Last reviewed: 2026-07-20.

Every US employer that hires anyone — citizen or noncitizen — sits inside a federal verification and record-keeping system built on Form I-9, and increasingly on E-Verify. This explainer maps how that system works procedurally: what the I-9 requires, who must run E-Verify, where anti-discrimination rules constrain the process, and what a government inspection looks like from receipt of notice to findings. It is an orientation for HR and operational readers who need to understand the mechanics, not a substitute for counsel on any specific situation.

The Form I-9 baseline

Form I-9 is the federal instrument for confirming who can legally work in the US. All US employers must properly complete Form I-9 for every individual they hire for employment in the United States — this includes citizens and aliens. The requirement traces to the Immigration Reform and Control Act of 1986 (IRCA), and Form I-9 documents verification for each employee hired after November 6, 1986.

The form is a two-party document with a fixed sequence. Employees must complete and sign Section 1 no later than the first day of employment, but not before accepting a job offer. The employer's step follows: the employer or an authorized representative must complete and sign Section 2 within 3 business days of the date of hire (the hire date means the first day of work for pay). As a worked example, if an employee begins employment on Monday, the employer must complete Section 2 on or before Thursday of that week; however, if someone is hired for less than three business days, Section 2 must be completed no later than the first day of employment.

In Section 2, the employer examines documents the employee chooses from the official lists. List A documents establish both identity and employment eligibility; List B documents establish identity only and List C documents establish employment eligibility only; employers must accept either one document from List A, or a combination of one document from List B and one from List C. The employer's job is to judge apparent genuineness, not to authenticate: examine each document to determine if it reasonably appears to be genuine and relates to the employee presenting it. Ordinarily this is done in person, but employers generally must review documentation in the employee's physical presence — however, employers who participate in E-Verify may be eligible to remotely examine documents under the alternative procedure authorized by the Secretary of Homeland Security.

A recurring compliance item is the form edition itself. Employers using an electronic version of Form I-9 must update their systems with the version that has the expiration date of 05/31/2027 by 07/31/2026. The current edition and its expiration date live on the USCIS I-9 page — check the source for the version in force before you onboard.

E-Verify: what it is and who must use it

E-Verify is a separate, layered step on top of the I-9. It is a web-based system operated by USCIS and the Social Security Administration that lets employers electronically confirm the employment eligibility of newly hired employees by comparing Form I-9 data against federal databases; it supplements the I-9 process but does not replace it — every employer that uses E-Verify must also complete Form I-9.

Who is required to use it turns on two independent tracks — federal contracting and state law. On the federal side, for most employers E-Verify is voluntary; however, federal contractors and subcontractors with contracts containing the Federal Acquisition Regulation (FAR) E-Verify clause must use it. The clause is not universal: the rule requires certain prime contractors to flow it down to subcontractors when the prime contract includes the FAR E-Verify clause, the subcontract is for commercial or noncommercial services or construction, has a value of more than $3,500, and includes work performed in the United States. Whether a given contract carries the clause is a contracting-officer determination — government contracting officials, not E-Verify, decide if a federal contract qualifies for the FAR E-Verify clause.

The state track is where mandates have expanded. As a state-by-state guide summarizes, as of 2026 eleven states require E-Verify (or equivalent verification) for all or most private employers — Alabama, Arizona, Florida, Georgia, Louisiana, Mississippi, Montana, North Carolina, South Carolina, Tennessee, and Utah — and Ohio requires it for nonresidential construction. Thresholds differ widely: Alabama, Arizona, Mississippi, and South Carolina require it for all employers regardless of size, while Florida (25+ employees), Georgia (10+), North Carolina (25+), Tennessee (35+), and Utah (150+) apply it above certain headcounts. Because these lists and thresholds change with legislative sessions, confirm the current mandate for each state where you employ people at the state's own source and at e-verify.gov.

One structural point on E-Verify results: when the system returns a mismatch (a Tentative Nonconfirmation), the employee is entitled to a process, and it is unlawful for an employer to take negative action against an employee before the deadline — including suspension, termination, a change in hours, or withholding pay — simply because the employee chooses to contest the mismatch.

Anti-discrimination guardrails (IER)

The verification process is bounded by federal anti-discrimination law enforced by the Department of Justice. The Immigrant and Employee Rights Section (IER), in the Civil Rights Division, enforces the anti-discrimination provision of the Immigration and Nationality Act (INA), 8 U.S.C. § 1324b, which protects US citizens and certain other work-authorized individuals from employment discrimination based on citizenship or immigration status. The statute reaches four things: citizenship status discrimination in hiring, firing, or recruitment or referral for a fee; national origin discrimination in the same; unfair documentary practices during the Form I-9 and E-Verify processes; and retaliation or intimidation.

The practical constraint on HR is the document-abuse (now "unfair documentary practices") rule. Employers of any size cannot, on the basis of citizenship, immigration status, or national origin, request more or different documents than are required, reject reasonably genuine-looking documents, or specify certain documents over others. This is why the I-9 itself carries the warning that all employees can choose which acceptable documentation to present, and employers cannot ask employees for documentation to verify information in Section 1, or specify which acceptable documentation employees must present. The rule leaves genuine judgment intact: an employer cannot accept a document that does not reasonably appear to be genuine, but it may not apply different levels of scrutiny based on a worker's citizenship, immigration status, or national origin.

The enforcement path is time-bound on both ends. Parties who believe they have been injured should file discrimination charges with IER within 180 days of the alleged act.

Complaints that cannot be informally resolved proceed to trial before an Administrative Law Judge (ALJ) in the Department's Office of the Chief Administrative Hearing Officer (OCAHO), which specializes in immigration-related employment discrimination cases.

What a worksite inspection involves

Multiple agencies can review I-9s, but the routine document audit is run by Immigration and Customs Enforcement (ICE). The process begins with a written notice: under IRCA the I-9 is the means of verifying eligibility, and ICE may inspect I-9 forms upon three days' notice — neither consent nor a search warrant is required, but ICE must serve the required notice. The notice sets the clock: an audit is triggered when ICE issues a Notice of Inspection (NOI), requiring the employer to produce Form I-9 records within three business days. An NOI can be served in person, by certified mail with return receipt, or, when ICE wants records faster, by administrative subpoena under 8 U.S.C. § 1324a(e)(2), which can compel production without the standard 3-day notice.

After production, ICE reviews the forms and sorts problems by type. The agency may categorize issues as technical, procedural, or substantive; employers generally receive 10 days to correct technical or procedural errors, and failing to correct them within the deadline transforms them into substantive issues. The outcome arrives as one of a defined set of findings letters. A Notice of Inspection Results, or "Compliance Letter," confirms the business is in compliance; a Warning Notice is issued when substantive violations are identified but future compliance is expected. Where fines are pursued, a Notice of Intent to Fine (NIF) notifies the employer that ICE is issuing a fine or seeking criminal penalties, and the employer can request an administrative hearing to contest the determination in writing within 30 days of receiving the NIF.

Penalty dollar figures are statutory minimums and maximums adjusted for inflation annually — the Federal Civil Penalties Inflation Adjustment Act sets the minimum and maximum civil penalty amounts for knowing-hire and substantive violations, and those amounts are subject to annual adjustment. Because the numbers move each year, treat any dollar figure you see as time-stamped and check the current range at the ICE and Federal Register sources rather than relying on a memorized amount.

Record-keeping basics

The retention rule is the same regardless of employer size. Employers must retain and store Form I-9 for three years after the date of hire, or for one year after employment is terminated, whichever is later, and make forms available for inspection by authorized officials from DHS, DOL, or DOJ. USCIS frames the same rule as a shortcut: if the employee worked for less than two years, retain the form for three years after the first day of employment; if more than two years, retain it for one year after they stop working. A current employee's I-9 is never eligible for destruction while employment continues.

Format is flexible but conditioned. Forms I-9 may be stored on paper, microfilm, microfiche, or electronically. Whichever you choose, accessibility is the binding constraint — records must be producible within the three-business-day inspection window. For that reason, USCIS recommends that employers keep Form I-9 separate from personnel records to facilitate an inspection request. Electronic systems carry added technical duties, including an inspection and quality-assurance program that regularly evaluates the storage system, and a detailed index of all data so any record can be accessed immediately. The governing standards for electronic generation and storage are in 8 CFR 274a.2 — confirm your vendor system against that regulation.

Key terms

  • Form I-9: The federal Employment Eligibility Verification form every US employer completes for each new hire.
  • IRCA: Immigration Reform and Control Act of 1986; the law that created the I-9 obligation and employer sanctions.
  • E-Verify: USCIS/SSA web system that compares I-9 data against federal records to confirm work eligibility.
  • FAR E-Verify clause: Federal Acquisition Regulation clause (48 CFR Subpart 22.18 / FAR 52.222-54) that makes E-Verify mandatory for covered federal contractors.
  • List A / List B / List C: Document categories on the I-9 — List A proves identity and work authorization; List B proves identity; List C proves work authorization.
  • IER: Immigrant and Employee Rights Section of the DOJ Civil Rights Division, enforcing INA § 1324b.
  • Unfair documentary practices: The current term for "document abuse" — improperly demanding, specifying, or rejecting verification documents based on status or national origin.
  • NOI: Notice of Inspection; the written notice that opens an ICE I-9 audit.
  • NIF: Notice of Intent to Fine; ICE's notice that it intends to assess penalties.
  • OCAHO: Office of the Chief Administrative Hearing Officer, where I-9 and § 1324b cases are adjudicated before an ALJ.

Primary sources

  • https://www.uscis.gov/i-9 — USCIS Form I-9 landing page: who must complete the form, retention rule, and current form edition/expiration dates.
  • https://www.uscis.gov/i-9-central/completing-form-i-9/completing-section-2-employer-review-and-attestation — Official guidance on the 3-business-day Section 2 deadline and document examination.
  • https://www.uscis.gov/i-9-central/form-i-9-resources/handbook-for-employers-m-274/100-retaining-form-i-9 — M-274 retention section: the two-year shortcut and acceptable storage formats.
  • https://www.uscis.gov/i-9-central/completing-form-i-9/retention-and-storage — USCIS retention and electronic-storage requirements; separation from personnel files.
  • https://www.e-verify.gov/employers/federal-contractors/who-is-affected-by-the-e-verify-federal-contractor-rule — E-Verify federal contractor rule scope and FAR clause criteria.
  • https://www.justice.gov/crt/overview-immigrant-and-employee-rights-section — DOJ IER overview: statutory authority (8 U.S.C. § 1324b), 180-day charge window, and OCAHO process.
  • https://www.justice.gov/crt/iers-frequently-asked-questions-faqs — IER FAQs on unfair documentary practices and permissible document scrutiny.
  • https://www.ice.gov/factsheets/i9-inspection — ICE I-9 inspection fact sheet: findings letters and inflation-adjusted penalty structure.
  • 8 CFR 274a.2 (via the eCFR at ecfr.gov) — The regulation governing I-9 completion, retention, and electronic storage standards.

---

This explainer is informational only and is not legal advice. Immigration law is fact-specific and changes; consult a licensed immigration attorney about any specific situation, and verify current rules against the linked official sources.