Employment Eligibility Verification: I-9, E-Verify, Limits

Every U.S. employer is legally required to complete Form I-9 for every new hire within three business days of their start date, without exception, regardless of citizenship status, role, or employment type. ICE conducted over 6,000 I-9 audits in 2023, up from fewer than 1,500 in 2017. Fines for I-9 violations range from $272 to $27,018 per violation depending on severity and prior offense history. For organizations that treat employment eligibility verification as an HR formality rather than a compliance control, that enforcement trajectory carries direct financial and operational exposure.

Employment identity verification establishes two things simultaneously: that the person being hired is who they claim to be, and that they are legally authorized to work in the United States. The I-9 process, E-Verify, and supporting document checks are the federal mechanisms that establish both, and the gap between completing those procedures and completing them correctly is where most organizational liability lives.

What Employment Eligibility Verification Requires

Form I-9 is the federal employment eligibility verification instrument issued by U.S. Citizenship and Immigration Services (USCIS). Every employer, regardless of size, industry, or workforce composition, must complete it for every employee hired after November 6, 1986. The form has two primary obligations:

Identity verification confirms that the person presenting themselves for employment is the person named in the supporting documents. Personal identity verification by the employer requires that a designated representative physically examine, or, under current remote rules, visually inspect via live video, the documents the employee presents.

Employment authorization verification confirms that the person is legally permitted to work in the United States. This covers U.S. citizens, lawful permanent residents, and individuals with valid employment authorization documents under their immigration status.

Both must be verified for every hire. Employment documentation is not an optional step for roles deemed lower risk or for employees who appear to be U.S. citizens. The legal obligation applies universally, and auditors examine I-9 records for both completeness and accuracy.

"Employers who fail to properly complete, retain, or make I-9 forms available for inspection are subject to civil money penalties and, in some cases, criminal prosecution."

The I-9 Verification Process

The I-9 process has three sections with distinct timing requirements:

Section 1 is completed by the employee on or before their first day of work. The employee attests to their identity, citizenship or immigration status, and authorization to work.

Section 2 is completed by the employer or authorized representative within three business days of the employee's first day. This is where document examination occurs, the employer physically or remotely examines the presented documents, records the document type, issuing authority, document number, and expiration date, and certifies the examination.

Section 3 is used for reverification when an employee's employment authorization expires and they need to present updated documentation.

Remote I-9 verification changed significantly on August 1, 2023, when DHS introduced the Alternative Procedure for employers enrolled in E-Verify. Under the Alternative Procedure, employers may complete Section 2 via live video interaction, the employee presents original documents to the camera, the employer representative examines them remotely, and the employer retains copies. This is not optional flexibility, it is a specific procedure with defined requirements. Accepting document photos by email, conducting asynchronous review, or using video playback rather than live interaction does not satisfy the Alternative Procedure and creates non-compliance exposure.

Organizations not enrolled in E-Verify cannot use the Alternative Procedure and must conduct in-person document examination for Section 2.

Document retention: Employers retain I-9 forms for three years after the date of hire or one year after the date of employment ends, whichever is later. Electronic I-9 systems are permissible provided they include audit trails, inspection capability, and access controls that satisfy DHS standards.

Acceptable Documents

The I-9 process uses three document lists that define what constitutes acceptable proof of identity and employment authorization:

List A - Documents that establish both identity and employment authorization:

• U.S. Passport or U.S. Passport Card

• Permanent Resident Card (Form I-551)

• Foreign passport with a temporary I-551 stamp or notation

• Employment Authorization Document (Form I-766)

• For certain nonimmigrant aliens: foreign passport with Form I-94 bearing the same name and an unexpired endorsement

An employee who presents a List A document satisfies both requirements. No additional documentation is needed.

List B - Documents that establish identity only:

• Driver's license or state-issued ID card

• School ID card with photograph

• Voter registration card

• U.S. military card or draft record

• Native American tribal document

List C - Documents that establish employment authorization only:

• Social Security card (unrestricted)

• Certification of Birth Abroad (Form FS-545 or DS-1350)

• Original or certified copy of a U.S. birth certificate

• U.S. Citizen ID Card (Form I-197)

Employees who do not present a List A document must present one List B document and one List C document. Employers cannot specify which documents from these lists an employee must present, requiring a U.S. passport when the employee is eligible to present other List A documents, or requiring a driver's license when the employee presents a different valid List B document, constitutes document discrimination under the Immigration and Nationality Act.

Document check requirements under I-9 are specific: documents must "reasonably appear to be genuine and to relate to the person presenting them." Employers are not forensic document examiners, but they must make a good-faith visual inspection. Accepting documents that show obvious signs of alteration creates compliance exposure. Accepting documents that appear genuine but are fraudulently produced does not, provided the examination was conducted in good faith.

E-Verify

E-Verify is a web-based system operated jointly by DHS and the Social Security Administration that electronically verifies employment authorization by cross-referencing I-9 data against federal government databases. It is voluntary for most private employers but mandatory for:

• Federal contractors subject to the Federal Acquisition Regulation (FAR) E-Verify clause

• Employers in states that have enacted mandatory E-Verify laws (including Alabama, Arizona, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, and Utah)

• Employers participating in certain federal programs

E-Verify does not replace the I-9 process, it supplements it. The employer still completes Form I-9 and examines documents. E-Verify then checks the information recorded on the I-9 against DHS and SSA databases to confirm the combination of identity and authorization data is consistent with government records.

E-Verify documents verification produces one of three results:

• Employment Authorized - the information matches government records

• Tentative Non-Confirmation (TNC) - the information does not match; the employee has the right to contest before any adverse action is taken

• Final Non-Confirmation - the employee chose not to contest or the contest was unsuccessful; the employer may terminate employment

A critical limitation: E-Verify confirms that a Social Security number is valid and associated with an authorized worker. It does not confirm that the person presenting the SSN is the person to whom it was issued. An employee presenting a valid SSN belonging to someone else, including an SSN compromised in a data breach and sold on the dark web, may pass E-Verify while still representing an identity fraud event.

What I-9 and E-Verify Do Not Catch

Standard I-9 and E-Verify workflows are designed for compliance, confirming that required procedures were followed and that presented information is consistent with government records. They are not designed as fraud detection controls. Three documented failure modes create organizational exposure beyond what standard procedures address:

Document fraud. Forged or altered identity documents can pass the "reasonably appears genuine" standard of a visual I-9 inspection while failing forensic examination. A high-quality forged driver's license or a digitally altered employment authorization document may present as genuine to an HR representative conducting a standard I-9 review. The I-9 process does not require, and most employers are not equipped to conduct, document authentication beyond visual inspection.

Synthetic identity use. A synthetic identity combines a real SSN, typically one compromised in a data breach, with a fabricated name, date of birth, and address. The SSN is valid, so E-Verify may return Employment Authorized. The identity is not real, so the employer has onboarded a non-existent person or a fraudster operating under a constructed identity. Standard I-9 and E-Verify procedures have no mechanism to detect this.

Remote verification gaps. Organizations conducting I-9 verification for remote employees without following the DHS Alternative Procedure exactly, including live video examination, same-day document review, and proper retention, create audit exposure regardless of whether the underlying hire was fraudulent. Process non-compliance and identity fraud are separate risks; organizations face both.

The employment verification card alone, whether a Permanent Resident Card, Employment Authorization Document, or other List A document, confirms the document type, not the document's authenticity or the identity behind it.

The Fraud Gap in Standard I-9 Workflows

For most organizations, I-9 and E-Verify represent the complete employment identity verification workflow. For organizations in regulated industries, those handling sensitive data, those with federal contracts, or those that have previously encountered employment fraud, that baseline is not sufficient.

Identity verification services provide document authentication and identity verification at a depth that I-9 procedures are not designed to deliver, detecting forged and altered documents through forensic examination, flagging synthetic identity indicators that E-Verify does not surface, and producing audit-ready verification records that demonstrate due diligence beyond the standard I-9 paper trail.

Due diligence investigations extend that verification to employment history, credential claims, and background factors that document checks alone do not reach.

When employment fraud is detected post-hire, through payroll anomalies, access behavior, or identity mismatch in a background re-check, corporate investigations provide the forensic methodology to establish scope, preserve evidence, and support any resulting legal or regulatory action.

If your organization's employment verification program has compliance gaps or has surfaced a fraud indicator, our verification team is available to review it

Frequently Asked Questions

What is employment eligibility verification?

It is the federal legal process by which employers confirm that every new hire is both who they claim to be and legally authorized to work in the United States, completed using Form I-9, acceptable identity and authorization documents, and optionally E-Verify.

What documents are required for I-9 verification?

Employees must present either one List A document (establishes both identity and employment authorization) or one List B document (identity only) combined with one List C document (employment authorization only). Employers cannot specify which documents the employee must present.

Can I-9 verification be done online?

Employers enrolled in E-Verify can use the DHS Alternative Procedure (effective August 1, 2023) to conduct Section 2 via live video interaction. Employers not enrolled in E-Verify must conduct in-person document examination.

What is E-Verify and what does it confirm?

E-Verify is a DHS/SSA web system that cross-references I-9 data against federal databases to confirm employment authorization. It confirms that an SSN is valid and associated with an authorized worker, it does not confirm that the person presenting the SSN is the person to whom it was issued.

What is a document check in employment verification?

A document check is the physical or remote visual examination of the identity and authorization documents an employee presents during I-9 completion. The employer confirms the documents reasonably appear genuine and records the document details in Section 2.

What is a synthetic identity and why does it matter for employment verification?

A synthetic identity combines a real SSN with fabricated name and identity data. It may pass E-Verify because the SSN is valid. Standard I-9 procedures do not detect synthetic identity use, specialized identity verification is required.

What are the penalties for I-9 non-compliance?

Civil penalties range from $272 to $27,018 per violation. Criminal penalties apply when pattern or practice of violations is established. ICE audit volume has increased significantly since 2017.

References

HireRight. (2026). U.S. Employment Eligibility Verification: Form I-9 and E-Verify. https://www.hireright.com

WorkBright. (2024). How to Verify I-9 for Remote Employees. https://workbright.com

U.S. Department of Labor. I-9 Central. https://www.dol.gov

OutSolve. (2025). What is Employment Verification? https://www.outsolve.com

VerificationScreening. (2025). What Documents Are Required for Background Screening? https://www.verificationscreening.com

CheckMinistry. (2024). Employment Identity Check: A Complete Guide. https://www.checkministry.com

VeriFirst. (2020). Effective Identity Verification Methods for HR Professionals. https://blog.verifirst.com