E-Verify vs. Form I-9: What Every Employer Must Know

What Form I-9 Actually Is

Form I-9, Employment Eligibility Verification, is a US Citizenship and Immigration Services (USCIS) form that every employer must complete for every person hired to work in the United States, whether they're a US citizen or not. There's no size exemption and no industry exemption — a five-person shop and a Fortune 500 company follow the same rule. You can review the current form and instructions directly at USCIS's I-9 page.

How the process works

Form I-9 has two sections split between the employee and the employer:

• Section 1 is completed by the employee, who attests to their citizenship or immigration status. It must be completed no later than the employee's first day of work, but not before they've accepted the job offer.
• Section 2 is completed by the employer (or an authorized representative). The employer must physically examine original identity and work-authorization documents the employee presents and record the details.
• The three-business-day rule: the employee must present acceptable documents, and the employer must complete Section 2, within three business days of the employee's first day of work.
• Retention: employers must keep the completed I-9 on file for three years after the date of hire, or one year after employment ends, whichever is later.

Employees choose which documents to present from the USCIS List of Acceptable Documents (a US passport, or a combination like a driver's license plus a Social Security card). Employers cannot dictate which specific documents an employee must use, and cannot request more documentation than the law requires — doing so can trigger anti-discrimination complaints even if the intent was just caution.

What E-Verify Actually Is

E-Verify is a free, web-based system run jointly by the Department of Homeland Security and the Social Security Administration. It takes the information an employee already entered on Form I-9 and electronically cross-checks it against Social Security Administration and DHS records to confirm work authorization. You can read more directly at E-Verify.gov.

The key distinction: E-Verify doesn't replace Form I-9 — it builds on it. An employer must still complete a Form I-9 for every new hire first. E-Verify is an additional confirmation step layered on top, and it's only mandatory for a subset of employers.

How the process works

• After completing Form I-9, the employer creates a case in E-Verify using the information the employee provided.
• This must happen no later than the third business day after the employee starts work — the same timing window as I-9 Section 2.
• E-Verify returns either an Employment Authorized result or a Tentative Nonconfirmation (TNC), which means the system couldn't immediately confirm eligibility.
• If a TNC is issued, the employee has the right to contest it, and the employer must give them the chance to do so — an employer cannot take adverse action (like termination) based solely on a TNC before the contest process plays out.
• Once an employer enrolls in E-Verify voluntarily or by mandate, it must use the system for all new hires going forward — it cannot be applied selectively to some employees and not others, which is itself a common discrimination trap.

Form I-9 vs. E-Verify: Side by Side

The two systems are related but distinct enough that it's worth seeing them laid out directly against each other.

Who Is Actually Required to Use E-Verify

This is where most of the confusion lives. E-Verify is voluntary for most private employers nationwide, but two categories of employers are legally required to use it.

Federal contractors and subcontractors

Under a Federal Acquisition Regulation (FAR) clause (52.222-54), employers awarded certain federal contracts must enroll in E-Verify and use it for employees assigned to that contract — and in some cases, their entire workforce. Per E-Verify's federal contractor guidance, covered contractors generally must enroll within 30 days of contract award and begin verifying new hires within three business days of their start date.

States that require E-Verify

A growing number of states mandate E-Verify for some or all private employers, independent of federal contract status. As of 2026, states with mandatory E-Verify requirements for private employers include:

• Alabama, Arizona, Mississippi, South Carolina — required for all employers, regardless of size.
• Louisiana and Montana — required for all employers, with an option to satisfy the requirement through document retention instead in some circumstances.
• Florida — required for employers with 25 or more employees.
• Georgia — required for employers with 10 or more employees.
• North Carolina — required for employers with 25 or more employees.
• Tennessee — required for employers with 35 or more employees.
• Utah — required for employers with 150 or more employees.
• Ohio — required specifically for nonresidential construction contractors.

A few states — notably California and Illinois — go the other direction and restrict when employers can require E-Verify, with penalties for misusing it or applying it inconsistently across employees. In those states, voluntary E-Verify use has to be applied the same way to every new hire, not selectively.

Roughly two dozen states have no E-Verify mandate at all for private employers, leaving enrollment fully voluntary. Employers who fall outside a mandate can still choose to use E-Verify — some do it to streamline onboarding or as a good-faith compliance signal — but they aren't required to.

Penalties for Getting It Wrong

Form I-9 noncompliance is not a paperwork technicality employers can shrug off. Immigration and Customs Enforcement (ICE) audits I-9 records directly, and enforcement activity has picked up significantly. Reported figures put 2026 ICE audit volume at roughly ten times 2024 levels, with additional enforcement staffing funded under recent legislation.

In March 2026, ICE updated its Form I-9 inspection guidance to reclassify more than ten error categories that were previously treated as correctable "technical" issues — eligible for a 10-day cure period — as substantive violations subject to immediate fines. That shift raises the stakes for errors employers used to be able to fix without penalty, which makes routine internal I-9 audits more valuable than ever.

Common Compliance Mistakes

Most I-9 and E-Verify penalties don't come from intentional fraud — they come from process breakdowns. The most frequent issues found in audits include:

• Missing the timing windows. Section 1 completed late, or Section 2 completed after the three-business-day document deadline.
• Incomplete forms. Blank fields, missing signatures or dates in Section 1 or Section 2, or an employer failing to enter the hire date in the Section 2 certification.
• Dictating which documents to use. Employers cannot tell an employee which specific documents from the acceptable list to present, or ask for more documents than the law requires — both can be treated as discrimination.
• Applying E-Verify inconsistently. Once enrolled, an employer must run E-Verify on every new hire, not selectively based on nationality, accent, or appearance — inconsistent use is one of the fastest ways to trigger a discrimination complaint.
• Acting on a Tentative Nonconfirmation too fast. Terminating or otherwise penalizing an employee before they've had the chance to contest a TNC is a violation of E-Verify program rules.
• Remote verification errors. When an authorized representative examines documents on the employer's behalf, that same person — not the employer — must sign Section 2's attestation.
• Skipping reverification. Employees whose work authorization has an expiration date (including some visa holders and Temporary Protected Status holders) must be reverified before that date, not after.
• Failing to retain forms correctly. Discarding I-9s before the required three-year/one-year retention window, or keeping them mixed into general personnel files instead of a separate I-9 file.

Where Background Checks Fit In

Form I-9 and E-Verify confirm identity and work authorization. Neither one tells you anything about a candidate's criminal history, so employers who want that layer of due diligence run a separate background check — typically after a conditional job offer, in line with FCRA and applicable state "ban the box" rules.

PreHireBadge runs FCRA-compliant background checks for $5 per candidate with no monthly fees, designed to slot into the same hiring workflow as I-9 and E-Verify without adding another subscription to manage.