The short answer: Every new hire triggers a federal paperwork clock: the employee completes I-9 Section 1 by their first day, you complete Section 2 within 3 business days, and you keep the form for 3 years after hire or 1 year after termination (whichever is later). Miss the clock and ICE fines run $288–$2,861 per form. E-Verify is a separate, mostly-voluntary system with its own traps — don’t enroll thinking it’s “extra credit” without understanding the obligations it adds.
The I-9 is the cheapest compliance on this list and the most commonly botched — and it’s one line item in what the hire really costs. Our true-cost-of-employee calculator puts the paperwork in its financial context.
This guide is educational, not legal or immigration advice. Immigration employment law is federal but fact-specific — and the penalties below are real money.
The I-9 clock
The Form I-9 (Employment Eligibility Verification) is required for every new hire — citizens and noncitizens alike, with very narrow exceptions. The current edition is dated 01/20/25 and valid through 05/31/2027 (USCIS I-9 Central, verified October 2026). Using an expired edition is itself a violation, so check the edition date at the bottom of the form.
The deadlines, from the USCIS employer’s handbook (M-274, verified October 2026):
| Deadline | Who | What |
|---|---|---|
| By the first day of work | Employee | Completes Section 1 (identity + attestation of work authorization) |
| Within 3 business days of the start date | Employer | Completes Section 2 (you examine the documents, in person, and record them) |
“Within 3 business days” is not “sometime that week.” Day one counts as day one. A Section 2 completed on day four is late, and lateness is a paperwork violation whether or not the employee was authorized to work.
Retention: keep each I-9 for 3 years after the hire date OR 1 year after termination — whichever is later (M-274 §10.0, verified October 2026). USCIS recommends storing I-9s separately from personnel files (it’s a recommendation, not a statute) — the practical reason is that an ICE audit shouldn’t become a fishing expedition through performance reviews.
What the fines actually are
ICE audits start with a Notice of Inspection: you get 3 business days to produce your I-9s. Then every defective form is priced. Current civil penalty ranges (DHS inflation-adjustment rule, January 2025, verified October 2026):
- Paperwork violations: $288–$2,861 per form. ICE scales within this range using your violation rate (bad forms ÷ total forms presented) plus statutory factors — it’s not a flat “first offense” number.
- Knowingly hiring or continuing to employ an unauthorized worker (civil): $716–$5,724 per worker (first offense), rising to $8,586–$28,619 for third and subsequent offenses.
- Criminal exposure: only for a “pattern or practice” of knowing violations — up to $3,000 per unauthorized worker and up to 6 months imprisonment for the pattern (8 U.S.C. §1324a(f)). An ordinary single knowing hire is civil, not criminal — don’t let anyone tell you otherwise in either direction.
The takeaway: paperwork fines are where small businesses actually bleed. They’re assessed per form, they scale with your error rate, and they’re entirely avoidable with a calendar reminder.
E-Verify: separate system, separate rules
E-Verify is the federal web service that checks I-9 information against government databases. Key facts owners get wrong:
It’s voluntary for most private employers at the federal level. The big exceptions:
- Federal contractors must enroll under FAR 52.222-54 (enroll within 30 days of award; verify new hires and contract-assigned employees).
- State mandates. The official e-verify.gov roster (September 2024, the latest published) lists 21 states with E-Verify enrollment as a condition for some or all employers — the roster — but the scope varies enormously: some states mandate it only for public employers or state contractors, while roughly 9 states require it of most private employers. State legislatures keep revising thresholds, so check your current state law rather than relying on any static count.
Enrollment adds obligations — it’s not free “extra credit.” E-Verify participants must:
- Never pre-screen. You may not run E-Verify before a job offer is accepted — it’s verification of a hire, not a screening tool.
- Post the notices. Enrolled employers must display the E-Verify and right-to-work posters.
- Follow the Tentative Nonconfirmation (TNC) process. If the system flags a mismatch, you must notify the employee promptly, give them the TNC notice, and let them contest it — and you may not take adverse action (no firing, no suspension, no delaying the start date) while the case is pending.
- Never reverify certain documents — reverifying a green card or a List B identity document because it expired is prohibited discrimination territory. The Handbook lists what may and may not be reverified; follow it exactly.
E-Verify misuse — prescreening applicants, firing on a TNC without process — generates its own discrimination liability. If you enroll, train whoever touches hiring on the TNC rules before the first case hits.
The five mistakes that cost real money
- Section 2 on day five. The 3-business-day clock is the most violated I-9 rule in existence. Put it on the onboarding checklist with the employee’s name and the due date.
- An expired form edition. Check the edition date (currently 01/20/25) every January — USCIS doesn’t send you a reminder.
- Over-documenting. Asking for more or different documents than the Lists of Acceptable Documents require — or specifying which documents the employee must show — is document abuse and a discrimination violation. The employee chooses from the lists; you examine what they present.
- Reverification errors. You generally don’t reverify employment authorization when documents expire (with narrow exceptions for time-limited authorization). Reverifying a U.S. passport or permanent resident card just because it expired is prohibited.
- Treating E-Verify as a background check. It’s an authorization check on a hired employee, run after the offer is accepted. Running it on applicants is prescreening — exactly what the rules forbid.
Methodology
Deadlines, retention periods, and the separate-storage recommendation are from the USCIS Handbook for Employers (M-274), verified on uscis.gov in October 2026. Form edition and expiry from USCIS I-9 Central. Fine ranges from the DHS civil-penalty inflation rule (90 FR 96, January 2, 2025); the criminal threshold from 8 U.S.C. §1324a(f). The E-Verify state roster is the official e-verify.gov list as of September 2024 (the latest published); the “~9 states require most private employers” figure is secondary reporting (Bloomberg Law), attributed as such. This page is educational, not legal or immigration advice.
Sources
- USCIS I-9 Central — uscis.gov/i-9 (form edition 01/20/25, valid through 05/31/2027), verified October 2026
- USCIS Handbook M-274, §2.0 — uscis.gov (Section 1/Section 2 timing), verified October 2026
- USCIS Handbook M-274, §10.0 — uscis.gov (retention rule), verified October 2026
- USCIS retention and storage guidance — uscis.gov (separate-storage recommendation), verified October 2026
- DHS civil penalty inflation adjustments, 90 FR 96 (Jan 2, 2025) — federalregister.gov ($288–$2,861 paperwork range), verified October 2026
- 8 U.S.C. §1324a(f) — uscode.house.gov (pattern-or-practice criminal threshold), verified October 2026
- E-Verify history and milestones (state roster) — e-verify.gov, September 2024 roster, verified October 2026
Frequently asked questions
Do I need an I-9 for a remote employee I’ve never met in person? Yes — and Section 2’s in-person document examination is the hard part. DHS has authorized certain E-Verify-enrolled employers to use a remote inspection alternative; otherwise you need an authorized representative to examine the documents. Don’t skip it because it’s inconvenient.
My employee’s work authorization expires next year. Do I reverify then? It depends on what expires. Time-limited employment authorization (like certain EAD categories) can require reverification; a U.S. passport or green card expiring does not trigger reverification. The M-274 has the exact list — follow it, don’t improvise.
We’re a tiny business. Will ICE really audit us? ICE audits target businesses of all sizes, and paperwork fines are assessed per form regardless of headcount. A 10-person business with sloppy I-9s can owe more in fines than a 200-person business with clean ones — the violation rate drives the penalty.
Should I just enroll in E-Verify to be safe? Only if you’re required to or you’ve trained for it. Enrollment without TNC training creates a new liability surface (prescreening, adverse-action-during-TNC claims) on top of the I-9 obligations you already have. “Safe” is a clean I-9 process; E-Verify is an additional system with additional rules.
What happens if I get a Notice of Inspection? You have 3 business days to produce Forms I-9. Use the time to organize, not to backdate or “fix” forms — creating or altering I-9s after receiving the notice is its own violation and destroys credibility. If the notice reveals systemic problems, that’s a call to an immigration attorney, not a DIY project.