E-Verify for employers - how it works, who must enroll, and what it means for hiring

E-Verify is a web-based system that compares the information an employee gave you on Form I-9 against records held by the Department of Homeland Security and the Social Security Administration. If the records match, you get a result in seconds. If they don't, you get a mismatch, and what your company does in the following ten working days is where nearly all of the legal risk in this system lives.

Most HR leads meet E-Verify one of two ways. Either they're about to hire a STEM OPT student and discover enrollment is a prerequisite, or a state licensing rule or federal contract has made it mandatory and someone forwarded them the enrollment link. Either way, the enrollment flow takes twenty minutes and the obligations last as long as you're in the program.

Here's what you're signing up for before you click through it.

What E-Verify is, and how it relates to Form I-9

E-Verify sits on top of Form I-9. It does not replace it.

Every U.S. employer must complete Form I-9 for every employee hired, citizens included. That obligation is universal and it exists whether or not you ever touch E-Verify. Form I-9 is where the employee attests to their work authorization and you examine their documents.

E-Verify takes the data from that completed I-9 and runs it against government records. It confirms electronically what the paper form asserts. If your I-9 is wrong, E-Verify will not save you, and the fastest way to generate mismatches is to run cases off sloppy I-9 data.

The practical relationship looks like this:

For the mechanics of completing and retaining the form itself, including reverification and what an ICE Notice of Inspection asks for, start with our guide to I-9 compliance. This post covers the layer above it.

Rules and timeframes below are current as of August 2026. Confirm the live requirements on the E-Verify employer resources before you build a process around them.

Who has to enroll in E-Verify?

E-Verify is voluntary for most employers nationally. Three situations turn it into a requirement.

Federal contractors with the FAR E-Verify clause. Employers holding federal contracts or subcontracts that contain the Federal Acquisition Regulation E-Verify clause must enroll and use the system as a condition of that contract. Check the clause list in the contract itself rather than assuming, because whether the clause is present depends on the contract type and value.

State law. A number of states require E-Verify participation, often tied to business licensing or to public contracts, and the scope varies widely: some cover all employers, some only public employers or contractors above a size threshold. E-Verify itself does not interpret state law and directs employers to state officials or their own counsel. If you operate in more than one state, treat this as a state-by-state question rather than a company-wide policy decision.

STEM OPT hiring. An employer must be enrolled in E-Verify for an F-1 student to use the 24-month STEM OPT extension. This is the reason most startups end up in the system, and it usually arrives as a surprise two weeks before a return offer needs to go out. Our guide to the STEM OPT extension covers the employer's side of that arrangement, including the I-983 training plan.

Everyone else enrolls voluntarily. Some do it because a large customer asks, some because they hire across states with mixed rules and want one process, and some because they'd rather find a records problem in week one than during an inspection.

Enrollment means signing a memorandum of understanding, or MOU, with DHS and SSA. It commits the company to specific procedures, and it is not a document to skim. You'll also designate a program administrator, the person responsible for adding users, closing cases, and keeping the account current when people leave.

Visa-specific video coursesLearn how O-1A, EB-1A, and H-1B visas work and how cases are evaluated, explained clearly by our legal team.

Watch our visa courses

How does E-Verify work? The case from start to result

A case runs in a fixed sequence, and the timing constraint sits at step two.

1. The employee accepts the job offer and Form I-9 is completed. You cannot create a case before both of those things happen.
2. You create the case in E-Verify. The deadline is no later than the third business day after the employee starts work for pay. Not three days after the offer, not three days after the I-9 was signed, three business days after their first paid day.
3. E-Verify checks the data against DHS and SSA records, and in some cases runs photo matching against the document image on file.
4. A result comes back, usually within seconds, occasionally after a delay while the system does additional checking.
5. You take the action the result requires, and you close the case. Every case has to be closed.

If you miss the three-business-day window, you still create the case. Late is better than never, and E-Verify will ask you for the reason for the delay. What you cannot do is quietly skip it and hope nobody reconciles headcount against case volume.

Two people commonly share this work: whoever completes the I-9 at onboarding and whoever runs E-Verify. When those are different people in different systems, the three-day deadline is the first thing to slip. Assign one owner per hire.

What each E-Verify result means and what you do next

Five results matter. Only one of them means you're done.

1. Employment Authorized. The records match. Close the case. Nothing else is required, and the employee never needs to know it happened.
2. Case in Continuance. The employee contacted DHS or SSA, and the agency needs more time to resolve the discrepancy. The employee keeps working and keeps getting paid while it's open. There is no action for you beyond waiting for the update.
3. Tentative Nonconfirmation, shown as a Mismatch. The information didn't match. This is not a finding that the employee is unauthorized. It frequently traces to a name change after marriage, a hyphenated surname entered differently, a data entry error, or a record the agency hasn't updated. It requires immediate action from you, covered in the next section.
4. Final Nonconfirmation. DHS or SSA could not confirm employment eligibility after the employee took action, or the employee chose not to act. Close the case. You may terminate employment based on a Final Nonconfirmation, and if you continue employing the person you may be required to notify DHS.
5. Close Case. Every case ends in a closure, including cases where the person never started or left before resolution. Open cases sitting in the account are a housekeeping problem that shows up immediately in an audit of your usage.

Getting a mismatch is normal. Handling it badly is what creates liability.

The tentative nonconfirmation workflow, step by step

This is the section to read twice, because the rule that trips employers up is counterintuitive: the employee keeps working, and keeps getting paid, throughout.

You may not take adverse action while a mismatch is being contested. No suspension, no delayed start date, no withheld pay, no reassignment to a lesser role, no "let's pause your onboarding until this clears." Doing any of those things is where discrimination claims and Immigrant and Employee Rights Section investigations come from.

The sequence:

1. Notify the employee promptly and privately. E-Verify generates a Further Action Notice. Give it to the employee, review it with them, and make sure they understand what the mismatch says. If they need it in another language, E-Verify provides translated notices.
2. The employee decides whether to take action. They may choose to contest the mismatch and work with DHS or SSA to resolve it, or they may choose not to.
3. Refer the case if they take action. You complete the referral in E-Verify. All of your steps, from notification through referral, must be completed within 10 federal government working days after the mismatch result is issued.
4. The employee contacts the agency. Once you refer the case, the employee has 8 federal government working days to contact DHS or visit an SSA field office.
5. Wait for the outcome. They keep working. You keep paying them.
6. Close the case on whatever result comes back. If the employee never told you their decision by the end of the tenth federal government working day, you close the case.

"Federal government working days" excludes weekends and federal holidays, so a mismatch issued the Friday before a long weekend has a later deadline than the calendar suggests. Track it in E-Verify rather than in your head.

Document the conversation. Note the date you handed over the Further Action Notice and what the employee decided. If a claim is ever raised that you pressured someone out during a contest window, that record is what answers it.

What employers may not do with E-Verify

The prohibitions are as enforceable as the requirements, and they're easier to violate without realizing.

No prescreening. You cannot run a candidate through E-Verify before they've accepted an offer and completed Form I-9. Screening applicants for work authorization through the system is prohibited, full stop.

No selective verification. If you're enrolled, you verify every new hire covered by your enrollment. You cannot run cases only on employees who look or sound foreign-born, only on people with foreign-sounding names, or only on non-citizens. Selective verification is a discrimination problem before it is a compliance problem.

No document specification. The employee chooses which acceptable documents to present for Form I-9. You cannot demand a specific document, ask for more documents than required, or reject valid documents that reasonably appear genuine. Telling a new hire "just bring your green card" is a request for a specific document.

No re-running existing staff. E-Verify is for new hires, with narrow exceptions such as certain federal contractor obligations. Running your existing workforce through the system because a new HR lead wants a clean baseline is not one of those exceptions.

No adverse action during a contest. Covered above, and worth repeating because it's the most expensive one.

The Department of Justice Immigrant and Employee Rights Section enforces the anti-discrimination provisions, and its employer guidance is the reference to check when a specific situation feels ambiguous.

Running E-Verify across multiple worksites and states

Administration gets harder as headcount spreads, and the failure modes are administrative rather than legal.

Decide early whether one central program administrator runs all cases or whether each site has its own users. Central control gives you consistency and a single view of open cases. Distributed users give you speed at the three-day deadline. Growing companies usually start central and hit a wall.

Three items belong in whoever owns this:

• Account hygiene. Users who left the company still have access until someone removes them. Review the user list quarterly.
• Open case sweeps. Cases that were never closed accumulate silently. Sweep monthly.
• State-by-state rules. If you hire in a state with its own mandate, the state rule may impose obligations your MOU does not, including proof of enrollment for licensing.

E-Verify records also need to line up with your I-9s and, for sponsored employees, with your immigration filings. When those three live in three systems, an audit request becomes a reconstruction project. Our guide to onboarding international employees covers sequencing those steps at hire, and how to build a company immigration policy covers writing the ownership down before you need it.

An E-Verify readiness checklist

Before you enroll, or as a health check if you already have:

1. Do you know which of the three triggers applies to you, FAR clause, state law, or STEM OPT hiring, and have you confirmed it in the source rather than assumed it?
2. Has someone read the MOU rather than clicked through it?
3. Is there one named program administrator, and a named backup for when they're on leave?
4. Is there a single owner per hire for both the I-9 and the E-Verify case, so the three-business-day deadline can't fall between two people?
5. Does anyone on your team know the mismatch workflow before a mismatch arrives, specifically the rule that the employee keeps working and keeps getting paid?
6. Are hiring managers trained not to ask candidates about work authorization status in ways that shade into prescreening or document specification?
7. Do you have a monthly sweep for open cases and a quarterly review of account users?

Two answers you don't like are worth fixing this month, not next quarter.

Keeping E-Verify, I-9, and sponsorship records in one place

E-Verify is one record set among several. Add Form I-9 files, LCA postings and public access files for H-1B employees, visa and status expiration dates, and the filings behind each sponsored case, and most growing companies are tracking the same population across four or five places at once. That works until someone asks for all of it at the same time.

Tukki is a U.S. immigration provider that works with employers sponsoring skilled professionals, covering H-1B specialty occupation petitions, O-1A and L-1 cases, and employer-sponsored green cards through PERM labor certification. HR gets one view of every case and every date across the sponsored population, while the sponsored employee gets a direct line to the attorneys working their case.

Book a demo