We are in a Software company, and I am managing a development team.
One of our senior developers has shown a weird performance, making simple mistakes, and lacking some knowledge on basic topics.
I have developed a strong gut feeling that his credentials and degree may be fake. Reason being, I did some "smoke" checks, such as consulting some initial services about degrees in his Original Country, and found no records of him.
When he entered the Job, there was no background check(we actually don't do it).
If he has a fake degree, or no degree at all, we may be dealing with a complicated situation, because he is under a work-permit that requires a degree as well, I don't know how to proceed.
I obviously don't want to investigate that openly, because I don't want to expose him, in case I am wrong.
What would be legal procedure that I could perform to check his diploma and certifications?
Can I ask him to bring the copies? Can I enter in contact with the University?
Update:
We have come to discover that he has lied the institution name in his CV, he said Institution ABC, and it was from another University. Is this a crime?