How to Handle I-9 Employment Verification for New Hires

Every employer in the United States must handle employment verification for new hires through Form I-9. It's a federal requirement with tight deadlines, strict rules, and penalties that actually sting. Whether you're hiring your first employee or your tenth, getting this right matters. Getting it wrong is expensive.

This guide walks you through the I-9 process step by step, explains what the government actually expects, and shows you how to avoid the mistakes that catch most small businesses.

What is Form I-9?

Form I-9, Employment Eligibility Verification, is a U.S. Citizenship and Immigration Services (USCIS) form that confirms an employee is legally authorized to work in the US. It applies to every employee hired after November 6, 1986—regardless of citizenship. US citizens, permanent residents, and authorized non-citizens all need one.

Here's the thing people often miss: you don't file the I-9 with the government. You keep it on file and produce it if a federal agency asks. That said, it's not an afterthought document. The rules are specific, auditors look for it, and violations show up on enforcement activity.

The form itself isn't complicated. It's three sections, mostly checkboxes and boxes to fill. What trips people up is the timing, the document rules, and the retention requirements. Get those right, and you're fine.

The three-step process: who does what and when

Step 1: Employee fills Section 1 (first day of work)

Your new hire completes Section 1 no later than their first day of employment—the day they actually start working for pay, not the day the offer was made.

This section captures basics: legal name, address, date of birth, Social Security number (required only if you use E-Verify), and citizenship or visa status. The employee signs and dates it.

Important: the employee completes this, not you. You can point them to the form, but you can't fill it in for them unless they have a disability or can't read English. Hiring managers who think they're "helping" by pre-filling the form are creating audit problems.

Step 2: Employee presents documents (within 3 business days)

Your employee brings original, unexpired documents that prove two things: identity and work authorization. They get to choose which documents—you don't.

There are three lists:

List A documents prove both identity and authorization in one go. Think US passport, permanent resident card, or foreign passport with work authorization. One List A document = done.

List B documents prove identity only. Driver's license, state ID, school ID with a photo. If they present a List B, they must also present a List C document.

List C documents prove work authorization only. Social Security card, birth certificate, employment authorization document.

The critical rule: your employee decides what to present, and you accept it. Asking for "a passport instead" or rejecting a valid combination because you prefer different documents is document abuse, which the Department of Labor treats as a form of discrimination. Not a gray area.

Step 3: You examine documents and complete Section 2 (within 3 business days)

You check the documents in person, record the details (document type, number, expiration date), and sign off. The standard isn't "are these definitely real?" It's "do they reasonably appear genuine and relate to this person?"

You're not a forensic document examiner. You're looking for obvious red flags—a suspended license, a document that expired last year, something that doesn't match the person in front of you. That's the bar.

Deadlines: the three-day window is real

What	When
Employee completes Section 1	No later than first day of work
Employee presents documents	Within 3 business days of start date
You complete Section 2	Within 3 business days of start date
Reverification (Section 3)	Before work authorization expires

That three-day window is firm. "First day of work" means the day they clock in, not the hire date on the offer letter. If you complete Section 2 on day four, that's a violation. Missing the deadline is one of the most common audit findings for small employers.

Bake this into your onboarding checklist. Make I-9 completion non-negotiable on day one, just like tax withholding forms and your employee handbook acknowledgment.

Reverification: when work authorization expires

If an employee's work authorization has an expiration date, you must reverify before it expires. This happens in Section 3 of the I-9.

You're only reverifying work authorization, not identity documents. A US passport or permanent resident card doesn't need reverification because they don't expire (or the expiration doesn't affect work authorization status).

If an employee's employment authorization document expires, they need to bring updated proof before that date. Start the conversation with them early. If they don't have updated authorization, they can't continue working.

Retention: keep them longer than you might think

Retain completed I-9s for the longer of:

• Three years after hire, or
• One year after employment ends

So if you hire someone on January 1, 2027, and they leave June 1, 2028, you keep the form until January 1, 2030 (three years from hire). If they'd stayed until January 2029 and then left, you'd keep it until January 2030 anyway. The three-year clock wins.

Store them securely—separate from personnel files, with controlled access. Paper, digital, microfilm—the medium doesn't matter. What matters is that they're intact, legible, and producible if the Department of Homeland Security walks in with a document request.

E-Verify: optional for most, mandatory for some

E-Verify is an online government system where you enter I-9 data and it confirms employment eligibility against Social Security and immigration databases. It's instant and cuts the guesswork out of document examination.

E-Verify is mandatory if you're a federal contractor, if you're in a state with mandatory E-Verify laws (Arizona, Mississippi, and a few others), or if you're hiring workers under specific visa programs. Otherwise, it's optional.

Even if it's optional for you, using E-Verify gives you a legal safe harbor—a rebuttable presumption that you acted in good faith. For small employers, that's valuable insurance.

Common mistakes and how to avoid them

Missing the three-day deadline. You complete Section 2 on day five instead of day three. That's a violation, full stop. Solution: calendar it, automate a reminder, or tie it to your payroll setup process. Make it impossible to miss.

Telling employees which documents to bring. "Bring your passport" or "bring your driver's license and Social Security card" is unlawful. Solution: hand the employee the Lists of Acceptable Documents and let them decide.

Accepting expired documents. That driver's license expired six months ago. Doesn't matter if it looks fine—it's expired. Solution: check expiration dates before you write anything in Section 2.

Not doing I-9s for "informal" hires. Some small businesses skip the form for part-time workers, cash workers, or family members. That's a violation for every employee without a form. Solution: do an I-9 for every hire, every time.

Inconsistent copying or late completion. If your I-9 files show some documents photocopied and some not, or dates that don't line up, auditors get suspicious. Solution: decide on a policy (copy everything or nothing) and stick to it. Date forms accurately.

Penalties: they're substantial and escalate

First offense violations run from hundreds to thousands of dollars per form, depending on the severity. Penalties adjust annually for inflation.

If you show a pattern of violations or knowingly hire unauthorized workers, penalties spike dramatically. There's also potential debarment from federal contracts and, in serious cases, criminal liability.

If there's also evidence of document abuse or discrimination based on citizenship status, you face additional civil rights penalties on top of I-9 penalties.

In short: the cost of compliance is trivial next to the cost of ignoring it.

Best practices for your process

1. Train everyone involved in hiring on I-9 rules. What you don't know, you can't enforce.
2. Use the current version of the form from USCIS. It updates regularly.
3. Complete Section 2 on time, every time. No grace period.
4. Build I-9 into onboarding. When you set up a payroll workflow for a new employee, add I-9 completion as a step. HR platforms can flag if Section 2 isn't signed off by day three.
5. Track expiration dates for any documents with expiration dates, so you know when reverification is due.
6. Conduct a self-audit once a year. Pull a few I-9s at random and check: Is Section 1 completed? Is Section 2 complete and timely? Are dates consistent? Fix errors before an auditor finds them.
7. Secure storage. Locked cabinet or encrypted file storage. Not in the personnel file drawer where anyone can access it.
8. Document destruction policy. When the retention period ends, shred the paper or delete the file securely. Don't just let them pile up.

Frequently Asked Questions

Q: If an employee is a US citizen, do they still need an I-9? A: Yes. Every employee hired after November 6, 1986 needs an I-9, regardless of citizenship status. Citizenship doesn't exempt you from the requirement.

Q: Can I ask an employee to bring specific documents? A: No. The employee chooses which acceptable documents to present. You must accept any valid combination from the Lists of Acceptable Documents. Specifying documents is unlawful.

Q: What if an employee doesn't have a Social Security number yet? A: They can still complete Section 1 and present documents. The SSN field is only mandatory if you use E-Verify. Employers who don't use E-Verify can leave it blank.

Q: Do I have to use E-Verify? A: Not unless you're a federal contractor or in a state with mandatory E-Verify laws. For most private employers, it's optional. But it provides legal protection, so many use it anyway.

Q: What happens if I find an error on an I-9 after it's been completed? A: You can correct it. Draw a line through the error, write the correction, and initial and date the change. Don't use white-out or create a new form. The auditor needs to see that you caught and corrected the mistake.

Q: Can employees do I-9s remotely or can I accept electronic documents? A: Not yet. As of now, USCIS requires in-person examination of physical documents. Some pilot programs exist, but the standard process is in-person. Remote-first companies should build in an exception process for document verification.

Q: How long do I keep I-9s for an employee who was fired? A: The longer of three years from hire or one year from termination. So if someone worked for six months, you still keep their I-9 for at least two and a half years after they leave.

Q: Can I scan or email a copy of the I-9 to my accountant? A: Yes, you can maintain electronic copies. But you must retain the original (or a certified copy) and the system must meet federal record-keeping standards. Your accountant can have a copy, but you're responsible for retaining it.

Getting this right

The I-9 process is straightforward until it isn't. Most of the time, it's paperwork you complete and file. Every once in a while, an auditor asks to see it. If it's correct, you hand it over and move on. If it's not, you're explaining violations and looking at penalties.

The fix is simple: build it into your process. Make it part of day one, just like withholding forms and direct deposit setup. If your payroll or HR platform can flag the deadline and track completion, use that. For most small employers, the compliance work is maybe 15 minutes per hire. The cost of getting it wrong is thousands of dollars and a lot of lost sleep.

You've got this. Just don't skip it, don't specify documents, and don't miss the three-day deadline.