Hire Top Talent with AI
From a pool of 10M+ top candidates
Get Candidates for FREE

Work Authorization & I-9 Compliance in the United States — Employer Guide 2026

Everything US employers need to know about Form I-9 and work authorization compliance in 2026, including the new penalty schedule, E-Verify+, TPS terminations, and 10x ICE audit surge.
Content Writer
Updated
March 18, 2026
Reviewed by
Javeria Khan
this
this
Key Notes
  • Form I-9 is mandatory for every US employer and every employee hired after November 6, 1986, no size exemptions apply.
  • Section 1 must be completed by Day 1; Section 2 within 3 business days. Missing these deadlines is a substantive violation.
  • 2026 penalties run from $288–$2,861 per form for paperwork errors; up to $28,619 per worker for third-or-subsequent knowing-hire violations.
  • ICE audit volume increased at least 10x in 2025. OBBBA (July 4, 2025) funded 10,000 new ICE officers, largest single enforcement expansion in agency history.
  • What Is Form I-9? (And Who Must Complete It)

    Form I-9, Employment Eligibility Verification, is the federal form required by the Immigration Reform and Control Act (IRCA), enacted November 6, 1986. Every US employer must complete a Form I-9 for every employee hired after that date to verify the employee's identity and authorization to work in the United States.

    Form I-9 applies to all employees regardless of citizenship or immigration status US citizens, permanent residents, and noncitizens alike. It applies to full-time, part-time, and temporary employees. There are no employer size exemptions. A sole proprietor with one hire must comply.

    What Form I-9 Is NOT: It does not apply to independent contractors. If you engage workers as independent contractors, Form I-9 is not required but misclassifying employees as contractors to avoid I-9 obligations is itself a serious violation. See our guide on independent contractor vs. employee classification in the US. It is not submitted to the government, completed I-9 forms are retained on-site by the employer. It does not replace E-Verify you must complete Form I-9 even if enrolled in E-Verify.

    Current Form Edition

    The current edition of Form I-9 is the August 1, 2023 edition (Rev. 08/01/23). USCIS extended its expiration date to May 31, 2027. Employers using electronic I-9 systems must update their systems to reflect this expiration date by July 31, 2026.

    Retention Rules

    Every employer must retain completed I-9 forms for the longer of 3 years from the date of hire, or 1 year from the date of termination. Forms must be stored separately from personnel files and made available to ICE, DHS, or the DOL within 3 business days of a Notice of Inspection.

    How to Complete Form I-9: Section 1, Section 2, and Supplement B

    Section 1 — Employee Attestation (Completed by the Employee)

    The employee must complete and sign Section 1 no later than the first day of work. Section 1 captures the employee's name, address, date of birth, Social Security Number (voluntary unless the employer uses E-Verify), and citizenship or immigration status attestation. If the employee requires a preparer or translator, that person must complete the Preparer and/or Translator Certification.

    Section 2 — Employer Review and Verification (Completed by the Employer)

    The employer or an authorized representative must examine the employee's original documents in person and complete Section 2 within 3 business days of the employee's start date (for employment lasting more than 3 days). During document examination, the employer must physically examine original documents, accept documents that reasonably appear genuine, not specify which documents to present, and not accept expired documents.

    Remote Document Examination — DHS Alternative Procedure

    Employers enrolled in E-Verify may use the DHS-authorized alternative procedure (authorized August 2023) to examine documents via live video call rather than in person. The employer must be enrolled in E-Verify, examine documents via live video interaction, retain clear copies of all documents, and note in Section 2 that the alternative procedure was used.

    Supplement B — Reverification and Rehire

    Supplement B is used to document: (1) reverification when an employee's work authorization or EAD expires; (2) rehires within 3 years of the original hire date; and (3) legal name changes. Permanent residents and US citizens are never subject to reverification. List B (identity-only) documents are never reverified.

    Form I-9 Acceptable Documents: Lists A, B, and C

    The Lists of Acceptable Documents are the definitive reference for what an employee may present. Employers must provide a copy of or link to these lists to every new hire. Employees choose which documents to present employers may not dictate the choice.

    ListEstablishesCommon ExamplesNotes
    List ABoth identity AND employment authorizationUS Passport or Passport Card; Permanent Resident Card (Green Card / I-551); Employment Authorization Document (I-766 / EAD); Foreign passport with Form I-94A single List A document is sufficient. No List B or C document also needed.
    List BIdentity only (must pair with List C)State driver's license or ID with photo; School ID card with photo; US military ID cardMust always be paired with List C. Never reverified when it expires.
    List CEmployment authorization only (must pair with List B)Unrestricted Social Security card; US birth certificate; Certification of Birth Abroad (FS-545)An unrestricted Social Security card is the most commonly presented List C document.

    Common mistakes that generate fines: accepting expired documents; requesting a specific document type; accepting a photocopy as the original; recording incorrect document information in Section 2.

    I-9 Violations and Penalties in 2026

    DHS adjusts I-9 civil penalties annually under the Federal Civil Penalties Inflation Adjustment Act. The most recent adjustment took effect January 2, 2025, and these amounts remain in effect through 2026.

    Violation Type2026 Fine RangeKey Notes
    Technical/paperwork violations$288–$2,861 per formMinor errors. Employer receives a 10 business day correction window after ICE identifies them.
    Substantive violations$288–$2,861 per formErrors affecting form validity (e.g., missing Section 2 entirely). No correction window.
    Knowing hire — 1st offense$716–$5,724 per workerFine is per worker. ICE uses five factors: business size, good faith, seriousness, whether worker was unauthorized, prior history.
    Knowing hire — 2nd offense$5,724–$14,305 per workerSecond separate enforcement action (not second violation in same audit).
    Knowing hire — 3rd+ offense$14,305–$28,619 per worker5x the first-offense maximum. Criminal prosecution also available.
    Document fraud or backdatingCriminal prosecution possibleFalsifying I-9s, backdating entries, or presenting false documents may result in criminal referral.

    2026 Enforcement Alert: ICE Notices of Inspection in the first half of 2025 were issued at a rate at least 10 times higher than in 2024. The One Big Beautiful Bill Act (signed July 4, 2025) funded 10,000 new ICE officers the largest single personnel increase in agency history along with $170 billion in enforcement funding. Historical ICE audits consistently find at least one fineable error in approximately 76% of all I-9 forms reviewed. The most common single cause: late Section 2 completion.

    What Happens During an I-9 Audit?

    An I-9 audit is a formal inspection of an employer's Form I-9 records by ICE's Homeland Security Investigations (HSI) division. Employers in California and Oregon are required by state law to post notices for employees if an inspection is imminent.

    StageWhat HappensEmployer Obligations
    1. Notice of Inspection (NOI)ICE serves a written NOI requesting all I-9 forms and related documentation.Employer has at least 3 business days to produce all requested forms. Contact legal counsel immediately.
    2. I-9 reviewHSI auditors inspect all forms for accuracy, completeness, timeliness, and proper document recording.Cooperate fully. Do not destroy, alter, or correct any forms after receiving the NOI.
    3. Technical failures identifiedAuditors identify paperwork errors.Employer receives at least 10 business days to correct technical and procedural failures. Initial and date all corrections. Do not use white-out.
    4. Warning NoticeMay be issued for first-time, minor violations with no prior enforcement history.A follow-up NOI may be issued 6 months later. Not issued if unauthorized workers were hired or fraud is evident.
    5. Notice of Intent to Fine (NIF)Issued for substantive violations, uncorrected technical failures, or knowing-hire violations.Employer may contest the NIF by requesting a hearing before an Administrative Law Judge within 30 days.
    6. Civil fines assessedPer-form/per-worker fines calculated using five ICE factors.Pay or appeal. Criminal referral is separate from the civil process.

    E-Verify: What It Is, How It Works, and E-Verify+

    E-Verify is a free, web-based system operated by DHS in partnership with the Social Security Administration. It cross-checks the information entered on Form I-9 against federal records to confirm work eligibility. E-Verify is separate from Form I-9, completing Form I-9 correctly is still required even for enrolled E-Verify employers.

    Form I-9E-Verify
    Required forAll US employers, all new hiresFederal contractors (mandatory); private employers in 20+ states; others voluntary
    What it doesRecords employee-provided identity and work authorization documentsElectronically compares I-9 data against DHS and SSA records
    TimelineSection 1: Day 1; Section 2: within 3 business daysCase must be initiated within 3 business days of hire
    CostFree (USCIS provides the form)Free (DHS operates the system)

    E-Verify+ — The New Combined Digital Workflow

    E-Verify+ is a new DHS digital workflow that combines Form I-9 and E-Verify into a single online process. Once a job offer is accepted, the employer creates an E-Verify+ case and the employee receives a secure link to complete their I-9 documentation digitally. E-Verify+ is currently available to employers through their existing E-Verify accounts. It is not yet available via Web Services or E-Verify Employer Agents.

    E-Verify Status Change Report

    The E-Verify Status Change Report flags when an employee's Employment Authorization Document or work authorization has been revoked, for example, due to TPS termination or CHNV parole revocation. An employer that receives a Status Change Report indicating an employee's authorization has been revoked and continues to employ that person without reverification is engaged in knowing employment of an unauthorized worker.

    Explore Qureos ATS: Connect your hiring pipeline to compliant Day 1 onboarding

    Which States Require E-Verify? — 2026 State Requirements

    While E-Verify is voluntary at the federal level for most private employers, more than 20 states now mandate its use. Critical rule: Once an employer enrolls in E-Verify, they must use it for ALL new hires across the organization, not selectively for hires in mandatory states.

    TierStatesScope
    All employers mandatoryAlabama, Arizona, Georgia, Mississippi, South CarolinaMandatory for all employers regardless of size. Business license revocation for violations in AL and AZ.
    Private employers above size thresholdFlorida (25+), North Carolina (25+), Tennessee (35+), Virginia (50+), Georgia (11+)Private employer threshold mandates.
    Public employers + state contractorsColorado, Idaho, Indiana, Louisiana, Michigan, Minnesota, Missouri, Nebraska, Oklahoma, PennsylvaniaState government and public works mandate only.
    NEW — 2025–2026Iowa (EO 15, Oct 2025 — state govt); Ohio (E-Verify Workforce Integrity Act, eff. March 19, 2026 — nonresidential construction)Ohio: permanent license revocation for knowingly employing unauthorized workers.
    E-Verify restrictedCalifornia (voluntary use permitted but adds compliance obligations); Illinois (voluntary use requires Right to Privacy poster)Misuse penalties can reach $10,000 per violation in these states.
    No mandate (28 states)Alaska, AR, CT, DE, HI, KS, KY, ME, MD, MA, MT, NV, NH, NJ, NM, NY, ND, OR, RI, SD, VT, WA, and othersFederal contractor requirement applies in all states regardless of state law.

    For background screening considerations that pair with I-9 verification, see our guide to background check and drug testing laws in the United States.

    Reverification, TPS Terminations, and EAD Auto-Extension Changes

    The 2025–2026 period brought the most significant changes to employment authorization documentation in years.

    End of Broad EAD Auto-Extension

    DHS ended the broad 540-day automatic EAD extension effective October 30, 2025. Employees who filed Form I-765 on or after October 30, 2025 no longer receive an automatic extension while the application is pending. For TPS-based EAD renewal applications filed on or after July 22, 2025, up to 1 year or the duration of TPS (whichever is shorter) may apply as an auto-extension.

    TPS Terminations: Employer Reverification Obligations

    DHS terminated Temporary Protected Status designations for Haiti, Venezuela, Somalia, and Yemen in 2025–2026. Employers must reverify affected employees using Supplement B before their TPS-based work authorization expires. Check EAD category codes: A12 or C19 indicate TPS-based EADs. Category code A11 indicates DED. Employers enrolled in E-Verify should monitor the Status Change Report for alerts on affected employees.

    CHNV Parole Revocations

    DHS began terminating parole under the Cuban, Haitian, Nicaraguan, and Venezuelan (CHNV) parole programs on May 30, 2025. Corresponding (c)(11) category EADs were revoked on a case-by-case basis. Employers cannot determine whether a (c)(11) EAD is affected by visual inspection alone, E-Verify's Status Change Report is the primary tool for enrolled employers.

    Employee CategoryReverification Required?When and How
    US citizensNoNever reverified. List B documents are never reverified.
    Permanent residents (green card holders)No (with one exception)Not reverified when green card expires. Exception: Temporary I-551 stamp or Receipt for I-551.
    Employees with EADs or temporary work authorizationYesReverify before authorization expiration using Supplement B. Employee presents any List A or List C document.
    TPS-based work authorizationYes — time-sensitive in 2025–2026Reverify before TPS designation expiration. Monitor USCIS TPS country page. Use E-Verify Status Change Report if enrolled.
    H-1B, O-1, L-1 visa holdersYes — when Form I-94 authorization expiresReverify when the period of authorized stay ends, not when the visa stamp expires.

    I-9 Compliance Best Practices: How to Build an Audit-Ready Program

    1. Centralize I-9 Policy Ownership

    Assign one person or team as the designated I-9 compliance owner. Decentralized onboarding, where different hiring managers complete I-9s using different procedures, is a primary source of inconsistency errors.

    2. Train All I-9 Preparers Annually

    Every HR coordinator, hiring manager, or authorized representative who completes Section 2 must be trained on current I-9 requirements. Annual refreshes are the minimum, add a refresher whenever USCIS issues a guidance update.

    3. Conduct Regular Internal Audits

    Internal audits are the most effective tool for identifying and correcting errors before ICE does. Frequency recommendation: quarterly for employers with 100+ annual hires; annually for smaller employers. Pull a random sample of 20–30 forms and check for completeness, timeliness, and retention compliance.

    4. Use Electronic I-9 Systems

    Electronic I-9 platforms enforce completeness requirements at the point of data entry, automate reverification deadline reminders, and simplify ICE production requests. 2026 system update deadline: If your electronic I-9 system still shows the old expiration date, it must be updated to May 31, 2027 before July 31, 2026.

    5. Build a Reverification Calendar

    For every employee with temporary work authorization, record the authorization expiration date and set an alert for 90 days before expiration. Do not wait until a document expires, the obligation to reverify is triggered before expiration, not after.

    6. Establish an NOI Response Protocol

    Define in advance what happens if ICE issues a Notice of Inspection: who is notified immediately, who contacts legal counsel, who compiles the I-9 forms. Employers who respond to NOIs without counsel and volunteer information beyond what is required consistently face worse outcomes. California and Oregon employers must also notify employees of an imminent inspection.

    7. Store I-9 Forms Separately from Personnel Files

    I-9 forms must be stored separately from personnel files and made available to ICE on request. Commingling I-9s with performance reviews, salary history, and medical information creates both a compliance risk and an unnecessary disclosure risk.

    For employers managing US hiring at scale, Qureos provides the hiring workflow infrastructure to connect candidate sourcing to compliant Day 1 onboarding. See our US Talent Sourcing Challenges 2026 guide for the full sourcing-to-hire picture.

    Build an audit-ready US hiring workflow with Qureos, Book a Demo

    I-9 Compliance for Remote and International Hires

    Remote Hires Within the US

    Two options exist for completing Section 2 with a remote US employee: (1) DHS alternative procedure (enrolled E-Verify employers), document examination via live video call, requires document copy retention; (2) Authorized representative (all employers), any person can serve as an authorized representative to examine documents in person. The employer remains liable for any errors made by the representative. Do not ask the employee to mail or email document copies as a substitute for examination.

    International Employers Expanding to the US

    Employers based in MENA, GCC, South Asia, or elsewhere who are hiring US-based employees face the I-9 as a compliance obligation they may have no prior experience with. There is no equivalent to Form I-9 in most non-US employment systems.

    • The I-9 obligation applies from the first US hire, regardless of employer size, headquarters location, or industry.
    • The anti-discrimination rule applies equally to international employers, you cannot require specific document types based on perceived nationality or immigration status.
    • Remote document examination via E-Verify alternative procedure requires E-Verify enrollment, which requires a US employer EIN.
    • See our US Hiring Trends 2026 guide for the broader employment landscape international employers face.

    Conclusion

    I-9 compliance is not optional, not seasonal, and not a formality. It is a mandatory federal obligation that applies to every US employer from the first hire, with penalty exposure that scales quickly when errors compound across a workforce.

    The 2026 enforcement environment is the most active in years. ICE audit volume is up 10x. OBBBA funding added 10,000 new enforcement officers. TPS terminations and the end of broad EAD auto-extensions have created live reverification obligations for thousands of employers. And the historical error rate in audited I-9 forms remains at 76%.

    The fix is not complicated. Complete Section 2 within 3 business days, present the full document lists to every new hire, train HR staff annually, run internal audits quarterly, and build a reverification calendar that catches expiring work authorization before it creates a compliance gap.

    Qureos helps US employers and international companies expanding into the US build structured, compliant hiring workflows from sourcing through onboarding. Book a demo to see how Qureos connects your candidate pipeline to a Day 1-ready compliance process.

    Frequently Asked Questions

    What is Form I-9?

    Form I-9, Employment Eligibility Verification, is the federal form required under the Immigration Reform and Control Act of 1986. Every US employer must complete a Form I-9 for every employee hired after November 6, 1986, to verify identity and authorization to work in the United States. The current edition is dated August 1, 2023, with an expiration date of May 31, 2027.

    Who is required to complete Form I-9?

    Every US employer must complete Form I-9 for every employee hired after November 6, 1986. This includes full-time, part-time, and temporary employees, regardless of citizenship. There are no employer size exemptions. Independent contractors are not subject to I-9 requirements. Employees must complete Section 1 by Day 1; employers complete Section 2 within 3 business days. See our guide on independent contractor vs. employee classification.

    What are the penalties for I-9 violations in 2026?

    The 2026 penalty schedule (effective January 2, 2025) runs from $288 to $2,861 per form for paperwork violations, and from $716 to $28,619 per worker for knowing-hire violations depending on offense history. First knowing-hire offense: $716–$5,724. Third or subsequent offense: $14,305–$28,619 per worker. ICE audit volumes increased at least 10x in 2025 versus 2024.

    What is the difference between E-Verify and Form I-9?

    Form I-9 is required for all US employers for all new hires. E-Verify is a separate, electronic system that cross-checks I-9 data against DHS and SSA records to electronically confirm work eligibility. E-Verify does not replace Form I-9 both must be completed for enrolled employers. E-Verify+ is a new DHS workflow combining both processes into one digital step.

    How long do employers need to keep Form I-9?

    Employers must retain each I-9 for 3 years from the date of hire or 1 year from the date of termination, whichever is later. Forms must be stored separately from personnel files. They can be stored on paper or in an electronic system meeting DHS standards. I-9 forms are never submitted to the government.

    What documents are acceptable for Form I-9?

    Form I-9 uses three lists. List A documents prove both identity and work authorization with a single document (US passport, green card, EAD, or foreign passport with Form I-94). List B documents prove identity only and must be paired with List C (driver's license, state ID, military ID). List C documents prove work authorization only (unrestricted Social Security card, US birth certificate). Employees choose which documents to present, employers may not specify or request a particular document.

    Legal Disclaimer: This article is for informational purposes only and does not constitute legal, tax, immigration, or HR advice. I-9 compliance requirements, penalty schedules, and E-Verify mandates change frequently. The regulatory landscape described reflects publicly available information as of March 2026. Consult a qualified immigration attorney or employment counsel before making compliance decisions.

    Need more HR resources?
    Explore our ready-to-use templates!
    Hire Candidates Instantly!