The Definitive Guide to Form I-9 Compliance
Strict deadlines, shifting remote-work rules, and active enforcement make employment verification one of the easiest places to slip. This is your practical handbook for getting Form I-9 right, and keeping it right, with a modern electronic I-9 framework.
Verify identity and work eligibility for U.S. hires
By the employee, on or before day one of pay
By the employer, within 3 business days of hire
3 years after hire or 1 year after exit, whichever is later
Every W-2 employee, full-time to seasonal
Understanding Your Compliance Exposure
Compliance is risk management, not paperwork. Penalties apply per individual form, so in a growing organization small, repeated oversights are where exposure quietly builds. Knowing the ranges helps you prioritize, no alarm required.
Paperwork violation, per individual Form I-9
Per worker for knowing-hire violations, repeat offenses
Retention: 3 years after hire or 1 year after exit, whichever is later
Why it compounds: the same minor error repeated across a roster turns a single oversight into a pattern, and patterns are exactly what audits surface. Standardized workflows and a dedicated electronic I-9 process keep these errors from ever reaching the file.
The Form I-9 Timeline: the deadlines you cannot miss
Timing is everything. Most manual processes drop the ball at one of these four moments, and each one creates instant audit liability that an electronic workflow is built to prevent.
Employee Attestation
The new hire completes Section 1 with personal details and work-status attestation. Can be done once a formal offer is accepted, never before.
Document Review
The employer examines original, unexpired documents and completes Section 2. Start Monday, finish by Thursday.
Storage and Retention
Retain for 3 years after hire or 1 year after employment ends, whichever is later. A common audit failure point.
Reverification (Section 3)
Before temporary work authorization expires. Never reverify a U.S. passport, Green Card, or List B identity document.
Offer accepted → Day 1 (Section 1) → Day 3 (Section 2) → Retention → Reverification if triggered
Acceptable Documents: Lists A, B, and C
The golden rule: an employee presents either one document from List A, or a combination of one from List B (identity) and one from List C (work authorization).
- U.S. Passport or U.S. Passport Card
- Permanent Resident Card or Alien Registration Receipt Card (Form I-551)
- Foreign passport with a temporary I-551 stamp or printed notation on a machine-readable immigrant visa
- Employment Authorization Document with photograph (Form I-766)
- For nonimmigrant aliens authorized for a specific employer: foreign passport with Form I-94 arrival/departure record
- Driver’s license or state ID card with a photograph or identifying information
- ID card issued by federal, state, or local government agencies
- School ID card with a photograph
- Voter’s registration card
- U.S. Military card or draft record, or military dependent’s ID card
- Social Security card, unless it carries restrictive wording (see the self-audit below)
- Certification of report of birth from the Department of State (Forms DS-1350, FS-545, FS-240)
- Original or certified birth certificate from a U.S. state, county, municipal authority, or territory with an official seal
- Native American tribal document
- U.S. Citizen ID Card (Form I-197) or Resident Citizen ID Card (Form I-179)
Self-audit: did an employee present a Social Security card with restrictive wording such as “Not valid for employment” or “Valid for work only with DHS authorization”? If so, it cannot stand alone as a List C document. The employee must provide an alternative List C document or a valid List A document. Digital verification flags these restrictions instantly.
Real vs. Fake: scenario breakdowns
Two everyday situations where a reasonable assumption quietly becomes a violation.
Scenario A: The Remote Hire
You hire a fully remote engineer in California while your HR compliance team sits in Virginia.
Having them email or text a photo of their passport with no proper review is an immediate paperwork violation.
Use an in-person Authorized Representative, or, if you are E-Verify enrolled and in good standing, the DHS remote alternative procedure with a live video review and retained document copies.
Scenario B: The "Over-Compliant" Manager
A cautious manager asks a new hire for both a passport and an unrestricted Social Security card before completing Section 2.
This is document abuse. Requiring extra documents, or specifying which ones, can trigger a DOJ discrimination investigation.
Accept whatever valid combination the employee chooses to present. A genuine List A passport fully satisfies the documentation step.
Form I-9 vs. E-Verify: clearing the confusion
They are not interchangeable. Form I-9 is your legal foundation; E-Verify is an automated confirmation layer that works on top of it.
How they work together: E-Verify takes the verified fields from a completed Form I-9 and cross-references them against SSA and DHS databases in seconds. Electronic onboarding merges both steps into a single workflow.
Anatomy of an ICE Audit, and how to survive it
Enforcement focuses on accuracy, consistency, and process integrity. An audit begins with a Notice of Inspection (NOI), and the clock starts immediately.
The 3-day rule: once you receive an NOI, you have exactly three business days to gather and present all requested Form I-9 records, digital copies, and audit trails. Preparing ahead with internal audit software is what turns this from a fire drill into a formality.
Technical errors
- Missing date next to a signature
- Typo in the document issuer
- Missing ZIP code or middle initial
Result: 10-day window to correct
Substantive violations
- Missing signature entirely
- Unverified employee file
- Late or absent verification
Result: immediate fine risk
The strongest defense is process consistency: apply the same verification steps uniformly across every office, division, and hiring group.
How automation erases the risk
Manual administration introduces process variance, and variance is what creates liability. A secure digital workflow removes paperwork risk at the source.
Smart field validation
Required fields cannot be left blank and invalid document combinations are flagged before submission.
Automated tracking alerts
Workflows watch upcoming deadlines and authorization expirations, alerting HR well before anything lapses.
Integrated E-Verify
Data flows from the electronic Form I-9 into E-Verify in one click, removing duplicate entry and transcription errors.
Frequently asked questions
No. The DHS Alternative Procedure is limited to employers enrolled in E-Verify and in good standing. Non-E-Verify employers must perform in-person document examinations.
The employer conducts a live video review while the employee shows their original physical documents on camera, allowing the employer to verify authenticity against the transmitted copies.
Yes. Retaining clear copies of every document examined during the live video call is mandatory under the DHS Alternative Procedure.
No. Form I-9 is the foundational document for all W-2 hires. E-Verify is a confirmation layer that cross-references data already collected on the Form I-9.
No later than three business days after the employee’s first day of work for pay.
Notify the employee privately, give them the opportunity to contest, and take no adverse action while the case is being resolved.
Three years from the date of hire, or one year after termination, whichever is later.
Yes, provided your digital system meets ICE and DHS electronic storage standards, including secure access controls, data integrity, and legible backup audit trails.
No. Form I-9 is mandatory only for W-2 employees. Running I-9 checks on contractors can create worker-classification complications.
No. Every W-2 worker completes the form, whether full-time, part-time, temporary, or seasonal.
Never reverify valid U.S. Passports, Passport Cards, Permanent Resident Cards (Green Cards), or standard List B identity documents.
Draw a line through the incorrect data, enter the correct information, then initial and date the change. Never use white-out or backdate a signature.
Yes. Complete a new form with current dates and attach it to the original, along with a signed memo explaining the self-audit correction.
Any individual you designate, including a notary, local business partner, or trusted contact, can inspect documents in person. The employer remains fully liable for that representative’s work.
Build an audit-ready verification process
Choose the path that fits where your organization is today.
The educational path
Download the Form I-9 Internal Audit Checklist and review your existing files for gaps before any notice arrives.
The proactive automation path
Centralize workflows, automate E-Verify, and secure your electronic records at scale with a personalized walkthrough.
EMP Trust HR · Electronic Form I-9 and E-Verify software. This guide is provided for general information and is not a substitute for legal advice.