TL;DR: Ghost employment happens when payroll records don’t match who’s working. Dutch employers face fines, rejected wage costs, and audits if they fail to verify employee identity properly. Five structural practices prevent this: verify identity before the first shift, cross-check BSN numbers against documents, separate verification from payroll, keep copies for five years, and audit your process quarterly.
Core Requirements:
- Check original identity documents in person before employment starts
- Cross-verify BSN numbers against physical identity documents
- Store identity document copies for five years after employment ends
- Produce verification documents within 48 hours when inspectors request them
- Run quarterly internal audits to catch gaps before inspectors do
LISTEN TO THE DEEP DIVE :
What Is Ghost Employment?
Ghost employment sounds like fraud. Most of the time, it’s not.
It’s a mismatch between who you think is working and who the system proves is working. That mismatch creates legal exposure the moment an inspector asks to see proof.
The good news: you prevent it with structure, not suspicion. Here are five best practices that keep your business clean, compliant, and audit-ready.
How Do You Verify Employee Identity Correctly?
The first control happens before the first shift.
You must check the original identity document in person, compare it to the person standing in front of you, and make a copy. This isn’t optional. It’s a legal obligation under Dutch law.
What founders miss: verification is not a one-time administrative task. It’s an ongoing duty. If the Netherlands Labour Authority requests validation during an inspection, you have 48 hours to provide a copy of the identity document.
That deadline underscores the reality: verification isn’t something you do once and forget. It’s something you must be able to prove at any moment.
Control point: Build a checklist for onboarding. Identity verification happens before payroll setup, not after.
Bottom line: Verification is an ongoing legal duty, not a one-time administrative task.
Why Isn’t a BSN Number Enough?
The Burgerservicenummer (BSN) is the economic gatekeeper in the Netherlands. Without it, life is on pause: no healthcare, no banking, no utilities, no internet services.
But having a BSN on file doesn’t mean you’ve verified identity. It means you have a number.
The mechanism that creates risk: someone provides a valid BSN that belongs to another person. The payroll data looks clean. The tax filings go through. But the person doing the work isn’t the person on record.
That’s ghost employment.
What triggers detection: An audit, a benefits claim, a tax discrepancy, or a labor inspection. By the time this surfaces, you’re explaining why your records don’t match reality.
Control point: Cross-check the BSN against the identity document. Verify that the name, date of birth, and document number align. If they don’t, stop the process until they do.
Bottom line: A valid BSN doesn’t equal verified identity. Cross-checking prevents ghost employment.
What Happens If Verification and Payroll Aren’t Separated?
Most small companies run verification and payroll as one step. That’s where the vulnerability enters.
If the person setting up payroll is also the person verifying identity, there’s no separation of duties. Mistakes, shortcuts, and even intentional manipulation happen without resistance.
The hidden cost: when identity verification fails, the Dutch Tax and Customs Administration applies the anonymous rate—a 52% withholding on wages for payroll tax and national insurance contributions. This punitive rate stays in effect until proper verification is completed.
That’s an immediate cash flow problem for both you and your employee.
Control point: Assign identity verification to one person and payroll setup to another. If you’re too small for that, create a two-step process: verify first, then set up payroll only after verification is documented.
Bottom line: Separation of duties catches mistakes before they become 52% tax penalties.
How Long Must You Keep Identity Documents?
Verification doesn’t end when the employee starts working. Dutch law requires you to retain copies of identity documents for at least five years after the end of the calendar year in which employment terminates.
That’s a long exposure window.
What founders underestimate: compliance failures surface years after the employment relationship ends. An audit in 2027 exposes a verification failure from 2023. The fact that the employee is long gone doesn’t protect you.
The system doesn’t care about your memory. It cares about your records.
Control point: Store identity document copies in a secure, organized system. Label them clearly with the employee name, hire date, and termination date. Make sure they’re retrievable within 48 hours if requested.
Bottom line: Five-year retention applies after employment ends. Audits check past compliance, not present memory.
How Do You Catch Compliance Gaps Before Inspectors Do?
Most compliance failures aren’t discovered by founders. They’re discovered by inspectors.
That’s expensive. Not just in fines, but in time, reputation, and the broader audit that often follows. When one control fails, inspectors start looking at everything else.
The pattern that reduces risk: regular internal audits. Not formal, expensive reviews—just structured checks.
What to audit:
- Do you have identity document copies for every employee on payroll?
- Are the names on the documents identical to the names in your payroll system?
- Are these documents retrievable within 48 hours?
- Are your records complete for the past five years?
If the answer to any of these is no, you have a gap. Close it before it becomes a penalty.
Control point: Schedule a quarterly review. One person checks the files. Another person confirms completeness. Document the review date and any corrections made.
Bottom line: Internal audits find gaps before they become fines. Regular reviews cost less than penalties.
The Structural Truth About Ghost Employment
Ghost employment doesn’t happen because founders are careless. It happens because informal processes feel efficient until they’re tested.
The system doesn’t test you on your intentions. It tests you on your proof.
These five practices create a structure that holds up under inspection:
- Verify identity at the start—every single time
- Match the BSN to the person, not just the paperwork
- Separate verification from payroll setup
- Maintain copies for at least five years and keep them accessible
- Audit your own process before the inspector does
None of this requires complex systems. It requires attention at the right moment.
Structure is cheaper than recovery.
Frequently Asked Questions
What documents count as valid identity verification in the Netherlands?
Valid documents include a Dutch passport, Dutch identity card, EU passport, EU identity card, or residence permit. The document must be original, not expired, and shown in person. Photocopies or digital scans don’t satisfy the initial verification requirement.
What happens if you don’t verify employee identity?
The Dutch Tax and Customs Administration applies a 52% anonymous withholding rate on wages. You face rejected wage costs, reassessed payroll taxes, fines, and potential broader audits. The Netherlands Labour Authority inspects compliance and enforces penalties for non-compliance.
Do you need to verify identity for contractors or freelancers?
No. Identity verification requirements apply to employees on your payroll. Freelancers and contractors remain responsible for their own identity verification. Your risk shifts to proper classification and contract structure.
How do you verify identity for remote employees?
Dutch law requires in-person verification. Remote verification through video calls doesn’t meet the legal standard. You must see the original document and the person together. If the employee works remotely, schedule an in-person meeting before they start or during onboarding.
What if an employee loses their identity document after you hire them?
Your verification obligation applies at the start of employment. If the employee loses their document later, they must obtain a replacement. Your retained copy from the initial verification satisfies your legal duty as long as you stored it properly.
Do digital payroll systems automatically verify identity?
No. Payroll software processes data you provide. The software doesn’t verify that the BSN matches the physical person. You remain responsible for identity verification before entering data into any system.
How often should you audit identity verification records?
Quarterly audits catch gaps before inspectors arrive. Four times per year gives you enough frequency to correct errors without creating administrative burden. Document each review to demonstrate ongoing compliance discipline.
What storage system works best for identity document copies?
Use a secure, organized system where documents are retrievable within 48 hours. Label files with employee name, hire date, and termination date. Cloud storage with access controls works. Physical files in locked cabinets work. Choose based on your retrieval speed and security needs.
Key Takeaways
- Ghost employment creates legal exposure when payroll records don’t match who’s working, even without fraud.
- You must verify original identity documents in person before the first shift and keep copies for five years after employment ends.
- A valid BSN number doesn’t equal verified identity. Cross-check BSN data against physical documents.
- Separation of duties between verification and payroll setup prevents mistakes from becoming 52% tax penalties.
- You must produce identity documents within 48 hours when inspectors request them during audits.
- Quarterly internal audits find compliance gaps before they become fines, reputation damage, or broader investigations.
- Structure costs less than recovery. Attention at the right moment prevents expensive enforcement later.
