The I-9 form is one of the most common sources of compliance violations in small businesses, and one of the least understood. Most business owners know they're supposed to complete one for every new hire. Beyond that, things get fuzzy.
That fuzziness is where the violations live.
What the I-9 actually requires
The Employment Eligibility Verification form, known as the I-9, is a federal requirement for every employee hired in the United States. It verifies work authorization, and it applies to every hire regardless of citizenship or background.
The form has three sections. Section 1 is completed by the employee on or before their first day of work. Section 2 is completed by the employer within three business days of the employee's start date. That three-day window is where most small businesses run into trouble.
Section 2 requires the employer to physically examine documents that establish the employee's identity and work authorization. The employer must look at the original documents, confirm they appear genuine, and record the document information on the form. Remote hires have specific rules governing how this review is completed.
The most common mistakes
Missing the three-day window. Employers who complete Section 2 late are out of compliance, even if the employee is fully authorized to work. There's no grace period for being busy.
Accepting the wrong documents. Not all documents are acceptable for I-9 purposes, and not all combinations of documents satisfy the requirement. The I-9 lists acceptable documents in three categories: List A documents establish both identity and work authorization on their own. List B and List C documents must be presented together. Accepting a document not on the list, or accepting a List B document without a List C, creates a violation.
Incomplete forms. Missing fields, unsigned certifications, and illegible entries are among the most common violations found in audits. They seem minor until an auditor is sitting across the table from you, and since 2026, several of them can be fined immediately.
Improper storage. I-9 forms must be retained for a specific period after employment ends: three years from the hire date or one year from the date of separation, whichever is later. Forms stored with personnel files, or not stored at all, create additional exposure.
Re-verification errors. Employees with temporary work authorization need their I-9 re-verified before their authorization expires. Missing a re-verification deadline is a violation even if the employee is still authorized to work.
What an audit actually looks like
I-9 audits are conducted by Immigration and Customs Enforcement. They can be triggered by a complaint, a tip, or a random selection. They begin with a Notice of Inspection, which gives the employer three business days to produce their I-9 forms.
The auditor reviews every form for technical and substantive violations. Technical errors can usually be corrected within 10 business days after the inspection. Substantive violations are more serious and can be fined right away. They include failing to complete the form at all, accepting documents that don't satisfy the requirement, and knowingly employing someone who isn't authorized to work.
In March 2026, ICE moved several errors that many employers considered minor into the substantive category, including undated sections, a missing hire date in Section 2, a missing date of birth in Section 1, and a missing title for the employer's representative. Mistakes that used to be fixable during an inspection can now bring an immediate fine.
Paperwork fines currently run from $288 to $2,861 per form, and knowingly hiring or continuing to employ someone who isn't authorized to work carries much higher penalties. For a small business with a stack of incomplete forms, those numbers add up quickly.
What to do if you find errors
If an internal review turns up errors, the right response is to act promptly and carefully. How you correct them depends on the nature of the violation, and handling corrections improperly can create additional exposure. Getting guidance before you start making changes is worth the time.
Where to start
If you're not confident your I-9s would hold up to an audit, a discovery call is a practical first step. I can walk you through what an internal review looks like, help you understand your exposure, and outline what it would take to get your files into order.
Thirty minutes. No obligation. You'll leave knowing exactly where you stand.