Form I-9 applies to every employee an employer hires, citizen and noncitizen alike, and it is one of the few immigration compliance obligations that has nothing to do with sponsoring anyone. Employers get into trouble with it constantly, and the mistakes are rarely intentional fraud. They are missed deadlines, over-documentation and paperwork that was never actually reviewed the way the rules require.
What Form I-9 actually requires, and by when
Every U.S. employer must complete a Form I-9 for each new hire, regardless of the employee’s citizenship or immigration status and regardless of company size. Under USCIS guidance, the employee must complete Section 1 no later than their first day of work for pay, and the employer must complete Section 2 by physically examining the employee’s documents within three business days of that start date. If someone starts on a Monday, Section 2 is due by Thursday. If the job will last fewer than three business days, both sections must be completed on the first day itself.
Which documents actually satisfy the requirement
An employee proves identity and work authorization one of two ways: a single List A document that covers both, or one List B document (identity) paired with one List C document (work authorization). Once an employee presents a valid List A document, the employer should not ask for anything further. Requesting extra or specific documents beyond what the employee chooses to present, sometimes called document abuse, is itself a violation, even when the employer’s intent is simply to be thorough.
Where the I-9 process actually breaks down
The most frequently cited paperwork error is completing Section 2 after the three-business-day deadline. Beyond timing, recurring problems include missing signatures, incomplete employer address fields, incorrect date formats, and accepting a Social Security card marked as not valid for employment as a List C document, which USCIS does not accept. None of these involve any doubt about the employee’s actual right to work. They are documentation failures, and under the law they are penalized as such regardless of intent.
What the fines actually are
Civil penalties for I-9 paperwork violations are set under the Immigration Reform and Control Act and adjusted annually for inflation. Under the most recent published adjustment, substantive Form I-9 paperwork violations carry fines of roughly $288 to $2,861 per form. Penalties for knowingly employing a worker without authorization are considerably higher and escalate with repeat findings, running from roughly $716 to $5,724 per worker for a first offense up to $8,586 to $28,619 per worker for subsequent violations. These figures apply per form or per worker, so an employer with a high error rate across many employees can accumulate exposure quickly even where every worker was, in fact, authorized to work.
Correcting mistakes before they become fines
Minor, honest errors, such as a missing date or address, can generally be corrected: the employee or employer draws a line through the incorrect entry, enters the correct information, and initials and dates the change, without using correction fluid. An internal self-audit that catches and properly corrects these issues before a government inspection is one of the few ways to meaningfully reduce exposure once a form already has an error.
Where E-Verify fits in
E-Verify is a separate, mostly voluntary electronic system that cross-checks Form I-9 information against Department of Homeland Security and Social Security Administration records. It is mandatory for some federal contractors and required in some states as a condition of doing business, but most private employers are not required to use it. E-Verify does not replace Form I-9. It runs alongside it and does not change the three-business-day Section 2 deadline. One practical advantage: employers enrolled in E-Verify and in good standing may qualify for DHS-authorized alternative procedures that allow remote document examination for certain hires, an option not available to employers outside the program.
Retention is its own obligation
The I-9 is not filed with any government agency. The employer keeps it and must produce it on request from USCIS, the Department of Labor, or Immigration and Customs Enforcement. Employers must retain each I-9 for three years after the date of hire or one year after employment ends, whichever is later. Losing or failing to produce a form on demand is treated as its own violation, separate from any error in how the form was originally completed.
None of this is limited to employers sponsoring visas. A company with an entirely U.S.-citizen workforce still carries full I-9 exposure for every hire. Sponsoring a foreign worker adds obligations on top of the I-9, not instead of it, as covered in our guide to what employers must do before sponsoring a foreign worker.