I-9 and E-Verify Compliance: Best Practices for U.S. Employers in 2026
Federal worksite enforcement is at a decade-high. Whether you employ two workers or one hundred and fifty, a single unannounced audit can expose your business to six-figure penalties, debarment from federal contracts, and reputational damage that outlasts any fine. This guide is written for employers who employ F-1 STEM OPT students and sponsor nonimmigrant workers and want to stay ahead of the federal agencies’ enforcement tactics, not react to them.
Federal law requires that every U.S. Employer complete Form I-9, Employment Eligibility Verification. E-Verify the electronic system U.S. employers may use to electronically confirm employee’s employment eligibility, while generally a voluntary tool; certain federal contractors and states mandate it’s use. Together, these two tools form the backbone of U.S. worksite employment eligibility verification, and together they are where certain employer liability begins.
Understanding exactly what happens during an audit, where employers most commonly go wrong, how to handle the realities of remote and hybrid hiring, and what is at stake if you fall short is essential for a responsible HR or legal team in 2026.
What Happens During a Form I-9 Audit
Immigration and Customs Enforcement (“ICE”), through its Homeland Security Investigations (“HIS”) division, conducts I-9 audits to ensure U.S. employers comply with immigration and employment requirements under the Immigration Reform and Control Act (“IRCA”).
Step-by-Step Audit Timeline
1. Notice of Inspection Served (Day 0): ICE delivers the NOI demanding production of all I-9 forms, payroll records, lists of current and terminated employees, and other supporting documentation. Employers have three business days to gather and present the required Form I-9 documents. The clock starts immediately.
2. Three Business Days to Produce Records (Days 1–3): The 3-day production window is non-negotiable. Employers should immediately contact legal counsel for assistance.
3. ICE Review and Analysis (Days 4–90+): Investigators audit I-9 forms for incomplete or missing forms, errors in form completion and any substantive violations like unauthorized workers. This phase can span weeks or months depending on your workforce size.
4. ICE Issues Findings
- Notice of Compliance – Employer is fully compliant, no violations found.
- Notice of Technical or Procedural Failures – Minor errors found which must be corrected within 10 business days.
- Notice of Suspect Documents – Employer must take action including but not limited to termination if work authorization cannot be verified.
- Notice of Discrepancies – Employer must provide additional documentation.
- Notice of Intent to Fine (NIF) – Employer is severely non-compliant, significant violations found which could lead to financial penalties.
5. Employer Response: Employer’s must correct minor violations within 10 days of the Notice of Technical or Procedural Failures to avoid fines. If fined or issued a NIF, an employer can (1) pay the fines, (2) negotiate a settlement with ICE, or (3) request a hearing before an ALJ (within 30 days).
6. Final Order, Penalties and Resolution: If an employer requests a hearing and loses the appeal, they must pay the penalties. In extreme cases, authorities may pursue criminal charges if the employer knowingly hired unauthorized workers.
What Happens During a E-Verify Desk Review
U.S. Citizenship and Immigration Services (“USCIS”), through its E-Verify Account Compliance division, conducts E-Verify Desk Reviews to ensure U.S. employers comply with the E-Verify Memorandum of Understanding (“MOU”) and E-Verify User Manual.
Step-by-Step Desk Review Timeline
1. E-Verify Desk Review Email Notification (Day 0): USCIS E-Verify Management and Program Analyst sends an email enclosing three attachments, (1) request for documents, (2) E-Verify profile confirmation form, and (3) self-assessment guide. Employers typically have two weeks to gather and present the requested documents from the identified cases.
2. 14 Days to Produce Records (Days 1–14): E-Verify Account Compliance provides a generous production window. Employers should promptly contact legal counsel for assistance to ensure ample time to prepare.
3. E-Verify Review and Analysis (Days 14+): Analysts review submitted documents for compliance with terms and conditions outlined in the E-Verify MOU. This phase can span days or weeks or months depending on your workforce size.
4. E-Verify Issues Recommendations: Analysts complete review and provide feedback on compliance requirements and assistance recommendations.
Common I-9 Mistakes That Create Liability
Common I-9 Compliance Violation |
Description |
|---|---|
| Late Completion of Form I-9 | Section 1 must be completed no later than the first day of employment. Section 2 must be completed within three business days of hire. Forms completed even one day late are a technical violation. |
| Accepting Improper Documents | Only documents on the List A, B, or C must be accepted. Accepting receipts beyond their lawful period, photocopies, or expired documents creates substantive violations. Refusing facially valid documents creates discrimination liability. |
| Incorrect Reverification | Employers must reverify workers with temporary work authorization before expiration but must not reverify U.S. citizens or permanent residents. Over-verification of permanent residents is itself an antidiscrimination violation under INA § 274B. |
| Missing or Incorrect Attestation in Section 2 | The preparer must personally examine original documents, sign, date, and provide their title and business address. Electronic signatures must comply with DHS standards. Pre-signed or delegated-without-review signatures are per se violations. |
| Failure to Retain and Purge on Schedule | I-9s must be retained for three years from the date of hire or one year after separation, whichever is later. Destroying forms too early and retaining them too long are both violations. Retention schedules must be built into your HRIS system. |
| Electronic I-9 System Noncompliance | Electronic I-9 systems must meet 8 C.F.R. § 274a.2(e) requirements: audit trail, system integrity check, tamper detection, and print capability. Using an off-the-shelf HR platform without verifying DHS compliance is a common and costly assumption. |
Remote Hiring Requirements: The 2023 Final Rule and What It Means in 2026
The shift to distributed workforces exposed a fundamental friction in I-9 law: Section 2 document examination traditionally required an in-person review. DHS’s 2023 permanent alternative procedure, codified for E-Verify employers, partially resolves this, but it comes with conditions that many employers are still misapplying three years later.
Authorized Remote Examination — Requirements Checklist
- E-Verify participation is mandatory. Remote examination is only available to employers enrolled in E-Verify. Non-enrolled employers must conduct in-person examination.
- Before the video call, the employee must send clear, legible copies of all Form I-9 documents to the employer.
- The employer must examine document copies during the live video call while the employee is on camera. Reviewing documents before or after the call does not satisfy the requirement.
- The employer must examine the original documents during the video session and be able to view security features, watermarks, and document condition markers in real time.
- The employer must write “Alternative Procedure” in the Additional Information field of Section 2. Failure to include this notation may invalidate the remote examination process.
- Employers must apply remote examination procedures uniformly to all employees within the same category. Selective application may create discrimination exposure.
If you are an employer who used the COVID-19 temporary flexibilities between March 2020 and July 2023 and you have not completed a physical document reverification for those employees, it is essential you do so now.
Designated Authorized Representatives
For remote employees in locations where the employer has no presence, an employer may designate any person like a notary public, a trusted colleague, even a family member, to complete Section 2 on the employer’s behalf. However, the employer remains fully and legally responsible for any violations committed by that representative. Verbal instructions are not sufficient. It is of utmost importance for any employer overseeing a remote workforce to implement a written protocol, training confirmation, and documented chain of review to ensure the minimum standard of care.
Implications of Non-compliance
The penalty structure for I-9 violations was indexed for inflation in 2024 and will be again in 2026. Employers should not operate from outdated penalty figures. The current framework imposes liability across four distinct categories:
Type of Violation | Liability | Examples of Violations |
|---|---|---|
| Paperwork Violations | $281–$2,789 per violation | Technical errors on the face of the Form I-9, including missing fields, improper document notations, or late completion. |
| Knowingly Hiring or Continuing to Employ Unauthorized Workers | $698–$27,894 per unauthorized worker | Penalties are scaled based on the number of violations and whether the employer is a first, second, or third offender. Pattern-or-practice findings significantly increase liability. |
| Document Abuse and Unfair Immigration-Related Employment Practices | $698–$27,894 per affected individual | Requesting more or different documents than required, rejecting valid documents, or treating employees differently based on citizenship status or national origin in violation of INA § 274B. |
| Pattern or Practice of Fraud / Criminal Referral | Potential Criminal Penalties | Employers who engage in a pattern or practice of knowingly hiring unauthorized workers or committing document fraud may face criminal prosecution under 8 U.S.C. § 1324a. |
Impact on Pending and Future Immigration Petitions
USCIS and ICE now coordinate more effectively than at any point in the past two decades. An active ICE investigation or a final order of violation can affect adjudication timelines for pending H-1B, L-1, and PERM applications. In some cases, USCIS has issued Requests for Evidence or Notices of Intent to Deny that reference an employer’s enforcement history as bearing on organizational reliability and compliance. Employers working with F-1 STEM OPT students and sponsoring nonimmigrant workers should not treat I-9 and E-Verify compliance as a separate, siloed function from their broader immigration program.
Voluntary Audits Reduce Penalties.
ICE’s penalty guidance explicitly contemplates “good faith effort to comply” as a mitigating factor. Employers who conduct periodic internal audits, correct errors prospectively, and document their compliance program consistently receive lower penalties than those who present disorganized or unreviewed records. Documented self-audits are among the highest-return investments in immigration compliance.
Best Practices for 2026: Your Compliance Foundation
1. Conduct a self-audit now: Every employer employing F-1 STEM OPT students or sponsoring nonimmigrant workers should audit 100% of current I-9s annually and a statistically valid sample of terminated employee files. Errors corrected before an NOI is served carry substantially lower penalty exposure.
2.Designate and train a compliance officer: I-9 completion must not be delegated informally to whichever HR team member has bandwidth. A designated, trained responsible party, with backup coverage, is the baseline standard ICE expects.
3. Validate your electronic I-9 system: If you use an electronic I-9 systems, ensure your vendor has produced written attestation of compliance with 8 C.F.R. § 274a.2(e). Ask for it in writing. If they cannot produce it, evaluate your platform before your next audit.
4. Implement a remote hire protocol: If you hire remotely and use E-Verify, document your alternative procedure workflow, from video session checklist to “Alternative Procedure” notation to copy retention, in a written standard operating procedure.
5. Integrate I-9 and immigration counsel relationships: Your I-9 compliance function and your immigration counsel should be coordinated, not siloed. Reverification calendars, petition timelines, and status changes for nonimmigrant workers must feed into the same compliance system.
6. Know your retention schedule and automate it: Build automatic retention and purge triggers into your HRIS. Manual retention management across a mid-size employer workforce is error-prone and frequently over-retains forms; creating unnecessary exposure during audits.
Schedule a Consultation
If you have not conducted an internal I-9 self-audit in the past twelve months, you are not in a position to respond effectively to a Notice of Inspection. Our firm conducts privileged I-9 audits for employers of all sizes. This article is provided for general informational purposes and does not constitute legal advice. No attorney-client relationship is formed by reading this post. Employers facing an active ICE audit or Notice of Inspection should retain qualified immigration counsel immediately.