I-9 compliance - how employers stay audit-ready with Form I-9

I-9 compliance comes down to one habit: verifying that every person you hire is authorized to work in the U.S., documenting it correctly on Form I-9, and keeping that record where you can produce it fast. Every employer has to do this for every employee hired after November 6, 1986, whether that worker is a U.S. citizen or a foreign national on a work visa. The form looks simple, but the fines for getting it wrong are not, and ICE has been reclassifying small errors as serious ones. This guide walks HR and people ops through what I-9 compliance actually requires, where teams slip, and how to build a process that holds up when an auditor comes knocking.

Most compliance failures don't come from bad intent. They come from having no repeatable process: a form filled out days late, a missing signature, a folder no one owns. Fixing that is less about legal expertise and more about running the same clean steps every time.

What is Form I-9 and who has to complete it?

Form I-9, Employment Eligibility Verification, is the federal form that records a new hire's identity and their authorization to work in the United States. Every U.S. employer must complete one for each employee, and the rule doesn't bend for company size, industry, or citizenship. A third-generation citizen and an H-1B specialty occupation worker both need an I-9 on file, filled out the same way.

The form has two sides to it, and that split is the heart of I-9 compliance. The employee handles the first part, attesting to their status and providing information. The employer handles the second part, physically examining the documents the employee presents and recording them. You verify authorization; you don't get to choose which documents a worker shows you, as long as they come from the official Lists of Acceptable Documents. Asking for a specific document, or more documents than the form requires, is itself a violation called document abuse.

One point that trips up new employers: independent contractors don't get an I-9. The form is for employees, so if you're paying someone on a 1099 as a genuine contractor, they're outside this process. Misclassifying a worker to skip the I-9, though, creates a bigger problem than the paperwork you were trying to avoid.

What I-9 compliance actually requires, step by step

I-9 compliance runs on deadlines, and missing them is one of the most common findings in an audit. The employee must complete and sign Section 1 no later than their first day of employment, not before they've accepted the job and not a week into the role. You then have to complete Section 2, where you record the documents you examined, within three business days of the employee's start date. Hire someone to start Monday, and their Section 2 is due by Thursday.

When you review documents for Section 2, the employee gets to choose what to present: either one item from List A, which proves both identity and work authorization, or a combination of one document from List B for identity plus one from List C for work authorization. A U.S. passport is a List A document on its own; a driver's license paired with a Social Security card covers List B and List C together. Your job is to check that the documents reasonably appear genuine and relate to the person in front of you, then record the details. You're verifying, not judging or collecting extras.

Here's how the three lists fit together:

Some workers need reverification later, and this is where visa cases add a layer. If an employee's work authorization has an expiration date, such as an Employment Authorization Document (EAD) tied to a pending green card, you have to reverify before it lapses using Supplement B of the form. Permanent residents and U.S. citizens don't get reverified, and neither does an expired List B identity document like a driver's license. Tracking those expiration dates is exactly the kind of thing that falls through the cracks without a system watching them.

Hiring international talent this year?See which work visas fit the roles you're filling and how sponsorship maps to your timeline.

Start visa match

Common I-9 mistakes that trigger fines

Paperwork and substantive violations ($288 to $2,861 per form)

Most penalties don't come from hiring someone unauthorized. They come from paperwork the employer could have gotten right, and the dollar figures are real. Civil fines for substantive and uncorrected paperwork violations currently run from $288 to $2,861 per Form I-9, based on the inflation adjustment published on January 2, 2025. Because the fine is per form, a mid-size company with sloppy files can face six figures of exposure from errors that took seconds to make.

The errors auditors flag most often are ordinary: a blank field in Section 1, a missing signature or date, a Section 2 completed after the three-day window, or document details that don't match what the form asks for. What changed recently raises the stakes. On March 16, 2026, ICE updated its Form I-9 inspection guidance and reclassified more than ten error types that used to be correctable technical mistakes as substantive violations, meaning they now draw a fine immediately instead of giving you a window to fix them. The margin for "we'll clean it up later" has narrowed sharply.

Penalties for knowingly employing unauthorized workers

Knowingly employing a worker without authorization sits in a heavier tier. Those penalties start at $716 to $5,724 per worker for a first offense, climb to $5,724 to $14,308 for a second, and reach $8,586 to $28,619 per worker for a third or later offense. Pattern-or-practice violations can also carry criminal liability. The through-line is simple: a documented, consistent I-9 process is your cheapest insurance against all of it.

Fees and penalty amounts are current as of July 2026. The government adjusts these periodically, so check the linked official pages for the latest figures.

How to prepare for an I-9 audit

An I-9 audit usually starts with a Notice of Inspection (NOI) from ICE, and it moves fast: you generally get just three business days to produce your I-9 records once the notice lands. That short window is why audit readiness has to be built in advance, not assembled in a panic. If your forms are scattered across email, personnel files, and a filing cabinet, three days is not enough to find and fix them.

The practical fix is to keep all I-9s in one place, separate from general personnel files, and to run internal self-audits before the government does. A self-audit means pulling every active and recently separated employee's form, checking each for missing fields, signatures, dates, and timely completion, then correcting errors the right way. Corrections matter: you draw a line through the mistake, enter the right information, and initial and date the change. You never backdate, white out, or complete a form as if it were done on time when it wasn't, since a fabricated record is far worse than an honest late one.

Retention has its own rule that many teams get backwards. You must keep each I-9 for three years after the date of hire or one year after the employment ends, whichever date is later. For a long-tenured employee, that means the clock is the termination date plus one year; for a short stint, it's the hire date plus three. Purging forms too early is a violation, and keeping everything forever creates needless clutter, so a calendar that flags the correct destruction date keeps the file clean. Our HR checklist for onboarding international employees walks through where I-9 verification fits in the first days of a new hire.

E-Verify and remote verification: how they fit I-9 compliance

The E-Verify is a separate, web-based system that checks the information from a completed Form I-9 against government records, and it supports the I-9 process rather than replacing it. You still complete the I-9 for every hire; E-Verify then confirms the data electronically. The program is voluntary at the federal level for most private employers, but it's mandatory for federal contractors with the relevant clause and for employers in a growing list of states, so your obligation depends on where and how you operate.

Enrolling in E-Verify also unlocks the remote document review that hybrid and distributed teams rely on. Since August 1, 2023, DHS has allowed a remote verification option: employers enrolled in E-Verify and in good standing can examine a new hire's documents over a live video call instead of in person, as long as they follow the alternative procedure consistently. Employers who aren't in E-Verify still have to inspect original documents physically, which shapes how you onboard remote staff. If you sponsor foreign workers, our guide to sponsoring a foreign worker step by step shows how I-9 verification connects to the wider petition and compliance workload.

Building an I-9 process that scales

I-9 compliance holds up when it's a system, not a memory test. That means one owner for the process, a single secure location for the forms, calendar triggers for reverification and retention dates, and a standing self-audit rhythm so errors surface on your schedule rather than ICE's. As you add remote hires, multiple worksites, and visa holders whose authorization expires, the tracking gets harder to carry in a spreadsheet, and that's usually the point where a case platform or an immigration attorney earns its keep.

Split the work along clean lines. HR owns the compliance machinery: the I-9 files, the E-Verify cases, the reverification calendar, and full visibility into which forms are complete and which need attention. The employees themselves, especially those on work visas, should have a direct line to an immigration attorney for their own status questions, travel, and green card timing, since those are personal legal matters HR isn't positioned to answer. Keeping those lanes separate protects the company and gives the worker real answers.

Tukki is a U.S. immigration provider that helps employers hire and keep international talent across work visas and green cards, from H-1B specialty occupation to O-1A extraordinary ability and employer-sponsored EB-2 and EB-3 routes, with dedicated attorney support and a platform that gives HR visibility into every case and compliance deadline. If your team is running I-9 verification alongside active sponsorships, we can help you keep the process audit-ready.

Book a demo with our team