a criminal offense in most states, though administrative sanctions and civil fines are the more common response. Regardless of how enforcement actually plays out, the underlying rule for hiring organizations holds: if you could have checked and didn’t, you own the consequences.
Consumers get the same tools employers do. Anyone hiring a contractor, attorney, therapist, or financial advisor can run a free search on the relevant state licensing board’s website. In fields where unlicensed practice is common and enforcement is uneven, such as residential contracting, a two-minute search can reveal whether the person actually holds the license they claim and whether any complaints have been sustained against them.