DCSA Rap Back Fingerprinting: Can Employers Use Their Own SWFT System?

Many cleared contractors are receiving notices that employees need new fingerprints so DCSA (Defence Counterintelligence and Security Agency) can enrol them in the FBI Rap Back service under Trusted Workforce 2.0. DCSA has made government-funded fingerprint appointments available through approved third-party fingerprint service providers through December 30, 2026, but approved providers are not the only option.

DCSA has confirmed that a cleared organization with its own SWFT registered fingerprint system can capture its own personnel and submit the fingerprints through its SWFT account using the normal SWFT process.

DCSA also says no special Rap Back transaction fields, codes, ORI/SON information, or other special notation is required; a normal SAC is created and can eventually be used for enrolment. For employers whose personnel would otherwise travel long distances for an appointment, onsite capture may be a practical alternative.

DCSA Rap Back is part of the broader Trusted Workforce 2.0 program and its move toward continuous screening. Rap Back stands for Record of Arrest and Prosecution Back. It is an FBI service that can provide notification when new criminal history information is associated with an individual whose fingerprints are enrolled in the service.

For cleared organizations, the goal is to support continuous monitoring of cleared personnel rather than relying only on periodic background investigations.

Trusted Workforce 2.0 is the federal government’s approach to improving and modernizing personnel security and continuous vetting.

Under this framework, DCSA is expanding Rap Back enrolment across the cleared industry population. DCSA announced the wider industry rollout on February 25, 2026 after an earlier pilot with selected organizations.

This means Facility Security Officers (FSOs), security managers and other personnel involved in cleared workforce management may now have to help employees complete the fingerprinting process.

Rap Back allows the FBI to retain fingerprints for an enrolled person and compare them against fingerprint events in future. Whenever new criminal history information is identified, the appropriate authorized organization can receive notification.

For employers, this supports continuous vetting and can reduce the need to rely only on periodic checks.

The important point is that fingerprint submission and Rap Back enrolment are not the same process. A fingerprint submission provides the information DCSA needs, but the employee is not necessarily enroled in Rap Back immediately after the fingerprints are submitted.

One of the biggest questions from cleared employers is why employees who have already been fingerprinted for a background investigation may need to provide fingerprints again.

DCSA is using a phased approach to expand Rap Back enrolment. The agency announced three broad groups: personnel with DCSA fingerprints already on file, personnel with FBI fingerprints available and the remaining population that needs new fingerprints.

Having fingerprints captured in the past does not automatically mean that DCSA has a current and classifiable fingerprint record that can be used for the present enrolment drive.

For some employees, DCSA may already have suitable fingerprints. Others may need to provide new fingerprints so DCSA has a usable record for the Rap Back process.

This is why an employee may receive a request for new fingerprints even though fingerprints were submitted during an earlier screening process.

The wider rollout is part of DCSA’s implementation of Trusted Workforce 2.0 and continuous vetting.

For cleared companies, this creates a new operational requirement: security teams may need to coordinate fingerprint collection for employees who have been identified for Rap Back enrolment.

The practical question then becomes where those fingerprints should be captured.

No. Using approved third-party provider is not mandatory for DCSA Rap Back fingerprinting. A cleared organisation can use its own SWFT-registered fingerprint system to capture employee fingerprints and submit them through its SWFT account if the system meets DCSA requirements.

DCSA guidance allows cleared organisations to use their own fingerprint equipment or work with an approved third-party provider. Equipment used for electronic fingerprint capture is required to meet applicable FBI certification and DCSA SWFT requirements.

The DCSA-funded enrolment option provides another way for eligible personnel to complete fingerprint enrolment. The current program information (at the time of publishing this article) states that supported appointments are available through December 30, 2026. Organisations should verify the current program status with DCSA before relying on this date.

If an organisation uses its own SWFT fingerprinting system it is responsible for the costs of the scanner, software, setup, registration, testing and on-going operation.

In short, DCSA-funded enrolment is an option, not a requirement. Organisations with suitable SWFT capability can capture and submit DCSA Rap Back fingerprints themselves.

Yes. An eligible cleared organization can use its own SWFT registered fingerprint system to capture fingerprints for its personnel and submit them through its SWFT account.

The important point is that the organization cannot simply purchase any fingerprint scanner and start submitting fingerprints. The equipment and software must meet the applicable requirements.

DCSA states that SWFT accepts electronic fingerprint submissions from FBI approved Live Scan equipment using DCSA approved software that has been successfully tested and authorized for electronic submissions.

An organization operating its own system needs the appropriate SWFT access and a compliant fingerprint capture setup. DCSA guidance states that fingerprint equipment intended to produce electronic fingerprint files is required to meet FBI certification requirements and be registered with SWFT.

The system also needs suitable software for producing the required electronic fingerprint files.

This is important for companies evaluating a new DCSA fingerprint scanner. The scanner should not be selected based only on image quality or price. The complete hardware and software setup must fit the SWFT requirements.

Yes. DCSA continues to provide options for organizations that use third party fingerprint service providers.

DCSA’s SWFT resources explain that third party providers can capture fingerprints and produce electronic fingerprint files or submit electronic fingerprints to SWFT. Providers serving DCSA customers need to meet the applicable registration, testing and vetting requirements.

For some organizations, using a third party is the simplest option. For others, onsite capture may provide better control and convenience.

No. DCSA guidance indicates that the Rap Back fingerprint submission follows the normal SWFT process. There are no special Rap Back transaction fields, codes ORI/SON information or special notation that an organization needs to add to a normal SWFT fingerprint submission.

This is an important point because organizations may assume that Rap Back requires a completely different fingerprint transaction, which it does not.

Organizations should not assume that they need a special Rap Back SWFT transaction code simply because the fingerprints are being collected for Rap Back.

The DCSA industry guidance states that there is nothing special that needs to be noted. The organization follows the normal SWFT submission process.

The same principle applies to questions about a special Rap Back ORI or Rap Back SON. DCSA guidance says that special Rap Back specific ORI/SON information is not required for the normal SWFT fingerprint submission.

FSOs should still follow their organization’s existing SWFT configuration and current DCSA instructions. The important distinction is that Rap Back does not create a separate special transaction format for the fingerprint submission.

Submitting an electronic fingerprint file through SWFT does not mean the employee is enrolled in Rap Back instantly.

Understanding this difference is important because it is easy to describe the process incorrectly.

DCSA guidance indicates that a normal SAC is created from the fingerprint submission and can eventually be used for Rap Back enrolment. The actual enrolment occurs later as DCSA processes the individual for Rap Back.

A SAC is part of the identification and processing information associated with a fingerprint submission.

For this process, the organization should think of the fingerprint submission as the first step that provides DCSA with the fingerprint information it needs.

The submission should not be described as an instant Rap Back enrolment transaction.

No. The employee does not become enrolled in Rap Back immediately when the fingerprint file is submitted through SWFT.

DCSA processes the submitted information and later handles the Rap Back enrolment. Therefore, employers should avoid promising employees that their Rap Back status will change immediately after the fingerprint appointment.

The DCSA funded enrolment option and an organization operated SWFT system serve different practical needs. The right choice depends on employee numbers, location, and existing equipment, scheduling needs and whether the organization already performs electronic fingerprint submissions.

The DCSA funded option can be useful when a company has only a few employees who need fingerprints and an enrolment location is convenient.

An onsite system can make more sense when the company has a large workforce or employees spread across remote locations.

Not every cleared organization needs to purchase or operate its own fingerprint system. However, there are situations where onsite SWFT fingerprinting can save significant employee time and simplify security operations.

If dozens or hundreds of employees need fingerprinting, sending each person to an outside location can result in a lot of time wasted in scheduling and travelling.

An onsite system allows the security team to organize fingerprint sessions internally and process multiple employees according to the organization’s schedule.

Travel becomes a bigger problem when employees are located far from available enrolment locations. For an employee who needs to drive 50 miles or more for fingerprinting, the appointment can mean several hours of lost productive time.

Onsite capture can reduce this travel and keep employees focused on their normal responsibilities.

Some organizations regularly bring new employees into cleared positions.

If fingerprinting is already a part of the organization’s personnel security workflow, having an onsite SWFT fingerprint system can make the process easier to manage over time.

An organization that already has SWFT access and electronic fingerprint infrastructure may not need to create a completely separate process for Rap Back fingerprinting.

It is important to make sure the current equipment, software, registration and testing status meet the applicable requirements.

Before an organization starts using its own system for DCSA Rap Back fingerprinting, the FSO or responsible security team should verify that the complete setup is ready for deployment.

DCSA provides specific SWFT resources covering access, registration, testing, scanner requirements and third party service providers.

Make sure the organization has the appropriate SWFT account and user access.

DCSA states that cleared organizations listed in the National Industrial Security Program database can use SWFT to submit electronic fingerprint files for personnel requiring investigation services.

Do not assume that any fingerprint scanner will work. DCSA suggests that SWFT users can select FBI certified fingerprinting equipment and software according to their needs. The organization-operated option requires a SWFT-registered system using FBI-approved hardware and DCSA-approved/tested software.

Fingerprint equipment intended to produce electronic fingerprint files is required to meet the applicable FBI certification requirements and be registered for SWFT process.

DCSA also explains that changes such as hardware replacement, software upgrades or other changes that can affect the quality or contents of electronic fingerprint files may require retesting.

This is why FSOs should keep records of their approved configuration and check current DCSA guidance before making major hardware or software changes.

For organizations that want to bring fingerprint capture in-house, Bayometric can help with the technology side of the workflow. The goal is to make onsite electronic fingerprint capture easier to manage while keeping the organization responsible for its own SWFT access, registration, testing and compliance requirements.

A live scan system allows security personnel to capture fingerprints electronically instead of relying on traditional ink and paper methods. The operator can capture the required impressions, review the images and prepare the electronic fingerprint record.

This can be particularly useful when employees need to be processed at the organization’s own facility.

The fingerprinting system and software can be used to prepare electronic fingerprint files for the applicable SWFT workflow.

DCSA’s FTS information states that electronic submissions are accepted from FBI approved Live Scan systems using DCSA approved software that has been tested and authorized for electronic submissions.

Organizations should verify that the exact hardware and software configuration they plan to use meets current DCSA requirements.

Choosing the right fingerprint scanner is only one part of setting up a SWFT fingerprinting system.

The complete environment can include the scanner, fingerprint software, workstation, network connection, user access, registration and testing.

Bayometric can help organizations evaluate these requirements and select an appropriate setup based on their fingerprinting workflow.

However, Bayometric’s system should not be perceived as something that automatically authorizes an organization for SWFT or guarantees Rap Back enrolment. The organization still needs the appropriate DCSA access, registration, approved configuration and permissions.

The questions below cover the most common concerns that cleared contractors, FSOs, security managers and employees may have about Rap Back fingerprinting and SWFT.

Not necessarily. DCSA funded enrolment appointments are one available option, but DCSA has confirmed that a cleared organization can also use its own SWFT registered fingerprint system to capture and submit its personnel. The organization needs to use the appropriate FBI approved hardware, DCSA approved and tested software and have the required SWFT account and setup.

Yes. A cleared organization can capture employee fingerprints onsite when it has an appropriately registered SWFT fingerprint system. The equipment needs to meet the applicable FBI certification requirements and should be registered and approved for SWFT. DCSA also requires the electronic fingerprint system and software to meet its applicable testing and authorization requirements.

Yes. Organizations can continue to use qualified third party fingerprint providers. DCSA maintains resources for third party e-fingerprint providers and explains that these providers can capture fingerprints, create electronic fingerprint files, submit them to SWFT or provide a combination of these services.

No. The DCSA industry guidance states that there is nothing special that needs to be noted for a Rap Back fingerprint submission. The organization follows the normal SWFT submission process rather than creating a special Rap Back transaction. This means employers should not add unsupported transaction codes or special ORI/SON information simply because the fingerprints are intended for Rap Back.

The fingerprint submission is processed through the normal SWFT pathway. DCSA guidance states that a normal SAC is created and can eventually be used for Rap Back enrolment. The submission itself should not be described as the employee’s immediate Rap Back enrolment. DCSA processes the individual for enrolment after the fingerprint information is available.

No. Fingerprint submission and Rap Back enrolment are separate steps. After the normal SWFT fingerprint submission, DCSA processes the individual for Rap Back enrolment. The DCSA’s industry guidance specifically cautions that enrolment does not occur in real time with the fingerprint submission. Employers should therefore avoid telling employees that they are enrolled immediately after their fingerprints are captured.

The current DCSA enrolment information states that supported appointments are available through December 30, 2026. Organizations should verify the current program dates before making plans because the enrolment program can change.

SWFT stands for Secure Web Fingerprint Transmission. It is a DCSA system used by cleared organizations, DoD components and federal agencies to submit electronic fingerprints and demographic information for personnel vetting. DCSA says SWFT helps replace paper based fingerprint handling and supports electronic submission to its Fingerprint Transaction System.

Organizations using standard SWFT should select fingerprint products that meet the applicable FBI requirements and ensure that the system is properly registered and approved for SWFT. DCSA maintains guidance on approved equipment and SWFT registration.

The main reason is convenience. A company with many employees, remote facilities, frequent new hires or employees located far from enrolment sites may save employee travel time by capturing fingerprints onsite. The organization also gains more control over scheduling and its internal fingerprinting workflow. However, it needs to pay for and maintain its own equipment and meet all applicable SWFT registration, testing, security and operational requirements.

DCSA Rap Back fingerprinting is becoming an important part of the Trusted Workforce 2.0 continuous vetting process for cleared personnel. As more employees are asked to provide fingerprints organizations need a practical way to handle this requirement without creating unnecessary travel and scheduling problems.

A DCSA funded enrolment option is available, but it is not the only option. A cleared organization with its own properly configured and registered SWFT system can capture fingerprints in-house and submit them through the normal SWFT process. DCSA’s industry guidance also indicates that no special Rap Back transaction code ORI/SON information or special notation is required. A normal SAC is created and DCSA later processes the individual for Rap Back enrolment.

For organizations with large or remote workforces, onsite SWFT fingerprinting can reduce employee travel, simplify scheduling and provide greater control over the fingerprinting process. The key is to use the right FBI approved hardware and appropriate DCSA approved and tested software while maintaining the organization’s SWFT registration and compliance.