I-9 Compliance Guide for Employers (2026): Verification, Audits and Penalties

If you employ anyone in the United States, Form I-9 is not optional. It is federal law. Every employer — regardless of size, industry, or location — must verify that each new hire is legally authorized to work in the country. And in 2025 and 2026, the stakes have never been higher: ICE worksite enforcement actions have surged, civil penalties have increased, and the rules around remote I-9 verification have been rewritten.

This guide covers everything US employers need to know about I-9 compliance: who needs an I-9, what documents are acceptable, how the new remote verification rules work, how E-Verify fits in, what happens during an audit, and how much violations cost. Whether you have five employees or five thousand, this is your 2026 compliance playbook.

1. What Is Form I-9 and Who Must Comply?

Form I-9, officially titled the Employment Eligibility Verification form, is a US Citizenship and Immigration Services (USCIS) document that employers must complete for every person they hire for employment in the United States. The form was created under the Immigration Reform and Control Act of 1986 (IRCA) and is enforced jointly by USCIS, the Department of Homeland Security (DHS), the Department of Justice (DOJ), and US Immigration and Customs Enforcement (ICE).

The purpose is straightforward: confirm that each employee is who they say they are and that they are legally authorized to work in the US. Employers do this by examining identity documents and work authorization documents from the employee — then recording that examination on the I-9 form.

Fast Fact	Detail
Governing law	Immigration Reform and Control Act (IRCA), 1986
Administering agency	USCIS (form); ICE (enforcement)
Who must comply	ALL US employers, regardless of size or industry
Current form version	Form I-9, Edition 08/01/23 (as of 2026)
Employee coverage	All employees hired after November 6, 1986
Applies to	Citizens AND non-citizens authorized to work
Penalties range	$281 to $27,894 per violation (2026 adjusted rates)
Retention period	3 years from hire OR 1 year after termination (whichever is later)

Who must comply: Every employer in the United States — including nonprofits, government contractors, religious organizations, seasonal employers, and small businesses with a single employee. There is no minimum employee threshold. If you hire someone to work in the US and pay wages, you must complete an I-9.

2. Which Employees Require an I-9?

The I-9 requirement applies to employees — not independent contractors. Understanding this distinction matters for compliance because misclassifying a worker as a contractor to avoid I-9 obligations is itself a violation.

An I-9 is required for:

All new hires (US citizens and non-citizens alike) hired after November 6, 1986
Re-hires, if the prior I-9 is expired or more than three years old
Employees whose work authorization has expired and must be reverified

An I-9 is not required for:

Independent contractors or workers supplied by a staffing agency (the agency is responsible)
Employees hired before November 7, 1986, who have been continuously employed
Workers performing services outside the United States
Unpaid volunteers (though best practice is to complete I-9s for interns receiving academic credit)

One critical nuance: if you use a staffing or temp agency, the agency bears the I-9 responsibility for the workers it places. However, if you later hire a temp worker directly onto your payroll, you must complete a new I-9 as if they are a new hire.

3. I-9 Completion Deadlines: Section 1 and Section 2 Timing

One of the most common I-9 mistakes employers make is getting the timing wrong. The form has two sections completed at different times by different parties, and both have strict deadlines.

Section 1: Employee Completes on Day One

The employee must complete Section 1 of Form I-9 on or before their first day of employment — meaning the first day they actually begin work for pay. You may send the form to the employee before their start date (for example, as part of a pre-boarding packet), but they cannot complete it earlier than the date they accept the job offer.

Section 1 captures:

Full legal name
Address and date of birth
Social Security Number (required if the employer uses E-Verify)
Citizenship or immigration status attestation
Signature and date

Section 2: Employer Completes by Day Three

The employer — or an authorized representative — must complete Section 2 within three business days of the employee’s first day of employment. For example, if an employee starts on a Monday, Section 2 must be completed by Thursday.

Exception: if the employee is hired for three days or fewer, Section 2 must be completed on the first day of employment.

Section 2 requires the employer to physically examine original identity and work authorization documents presented by the employee, then record:

Document title, issuing authority, document number, and expiration date
First day of employment
Employer or authorized representative name, title, signature, and date
Employer business name and address

Critical rule: You must examine documents in person (or via the authorized alternative procedure for qualifying employers — see Section 5). You cannot accept photocopies, and you cannot pre-screen documents before the employee’s start date unless using a designated authorized representative.

Section 3: Reverification

Section 3 is used when an employee’s work authorization expires and they are rehired within three years of the original I-9 date. Employers must complete Section 3 before the employee’s existing work authorization expires — not after. Waiting until after expiration is a violation.

Section	Completed By	Deadline
Section 1	Employee	On or before first day of work for pay
Section 2	Employer	Within 3 business days of first day of work
Section 3	Employer	Before work authorization expires (for reverification)

4. Acceptable Documents: List A, List B, and List C

Employees choose which documents to present — employers cannot specify which documents they must provide. You must accept any document or combination of documents from the approved lists as long as they appear genuine and relate to the person presenting them.

List A: Documents That Establish Both Identity and Work Authorization

If an employee presents a List A document, no additional documents are needed. Common List A documents include:

US Passport or US Passport Card
Permanent Resident Card (Form I-551, “Green Card”)
Employment Authorization Document (Form I-766, EAD)
Foreign passport with a temporary I-551 stamp or I-551 printed notation
Foreign passport containing Form I-94 with Arrival/Departure Record bearing a non-immigrant status designation that authorizes employment
Passport from the Federated States of Micronesia or Republic of the Marshall Islands with Form I-94

List B: Documents That Establish Identity Only

Must be combined with a List C document. Common List B documents include:

Driver’s license or ID card issued by a US state or territory (with photo or identifying information)
ID card issued by federal, state, or local government agencies
School ID card with photograph
Voter registration card
US Military card or draft record
Military dependent’s ID card
US Coast Guard Merchant Mariner Document
Native American tribal document
Driver’s license issued by a Canadian government authority
For individuals under age 18: school record, report card, clinic/doctor record, hospital record, daycare/nursery school record

List C: Documents That Establish Work Authorization Only

Must be combined with a List B document. Common List C documents include:

US Social Security Account Number card (unrestricted)
Certification of Report of Birth issued by the Department of State (Forms DS-1350, FS-545, FS-240)
Original or certified copy of a US birth certificate
Native American tribal document
US Citizen ID Card (Form I-197)
Identification Card for Use of Resident Citizen in the United States (Form I-179)
Employment authorization document issued by DHS (List C #7)

Key employer obligations regarding documents:

Do not request more or different documents than required
Do not reject valid documents that reasonably appear genuine
Do not specify which List A, B, or C documents an employee must present
Accept receipts for lost, stolen, or destroyed documents as a temporary measure (valid for 90 days)
Never demand a Social Security card unless using E-Verify (even then, you cannot demand it for I-9 purposes specifically)

5. Remote I-9 Verification: Updated DHS Rules for 2024–2026

The COVID-19 pandemic forced USCIS to allow temporary remote I-9 document inspection via video call. That emergency flexibility ended on July 31, 2023. However, DHS simultaneously introduced a permanent alternative procedure for qualifying employers — and this is one of the most significant I-9 rule changes in decades.

The DHS Alternative Procedure (Effective August 1, 2023)

Under the alternative procedure established in 8 CFR 274a.2(d), qualifying employers may examine I-9 documents remotely instead of in person. This is a permanent rule — not a temporary exemption.

Who qualifies to use the alternative procedure:

The employer must be enrolled in E-Verify and be in good standing at the time of the remote examination
E-Verify enrollment must cover the hiring site where the employee will work
The employer must follow all E-Verify requirements for the employee in question

How the alternative procedure works:

The employee transmits a clear, legible copy (front and back where applicable) of their identity and work authorization documents to the employer
The employer or authorized representative conducts a live video interaction with the employee to examine the documents
During the live video call, the employer examines the documents to ensure they appear genuine and match the employee presenting them
The employer retains the document copies with the I-9 record
The employer indicates on Section 2 (or Section 3 for reverification) that the alternative procedure was used, by checking the “Alternative Procedure” box and noting the date of the live video examination

What you cannot do under the alternative procedure:

Use asynchronous video (pre-recorded) — the interaction must be live
Rely solely on document copies without a live video call
Apply the alternative procedure if your E-Verify enrollment has lapsed or if you have compliance issues with E-Verify

COVID-Era I-9 Remediation Deadline

Employers who used the COVID-19 temporary flexibility (March 2020 – July 2023) were required to complete in-person physical document re-examination by August 30, 2023, unless they qualified for the alternative procedure. If your organization used COVID flexibility and did not complete remediation, those I-9s may now have uncured deficiencies — a significant audit risk in 2026.

Authorized Representatives for Remote Employees

Even without the alternative procedure, employers with remote employees can designate an authorized representative in the employee’s location to complete Section 2 on the employer’s behalf. The authorized representative can be anyone — a notary, an attorney, a third-party HR service, or even a trusted individual. However, the employer remains legally responsible for any errors or violations the representative makes.

6. E-Verify: Requirements and How It Works

E-Verify is a free, internet-based system operated by DHS that allows employers to electronically confirm the employment eligibility of newly hired employees by comparing information from their Form I-9 against records in DHS and Social Security Administration (SSA) databases.

Is E-Verify Mandatory?

E-Verify is not federally mandated for most private employers. However, it is required for:

Federal contractors: Companies with federal contracts subject to the FAR E-Verify clause (contracts over the micro-purchase threshold that last more than 120 days)
Employers in certain states: As of 2026, more than 20 states require some or all employers to use E-Verify, including Arizona, Alabama, Georgia, North Carolina, South Carolina, Tennessee, Utah, and Mississippi (requirements vary by employer size and industry)
Employers using the DHS alternative remote I-9 procedure: E-Verify enrollment is a prerequisite

How E-Verify Works

After the employee completes Section 1 and you complete Section 2 of the I-9, you enter the employee’s information into E-Verify. The system typically responds within seconds with one of four results:

E-Verify Result	Meaning	Employer Action
Employment Authorized	Information matches DHS/SSA records	No action needed; retain case number with I-9
Tentative Nonconfirmation (TNC)	Information doesn’t match — may be a data error	Notify employee; employee may contest within 10 federal working days
Final Nonconfirmation (FNC)	Employee’s authorization could not be confirmed	May terminate employment; must not continue employing knowing of FNC
DHS or SSA Referral	Employee is contesting the TNC result	Cannot take adverse action while employee contests

E-Verify timing rules: You must create the E-Verify case no later than the third business day after the employee’s first day of work. You cannot run E-Verify before the employee has accepted a job offer, and you cannot pre-screen candidates using E-Verify.

Critical anti-discrimination rule: If an employee receives a TNC, you must notify them immediately using the “Further Action Notice” generated by E-Verify. You cannot terminate, suspend, withhold pay, or take any adverse action against an employee solely because of a TNC while they are contesting the result.

7. I-9 Retention and Storage Requirements

Completing the I-9 is only half the obligation. You must also store it correctly and keep it for the legally required period — because during an ICE audit, you will be asked to produce every I-9 for current employees and for former employees within the retention window.

Retention Formula

For each employee, calculate both dates and retain the I-9 until whichever is later:

Date A: Three years from the employee’s date of hire
Date B: One year from the date employment ended

Example: An employee hired on January 1, 2020, and terminated on June 1, 2024. Date A = January 1, 2023. Date B = June 1, 2025. Retain until June 1, 2025 (the later date).

Example 2: An employee hired on January 1, 2023, and terminated on March 1, 2024. Date A = January 1, 2026. Date B = March 1, 2025. Retain until January 1, 2026 (the later date).

Storage Options

I-9 forms may be stored in one of three ways:

Paper: Original paper I-9 forms in a dedicated binder or folder. Do NOT file I-9s in individual employee personnel files — keep them separate to simplify audit response.
Electronic: Scanned or electronically generated I-9s stored in an electronic system that meets DHS standards (must include indexing, audit trail, inspection capability, and quality assurance)
Combination: Some sections on paper, some electronic (permitted but complex to manage)

Important: If you use the DHS alternative procedure for remote verification, you must retain copies of the documents examined via video — this document retention is mandatory, not optional, for remote verifications.

You must make I-9 forms available for inspection within three business days of receiving a Notice of Inspection from ICE or DHS.

8. I-9 Audits: What to Expect and How to Prepare

ICE worksite enforcement has intensified significantly in 2025 and into 2026. Employers that previously flew under the radar based on size or industry are increasingly receiving Notices of Inspection (NOIs). An I-9 audit can be triggered by a tip, a pattern of complaints, industry targeting, or random selection.

How an I-9 Audit Begins

ICE initiates a Form I-9 inspection by serving the employer with a Notice of Inspection (NOI) — in person or by certified mail. Once you receive an NOI, you have three business days to produce:

All I-9 forms for current employees
I-9 forms for former employees still within the retention period
A copy of your payroll records, list of current employees, and articles of incorporation or business license (as requested)
E-Verify case details (if you use E-Verify)

What ICE Looks For

ICE auditors review I-9s for two types of violations:

Substantive (or uncorrectable) violations: Missing sections, invalid or expired documents listed, failure to complete the form at all. These result in automatic fines.
Technical (or correctable) violations: Minor errors like missing dates, incorrect document numbers, or missing employer signature. These may be correctable within 10 business days of the audit notice, potentially reducing penalties.

Pre-Audit Internal I-9 Audit: Your Best Defense

The most effective way to survive an ICE audit is to conduct your own internal I-9 audit before one is ever initiated. Best practice is to audit all I-9s annually. Steps include:

Pull all I-9s for current employees and verify one exists for each person on payroll
Check that all required fields in Section 1 and Section 2 are completed
Verify that document information is recorded correctly (document numbers, expiration dates)
Check expiration dates — flag any employees whose work authorization expires within 90 days for reverification
Verify retention: purge I-9s for employees no longer within the retention window
Correct technical errors by drawing a single line through the error, writing the correct information, initialing, and dating the correction — never use correction fluid (white-out)
If you used COVID-19 remote flexibility, confirm all in-person or alternative procedure re-verifications were completed

Consider retaining immigration counsel or an I-9 compliance consultant to conduct the internal audit — attorney-client privilege may apply to the findings, giving you additional protection.

9. I-9 Violations and Penalties in 2026

Penalties for I-9 violations are adjusted annually for inflation under the Federal Civil Penalties Inflation Adjustment Act. The 2026 penalty amounts (effective for violations assessed on or after January 15, 2026) are:

Paperwork Violations (Failing to Properly Complete, Retain, or Present I-9)

Violation Type	Minimum Penalty	Maximum Penalty
First offense (paperwork)	$281 per violation	$2,789 per violation
Second offense	$2,789 per violation	$2,789 per violation

Unlawful Employment Violations (Knowingly Hiring or Continuing to Employ Unauthorized Workers)

Offense	Minimum Penalty Per Unauthorized Worker	Maximum Penalty Per Unauthorized Worker
First offense	$698	$5,579
Second offense	$5,579	$13,946
Third or subsequent offenses	$8,369	$27,894

Document Fraud Penalties

Employers who participate in document fraud — accepting fraudulent documents knowingly, or creating or using fraudulent documents — face far steeper penalties under a separate statute (8 U.S.C. § 1324c), with fines starting at $398 per document for first offenses and rising to $3,975 per document for repeat violations, plus potential criminal prosecution.

Pattern or Practice Violations

Employers found to have a pattern or practice of hiring unauthorized workers face criminal penalties including fines up to $3,000 per unauthorized employee and imprisonment up to six months per offense under 8 U.S.C. § 1324a(f).

Anti-Discrimination Penalties (Unfair Documentary Practices)

The DOJ’s Immigrant and Employee Rights Section (IER) enforces prohibitions against I-9-related discrimination. Employers who request more documents than required, refuse to accept valid documents, or discriminate based on citizenship status or national origin during the I-9 process face civil penalties of $218 to $2,174 per individual charged with a first violation.

Key point: In a large workforce, I-9 paperwork violations are not a minor expense. An employer with 500 employees and systemic Section 2 completion errors could face total fines exceeding $1 million from a single audit. This is why proactive compliance and annual internal audits are not optional for mid-size and enterprise employers.

10. Common I-9 Mistakes Employers Make

Based on patterns from ICE audits and immigration compliance reviews, these are the most frequently cited I-9 errors:

Section 1 Errors (Employee-Side)

Missing or incorrect date of birth
Employee did not sign or date Section 1
Incorrect citizenship attestation (checking the wrong box)
Missing Social Security Number when E-Verify is used
Preparer/Translator Certification left blank when a preparer assisted

Section 2 Errors (Employer-Side)

Section 2 completed late (after the three-business-day deadline)
Employer did not physically examine original documents (accepted photocopies)
Incorrect or missing document expiration dates
Missing employer signature or date
Wrong List column used (e.g., List A document recorded in List B column)
Failing to record all required document information
Using an expired version of the I-9 form

Systemic Process Failures

No I-9 at all for one or more employees (the most serious paperwork violation)
I-9s filed in personnel files alongside other HR documents (makes audit response difficult and slow)
Failing to reverify employees whose work authorization has expired
Retaining I-9s beyond the retention period (creates unnecessary legal exposure)
Using correction fluid (white-out) to fix errors instead of a single line through the error
Requesting specific documents (e.g., “We need your green card”) rather than letting employees choose
Not completing I-9s for re-hires when the original I-9 is more than three years old

11. Best HR Software for I-9 Compliance

Manual I-9 management with paper forms and spreadsheet tracking is a significant liability at any scale above a handful of employees. Modern HR and onboarding software reduces errors by guiding both employees and employers through each field, tracking expiration dates, sending automated reverification alerts, and storing documents electronically in DHS-compliant formats.

When evaluating I-9 compliance software, look for these capabilities:

Electronic I-9 completion: Guided form completion for both Section 1 (employee) and Section 2 (employer) with field validation to catch errors before submission
E-Verify integration: Native or integrated E-Verify case creation within the same workflow, automatically pulling Section 1 data
Remote I-9 support: Support for the DHS alternative procedure, including document upload by employee, live video verification workflow, and automatic notation of alternative procedure on the form
Reverification alerts: Automated notifications when employee work authorization documents are approaching expiration (typically 90, 60, and 30 days out)
Audit trail: Immutable logs of who completed each section, when, and what changes were made — essential for demonstrating good-faith compliance during an audit
Retention management: Automatic calculation of each I-9’s destruction date and alerts when forms are eligible for purge
Audit-readiness reporting: The ability to quickly generate a complete list of all I-9s, flag missing forms, and export in formats suitable for an ICE audit response

Leading platforms with strong I-9 and onboarding compliance features include Workday, BambooHR, Rippling, Gusto, ADP Workforce Now, Paychex Flex, HireRight, and dedicated I-9 solutions like I-9 Advantage and Tracker I-9. For growing companies, platforms like Rippling and Gusto offer particularly streamlined I-9 + E-Verify workflows integrated directly into the new hire onboarding flow.

12. I-9 Compliance Checklist for Employers

Use this checklist as a quick-reference for every new hire and for periodic internal audits:

For Every New Hire

Provide the employee with the current version of Form I-9 (Edition 08/01/23 as of 2026) and the M-274 Handbook for Employers on or before their first day
Ensure the employee completes Section 1 on or before their first day of work for pay
Within three business days of their first day, physically examine (or via the DHS alternative procedure if E-Verify enrolled) original identity and work authorization documents
Complete Section 2 in full: document titles, issuing authorities, document numbers, expiration dates, first day of employment, employer signature, and business information
If using E-Verify, create the E-Verify case no later than the third business day of employment
If using the DHS alternative procedure, retain copies of all documents examined via video and check the Alternative Procedure box
Store the completed I-9 in a separate, dedicated I-9 binder or electronic system — not in the employee personnel file
Calculate and calendar the I-9 retention date and any work authorization expiration reverification dates

Annual Internal Audit

Cross-reference your I-9 binder against current employee payroll list — confirm an I-9 exists for every active employee
Review all I-9s for completeness and accuracy in both Section 1 and Section 2
Identify and correct technical errors (single line, initial, date — no white-out)
Identify and flag substantive errors for legal review
Check all work authorization expiration dates and initiate reverification for any expiring within 90 days
Purge I-9s for employees no longer within the retention window (document the destruction)
Confirm your I-9 form version is current (check USCIS.gov for the latest edition)
Verify E-Verify enrollment is current and covers all hiring sites

Frequently Asked Questions About I-9 Compliance

This guide is part of the Spotsaas US Employer Compliance series. Each article covers a distinct federal compliance area for US employers:

FMLA Compliance Guide for Employers — Leave requirements, intermittent leave rules, notice deadlines, and common violations
ACA Compliance Guide for Employers — Employer mandate, affordability thresholds, 1095-C reporting, and ESRP penalties in 2026
FLSA Overtime Rules: Employer Guide — Salary thresholds, exempt vs. non-exempt classification, and overtime calculation rules
COBRA Administration Guide for Employers — Qualifying events, notice deadlines, premium calculation, and excise tax penalties
OSHA Compliance Guide for Employers — Recordkeeping forms, injury reporting deadlines, inspection process, and 2026 penalty amounts